last executing test programs:

3m29.443081569s ago: executing program 0 (id=1624):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x4)
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x8, 0x27, 0x16, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x24, 0x65, 0x0, 0x5, 0x84, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @local}, "c7050004000000000200000001000004"}}, 0x2e)

3m29.169437496s ago: executing program 0 (id=1627):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000400000000000000000000000000000500030005"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004)

3m28.851312954s ago: executing program 0 (id=1629):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x1000f, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844)

3m28.55056345s ago: executing program 0 (id=1632):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
setsockopt$inet6_int(r0, 0x84, 0x35, 0x0, 0x0)

3m27.983157784s ago: executing program 0 (id=1634):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x208, &(0x7f00000002c0)="$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")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

3m27.448685917s ago: executing program 0 (id=1637):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='1\n', 0x2)

3m12.390646551s ago: executing program 32 (id=1637):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='1\n', 0x2)

2m28.002554708s ago: executing program 2 (id=1991):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x5, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x4, <r2=>r0, 0x1})
ppoll(&(0x7f0000000180)=[{r2, 0x1224}], 0x1, 0x0, 0x0, 0x0)

2m27.420281031s ago: executing program 2 (id=1994):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0, 0x0, 0x50}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc)

2m26.919750343s ago: executing program 2 (id=1999):
capset(&(0x7f0000000080)={0x20071026}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000})

2m26.419349735s ago: executing program 2 (id=2003):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x2, 0x36d, &(0x7f0000000500)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x4)
lseek(r0, 0xfffffffffffffffc, 0x2)
getdents(r0, 0x0, 0x54)

2m25.860197488s ago: executing program 2 (id=2004):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x400c4d00, 0x0)

2m25.252576692s ago: executing program 2 (id=2007):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000370)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0)
write(r0, &(0x7f0000000480)="70529388d34c29cfddf9149ec35d849ecf97f899b7dc0b34a5c9e5931cb053e923ba893926f904a9524a0b689f4d787058bf", 0x32)

2m10.154906598s ago: executing program 33 (id=2007):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000370)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0)
write(r0, &(0x7f0000000480)="70529388d34c29cfddf9149ec35d849ecf97f899b7dc0b34a5c9e5931cb053e923ba893926f904a9524a0b689f4d787058bf", 0x32)

1m10.128988172s ago: executing program 4 (id=2392):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc)

1m9.79495844s ago: executing program 4 (id=2394):
r0 = io_uring_setup(0x43ae, &(0x7f0000000640)={0x0, 0x4178, 0x8, 0x3, 0x200003d5})
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0xfff, 0x40001)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000001c0)={0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

1m9.435574999s ago: executing program 4 (id=2398):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}, {@err_cont}, {@journal_async_commit}]}, 0x1, 0x4426, &(0x7f0000008940)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000100)={0x4, 0xfffffffffffffffe, 0x3ffff8, 0x1, 0x0, 0x0, 0x2401})

1m6.599107905s ago: executing program 4 (id=2420):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m5.360230305s ago: executing program 4 (id=2427):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='* / 128\n\x00', 0x8)

1m5.077924111s ago: executing program 4 (id=2419):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0xd}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

55.640170274s ago: executing program 1 (id=2499):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000980)="580000001400add427323b472503b45602117fffff7f71000e220e2280007f000001e8eaff0400000500000000000000", 0x30}, {&(0x7f0000000cc0)="3774743f60686eee6855a797bd80c9a66f1cf9786b4e12e247111358b5c7aeb22a23885539467f9c", 0x28}], 0x2)

55.446871009s ago: executing program 1 (id=2502):
syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000001240)={0xf0f041, 0x64})

55.113579087s ago: executing program 1 (id=2505):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400)
write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, 0x0, {0x0, 0x1}}, 0x20)

52.667530895s ago: executing program 1 (id=2528):
unshare(0x6020400)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x80000, &(0x7f0000000000)={0xfffffffc, 0x3}, 0x0)

51.392030015s ago: executing program 1 (id=2531):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000000780)="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", 0x2000, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

51.20113979s ago: executing program 1 (id=2532):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x2000000, &(0x7f0000000380)={[{@user_xattr}, {@acl}, {@nodelalloc}]}, 0x1, 0x4c5, &(0x7f0000000540)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0)

49.998842558s ago: executing program 34 (id=2419):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0xd}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

36.082288787s ago: executing program 35 (id=2532):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x2000000, &(0x7f0000000380)={[{@user_xattr}, {@acl}, {@nodelalloc}]}, 0x1, 0x4c5, &(0x7f0000000540)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0)

5.03577221s ago: executing program 3 (id=2751):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x9, 0x4, 0x6, 0xfff8}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xdad, 0x7d, 0x2, 0x10, 0x7f, 0x6, 0x200, 0x39cc191a, 0x2005c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ad, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0x0, 0x7fff, 0xb, 0x6, 0x7fff, 0x4c74, 0x80000000, 0xfffff951, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x7, 0x1, 0x20000004, 0x82, 0x0, 0x44a, 0x7, 0x8, 0x4, 0x1, 0x9], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff7, 0x129432e6, 0xfffffffe, 0xfd, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x5, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0x7f, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x5, 0xfb, 0x5, 0x800, 0x5f31, 0x4, 0x1, 0x2, 0x9, 0x20006, 0x4, 0x9, 0x8, 0xf, 0x6, 0x0, 0xa, 0x3, 0x9, 0x2009, 0x2, 0x7f, 0x9, 0x101, 0x3, 0x9, 0xffffffff, 0x17, 0x3, 0x5, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000000, 0x2, 0x7f, 0x400000ff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1a619c23, 0x0, 0x1f0, 0x1, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xb4a, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x6, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x20003, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x9, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x2, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1000, 0x101, 0x10000, 0x6, 0x7ffb, 0x7, 0x6620, 0x2, 0x2, 0x1, 0x4, 0x15c, 0x60a7, 0xfbd, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0x80000c8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2a, 0x1, 0x7, 0x1, 0x6c1b, 0x200, 0x4, 0x8, 0xb1c, 0x1, 0x1fc, 0xffff3441, 0xfff]}, 0x45c)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)

4.880446364s ago: executing program 7 (id=2752):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18)
close(r0)

4.662100939s ago: executing program 5 (id=2753):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

3.543810136s ago: executing program 3 (id=2754):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1800040, &(0x7f00000001c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@usrquota}, {@block_validity}, {@nodioread_nolock}, {@dioread_nolock}, {@block_validity}, {@errors_remount}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x7)

3.536038566s ago: executing program 7 (id=2762):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4000025}, 0x4)
close(r1)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0)

3.39341848s ago: executing program 6 (id=2755):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x14c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x12, 0x1, {0xf, 0x7, 0x5, 0xe, 0x3, 0x18, 0x6}}]}}]}, 0x14c}}, 0xc014)

3.299353502s ago: executing program 7 (id=2756):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, 0xffffffffffffffff, 0x0)

3.263630312s ago: executing program 5 (id=2757):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x100000001)
readv(r0, &(0x7f0000001300)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1)
ppoll(&(0x7f00000000c0)=[{r0, 0x1000}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0)

2.996210289s ago: executing program 6 (id=2758):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xf, @private1, 0x3fe}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000440)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10)

2.919331271s ago: executing program 5 (id=2759):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000180)={0x1d, r1}, 0xb)
sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0)

2.669678337s ago: executing program 6 (id=2760):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x28f, 0x1001, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f00000001c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r1, 0xfffffffa, 0x1fc, 0xb, 0x1fd, 0x1})

2.576964408s ago: executing program 7 (id=2761):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./bus\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x20b, &(0x7f0000000540)="$eJzsmT2IE1EQx//vZbOJhxzaWNhYeOCJ3mZ3o3LNCSdYiSCcopbBW4/TvUSSFZKAaLCx0c5CsLWxtLCwsrCytNVCBcHClIKFsPI+dvex2Y3GT/DmB/fuvzOz781MslNkQRDEtuX9u89v755YPnsYwE4soKbtHytZDDfi3zy4fuj+ysmHT14/etGev/Esvx8DEMelx33Ju2wAz1criMAsZYljzGf+BWGQ3BRacg4cB7U+DwZHya8qTl0EYLioY64YurNDizBwLnXC9cubYeCKxROLL5ammZ9IajxiWAdQh0qGZS70BsOrrTAMunlRjZNzJlyzCl7aTp3fKscKku7FsYi/cOf2SFzr3sAFT/vngcPTugmGNa2XUYPjOFlLjPr3Wtn+xlejvP7fLI7Ls+796F2Ppdi99OcTUyJ5Rma5S7Txb7TuPxLVzPLyFPCT+7C8RTzQqWXPOJmBZsyHf1Y7vh9Tn/4wQvsnXK/mwvD0L2RoFzQqFdl8EpP9gDGfLFjp/GhEW9cavcFwaXOrtRFsBG3fbx5zj7juUb8hB5Fap8y/upxPc8b+1ZJYm9not6Ko6/WBqOul175ae+KDlwVg7Wnnk7hlF+T841jcL7eQM1WWXSs+g+k/Lv8LtVgpjrxVWhNBEARBEARBEARBEARBEEQx+8CSV2YM6duzCfwz8hfKbwEAAP//Ez1mrw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x1000000, 0x10000002000003})

2.568282519s ago: executing program 5 (id=2763):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001240)={[{@fat=@gid}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@fat=@debug}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@utf8no}]}, 0x7f, 0x2b1, &(0x7f00000015c0)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)

2.5238242s ago: executing program 3 (id=2764):
syz_mount_image$ext4(&(0x7f0000001a80)='ext4\x00', &(0x7f0000001ac0)='./file0\x00', 0x210040, &(0x7f0000000380)={[{@inlinecrypt}, {@dioread_lock}]}, 0xfc, 0x5c8, &(0x7f0000002780)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
rmdir(&(0x7f0000000100)='./bus\x00')

2.126460899s ago: executing program 5 (id=2765):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0x24}}, 0x40000)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006)

2.075387481s ago: executing program 6 (id=2766):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x8080)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r1=>0x0}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1, 0x2}, 0x8)

1.69600062s ago: executing program 6 (id=2767):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0xef7, 0xe72, 0x0})

1.635569191s ago: executing program 5 (id=2768):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="003d0100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)

