last executing test programs:

41.395896062s ago: executing program 4 (id=1120):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa8)
r2 = syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x800)
ioctl$FITRIM(r1, 0x40046f01, &(0x7f0000000500)={0x7fffffff, 0x2, 0x401})
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f4)

36.431999053s ago: executing program 4 (id=1127):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x18}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x401c5820, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x14, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x30004000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, 0x0, 0x4008014)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1b0, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf28}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ec9a8f5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x772}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x10, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e)
socket$pppoe(0x18, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="8500000088000000040000000000000095"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0xbb428eaf468c6595, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0)
ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000002ff000005001600890000004849ac"], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r9})

36.152650388s ago: executing program 4 (id=1132):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008845)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

33.078669248s ago: executing program 4 (id=1138):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket(0x25, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x41)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x6, @raw_data="8f196dfc4590ad62bab14f9e87492237b4df86588d7ee0a4b840e1d8fe940324f2ad165745d4199867c84481b4d788e49807bdc7146c7bc0661da2422a62f3d4b5513d67e485098436df0ddd640570f4fba918810e82a5e152b5b2f7f6b9a72910643234e9f79e045815c52a33f6ac46b9f64e1f226886e59049b2f76a1c39f56fc2a2317f14ff5bcef6bb31c9b0ff7cfbaf913ee59686fd673e6c4d5aef0d9df50271ff8afde2d186079c3994f5fe43a8e21473a95395df3dc1b56d1d0fb41800"}, 0x9})
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x800)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040))
r7 = socket$packet(0x11, 0x3, 0x300)
close_range(r2, r7, 0x2)
setreuid(r6, 0xee01)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

29.697580813s ago: executing program 4 (id=1141):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

29.466070527s ago: executing program 4 (id=1143):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
r1 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mknodat(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x9100, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000001780)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@nodiscard}, {@auto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000680)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000180)='./file0\x00', 0x80000, 0x0, 0xfb, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400e998692f7000fddbdf", @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x90)
sendmsg$nl_route(r6, 0x0, 0x0)

17.493069473s ago: executing program 1 (id=1165):
syz_open_dev$sg(0x0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001})

13.534842238s ago: executing program 32 (id=1143):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
r1 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mknodat(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x9100, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000001780)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@nodiscard}, {@auto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000680)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000180)='./file0\x00', 0x80000, 0x0, 0xfb, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400e998692f7000fddbdf", @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x90)
sendmsg$nl_route(r6, 0x0, 0x0)

13.477607649s ago: executing program 1 (id=1170):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000040)='./file0\x00', 0x208008de, &(0x7f00000004c0)=ANY=[], 0x82, 0x1503, &(0x7f0000000580)="$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")
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0xfefd, 0xd15, 0x3925, 0x8, 0x9, "8bdffb70f0ffffff"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8918, &(0x7f0000000240)={'wg2\x00', {0x2, 0x4e20, @rand_addr=0x64010101}})
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x441, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0), 0x0, 0x0, 0x0)

12.306894099s ago: executing program 1 (id=1172):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000040)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@delalloc}, {@grpquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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")
r0 = inotify_init()
r1 = epoll_create(0x401)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540), 0x0, 0x240080e4)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080))
inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000b96)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00"], 0x50)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb000001d})
epoll_wait(r1, &(0x7f0000000e80)=[{}, {}], 0x2, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

11.656684529s ago: executing program 3 (id=1174):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaa0265584500002000000000fc2f907808"], 0x32)

9.72967375s ago: executing program 3 (id=1177):
syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$vim2m(0x0, 0x47b, 0x2)
pipe2(0x0, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000200)={0x20000000000084, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x1, 'dh\x00', 0x20}, 0x2c)

8.476040571s ago: executing program 1 (id=1181):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000040)='./file0\x00', 0x208008de, &(0x7f00000004c0)=ANY=[], 0x82, 0x1503, &(0x7f0000000580)="$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")
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0xfefd, 0xd15, 0x3925, 0x8, 0x9, "8bdffb70f0ffffff"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8918, &(0x7f0000000240)={'wg2\x00', {0x2, 0x4e20, @rand_addr=0x64010101}})
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x441, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0), 0x0, 0x0, 0x0)

8.461286172s ago: executing program 2 (id=1182):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x4f)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x5)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f00000001c0)=""/201, 0xc9, &(0x7f0000000140)={&(0x7f0000000300)={'sha384-avx2\x00'}})
utimes(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={{0x0, 0xea60}})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x16)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x1048ba, &(0x7f0000000000)={0x0, 0x90ab, 0x0, 0x1, 0x26a}, &(0x7f0000000380), &(0x7f0000ff4000))
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc, 0x6, 0xc934, 0x0, 0x10001, 0x3, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)

7.225816472s ago: executing program 2 (id=1183):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)

6.05929896s ago: executing program 1 (id=1184):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x21, @multicast2, 0x4e21, 0x0, 'none\x00', 0xc, 0x7, 0x7e}, 0x2c)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4)
sendto$inet(r0, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0xfd, 0x68b, &(0x7f0000001100)="$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")
open(&(0x7f0000000080)='./file1\x00', 0x80242, 0x1df2a23c5997fbe7)
openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
recvmmsg(r0, &(0x7f000000e280), 0x58a, 0x42, 0x0)

5.596155018s ago: executing program 3 (id=1186):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0x32)

5.368010602s ago: executing program 0 (id=1187):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000), 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setfsuid(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
pselect6(0x40, &(0x7f0000000280)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.590058145s ago: executing program 2 (id=1188):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)=@delchain={0x2bc, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x28c, 0x2, [@TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x8}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x7}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}, @TCA_FLOWER_ACT={0x26c, 0x3, [@m_connmark={0x268, 0x18, 0x0, 0x0, {{0xd}, {0x4}, {0x237, 0x6, "ad2aabcb0271ea4d60373b1be142c09918632b95d4916de5dbe4fece88c278e800bfad3fc3c5822e0af1af17a93b3242e8a275cdd7db89933af8320162adcaeb613a0324ff456e22639d4afc87b67e3ee655147dd0c1b74dc6a85539d2b11413e8f2af1261c4c457555916570033369993ab4bca13cbe9c842cb96c0c9d2b6ec9cc3415edbf7237a03ab46f64709a29ffea12eec4516366998ca71d9395e9e4ca2978be884defe49419730671607e693d22ac81a515ee13d36de057ab5e0a502263aa4784dedbda74e80658230f9afe3b2668c0b2ed440e9734d6543a9f97056ebe249e7fb311b03d1a59f548c9a9d80b31d276a7f1e5c4a7a4a1bee0b9d48c0f2d545d7d62019a0e5c897f1d8a58519c0246fc2b8e440c2a937d8b0781e616ea9a1f568f0c8e43b4ce267b8aff6f998ec5dca9a4773ae1a217ee4f8b714cda75839a47456b6883abbe03319bf39ac9c7489b0d3517f5f68abdacc61cfbd0f01dddfb6443b18306699f0e154fc712f3168c405df2c7c9fb2aad5f1e46b3a98ac3b58367703165908186579ed3e7132b63f7409daa31ac53d6a3b48487d6910fd7501fb8a88f013484c515e584bc66308863a6d1aed404ce3873550e43023324d4d450a3a220a17decfecce64bee847c7041633ff089ae8cc412cad40937f641a18fb19eefc6c874a630ec476afd7aebdb91cb365ba3f93511d81b53b463fdc88f9b0ce27d7caf42d85d6e9b38b9c968966aac71a52ef24c175b2f54b6f1e7cae3b08378120324ef0a4694d245df44b73ab2bf6"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4000}, 0xc050)
recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40)

