last executing test programs:

2m50.238001279s ago: executing program 3 (id=17784):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r1=>0x0})
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10)

2m49.960192412s ago: executing program 3 (id=17791):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m49.671575048s ago: executing program 3 (id=17797):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_ublk_setup_io_uring(0x1f, &(0x7f00000000c0)={0x0, 0xa584, 0x100, 0xfffffffe, 0x1e8}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x1, r0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))

2m49.502990228s ago: executing program 3 (id=17798):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa19, &(0x7f0000000d00)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})

2m48.942614919s ago: executing program 3 (id=17809):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x2, r1}, 0x38)

2m47.214628985s ago: executing program 3 (id=17842):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

2m46.801191406s ago: executing program 32 (id=17842):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

8.450868909s ago: executing program 5 (id=20691):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000})
fcntl$lock(r0, 0x6, &(0x7f0000000280)={0x1, 0x2, 0x2b, 0x8080})
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x20000000000001, 0x20000000000001})

8.239592792s ago: executing program 5 (id=20694):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x5}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\tp', 0x2}], 0x1}}], 0x1, 0x100)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x7, 0xde91, 0x8005, 0xe, 0x0, 0xfffffff9, 0x7, 0x5004}, &(0x7f0000000340)=0x20)

7.163503538s ago: executing program 5 (id=20713):
unshare(0x2040400)
r0 = timerfd_create(0x8, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

7.023853313s ago: executing program 5 (id=20717):
r0 = socket$kcm(0xa, 0x2, 0x73)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff850000001300000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180500"/16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x7ffff000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x25, 0x29, 0x32, 0xc0fe}}, @ip_tos_u8={{0x11, 0x4410, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x64}, 0x0)

6.90043954s ago: executing program 5 (id=20719):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xfd, 0x5122, &(0x7f0000006440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff)
write$tun(r0, &(0x7f00000003c0)={@void, @val={0x2, 0x3, 0x80, 0x1, 0xf8e, 0xc6}, @ipv4=@tipc={{0x8, 0x4, 0x0, 0x2, 0x45, 0x64, 0x0, 0x4, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0x98, [@local]}, @end, @end]}}, @payload_direct={{{{0x25, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3, 0x8, 0x6, 0x3, 0xfffa, 0x9, 0x1, 0x4e23, 0x4e22}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0x4f)

3.525764526s ago: executing program 1 (id=20762):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x1c, r1, 0x303, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000)

3.117270498s ago: executing program 1 (id=20767):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.822258955s ago: executing program 1 (id=20770):
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)='7', 0x1}], 0x1, 0x0, 0x0, 0x1}, 0x4800)

2.554359841s ago: executing program 1 (id=20775):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x10})
ioctl$UI_DEV_CREATE(r0, 0x5501)
close(0x3)

2.362475068s ago: executing program 4 (id=20778):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000580))

2.076059592s ago: executing program 4 (id=20783):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000280)={0xc, r1})
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000180)={0x8, r1})

1.909726901s ago: executing program 1 (id=20785):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r2 = dup2(r0, r1)
ioctl$FIONREAD(r2, 0x541b, 0x0)

1.890508575s ago: executing program 5 (id=20787):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3f, 0x0, &(0x7f00000004c0)="e3ef7f670000ec6783b4241544940000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d998e6f578af3a439e1432fa00228f11", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

1.880868437s ago: executing program 4 (id=20788):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000001040)=0x400c)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)

1.602553531s ago: executing program 4 (id=20794):
r0 = socket$packet(0x11, 0x2, 0x300)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
unshare(0x20000400)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4)

1.494092303s ago: executing program 1 (id=20796):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5558, &(0x7f0000006b80)="$eJzs3DtvHFUUAOCzfuRNsBAFXUaKkGwpa2Wdh6ALkIiHSBTxKKjI2rtZbeLdsbybjUlFQYko+APUlAgkKkp+AwU1HaIA0SEZ7dxrFAOJiLz2kuT7pMmZuXP3zLmjyNaZsTaAp9ZC8fuvtTgZRyNiNiJORFT7tbxVLqXwQkScioiZ+7ZaHv9r4FBEHIuIk+PkKWctn/r8zOj0hV/e+u27Hw7PHf/q2x+nt2pg2l6MiN5G2r/bS7HspHgrjzdH3Sr2zo9yTCd6t/NxmeLd9mqV4W5zZ16ziuc6aX65cWcwjjfXm2vj2OnerMY3+umCg1FnJ0/1gVvNzeq41V6tYndQVrFzL9W1dS/9bLs3GKY8rZzvoyp9DIc7MY23t9ppPRu3q7jWH+bxlLdstbfGcZRjvlysleutqo7Vvdzp/7e3u/07W8WovTnolv3iwnLjpeXGxXpjs2y1h+3z9WavdfF8sdhZH0+rD9vN3qVOWXbW28trZW+pWOysrdUbjWLxcnu12+wXjcbyueWz9QtLee9M8fq194v1VrE4jq92+3eG3fVBcbPcLNInloqV5XMvLxWnG8W7V68X19+5cuXq9fc+vPzBtVeuvvlanvSPsorFlbMrK/XG2fpKY+m+xcw9Xusf/65/pPV/kot+0PrhoNUedvLGwdUB8BjR/wPTcKD9/3zs6v+3t1P+vfT/of+fiIn2v3Mx3f5/2uuf9vOPR7Od7e0G8nR7aP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCT7Kf5r9+odhbS8fE8/kweei4f1yJiJiK2/8VsHNqVczbnmX/A/Pm/1fB9LaoM42scztuxiLiUtz+e3e+7AAAAAE+ubz4+9Vnq1tM/C9MuiIOUHtrMnLgxoXy1iJhf+HkCWSI/bIrn915VMv7/PRdbE8pWPcA6MqFk6ZHb3KSy/Sezu8KR+0IthZmdmYcOtC4AAGA/7e4EHrEL+eLLyRcEAADAPvl02gUwHdWb1vy3+Pk13+EU8gvBo7uOAAAAgMdQbdoFAAAAAPuu6v99/x8AAAA82dL3/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8yc7d3CYORAEAfjZ4YZf9Qau9byu5QRkpIcccI1qhBNJCGqAGcss1V4iwJ1GIIETYGIV8n2QPtkePAcHhzTwbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBjui9m49ub//26cZarenaEHdYdFwAAABCxKGbj8kXKtAfp/K906m86ziIij4htuXsnvm3E7KQ4xY7+xZsx3EWUEdbv0Uvbj4i4SFt27C8BAAAAzth8Mh1V2Xq1s9j+pVSTNvnPy4biZRFRDB8aipavd/8+1HX1Z2+X9e+7G9dbrmQHTDCVE1i1S2aelVNu3aai7ddJf/eXpv+qyaomb284AABAWzYzgRazEAAAAFp2deoBcBrlqmeqxU8F/L2qSQuC3zeOAAAAgFM6sFjXbfUAAABwDgbvXi3z/0/w/L/fj/vv7wYAAAB2qJ7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDEtitl4PpmO6sZZrupp5tMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE/tzj8JACABhdGLMXydeIPe/5TKw9bbbvAfCh2MjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceZwno/FJ8mys5D97u5K8uu8k706NvhuNb+fGL8ncd/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPii3/3yf2JqnEnmThtLxyPJ2lVj66qx96Bx9GC8/RsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7YN24qDAD4Z/t8pQVECChDEKISAyw0vZaWrgygiIE/ASlKryVwhdJmoFUFysKGMndBMCKEBApb/4fOrdSlbB0yFIkJpCL77MQ9inpQxT6S3096fp8tx+97ThTl83MOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACobb+9G2fFZm4cp9WxW/evrRb97Ym+cGPzzmLRijj5h+t/uVeJz76XmzvJQneJAAAAcHBkdX0f0Y98a7kI0rmy/s/rc4qa/9tnx3Fdz0/W/XVf1/5F++Xney/uDDQ3Hqe46Lm10fD431PpZXs4z1n23GPP6JV3vnz2kpXfkPS9jRe28/J+Jl/fvPlOvwwPtZEtAPBfHKv7Kqj/Hir6QZeJAXBg9KpWuFvV/9lctzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtKG/EU/XcRIRi73duHD7/rXVsp/Yv7F5Z7Fup69f32xes7hEHhHn1kbD421N5H/g8pWrH6+MRsNL7QevRER3o1fBB1OcE9FlhoInDdLqZ326rzoaEXuaz8UZuS2PCTr+xQQAwL6TV62o6+/mW8vFsWQ+4sF3D9f/rzXiaNb/E32z/r/34elbzbGa9f+gtRnOvqX1CxeXLl+5+sbahZXzw/PDT948MXhrcPLMqVNnlspnJUuemAAAAPBk+lVLIvI/H5QinY/Ynlj/P9KIY8r6/7NvBl80x8rU/4+0u+jXdSYAAAAH2/NHf/8tecTxpN+Pz1fW1y8Nxtud/RPjbQep/muHqtZc/8/mu84KAAAAaMP2RvLQ+v/ZRhxTrv8/8/1LPzavmUXE4Wr9/9jqp6Oz7U2nI39MdVYb/06851MFAABgph2uWnP9Py/f/093XnlII+L1V8dx9TGAU9X/2btf/dAcq/n+/8n2pjiT0oXx/Sj7hYjeQtcZAQAAsJ89VbWi2P8131r+6Kcj7/e9/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQtr8CAAD///fsSpk=")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42)
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x80001, 0x10c)
fallocate(r0, 0x10, 0x63db, 0x7000001)

1.359339861s ago: executing program 2 (id=20799):
socket$can_raw(0x1d, 0x3, 0x1)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)

1.358650196s ago: executing program 4 (id=20800):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2a, 0x0, &(0x7f0000001300)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00c6fc6ef8eef9757a601bee93", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x200c2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

1.137579573s ago: executing program 2 (id=20803):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x20000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)

1.032272146s ago: executing program 4 (id=20804):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002140)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1000}}, 0x1006)

739.365555ms ago: executing program 2 (id=20806):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000c40)=ANY=[], 0x8)
getsockopt$inet6_opts(r0, 0x29, 0x36, 0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffcba)

629.446869ms ago: executing program 2 (id=20808):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
fsopen(&(0x7f00000006c0)='ocfs2_dlmfs\x00', 0x0)

453.099452ms ago: executing program 2 (id=20812):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010627bd7000fedbdf251a00000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000)

379.272771ms ago: executing program 0 (id=20815):
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r0 = syz_ublk_setup_io_uring(0x31e, &(0x7f0000000500)={0x0, 0xd2ae, 0x0, 0x2, 0x2d2}, &(0x7f0000000b80)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000b40)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)

230.967157ms ago: executing program 0 (id=20816):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x802)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180))

174.496517ms ago: executing program 0 (id=20817):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4e, 0x0, &(0x7f0000000480)="e3ef7f090000ec6783b4241544940000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d998e6f578af3a439e1432fa00228f11b0f472aeeb58d909c56270d30b5b85", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

63.389901ms ago: executing program 0 (id=20818):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x30, r1, 0x32998ed61d4aa037, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x800)

63.21274ms ago: executing program 0 (id=20819):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
connect$can_bcm(r0, &(0x7f0000000540), 0x10)
io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}])

23.880852ms ago: executing program 0 (id=20820):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}]]}, 0x3c}}, 0x0)

0s ago: executing program 2 (id=20821):
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080))
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)

kernel console output (not intermixed with test programs):