1.419274816s ago: executing program 6 (id=2769):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x210802, &(0x7f00000006c0)=ANY=[], 0x1, 0x5514, &(0x7f000000afc0)="$eJzs3MtrY1UYAPBz+5i3YxEX7ubCILQwCU0fg+6qzuADO5RRF640TW5DZpLc0qRp7cqFS5mF/4kouHLp3+DCtTtxobgTlNxzq60PUJs2zvT3g5vvnpOTL98JofDdWxKAc2su/emHJFwPl0MI0yGEayEU50l5FNZieK48nTpyJOX8bxMXQghXQgjXR8ljzqR86pNbw5ur37/x45dfX5y5+ukX30xu18CkPR9C6G7H871ujHkrxgflfH3YLmJ3ZVjG+ET3YTnOY9zLNosMe/XDdfUiLrfi+nx7tz+KW516YxRb7a1ifrsX37A/bB3mKV7woL5TjJvZZhHb/byIrYNY1/5B/Nt20B/EPM0y3wdF+jAYHMY4n+1ncT/bD4vY6A3K+Zg3b2b7ozgsY/l2oZF3mkUdmyf5pP/f3mz3dvfTYbbTb+e9dLVae6Fau12p7eTNbJCtVOrd5u2VdL7VGS2rDLJ6d62V561OVm3k3YV0vtVoVGq1dP5Ottmu99JarbpcXaysLpRnt9JX772Tdprp/Ci+3O7tDtqdfrqV76TxFQvpUnX5xYX0Zi19a30j3bh/9+76xtvv3Xn33kvrr79SLvpTWen80uLSUqW2WFmqLZyj/X9UFj3G/cOJJJMuAODx82/7/xv6f2AMTq//37kfwrj7/1jP0f4/6P/H4tT730eJ/v8/739j9K091f3Diej/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrW9nP3utOJmL46vl/FPl1DPlOAkhTIUQfvkL0+HCsZzTZZ7Zv1k/+4cavkpCkWH0HhfL40oIYa08fn76tD8FAAAAeHJ9/uGNR7Fbjw9zky6IsxQv2kxde39M+ZIQwuzcd2PKNjV6eHZMyYrv90zYH1O24gLWpTEli5fcZsaV7R+ZPhYuHQlJDFNnWg4AAHAmjncCZ9uFAAAAcJY+nnQBTEYSDm9lHt4LLv7z/vcbgpePjQAAAIDHUDLpAgAAAIBTV/T/fv8PAAAAnmzx9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBf2bm/m4SBOA7g12IF/0VifGcV32AMR3AEwwAuwQi4ggswA745goKhPYmY1Ki90kg+n6QcLe2X3xF4uDtSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaNNzMZ883o8emuas1jVG8YS616PmPQEAAADqLIv5pHwyrPbP4vGLeOgq7mchhLxmGN8LxzuZvZhT1JxffKnhKYQyYfMe/bidhhBu4vZ62fanAAAAAIdrMZ2Nq9F69TDsuiD+7O33l1STNvn5baISshBCMXxJlJZv8q4ThZXf73R/MyknsAZpsuKU21GqtB8pf+7bWbvBpyarmvz765P1HQAA2KPeTrPfUQgAAAD7dNd1AXQjCx9LmdulwH7VxOW9k509AAAA4B/Kui4AAAAAaF05/nf/PwAAADhs1f3/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaNOymE8W09m4ac5q3Uya3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8sz/vKBACYRAGe9d3JnP/w0qDpqYmVSB8/I3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF/rykQAgEQRTMGf876fsfVhL0DCJEQMOjilo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFzv28xlHFAQD/7uzO1lTFGCWHiCh40ItNt7W1N/GgBA/+CUJItzV26482B1uKkIs3ybkX0aOIoMRb/4eeW+il3nrIoYLgrTK/kmk24Ip0Zpp8PvDmfXcYZr7vbQj57nsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgsvP+XtzPDn8/KpTn7jy8sZb1d/f1mVtb95aylsW9hvPunGNTZ16tv+gtNpkMAAAAR1W/qu8j4n66vZL1yXxe/6fVNUlE/PB8EVf1/P66v+qr2j9rv//24OXdB80Xz8luemF9Mj45ncrgyY2y21741ysG+cxn70M+iUkkH22+tJPm89n77vbtD4Z5OP1ZAwDQESeqvgyqv4eyftRmYgAcGYNa4V3V//35dnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaMLOZjxbxb2IWBrsxZm7D2+sHdTf2rq3VLWzN29u1e+Z3SKNiAvrk/HJBsfSdVevXb+0OpmMrzQfvBYRbT39vXL4lz6Z4eKIVuZHkAdz//uHJCnf7E4M56kJWvylBADAoZSWLavr76fbK9m53kLEox8fr//frMUxY/3/4NOzd+rPqtf/o8ZG2H3LG5e/XL567frb65dXL44vjj9/59To3dHpc2fOnFvOPyspjv228wQAAODpNSxbvf5PFqbX/4/X4pix/v/q+9E39Wf11f8H2lv0azsTAACAo+3F1//6s3fA+d5wGF+vbmxcGRXH3denimMLqf5nx8pWr//7C21nBQAAADRhZ7P32Pr/+VocM67/P/fTK7/U79mPiLly/f/E2heT880Np9P2f+n3SXyduO0xAgAA0K65stXX/9N8/3+yu+UhiYi33iji8t8AzlT/9z/89uf6von6/v/TDY6xi5LFYj7yfjFisNh2RgAAABxmz5Qtq9P/SLdXPvv1+MdD+/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmvZPAAAA//8Hv0Ae")
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
mprotect(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x1)
open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)

1.348192068s ago: executing program 3 (id=2770):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80)
getdents64(r0, &(0x7f00000001c0)=""/178, 0xb2)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)

471.254558ms ago: executing program 7 (id=2771):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0000101, 0x0, 0x6e}]})

423.25262ms ago: executing program 3 (id=2772):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt_trace/trace_pipe\x00', 0x1, 0x1c2)

225.1µs ago: executing program 7 (id=2773):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r2=>r0, 0x2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x6)

0s ago: executing program 3 (id=2774):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1, r0}, 0xc)

kernel console output (not intermixed with test programs):