4.506707496s ago: executing program 0 (id=1189):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

4.441648077s ago: executing program 1 (id=1190):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000040)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@delalloc}, {@grpquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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")
r0 = inotify_init()
r1 = epoll_create(0x401)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540), 0x0, 0x240080e4)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080))
inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000b96)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00"], 0x50)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb000001d})
epoll_wait(r1, &(0x7f0000000e80)=[{}, {}], 0x2, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

4.440662287s ago: executing program 2 (id=1191):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x18}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x401c5820, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x14, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x30004000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, 0x0, 0x4008014)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1b0, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf28}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ec9a8f5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x772}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x10, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0)
ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000002ff000005001600890000004849ac"], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', <r10=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r10})

2.732024315s ago: executing program 3 (id=1192):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x4f)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x5)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f00000001c0)=""/201, 0xc9, &(0x7f0000000140)={&(0x7f0000000300)={'sha384-avx2\x00'}})
utimes(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={{0x0, 0xea60}})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x16)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x1048ba, &(0x7f0000000000)={0x0, 0x90ab, 0x0, 0x1, 0x26a}, &(0x7f0000000380), &(0x7f0000ff4000))
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc, 0x6, 0xc934, 0x0, 0x10001, 0x3, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)

2.672549596s ago: executing program 2 (id=1193):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000040)='./file0\x00', 0x208008de, &(0x7f00000004c0)=ANY=[], 0x82, 0x1503, &(0x7f0000000580)="$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")
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0xfefd, 0xd15, 0x3925, 0x8, 0x9, "8bdffb70f0ffffff"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8918, &(0x7f0000000240)={'wg2\x00', {0x2, 0x4e20, @rand_addr=0x64010101}})
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x441, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0), 0x0, 0x0, 0x0)

2.500152499s ago: executing program 0 (id=1194):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
close(0xffffffffffffffff)
setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000))
r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
pwrite64(r6, &(0x7f0000000880)="6203", 0x2, 0x1ff)

1.84227885s ago: executing program 3 (id=1195):
socket$inet(0x2, 0x80001, 0x84)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x4, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x141083, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

1.541299175s ago: executing program 0 (id=1196):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000002000040"])
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)

476.089142ms ago: executing program 0 (id=1197):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

380.385504ms ago: executing program 3 (id=1198):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000), 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setfsuid(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
pselect6(0x40, &(0x7f0000000280)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

341.064834ms ago: executing program 0 (id=1199):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x21, @multicast2, 0x4e21, 0x0, 'none\x00', 0xc, 0x7, 0x7e}, 0x2c)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4)
sendto$inet(r0, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0xfd, 0x68b, &(0x7f0000001100)="$eJzs3U1sHGf9B/DvbnbX3vz/Sp02SQOqRNRIBRGROLGSYi4NCKFIVKgqB8TRSpzGyiatHBc5EYLwfuDCoXeKRG5cQOIeVM7AqVcfKyFx6SmAxKKZnbXXL7F3ndhri88nmp3nmedlnuc3Mzu7s4oc4H/WtXNpPE4t1869uVzkVx7NdFYezdzpp5NMJKknjd4qtbtJ7aPkanpLPlNsrLqrPW0/HyzMvv3xpyuf9HKNainr17drt8mV+hYbH1ZLziQ5Uq2fwbr+rm/orzVyd7XVGRYBO9sPHIxbM0l3ne+eWivZ0fDXLXBg1Xr3zU0X9FRyNMlk9Tmgd1fs3bMPtYfjHgAAAADsgxd+WX6FPzbucQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBhUv39/1q11PvpM6n1//5/q9qWKn2oPR73AAAAAAAAAABgdN/8/w0bPvckT7KcY/18t1b+5v9qmTlRvv5f3s+9zGcx57OcuSxlKYu5mGSqLG+Wr63luaWlxYtDtLy02jIDLS8NOYP27icPAAAAAAAAAIdFY/QmP861td//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIKglR3qrcjnRT0+l3kgymaRV1HuY/LWfPpB+/afBXPff3dKmao/3c0wAAAAwJi88yZMs51g/362V3/lPld/7J/N+7mYpC1lKJ/O5UT4L6H3rr688mumsPJq5Uyyb+/3qP0YaRtljes8ett7z6bJGOzezUG45n+t5N53cSL1sWTjdH8/W4/pRMabaG5UhR3ajWhcz/1WaI81qN2pD15wqI1KMqBeR6aptEY3j20dixKPT31M/9hdTX33yc+J5xny5t3r9t711MZ+fjxSTvbYxEpcGzr5T20ci+fwff/edW527tydu3jt3cKY0gomBJ2gbIzEzEImXh43ErcMaiUHTZSROruav5Rv5ds7lTN7KYhbyvcxlKfM5k69nLkcyV53PxevU9pG6ui731k4jaZXHpVm9iw4/pqXM5dWy7bEs5Ft5Nzcynyvlv0u5mNdzOZczO3CETw5x1ddHe6c9+4WBh8m/SNIert0+KAZ2fPXuNHjWT5fXwfF1W9ai9OLzvx81Plslin38pFofDBsjcXEgEi9tH4nflG8r9zp3by/emntvyP29Vq2L6+hnB+ouUZwvLxYHq8ytPzuKspc2lk324tWqfnHpla2/4xZlJ1fLdrpSW9VnuM09XSrLXt6ybKYsOz1Qtu7z1tXe5y0ADryjXzzaav+9/Zf2h+2ftm+135z82sSXJ15ppfnn5lca00deq79S+0M+zA/Wvv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7d+/+g9tznc784oZEt9v94VOK9jDRTtLfkuzUqpmd6+xNopWkTDT6idH6mRiqcmvt6Lzx+2cZc3PUVslzCVSjOsnuP7j9z263u++HaYtEc5tzfi3RrWwq6g7VfGyJf3WfX4djfmMC9tyFpTvvXbh3/8GXFu7MvTP/zvzd2cuXZ6dnL1/524WbC5356d7ruEcJ7IW1m/64RwIAAAAAAAAAAAAMaz/+W8JTdv2ffZ4qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEhdOzdRpc5PF68rj2Y6xdJPr1Ysq9WT1L6f1D5Krqa3ZGqgu9rT9vPBwuzbH3+68kkv16iWsn59XbvmbmbxsFpyJsmRaj1o8hn6u16tdzWyUm11hkXAzvYDB+P23wAAAP//+B8RmQ==")
open(&(0x7f0000000080)='./file1\x00', 0x80242, 0x1df2a23c5997fbe7)
openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
recvmmsg(r0, &(0x7f000000e280), 0x58a, 0x42, 0x0)