tate=2
[ 1153.601115][T10523] loop3: detected capacity change from 0 to 40427
[ 1153.614049][T10523] F2FS-fs (loop3): Image doesn't support compression
[ 1153.614073][T10523] F2FS-fs (loop3): build fault injection rate: 690
[ 1153.614087][T10523] F2FS-fs (loop3): build fault injection type: 0x4
[ 1153.620876][T10523] F2FS-fs (loop3): invalid crc value
[ 1153.633913][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1154.076243][T10523] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1154.369043][T10523] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1154.705421][T10625] loop4: detected capacity change from 0 to 128
[ 1154.719972][T10625] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[ 1154.720081][T10625] System zones: 1-3, 19-19, 35-36
[ 1154.774619][T10625] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 1154.803233][T10625] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 3391 (only 1 groups)
[ 1154.835080][ T5803] syz-executor: attempt to access beyond end of device
[ 1154.835080][ T5803] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1154.953197][T10635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17495'.
[ 1154.989464][ T5803] CPU: 0 UID: 0 PID: 5803 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1154.989485][ T5803] Tainted: [L]=SOFTLOCKUP
[ 1154.989489][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1154.989496][ T5803] Call Trace:
[ 1154.989501][ T5803]  <TASK>
[ 1154.989506][ T5803]  dump_stack_lvl+0xe8/0x150
[ 1154.989527][ T5803]  f2fs_stop_checkpoint+0x3f9/0x5e0
[ 1154.989546][ T5803]  f2fs_write_end_io+0x124b/0x1710
[ 1154.989568][ T5803]  __submit_merged_bio+0x258/0x6a0
[ 1154.989583][ T5803]  ? rcu_is_watching+0x15/0xb0
[ 1154.989601][ T5803]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1154.989620][ T5803]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1154.989647][ T5803]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1154.989677][ T5803]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1154.989712][ T5803]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1154.989732][ T5803]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1154.989771][ T5803]  ? rt_mutex_slowunlock+0x4ee/0xa20
[ 1154.989786][ T5803]  ? reacquire_held_locks+0x117/0x1a0
[ 1154.989804][ T5803]  ? rt_spin_lock+0x1e0/0x400
[ 1154.989820][ T5803]  ? rt_spin_unlock+0x157/0x200
[ 1154.989835][ T5803]  ? rt_spin_unlock+0x163/0x200
[ 1154.989846][ T5803]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1154.989857][ T5803]  do_writepages+0x338/0x560
[ 1154.989874][ T5803]  ? rt_spin_unlock+0x157/0x200
[ 1154.989891][ T5803]  filemap_fdatawrite+0x1ec/0x2f0
[ 1154.989908][ T5803]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1154.989921][ T5803]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1154.989950][ T5803]  ? rt_spin_unlock+0x157/0x200
[ 1154.989964][ T5803]  ? rt_spin_unlock+0x163/0x200
[ 1154.989978][ T5803]  f2fs_sync_dirty_inodes+0x30e/0x830
[ 1154.989997][ T5803]  f2fs_write_checkpoint+0xa3d/0x2710
[ 1154.990026][ T5803]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1154.990058][ T5803]  ? kfree+0x1c5/0x6c0
[ 1154.990072][ T5803]  ? __wake_up_common_lock+0x190/0x1f0
[ 1154.990082][ T5803]  ? f2fs_stop_gc_thread+0x82/0xb0
[ 1154.990098][ T5803]  kill_f2fs_super+0x2dd/0x700
[ 1154.990115][ T5803]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1154.990132][ T5803]  ? call_rcu+0x64b/0x8b0
[ 1154.990146][ T5803]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1154.990168][ T5803]  deactivate_locked_super+0xbc/0x110
[ 1154.990181][ T5803]  cleanup_mnt+0x3d3/0x460
[ 1154.990197][ T5803]  task_work_run+0x1d9/0x270
[ 1154.990210][ T5803]  ? __pfx_task_work_run+0x10/0x10
[ 1154.990226][ T5803]  exit_to_user_mode_loop+0x1fa/0x730
[ 1154.990238][ T5803]  ? rcu_is_watching+0x15/0xb0
[ 1154.990252][ T5803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1154.990263][ T5803]  do_syscall_64+0x353/0x580
[ 1154.990278][ T5803]  ? trace_irq_disable+0x3b/0x140
[ 1154.990291][ T5803]  ? clear_bhb_loop+0x40/0x90
[ 1154.990304][ T5803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1154.990314][ T5803] RIP: 0033:0x7f579fc9f097
[ 1154.990326][ T5803] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1154.990336][ T5803] RSP: 002b:00007ffd15f48a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1154.990348][ T5803] RAX: 0000000000000000 RBX: 00007f579fd332ca RCX: 00007f579fc9f097
[ 1154.990355][ T5803] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd15f48b40
[ 1154.990362][ T5803] RBP: 00007ffd15f48b40 R08: 00007ffd15f49b40 R09: 00000000ffffffff
[ 1154.990369][ T5803] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd15f49bd0
[ 1154.990375][ T5803] R13: 00007f579fd332ca R14: 000000000010cbbc R15: 00007ffd15f49c10
[ 1154.990392][ T5803]  </TASK>
[ 1154.990397][ T5803] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1155.003582][ T5804] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1155.111852][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1155.354305][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1156.214980][ T5803] Flush: task=syz-executor[5803] dev=loop3 state=2
[ 1156.359298][ T5803] Teardown: task=syz-executor[5803] dev=loop3 state=2
[ 1156.583873][T10692] loop4: detected capacity change from 0 to 128
[ 1156.740566][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1156.819008][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1156.875776][T10703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17493'.
[ 1157.002052][T10708] loop4: detected capacity change from 0 to 256
[ 1157.107963][T10713] loop1: detected capacity change from 0 to 128
[ 1157.348316][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1157.419370][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1157.438089][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1157.500921][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1157.645636][T10736] loop1: detected capacity change from 0 to 256
[ 1157.861222][ T5908] Flush: task=udevd[5908] dev=loop1 state=2
[ 1157.952849][ T5908] Teardown: task=udevd[5908] dev=loop1 state=2
[ 1159.766510][T10844] sg_write: data in/out 282076/136 bytes for SCSI command 0x0-- guessing data in;
[ 1159.766510][T10844]    program syz.4.17597 not setting count and/or reply_len properly
[ 1159.971891][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17601'.
[ 1162.272035][T10971] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17659'.
[ 1162.665970][T10992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17670'.
[ 1164.232369][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17706'.
[ 1164.249106][T11056] loop4: detected capacity change from 0 to 4096
[ 1164.401722][T11056] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 1164.423348][T11056] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22.
[ 1164.434110][T11056] ntfs3: Volume is dirty and "force" flag is not set!
[ 1164.613520][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1164.706250][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1165.353715][T11116] netlink: 68 bytes leftover after parsing attributes in process `syz.3.17729'.
[ 1165.392665][T11116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17729'.
[ 1166.426667][T11169] loop3: detected capacity change from 0 to 2048
[ 1166.455797][T11169] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1166.616212][T11169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1166.833787][ T5908] Flush: task=udevd[5908] dev=loop3 state=2
[ 1166.930930][ T5908] Teardown: task=udevd[5908] dev=loop3 state=2
[ 1167.088233][T11193] loop1: detected capacity change from 0 to 2048
[ 1167.154164][T11193] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1167.437268][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1167.531016][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1168.239548][T11248] loop1: detected capacity change from 0 to 256
[ 1168.557102][T11257] loop3: detected capacity change from 0 to 1764
[ 1168.718613][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1168.885276][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1169.020004][ T5803] do_umount: task=syz-executor[5803] propagate_mount_busy()!=0
[ 1169.020446][ T5803] do_umount: task=syz-executor[5803] propagate_mount_busy()!=0
[ 1169.023343][ T5803] do_umount: task=syz-executor[5803] propagate_mount_busy()!=0
[ 1169.386569][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17813'.
[ 1169.677778][T11302] loop4: detected capacity change from 0 to 8
[ 1169.682114][T11302] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 1169.785604][ T5908] udevd[5908]: incorrect cramfs checksum on /dev/loop4
[ 1169.866633][ T5908] udevd[5908]: incorrect cramfs checksum on /dev/loop4
[ 1170.251418][T11319] netlink: 428 bytes leftover after parsing attributes in process `syz.1.17829'.
[ 1170.390160][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1170.532060][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1170.609031][T11319] netlink: 104 bytes leftover after parsing attributes in process `syz.1.17829'.
[ 1170.651966][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[ 1170.938913][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17846'.
[ 1171.033683][ T6020] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1171.038788][T11351] ip6tnl5: entered allmulticast mode
[ 1171.230590][ T6020] usb 2-1: config 32 has an invalid interface number: 20 but max is 0
[ 1171.230640][ T6020] usb 2-1: config 32 has no interface number 0
[ 1171.230704][ T6020] usb 2-1: config 32 interface 20 has no altsetting 0
[ 1171.258913][ T6020] usb 2-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=8b.f0
[ 1171.259002][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1171.259062][ T6020] usb 2-1: Product: syz
[ 1171.259097][ T6020] usb 2-1: Manufacturer: syz
[ 1171.259135][ T6020] usb 2-1: SerialNumber: syz
[ 1171.502132][ T6020] rndis_host 2-1:32.20: skipping garbage
[ 1171.502180][ T6020] rndis_host 2-1:32.20: rndis: master #0/0000000000000000 slave #1/0000000000000000
[ 1171.503256][ T6020] cdc_acm 2-1:32.20: skipping garbage
[ 1171.534089][ T6020] usb 2-1: USB disconnect, device number 94
[ 1171.982415][ T4907] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1172.124413][T11384] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1172.140576][T11384] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1172.172894][T11384] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1172.192045][T11384] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1172.865500][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1172.867912][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1172.878581][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1172.944316][T11411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17874'.
[ 1172.968714][T11411] x_tables: ip_tables: udp match: only valid for protocol 17
[ 1173.014883][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1173.015631][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1173.522543][T27168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1173.621309][T11432] netlink: 104 bytes leftover after parsing attributes in process `syz.1.17885'.
[ 1174.898276][T27168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.980275][T11377] wlan1 speed is unknown, defaulting to 1000
[ 1175.101325][T11504] loop4: detected capacity change from 0 to 256
[ 1175.102529][T11504] exfat: Deprecated parameter 'namecase'
[ 1175.140243][T11504] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0bdbf928, utbl_chksum : 0xe619d30d)
[ 1175.299559][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1175.475487][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1175.552520][T11384] Bluetooth: hci4: command tx timeout
[ 1175.589179][T11523] loop4: detected capacity change from 0 to 256
[ 1175.629274][T11523] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1175.677460][T11523] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1176.023352][T27168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.088329][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1176.278933][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1176.826207][T27168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.753763][T11384] Bluetooth: hci4: command tx timeout
[ 1179.400614][T11377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1179.400903][T11377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1179.401181][T11377] bridge_slave_0: entered allmulticast mode
[ 1179.407694][T11377] bridge_slave_0: entered promiscuous mode
[ 1179.678197][T11377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1179.678511][T11377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1179.678779][T11377] bridge_slave_1: entered allmulticast mode
[ 1179.689417][T11377] bridge_slave_1: entered promiscuous mode
[ 1179.977451][T11384] Bluetooth: hci4: command tx timeout
[ 1180.288768][T11377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1180.446469][T27168] bridge_slave_1: left allmulticast mode
[ 1180.446504][T27168] bridge_slave_1: left promiscuous mode
[ 1180.446838][T27168] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1180.647024][T27168] bridge_slave_0: left allmulticast mode
[ 1180.647368][T27168] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1180.992641][T27168] tipc: Resetting bearer <eth:gre0>
[ 1182.194634][T11384] Bluetooth: hci4: command tx timeout
[ 1183.608160][T27168] tipc: Disabling bearer <eth:gre0>
[ 1183.624607][T11875] loop4: detected capacity change from 0 to 128
[ 1183.635774][T11875] EXT4-fs: Ignoring removed nobh option
[ 1183.663104][T11875] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1183.792400][ T5804] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1183.897349][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1183.902171][T27168] bond0 (unregistering): (slave geneve0): Releasing backup interface
[ 1183.993216][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1184.189776][T11898] loop4: detected capacity change from 0 to 256
[ 1184.191367][T11898] exfat: Deprecated parameter 'namecase'
[ 1184.191420][T11898] exfat: Deprecated parameter 'utf8'
[ 1184.191569][T11898] exfat: Deprecated parameter 'namecase'
[ 1184.276628][T11898] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc1d1debd, utbl_chksum : 0xe619d30d)
[ 1184.524906][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1184.602059][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1184.673464][T11923] program syz.4.18091 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1184.844062][T11935] loop4: detected capacity change from 0 to 256
[ 1185.037146][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1185.125023][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1185.220725][T27168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1185.301425][T11963] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[ 1185.301425][T11963] The task syz.4.18107 (11963) triggered the difference, watch for misbehavior.
[ 1185.309004][T27168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1185.408668][T27168] bond0 (unregistering): Released all slaves
[ 1185.430358][T27168] bond1 (unregistering): Released all slaves
[ 1185.476063][T27168] bond2 (unregistering): Released all slaves
[ 1185.527792][T27168] bond3 (unregistering): Released all slaves
[ 1185.602145][T11377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1185.842923][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1186.084544][T27168] tipc: Left network mode
[ 1186.093022][T11377] team0: Port device team_slave_0 added
[ 1186.112865][T11377] team0: Port device team_slave_1 added
[ 1186.394422][T11377] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1186.394438][T11377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1186.394465][T11377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1186.601359][T11377] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1186.601376][T11377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1186.601404][T11377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1187.257560][T12035] loop4: detected capacity change from 0 to 2048
[ 1187.451160][T12035] NILFS (loop4): invalid segment: Magic number mismatch
[ 1187.451188][T12035] NILFS (loop4): trying rollback from an earlier position
[ 1187.686923][T12035] NILFS (loop4): recovery complete
[ 1187.834309][T12057] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1188.075668][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1188.172774][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1188.885212][T11377] hsr_slave_0: entered promiscuous mode
[ 1188.887621][T11377] hsr_slave_1: entered promiscuous mode
[ 1188.889665][T11377] debugfs: 'hsr0' already exists in 'hsr'
[ 1188.889689][T11377] Cannot create hsr debugfs directory