-speed USB device number 15 using dummy_hcd
[  377.700978][    T9] usb 4-1: Using ep0 maxpacket: 32
[  377.733946][    T9] usb 4-1: config 0 has too many interfaces: 193, using maximum allowed: 32
[  377.766322][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 193
[  377.813843][    T9] usb 4-1: config 0 has no interface number 0
[  377.856865][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.914430][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.971148][    T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  378.015360][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.081053][    T9] usb 4-1: config 0 descriptor??
[  378.506891][    T9] corsair 0003:1B1C:1B34.0005: unknown main item tag 0x0
[  378.552807][    T9] corsair 0003:1B1C:1B34.0005: unknown main item tag 0x0
[  378.601342][    T9] corsair 0003:1B1C:1B34.0005: failed to start in urb: -90
[  378.644409][    T9] corsair 0003:1B1C:1B34.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input1
[  378.738129][    T9] usb 4-1: USB disconnect, device number 15
[  378.825752][T10780] loop4: detected capacity change from 0 to 512
[  378.876385][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.890226][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  378.958705][T10780] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1972: inode has both inline data and extents flags
[  378.993928][T10777] fido_id[10777]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  379.066894][T10780] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1972: couldn't read orphan inode 15 (err -117)
[  379.142928][T10780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.761963][T10111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.171351][T10799] vxcan0: tx address claim with dest, not broadcast
[  380.560180][    T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  380.587932][T10809] loop4: detected capacity change from 0 to 1024
[  380.629311][T10809] EXT4-fs: Ignoring removed orlov option
[  380.685440][T10809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  380.780586][    T9] usb 4-1: Using ep0 maxpacket: 8
[  380.810290][    T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  380.818609][    T9] usb 4-1: config 179 has no interface number 0
[  380.870543][    T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  380.938604][    T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  380.995429][    T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  381.038317][T10111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.048344][    T9] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  381.148736][    T9] usb 4-1: config 179 interface 65 has no altsetting 0
[  381.202873][    T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  381.252213][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'.
[  381.266906][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.362413][    T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14
[  381.482145][ T5124] input input14: unable to receive magic message: -110
[  381.677990][ T5124] input input14: unable to receive magic message: -32
[  381.866903][ T5124] input input14: unable to receive magic message: -32
[  381.882738][T10202] usb 4-1: USB disconnect, device number 16
[  381.888724][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  381.888801][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  382.022014][T10202] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  382.731627][T10844] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  382.825639][T10846] MTRR 2 not used
[  383.485784][T10860] loop2: detected capacity change from 0 to 64
[  383.862148][T10843] loop3: detected capacity change from 0 to 32768
[  383.926395][T10843] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1996 (10843)
[  384.048120][T10843] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  384.116878][T10843] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  384.180292][T10843] BTRFS info (device loop3): force clearing of disk cache
[  384.231451][T10843] BTRFS info (device loop3): metadata ratio 0
[  384.292376][T10843] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  384.380410][T10843] BTRFS info (device loop3): trying to use backup root at mount time
[  384.388532][T10843] BTRFS info (device loop3): using free space tree
[  384.417296][T10854] loop4: detected capacity change from 0 to 32768
[  384.645831][T10887] ea_get: invalid extended attribute
[  384.735420][T10887] ffff88807f2b3170: 04 00 00 00                                      ....
[  384.762562][T10843] BTRFS info (device loop3): enabling ssd optimizations
[  384.817453][T10843] BTRFS info (device loop3): auto enabling async discard
[  384.881995][T10843] BTRFS info (device loop3): rebuilding free space tree
[  385.445897][ T5774] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  385.762206][T10898] loop1: detected capacity change from 0 to 8192
[  385.829679][T10898] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  385.953156][T10898] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  386.023334][T10898] REISERFS (device loop1): using ordered data mode
[  386.086476][T10898] reiserfs: using flush barriers
[  386.142196][T10898] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  386.287375][T10898] REISERFS (device loop1): checking transaction log (loop1)
[  386.336332][T10898] REISERFS (device loop1): Using r5 hash to sort names
[  386.424211][T10898] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  386.530928][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  386.530939][   T28] audit: type=1800 audit(1786459666.624:47): pid=10898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2009" name="file1" dev="loop1" ino=2 res=0 errno=0
[  388.632739][T10945] loop1: detected capacity change from 0 to 8192
[  388.722613][T10945] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  388.790567][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  388.829702][T10945] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  388.871490][T10945] REISERFS (device loop1): using ordered data mode
[  388.878042][T10945] reiserfs: using flush barriers
[  388.939306][T10945] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  389.022159][T10945] REISERFS (device loop1): checking transaction log (loop1)
[  389.052985][    T9] usb 4-1: Using ep0 maxpacket: 16
[  389.061464][    T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  389.085878][T10945] REISERFS (device loop1): Using r5 hash to sort names
[  389.112838][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  389.130397][T10945] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  389.173540][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  389.200859][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.272439][    T9] usb 4-1: config 0 descriptor??
[  389.719761][    T9] logitech-hidpp-device 0003:046D:C262.0006: unknown main item tag 0x5
[  389.768315][    T9] logitech-hidpp-device 0003:046D:C262.0006: unknown main item tag 0x5
[  389.825120][    T9] logitech-hidpp-device 0003:046D:C262.0006: item fetching failed at offset 38/40
[  389.866584][    T9] logitech-hidpp-device 0003:046D:C262.0006: hidpp_probe:parse failed
[  389.924877][    T9] logitech-hidpp-device: probe of 0003:046D:C262.0006 failed with error -22
[  389.987917][    T9] usb 4-1: USB disconnect, device number 17
[  390.597610][T10960] loop4: detected capacity change from 0 to 32768
[  390.689291][T10960] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  390.872233][T10960] XFS (loop4): Ending clean mount
[  391.268016][T10111] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  392.088428][T11004] MTRR 2 not used
[  392.239736][T10995] loop1: detected capacity change from 0 to 32768
[  392.288260][T11009] loop3: detected capacity change from 0 to 164
[  392.309818][T10995] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2025 (10995)
[  392.424508][T10995] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  392.526811][T10995] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  392.613947][T10995] BTRFS info (device loop1): force clearing of disk cache
[  392.678139][T10995] BTRFS info (device loop1): metadata ratio 0
[  392.725736][T10995] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  392.823454][T10995] BTRFS info (device loop1): trying to use backup root at mount time
[  392.880196][T10995] BTRFS info (device loop1): using free space tree
[  392.962345][T11018] loop3: detected capacity change from 0 to 512
[  393.012683][T11018] EXT4-fs: Ignoring removed orlov option
[  393.018401][T11018] EXT4-fs: Ignoring removed mblk_io_submit option
[  393.128100][T11018] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.2036: corrupted in-inode xattr: e_value size too large
[  393.164525][T10995] BTRFS info (device loop1): enabling ssd optimizations
[  393.224572][T10995] BTRFS info (device loop1): auto enabling async discard
[  393.250212][T11018] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.2036: couldn't read orphan inode 15 (err -117)
[  393.306261][T10995] BTRFS info (device loop1): rebuilding free space tree
[  393.319494][T11018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  393.614890][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.684031][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  393.697981][T11040] batman_adv: batadv0: Adding interface: gretap1
[  393.748396][T11040] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.930252][T11040] batman_adv: batadv0: Interface activated: gretap1
[  395.129026][T11043] loop3: detected capacity change from 0 to 32768
[  395.336974][T11054] ea_get: invalid extended attribute
[  395.389238][T11054] ffff88807f2b15b0: 04 00 00 00                                      ....
[  395.428889][T11056] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2045'.
[  396.350178][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  396.420185][ T5817] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  396.542170][    T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  396.560970][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.576423][T11066] loop4: detected capacity change from 0 to 32768
[  396.587369][    T9] usb 2-1: config 0 descriptor??
[  396.614814][T11066] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2050 (11066)
[  396.645147][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  396.664315][ T5817] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  396.692549][T11066] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  396.715810][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  396.746823][T11066] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  396.769257][ T5817] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  396.789726][T11066] BTRFS info (device loop4): force clearing of disk cache
[  396.819928][T11066] BTRFS info (device loop4): metadata ratio 0
[  396.828512][ T5817] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  396.848083][T11066] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  396.866967][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.889200][ T5817] usb 4-1: Product: syz
[  396.894527][T11066] BTRFS info (device loop4): trying to use backup root at mount time
[  396.912698][ T5817] usb 4-1: Manufacturer: syz
[  396.927503][ T5817] usb 4-1: SerialNumber: syz
[  396.932629][T11066] BTRFS info (device loop4): using free space tree
[  396.969583][ T5817] usb 4-1: config 0 descriptor??
[  396.996060][ T5817] ums-isd200 4-1:0.0: USB Mass Storage device detected
[  397.073385][T11066] BTRFS info (device loop4): enabling ssd optimizations
[  397.107267][T11066] BTRFS info (device loop4): auto enabling async discard
[  397.127373][T11066] BTRFS info (device loop4): rebuilding free space tree
[  397.222313][ T5817] scsi host1: usb-storage 4-1:0.0
[  397.354563][T10111] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  397.421049][    T9] usb 2-1: Cannot set autoneg
[  397.429785][    T9] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71
[  397.507190][    T9] usb 2-1: USB disconnect, device number 14
[  397.889244][T11087] loop4: detected capacity change from 0 to 8192
[  397.907981][T11087] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  397.952069][T11087] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  397.994178][T11087] REISERFS (device loop4): using ordered data mode
[  398.024923][T11087] reiserfs: using flush barriers
[  398.055830][T11087] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  398.112926][T11087] REISERFS (device loop4): checking transaction log (loop4)
[  398.139090][T11087] REISERFS (device loop4): Using r5 hash to sort names
[  398.162186][T11087] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  398.248024][   T28] audit: type=1800 audit(1786459678.334:48): pid=11087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2051" name="file1" dev="loop4" ino=2 res=0 errno=0
[  398.340968][    T9] usb 4-1: USB disconnect, device number 18
[  399.618068][T11096] loop1: detected capacity change from 0 to 32768
[  399.707560][T11096] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.2055 (11096)
[  399.860284][T11096] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  399.965709][T11096] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  400.025835][T11096] BTRFS info (device loop1): using free space tree
[  400.050410][T11114] loop4: detected capacity change from 0 to 8192
[  400.129083][T11114] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  400.227569][T11114] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  400.287887][T11114] REISERFS (device loop4): using ordered data mode
[  400.330171][T11096] BTRFS info (device loop1): enabling ssd optimizations
[  400.343546][T11114] reiserfs: using flush barriers
[  400.385136][T11114] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  400.401751][T11096] BTRFS info (device loop1): auto enabling async discard
[  400.470753][T11114] REISERFS (device loop4): checking transaction log (loop4)
[  400.525547][T11114] REISERFS (device loop4): Using r5 hash to sort names
[  400.572605][T11114] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  400.911120][ T5781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  400.926784][ T5781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  400.935824][ T5781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  400.945297][ T5781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  400.953314][ T5781] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  400.960904][ T5781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  401.049046][ T5772] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  401.178341][T11140] loop4: detected capacity change from 0 to 512
[  401.205342][T11140] EXT4-fs: Ignoring removed orlov option
[  401.267263][T11140] EXT4-fs: Ignoring removed mblk_io_submit option
[  401.371399][T11140] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.2066: corrupted in-inode xattr: e_value size too large
[  401.464041][T11140] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2066: couldn't read orphan inode 15 (err -117)
[  401.543922][T11140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  401.796105][T10111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.814094][T11135] chnl_net:caif_netlink_parms(): no params data found
[  402.119845][T11135] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.169152][T11135] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.206265][T11135] bridge_slave_0: entered allmulticast mode
[  402.247360][T11135] bridge_slave_0: entered promiscuous mode
[  402.289128][T11135] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.336318][T11135] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.371446][T11135] bridge_slave_1: entered allmulticast mode
[  402.378784][T11135] bridge_slave_1: entered promiscuous mode
[  402.566606][T11135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.635463][T11135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  402.698892][T11161] loop4: detected capacity change from 0 to 1024
[  402.786143][T11161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  402.823054][T11135] team0: Port device team_slave_0 added
[  402.862607][T11135] team0: Port device team_slave_1 added
[  402.908476][   T28] audit: type=1800 audit(1786459682.994:49): pid=11161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2072" name="file0" dev="loop4" ino=13 res=0 errno=0
[  402.986654][T11135] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.016517][T10111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.045049][T11135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.104173][ T5781] Bluetooth: hci5: command tx timeout
[  403.187880][T11135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.247061][T11166] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2074'.
[  403.258581][T11135] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.287506][T11168] loop4: detected capacity change from 0 to 164
[  403.310107][T11135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.490851][T11135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.573608][T11156] loop1: detected capacity change from 0 to 32768
[  403.798910][T11174] ea_get: invalid extended attribute
[  403.851520][T11174] ffff888074e0b170: 04 00 00 00                                      ....
[  403.921499][T11135] hsr_slave_0: entered promiscuous mode
[  403.981152][T11135] hsr_slave_1: entered promiscuous mode
[  404.056252][T11135] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  404.100571][T11135] Cannot create hsr debugfs directory
[  404.693839][T11184] loop1: detected capacity change from 0 to 128
[  404.790571][T11184] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  405.156541][T11135] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  405.184590][ T5781] Bluetooth: hci5: command tx timeout
[  405.225349][T11135] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  405.294413][T11135] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  405.404375][T11135] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  405.414740][T11178] loop3: detected capacity change from 0 to 32768
[  405.537717][T11178] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  405.715342][T11178] XFS (loop3): Ending clean mount
[  405.796975][T11178] XFS (loop3): Quotacheck needed: Please wait.
[  405.996451][T11135] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.070720][T11178] XFS (loop3): Quotacheck: Done.
[  406.126975][T11135] 8021q: adding VLAN 0 to HW filter on device team0
[  406.255159][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.262454][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  406.428564][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.435779][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.797587][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  407.262192][ T5781] Bluetooth: hci5: command tx timeout