0s ago: executing program 2 (id=1200):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)=@delchain={0x2bc, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x28c, 0x2, [@TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x8}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x7}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}, @TCA_FLOWER_ACT={0x26c, 0x3, [@m_connmark={0x268, 0x18, 0x0, 0x0, {{0xd}, {0x4}, {0x237, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4000}, 0xc050)
recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40)

kernel console output (not intermixed with test programs):

54 phy0 wpan0: encryption failed: -22
[  133.697673][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  134.361310][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  134.377816][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  134.405643][ T4761] tipc: Started in network mode
[  134.410741][ T4761] tipc: Node identity ac14140f, cluster identity 4711
[  134.418094][ T4761] tipc: New replicast peer: 255.255.255.255
[  134.425180][ T4761] tipc: Enabled bearer <udp:syz2>, priority 10
[  135.013702][ T4787] fuse: Unknown parameter '0x0000000000000003'
[  135.079387][ T4790] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  135.086334][ T4790] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  135.414974][ T4210] tipc: Node number set to 2886997007
[  135.542720][ T4798] loop1: detected capacity change from 0 to 512
[  136.196440][ T4798] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  136.214363][ T4798] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  136.621260][ T4798] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #2: comm syz.1.126: corrupted inode contents
[  136.649924][ T4798] EXT4-fs error (device loop1): ext4_dirty_inode:6039: inode #2: comm syz.1.126: mark_inode_dirty error
[  136.705612][ T4798] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #2: comm syz.1.126: corrupted inode contents
[  136.725062][ T4798] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.126: mark_inode_dirty error
[  139.841818][ T4823] netlink: 'syz.4.134': attribute type 2 has an invalid length.
[  140.115992][ T4829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.137'.
[  142.113198][ T4868] xt_CT: No such helper "snmp"
[  142.132394][ T4875] netlink: 'syz.4.154': attribute type 1 has an invalid length.
[  142.351985][ T4882] IPv6: Can't replace route, no match found
[  146.672107][ T4928] fuse: Unknown parameter 'user_id00000000000000000000'
[  146.703619][ T4932] netlink: 36 bytes leftover after parsing attributes in process `syz.3.173'.
[  146.911915][ T4937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.175'.
[  149.180956][ T4973] fuse: Bad value for 'fd'
[  149.514764][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.539669][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.650735][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.691484][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.099212][ T5003] fuse: Bad value for 'fd'
[  151.177041][ T5009] device syzkaller0 entered promiscuous mode
[  152.134290][ T5014] device bridge1 entered promiscuous mode
[  152.202229][ T5024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.203'.
[  152.469762][ T5036] loop4: detected capacity change from 0 to 256
[  152.731552][ T5036] FAT-fs (loop4): Directory bread(block 64) failed
[  152.748954][ T5036] FAT-fs (loop4): Directory bread(block 65) failed
[  152.774551][ T5036] FAT-fs (loop4): Directory bread(block 66) failed
[  152.781476][ T5036] FAT-fs (loop4): Directory bread(block 67) failed
[  152.798056][ T5036] FAT-fs (loop4): Directory bread(block 68) failed
[  152.804632][ T5036] FAT-fs (loop4): Directory bread(block 69) failed
[  152.879457][ T5036] FAT-fs (loop4): Directory bread(block 70) failed
[  152.919270][ T5036] FAT-fs (loop4): Directory bread(block 71) failed
[  152.972371][ T5036] FAT-fs (loop4): Directory bread(block 72) failed
[  152.982700][ T5036] FAT-fs (loop4): Directory bread(block 73) failed
[  152.994329][ T5052] fuse: Bad value for 'fd'
[  154.010082][ T5059] loop3: detected capacity change from 0 to 1024
[  154.059558][ T5061] syz.1.215 uses obsolete (PF_INET,SOCK_PACKET)
[  154.394470][ T5059] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  154.783702][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  154.793343][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  154.800951][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  155.866521][ T5092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.226'.
[  155.914508][ T5091] bridge0: port 3(erspan0) entered blocking state
[  155.949651][ T5094] fuse: Unknown parameter '0x0000000000000003'
[  155.989196][ T5091] bridge0: port 3(erspan0) entered disabled state
[  156.038548][ T5091] device erspan0 entered promiscuous mode
[  156.918094][ T5091] bridge0: port 3(erspan0) entered blocking state
[  156.925083][ T5091] bridge0: port 3(erspan0) entered forwarding state
[  157.238979][ T5106] netlink: 'syz.1.233': attribute type 10 has an invalid length.
[  157.288047][ T5106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.233'.
[  157.342054][ T5112] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  157.391177][ T5115] loop2: detected capacity change from 0 to 1024
[  157.439137][ T5106] team0: Port device geneve0 added
[  157.451129][ T5118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.237'.
[  157.599280][ T5115] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  157.665234][ T5121] netlink: 36 bytes leftover after parsing attributes in process `syz.4.238'.
[  157.725585][ T5124] fuse: Unknown parameter '0x0000000000000003'
[  157.979638][ T5128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.241'.
[  158.189920][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  158.595942][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  158.616422][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  158.762769][ T5140] device syzkaller1 entered promiscuous mode
[  159.182373][ T5161] fuse: Unknown parameter '0x0000000000000003'
[  159.330568][ T5165] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  159.377454][ T5166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.254'.
[  159.402710][ T5167] Zero length message leads to an empty skb
[  160.005369][ T5177] loop0: detected capacity change from 0 to 512
[  160.988518][ T5177] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  161.006338][ T5177] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  161.245952][ T5177] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #2: comm syz.0.255: corrupted inode contents
[  161.297939][ T5177] EXT4-fs error (device loop0): ext4_dirty_inode:6039: inode #2: comm syz.0.255: mark_inode_dirty error
[  161.317818][ T5177] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #2: comm syz.0.255: corrupted inode contents
[  161.392158][ T5177] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.255: mark_inode_dirty error
[  162.045984][ T5189] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  162.375593][ T5195] fuse: Unknown parameter '0x0000000000000003'
[  162.519272][ T5203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'.
[  162.601218][ T5199] loop4: detected capacity change from 0 to 1024
[  162.923782][ T5199] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  163.881671][ T5219] loop1: detected capacity change from 0 to 512
[  165.331389][ T5229] fuse: Unknown parameter '0x0000000000000003'
[  165.394562][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  165.555990][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  165.677738][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  165.725771][ T5242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.279'.
[  165.879298][ T5240] device xfrm1 entered promiscuous mode
[  166.027054][ T5219] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  166.043727][ T5219] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  166.357863][ T5259] fuse: Unknown parameter '0x0000000000000003'
[  166.525510][ T5266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.289'.
[  166.534809][ T5263] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  166.561344][ T5270] bridge0: port 1(bridge_slave_0) entered listening state
[  166.723730][ T5273] loop0: detected capacity change from 0 to 1024
[  166.741006][ T5275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.292'.
[  166.768919][ T5271] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:20004
[  166.801027][ T5273] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  166.883980][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'.
[  167.737837][ T5292] loop3: detected capacity change from 0 to 512