[ 1188.892244][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1189.350524][ T6020] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1189.521631][ T6020] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1189.521667][ T6020] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1189.521705][ T6020] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1189.521728][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1189.586170][T12108] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1189.637443][ T6020] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1190.786919][ T6020] usb 5-1: USB disconnect, device number 103
[ 1190.888781][T12156] loop1: detected capacity change from 0 to 8192
[ 1191.433298][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1191.840124][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1191.966481][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1192.245987][T12196] loop1: detected capacity change from 0 to 512
[ 1192.255372][T12196] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1192.300823][T12196] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.18206: inode has both inline data and extents flags
[ 1192.300857][T12196] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1192.301273][T12196] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.18206: couldn't read orphan inode 15 (err -117)
[ 1192.301301][T12196] loop1: lost filesystem error report for type 5 error -117
[ 1192.407365][T12196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1192.411685][T12196] EXT4-fs error (device loop1): ext4_empty_dir:3082: inode #2: comm syz.1.18206: invalid size
[ 1192.515028][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1192.655143][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1192.839780][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1192.948569][T12227] loop1: detected capacity change from 0 to 128
[ 1192.987895][T12226] Invalid/unusable pipe
[ 1192.994365][T12227] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1193.010848][T12227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1193.288525][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1193.386913][T11377] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1193.394749][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1193.529280][T11377] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1193.865060][T11377] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1193.962181][T12262] overlayfs: failed to clone lowerpath
[ 1193.962707][T11377] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1194.080129][T11377] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1194.324100][T11377] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1194.325597][T11377] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1194.347572][T12276] loop1: detected capacity change from 0 to 512
[ 1194.415737][T11377] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1194.418042][T12276] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[ 1194.418165][T12276] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.18245: corrupted in-inode xattr: e_value size too large
[ 1194.418190][T12276] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1194.425057][    C0] EXT4-fs (loop1): error count since last fsck: 1
[ 1194.425078][    C0] EXT4-fs (loop1): initial error at time 1137: ext4_iget_extra_inode:5180: inode 15
[ 1194.425106][    C0] EXT4-fs (loop1): last error at time 1137: ext4_iget_extra_inode:5180: inode 15
[ 1194.433074][T12276] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.18245: couldn't read orphan inode 15 (err -117)
[ 1194.433104][T12276] loop1: lost filesystem error report for type 5 error -117
[ 1194.455226][T12276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1194.703948][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1194.823036][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1194.917586][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1195.824743][ T5253] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1196.497618][T12354] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1197.456906][T11377] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1197.964884][T27168] hsr_slave_0: left promiscuous mode
[ 1198.071128][T27168] hsr_slave_1: left promiscuous mode
[ 1198.073486][T27168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1198.073511][T27168] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1198.122239][T27168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1198.122265][T27168] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1198.363270][T12394] loop4: detected capacity change from 0 to 32768
[ 1198.382154][T12394] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.18292 (12394)
[ 1198.384401][T27168] batadv_slave_1: left promiscuous mode
[ 1198.417727][T27168] veth1_vlan: left promiscuous mode
[ 1198.417952][T27168] veth0_vlan: left promiscuous mode
[ 1198.491057][T12394] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1198.491091][T12394] BTRFS info (device loop4): using crc32c checksum algorithm
[ 1198.813911][T12394] BTRFS info (device loop4): enabling ssd optimizations
[ 1198.813935][T12394] BTRFS info (device loop4): turning on async discard
[ 1198.813949][T12394] BTRFS info (device loop4): enabling free space tree
[ 1198.919887][T12394] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1199.348340][ T5966] Flush: task=udevd[5966] dev=loop4 state=2
[ 1199.483643][ T5966] Teardown: task=udevd[5966] dev=loop4 state=2
[ 1200.007234][T12476] Flush: task=syz.4.18326[12476] dev=loop5 state=2
[ 1200.247528][T12476] Teardown: task=syz.4.18326[12476] dev=loop5 state=2
[ 1201.349270][T27168] team0 (unregistering): Port device team_slave_0 removed
[ 1202.009915][T11377] 8021q: adding VLAN 0 to HW filter on device team0
[ 1202.127556][T11747] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1202.127819][T11747] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1202.286479][T11755] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1202.288329][T11755] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1202.566470][T12582] loop4: detected capacity change from 0 to 512
[ 1202.582618][T12582] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1202.609498][T12582] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856e01c, mo2=0102]
[ 1202.609635][T12582] System zones: 1-12
[ 1202.609925][T12582] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1203.132400][T12582] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33619980: comm syz.4.18374: invalid block
[ 1203.132434][T12582] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1203.147250][    C0] EXT4-fs (loop4): initial error at time 1146: ext4_get_branch:178: inode 11: block 33619980
[ 1203.147284][    C0] EXT4-fs (loop4): last error at time 1146: ext4_get_branch:178: inode 11: block 33619980
[ 1203.330294][T12582] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.18374: invalid indirect mapped block 2 (level 2)
[ 1203.330330][T12582] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1203.332058][T12582] EXT4-fs (loop4): 1 truncate cleaned up
[ 1203.334155][T12582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[ 1203.349699][T12582] EXT4-fs (loop4): shut down requested (1)
[ 1203.556958][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[ 1203.719689][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1203.794759][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1204.038948][T12622] loop1: detected capacity change from 0 to 4096
[ 1204.492341][T12637] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1204.622081][T12642] program syz.4.18399 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1205.365437][T27168] IPVS: stop unused estimator thread 0...
[ 1205.441860][T12666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1205.519252][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1205.586263][T11377] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1205.619662][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1206.669481][T11377] veth0_vlan: entered promiscuous mode
[ 1206.713045][T11377] veth1_vlan: entered promiscuous mode
[ 1206.863148][T12684] loop1: detected capacity change from 0 to 32768
[ 1206.987709][T12717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18431'.
[ 1206.988813][T11377] veth0_macvtap: entered promiscuous mode
[ 1207.036307][T11377] veth1_macvtap: entered promiscuous mode
[ 1207.141895][T12684] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18416'.
[ 1207.202504][T11377] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1207.337167][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1207.397590][T11377] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1207.452370][T11765] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1207.452574][T11765] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1207.452611][T11765] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1207.452644][T11765] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1207.544459][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1208.147945][T12756] loop4: detected capacity change from 0 to 1024
[ 1208.182765][T12756] EXT4-fs: Ignoring removed orlov option
[ 1208.352763][T12756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1209.083890][T12776] loop1: detected capacity change from 0 to 4096
[ 1209.634916][T11773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1209.634933][T11773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1209.723283][T12771] EXT4-fs error (device loop4): __ext4_new_inode:1287: comm syz.4.18448: failed to insert inode 16: doubly allocated?
[ 1209.796668][T12791] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1209.993692][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1210.154034][T11751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1210.154055][T11751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1210.188021][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1210.334912][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1210.565520][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1210.731910][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1210.948958][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18468'.
[ 1211.408555][T12851] loop1: detected capacity change from 0 to 512
[ 1211.411156][T12851] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1211.464463][T12851] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.18488: missing EA_INODE flag
[ 1211.464495][T12851] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[ 1211.469926][    C1] EXT4-fs (loop1): error count since last fsck: 1
[ 1211.469954][    C1] EXT4-fs (loop1): initial error at time 1153: ext4_xattr_inode_iget:441: inode 12
[ 1211.469993][    C1] EXT4-fs (loop1): last error at time 1153: ext4_xattr_inode_iget:441: inode 12
[ 1211.523076][T12851] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.18488: error while reading EA inode 12 err=-117
[ 1211.523110][T12851] loop1: lost filesystem error report for type 5 error -117
[ 1211.525150][T12851] EXT4-fs (loop1): 1 orphan inode deleted
[ 1211.568718][T12851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1211.732550][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1211.827523][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1211.962260][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1212.098242][T12880] loop4: detected capacity change from 0 to 512
[ 1212.129012][T12880] EXT4-fs error (device loop4): __ext4_iget:5533: inode #11: block 1: comm syz.4.18502: invalid block
[ 1212.129041][T12880] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1212.132546][T12880] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.18502: couldn't read orphan inode 11 (err -117)
[ 1212.132578][T12880] loop4: lost filesystem error report for type 5 error -117
[ 1212.142128][T12880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1212.232370][T12880] EXT4-fs error (device loop4): __ext4_add_entry:2412: inode #2: comm syz.4.18502: Directory hole found for htree leaf block 0
[ 1212.375939][  T199] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1212.433095][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1212.543863][  T199] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[ 1212.543894][  T199] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1212.543912][  T199] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1212.543935][  T199] usb 2-1: config 220 has no interface number 2
[ 1212.543996][  T199] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1212.544022][  T199] usb 2-1: config 220 interface 0 has no altsetting 0
[ 1212.544038][  T199] usb 2-1: config 220 interface 76 has no altsetting 0
[ 1212.544055][  T199] usb 2-1: config 220 interface 1 has no altsetting 0
[ 1212.577052][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1212.659244][  T199] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1212.659276][  T199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1212.659294][  T199] usb 2-1: Product: syz
[ 1212.659308][  T199] usb 2-1: Manufacturer: syz
[ 1212.659322][  T199] usb 2-1: SerialNumber: syz
[ 1212.705945][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1212.955124][  T199] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1212.955158][  T199] uvcvideo 2-1:220.0: No valid video chain found.
[ 1212.955216][  T199] usb 2-1: selecting invalid altsetting 0
[ 1213.027193][  T199] usb 2-1: selecting invalid altsetting 0
[ 1213.027225][  T199] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[ 1213.040638][  T199] usb 2-1: USB disconnect, device number 95
[ 1213.861041][T12947] loop1: detected capacity change from 0 to 1024
[ 1214.128495][ T5908] Flush: task=udevd[5908] dev=loop1 state=2
[ 1214.320986][ T5908] Teardown: task=udevd[5908] dev=loop1 state=2
[ 1214.841126][T12985] loop9: detected capacity change from 0 to 524287936
[ 1214.871778][T12971] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1215.416390][T13005] loop4: detected capacity change from 0 to 64
[ 1215.572115][T13005] BFS-fs: bfs_readdir(): Bad f_pos=00000001 for loop4:00000002
[ 1215.705906][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1215.797217][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1216.149910][T12985] Dev loop9: unable to read RDB block 8
[ 1216.150136][T12985]  loop9: unable to read partition table
[ 1216.150332][T12985] loop_reread_partitions: partition scan of loop9 (3Ÿž‚ŗ˜) failed (rc=-5)
[ 1216.935643][T13069] loop1: detected capacity change from 0 to 128
[ 1217.359590][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1217.473976][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1217.571967][ T5908] Flush: task=udevd[5908] dev=loop9 state=2
[ 1217.674167][ T5908] Teardown: task=udevd[5908] dev=loop9 state=2
[ 1217.851013][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18583'.
[ 1219.515675][T13131] loop1: detected capacity change from 0 to 32768
[ 1219.692971][T13131] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[ 1219.772104][ T5581] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 1219.843303][T13131] XFS (loop1): Starting recovery (logdev: internal)
[ 1219.973050][ T5581] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1219.973079][ T5581] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1219.973097][ T5581] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1219.973152][ T5581] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1219.973176][ T5581] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1219.981651][ T5581] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1219.981778][ T5581] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1219.981799][ T5581] usb 5-1: Product: syz
[ 1219.981813][ T5581] usb 5-1: Manufacturer: syz
[ 1220.105044][ T5581] cdc_wdm 5-1:1.0: skipping garbage
[ 1220.105062][ T5581] cdc_wdm 5-1:1.0: skipping garbage
[ 1220.202597][T13131] XFS (loop1): Ending recovery (logdev: internal)
[ 1220.228914][ T5581] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1220.228953][ T5581] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1220.371092][ T5801] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[ 1220.685765][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE
[ 1221.269644][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1221.528297][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1221.577318][ T5581] usb 5-1: USB disconnect, device number 104
[ 1222.892275][T13266] loop4: detected capacity change from 0 to 8192
[ 1222.971914][T13266]  loop4: AHDI p1 p2 p3 p4
[ 1223.001546][T13266] loop4: p1 start 100532223 is beyond EOD, truncated
[ 1223.045410][T13266] loop4: p3 start 1671679 is beyond EOD, truncated
[ 1223.045435][T13266] loop4: p4 size 2147155716 extends beyond EOD, truncated
[ 1223.082352][T13269] block nbd0: server does not support multiple connections per device.