[  407.486337][T11135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  407.551745][T11227] loop1: detected capacity change from 0 to 2048
[  407.652390][T11232] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  407.669957][T11229] kvm: kvm [11228]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x8000000000cd
[  408.089899][T11239] batman_adv: batadv0: Adding interface: gretap1
[  408.133265][T11239] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.213098][T11239] batman_adv: batadv0: Interface activated: gretap1
[  408.252406][T10202] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  408.470174][T10202] usb 5-1: Using ep0 maxpacket: 32
[  408.500719][T10202] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  408.547007][T10202] usb 5-1: config 0 interface 0 has no altsetting 0
[  408.585192][T10202] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  408.649059][T10202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.664477][T11135] veth0_vlan: entered promiscuous mode
[  408.712203][T10202] usb 5-1: config 0 descriptor??
[  408.766114][T11135] veth1_vlan: entered promiscuous mode
[  408.898261][T11252] loop1: detected capacity change from 0 to 256
[  408.919263][T11135] veth0_macvtap: entered promiscuous mode
[  408.958468][T11252] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  408.983788][T11135] veth1_macvtap: entered promiscuous mode
[  409.098372][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.171786][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.204151][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.239249][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.268180][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.340361][ T5781] Bluetooth: hci5: command tx timeout
[  409.345869][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.396277][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.416652][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.462075][T11135] batman_adv: batadv0: Interface activated: batadv_slave_0
[  409.534798][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.592917][T10202] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0
[  409.608163][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.649325][T10202] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0
[  409.670535][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.700426][T10202] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0
[  409.725140][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.739284][T10202] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0
[  409.776343][T10202] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0
[  409.784469][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.824672][T10202] corsair-cpro 0003:1B1C:0C10.0007: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0
[  409.844700][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.878350][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.938417][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.968246][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  410.007181][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.067686][T11135] batman_adv: batadv0: Interface activated: batadv_slave_1
[  410.132642][T11135] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.190189][T11135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.245828][T11135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.286176][T11135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.306278][T10202] corsair-cpro: probe of 0003:1B1C:0C10.0007 failed with error -110
[  410.378724][T10202] usb 5-1: USB disconnect, device number 3
[  410.804016][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.870389][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.958422][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.012924][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.252778][T11291] loop3: detected capacity change from 0 to 131072
[  412.314162][T11291] F2FS-fs (loop3): invalid crc value
[  412.346026][T11292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2062'.
[  412.374413][T11291] F2FS-fs (loop3): Found nat_bits in checkpoint
[  412.440134][T11291] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  413.053552][T11302] loop1: detected capacity change from 0 to 1024
[  413.134866][T11302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  413.286432][   T28] audit: type=1800 audit(1786459693.374:50): pid=11302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2121" name="file0" dev="loop1" ino=13 res=0 errno=0
[  413.545499][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.593048][T11286] loop4: detected capacity change from 0 to 32768
[  413.799297][T11286] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  413.982231][T11286] XFS (loop4): Ending clean mount
[  414.122707][T11324] kvm: kvm [11323]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x8000000000cd
[  414.160216][ T5817] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  414.395106][ T5817] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  414.457498][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.529088][ T5817] usb 4-1: config 0 descriptor??
[  414.614727][T10111] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  415.302030][T11336] loop5: detected capacity change from 0 to 256
[  415.428892][ T5817] usb 4-1: Cannot set autoneg
[  415.481513][ T5817] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71
[  415.544415][T11336] FAT-fs (loop5): Directory bread(block 64) failed
[  415.597435][ T5817] usb 4-1: USB disconnect, device number 19
[  415.616120][T11336] FAT-fs (loop5): Directory bread(block 65) failed
[  415.672947][T11336] FAT-fs (loop5): Directory bread(block 66) failed
[  415.718245][T11340] loop4: detected capacity change from 0 to 128
[  415.732070][T11336] FAT-fs (loop5): Directory bread(block 67) failed
[  415.760295][T11336] FAT-fs (loop5): Directory bread(block 68) failed
[  415.789627][T11340] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  415.818566][T11336] FAT-fs (loop5): Directory bread(block 69) failed
[  415.849325][T11336] FAT-fs (loop5): Directory bread(block 70) failed
[  415.878335][T11336] FAT-fs (loop5): Directory bread(block 71) failed
[  415.920408][T11336] FAT-fs (loop5): Directory bread(block 72) failed
[  415.926980][T11336] FAT-fs (loop5): Directory bread(block 73) failed
[  416.599541][T11354] loop1: detected capacity change from 0 to 1024
[  416.688409][T11354] EXT4-fs: Ignoring removed nobh option
[  416.819644][T11354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  417.196911][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.781233][T11378] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2149'.
[  418.789631][T11376] loop5: detected capacity change from 0 to 32768
[  418.847483][T11376] JBD2: Ignoring recovery information on journal
[  419.008274][T11376] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  419.234431][T11376] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[  419.391139][T11376] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  419.436630][T11376] OCFS2: Returning error to the calling process.
[  419.459976][T11409] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2161'.
[  419.480125][T11376] (syz.5.2148,11376,0):ocfs2_search_chain:1783 ERROR: status = -5
[  419.520179][T11376] (syz.5.2148,11376,0):ocfs2_search_chain:1893 ERROR: status = -5
[  419.560079][T11376] (syz.5.2148,11376,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5
[  419.614661][T11376] (syz.5.2148,11376,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5
[  419.670443][T11376] (syz.5.2148,11376,0):ocfs2_claim_new_inode:2248 ERROR: status = -5
[  419.678591][T11376] (syz.5.2148,11376,0):ocfs2_claim_new_inode:2263 ERROR: status = -5
[  419.734423][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2162'.
[  419.753770][T11376] (syz.5.2148,11376,0):ocfs2_mknod_locked:639 ERROR: status = -5
[  419.798918][T11376] (syz.5.2148,11376,0):ocfs2_mknod:385 ERROR: status = -5
[  419.850411][T11376] (syz.5.2148,11376,0):ocfs2_mknod:502 ERROR: status = -5
[  419.858139][T11376] (syz.5.2148,11376,0):ocfs2_mkdir:659 ERROR: status = -5
[  420.098769][T11135] ocfs2: Unmounting device (7,5) on (node local)
[  420.123972][T11406] loop4: detected capacity change from 0 to 32768
[  420.158012][T11404] loop1: detected capacity change from 0 to 32768
[  420.255367][T11404] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.2159 (11404)
[  420.280121][ T5817] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  420.364190][T11404] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  420.435371][T11404] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  420.487073][T11404] BTRFS info (device loop1): using free space tree
[  420.501331][ T5817] usb 4-1: Using ep0 maxpacket: 16
[  420.551612][ T5817] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  420.593042][ T5817] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  420.646704][ T5817] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  420.712146][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  420.795299][ T5817] usb 4-1: SerialNumber: syz
[  420.840123][T11404] BTRFS info (device loop1): enabling ssd optimizations
[  420.875940][ T5817] usb 4-1: 0:2 : does not exist
[  420.917594][T11404] BTRFS info (device loop1): auto enabling async discard
[  421.280120][ T5817] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  421.354630][ T5772] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  421.415530][ T5817] usb 4-1: USB disconnect, device number 20
[  421.515979][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  423.184033][T11464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2177'.
[  423.319211][T11446] loop3: detected capacity change from 0 to 32768
[  423.325866][ T5836] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  423.427192][T11446] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  423.521497][T11446] XFS (loop3): Ending clean mount
[  423.542466][ T5836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  423.588269][ T5836] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  423.652126][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.721050][ T5836] usb 6-1: config 0 descriptor??
[  423.775011][ T5836] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  423.866500][ T5774] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  423.968206][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2189'.
[  424.179824][T10202] usb 6-1: USB disconnect, device number 2
[  425.018554][T11487] loop1: detected capacity change from 0 to 32768
[  425.211960][T11487] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  425.900793][ T5772] ocfs2: Unmounting device (7,1) on (node local)
[  426.679068][T11503] loop5: detected capacity change from 0 to 32768
[  426.815737][T11503] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  427.005555][T11503] XFS (loop5): Ending clean mount
[  427.095205][T11534] loop3: detected capacity change from 0 to 1024
[  427.135837][T11534] EXT4-fs: Ignoring removed nobh option
[  427.252357][T11534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  427.485276][T11135] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  427.736011][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.924735][T11548] loop4: detected capacity change from 0 to 1024
[  428.593569][T11554] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  429.227142][T11545] loop1: detected capacity change from 0 to 32768
[  429.238192][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2214'.
[  429.276958][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2214'.
[  429.323551][T11545] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  429.475035][T11545] XFS (loop1): Ending clean mount
[  429.636559][T11581] loop5: detected capacity change from 0 to 1024
[  429.695620][T11581] EXT4-fs: Ignoring removed nobh option
[  429.837381][T11581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  429.949807][ T5772] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  430.097308][T11589] loop4: detected capacity change from 0 to 128
[  430.173812][T11589] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  430.186339][T11591] loop3: detected capacity change from 0 to 1024
[  430.219154][T11135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.236986][T11589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  430.256741][T11591] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  430.415144][T11591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  430.544743][   T28] audit: type=1800 audit(1786459710.634:51): pid=11591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2222" name="file1" dev="loop3" ino=15 res=0 errno=0
[  430.591802][T11591] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2222: missing EA_INODE flag
[  430.712476][T11591] EXT4-fs (loop3): Remounting filesystem read-only
[  430.836298][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.060248][ T5836] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  431.219338][T11610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2229'.
[  431.280416][ T5836] usb 6-1: Using ep0 maxpacket: 16
[  431.319813][ T5836] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  431.378284][ T5836] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  431.430292][    T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  431.449762][ T5836] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  431.507582][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  431.539440][ T5836] usb 6-1: SerialNumber: syz
[  431.579689][ T5836] usb 6-1: 0:2 : does not exist
[  431.660362][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  431.710821][    T8] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  431.739692][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.791092][    T8] usb 5-1: config 0 descriptor??
[  431.854927][    T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  431.974893][T11618] loop1: detected capacity change from 0 to 256
[  431.998956][ T5836] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  432.016299][T11620] loop3: detected capacity change from 0 to 512
[  432.067694][ T5790] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  432.078462][T11620] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  432.090154][ T5836] usb 6-1: USB disconnect, device number 3
[  432.186284][T11620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  432.250770][ T5783] udevd[5783]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  432.292328][T11620] ext4 filesystem being mounted at /668/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  432.356319][    T8] usb 5-1: USB disconnect, device number 4
[  432.427450][T11620] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.2232: Allocating blocks 44-108 which overlap fs metadata
[  432.470232][ T5817] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  432.528752][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.671118][ T5817] usb 2-1: Using ep0 maxpacket: 16
[  432.693887][ T5817] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.734762][ T5817] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.783124][ T5817] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  432.841358][ T5817] usb 2-1: config 0 interface 0 has no altsetting 0
[  432.874206][ T5817] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  432.920399][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.991589][ T5817] usb 2-1: config 0 descriptor??
[  433.419476][ T5817] hid (null): unknown global tag 0xe
[  433.451453][ T5817] hid (null): invalid report_count 2118565370
[  433.457603][ T5817] hid (null): global environment stack underflow
[  433.524934][ T5817] hid (null): unknown global tag 0xd
[  433.555711][ T5817] hid (null): unknown global tag 0xc
[  433.580294][ T5817] hid (null): unknown global tag 0x7b
[  433.645158][ T5817] usb 2-1: USB disconnect, device number 15
[  433.827528][T11624] loop3: detected capacity change from 0 to 32768
[  434.281235][T11630] loop4: detected capacity change from 0 to 32768
[  434.344532][T11630] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.2236 (11630)
[  434.459889][T11630] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  434.560226][T11630] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  434.569906][T11630] BTRFS info (device loop4): using free space tree
[  434.826658][T11650] loop1: detected capacity change from 0 to 8
[  434.869405][T11632] loop5: detected capacity change from 0 to 40427
[  434.890972][T11630] BTRFS info (device loop4): enabling ssd optimizations
[  434.898016][T11630] BTRFS info (device loop4): auto enabling async discard
[  434.950790][T11650] SQUASHFS error: Failed to read block 0x6e6: -5
[  435.003157][T11632] F2FS-fs (loop5): invalid crc value
[  435.014005][T11650] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  435.061086][ T5817] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  435.095589][T11632] F2FS-fs (loop5): Found nat_bits in checkpoint
[  435.108617][T11650] SQUASHFS error: Unable to read directory block [6e4:0]
[  435.287651][ T5817] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  435.348896][ T5817] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  435.430387][ T5817] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  435.485026][T10111] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  435.501787][T11632] F2FS-fs (loop5): Start checkpoint disabled!
[  435.514260][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  435.565119][ T5817] usb 4-1: SerialNumber: syz
[  435.666283][T11632] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  435.873884][ T5817] usb 4-1: 0:2 : does not exist
[  436.016575][ T5817] usb 4-1: USB disconnect, device number 21
[  436.321187][ T1083] kworker/u4:6: attempt to access beyond end of device
[  436.321187][ T1083] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  436.430477][ T1083] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  436.915830][T11673] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  437.367395][T11681] loop3: detected capacity change from 0 to 8
[  437.834186][T11692] dummy0: entered promiscuous mode
[  437.891035][T11692] dummy0: left promiscuous mode
[  437.995857][T11694] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  438.677255][T11711] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  438.758700][T11713] loop3: detected capacity change from 0 to 128
[  438.824143][T11713] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  438.897058][T11713] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  439.193410][T11715] loop1: detected capacity change from 0 to 8192
[  439.729345][T11707] loop5: detected capacity change from 0 to 32768
[  439.926239][T11707] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  440.042149][T11732] gretap0: entered promiscuous mode