[  168.444010][ T5292] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  168.462100][ T5292] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  168.780153][ T5292] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.296: corrupted inode contents
[  168.823310][ T5292] EXT4-fs error (device loop3): ext4_dirty_inode:6039: inode #2: comm syz.3.296: mark_inode_dirty error
[  168.862582][ T5292] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.296: corrupted inode contents
[  168.892075][ T5292] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.296: mark_inode_dirty error
[  170.478426][ T5313] fuse: Unknown parameter 'fd0x0000000000000003'
[  171.036183][ T5331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  171.750709][ T5350] device veth0 entered promiscuous mode
[  171.766092][ T5350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'.
[  172.271397][ T5362] fuse: Unknown parameter 'fd0x0000000000000003'
[  172.466485][ T5369] netlink: 64 bytes leftover after parsing attributes in process `syz.1.322'.
[  173.481635][ T5383] tipc: Started in network mode
[  173.486976][ T5383] tipc: Node identity ac14140f, cluster identity 4711
[  173.493941][ T5383] tipc: New replicast peer: 255.255.255.255
[  173.500420][ T5383] tipc: Enabled bearer <udp:syz2>, priority 10
[  173.891913][ T5401] fuse: Unknown parameter 'fd0x0000000000000003'
[  173.947312][ T5403] loop0: detected capacity change from 0 to 256
[  174.023620][ T5403] FAT-fs (loop0): Directory bread(block 64) failed
[  174.030284][ T5403] FAT-fs (loop0): Directory bread(block 65) failed
[  174.037215][ T5403] FAT-fs (loop0): Directory bread(block 66) failed
[  174.043905][ T5403] FAT-fs (loop0): Directory bread(block 67) failed
[  174.051430][ T5403] FAT-fs (loop0): Directory bread(block 68) failed
[  174.058187][ T5403] FAT-fs (loop0): Directory bread(block 69) failed
[  174.064997][ T5403] FAT-fs (loop0): Directory bread(block 70) failed
[  174.071642][ T5403] FAT-fs (loop0): Directory bread(block 71) failed
[  174.078412][ T5403] FAT-fs (loop0): Directory bread(block 72) failed
[  174.085161][ T5403] FAT-fs (loop0): Directory bread(block 73) failed
[  174.504859][ T4209] tipc: Node number set to 2886997007
[  175.537047][ T5418] tipc: Started in network mode
[  175.541988][ T5418] tipc: Node identity ac14140f, cluster identity 4711
[  175.549143][ T5418] tipc: New replicast peer: 255.255.255.255
[  175.555674][ T5418] tipc: Enabled bearer <udp:syz2>, priority 10
[  176.415221][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'.
[  176.597016][ T4179] tipc: Node number set to 2886997007
[  178.568566][ T5481] Cannot find add_set index 4 as target
[  178.745616][ T5484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.358'.
[  178.937196][ T5490] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  179.070875][ T5494] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  179.096523][ T5494] tipc: Enabled bearer <udp:syz0>, priority 10
[  179.293489][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'.
[  180.079140][ T5519] loop4: detected capacity change from 0 to 256
[  182.996721][ T5537] netlink: 'syz.1.378': attribute type 1 has an invalid length.
[  183.084146][ T5540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'.
[  183.096262][ T5541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.380'.
[  183.425975][ T5551] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  183.435047][ T5552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'.
[  184.154717][ T5567] loop4: detected capacity change from 0 to 512
[  184.892291][ T5567] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  184.910194][ T5567] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  185.217412][ T5567] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.390: corrupted inode contents
[  185.241710][ T5567] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.390: mark_inode_dirty error
[  185.268377][ T5567] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.390: corrupted inode contents
[  185.298417][ T5567] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.390: mark_inode_dirty error
[  185.901629][ T5573] loop3: detected capacity change from 0 to 1024
[  186.140627][ T4241] Bluetooth: hci0: command 0x0406 tx timeout
[  186.148552][ T5579] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  186.445679][   T13] Bluetooth: hci3: command 0x0406 tx timeout
[  186.452892][   T13] Bluetooth: hci2: command 0x0406 tx timeout
[  186.528764][ T5573] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  186.544718][ T4241] Bluetooth: hci1: command 0x0406 tx timeout
[  186.994452][ T5590] loop0: detected capacity change from 0 to 256
[  189.069244][ T5595] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  190.763403][ T5615] loop2: detected capacity change from 0 to 256
[  190.831171][ T5615] FAT-fs (loop2): Directory bread(block 64) failed
[  190.837830][ T5615] FAT-fs (loop2): Directory bread(block 65) failed
[  190.844453][ T5615] FAT-fs (loop2): Directory bread(block 66) failed
[  190.851146][ T5615] FAT-fs (loop2): Directory bread(block 67) failed
[  190.857806][ T5615] FAT-fs (loop2): Directory bread(block 68) failed
[  190.864372][ T5615] FAT-fs (loop2): Directory bread(block 69) failed
[  190.871024][ T5615] FAT-fs (loop2): Directory bread(block 70) failed
[  190.877625][ T5615] FAT-fs (loop2): Directory bread(block 71) failed
[  190.884242][ T5615] FAT-fs (loop2): Directory bread(block 72) failed
[  190.890868][ T5615] FAT-fs (loop2): Directory bread(block 73) failed
[  191.008953][ T5621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.407'.
[  191.088526][ T5621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.109338][ T5621] device batadv_slave_0 entered promiscuous mode
[  191.237906][ T5624] IPv4: Oversized IP packet from 127.202.26.0
[  191.582255][ T5621] syz.1.407 (5621) used greatest stack depth: 20008 bytes left
[  191.769172][ T5641] loop1: detected capacity change from 0 to 1024
[  191.953596][ T5650] loop2: detected capacity change from 0 to 256
[  191.976680][ T5641] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  194.698962][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.730939][ T5663] loop3: detected capacity change from 0 to 256
[  194.862279][ T5663] FAT-fs (loop3): Directory bread(block 64) failed
[  194.869306][ T5663] FAT-fs (loop3): Directory bread(block 65) failed
[  194.876091][ T5663] FAT-fs (loop3): Directory bread(block 66) failed
[  194.882651][ T5663] FAT-fs (loop3): Directory bread(block 67) failed
[  194.889333][ T5663] FAT-fs (loop3): Directory bread(block 68) failed
[  194.895978][ T5663] FAT-fs (loop3): Directory bread(block 69) failed
[  194.902595][ T5663] FAT-fs (loop3): Directory bread(block 70) failed
[  194.909949][ T5663] FAT-fs (loop3): Directory bread(block 71) failed
[  194.916646][ T5663] FAT-fs (loop3): Directory bread(block 72) failed
[  194.923205][ T5663] FAT-fs (loop3): Directory bread(block 73) failed
[  196.932393][ T5694] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  198.724463][ T5688] loop0: detected capacity change from 0 to 32768
[  200.253155][ T5718] loop0: detected capacity change from 0 to 1024
[  200.559461][ T5718] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  202.190729][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  202.200451][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  202.208108][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  202.822334][ T5751] loop3: detected capacity change from 0 to 256
[  207.722912][ T4179] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  208.884831][ T4179] usb 2-1: Using ep0 maxpacket: 8
[  209.019620][ T4179] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  209.047578][ T4179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.101078][ T5791] loop0: detected capacity change from 0 to 256
[  209.114077][ T4179] usb 2-1: config 0 descriptor??
[  209.276901][   T26] audit: type=1800 audit(1749698543.543:13): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.455" name="bus" dev="loop0" ino=1048600 res=0 errno=0
[  209.415148][ T4179] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  209.923568][ T5803] loop0: detected capacity change from 0 to 256
[  210.934281][ T5794] loop3: detected capacity change from 0 to 32768
[  211.334833][ T4179] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  211.355446][ T4179] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  211.390430][ T4179] asix: probe of 2-1:0.0 failed with error -71
[  211.437098][ T4179] usb 2-1: USB disconnect, device number 2
[  211.894387][ T5810] loop4: detected capacity change from 0 to 1024
[  212.187246][ T5810] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  213.799608][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  213.827107][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  213.908681][ T5846] befs: (nbd0): No write support. Marking filesystem read-only