[ 1223.203279][T13269] block nbd0: shutting down sockets
[ 1223.350425][ T5908] Flush: task=udevd[5908] dev=loop4 state=2
[ 1223.464824][ T5908] Teardown: task=udevd[5908] dev=loop4 state=2
[ 1223.761051][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[ 1223.766905][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[ 1224.483511][T13329] loop4: detected capacity change from 0 to 512
[ 1224.491294][T13329] EXT4-fs: Ignoring removed nobh option
[ 1224.509048][T13329] fscrypt (loop4, inode 2): Error -61 getting encryption context
[ 1224.509106][T13329] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[ 1224.510695][T13329] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.18686: inode has both inline data and extents flags
[ 1224.510725][T13329] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[ 1224.511350][T13329] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.18686: couldn't read orphan inode 13 (err -117)
[ 1224.511379][T13329] loop4: lost filesystem error report for type 5 error -117
[ 1224.539339][T13329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1224.560061][T13329] EXT4-fs (loop4): shut down requested (2)
[ 1224.694625][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1224.780624][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1224.856065][T13309] loop1: detected capacity change from 0 to 40427
[ 1224.895939][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1224.939452][T13309] F2FS-fs (loop1): invalid crc value
[ 1225.282360][T13309] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1225.575242][T13368] loop5: detected capacity change from 0 to 512
[ 1225.702235][T13309] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1226.149437][T13368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1226.259753][T11377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1226.363273][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1226.456513][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1226.632289][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18716'.
[ 1226.708742][ T5801] syz-executor: attempt to access beyond end of device
[ 1226.708742][ T5801] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[ 1226.794079][ T5801] CPU: 0 UID: 0 PID: 5801 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1226.794114][ T5801] Tainted: [L]=SOFTLOCKUP
[ 1226.794122][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1226.794133][ T5801] Call Trace:
[ 1226.794141][ T5801]  <TASK>
[ 1226.794149][ T5801]  dump_stack_lvl+0xe8/0x150
[ 1226.794184][ T5801]  f2fs_stop_checkpoint+0x3f9/0x5e0
[ 1226.794219][ T5801]  f2fs_write_end_io+0x124b/0x1710
[ 1226.794261][ T5801]  __submit_merged_bio+0x258/0x6a0
[ 1226.794289][ T5801]  ? rcu_is_watching+0x15/0xb0
[ 1226.794321][ T5801]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1226.794360][ T5801]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1226.794412][ T5801]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1226.794470][ T5801]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1226.794535][ T5801]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1226.794571][ T5801]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1226.794601][ T5801]  ? rt_mutex_slowunlock+0x4ee/0xa20
[ 1226.794626][ T5801]  ? reacquire_held_locks+0x117/0x1a0
[ 1226.794651][ T5801]  ? rt_spin_lock+0x1e0/0x400
[ 1226.794682][ T5801]  ? rt_spin_unlock+0x157/0x200
[ 1226.794711][ T5801]  ? rt_spin_unlock+0x163/0x200
[ 1226.794733][ T5801]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1226.794756][ T5801]  do_writepages+0x338/0x560
[ 1226.794787][ T5801]  ? rt_spin_unlock+0x157/0x200
[ 1226.794821][ T5801]  filemap_fdatawrite+0x1ec/0x2f0
[ 1226.794851][ T5801]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1226.794883][ T5801]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1226.794946][ T5801]  ? rt_spin_unlock+0x157/0x200
[ 1226.794975][ T5801]  ? rt_spin_unlock+0x163/0x200
[ 1226.795002][ T5801]  f2fs_sync_dirty_inodes+0x30e/0x830
[ 1226.795041][ T5801]  f2fs_write_checkpoint+0xa3d/0x2710
[ 1226.795063][ T5801]  ? __lock_acquire+0x6df/0x2e40
[ 1226.795115][ T5801]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1226.795182][ T5801]  kill_f2fs_super+0x2dd/0x700
[ 1226.795213][ T5801]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1226.795247][ T5801]  ? call_rcu+0x64b/0x8b0
[ 1226.795273][ T5801]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1226.795314][ T5801]  deactivate_locked_super+0xbc/0x110
[ 1226.795338][ T5801]  cleanup_mnt+0x3d3/0x460
[ 1226.795368][ T5801]  task_work_run+0x1d9/0x270
[ 1226.795391][ T5801]  ? __pfx_task_work_run+0x10/0x10
[ 1226.795420][ T5801]  exit_to_user_mode_loop+0x1fa/0x730
[ 1226.795439][ T5801]  ? rcu_is_watching+0x15/0xb0
[ 1226.795464][ T5801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1226.795485][ T5801]  do_syscall_64+0x353/0x580
[ 1226.795512][ T5801]  ? trace_irq_disable+0x3b/0x140
[ 1226.795535][ T5801]  ? clear_bhb_loop+0x40/0x90
[ 1226.795560][ T5801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1226.795579][ T5801] RIP: 0033:0x7f1c620af097
[ 1226.795598][ T5801] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1226.795614][ T5801] RSP: 002b:00007ffd642fa198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1226.795635][ T5801] RAX: 0000000000000000 RBX: 00007f1c621432ca RCX: 00007f1c620af097
[ 1226.795652][ T5801] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd642fa250
[ 1226.795665][ T5801] RBP: 00007ffd642fa250 R08: 00007ffd642fb250 R09: 00000000ffffffff
[ 1226.795679][ T5801] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd642fb2e0
[ 1226.795690][ T5801] R13: 00007f1c621432ca R14: 000000000011d07e R15: 00007ffd642fb320
[ 1226.795719][ T5801]  </TASK>
[ 1226.816315][ T5801] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[ 1226.816594][ T5801] CPU: 0 UID: 0 PID: 5801 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1226.816621][ T5801] Tainted: [L]=SOFTLOCKUP
[ 1226.816629][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1226.816640][ T5801] Call Trace:
[ 1226.816648][ T5801]  <TASK>
[ 1226.816656][ T5801]  dump_stack_lvl+0xe8/0x150
[ 1226.816691][ T5801]  f2fs_stop_checkpoint+0x3f9/0x5e0
[ 1226.816726][ T5801]  f2fs_write_end_io+0x124b/0x1710
[ 1226.816768][ T5801]  __submit_merged_bio+0x258/0x6a0
[ 1226.816796][ T5801]  ? rcu_is_watching+0x15/0xb0
[ 1226.816827][ T5801]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1226.816872][ T5801]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1226.816923][ T5801]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1226.816980][ T5801]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1226.817046][ T5801]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1226.817083][ T5801]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1226.817111][ T5801]  ? rt_mutex_slowunlock+0x4ee/0xa20
[ 1226.817136][ T5801]  ? reacquire_held_locks+0x117/0x1a0
[ 1226.817159][ T5801]  ? rt_spin_lock+0x1e0/0x400
[ 1226.817188][ T5801]  ? rt_spin_unlock+0x157/0x200
[ 1226.817214][ T5801]  ? rt_spin_unlock+0x163/0x200
[ 1226.817234][ T5801]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1226.817256][ T5801]  do_writepages+0x338/0x560
[ 1226.817286][ T5801]  ? rt_spin_unlock+0x157/0x200
[ 1226.817318][ T5801]  filemap_fdatawrite+0x1ec/0x2f0
[ 1226.817348][ T5801]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1226.817371][ T5801]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1226.817428][ T5801]  ? rt_spin_unlock+0x157/0x200
[ 1226.817455][ T5801]  ? rt_spin_unlock+0x163/0x200
[ 1226.817480][ T5801]  f2fs_sync_dirty_inodes+0x30e/0x830
[ 1226.817517][ T5801]  f2fs_write_checkpoint+0xa3d/0x2710
[ 1226.817539][ T5801]  ? __lock_acquire+0x6df/0x2e40
[ 1226.817591][ T5801]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1226.817664][ T5801]  kill_f2fs_super+0x2dd/0x700
[ 1226.817696][ T5801]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1226.817729][ T5801]  ? call_rcu+0x64b/0x8b0
[ 1226.817755][ T5801]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1226.817797][ T5801]  deactivate_locked_super+0xbc/0x110
[ 1226.817821][ T5801]  cleanup_mnt+0x3d3/0x460
[ 1226.817850][ T5801]  task_work_run+0x1d9/0x270
[ 1226.817880][ T5801]  ? __pfx_task_work_run+0x10/0x10
[ 1226.817911][ T5801]  exit_to_user_mode_loop+0x1fa/0x730
[ 1226.817933][ T5801]  ? rcu_is_watching+0x15/0xb0
[ 1226.817959][ T5801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1226.817980][ T5801]  do_syscall_64+0x353/0x580
[ 1226.818009][ T5801]  ? trace_irq_disable+0x3b/0x140
[ 1226.818031][ T5801]  ? clear_bhb_loop+0x40/0x90
[ 1226.818056][ T5801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1226.818074][ T5801] RIP: 0033:0x7f1c620af097
[ 1226.818093][ T5801] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1226.818110][ T5801] RSP: 002b:00007ffd642fa198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1226.818130][ T5801] RAX: 0000000000000000 RBX: 00007f1c621432ca RCX: 00007f1c620af097
[ 1226.818144][ T5801] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd642fa250
[ 1226.818157][ T5801] RBP: 00007ffd642fa250 R08: 00007ffd642fb250 R09: 00000000ffffffff
[ 1226.818170][ T5801] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd642fb2e0
[ 1226.818182][ T5801] R13: 00007f1c621432ca R14: 000000000011d07e R15: 00007ffd642fb320
[ 1226.818215][ T5801]  </TASK>
[ 1226.825937][ T5801] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[ 1228.075842][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1228.186831][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1228.622112][T13486] netlink: 1 bytes leftover after parsing attributes in process `syz.1.18720'.
[ 1228.767816][ T5810] kernel write not supported for file /sg0 (pid: 5810 comm: kworker/0:5)
[ 1229.186523][T13512] loop5: detected capacity change from 0 to 256
[ 1229.199898][T13512] exfat: Deprecated parameter 'namecase'
[ 1229.199965][T13512] exfat: Deprecated parameter 'utf8'
[ 1229.299608][T13512] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d)
[ 1229.636151][ T5908] Flush: task=udevd[5908] dev=loop5 state=2
[ 1229.728724][ T5908] Teardown: task=udevd[5908] dev=loop5 state=2
[ 1230.440131][ T6020] kernel write not supported for file /sequencer2 (pid: 6020 comm: kworker/1:5)
[ 1231.050210][T13570] loop5: detected capacity change from 0 to 2048
[ 1231.128460][T13570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1231.419754][T11377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1231.532808][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1231.629745][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1231.752583][T13602] loop5: detected capacity change from 0 to 256
[ 1231.788468][ T6020] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 1231.795137][T13602] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1231.826550][T13605] loop1: detected capacity change from 0 to 1024
[ 1231.858037][T13605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1231.891154][T13605] EXT4-fs (loop1): shut down requested (0)
[ 1231.965847][ T6020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1231.965896][ T6020] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[ 1231.965919][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1232.002493][ T6020] usb 5-1: config 0 descriptor??
[ 1232.003523][T13593] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1232.051887][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1232.163888][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1232.512404][ T6020] hid_parser_main: 31 callbacks suppressed
[ 1232.512428][ T6020] uclogic 0003:5543:0064.0019: unknown main item tag 0x0
[ 1232.512483][ T6020] uclogic 0003:5543:0064.0019: unknown main item tag 0x0
[ 1232.512526][ T6020] uclogic 0003:5543:0064.0019: unknown main item tag 0x0
[ 1232.512550][ T6020] uclogic 0003:5543:0064.0019: unknown main item tag 0x0
[ 1232.512573][ T6020] uclogic 0003:5543:0064.0019: unknown main item tag 0x0
[ 1232.512596][ T6020] uclogic 0003:5543:0064.0019: unknown main item tag 0x0
[ 1232.512620][ T6020] uclogic 0003:5543:0064.0019: unknown main item tag 0x0
[ 1232.512644][ T6020] uclogic 0003:5543:0064.0019: unknown main item tag 0x0
[ 1232.512681][ T6020] uclogic 0003:5543:0064.0019: unknown main item tag 0x0
[ 1232.512707][ T6020] uclogic 0003:5543:0064.0019: unknown main item tag 0x0
[ 1232.636893][ T6020] uclogic 0003:5543:0064.0019: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.4-1/input0
[ 1232.679280][ T6020] usb 5-1: USB disconnect, device number 105
[ 1232.893459][T13634] fido_id[13634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1233.346812][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1233.445176][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1233.460646][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18838'.
[ 1233.521383][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1233.623041][T13667] loop4: detected capacity change from 0 to 256
[ 1233.685538][T13667] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[ 1233.685564][T13667] FAT-fs (loop4): Filesystem has been set read-only
[ 1233.855540][ T5908] Flush: task=udevd[5908] dev=loop4 state=2
[ 1234.028411][ T5908] Teardown: task=udevd[5908] dev=loop4 state=2
[ 1235.024853][T13731] loop4: detected capacity change from 0 to 128
[ 1235.054887][T13731] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1235.089481][T13731] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[ 1235.089589][T13731] System zones: 1-3, 19-19, 35-36
[ 1235.119479][T13731] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 1235.272966][T13731] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[ 1235.357163][   T37] audit: type=1800 audit(1176.277:720): pid=13731 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.4.18871" name="file3" dev="loop4" ino=12 res=0 errno=0
[ 1235.537399][ T5804] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1235.711561][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1235.809254][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1236.335492][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[ 1236.529632][T13794] loop1: detected capacity change from 0 to 512
[ 1236.533418][T13794] EXT4-fs: Ignoring removed nobh option
[ 1236.549633][T13794] fscrypt (loop1, inode 2): Error -61 getting encryption context
[ 1236.549692][T13794] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[ 1236.554749][T13794] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.18899: inode has both inline data and extents flags
[ 1236.554769][T13794] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[ 1236.556302][    C1] EXT4-fs (loop1): error count since last fsck: 1
[ 1236.556322][    C1] EXT4-fs (loop1): initial error at time 1177: ext4_orphan_get:1399: inode 13
[ 1236.556348][    C1] EXT4-fs (loop1): last error at time 1177: ext4_orphan_get:1399: inode 13
[ 1236.570009][T13797] loop5: detected capacity change from 0 to 1024
[ 1236.638417][T13794] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.18899: couldn't read orphan inode 13 (err -117)
[ 1236.638448][T13794] loop1: lost filesystem error report for type 5 error -117
[ 1236.656025][T13794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1236.715340][T13794] EXT4-fs (loop1): shut down requested (2)
[ 1236.784100][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1236.988769][ T5908] Flush: task=udevd[5908] dev=loop1 state=2
[ 1237.219659][ T5908] Teardown: task=udevd[5908] dev=loop1 state=2
[ 1237.366412][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1237.545271][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1237.758037][T13841] loop5: detected capacity change from 0 to 22
[ 1237.761636][T13841] MTD: Attempt to mount non-MTD device "/dev/loop5"
[ 1237.764083][T13841] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1237.966930][ T5908] Flush: task=udevd[5908] dev=loop5 state=2
[ 1238.101921][ T5908] Teardown: task=udevd[5908] dev=loop5 state=2
[ 1239.836119][T13941] loop4: detected capacity change from 0 to 64
[ 1240.206080][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1240.298569][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1240.602866][T13974] vcan0: tx address claim with dlc 0
[ 1240.810615][T13989] loop4: detected capacity change from 0 to 256
[ 1240.947360][T13989] FAT-fs (loop4): data area starts beyond volume (32 > 0)
[ 1240.947387][T13989] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1240.953131][ T5966] Flush: task=udevd[5966] dev=loop4 state=2
[ 1240.981985][T13989] netlink: 'syz.4.18991': attribute type 11 has an invalid length.
[ 1241.040834][ T5966] Teardown: task=udevd[5966] dev=loop4 state=2
[ 1241.433610][T14023] program syz.4.19007 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1241.524830][T14029] loop5: detected capacity change from 0 to 64