[  440.315946][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  440.334309][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  440.446318][T11737] loop4: detected capacity change from 0 to 512
[  440.568165][T11737] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  440.668399][T11738] loop1: detected capacity change from 0 to 4096
[  440.715768][T11135] ocfs2: Unmounting device (7,5) on (node local)
[  440.739077][T11737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.849654][T11737] ext4 filesystem being mounted at /157/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.905399][T11745] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  441.060611][T11737] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4059: comm syz.4.2276: Allocating blocks 44-108 which overlap fs metadata
[  441.422961][T10111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.880615][T11761] loop3: detected capacity change from 0 to 512
[  441.923817][T11761] EXT4-fs: Ignoring removed nobh option
[  441.957020][T11761] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  441.994892][T11763] loop4: detected capacity change from 0 to 256
[  442.037641][T11761] EXT4-fs (loop3): 1 truncate cleaned up
[  442.097771][T11761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.457505][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.710240][T10202] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  442.918908][T11783] loop4: detected capacity change from 0 to 8
[  442.935909][T10202] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  442.983257][T11785] loop5: detected capacity change from 0 to 256
[  442.999843][T10202] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  443.079286][T10202] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  443.095356][T11783] SQUASHFS error: Failed to read block 0x6e6: -5
[  443.109761][T11785] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d)
[  443.131640][T11783] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  443.151661][T10202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  443.210203][T11783] SQUASHFS error: Unable to read directory block [6e4:0]
[  443.228671][T10202] usb 2-1: SerialNumber: syz
[  443.532653][T10202] usb 2-1: 0:2 : does not exist
[  443.632620][T10202] usb 2-1: USB disconnect, device number 16
[  443.680346][T11796] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  443.732965][ T5783] udevd[5783]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  443.922817][T11801] loop4: detected capacity change from 0 to 256
[  443.948086][T11800] loop7: detected capacity change from 0 to 7
[  443.997026][T11800] Dev loop7: unable to read RDB block 7
[  444.033325][ T5783] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  444.050928][T11800]  loop7: unable to read partition table
[  444.082461][T11800] loop7: partition table beyond EOD, truncated
[  444.115041][T11800] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  444.147616][ T1083] loop: Write error at byte offset 2, length 3584.
[  444.189939][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  444.199541][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  444.230405][ T5139] Dev loop7: unable to read RDB block 7
[  444.265369][ T5139]  loop7: unable to read partition table
[  444.290231][ T5139] loop7: partition table beyond EOD, truncated
[  444.330339][    T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  444.344305][T11804] loop3: detected capacity change from 0 to 8192
[  444.550280][    T8] usb 5-1: Using ep0 maxpacket: 16
[  444.578643][    T8] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  444.657494][    T8] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  444.728778][    T8] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  444.842245][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  444.896693][    T8] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  444.950418][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.983172][T11814] loop1: detected capacity change from 0 to 1024
[  445.039613][    T8] usb 5-1: config 0 descriptor??
[  445.107428][T11814] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  445.226101][T11816] loop5: detected capacity change from 0 to 8
[  445.370963][T11816] SQUASHFS error: Failed to read block 0x6e6: -5
[  445.414975][T11816] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  445.499785][T11816] SQUASHFS error: Unable to read directory block [6e4:0]
[  445.512938][    T8] hid (null): unknown global tag 0xe
[  445.518287][    T8] hid (null): invalid report_count 2118565370
[  445.606510][    T8] hid (null): global environment stack underflow
[  445.638272][    T8] hid (null): unknown global tag 0xd
[  445.644375][T11819] mtrr: base(0x20000000) is not aligned on a size(0x40000000) boundary
[  445.679004][    T8] hid (null): unknown global tag 0xc
[  445.716338][    T8] hid (null): unknown global tag 0x7b
[  445.783554][    T8] usb 5-1: USB disconnect, device number 5
[  446.543969][T11822] loop5: detected capacity change from 0 to 131072
[  446.580773][T11822] F2FS-fs (loop5): Invalid log sectorsize (16253193)
[  446.587633][T11822] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  446.673499][T11822] F2FS-fs (loop5): Try to recover 2th superblock, ret: -30
[  446.681119][T11822] F2FS-fs (loop5): Mounted with checkpoint version = 1b41e955
[  447.136838][T11829] loop1: detected capacity change from 0 to 512
[  447.357009][T11829] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  447.460365][T11829] FAT-fs (loop1): Filesystem has been set read-only
[  447.503395][T11834] loop4: detected capacity change from 0 to 1024
[  447.556657][T11834] EXT4-fs: Ignoring removed orlov option
[  447.689497][T11834] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  447.741967][T11834] System zones: 0-1, 3-12
[  447.787011][T11834] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  448.086176][T11840] dummy0: entered promiscuous mode
[  448.139096][T10111] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  448.158043][T11840] gretap0: entered promiscuous mode
[  448.191258][T11840] hsr1: entered allmulticast mode
[  448.230689][T11840] dummy0: entered allmulticast mode
[  448.283456][T11840] gretap0: entered allmulticast mode
[  448.649574][T11842] loop4: detected capacity change from 0 to 4096
[  448.734513][T11842] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  448.813205][T11833] loop5: detected capacity change from 0 to 32768
[  448.856788][T11830] loop3: detected capacity change from 0 to 40427
[  448.868121][T11842] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  448.935154][T11842] ntfs3: loop4: Failed to initialize $Extend/$Reparse.
[  448.974956][T11830] F2FS-fs (loop3): invalid crc value
[  449.012980][T11833] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  449.065145][T11830] F2FS-fs (loop3): Found nat_bits in checkpoint
[  449.226994][T11833] (syz.5.2312,11833,0):ocfs2_double_lock:1190 ERROR: status = -2
[  449.311812][T11833] (syz.5.2312,11833,0):ocfs2_rename:1299 ERROR: status = -2
[  449.396535][T11833] (syz.5.2312,11833,0):ocfs2_rename:1690 ERROR: status = -2
[  449.422391][T11830] F2FS-fs (loop3): Start checkpoint disabled!
[  449.466835][T10111] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22.
[  449.603792][T11830] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  449.874285][T11135] ocfs2: Unmounting device (7,5) on (node local)
[  450.409867][ T1083] kworker/u4:6: attempt to access beyond end of device
[  450.409867][ T1083] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  450.520285][ T1083] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  451.492059][T11885] loop5: detected capacity change from 0 to 1024
[  451.524606][T11885] EXT4-fs: Ignoring removed orlov option
[  451.619508][T11885] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  451.655305][T11885] System zones: 0-1, 3-12
[  451.712652][T11885] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  451.790136][ T5836] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  451.831070][T11892] input: syz0 as /devices/virtual/input/input15
[  451.955585][T11135] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  452.002664][ T5836] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  452.046819][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.104568][ T5836] usb 2-1: Product: syz
[  452.130150][ T5836] usb 2-1: Manufacturer: syz
[  452.179790][ T5836] usb 2-1: SerialNumber: syz
[  452.222742][ T5836] usb 2-1: config 0 descriptor??
[  452.581775][T11906] loop7: detected capacity change from 0 to 7
[  452.621040][T11906] Dev loop7: unable to read RDB block 7
[  452.649247][T11906]  loop7: unable to read partition table
[  452.677630][T11906] loop7: partition table beyond EOD, truncated
[  452.687354][   T60] loop: Write error at byte offset 2, length 3584.
[  452.717755][ T5836] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0)
[  452.726279][T11906] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  452.740517][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  452.750054][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  452.793249][ T5836] usb 2-1: Firmware version (0.0) predates our first public release.
[  452.851420][ T5836] usb 2-1: Please update to version 0.2 or newer
[  452.861244][ T5139] Dev loop7: unable to read RDB block 7
[  452.866851][ T5139]  loop7: unable to read partition table
[  452.906600][ T5139] loop7: partition table beyond EOD, truncated
[  452.922095][T11910] loop5: detected capacity change from 0 to 1024
[  452.985373][T11910] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  453.066931][ T5836] usb 2-1: USB disconnect, device number 17
[  453.276565][T11914] loop4: detected capacity change from 0 to 256
[  453.405202][T11914] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d)
[  453.731806][T11902] loop3: detected capacity change from 0 to 32768
[  453.836447][T11902] JBD2: Ignoring recovery information on journal
[  453.916495][T11919] loop1: detected capacity change from 0 to 1024
[  454.038172][T11919] EXT4-fs: Ignoring removed orlov option
[  454.055010][T11902] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  454.231632][T11919] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  454.239836][T11919] System zones: 0-1, 3-12
[  454.351631][T11919] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  454.408062][T11902] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  454.408170][T11902] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  454.551077][T11902] OCFS2: Returning error to the calling process.
[  454.557462][T11902] (syz.3.2341,11902,0):ocfs2_calc_xattr_init:638 ERROR: status = -117
[  454.618119][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  454.628939][T11902] (syz.3.2341,11902,0):ocfs2_mknod:334 ERROR: status = -117
[  454.658542][T11902] (syz.3.2341,11902,0):ocfs2_mknod:502 ERROR: status = -117
[  454.748347][T11902] (syz.3.2341,11902,0):ocfs2_mkdir:659 ERROR: status = -117
[  455.072922][ T5774] ocfs2: Unmounting device (7,3) on (node local)
[  455.548399][T11948] loop1: detected capacity change from 0 to 256
[  456.136554][T11958] loop3: detected capacity change from 0 to 1024
[  456.147653][T11963] loop4: detected capacity change from 0 to 128
[  456.155673][T11960] loop1: detected capacity change from 0 to 512
[  456.198921][T11958] EXT4-fs: Ignoring removed orlov option
[  456.227882][T11963] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  456.293453][T11960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.327523][T11963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  456.411471][T11958] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  456.419725][T11958] System zones: 0-1, 3-12
[  456.542148][T11958] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.712036][T11970] loop5: detected capacity change from 0 to 512
[  456.753584][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.786606][T11970] EXT4-fs: Ignoring removed nobh option
[  456.881415][T11970] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  456.976818][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  457.017703][T11970] EXT4-fs (loop5): 1 truncate cleaned up
[  457.067485][T11970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  457.291098][T11975] binder: 11974:11975 ioctl c0306201 2000000001c0 returned -14
[  457.404904][T11978] program syz.3.2369 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  457.634070][T11135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.778382][T11984] loop3: detected capacity change from 0 to 1764
[  457.805279][T11986] loop4: detected capacity change from 0 to 512
[  457.904632][T11984] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  457.977430][T11988] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  458.013255][T11986] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  458.102907][T11986] FAT-fs (loop4): Filesystem has been set read-only
[  458.785162][T12007] loop1: detected capacity change from 0 to 512
[  458.831424][T12007] EXT4-fs: Ignoring removed nobh option
[  458.892192][T12007] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  458.968263][T12007] EXT4-fs (loop1): 1 truncate cleaned up
[  459.006740][T12007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.330751][T12019] loop4: detected capacity change from 0 to 256
[  459.465459][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.792896][T12028] loop3: detected capacity change from 0 to 256
[  460.529813][T12046] loop5: detected capacity change from 0 to 512
[  460.672101][T12046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  461.067316][T11135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.120341][T12054] input: syz1 as /devices/virtual/input/input16
[  461.611124][T12042] loop4: detected capacity change from 0 to 32768
[  461.681326][T12042] JBD2: Ignoring recovery information on journal
[  461.859771][T12042] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  462.153463][T12042] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  462.153492][T12042] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  462.184004][T12050] loop1: detected capacity change from 0 to 32768
[  462.300279][T12050] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  462.363138][T12042] OCFS2: Returning error to the calling process.
[  462.369528][T12042] (syz.4.2398,12042,0):ocfs2_calc_xattr_init:638 ERROR: status = -117
[  462.389500][T12075] loop5: detected capacity change from 0 to 512
[  462.427745][T12050] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  462.480232][T12042] (syz.4.2398,12042,0):ocfs2_mknod:334 ERROR: status = -117
[  462.512089][T12075] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  462.560956][T12042] (syz.4.2398,12042,0):ocfs2_mknod:502 ERROR: status = -117
[  462.568315][T12042] (syz.4.2398,12042,0):ocfs2_mkdir:659 ERROR: status = -117
[  462.612834][T12075] EXT4-fs (loop5): orphan cleanup on readonly fs
[  462.692359][T12075] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.2410: bad orphan inode 15
[  462.743265][T12050] (syz.1.2401,12050,0):ocfs2_double_lock:1190 ERROR: status = -2
[  462.768044][T12079] loop3: detected capacity change from 0 to 256
[  462.790664][T12075] ext4_test_bit(bit=14, block=18) = 1
[  462.806351][T12050] (syz.1.2401,12050,0):ocfs2_rename:1299 ERROR: status = -2
[  462.848063][T12075] is_bad_inode(inode)=0
[  462.866265][ T5781] Bluetooth: hci4: command 0x0406 tx timeout
[  462.875035][T12075] NEXT_ORPHAN(inode)=1023
[  462.879394][T12075] max_ino=32
[  462.886619][T12050] (syz.1.2401,12050,0):ocfs2_rename:1690 ERROR: status = -2
[  462.934419][T12079] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d)
[  462.946710][T12075] i_nlink=0
[  463.000190][T12075] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2971: inode #15: comm syz.5.2410: corrupted xattr block 19: e_value size too large
[  463.123334][T12075] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[  463.136684][T10111] ocfs2: Unmounting device (7,4) on (node local)
[  463.217778][T12075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  463.322474][ T5772] ocfs2: Unmounting device (7,1) on (node local)
[  463.666314][T11135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.228822][T12092] loop5: detected capacity change from 0 to 1764
[  464.288081][T12092] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  465.182496][T12108] loop1: detected capacity change from 0 to 128
[  465.239301][T12108] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  465.350485][T12108] ext4 filesystem being mounted at /586/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  465.648593][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  465.666720][T12117] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2429'.
[  466.180743][T12131] input: syz1 as /devices/virtual/input/input17
[  466.970889][T12153] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2452'.
[  467.680393][T12169] pimreg0: tun_chr_ioctl cmd 35111
[  468.128937][T12174] erspan0: entered promiscuous mode
[  468.437283][T12167] loop3: detected capacity change from 0 to 40427
[  468.495409][T12167] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  468.514206][T12167] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  468.569651][T12167] F2FS-fs (loop3): invalid crc value
[  468.660853][T12182] loop5: detected capacity change from 0 to 1024
[  468.969904][T12167] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  469.027642][T12167] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  469.233194][   T28] audit: type=1800 audit(1786459749.324:52): pid=12167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2451" name="file1" dev="loop3" ino=10 res=0 errno=0
[  469.253641][    C0] vkms_vblank_simulate: vblank timer overrun
[  469.299728][T12167] syz.3.2451: attempt to access beyond end of device
[  469.299728][T12167] loop3: rw=2049, sector=53248, nr_sectors = 24 limit=40427
[  469.320732][   T28] audit: type=1326 audit(1786459749.384:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.1.2463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc439e0d9 code=0x7ffc0000
[  469.446532][   T28] audit: type=1326 audit(1786459749.384:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.1.2463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc439e0d9 code=0x7ffc0000
[  469.470587][    C0] vkms_vblank_simulate: vblank timer overrun
[  469.546264][ T5774] syz-executor: attempt to access beyond end of device
[  469.546264][ T5774] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  469.577105][   T28] audit: type=1326 audit(1786459749.384:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.1.2463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fafc439e0d9 code=0x7ffc0000
[  469.648712][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  469.711082][   T28] audit: type=1326 audit(1786459749.384:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.1.2463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc439e0d9 code=0x7ffc0000
[  469.735102][    C0] vkms_vblank_simulate: vblank timer overrun