[  213.926065][  T150] block nbd0: Attempted send on invalid socket
[  213.933894][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  214.142488][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  214.660790][ T5848] loop2: detected capacity change from 0 to 1024
[  214.767281][ T5841] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  215.288811][ T5857] loop0: detected capacity change from 0 to 256
[  220.986700][ T5889] capability: warning: `syz.3.485' uses 32-bit capabilities (legacy support in use)
[  222.577189][ T5915] loop2: detected capacity change from 0 to 512
[  223.282114][ T5915] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  223.300068][ T5915] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  223.715569][ T5915] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.488: corrupted inode contents
[  223.740858][ T5915] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #2: comm syz.2.488: mark_inode_dirty error
[  223.757927][ T5915] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.488: corrupted inode contents
[  223.771489][ T5915] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.488: mark_inode_dirty error
[  225.097828][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'.
[  225.720112][ T5932] loop3: detected capacity change from 0 to 512
[  226.632023][ T5932] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  226.644084][ T5932] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  226.655202][ T5932] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.495: Corrupt directory, running e2fsck is recommended
[  226.693768][ T5932] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  226.709953][ T5932] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.495: corrupted in-inode xattr
[  226.724304][ T5932] EXT4-fs (loop3): Remounting filesystem read-only
[  226.731106][ T5932] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.495: couldn't read orphan inode 15 (err -117)
[  226.743835][ T5932] EXT4-fs (loop3): Remounting filesystem read-only
[  226.750423][ T5932] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,dax=inode,grpjquota=.i_version,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback.
[  227.192467][ T5944] loop0: detected capacity change from 0 to 1024
[  227.431111][ T5946] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  228.247405][ T5951] loop1: detected capacity change from 0 to 1024
[  228.939764][ T5951] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  229.296513][ T5964] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  229.680598][ T5976] loop2: detected capacity change from 0 to 256
[  229.707916][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'.
[  229.954157][ T5976] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  231.489973][ T5994] ubi31: attaching mtd0
[  231.797887][ T5994] ubi31: scanning is finished
[  231.802771][ T5994] ubi31: empty MTD device detected
[  232.121433][ T6002] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  234.564899][ T5994] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  234.785446][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'.
[  235.771204][ T6038] loop4: detected capacity change from 0 to 8
[  235.847858][ T6038] SQUASHFS error: zlib decompression failed, data probably corrupt
[  235.856173][ T6038] SQUASHFS error: Failed to read block 0x9b: -5
[  235.862474][ T6038] SQUASHFS error: Unable to read metadata cache entry [99]
[  235.870425][ T6038] SQUASHFS error: Unable to read inode 0x127
[  236.061813][ T6045] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001
[  236.160843][ T6045] loop1: detected capacity change from 0 to 1024
[  237.123193][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.225266][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.234571][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.242390][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.250418][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.257953][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.268899][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.276385][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.285170][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.460688][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.468386][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.475749][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.483315][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.490740][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.498938][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.506844][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.686476][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.694787][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.702508][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.711277][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.718909][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.729008][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.739246][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.746989][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.757516][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.765293][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.772727][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.780497][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.789386][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.797761][ T6045] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.808791][   T26] audit: type=1800 audit(1749698572.073:14): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.526" name="file1" dev="loop1" ino=20 res=0 errno=0
[  239.953986][ T6081] nft_compat: unsupported protocol 0
[  242.897163][ T6097] loop1: detected capacity change from 0 to 256
[  242.966915][ T6097] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  243.793049][ T6115] loop2: detected capacity change from 0 to 32768
[  247.195030][ T6154] loop3: detected capacity change from 0 to 512
[  249.099473][ T6154] EXT4-fs: failed to create workqueue
[  249.104989][ T6154] EXT4-fs (loop3): mount failed
[  251.529335][ T6189] loop0: detected capacity change from 0 to 256
[  251.666264][ T6189] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  252.290699][ T6167] loop4: detected capacity change from 0 to 32768
[  254.729889][ T6228] loop1: detected capacity change from 0 to 512
[  255.362866][ T6228] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  255.380985][ T6228] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  255.616227][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  255.714722][ T6228] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #2: comm syz.1.569: corrupted inode contents
[  255.754588][ T6228] EXT4-fs error (device loop1): ext4_dirty_inode:6039: inode #2: comm syz.1.569: mark_inode_dirty error
[  255.878512][ T6228] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #2: comm syz.1.569: corrupted inode contents
[  255.895251][ T6228] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.569: mark_inode_dirty error
[  257.567899][ T6243] input input6: cannot allocate more than FF_MAX_EFFECTS effects
[  257.672269][ T6242] loop1: detected capacity change from 0 to 2048
[  257.738314][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.792195][ T6242] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  257.801720][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.817584][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.849625][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.949688][   T26] audit: type=1800 audit(1749698592.213:15): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.573" name="file1" dev="loop1" ino=1415 res=0 errno=0
[  259.408889][ T6268] loop3: detected capacity change from 0 to 256
[  259.463081][ T6270] batman_adv: batadv0: Adding interface: dummy0
[  259.481000][ T6270] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.569081][ T6270] batman_adv: batadv0: Interface activated: dummy0
[  259.656703][ T6271] batadv0: mtu less than device minimum
[  259.664507][ T6271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.677907][ T6271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.690613][ T6271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.703238][ T6271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.715877][ T6271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.728736][ T6271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.741290][ T6271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.753848][ T6271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  259.767136][ T6271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  260.227346][ T6251] loop0: detected capacity change from 0 to 40427
[  261.596309][ T1325] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  261.854791][ T1325] usb 3-1: Using ep0 maxpacket: 32