[ 1242.296663][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1242.468334][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1242.772610][T14086] program syz.5.19034 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1242.993915][T14093] loop1: detected capacity change from 0 to 4096
[ 1242.999435][T14093] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[ 1243.092742][T14093] ntfs3(loop1): ino=19, mi_enum_attr
[ 1243.092773][T14093] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[ 1243.107351][T14093] ntfs3(loop1): ino=1a, mi_enum_attr
[ 1243.107496][T14093] ntfs3(loop1): ino=1a, mi_enum_attr
[ 1243.107514][T14093] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[ 1243.425285][T14115] loop4: detected capacity change from 0 to 256
[ 1243.453155][T14115] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1243.680193][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1243.967370][   T37] audit: type=1804 audit(1184.246:721): pid=14119 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.4.19051" name="/newroot/2943/bus/file1" dev="loop4" ino=1048844 res=1 errno=0
[ 1244.041986][T14129] loop5: detected capacity change from 0 to 32768
[ 1244.053547][T14129] (syz.5.19057,14129,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1244.065828][T14129] (syz.5.19057,14129,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1244.093673][T14129] JBD2: Ignoring recovery information on journal
[ 1244.153002][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1244.196347][T14129] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1244.438738][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1244.601677][T14148] netlink: 48 bytes leftover after parsing attributes in process `syz.1.19065'.
[ 1244.606378][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1244.776566][T14148] bond8: Unable to set peer notification delay as MII monitoring is disabled
[ 1244.834034][T14148] bond8 (unregistering): Released all slaves
[ 1245.089603][ T5810] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1245.247773][ T5810] usb 5-1: Using ep0 maxpacket: 8
[ 1245.250040][ T5810] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1245.250070][ T5810] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1245.250102][ T5810] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[ 1245.250125][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1245.256752][ T5810] usb 5-1: config 0 descriptor??
[ 1245.719468][ T5810] hid_parser_main: 451 callbacks suppressed
[ 1245.719493][ T5810] lua 0003:1E7D:2C2E.001A: unknown main item tag 0x7
[ 1245.719522][ T5810] lua 0003:1E7D:2C2E.001A: unknown global tag 0xe
[ 1245.719536][ T5810] lua 0003:1E7D:2C2E.001A: item 0 4 1 14 parsing failed
[ 1245.720202][ T5810] lua 0003:1E7D:2C2E.001A: parse failed
[ 1245.720271][ T5810] lua 0003:1E7D:2C2E.001A: probe with driver lua failed with error -22
[ 1245.944381][ T6189] usb 5-1: USB disconnect, device number 106
[ 1246.117960][T11377] ocfs2: Unmounting device (7,5) on (node local)
[ 1246.208657][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1246.285146][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1246.699029][T14231] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.19106'.
[ 1247.332559][T27168] batman_adv: batadv1: IGMP Querier disappeared - multicast optimizations disabled
[ 1247.991458][T14295] loop4: detected capacity change from 0 to 512
[ 1248.173794][T14295] EXT4-fs (loop4): 1 orphan inode deleted
[ 1248.176598][T14295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1248.496589][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1248.623546][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1248.711279][T14326] sch_fq: defrate 7 ignored.
[ 1248.724051][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1249.146934][T14350] loop1: detected capacity change from 0 to 256
[ 1249.151352][T14350] vfat: Bad value for 'fmask'
[ 1249.166644][ T5908] Flush: task=udevd[5908] dev=loop1 state=2
[ 1249.257573][ T5908] Teardown: task=udevd[5908] dev=loop1 state=2
[ 1250.083097][ T5574] kernel read not supported for file /media3 (pid: 5574 comm: kworker/0:1)
[ 1250.193338][T14404] loop4: detected capacity change from 0 to 736
[ 1250.612310][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1250.662501][T14419] netlink: 100 bytes leftover after parsing attributes in process `syz.5.19196'.
[ 1250.690062][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1252.021220][T14473] loop1: detected capacity change from 0 to 128
[ 1252.091387][T14473] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 1252.095064][T14473] ext4 filesystem being mounted at /2948/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1252.148857][   T37] audit: type=1800 audit(2000000000.093:722): pid=14473 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.19219" name="file1" dev="loop1" ino=12 res=0 errno=0
[ 1252.568392][ T5801] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1252.578072][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1252.731773][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1253.227546][T14498] loop4: detected capacity change from 0 to 32768
[ 1253.235758][ T5810] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1253.262757][T14498] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1253.328407][T14498] XFS (loop4): Ending clean mount
[ 1253.409629][ T5810] usb 2-1: Using ep0 maxpacket: 8
[ 1253.411858][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1253.411904][ T5810] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1253.411926][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1253.454598][ T5810] usb 2-1: config 0 descriptor??
[ 1253.595225][ T5804] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1253.785185][ T5810] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1254.530093][ T5574] usb 2-1: USB disconnect, device number 96
[ 1254.572724][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1254.691413][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19263'.
[ 1254.691446][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19263'.
[ 1254.711566][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1255.777503][T14622] loop4: detected capacity change from 0 to 512
[ 1255.785393][T14622] EXT4-fs: Ignoring removed oldalloc option
[ 1255.787937][T14622] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1255.815533][T14622] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.19287: inode has both inline data and extents flags
[ 1255.815566][T14622] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1255.815961][T14622] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.19287: couldn't read orphan inode 15 (err -117)
[ 1255.815989][T14622] loop4: lost filesystem error report for type 5 error -117
[ 1255.868293][T14622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1255.985433][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1256.066341][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1256.152762][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1256.536768][   T37] audit: type=1326 audit(2000000004.190:723): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14656 comm="syz.1.19303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1256.536819][   T37] audit: type=1326 audit(2000000004.190:724): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14656 comm="syz.1.19303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1256.597747][   T37] audit: type=1326 audit(2000000004.256:725): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14656 comm="syz.1.19303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1256.597796][   T37] audit: type=1326 audit(2000000004.256:726): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14656 comm="syz.1.19303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1256.597836][   T37] audit: type=1326 audit(2000000004.256:727): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14656 comm="syz.1.19303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1256.603009][   T37] audit: type=1326 audit(2000000004.256:728): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14656 comm="syz.1.19303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1256.603489][   T37] audit: type=1326 audit(2000000004.265:729): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14656 comm="syz.1.19303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1256.604076][   T37] audit: type=1326 audit(2000000004.265:730): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14656 comm="syz.1.19303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1256.606082][   T37] audit: type=1326 audit(2000000004.265:731): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14656 comm="syz.1.19303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1257.501057][ T5574] kernel read not supported for file /dsp (pid: 5574 comm: kworker/0:1)
[ 1257.857452][T14727] loop1: detected capacity change from 0 to 128
[ 1257.859928][T14727] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1257.862329][T14727] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1258.014839][T11760] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1258.111562][ T5908] Flush: task=udevd[5908] dev=loop1 state=2
[ 1258.182927][T14743] loop5: detected capacity change from 0 to 64
[ 1258.317231][ T5908] Teardown: task=udevd[5908] dev=loop1 state=2
[ 1258.727737][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1258.816084][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1258.938028][T14769] loop5: detected capacity change from 0 to 64
[ 1259.173255][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1259.329681][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1259.381642][ T5810] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1259.541472][ T5810] usb 2-1: Using ep0 maxpacket: 8
[ 1259.543802][ T5810] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 1259.547549][ T5810] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 1259.547589][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1259.547608][ T5810] usb 2-1: Product: syz
[ 1259.547622][ T5810] usb 2-1: Manufacturer: syz
[ 1259.547636][ T5810] usb 2-1: SerialNumber: syz
[ 1259.609923][T14801] loop4: detected capacity change from 0 to 128
[ 1259.632232][T14801] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1259.632295][T14801] hpfs: filesystem error: improperly stopped
[ 1259.632309][T14801] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1259.632324][T14801] hpfs: You really don't want any checks? You are crazy...
[ 1259.634161][ T5810] usb 2-1: config 0 descriptor??
[ 1259.698445][ T5810] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 1259.749016][T14801] hpfs: hpfs_map_sector(): read error
[ 1259.749032][T14801] hpfs: code page support is disabled
[ 1259.749273][T14801] hpfs: hpfs_map_4sectors(): unaligned read
[ 1259.749368][T14801] hpfs: hpfs_map_4sectors(): unaligned read
[ 1259.749379][T14801] hpfs: filesystem error: unable to find root dir
[ 1259.878629][ T5810] gspca_zc3xx: reg_w_i err -71
[ 1259.908902][T14813] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19378'.
[ 1259.928214][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1260.026468][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1260.119089][T14824] loop4: detected capacity change from 0 to 512
[ 1260.180714][T14824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1260.180794][T14824] ext4 filesystem being mounted at /2977/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1260.327381][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1260.467375][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1260.503619][ T5810] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 1260.503699][ T5810] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 1260.529184][ T5810] usb 2-1: USB disconnect, device number 97
[ 1260.557275][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1261.113186][ T6189] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1261.284143][ T6189] usb 2-1: Using ep0 maxpacket: 8
[ 1261.286500][ T6189] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1261.286523][ T6189] usb 2-1: config 0 has no interface number 0
[ 1261.286565][ T6189] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1261.286591][ T6189] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1261.286625][ T6189] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1261.286648][ T6189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1261.362884][ T6189] usb 2-1: config 0 descriptor??
[ 1261.383803][ T6189] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1261.584533][T14859] iowarrior 2-1:0.1: Error -90 while submitting URB
[ 1261.594782][ T6189] usb 2-1: USB disconnect, device number 98
[ 1261.787203][T14903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19419'.
[ 1261.787228][T14903] netlink: 47 bytes leftover after parsing attributes in process `syz.4.19419'.
[ 1262.158933][T14924] loop5: detected capacity change from 0 to 128
[ 1262.218325][T14924] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1262.220815][T14924] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1262.289759][T14924] fscrypt (loop5, inode 12): Unsupported encryption flags (0x08)
[ 1262.401653][T11377] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1262.519051][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1262.707531][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1263.268320][T14970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19451'.
[ 1264.429044][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19475'.
[ 1264.429079][T15027] netlink: 'syz.5.19475': attribute type 10 has an invalid length.
[ 1264.429094][T15027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19475'.
[ 1264.468446][T15027] geneve2: entered promiscuous mode
[ 1264.468470][T15027] geneve2: entered allmulticast mode
[ 1264.925624][T15047] tipc: Enabling of bearer <ūth:g> rejected, media not registered
[ 1264.942393][T15051] netlink: 'syz.5.19487': attribute type 5 has an invalid length.
[ 1265.317651][T15073] loop1: detected capacity change from 0 to 64
[ 1265.606722][T15082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19503'.
[ 1265.606744][T15082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19503'.
[ 1265.655559][T15073] gfs2: path_lookup on c::: returned error -2
[ 1265.798370][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1265.893239][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1266.655012][T15134] loop5: detected capacity change from 0 to 256
[ 1266.704334][T15134] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[ 1266.801448][ T6020] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1266.863141][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1266.961517][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1266.978332][ T6020] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[ 1266.978359][ T6020] usb 5-1: config 220 has 0 interfaces, different from the descriptor's value: 184
[ 1266.978395][ T6020] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[ 1266.978417][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1267.082868][T15156] loop5: detected capacity change from 0 to 2048
[ 1267.117704][T15156] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1267.267446][ T6020] usb 5-1: USB disconnect, device number 107
[ 1267.301822][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1267.412765][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1267.623517][ T6189] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 1267.786630][ T6189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1267.786663][ T6189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1267.786708][ T6189] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[ 1267.786730][ T6189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1267.839001][ T6189] usb 2-1: config 0 descriptor??
[ 1267.883851][ T6189] smsusb:smsusb_probe: board id=8, interface number 0
[ 1267.884847][ T6189] smsusb:smsusb_probe: Device initialized with return code -19
[ 1268.471736][T15205] input: syz1 as /devices/virtual/input/input40
[ 1268.996441][T15193] loop5: detected capacity change from 0 to 131072
[ 1269.026395][T15193] F2FS-fs (loop5): Invalid log sectorsize (67108873)
[ 1269.026418][T15193] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1269.056227][T15193] F2FS-fs (loop5): invalid crc value
[ 1269.160925][ T5581] usb 2-1: USB disconnect, device number 99
[ 1269.207461][T15193] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1269.233468][T15193] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 1269.233497][T15193] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[ 1270.999271][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1271.100282][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1272.203927][T15341] loop1: detected capacity change from 0 to 128