[  469.887661][   T28] audit: type=1326 audit(1786459749.384:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.1.2463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc439e0d9 code=0x7ffc0000
[  469.941354][T12205] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2470'.
[  469.967715][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2470'.
[  469.996452][   T28] audit: type=1326 audit(1786459749.434:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.1.2463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fafc439e0d9 code=0x7ffc0000
[  470.020398][    C0] vkms_vblank_simulate: vblank timer overrun
[  470.140591][   T28] audit: type=1326 audit(1786459749.434:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.1.2463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc439e0d9 code=0x7ffc0000
[  470.415694][T12211] loop5: detected capacity change from 0 to 128
[  470.459059][T12211] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  470.550566][T12211] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  470.723062][T12219] loop1: detected capacity change from 0 to 256
[  470.774114][T11135] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  470.814521][T12219] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  471.314025][T10202] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  471.502018][T12236] erspan0: entered promiscuous mode
[  471.522138][T10202] usb 6-1: Using ep0 maxpacket: 16
[  471.536752][T10202] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8
[  471.567666][T10202] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  471.616125][T10202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.636366][T10202] usb 6-1: Product: syz
[  471.667725][T10202] usb 6-1: Manufacturer: syz
[  471.692274][T10202] usb 6-1: SerialNumber: syz
[  471.724410][T10202] usb 6-1: config 0 descriptor??
[  471.754828][T10202] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  471.794692][T10202] usb 6-1: Detected FT232R
[  471.917800][T12242] loop1: detected capacity change from 0 to 512
[  471.975146][T12242] EXT4-fs: Invalid want_extra_isize 206
[  471.985378][T10202] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  472.234988][T10202] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  472.439025][ T5836] usb 6-1: USB disconnect, device number 4
[  472.484119][ T5836] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  472.517612][ T5836] ftdi_sio 6-1:0.0: device disconnected
[  472.693319][T12247] loop1: detected capacity change from 0 to 1024
[  473.411142][T12263] loop7: detected capacity change from 0 to 7
[  473.447501][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  473.456784][    C0] buffer_io_error: 14 callbacks suppressed
[  473.456810][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  473.475738][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  473.485009][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  473.499450][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  473.508670][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  473.517214][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  473.526410][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  473.535606][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  473.544785][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  473.559761][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  473.569002][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  473.589745][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  473.598972][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  473.606961][T12263] ldm_validate_partition_table(): Disk read failed.
[  473.624956][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  473.634182][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  473.642790][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  473.652020][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  473.662148][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  473.671360][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  473.699056][T12263] Dev loop7: unable to read RDB block 0
[  473.736427][T12263]  loop7: unable to read partition table
[  473.760349][T12263] loop7: partition table beyond EOD, truncated
[  473.807628][T12263] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[  474.090998][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2498'.
[  474.147666][T12272] netlink: 'syz.3.2498': attribute type 1 has an invalid length.
[  474.209275][T12272] netlink: 'syz.3.2498': attribute type 2 has an invalid length.
[  474.465952][T12282] vivid-000: disconnect
[  474.477245][T12277] vivid-000: reconnect
[  474.492653][T12281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2503'.
[  474.735626][   T28] audit: type=1326 audit(1786459754.824:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.5.2507" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea339e0d9 code=0x7ffc0000
[  474.880184][   T28] audit: type=1326 audit(1786459754.824:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.5.2507" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea339e0d9 code=0x7ffc0000
[  474.904366][    C0] vkms_vblank_simulate: vblank timer overrun
[  475.048941][   T28] audit: type=1326 audit(1786459754.864:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.5.2507" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f3ea339e0d9 code=0x7ffc0000
[  475.072924][    C0] vkms_vblank_simulate: vblank timer overrun
[  475.210467][   T28] audit: type=1326 audit(1786459754.864:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.5.2507" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea339e0d9 code=0x7ffc0000
[  475.234516][    C0] vkms_vblank_simulate: vblank timer overrun
[  475.395101][   T28] audit: type=1326 audit(1786459754.864:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.5.2507" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f3ea339e0d9 code=0x7ffc0000
[  475.419088][    C0] vkms_vblank_simulate: vblank timer overrun
[  475.479763][T12301] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2512'.
[  475.513785][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2512'.
[  475.548671][   T28] audit: type=1326 audit(1786459754.864:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.5.2507" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea339e0d9 code=0x7ffc0000
[  475.572750][    C0] vkms_vblank_simulate: vblank timer overrun
[  475.720290][   T28] audit: type=1326 audit(1786459754.864:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.5.2507" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea339e0d9 code=0x7ffc0000
[  476.177335][T12289] loop1: detected capacity change from 0 to 40427
[  476.209141][T12289] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  476.246292][T12289] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  476.288779][T12289] F2FS-fs (loop1): invalid crc value
[  476.518656][T12289] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  476.539242][T12289] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  476.708681][   T28] audit: type=1800 audit(1786459756.794:67): pid=12289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2505" name="file1" dev="loop1" ino=10 res=0 errno=0
[  476.750637][T12289] syz.1.2505: attempt to access beyond end of device
[  476.750637][T12289] loop1: rw=2049, sector=53248, nr_sectors = 24 limit=40427
[  476.939150][ T5772] syz-executor: attempt to access beyond end of device
[  476.939150][ T5772] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  477.065351][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  477.125716][T12322] loop5: detected capacity change from 0 to 256
[  477.211960][T12322] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  478.061548][T10202] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  478.284705][T10202] usb 4-1: Using ep0 maxpacket: 8
[  478.339907][T10202] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  478.361166][T10202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.388190][T10202] usb 4-1: Product: syz
[  478.404556][T10202] usb 4-1: Manufacturer: syz
[  478.423090][T10202] usb 4-1: SerialNumber: syz
[  478.449719][T10202] usb 4-1: config 0 descriptor??
[  478.679492][T10202] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  478.803404][T12351] loop5: detected capacity change from 0 to 256
[  479.006490][T12353] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2536'.
[  479.090637][T10202] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  479.118746][T10202] usb 4-1: USB disconnect, device number 22
[  479.924727][T12361] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  480.061890][T12363] loop7: detected capacity change from 0 to 7
[  480.071181][    C0] blk_print_req_error: 10 callbacks suppressed
[  480.071194][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  480.086529][    C0] buffer_io_error: 10 callbacks suppressed
[  480.086538][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  480.125686][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  480.135036][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  480.162365][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  480.171597][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  480.180062][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  480.189292][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  480.206896][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  480.216101][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  480.225295][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  480.234478][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  480.250038][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  480.259205][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  480.273615][T12363] ldm_validate_partition_table(): Disk read failed.
[  480.309064][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  480.318297][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  480.327892][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  480.337080][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  480.355012][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  480.364239][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  480.384504][T12363] Dev loop7: unable to read RDB block 0
[  480.433975][T12363]  loop7: unable to read partition table
[  480.459151][T12363] loop7: partition table beyond EOD, truncated
[  480.492708][T12363] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[  480.808600][ T5781] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  480.827204][ T5781] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  480.836913][ T5781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  480.851538][ T5781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  480.864110][ T5781] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  480.872077][ T5781] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  481.180625][   T11] wlan1: Trigger new scan to find an IBSS to join
[  481.238718][T12368] loop3: detected capacity change from 0 to 32768
[  481.256303][T12369] chnl_net:caif_netlink_parms(): no params data found
[  481.353260][T12368] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  481.438980][T12368] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  481.501897][T12368] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30
[  481.584372][T12368] XFS (loop3): Ending clean mount
[  481.606347][T12369] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.646529][T12369] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.681290][T12369] bridge_slave_0: entered allmulticast mode
[  481.703802][T12369] bridge_slave_0: entered promiscuous mode
[  481.718297][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  481.742233][T12369] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.749389][T12369] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.797889][T12386] netlink: 209832 bytes leftover after parsing attributes in process `syz.5.2551'.
[  481.810725][T12369] bridge_slave_1: entered allmulticast mode
[  481.817704][T12369] bridge_slave_1: entered promiscuous mode
[  481.994303][T12369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  482.083731][T12369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  482.316360][T12369] team0: Port device team_slave_0 added
[  482.378189][T12369] team0: Port device team_slave_1 added
[  482.516082][T12369] batman_adv: batadv0: Adding interface: batadv_slave_0
[  482.546230][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  482.652929][T12369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  482.686454][T12369] batman_adv: batadv0: Adding interface: batadv_slave_1
[  482.727169][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  482.815238][T12369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  482.934542][T12369] hsr_slave_0: entered promiscuous mode
[  482.940703][ T5781] Bluetooth: hci6: command tx timeout
[  482.961580][T12369] hsr_slave_1: entered promiscuous mode
[  482.977981][T12369] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  483.000830][T12369] Cannot create hsr debugfs directory
[  483.056582][T12391] loop5: detected capacity change from 0 to 32768
[  483.149854][T12391] jfs_rmdir: dtDelete returned -2
[  483.337076][T12396] loop3: detected capacity change from 0 to 512
[  483.478093][T12396] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  483.535912][T12396] EXT4-fs (loop3): orphan cleanup on readonly fs
[  483.585495][T12396] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  483.671275][T12396] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  483.755528][T12396] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  483.815575][T12396] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #16: comm syz.3.2549: inode has both inline data and extents flags
[  483.886061][T12369] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  483.893195][T12396] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.2549: couldn't read orphan inode 16 (err -117)
[  483.966225][T12396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  483.995305][T12369] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  484.083993][T12369] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  484.112478][T12396] CacheFiles: Failed to register: -30
[  484.132861][T12369] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  484.144929][   T11] wlan1: Trigger new scan to find an IBSS to join
[  484.234872][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.562178][T12369] 8021q: adding VLAN 0 to HW filter on device bond0
[  484.599347][T12369] 8021q: adding VLAN 0 to HW filter on device team0
[  484.623493][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.630682][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.667279][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.674493][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.983626][T12369] 8021q: adding VLAN 0 to HW filter on device batadv0
[  485.020414][ T5781] Bluetooth: hci6: command tx timeout
[  485.416385][T12369] veth0_vlan: entered promiscuous mode
[  485.472145][T12369] veth1_vlan: entered promiscuous mode
[  485.493139][T12424] MTRR 2 not used
[  485.498601][T12423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2555'.
[  485.610562][T12369] veth0_macvtap: entered promiscuous mode
[  485.669042][T12369] veth1_macvtap: entered promiscuous mode
[  485.769911][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.814302][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.858351][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.896852][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.924369][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.938652][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.953832][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.967653][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.988326][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.999213][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.016179][T12369] batman_adv: batadv0: Interface activated: batadv_slave_0
[  486.064199][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.120603][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.178909][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.229930][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.257916][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.285512][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.297697][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.317423][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.328245][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.343786][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.354843][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.370719][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.429487][T12369] batman_adv: batadv0: Interface activated: batadv_slave_1
[  486.512647][T12369] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  486.570081][T12369] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  486.620156][T12369] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  486.628907][T12369] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  487.051030][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.080816][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.100173][ T5781] Bluetooth: hci6: command tx timeout
[  487.169564][  T264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.182577][ T1083] wlan1: Trigger new scan to find an IBSS to join
[  487.214344][  T264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.140829][ T3542] wlan1: Creating new IBSS network, BSSID b6:bb:ca:f4:29:07
[  488.170647][ T1083] wlan1: Trigger new scan to find an IBSS to join
[  488.960388][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  489.171899][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  489.187602][ T5781] Bluetooth: hci6: command tx timeout
[  489.226043][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  489.290414][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  489.368317][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  489.414267][    T9] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  489.458824][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.497059][    T9] usb 7-1: Product: syz
[  489.525675][    T9] usb 7-1: Manufacturer: syz
[  489.559178][    T9] usb 7-1: SerialNumber: syz
[  489.597189][    T9] usb 7-1: config 0 descriptor??
[  489.871034][    T9] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  490.105951][T12471] usb 7-1: Couldn't submit interrupt_out_urb -90
[  490.156884][ T5819] usb 7-1: USB disconnect, device number 2
[  490.366336][T12499] loop5: detected capacity change from 0 to 64
[  491.183770][ T3542] wlan1: Trigger new scan to find an IBSS to join
[  491.408166][T12509] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.609318][T12503] loop3: detected capacity change from 0 to 32768