[  262.474862][ T1325] usb 3-1: config 0 has an invalid interface number: 191 but max is 0
[  262.498641][ T6303] loop3: detected capacity change from 0 to 256
[  262.503470][ T1325] usb 3-1: config 0 has no interface number 0
[  263.052793][ T6303] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  263.085155][ T1325] usb 3-1: New USB device found, idVendor=12d1, idProduct=f5c3, bcdDevice=a5.1e
[  263.122814][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.167879][ T1325] usb 3-1: Product: syz
[  263.172098][ T1325] usb 3-1: Manufacturer: syz
[  263.220918][ T1325] usb 3-1: SerialNumber: syz
[  263.266686][ T1325] usb 3-1: config 0 descriptor??
[  263.306686][ T1325] hub 3-1:0.191: bad descriptor, ignoring hub
[  263.313612][ T1325] hub: probe of 3-1:0.191 failed with error -5
[  263.348780][ T1325] option 3-1:0.191: GSM modem (1-port) converter detected
[  263.607953][ T1325] usb 3-1: USB disconnect, device number 2
[  263.712823][   T26] audit: type=1326 audit(1749698597.963:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.594" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a6a0ed929 code=0x0
[  263.771312][ T1325] option 3-1:0.191: device disconnected
[  265.887916][ T6341] loop1: detected capacity change from 0 to 256
[  266.616491][ T6341] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  267.149247][ T6352] net_ratelimit: 10 callbacks suppressed
[  267.149265][ T6352] netlink: set zone limit has 8 unknown bytes
[  268.006958][ T6340] loop4: detected capacity change from 0 to 32768
[  269.257453][ T6369] loop2: detected capacity change from 0 to 64
[  270.102979][ T6380] loop0: detected capacity change from 0 to 2048
[  270.664043][ T6354] loop3: detected capacity change from 0 to 32768
[  270.685605][ T6380] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051
[  270.714384][ T6380] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  270.764599][ T6384] loop2: detected capacity change from 0 to 256
[  270.839648][ T6384] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  270.962416][ T6386] loop4: detected capacity change from 0 to 256
[  271.108591][ T6386] exfat: Unknown parameter 'sys_tz'
[  271.165521][ T4173] Bluetooth: hci0: hardware error 0x00
[  271.491568][ T6391] loop3: detected capacity change from 0 to 1024
[  271.527052][ T6394] loop0: detected capacity change from 0 to 256
[  271.565598][ T6394] exfat: Deprecated parameter 'utf8'
[  271.620929][ T6394] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  271.653055][ T6391] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  273.509335][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  273.518594][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  273.526219][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  275.158523][ T6442] loop1: detected capacity change from 0 to 64
[  276.195148][ T6442] netlink: zone id is out of range
[  276.421886][ T6435] loop0: detected capacity change from 0 to 32768
[  276.562582][ T6440] loop2: detected capacity change from 0 to 40427
[  276.601129][ T6440] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff
[  276.674929][ T6440] F2FS-fs (loop2): invalid crc value
[  276.722515][ T6440] F2FS-fs (loop2): Found nat_bits in checkpoint
[  277.513611][ T6440] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  278.610195][ T4176] attempt to access beyond end of device
[  278.610195][ T4176] loop2: rw=2049, want=45112, limit=40427
[  279.370712][ T6478] loop1: detected capacity change from 0 to 1024
[  279.495064][ T6478] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  279.973307][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  280.001666][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  280.024536][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  280.036341][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  281.070366][ T6491] loop1: detected capacity change from 0 to 40427
[  281.189760][ T6491] F2FS-fs (loop1): Unrecognized mount option "fault_type=184467440737095480871active_logs=6" or missing value
[  282.377533][ T6496] process 'syz.2.652' launched './file0' with NULL argv: empty string added
[  282.918695][ T6511] loop0: detected capacity change from 0 to 128
[  282.970610][ T6511] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  282.994057][ T6511] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  284.174519][ T6526] loop3: detected capacity change from 0 to 1024
[  284.386206][ T6526] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  284.703465][ T6512] ODEBUG: Out of memory. ODEBUG disabled
[  285.586691][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  285.624677][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  285.636745][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  286.273856][ T6542] loop4: detected capacity change from 0 to 2048
[  286.362223][ T6542] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  286.383729][ T6542] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.774508][ T6554] device bridge0 entered promiscuous mode
[  292.171316][ T6622] nft_compat: unsupported protocol 0
[  292.865558][ T6621] loop7: detected capacity change from 0 to 16384
[  293.025825][ T6628] 9pnet: Insufficient options for proto=fd
[  293.163505][ T6630] loop0: detected capacity change from 0 to 512
[  293.372982][ T6630] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  293.514751][ T4212] Bluetooth: hci4: command 0x0406 tx timeout
[  293.741000][ T6630] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  295.484127][ T6642] loop1: detected capacity change from 0 to 262144
[  295.530758][ T6630] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0.
[  295.543280][ T6642] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.688 (6642)
[  295.699664][ T6654] loop4: detected capacity change from 0 to 256
[  295.751980][ T6657] loop3: detected capacity change from 0 to 128
[  295.775526][ T6654] exfat: Deprecated parameter 'utf8'
[  295.784094][ T6642] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  295.794206][ T6642] BTRFS info (device loop1): using free space tree
[  295.800805][ T6642] BTRFS info (device loop1): has skinny extents
[  295.807214][ T6642] BTRFS info (device loop1): flagging fs with big metadata feature
[  296.206352][ T6657] FAT-fs (loop3): Unrecognized mount option "0x0000000000000004" or missing value
[  296.663093][ T6654] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  299.987969][ T6642] BTRFS error (device loop1): open_ctree failed: -12
[  300.006976][ T4290] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by udevd (4290)
[  300.233887][ T6720] dlm: no local IP address has been set
[  300.284252][ T6720] dlm: cannot start dlm midcomms -107
[  301.898130][ T6722] loop3: detected capacity change from 0 to 32768
[  301.971512][ T6722] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.701 (6722)
[  302.071727][ T6722] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  302.107061][ T6722] BTRFS info (device loop3): using free space tree
[  302.180676][ T6722] BTRFS info (device loop3): has skinny extents
[  303.425594][ T6722] BTRFS error (device loop3): open_ctree failed: -12
[  303.984242][ T6793] sp0: Synchronizing with TNC
[  304.558086][ T6781] [U] è
[  305.116663][ T6805] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  305.413394][ T6807] loop4: detected capacity change from 0 to 256
[  307.702716][ T6787] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  308.013911][ T6809] netlink: zone id is out of range
[  308.021854][ T6809] netlink: set zone limit has 4 unknown bytes
[  313.131171][ T6845] loop1: detected capacity change from 0 to 256
[  313.333694][ T6848] loop0: detected capacity change from 0 to 256
[  313.504049][ T6838] qnx6: unable to read the first superblock
[  313.968344][ T6845] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  317.039226][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  317.681414][ T6880] loop1: detected capacity change from 0 to 64
[  319.677106][ T6899] loop2: detected capacity change from 0 to 256
[  319.822856][ T6899] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  319.938030][ T6903] loop4: detected capacity change from 0 to 256
[  322.978720][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'.
[  323.938975][ T6917] loop4: detected capacity change from 0 to 256
[  325.464656][ T2304] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  325.495396][ T6930] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  325.531759][ T6930] kvm: pic: level sensitive irq not supported
[  325.532132][ T6930] kvm: pic: non byte read
[  325.557611][ T6930] kvm: pic: level sensitive irq not supported
[  325.557955][ T6930] kvm: pic: non byte read
[  325.591381][ T6930] kvm: pic: level sensitive irq not supported