[ 1272.389100][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1272.466567][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1272.902109][T15364] loop5: detected capacity change from 0 to 4096
[ 1273.194866][ T5581] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1273.353771][ T5581] usb 5-1: Using ep0 maxpacket: 32
[ 1273.357567][ T5581] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1273.357599][ T5581] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1273.357637][ T5581] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1273.357661][ T5581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1273.414725][ T5581] usb 5-1: config 0 descriptor??
[ 1273.419349][ T5908] Flush: task=udevd[5908] dev=loop5 state=2
[ 1273.438623][ T5581] hub 5-1:0.0: USB hub found
[ 1273.536146][ T5908] Teardown: task=udevd[5908] dev=loop5 state=2
[ 1273.662300][ T5581] hub 5-1:0.0: 1 port detected
[ 1273.723867][T15403] loop1: detected capacity change from 0 to 512
[ 1273.933264][T15411] loop5: detected capacity change from 0 to 512
[ 1273.991490][T15403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1273.991625][T15403] ext4 filesystem being mounted at /3004/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1274.046599][T15411] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.19659: ea_inode with extended attributes
[ 1274.046632][T15411] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1274.048284][    C0] EXT4-fs (loop5): error count since last fsck: 1
[ 1274.048303][    C0] EXT4-fs (loop5): initial error at time 2000000020: ext4_xattr_inode_iget:441: inode 11
[ 1274.048331][    C0] EXT4-fs (loop5): last error at time 2000000020: ext4_xattr_inode_iget:441: inode 11
[ 1274.090513][T15411] EXT4-fs (loop5): Remounting filesystem read-only
[ 1274.090696][T15411] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -30)
[ 1274.090773][T15411] EXT4-fs (loop5): 1 orphan inode deleted
[ 1274.261503][T15411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1274.281694][ T5581] usb 5-1: USB disconnect, device number 108
[ 1274.502949][T11377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1274.539241][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1274.718397][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1275.110589][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1275.278335][T15460] macvlan2: entered promiscuous mode
[ 1275.278356][T15460] bridge0: entered promiscuous mode
[ 1275.357854][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1275.686418][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1275.790258][   T37] kauditd_printk_skb: 1 callbacks suppressed
[ 1275.790277][   T37] audit: type=1326 audit(2000000022.206:733): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15473 comm="syz.1.19682" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1275.790439][   T37] audit: type=1326 audit(2000000022.206:734): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15473 comm="syz.1.19682" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1275.796336][   T37] audit: type=1326 audit(2000000022.215:735): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15473 comm="syz.1.19682" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1275.798043][   T37] audit: type=1326 audit(2000000022.215:736): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15473 comm="syz.1.19682" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1275.798089][   T37] audit: type=1326 audit(2000000022.215:737): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15473 comm="syz.1.19682" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1275.991827][T15442] loop5: detected capacity change from 0 to 32768
[ 1276.253409][ T5581] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1276.414737][ T5581] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1276.414763][ T5581] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1276.414820][ T5581] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1276.414848][ T5581] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1276.419442][ T5581] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[ 1276.419470][ T5581] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1276.419490][ T5581] usb 5-1: Product: syz
[ 1276.419504][ T5581] usb 5-1: Manufacturer: syz
[ 1276.419518][ T5581] usb 5-1: SerialNumber: syz
[ 1276.480239][ T5908] Flush: task=udevd[5908] dev=loop5 state=2
[ 1276.572062][ T5908] Teardown: task=udevd[5908] dev=loop5 state=2
[ 1276.794535][ T5581] usb 5-1: 0:2 : does not exist
[ 1276.916099][ T5581] usb 5-1: USB disconnect, device number 109
[ 1277.057833][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1277.572170][T15532] loop4: detected capacity change from 0 to 2048
[ 1277.621148][T15532] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1277.848076][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1277.930785][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1278.057799][T15513] loop1: detected capacity change from 0 to 40427
[ 1278.124398][T15513] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[ 1278.124426][T15513] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1278.145130][T15513] F2FS-fs (loop1): invalid crc value
[ 1278.475277][T15513] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1279.020453][T15513] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1279.020483][T15513] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1279.246626][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19752'.
[ 1279.246839][T15602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19752'.
[ 1279.380883][T15608] loop4: detected capacity change from 0 to 512
[ 1279.390048][T15608] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1279.423541][T15608] EXT4-fs (loop4): 1 truncate cleaned up
[ 1279.435760][T15608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1279.592839][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1279.707286][ T5908] Flush: task=udevd[5908] dev=loop4 state=2
[ 1279.918200][ T5908] Teardown: task=udevd[5908] dev=loop4 state=2
[ 1280.417633][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1280.517423][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1280.758953][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19778'.
[ 1281.023508][T15674] loop5: detected capacity change from 0 to 1024
[ 1281.028279][T15674] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1281.063969][T15674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1281.064079][T15674] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1281.465514][T11377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1281.583548][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1281.682249][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1282.248687][ T5810] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1282.409238][ T5810] usb 6-1: Using ep0 maxpacket: 8
[ 1282.411528][ T5810] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1282.411565][ T5810] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1282.411603][ T5810] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1282.411631][ T5810] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1282.411656][ T5810] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1282.411682][ T5810] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1282.411708][ T5810] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1282.411735][ T5810] usb 6-1: config 168 interface 0 has no altsetting 0
[ 1282.412974][ T5810] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1282.413009][ T5810] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1282.413055][ T5810] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1282.413082][ T5810] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1282.413107][ T5810] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1282.413132][ T5810] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1282.413158][ T5810] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1282.413185][ T5810] usb 6-1: config 168 interface 0 has no altsetting 0
[ 1282.414246][ T5810] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1282.414281][ T5810] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1282.414319][ T5810] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1282.414345][ T5810] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1282.414370][ T5810] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1282.414396][ T5810] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1282.414422][ T5810] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1282.414447][ T5810] usb 6-1: config 168 interface 0 has no altsetting 0
[ 1282.558134][ T5810] usb 6-1: string descriptor 0 read error: -22
[ 1282.558268][ T5810] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1282.558291][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1282.809987][ T5810] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1283.075763][ T5810] usb 6-1: USB disconnect, device number 2
[ 1283.526436][T15784] loop1: detected capacity change from 0 to 32768
[ 1283.542895][T15784] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.19833 (15784)
[ 1283.549446][T15784] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1283.549494][T15784] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1283.779845][T11775] BTRFS warning (device loop1): checksum verify failed on logical 5255168 mirror 1 wanted 0xfb1f6e020f432298b4a52da632de437bf5385334fdecf5c029d88fb87c749c2a found 0x140be31cd0049a5442d4c48d978a5a0ce1ce8a71948254892e434acf52f9fd0b level 1
[ 1283.780013][T15784] BTRFS error (device loop1): failed to read fs tree: -5
[ 1283.957970][T15784] BTRFS error (device loop1): open_ctree failed: -5
[ 1284.244771][ T5908] Flush: task=udevd[5908] dev=loop1 state=2
[ 1284.325216][T15820] program syz.1.19843 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1284.461808][ T5908] Teardown: task=udevd[5908] dev=loop1 state=2
[ 1285.399862][T15874] netlink: 'syz.5.19867': attribute type 14 has an invalid length.
[ 1285.508921][ T5581] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1285.722858][ T5581] usb 2-1: Using ep0 maxpacket: 16
[ 1285.725214][ T5581] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1285.725238][ T5581] usb 2-1: config 0 has no interface number 0
[ 1285.725313][ T5581] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1285.725338][ T5581] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1285.725436][ T5581] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[ 1285.725457][ T5581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1285.734736][ T5581] usb 2-1: config 0 descriptor??
[ 1286.223886][ T5581] hid (null): unknown global tag 0xc
[ 1286.223910][ T5581] hid (null): unknown global tag 0xe
[ 1286.223945][ T5581] hid (null): report_id 3323596431 is invalid
[ 1286.223961][ T5581] hid (null): unknown global tag 0xe
[ 1286.223995][ T5581] hid (null): unknown global tag 0xe
[ 1286.224020][ T5581] hid (null): unknown global tag 0xe
[ 1286.224077][ T5581] hid (null): unknown global tag 0xd
[ 1286.224164][ T5581] hid (null): unknown global tag 0x63
[ 1286.274068][ T5581] hid (null): unknown global tag 0xc
[ 1286.286264][ T5581] hid (null): unknown global tag 0xe4
[ 1286.286290][ T5581] hid (null): usage index exceeded
[ 1286.508584][ T6189] usb 2-1: USB disconnect, device number 100
[ 1289.341044][T16071] loop4: detected capacity change from 0 to 2048
[ 1289.401808][T16071] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1289.543963][T16071] syz.4.19959: attempt to access beyond end of device
[ 1289.543963][T16071] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[ 1289.545185][T16084] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1289.839378][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1289.925494][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1290.038829][T16103] comedi comedi1: 8255: I/O base address not correctly aligned
[ 1290.313639][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19982'.
[ 1290.313673][T16115] netlink: 'syz.4.19982': attribute type 3 has an invalid length.
[ 1290.414282][T16119] program syz.5.19983 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1290.498406][T16125] loop4: detected capacity change from 0 to 256
[ 1290.821054][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1290.897042][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1291.069803][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1291.348734][T16163] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[ 1291.348761][T16163] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1291.599898][T16178] loop4: detected capacity change from 0 to 256
[ 1291.661146][T16178] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[ 1291.661172][T16178] FAT-fs (loop4): Filesystem has been set read-only
[ 1291.691264][T16163] vhci_hcd vhci_hcd.0: Device attached
[ 1291.731827][ T6189] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1291.785230][ T5775] vhci_hcd vhci_hcd.1: vhci_device speed not set
[ 1291.810191][ T5908] Flush: task=udevd[5908] dev=loop4 state=2
[ 1291.869732][ T5775] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[ 1291.952489][ T6189] usb 2-1: Using ep0 maxpacket: 16
[ 1292.179010][T16155] loop5: detected capacity change from 0 to 32768
[ 1292.505598][T16155] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1293.338236][ T6189] usb 2-1: config 0 has no interfaces?
[ 1293.379692][ T6189] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[ 1293.379722][ T6189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1293.379741][ T6189] usb 2-1: Product: syz
[ 1293.379755][ T6189] usb 2-1: Manufacturer: syz
[ 1293.379770][ T6189] usb 2-1: SerialNumber: syz
[ 1293.384861][ T6189] usb 2-1: config 0 descriptor??
[ 1293.433808][ T5908] Teardown: task=udevd[5908] dev=loop4 state=2
[ 1293.517199][T16155] XFS (loop5): Ending clean mount
[ 1293.650489][ T6189] usb 2-1: USB disconnect, device number 101
[ 1293.681926][T16164] usbip_core: unknown command
[ 1293.681938][T16164] vhci_hcd: unknown pdu 0
[ 1293.681957][T16164] usbip_core: unknown command
[ 1293.738395][T16234] loop4: detected capacity change from 0 to 512
[ 1293.857590][T16234] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.4.20033: corrupted xattr block 95: invalid header
[ 1293.857627][T16234] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1293.858070][    C0] EXT4-fs (loop4): error count since last fsck: 1
[ 1293.858087][    C0] EXT4-fs (loop4): initial error at time 2000000039: ext4_expand_extra_isize_ea:2810: inode 11
[ 1293.858110][    C0] EXT4-fs (loop4): last error at time 2000000039: ext4_expand_extra_isize_ea:2810: inode 11
[ 1293.863522][T11765] vhci_hcd vhci_hcd.1: stop threads
[ 1293.872569][T11765] vhci_hcd vhci_hcd.1: release socket
[ 1293.873392][T11765] vhci_hcd vhci_hcd.1: disconnect device
[ 1293.925808][T16234] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.20033: bg 0: block 7: invalid block bitmap
[ 1293.925841][T16234] loop4: lost filesystem error report for type 5 error -117
[ 1293.926372][T16234] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem
[ 1293.926394][T16234] loop4: lost filesystem error report for type 5 error -117
[ 1293.926893][T16234] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.20033: corrupted xattr block 95: invalid header
[ 1293.926925][T16234] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1294.057878][T16234] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117)
[ 1294.057969][T16234] EXT4-fs (loop4): 1 orphan inode deleted
[ 1294.060758][T16234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1294.129594][T16234] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.20033: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=196732, size=1024 fake=0
[ 1294.283082][T11377] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1294.358084][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1294.429020][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1294.664649][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1295.126194][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1295.378776][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1297.648804][T16355] loop1: detected capacity change from 0 to 32768
[ 1297.690320][T16355] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.20088 (16355)
[ 1297.821449][T16355] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1297.821482][T16355] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1298.032658][T16355] BTRFS info (device loop1): enabling ssd optimizations
[ 1298.032676][T16355] BTRFS info (device loop1): turning on sync discard
[ 1298.032685][T16355] BTRFS info (device loop1): enabling free space tree
[ 1298.035217][T16409] loop4: detected capacity change from 0 to 128
[ 1298.063257][T16409] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1298.063289][T16409] hpfs: filesystem error: improperly stopped