[  491.751569][T12503] jfs_rmdir: dtDelete returned -2
[  492.068614][T12521] loop3: detected capacity change from 0 to 1024
[  493.059338][T12517] loop5: detected capacity change from 0 to 32768
[  493.100785][T12517] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  493.201148][T12517] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  493.237346][T12517] XFS (loop5): Tail block (0x29) overwrite detected. Updated to 0x30
[  493.298646][T12517] XFS (loop5): Ending clean mount
[  493.328761][T12523] loop6: detected capacity change from 0 to 40427
[  493.394414][T12523] F2FS-fs (loop6): Wrong segment_count / block_count (64 > 16384)
[  493.444161][T12523] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  493.534867][T12523] F2FS-fs (loop6): Found nat_bits in checkpoint
[  493.582099][T11135] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  493.811119][T12523] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  493.890203][T12523] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  494.160182][   T60] wlan1: Creating new IBSS network, BSSID 52:1f:25:b5:21:06
[  494.336877][T12369] syz-executor: attempt to access beyond end of device
[  494.336877][T12369] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  494.468865][T12369] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  494.595622][T12545] loop3: detected capacity change from 0 to 4096
[  494.675320][T12545] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  495.086099][ T5776] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  495.120455][ T5776] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  495.140921][ T5776] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  495.153673][ T5776] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  495.161724][ T5776] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  495.168987][ T5776] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  495.567832][T12556] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  495.872569][    T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  495.931993][T12548] chnl_net:caif_netlink_parms(): no params data found
[  496.073182][    T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  496.106205][    T9] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  496.157384][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.226400][    T9] gspca_main: stv0680-2.14.0 probing 041e:4007
[  496.263122][T12548] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.330619][T12548] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.337891][T12548] bridge_slave_0: entered allmulticast mode
[  496.391817][T12548] bridge_slave_0: entered promiscuous mode
[  496.428424][T12548] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.467946][T12548] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.491043][T12548] bridge_slave_1: entered allmulticast mode
[  496.543675][T12548] bridge_slave_1: entered promiscuous mode
[  496.675144][T12548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.708913][T12548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.830518][T12548] team0: Port device team_slave_0 added
[  496.838922][T12548] team0: Port device team_slave_1 added
[  496.910469][ T5836] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  496.935952][T12548] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.962808][T12568] loop6: detected capacity change from 0 to 32768
[  496.975823][T12548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.064883][T12568] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  497.077993][T12548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.124306][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  497.143109][T12548] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.169082][T12568] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  497.186392][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  497.199102][T12548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.245634][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  497.264665][T12568] XFS (loop6): Tail block (0x29) overwrite detected. Updated to 0x30
[  497.278577][ T5776] Bluetooth: hci7: command tx timeout
[  497.311580][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  497.347545][T12568] XFS (loop6): Ending clean mount
[  497.356407][T12548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.388370][ T5836] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  497.426799][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.481616][ T5836] usb 6-1: Product: syz
[  497.509287][ T5836] usb 6-1: Manufacturer: syz
[  497.541812][ T5836] usb 6-1: SerialNumber: syz
[  497.551363][    T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  497.591409][    T9] stv0680 4-1:4.0: last error: 86,  command = 0x78
[  497.603444][ T5836] usb 6-1: config 0 descriptor??
[  497.625121][T12548] hsr_slave_0: entered promiscuous mode
[  497.653858][T12369] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  497.663761][    T9] usb 4-1: USB disconnect, device number 23
[  497.732224][T12548] hsr_slave_1: entered promiscuous mode
[  497.767615][T12548] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  497.831736][T12548] Cannot create hsr debugfs directory
[  497.868874][ T5836] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  498.125627][T12576] usb 6-1: Couldn't submit interrupt_out_urb -90
[  498.167050][ T5836] usb 6-1: USB disconnect, device number 5
[  498.691997][T12548] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  498.759147][T12548] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  498.878127][T12548] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  498.923962][T12548] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  499.137447][T12598] loop3: detected capacity change from 0 to 2048
[  499.340367][ T5781] Bluetooth: hci7: command tx timeout
[  499.439406][T12548] 8021q: adding VLAN 0 to HW filter on device bond0
[  499.569075][T12548] 8021q: adding VLAN 0 to HW filter on device team0
[  499.616240][T12606] program syz.6.2626 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  499.712390][  T264] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.719538][  T264] bridge0: port 1(bridge_slave_0) entered forwarding state
[  499.825494][T12608] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  499.832728][T12608] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  499.839225][T12608] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  499.845699][T12608] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  499.852161][T12608] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  499.858568][T12608] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  499.865018][T12608] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  499.871486][T12608] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  499.877943][T12608] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  499.914413][  T264] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.921590][  T264] bridge0: port 2(bridge_slave_1) entered forwarding state
[  500.177328][T12548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  500.236675][T12612] loop6: detected capacity change from 0 to 8192
[  501.147278][T12548] 8021q: adding VLAN 0 to HW filter on device batadv0
[  501.296824][T12610] loop5: detected capacity change from 0 to 32768
[  501.366076][T12625] loop6: detected capacity change from 0 to 512
[  501.428987][ T5781] Bluetooth: hci7: command tx timeout
[  501.462308][T12610] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  501.565924][T12625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  501.695531][T12625] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  501.711849][T12610] XFS (loop5): Ending clean mount
[  501.744455][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  501.758100][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  502.092669][T11135] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  502.131499][T12369] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.354495][T12646] loop3: detected capacity change from 0 to 512
[  502.461191][T12646] EXT4-fs: inline encryption not supported
[  502.467211][T12646] ext4: Unknown parameter 'hash'
[  502.821139][T12548] veth0_vlan: entered promiscuous mode
[  502.911766][T12653] loop6: detected capacity change from 0 to 64
[  502.928565][T12548] veth1_vlan: entered promiscuous mode
[  503.102440][T12653] syz.6.2639: attempt to access beyond end of device
[  503.102440][T12653] loop6: rw=34817, sector=39, nr_sectors = 30 limit=64
[  503.135014][T12548] veth0_macvtap: entered promiscuous mode
[  503.203752][T12548] veth1_macvtap: entered promiscuous mode
[  503.215773][T12653] syz.6.2639: attempt to access beyond end of device
[  503.215773][T12653] loop6: rw=34817, sector=72, nr_sectors = 2 limit=64
[  503.316854][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.385729][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.431884][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.464896][T12653] syz.6.2639: attempt to access beyond end of device
[  503.464896][T12653] loop6: rw=34817, sector=76, nr_sectors = 2041 limit=64
[  503.497201][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.515924][ T5781] Bluetooth: hci7: command tx timeout
[  503.528899][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.555786][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.583025][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.615063][T12653] syz.6.2639: attempt to access beyond end of device
[  503.615063][T12653] loop6: rw=34817, sector=2117, nr_sectors = 2048 limit=64
[  503.629077][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.647857][T12653] syz.6.2639: attempt to access beyond end of device
[  503.647857][T12653] loop6: rw=34817, sector=4165, nr_sectors = 6 limit=64
[  503.662026][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.678834][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.697363][T12653] syz.6.2639: attempt to access beyond end of device
[  503.697363][T12653] loop6: rw=34817, sector=4172, nr_sectors = 22 limit=64
[  503.718387][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.743846][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.772089][T12653] syz.6.2639: attempt to access beyond end of device
[  503.772089][T12653] loop6: rw=34817, sector=4196, nr_sectors = 166 limit=64
[  503.787611][T12548] batman_adv: batadv0: Interface activated: batadv_slave_0
[  503.846897][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.923428][T12653] syz.6.2639: attempt to access beyond end of device
[  503.923428][T12653] loop6: rw=34817, sector=4363, nr_sectors = 22 limit=64
[  503.965123][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.998532][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.020392][T12653] syz.6.2639: attempt to access beyond end of device
[  504.020392][T12653] loop6: rw=34817, sector=4388, nr_sectors = 29 limit=64
[  504.070127][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.100603][T12653] syz.6.2639: attempt to access beyond end of device
[  504.100603][T12653] loop6: rw=34817, sector=4418, nr_sectors = 32 limit=64
[  504.134915][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.206008][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.243362][T12665] loop5: detected capacity change from 0 to 4096
[  504.275076][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.315953][T12665] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  504.360254][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.411451][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.472855][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.526581][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.597615][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.650095][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.710087][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.752357][T12548] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.873419][T12548] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.964863][T12548] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  505.039509][T12548] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  505.109456][T12548] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  505.561740][ T3817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.626198][ T3817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.757256][T12658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.795704][T12658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.920287][ T5775] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  506.138196][ T5775] usb 6-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  506.192451][ T5775] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  506.243145][ T5775] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  506.348403][ T5775] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  506.384516][T12671] loop6: detected capacity change from 0 to 32768
[  506.409631][ T5775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.446926][T12673] loop3: detected capacity change from 0 to 32768
[  506.465579][ T5775] usb 6-1: Product: syz
[  506.490941][ T5775] usb 6-1: Manufacturer: syz
[  506.523339][T12671] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  506.533043][ T5775] usb 6-1: SerialNumber: syz
[  506.571861][ T5775] usb 6-1: config 0 descriptor??
[  506.597669][T12673] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  506.746838][T12671] XFS (loop6): Ending clean mount
[  506.838638][T12673] XFS (loop3): Ending clean mount
[  506.905304][ T5775] usb 6-1: Found UVC 34.00 device syz (8086:0b5b)
[  506.955925][ T5775] usb 6-1: No valid video chain found.
[  506.989122][ T9902] svc: failed to register nfsdv3 RPC service (errno 512).
[  507.046199][ T5775] usb 6-1: USB disconnect, device number 6
[  507.071306][ T9902] svc: failed to register nfsaclv3 RPC service (errno 512).
[  507.263759][T12369] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  507.363089][ T5774] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  508.456075][T12703] loop7: detected capacity change from 0 to 40427
[  508.463361][ T5836] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  508.500221][T12703] F2FS-fs (loop7): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  508.550596][T12703] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  508.597092][T12703] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x35f7
[  508.670050][ T5836] usb 6-1: Using ep0 maxpacket: 32
[  508.690144][T12703] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x7ffff
[  508.708959][ T5836] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  508.761157][T12703] F2FS-fs (loop7): Image doesn't support compression
[  508.767995][ T5836] usb 6-1: config 0 has no interface number 0
[  508.788270][ T5836] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  508.870766][T12703] F2FS-fs (loop7): invalid crc value
[  508.878503][ T5836] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  508.926852][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.947040][T12703] F2FS-fs (loop7): Found nat_bits in checkpoint
[  508.973858][ T5836] usb 6-1: Product: syz
[  508.978071][ T5836] usb 6-1: Manufacturer: syz
[  509.040246][ T5836] usb 6-1: SerialNumber: syz
[  509.075637][ T5836] usb 6-1: config 0 descriptor??
[  509.122827][T12715] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  509.181665][T12703] F2FS-fs (loop7): Start checkpoint disabled!
[  509.229693][T12703] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  509.257582][T12703] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  509.401907][T12715] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  509.522127][T12723] netlink: 'syz.6.2666': attribute type 2 has an invalid length.
[  509.537184][T12725] loop3: detected capacity change from 0 to 64
[  509.555763][T12703] F2FS-fs (loop7): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fe/0x5c0
[  509.641734][T12703] bio_check_eod: 2 callbacks suppressed
[  509.641746][T12703] syz.7.2651: attempt to access beyond end of device
[  509.641746][T12703] loop7: rw=2049, sector=45096, nr_sectors = 88 limit=40427
[  509.692091][T12725] syz.3.2658: attempt to access beyond end of device
[  509.692091][T12725] loop3: rw=34817, sector=39, nr_sectors = 30 limit=64
[  509.783152][T12725] syz.3.2658: attempt to access beyond end of device
[  509.783152][T12725] loop3: rw=34817, sector=72, nr_sectors = 2 limit=64
[  510.058436][T12725] syz.3.2658: attempt to access beyond end of device
[  510.058436][T12725] loop3: rw=34817, sector=76, nr_sectors = 2041 limit=64
[  510.095311][ T5836] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  510.136220][T12729] loop6: detected capacity change from 0 to 512
[  510.150257][ T5836] asix: probe of 6-1:0.188 failed with error -71
[  510.190317][ T5836] usb 6-1: USB disconnect, device number 7
[  510.226044][T12729] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  510.272790][T12658] kworker/u4:2: attempt to access beyond end of device
[  510.272790][T12658] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  510.323237][T12729] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  510.366295][T12658] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  510.388701][T12725] syz.3.2658: attempt to access beyond end of device
[  510.388701][T12725] loop3: rw=34817, sector=2117, nr_sectors = 2048 limit=64
[  510.409466][T12729] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  510.418531][T12658] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  510.438048][T12729] System zones: 1-12
[  510.481207][T12729] EXT4-fs (loop6): 1 truncate cleaned up
[  510.502223][T12729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  510.560764][T12725] syz.3.2658: attempt to access beyond end of device
[  510.560764][T12725] loop3: rw=34817, sector=4165, nr_sectors = 6 limit=64
[  510.631661][T12725] syz.3.2658: attempt to access beyond end of device
[  510.631661][T12725] loop3: rw=34817, sector=4172, nr_sectors = 22 limit=64
[  510.722257][T12725] syz.3.2658: attempt to access beyond end of device
[  510.722257][T12725] loop3: rw=34817, sector=4196, nr_sectors = 166 limit=64
[  510.782487][T12369] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.837895][T12725] syz.3.2658: attempt to access beyond end of device
[  510.837895][T12725] loop3: rw=34817, sector=4363, nr_sectors = 22 limit=64
[  512.139532][T12758] loop7: detected capacity change from 0 to 512
[  512.237135][T12758] EXT4-fs warning (device loop7): dx_probe:833: inode #2: comm syz.7.2673: Unrecognised inode hash code 4
[  512.327553][T12758] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.2673: Corrupt directory, running e2fsck is recommended
[  512.513807][T12758] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  512.616059][T12758] EXT4-fs error (device loop7): ext4_iget_extra_inode:4740: inode #15: comm syz.7.2673: corrupted in-inode xattr: invalid ea_ino