[  325.591701][ T6930] kvm: pic: non byte read
[  325.634722][ T6930] kvm: pic: level sensitive irq not supported
[  325.634804][ T6930] kvm: pic: non byte read
[  325.669101][ T6930] kvm: pic: level sensitive irq not supported
[  325.669523][ T6930] kvm: pic: non byte read
[  325.694936][ T6930] kvm: pic: level sensitive irq not supported
[  325.695009][ T6930] kvm: pic: non byte read
[  325.720511][ T6930] kvm: pic: level sensitive irq not supported
[  325.722586][ T6930] kvm: pic: non byte read
[  325.757587][ T6930] kvm: pic: level sensitive irq not supported
[  325.758125][ T6930] kvm: pic: non byte read
[  325.798663][ T6930] kvm: pic: level sensitive irq not supported
[  325.798734][ T6930] kvm: pic: non byte read
[  325.862213][ T6930] kvm: pic: level sensitive irq not supported
[  325.862301][ T6930] kvm: pic: non byte read
[  326.805769][ T6945] loop1: detected capacity change from 0 to 256
[  326.907521][ T6945] FAT-fs (loop1): Unrecognized mount option "codepage=8f8=0" or missing value
[  327.561590][ T6947] loop0: detected capacity change from 0 to 256
[  327.822564][ T6952] loop3: detected capacity change from 0 to 256
[  330.086692][ T6947] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  335.594820][ T6993] loop4: detected capacity change from 0 to 8192
[  335.638372][ T4290]  loop4: p1 p2 p4
[  335.656777][ T4290] loop4: p1 size 108920841 extends beyond EOD, truncated
[  335.691401][ T4290] loop4: p2 start 861536256 is beyond EOD, truncated
[  335.708879][ T4290] loop4: p4 size 65536 extends beyond EOD, truncated
[  335.920233][ T6993]  loop4: p1 p2 p4
[  335.924215][ T6993] loop4: p1 size 108920841 extends beyond EOD, truncated
[  335.932785][ T6993] loop4: p2 start 861536256 is beyond EOD, truncated
[  335.939567][ T6993] loop4: p4 size 65536 extends beyond EOD, truncated
[  336.031758][ T7012] 9pnet_virtio: no channels available for device syz
[  336.456627][ T7036] loop2: detected capacity change from 0 to 512
[  336.496937][ T6714] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  337.094668][ T6714] usb 5-1: Using ep0 maxpacket: 16
[  337.214992][ T6714] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  337.219400][ T7047] loop0: detected capacity change from 0 to 512
[  337.231355][ T6714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.250162][ T7036] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  337.266488][ T7036] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  337.269341][ T6714] usb 5-1: config 0 descriptor??
[  337.290252][ T7036] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.778: corrupted inode contents
[  337.303530][ T7036] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #2: comm syz.2.778: mark_inode_dirty error
[  337.324782][ T7036] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.778: corrupted inode contents
[  337.342230][ T6714] gspca_main: sonixj-2.14.0 probing 0471:0327
[  337.350130][ T7036] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.778: mark_inode_dirty error
[  337.381411][ T4290] udevd[4290]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  337.396264][ T4306] udevd[4306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  337.442961][ T7047] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  337.470419][ T7047] ext4 filesystem being mounted at /158/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.537765][ T4576] udevd[4576]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  337.560907][ T4306] udevd[4306]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  337.693967][ T7056] loop3: detected capacity change from 0 to 2048
[  337.749943][ T7056] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  337.789004][ T7056] UDF-fs: Scanning with blocksize 512 failed
[  337.830106][ T7056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  338.251418][   T26] audit: type=1800 audit(1749698672.513:17): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.781" name="file1" dev="loop0" ino=15 res=0 errno=0
[  338.305774][   T26] audit: type=1800 audit(1749698672.513:18): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.781" name="file2" dev="loop0" ino=16 res=0 errno=0
[  338.364474][ T7058] loop2: detected capacity change from 0 to 32768
[  338.478728][ T7058] XFS (loop2): Mounting V5 Filesystem
[  338.722925][ T7058] XFS (loop2): Ending clean mount
[  338.753173][ T7058] XFS (loop2): Quotacheck needed: Please wait.
[  338.839460][ T7058] XFS (loop2): Quotacheck: Done.
[  339.576856][ T4176] XFS (loop2): Unmounting Filesystem
[  339.625405][ T6714] gspca_sonixj: reg_r err -71
[  339.734427][ T6714] sonixj: probe of 5-1:0.0 failed with error -71
[  339.744698][ T5377] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  339.773289][ T6714] usb 5-1: USB disconnect, device number 2
[  339.887827][ T4531] attempt to access beyond end of device
[  339.887827][ T4531] loop3: rw=1, want=2050, limit=2048
[  339.899755][ T4531] Buffer I/O error on dev loop3, logical block 1024, lost async page write
[  339.914002][ T4531] attempt to access beyond end of device
[  339.914002][ T4531] loop3: rw=1, want=2050, limit=2048
[  339.931001][ T4531] Buffer I/O error on dev loop3, logical block 1024, lost async page write
[  339.940161][ T4531] attempt to access beyond end of device
[  339.940161][ T4531] loop3: rw=1, want=2050, limit=2048
[  339.954936][ T4531] Buffer I/O error on dev loop3, logical block 1024, lost async page write
[  339.963987][ T4531] attempt to access beyond end of device
[  339.963987][ T4531] loop3: rw=1, want=2050, limit=2048
[  339.975387][ T4531] Buffer I/O error on dev loop3, logical block 1024, lost async page write
[  339.984411][ T4531] attempt to access beyond end of device
[  339.984411][ T4531] loop3: rw=1, want=2052, limit=2048
[  339.996381][ T4531] Buffer I/O error on dev loop3, logical block 1025, lost async page write
[  340.008930][ T4531] attempt to access beyond end of device
[  340.008930][ T4531] loop3: rw=1, want=2052, limit=2048
[  340.020274][ T4531] Buffer I/O error on dev loop3, logical block 1025, lost async page write
[  340.033384][ T4531] attempt to access beyond end of device
[  340.033384][ T4531] loop3: rw=1, want=2052, limit=2048
[  340.044508][ T4531] Buffer I/O error on dev loop3, logical block 1025, lost async page write
[  340.053232][ T4531] attempt to access beyond end of device
[  340.053232][ T4531] loop3: rw=1, want=2052, limit=2048
[  340.064247][ T4531] Buffer I/O error on dev loop3, logical block 1025, lost async page write
[  340.074347][ T4531] attempt to access beyond end of device
[  340.074347][ T4531] loop3: rw=1, want=2054, limit=2048
[  340.086019][ T4531] Buffer I/O error on dev loop3, logical block 1026, lost async page write
[  340.094908][ T4531] attempt to access beyond end of device
[  340.094908][ T4531] loop3: rw=1, want=2054, limit=2048
[  340.106491][ T4531] Buffer I/O error on dev loop3, logical block 1026, lost async page write
[  340.275458][ T5377] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  340.322351][ T7086] loop1: detected capacity change from 0 to 256
[  341.462076][ T5377] usb 1-1: config 0 has no interface number 0
[  341.468413][ T5377] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  341.477501][ T5377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.681076][ T5377] usb 1-1: config 0 descriptor??
[  342.554643][ T4219] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  342.624777][ T5377] usb 1-1: can't set config #0, error -71
[  342.646761][ T5377] usb 1-1: USB disconnect, device number 3
[  342.693441][ T7094] loop4: detected capacity change from 0 to 512
[  342.791205][ T7094] EXT4-fs (loop4): Test dummy encryption mode enabled
[  342.799931][ T7094] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  342.825051][ T7094] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.793: bad orphan inode 131083
[  343.022145][ T7094] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  343.070856][ T7099] loop0: detected capacity change from 0 to 512
[  343.154050][ T7099] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  343.170759][ T7099] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  343.185304][ T4219] usb 4-1: config 0 has an invalid interface number: 212 but max is 0
[  343.193614][ T4219] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  343.213755][ T7099] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #2: comm syz.0.794: corrupted inode contents
[  343.230236][ T7099] EXT4-fs error (device loop0): ext4_dirty_inode:6039: inode #2: comm syz.0.794: mark_inode_dirty error
[  343.242424][ T7099] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #2: comm syz.0.794: corrupted inode contents
[  343.267156][ T7099] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.794: mark_inode_dirty error
[  343.286854][ T4219] usb 4-1: config 0 has no interface number 0