[ 1298.063302][T16409] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1298.063317][T16409] hpfs: You really don't want any checks? You are crazy...
[ 1298.063328][T16409] hpfs: Code page index out of array
[ 1298.063335][T16409] hpfs: code page support is disabled
[ 1298.063602][T16409] hpfs: hpfs_map_4sectors(): unaligned read
[ 1298.303077][T16409] hpfs: hpfs_map_4sectors(): unaligned read
[ 1298.303093][T16409] hpfs: filesystem error: unable to find root dir
[ 1298.502703][ T5801] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1298.537586][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1298.638548][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1298.915332][ T5775] vhci_hcd vhci_hcd.1: vhci_device speed not set
[ 1299.217621][ T5908] Flush: task=udevd[5908] dev=loop1 state=2
[ 1299.376876][ T5908] Teardown: task=udevd[5908] dev=loop1 state=2
[ 1300.536700][T16497] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1300.736048][ T5775] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1300.927117][ T5775] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1300.927148][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1300.932228][ T5775] usb 2-1: config 0 descriptor??
[ 1300.952042][ T5775] cp210x 2-1:0.0: cp210x converter detected
[ 1301.586197][T16538] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1301.586376][T16538] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1301.660681][ T5775] usb 2-1: cp210x converter now attached to ttyUSB0
[ 1301.815371][ T5782] usb 2-1: USB disconnect, device number 102
[ 1301.858166][ T5782] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1302.020646][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[ 1302.071474][ T5782] cp210x 2-1:0.0: device disconnected
[ 1305.428753][T16701] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20244'.
[ 1305.476151][ T5782] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1305.650228][ T5782] usb 6-1: Using ep0 maxpacket: 32
[ 1305.652199][ T5782] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[ 1305.652224][ T5782] usb 6-1: config 0 has no interface number 0
[ 1305.652267][ T5782] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[ 1305.652291][ T5782] usb 6-1: config 0 interface 196 has no altsetting 0
[ 1305.658231][ T5782] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[ 1305.658259][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1305.658278][ T5782] usb 6-1: Product: syz
[ 1305.658292][ T5782] usb 6-1: Manufacturer: syz
[ 1305.658308][ T5782] usb 6-1: SerialNumber: syz
[ 1305.676760][ T5782] usb 6-1: config 0 descriptor??
[ 1305.683847][T16688] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1306.493272][ T5782] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[ 1306.493598][ T5782] ipheth 6-1:0.196: probe with driver ipheth failed with error -71
[ 1306.512495][ T5782] usb 6-1: USB disconnect, device number 3
[ 1306.748376][T16755] loop1: detected capacity change from 0 to 256
[ 1306.767995][T16755] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[ 1306.801232][   T37] audit: type=1800 audit(2000000051.213:738): pid=16755 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.20270" name="file2" dev="loop1" ino=1048848 res=0 errno=0
[ 1306.899868][T16758] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff)
[ 1307.023785][T16762] program syz.4.20273 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1307.802587][T16787] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1308.055476][ T5574] usb 5-1: new full-speed USB device number 110 using dummy_hcd
[ 1308.134065][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1308.216046][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1308.347824][ T5574] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1308.349696][ T5574] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1308.349729][ T5574] usb 5-1: can't read configurations, error -71
[ 1308.627498][T16782] loop5: detected capacity change from 0 to 32768
[ 1308.701773][T16782] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1308.759186][T16782] XFS (loop5): Ending clean mount
[ 1308.912701][T11377] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1309.669121][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1309.808963][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1309.835221][   T37] audit: type=1326 audit(2000000054.038:739): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16875 comm="syz.4.20326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1309.835272][   T37] audit: type=1326 audit(2000000054.038:740): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16875 comm="syz.4.20326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1309.835314][   T37] audit: type=1326 audit(2000000054.056:741): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16875 comm="syz.4.20326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1309.835352][   T37] audit: type=1326 audit(2000000054.056:742): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16875 comm="syz.4.20326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1309.835392][   T37] audit: type=1326 audit(2000000054.056:743): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16875 comm="syz.4.20326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1309.836922][   T37] audit: type=1326 audit(2000000054.056:744): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16875 comm="syz.4.20326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1309.917271][   T37] audit: type=1326 audit(2000000054.131:745): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16875 comm="syz.4.20326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1309.917324][   T37] audit: type=1326 audit(2000000054.131:746): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16875 comm="syz.4.20326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9ac2e6dbc2 code=0x7ffc0000
[ 1309.917362][   T37] audit: type=1326 audit(2000000054.131:747): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16875 comm="syz.4.20326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9ac2e6dc57 code=0x7ffc0000
[ 1311.302733][T16914] program syz.1.20343 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1311.507488][T16926] loop5: detected capacity change from 0 to 128
[ 1311.513287][T16926] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1311.561901][T16926] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1311.783985][T11760] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1311.875439][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1312.012267][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1312.294759][T16948] input: syz0 as /devices/virtual/input/input41
[ 1313.420216][T17011] loop5: detected capacity change from 0 to 64
[ 1313.722454][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1313.820254][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1313.949843][T11384] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[ 1313.949862][T11384] CPU: 0 UID: 0 PID: 11384 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1313.949879][T11384] Tainted: [L]=SOFTLOCKUP
[ 1313.949883][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1313.949891][T11384] Workqueue: hci4 hci_rx_work
[ 1313.949910][T11384] Call Trace:
[ 1313.949914][T11384]  <TASK>
[ 1313.949920][T11384]  dump_stack_lvl+0xe8/0x150
[ 1313.949939][T11384]  sysfs_create_dir_ns+0x271/0x2a0
[ 1313.949952][T11384]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1313.949967][T11384]  ? rt_spin_unlock+0x163/0x200
[ 1313.949983][T11384]  kobject_add_internal+0x62c/0xce0
[ 1313.949999][T11384]  kobject_add+0x163/0x240
[ 1313.950009][T11384]  ? rt_spin_unlock+0x157/0x200
[ 1313.950025][T11384]  ? __pfx_kobject_add+0x10/0x10
[ 1313.950040][T11384]  ? get_device_parent+0x370/0x3a0
[ 1313.950058][T11384]  device_add+0x3fa/0xb80
[ 1313.950074][T11384]  hci_conn_add_sysfs+0xd5/0x210
[ 1313.950090][T11384]  le_conn_complete_evt+0xfef/0x1580
[ 1313.950107][T11384]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1313.950119][T11384]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1313.950135][T11384]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1313.950150][T11384]  ? rt_mutex_slowunlock+0x219/0x460
[ 1313.950163][T11384]  ? skb_pull_data+0xf0/0x200
[ 1313.950177][T11384]  hci_le_conn_complete_evt+0x187/0x470
[ 1313.950192][T11384]  hci_event_packet+0x67a/0xf10
[ 1313.950214][T11384]  ? reacquire_held_locks+0x117/0x1a0
[ 1313.950232][T11384]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1313.950242][T11384]  ? __pfx_hci_event_packet+0x10/0x10
[ 1313.950257][T11384]  ? rt_spin_unlock+0x157/0x200
[ 1313.950275][T11384]  ? hci_send_to_monitor+0xe2/0x590
[ 1313.950289][T11384]  hci_rx_work+0x3ee/0x1020
[ 1313.950307][T11384]  ? process_one_work+0x7fd/0x1480
[ 1313.950322][T11384]  process_one_work+0xaaf/0x1480
[ 1313.950347][T11384]  ? __pfx_process_one_work+0x10/0x10
[ 1313.950359][T11384]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1313.950381][T11384]  ? assign_work+0x3cf/0x5d0
[ 1313.950397][T11384]  worker_thread+0xb05/0x10d0
[ 1313.950417][T11384]  ? __kthread_parkme+0x71/0x1f0
[ 1313.950439][T11384]  kthread+0x388/0x470
[ 1313.950449][T11384]  ? __pfx_worker_thread+0x10/0x10
[ 1313.950462][T11384]  ? __pfx_kthread+0x10/0x10
[ 1313.950473][T11384]  ret_from_fork+0x514/0xb70
[ 1313.950486][T11384]  ? __pfx_ret_from_fork+0x10/0x10
[ 1313.950497][T11384]  ? __switch_to+0xc89/0x1420
[ 1313.950513][T11384]  ? __pfx_kthread+0x10/0x10
[ 1313.950524][T11384]  ret_from_fork_asm+0x1a/0x30
[ 1313.950543][T11384]  </TASK>
[ 1313.950562][T11384] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1313.950587][T11384] Bluetooth: hci4: failed to register connection device
[ 1314.904412][T17075] loop5: detected capacity change from 0 to 2048
[ 1315.021087][T17075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 1315.065654][T17075] EXT4-fs (loop5): shut down requested (2)
[ 1315.214942][T11377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[ 1315.233023][T17094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20425'.
[ 1315.305541][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1315.334301][T17094] IPv6: sit2: Disabled Multicast RS
[ 1315.341605][T17094] sit2: entered allmulticast mode
[ 1315.412972][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1315.748786][T17116] loop1: detected capacity change from 0 to 1024
[ 1315.764182][T17116] EXT4-fs: Ignoring removed bh option
[ 1315.786847][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20438'.
[ 1315.850658][T17116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1316.016582][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1316.167951][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1316.359822][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1316.969782][T17155] loop1: detected capacity change from 0 to 4096
[ 1316.999831][T17155] ntfs3(loop1): Primary boot: invalid index size -57.
[ 1317.000032][T17155] ntfs3(loop1): try to read out of volume at offset 0x1ffe00
[ 1317.025992][T17165] loop4: detected capacity change from 0 to 512
[ 1317.247161][T17165] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1317.279480][T17165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e01c, mo2=0102]
[ 1317.279607][T17165] System zones: 1-12
[ 1317.279898][T17165] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1317.332677][T17165] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.20458: invalid indirect mapped block 2 (level 2)
[ 1317.332714][T17165] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1317.335832][    C0] EXT4-fs (loop4): error count since last fsck: 1
[ 1317.335849][    C0] EXT4-fs (loop4): initial error at time 2000000061: ext4_free_branches:1023: inode 11
[ 1317.335873][    C0] EXT4-fs (loop4): last error at time 2000000061: ext4_free_branches:1023: inode 11
[ 1317.376856][T17165] EXT4-fs (loop4): 1 truncate cleaned up
[ 1317.383731][T17165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[ 1317.438509][T17165] EXT4-fs (loop4): shut down requested (1)
[ 1317.472136][ T5966] Flush: task=udevd[5966] dev=loop1 state=2
[ 1317.705467][T17165] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.20458: error -EUCLEAN reading directory block
[ 1317.712849][ T5966] Teardown: task=udevd[5966] dev=loop1 state=2
[ 1317.882628][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[ 1318.024231][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1318.150482][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1318.535196][   T37] kauditd_printk_skb: 304 callbacks suppressed
[ 1318.535215][   T37] audit: type=1326 audit(2000000062.194:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17215 comm="syz.1.20484" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1318.535340][   T37] audit: type=1326 audit(2000000062.194:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17215 comm="syz.1.20484" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1318.539569][   T37] audit: type=1326 audit(2000000062.194:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17215 comm="syz.1.20484" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1318.539786][   T37] audit: type=1326 audit(2000000062.194:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17215 comm="syz.1.20484" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1318.540089][   T37] audit: type=1326 audit(2000000062.194:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17215 comm="syz.1.20484" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1318.540189][   T37] audit: type=1326 audit(2000000062.194:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17215 comm="syz.1.20484" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1318.543514][   T37] audit: type=1326 audit(2000000062.204:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17215 comm="syz.1.20484" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1318.544742][   T37] audit: type=1326 audit(2000000062.204:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17215 comm="syz.1.20484" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1318.546650][   T37] audit: type=1326 audit(2000000062.204:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17215 comm="syz.1.20484" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1318.547477][   T37] audit: type=1326 audit(2000000062.204:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17215 comm="syz.1.20484" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c620ade59 code=0x7ffc0000
[ 1319.077475][ T5574] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1319.259212][ T5574] usb 2-1: Using ep0 maxpacket: 32
[ 1319.263742][ T5574] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 1319.263770][ T5574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1319.263790][ T5574] usb 2-1: Product: syz
[ 1319.263803][ T5574] usb 2-1: Manufacturer: syz
[ 1319.263817][ T5574] usb 2-1: SerialNumber: syz
[ 1319.270852][ T5574] usb 2-1: config 0 descriptor??
[ 1319.451722][ T5574] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 1319.451836][ T5574] dvb-usb: bulk message failed: -22 (4/0)
[ 1319.451854][ T5574] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1319.451979][ T5574] dvb-usb: bulk message failed: -22 (5/0)
[ 1319.451992][ T5574] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1319.496154][T17218] m920x_read = error: -19
[ 1319.853642][ T5574] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1319.854411][ T5574] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 1319.854471][ T5574] usb 2-1: media controller created
[ 1319.877465][ T5574] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1320.135956][ T5574] usb 2-1: selecting invalid altsetting 3
[ 1320.135977][ T5574] ttusb2: set interface to alts=3 failed
[ 1320.305077][ T5574] DVB: Unable to find symbol tda10086_attach()
[ 1320.305093][ T5574] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 1320.305969][ T5574] dvb-usb: bulk message failed: -22 (4/0)
[ 1320.305989][ T5574] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1320.306123][ T5574] dvb-usb: bulk message failed: -22 (5/0)
[ 1320.306137][ T5574] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1320.306201][ T5574] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 1320.346380][ T5574] usb 2-1: USB disconnect, device number 103
[ 1320.665984][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20512'.
[ 1320.846664][T17283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20517'.
[ 1320.850891][T17283] gretap0: Device is already in use.
[ 1321.193533][ T5574] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 1322.417494][T17350] program syz.5.20548 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1323.041791][T17380] loop4: detected capacity change from 0 to 128