[  512.774174][T12758] EXT4-fs (loop7): Remounting filesystem read-only
[  512.818137][T12758] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  513.809018][T12780] loop5: detected capacity change from 0 to 131072
[  513.850957][T12780] F2FS-fs (loop5): Invalid log sectorsize (67108873)
[  513.857709][T12780] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  513.870436][T12780] F2FS-fs (loop5): invalid crc value
[  513.931517][T12780] F2FS-fs (loop5): Found nat_bits in checkpoint
[  513.991782][T12780] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  513.998925][T12780] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  514.248419][T12548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.649161][T12794] loop6: detected capacity change from 0 to 8
[  514.762994][T12794] SQUASHFS error: Unable to read directory block [629:26]
[  514.936110][T12798] loop7: detected capacity change from 0 to 1024
[  515.075640][T12798] hfsplus: invalid length 32517 has been corrected to 255
[  515.207910][T12800] input: syz0 as /devices/virtual/input/input18
[  515.242851][   T28] audit: type=1800 audit(1786460053.322:68): pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2689" name="file1" dev="loop7" ino=20 res=0 errno=0
[  515.408592][T12804] loop5: detected capacity change from 0 to 512
[  515.515628][ T1083] hfsplus: b-tree write err: -5, ino 20
[  515.622757][ T1083] hfsplus: b-tree write err: -5, ino 20
[  515.642151][T12804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  515.760745][T12804] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  516.188303][T11135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.217260][T12818] loop7: detected capacity change from 0 to 512
[  516.325097][T12818] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.2696: inode has both inline data and extents flags
[  516.487520][T12818] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.2696: couldn't read orphan inode 15 (err -117)
[  516.621538][T12818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  517.274650][T12548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.231286][   T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  518.679585][T12856] cgroup: Need name or subsystem set
[  518.691523][T12858] tmpfs: Bad value for 'gid'
[  518.795256][T12861] loop7: detected capacity change from 0 to 1024
[  518.883591][T12861] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  519.032400][T12865] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2717'.
[  519.044818][T12861] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.097715][T12870] loop3: detected capacity change from 0 to 256
[  519.173368][T12861] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  519.188138][T12870] exFAT-fs (loop3): error, The cluster chain has a loop
[  519.257478][T12870] exFAT-fs (loop3): Filesystem has been set read-only
[  519.332424][T12870] exFAT-fs (loop3): failed to count the number of clusters in root
[  519.408801][T12870] exFAT-fs (loop3): failed to recognize exfat type
[  519.426689][T12861] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #15: comm syz.7.2716: lblock 0 mapped to illegal pblock 0 (length 1)
[  519.585037][T12861] EXT4-fs (loop7): Remounting filesystem read-only
[  519.879735][T12548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  521.067138][T12904] loop7: detected capacity change from 0 to 64
[  521.230135][T12904] bio_check_eod: 4 callbacks suppressed
[  521.230150][T12904] syz.7.2732: attempt to access beyond end of device
[  521.230150][T12904] loop7: rw=34817, sector=39, nr_sectors = 30 limit=64
[  521.383424][T12904] syz.7.2732: attempt to access beyond end of device
[  521.383424][T12904] loop7: rw=34817, sector=72, nr_sectors = 2 limit=64
[  521.643594][T12904] syz.7.2732: attempt to access beyond end of device
[  521.643594][T12904] loop7: rw=34817, sector=76, nr_sectors = 2041 limit=64
[  521.773232][T12914] loop3: detected capacity change from 0 to 512
[  521.846614][T12914] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  521.931693][T12914] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  522.000958][T12914] EXT4-fs (loop3): orphan cleanup on readonly fs
[  522.050375][T12914] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.2737: Block bitmap for bg 0 marked uninitialized
[  522.069619][T12904] syz.7.2732: attempt to access beyond end of device
[  522.069619][T12904] loop7: rw=34817, sector=2117, nr_sectors = 2048 limit=64
[  522.157004][T12904] syz.7.2732: attempt to access beyond end of device
[  522.157004][T12904] loop7: rw=34817, sector=4165, nr_sectors = 6 limit=64
[  522.181115][T12914] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.2737: Block bitmap for bg 0 marked uninitialized
[  522.238778][T12904] syz.7.2732: attempt to access beyond end of device
[  522.238778][T12904] loop7: rw=34817, sector=4172, nr_sectors = 22 limit=64
[  522.278141][T12914] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.2737: Block bitmap for bg 0 marked uninitialized
[  522.341451][T12904] syz.7.2732: attempt to access beyond end of device
[  522.341451][T12904] loop7: rw=34817, sector=4196, nr_sectors = 166 limit=64
[  522.367454][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  522.401443][T12914] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.2737: Block bitmap for bg 0 marked uninitialized
[  522.445878][T12904] syz.7.2732: attempt to access beyond end of device
[  522.445878][T12904] loop7: rw=34817, sector=4363, nr_sectors = 22 limit=64
[  522.475870][T12914] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.2737: Block bitmap for bg 0 marked uninitialized
[  522.537590][T12904] syz.7.2732: attempt to access beyond end of device
[  522.537590][T12904] loop7: rw=34817, sector=4388, nr_sectors = 29 limit=64
[  522.568326][T12914] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.2737: Block bitmap for bg 0 marked uninitialized
[  522.606135][T12904] syz.7.2732: attempt to access beyond end of device
[  522.606135][T12904] loop7: rw=34817, sector=4418, nr_sectors = 32 limit=64
[  522.645638][T12906] loop6: detected capacity change from 0 to 40427
[  522.653196][T12914] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  522.733511][T12906] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  522.753612][T12914] EXT4-fs (loop3): 1 truncate cleaned up
[  522.781469][T12906] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  522.811075][T12914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  522.898009][T12906] F2FS-fs (loop6): invalid crc value
[  523.002755][T12914] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (35405!=33349)
[  523.331158][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.424718][T12934] loop5: detected capacity change from 0 to 256
[  523.491392][T12906] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  523.554662][T12906] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  523.846849][T12943] loop7: detected capacity change from 0 to 8
[  524.107251][T12945] loop5: detected capacity change from 0 to 512
[  524.136407][T12369] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  524.207347][T12945] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  524.243399][T12369] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  524.304557][T12920] Bluetooth: hci5: command 0x0406 tx timeout
[  524.323561][T12945] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  524.343162][T12369] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  524.397366][T12369] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  524.450374][T12369] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  524.480174][T12945] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  524.488251][T12945] System zones: 1-12
[  524.595649][T12945] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  524.699264][T12945] EXT4-fs (loop5): 1 truncate cleaned up
[  524.758679][T12945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.054149][T11135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.322880][T12963] loop3: detected capacity change from 0 to 1024
[  526.447404][T12963] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  526.555095][T12969] loop7: detected capacity change from 0 to 256
[  526.581594][T12963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  526.676056][T12969] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  526.696250][T12963] ext4 filesystem being mounted at /821/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  526.892249][T12963] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.2754: lblock 0 mapped to illegal pblock 0 (length 1)
[  526.993395][T12963] EXT4-fs (loop3): Remounting filesystem read-only
[  527.239472][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  527.278538][T12981] loop5: detected capacity change from 0 to 256
[  527.567738][T12985] loop3: detected capacity change from 0 to 1024
[  527.681228][T12985] EXT4-fs: inline encryption not supported
[  527.767649][T12985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  527.941687][T12985] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.3.2764: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0
[  528.136902][T12985] EXT4-fs error (device loop3) in ext4_delete_inline_entry:1802: Corrupt filesystem
[  528.319346][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.382899][T12997] loop7: detected capacity change from 0 to 16
[  528.434966][T12997] erofs: (device loop7): mounted with root inode @ nid 36.
[  528.450314][ T5775] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  528.564725][T13000] loop3: detected capacity change from 0 to 512
[  528.690358][ T5775] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  528.719542][T13000] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  528.755349][ T5775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.794811][T13000] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.2770: corrupted in-inode xattr: e_value size too large
[  528.837186][ T5775] usb 6-1: Product: syz
[  528.851843][ T5775] usb 6-1: Manufacturer: syz
[  528.856483][ T5775] usb 6-1: SerialNumber: syz
[  528.899152][T13000] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.2770: couldn't read orphan inode 15 (err -117)
[  528.917422][ T5775] usb 6-1: config 0 descriptor??
[  528.952626][ T5775] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  529.001761][T13000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.269573][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.794142][ T5775] gspca_sunplus: reg_w_riv err -71
[  529.799386][ T5775] sunplus: probe of 6-1:0.0 failed with error -71
[  529.864325][ T5775] usb 6-1: USB disconnect, device number 8
[  529.902366][   T29] INFO: task syz.2.2007:10893 blocked for more than 143 seconds.
[  529.951510][   T29]       Not tainted syzkaller #0
[  529.987878][T12998] loop6: detected capacity change from 0 to 40427
[  530.009899][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  530.040044][   T29] task:syz.2.2007      state:D stack:27912 pid:10893 ppid:5773   flags:0x00004006
[  530.083154][T12998] F2FS-fs (loop6): Wrong segment_count / block_count (64 > 16384)
[  530.106261][   T29] Call Trace:
[  530.123053][T12998] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  530.133144][   T29]  <TASK>
[  530.140624][   T29]  __schedule+0x15ae/0x4660
[  530.163959][T12998] F2FS-fs (loop6): Found nat_bits in checkpoint
[  530.171425][   T29]  ? asan.module_dtor+0x20/0x20
[  530.191022][   T29]  ? __mutex_lock+0x66e/0xc80
[  530.225284][   T29]  ? __mutex_trylock_common+0x8a/0x270
[  530.247255][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  530.274926][   T29]  schedule+0xbd/0x170
[  530.293482][   T29]  schedule_preempt_disabled+0x13/0x20
[  530.324431][   T29]  __mutex_lock+0x673/0xc80
[  530.345552][T12998] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  530.354847][   T29]  ? verify_lock_unused+0x140/0x140
[  530.373439][   T29]  ? __mutex_lock+0x4d2/0xc80
[  530.379409][T12998] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  530.401456][   T29]  ? nfsd4_write_time+0xae/0x740
[  530.432448][   T29]  ? mutex_lock_nested+0x20/0x20
[  530.463731][   T29]  nfsd4_write_time+0xae/0x740
[  530.485692][   T29]  ? svc_get+0x80/0x80
[  530.514219][   T29]  ? net_generic+0x1e/0x240
[  530.545118][   T29]  ? net_generic+0x1e/0x240
[  530.576453][   T29]  ? net_generic+0x1f4/0x240
[  530.589386][   T29]  ? write_gracetime+0x8d/0xb0
[  530.604740][   T29]  nfsctl_transaction_write+0x10c/0x150
[  530.617906][   T29]  ? nfsctl_transaction_read+0x1b0/0x1b0
[  530.628151][   T29]  vfs_write+0x299/0x9a0
[  530.636228][   T29]  ? file_end_write+0x250/0x250
[  530.643509][   T29]  ? __fget_files+0x28/0x460
[  530.648178][   T29]  ? __fget_files+0x3fc/0x460
[  530.656830][   T29]  ? __fdget_pos+0x2a3/0x330
[  530.669276][   T29]  ? ksys_write+0x74/0x260
[  530.679248][   T29]  ksys_write+0x151/0x260
[  530.686108][   T29]  ? __ia32_sys_read+0x90/0x90
[  530.692022][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  530.701611][   T29]  do_syscall_64+0x55/0xb0
[  530.707335][   T29]  ? clear_bhb_loop+0x40/0x90
[  530.715302][   T29]  ? clear_bhb_loop+0x40/0x90
[  530.725069][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  530.734595][   T29] RIP: 0033:0x7fce30b9e0d9
[  530.739110][   T29] RSP: 002b:00007fce3198a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  530.751222][   T29] RAX: ffffffffffffffda RBX: 00007fce30e25fa0 RCX: 00007fce30b9e0d9
[  530.763565][   T29] RDX: 0000000000000032 RSI: 0000200000000480 RDI: 0000000000000003
[  530.779331][   T29] RBP: 00007fce30c35024 R08: 0000000000000000 R09: 0000000000000000
[  530.795115][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  530.804142][   T29] R13: 00007fce30e26038 R14: 00007fce30e25fa0 R15: 00007fff2c0e29b8
[  530.814780][   T29]  </TASK>
[  530.831580][   T29] 
[  530.831580][   T29] Showing all locks held in the system:
[  530.886345][   T29] 1 lock held by khungtaskd/29:
[  530.902383][   T29]  #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  530.931693][   T29] 2 locks held by kworker/u4:4/60:
[  530.945792][   T29]  #0: ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130
[  530.974027][   T29]  #1: ffff8880b8e28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660
[  531.007970][   T29] 2 locks held by getty/5525:
[  531.014653][   T29]  #0: ffff88814c7c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  531.033732][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  531.047210][   T29] 2 locks held by syz-executor/5772:
[  531.055562][   T29]  #0: ffff88807da4c0e0 (&type->s_umount_key#67){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0
[  531.068889][   T29]  #1: ffffffff8d3e1748 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x53/0x1a0
[  531.089201][   T29] 2 locks held by kworker/0:6/5836:
[  531.096581][   T29]  #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  531.119207][   T29]  #1: ffffc90004aefd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  531.139697][   T29] 3 locks held by syz.0.1637/9902:
[  531.145229][   T29]  #0: ffff88801efccfc8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330
[  531.160694][   T29]  #1: ffff888075dd6418 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0
[  531.169803][   T29]  #2: ffffffff8d3e1748 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0
[  531.188341][   T29] 2 locks held by syz-executor/10111:
[  531.194135][   T29]  #0: ffff88805c13a0e0 (&type->s_umount_key#67){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0
[  531.211692][   T29]  #1: ffffffff8d3e1748 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x53/0x1a0
[  531.231813][   T29] 3 locks held by syz.2.2007/10893:
[  531.239144][   T29]  #0: ffff88807a42dc48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330
[  531.254646][   T29]  #1: ffff888024e0c418 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0
[  531.268583][   T29]  #2: ffffffff8d3e1748 (nfsd_mutex){+.+.}-{3:3}, at: nfsd4_write_time+0xae/0x740
[  531.283345][   T29] 2 locks held by syz-executor/12369:
[  531.292158][   T29]  #0: ffff8880269760e0 (&type->s_umount_key#82){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0
[  531.306229][   T29]  #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880
[  531.319795][   T29] 
[  531.338290][   T29] =============================================
[  531.338290][   T29] 
[  531.385090][   T29] NMI backtrace for cpu 0
[  531.389486][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  531.396689][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  531.406769][   T29] Call Trace:
[  531.410061][   T29]  <TASK>
[  531.413003][   T29]  dump_stack_lvl+0x18c/0x250
[  531.417698][   T29]  ? __wake_up_klogd+0xd9/0x100
[  531.422564][   T29]  ? show_regs_print_info+0x20/0x20
[  531.427765][   T29]  ? load_image+0x420/0x420
[  531.432309][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  531.437312][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  531.443474][   T29]  ? load_image+0x420/0x420
[  531.447992][   T29]  ? wq_watchdog_touch+0xef/0x170
[  531.453024][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  531.459104][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  531.465113][   T29]  watchdog+0xf59/0xfa0
[  531.469289][   T29]  ? watchdog+0x1e1/0xfa0
[  531.473627][   T29]  kthread+0x2fa/0x390
[  531.477698][   T29]  ? hungtask_pm_notify+0x50/0x50
[  531.482737][   T29]  ? kthread_blkcg+0xd0/0xd0
[  531.487339][   T29]  ret_from_fork+0x48/0x80
[  531.491781][   T29]  ? kthread_blkcg+0xd0/0xd0
[  531.496403][   T29]  ret_from_fork_asm+0x11/0x20
[  531.501194][   T29]  </TASK>
[  531.504298][    C0] vkms_vblank_simulate: vblank timer overrun
[  531.672431][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  531.679342][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  531.686545][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  531.696602][   T29] Call Trace:
[  531.699886][   T29]  <TASK>
[  531.702842][   T29]  dump_stack_lvl+0x18c/0x250
[  531.707553][   T29]  ? show_regs_print_info+0x20/0x20
[  531.712757][   T29]  ? load_image+0x420/0x420
[  531.717278][   T29]  panic+0x2ca/0x720
[  531.721185][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  531.725700][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  531.731254][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  531.736634][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  531.742796][   T29]  watchdog+0xf98/0xfa0
[  531.746980][   T29]  ? watchdog+0x1e1/0xfa0
[  531.751327][   T29]  kthread+0x2fa/0x390
[  531.755401][   T29]  ? hungtask_pm_notify+0x50/0x50
[  531.760441][   T29]  ? kthread_blkcg+0xd0/0xd0
[  531.765051][   T29]  ret_from_fork+0x48/0x80
[  531.769472][   T29]  ? kthread_blkcg+0xd0/0xd0
[  531.774061][   T29]  ret_from_fork_asm+0x11/0x20
[  531.778843][   T29]  </TASK>
[  531.781939][   T29] Kernel Offset: disabled
[  531.786301][   T29] Rebooting in 86400 seconds..