[ 1323.097586][T17380] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1323.185447][T17380] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1323.190146][T17380] ext4 filesystem being mounted at /3127/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1323.582565][T17400] program syz.5.20571 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1323.650887][ T5804] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1323.823617][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1323.899949][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1324.935925][ T5782] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1325.108968][ T5782] usb 2-1: Using ep0 maxpacket: 32
[ 1325.110841][ T5782] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1325.110869][ T5782] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1325.110892][ T5782] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1325.116130][ T5782] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1325.116156][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1325.116174][ T5782] usb 2-1: Product: syz
[ 1325.116189][ T5782] usb 2-1: Manufacturer: syz
[ 1325.116203][ T5782] usb 2-1: SerialNumber: syz
[ 1325.217470][ T5782] usb 2-1: config 0 descriptor??
[ 1325.714413][ T5782] gs_usb 2-1:0.0: Configuring for 1 interfaces
[ 1325.868152][   T37] kauditd_printk_skb: 4 callbacks suppressed
[ 1325.868169][   T37] audit: type=1326 audit(2000000069.051:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17495 comm="syz.4.20617" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1325.868324][   T37] audit: type=1326 audit(2000000069.051:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17495 comm="syz.4.20617" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1325.907554][   T37] audit: type=1326 audit(2000000069.079:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17495 comm="syz.4.20617" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1325.907876][   T37] audit: type=1326 audit(2000000069.079:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17495 comm="syz.4.20617" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1325.918365][   T37] audit: type=1326 audit(2000000069.088:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17495 comm="syz.4.20617" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1325.918864][   T37] audit: type=1326 audit(2000000069.088:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17495 comm="syz.4.20617" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1325.920916][   T37] audit: type=1326 audit(2000000069.097:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17495 comm="syz.4.20617" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1325.924230][   T37] audit: type=1326 audit(2000000069.097:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17495 comm="syz.4.20617" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1325.924575][   T37] audit: type=1326 audit(2000000069.097:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17495 comm="syz.4.20617" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1325.926018][   T37] audit: type=1326 audit(2000000069.097:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17495 comm="syz.4.20617" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f9ac2e6de59 code=0x7ffc0000
[ 1325.932550][ T5782] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO)
[ 1325.933117][ T5782] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121
[ 1326.181989][ T5782] usb 2-1: USB disconnect, device number 104
[ 1326.915073][T17540] loop5: detected capacity change from 0 to 256
[ 1326.925622][T17540] exfat: Deprecated parameter 'utf8'
[ 1326.925728][T17540] exfat: Deprecated parameter 'namecase'
[ 1326.925783][T17540] exfat: Deprecated parameter 'namecase'
[ 1326.943657][T17540] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[ 1327.088815][ T5908] Flush: task=udevd[5908] dev=loop5 state=2
[ 1327.164376][ T5908] Teardown: task=udevd[5908] dev=loop5 state=2
[ 1327.177474][T17551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20644'.
[ 1327.177506][T17551] netlink: 'syz.4.20644': attribute type 7 has an invalid length.
[ 1327.177518][T17551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20644'.
[ 1328.658976][T17613] loop4: detected capacity change from 0 to 1024
[ 1328.681299][T17618] loop5: detected capacity change from 0 to 64
[ 1328.832622][T17613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1328.902971][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1328.977277][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1329.083883][T17633] sg_write: data in/out 327644/136 bytes for SCSI command 0x0-- guessing data in;
[ 1329.083883][T17633]    program syz.5.20681 not setting count and/or reply_len properly
[ 1330.358149][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1330.498633][ T5804] Flush: task=syz-executor[5804] dev=loop4 state=2
[ 1330.585217][ T5804] Teardown: task=syz-executor[5804] dev=loop4 state=2
[ 1331.262028][T17726] loop1: detected capacity change from 0 to 512
[ 1331.446631][T17726] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.20721: invalid indirect mapped block 256 (level 2)
[ 1331.446669][T17726] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1331.449561][T17726] EXT4-fs (loop1): 2 truncates cleaned up
[ 1331.480052][T17726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1331.718523][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1331.870830][ T5801] Flush: task=syz-executor[5801] dev=loop1 state=2
[ 1331.950072][ T5801] Teardown: task=syz-executor[5801] dev=loop1 state=2
[ 1332.233597][T17724] loop5: detected capacity change from 0 to 32768
[ 1332.234777][T17724] btrfs: Deprecated parameter 'usebackuproot'
[ 1332.234798][T17724] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1332.241033][T17724] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.20719 (17724)
[ 1332.434987][T17771] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.20734'.
[ 1332.457957][T17764] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.20734'.
[ 1332.531652][T17724] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1332.531688][T17724] BTRFS info (device loop5): using crc32c checksum algorithm
[ 1332.960553][T11760] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1333.024802][T17724] BTRFS error (device loop5): failed to load root extent
[ 1333.024849][T17724] BTRFS warning (device loop5): try to load backup roots slot 1
[ 1333.025851][T11760] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1333.027459][T17724] BTRFS warning (device loop5): couldn't read tree root
[ 1333.027481][T17724] BTRFS warning (device loop5): try to load backup roots slot 2
[ 1333.111938][T11765] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1333.112204][T17724] BTRFS warning (device loop5): couldn't read tree root
[ 1333.112226][T17724] BTRFS warning (device loop5): try to load backup roots slot 3
[ 1333.194402][T17724] BTRFS info (device loop5): rebuilding free space tree
[ 1333.627169][ T5581] usb 5-1: new full-speed USB device number 112 using dummy_hcd
[ 1333.814719][ T5581] usb 5-1: config 246 has an invalid interface number: 166 but max is 0
[ 1333.814747][ T5581] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[ 1333.814767][ T5581] usb 5-1: config 246 has no interface number 0
[ 1333.814810][ T5581] usb 5-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0
[ 1333.814834][ T5581] usb 5-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1333.814860][ T5581] usb 5-1: config 246 interface 166 has no altsetting 0
[ 1333.876395][ T5581] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[ 1333.876427][ T5581] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1333.876445][ T5581] usb 5-1: Product: syz
[ 1333.876461][ T5581] usb 5-1: Manufacturer: syz
[ 1333.876479][ T5581] usb 5-1: SerialNumber: syz
[ 1334.634334][ T5581] usb 5-1: Unknown endpoint type found, address 0x0b
[ 1334.634365][ T5581] usb 5-1: Not enough endpoints found in device, aborting!
[ 1334.985470][ T5581] usb 5-1: USB disconnect, device number 112
[ 1335.579736][T17879] input: syz0 as /devices/virtual/input/input42
[ 1335.889927][T17724] BTRFS info (device loop5): checking UUID tree
[ 1335.893237][T17724] BTRFS info (device loop5): enabling ssd optimizations
[ 1335.893262][T17724] BTRFS info (device loop5): turning on async discard
[ 1335.893279][T17724] BTRFS info (device loop5): enabling free space tree
[ 1335.893293][T17724] BTRFS info (device loop5): force clearing of disk cache
[ 1335.893307][T17724] BTRFS info (device loop5): enabling auto defrag
[ 1335.893322][T17724] BTRFS info (device loop5): trying to use backup root at mount time
[ 1335.893341][T17724] BTRFS info (device loop5): use zstd compression, level 3
[ 1336.605885][T11377] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1336.775585][T17926] program syz.4.20800 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1337.181142][T11377] Flush: task=syz-executor[11377] dev=loop5 state=2
[ 1337.339552][ T6020] usb 5-1: new full-speed USB device number 113 using dummy_hcd
[ 1337.340986][T11377] Teardown: task=syz-executor[11377] dev=loop5 state=2
[ 1337.574200][ T6020] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[ 1337.574228][ T6020] usb 5-1: config 0 has no interface number 0
[ 1337.574271][ T6020] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 1337.574297][ T6020] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1337.574322][ T6020] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1337.576097][ T6020] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1337.576126][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1337.576145][ T6020] usb 5-1: Product: syz
[ 1337.576160][ T6020] usb 5-1: SerialNumber: syz
[ 1337.617592][ T6020] usb 5-1: config 0 descriptor??
[ 1337.644675][ T6020] cm109 5-1:0.8: invalid payload size 0, expected 4
[ 1337.798832][ T6020] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input43
[ 1337.977483][T17920] loop1: detected capacity change from 0 to 40427
[ 1338.041614][T17969] program syz.5.20787 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1338.041842][T17920] F2FS-fs (loop1): Invalid SB checksum offset: 0
[ 1338.041859][T17920] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 1338.045635][T17920] F2FS-fs (loop1): invalid crc_offset: 1
[ 1338.089451][ T6020] list_add double add: new=ffff88803deda418, prev=ffff88803deda418, next=ffff8880223da078.
[ 1338.090013][ T6020] ------------[ cut here ]------------
[ 1338.090024][ T6020] kernel BUG at lib/list_debug.c:37!
[ 1338.090063][ T6020] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[ 1338.090089][ T6020] CPU: 1 UID: 0 PID: 6020 Comm: kworker/1:5 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1338.090118][ T6020] Tainted: [L]=SOFTLOCKUP
[ 1338.090126][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1338.090139][ T6020] Workqueue: usb_hub_wq hub_event
[ 1338.090170][ T6020] RIP: 0010:__list_add_valid_or_report+0xa5/0x130
[ 1338.090197][ T6020] Code: 74 12 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 c7 c7 60 71 ca 8b 4c 89 fe 4c 89 f2 48 89 d9 e8 5c 00 5a fc 90 <0f> 0b 48 c7 c7 40 6f ca 8b e8 4d 00 5a fc 90 0f 0b 48 c7 c7 00 70
[ 1338.090216][ T6020] RSP: 0018:ffffc9000c20eb80 EFLAGS: 00010246
[ 1338.090233][ T6020] RAX: 0000000000000058 RBX: ffff8880223da078 RCX: c6ef8f0968ecc100
[ 1338.090249][ T6020] RDX: ffffc9000da71000 RSI: 0000000000014b27 RDI: 0000000000014b28
[ 1338.090264][ T6020] RBP: 1ffff1100447b410 R08: 0000000000000000 R09: 0000000000000000
[ 1338.090276][ T6020] R10: dffffc0000000000 R11: fffff52001841d21 R12: 1ffff11007bdb483
[ 1338.090289][ T6020] R13: dffffc0000000000 R14: ffff88803deda418 R15: ffff88803deda418
[ 1338.090304][ T6020] FS:  0000000000000000(0000) GS:ffff888125d4d000(0000) knlGS:0000000000000000
[ 1338.090321][ T6020] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1338.090335][ T6020] CR2: 00007f2628e49000 CR3: 000000006c1e8000 CR4: 00000000003526f0
[ 1338.090352][ T6020] Call Trace:
[ 1338.090360][ T6020]  <TASK>
[ 1338.090371][ T6020]  usb_hcd_link_urb_to_ep+0x1d2/0x330
[ 1338.090402][ T6020]  dummy_urb_enqueue+0x299/0x760
[ 1338.090436][ T6020]  usb_hcd_submit_urb+0x322/0x1b40
[ 1338.090470][ T6020]  cm109_input_open+0x1fb/0x460
[ 1338.090492][ T6020]  input_open_device+0x1f9/0x3b0
[ 1338.090523][ T6020]  kbd_connect+0xf6/0x150
[ 1338.090552][ T6020]  input_register_device+0xd08/0x1150
[ 1338.090587][ T6020]  cm109_usb_probe+0x11e4/0x16f0
[ 1338.090616][ T6020]  usb_probe_interface+0x653/0xc60
[ 1338.090648][ T6020]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1338.090674][ T6020]  really_probe+0x254/0xae0
[ 1338.090696][ T6020]  __driver_probe_device+0x1e8/0x360
[ 1338.090729][ T6020]  driver_probe_device+0x4f/0x240
[ 1338.090750][ T6020]  __device_attach_driver+0x270/0x410
[ 1338.090770][ T6020]  bus_for_each_drv+0x25b/0x2f0
[ 1338.090795][ T6020]  ? __pfx___device_attach_driver+0x10/0x10
[ 1338.090814][ T6020]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1338.090838][ T6020]  ? rt_spin_unlock+0x163/0x200
[ 1338.090866][ T6020]  __device_attach+0x2c7/0x450
[ 1338.090894][ T6020]  ? rt_spin_unlock+0x157/0x200
[ 1338.090924][ T6020]  ? __pfx___device_attach+0x10/0x10
[ 1338.090957][ T6020]  device_initial_probe+0xa1/0xd0
[ 1338.090988][ T6020]  bus_probe_device+0x12d/0x220
[ 1338.091013][ T6020]  device_add+0x7d7/0xb80
[ 1338.091039][ T6020]  usb_set_configuration+0x1ad8/0x2180
[ 1338.091075][ T6020]  usb_generic_driver_probe+0x8d/0x150
[ 1338.091101][ T6020]  usb_probe_device+0x1c3/0x3b0
[ 1338.091129][ T6020]  ? __pfx_usb_probe_device+0x10/0x10
[ 1338.091155][ T6020]  really_probe+0x254/0xae0
[ 1338.091173][ T6020]  __driver_probe_device+0x1e8/0x360
[ 1338.091203][ T6020]  driver_probe_device+0x4f/0x240
[ 1338.091223][ T6020]  __device_attach_driver+0x270/0x410
[ 1338.091245][ T6020]  bus_for_each_drv+0x25b/0x2f0
[ 1338.091268][ T6020]  ? __pfx___device_attach_driver+0x10/0x10
[ 1338.091287][ T6020]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1338.091311][ T6020]  ? rt_spin_unlock+0x163/0x200
[ 1338.091338][ T6020]  __device_attach+0x2c7/0x450
[ 1338.091368][ T6020]  ? __pfx___device_attach+0x10/0x10
[ 1338.091402][ T6020]  device_initial_probe+0xa1/0xd0
[ 1338.091432][ T6020]  bus_probe_device+0x12d/0x220
[ 1338.091457][ T6020]  device_add+0x7d7/0xb80
[ 1338.091484][ T6020]  usb_new_device+0x98d/0x1610
[ 1338.091504][ T6020]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1338.091535][ T6020]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1338.091559][ T6020]  ? __pfx_usb_new_device+0x10/0x10
[ 1338.091581][ T6020]  hub_event+0x28cf/0x4cf0
[ 1338.091604][ T6020]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1338.091652][ T6020]  ? __pfx_hub_event+0x10/0x10
[ 1338.091677][ T6020]  ? rcu_is_watching+0x15/0xb0
[ 1338.091699][ T6020]  ? process_one_work+0x7fd/0x1480
[ 1338.091719][ T6020]  process_one_work+0xaaf/0x1480
[ 1338.091745][ T6020]  ? __pfx_process_one_work+0x10/0x10
[ 1338.091763][ T6020]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1338.091781][ T6020]  ? assign_work+0x3cf/0x5d0
[ 1338.091802][ T6020]  worker_thread+0xb05/0x10d0
[ 1338.091830][ T6020]  kthread+0x388/0x470
[ 1338.091845][ T6020]  ? __pfx_worker_thread+0x10/0x10
[ 1338.091864][ T6020]  ? __pfx_kthread+0x10/0x10
[ 1338.091878][ T6020]  ret_from_fork+0x514/0xb70
[ 1338.091894][ T6020]  ? __pfx_ret_from_fork+0x10/0x10
[ 1338.091915][ T6020]  ? __switch_to+0xc89/0x1420
[ 1338.091938][ T6020]  ? __pfx_kthread+0x10/0x10
[ 1338.091952][ T6020]  ret_from_fork_asm+0x1a/0x30
[ 1338.091974][ T6020]  </TASK>
[ 1338.091986][ T6020] Modules linked in:
[ 1338.092010][ T6020] ---[ end trace 0000000000000000 ]---
[ 1338.092022][ T6020] RIP: 0010:__list_add_valid_or_report+0xa5/0x130
[ 1338.092049][ T6020] Code: 74 12 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 c7 c7 60 71 ca 8b 4c 89 fe 4c 89 f2 48 89 d9 e8 5c 00 5a fc 90 <0f> 0b 48 c7 c7 40 6f ca 8b e8 4d 00 5a fc 90 0f 0b 48 c7 c7 00 70
[ 1338.092067][ T6020] RSP: 0018:ffffc9000c20eb80 EFLAGS: 00010246
[ 1338.092087][ T6020] RAX: 0000000000000058 RBX: ffff8880223da078 RCX: c6ef8f0968ecc100
[ 1338.092101][ T6020] RDX: ffffc9000da71000 RSI: 0000000000014b27 RDI: 0000000000014b28
[ 1338.092114][ T6020] RBP: 1ffff1100447b410 R08: 0000000000000000 R09: 0000000000000000
[ 1338.092126][ T6020] R10: dffffc0000000000 R11: fffff52001841d21 R12: 1ffff11007bdb483
[ 1338.092139][ T6020] R13: dffffc0000000000 R14: ffff88803deda418 R15: ffff88803deda418
[ 1338.092154][ T6020] FS:  0000000000000000(0000) GS:ffff888125d4d000(0000) knlGS:0000000000000000
[ 1338.092167][ T6020] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1338.092179][ T6020] CR2: 00007f2628e49000 CR3: 000000006c1e8000 CR4: 00000000003526f0
[ 1338.092197][ T6020] Kernel panic - not syncing: Fatal exception
[ 1338.092344][ T6020] Kernel Offset: disabled