[  343.293358][ T4219] usb 4-1: config 0 interface 212 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  343.310630][ T4219] usb 4-1: config 0 interface 212 has no altsetting 0
[  343.382749][ T4219] usb 4-1: string descriptor 0 read error: -71
[  343.398145][ T4219] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=d2.f6
[  343.408022][ T4219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.423935][ T4219] usb 4-1: config 0 descriptor??
[  344.337799][ T4219] usb 4-1: can't set config #0, error -71
[  344.344934][ T4219] usb 4-1: USB disconnect, device number 3
[  344.387639][ T7106] loop1: detected capacity change from 0 to 512
[  344.448974][ T7106] EXT4-fs (loop1): Ignoring removed orlov option
[  345.527324][ T7106] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.795: bg 0: block 411: padding at end of block bitmap is not set
[  346.390808][ T7106] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.795: inode #1: comm syz.1.795: iget: illegal inode #
[  346.884982][ T7106] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.795: error while reading EA inode 1 err=-117
[  346.930496][ T7106] EXT4-fs (loop1): 1 orphan inode deleted
[  346.939650][ T7106] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,nombcache,debug_want_extra_isize=0x000000000000005c,grpquota,barrier,usrjquota=,jqfmt=vfsold,minixdf,,errors=continue. Quota mode: writeback.
[  347.052683][ T7132] loop0: detected capacity change from 0 to 512
[  347.157271][ T7132] EXT4-fs (loop0): Test dummy encryption mode enabled
[  347.199568][ T7132] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  347.317328][ T7132] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.802: bad orphan inode 131083
[  347.520265][ T7132] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  348.232231][ T7132] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  348.325095][ T7154] loop1: detected capacity change from 0 to 256
[  349.807304][ T7153] binder: 7152:7153 ioctl c0306201 0 returned -14
[  352.346885][ T7132] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  353.128557][ T7172] loop1: detected capacity change from 0 to 512
[  353.901179][ T7172] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  353.917783][ T7172] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  353.935500][ T7172] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #2: comm syz.1.808: corrupted inode contents
[  353.952777][ T7172] EXT4-fs error (device loop1): ext4_dirty_inode:6039: inode #2: comm syz.1.808: mark_inode_dirty error
[  353.968307][ T7172] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #2: comm syz.1.808: corrupted inode contents
[  353.980659][ T7172] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.808: mark_inode_dirty error
[  355.041325][ T7199] loop2: detected capacity change from 0 to 128
[  355.072300][ T7171] loop3: detected capacity change from 0 to 40427
[  355.079981][ T7201] loop0: detected capacity change from 0 to 256
[  355.121690][ T7171] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  355.207333][ T7171] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  356.417762][ T7171] F2FS-fs (loop3): invalid crc value
[  356.426705][ T7171] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12)
[  356.835993][ T7219] loop2: detected capacity change from 0 to 4096
[  356.855818][ T7221] loop3: detected capacity change from 0 to 1024
[  357.770577][ T7219] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  357.819992][ T7221] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  357.879583][ T7232] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  358.203172][ T7232] loop0: detected capacity change from 0 to 256
[  358.254355][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  358.268771][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  358.277227][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  358.387922][ T7232] exfat: Deprecated parameter 'utf8'
[  358.563608][ T7232] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  358.815527][ T7219] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[  360.176479][ T4520] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22.
[  360.698852][ T4176] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[  360.698977][ T4176] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  360.699088][ T4176] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[  360.997398][ T4280] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22.
[  361.002993][ T4176] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22.
[  362.408096][ T7275] loop4: detected capacity change from 0 to 1024
[  362.540754][ T7262] loop2: detected capacity change from 0 to 32768
[  362.554647][ T6787] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  362.571840][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  362.615725][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  362.623344][   T26] audit: type=1804 audit(1749698696.883:19): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.840" name="/newroot/166/file1/file1" dev="loop4" ino=20 res=1 errno=0
[  362.654811][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  362.695470][   T26] audit: type=1804 audit(1749698696.933:20): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.840" name="/newroot/166/file1/file1" dev="loop4" ino=20 res=1 errno=0
[  362.708148][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  362.716976][    C0] vkms_vblank_simulate: vblank timer overrun
[  362.794843][ T6787] usb 2-1: Using ep0 maxpacket: 8
[  362.824704][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  362.832078][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  362.865977][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  362.873318][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  362.905023][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  362.912539][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  362.920439][ T6787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 204, changing to 11
[  362.934019][ T6787] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  362.944115][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  362.951794][ T6787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.960235][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  362.970726][ T6787] usb 2-1: config 0 descriptor??
[  362.975996][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  362.983313][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.001279][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.013424][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.027075][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.037196][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.044963][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.058420][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.081498][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.099975][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.107814][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.133759][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.142315][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.155237][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.163127][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.170850][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.178487][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.186100][ T7275] hfsplus: request for non-existent node 16777216 in B*Tree
[  363.194383][   T26] audit: type=1800 audit(1749698697.453:21): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.840" name="file1" dev="loop4" ino=20 res=0 errno=0
[  363.225423][   T26] audit: type=1800 audit(1749698697.473:22): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.840" name="file1" dev="loop4" ino=20 res=0 errno=0
[  363.246054][   T26] audit: type=1800 audit(1749698697.473:23): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.840" name="file1" dev="loop4" ino=20 res=0 errno=0
[  363.498922][ T6787] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0
[  363.625241][ T6787] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0
[  363.748105][ T6787] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0
[  363.852102][ T6787] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0
[  363.958311][ T6787] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0
[  364.051939][ T6787] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0
[  364.130080][ T6787] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0
[  365.825363][ T6787] kone 0003:1E7D:2CED.0001: hidraw0: USB HID vff.fa Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0
[  366.102431][ T6787] usb 2-1: USB disconnect, device number 3
[  366.519340][ T7287] device dummy0 entered promiscuous mode
[  368.086251][ T7315] loop2: detected capacity change from 0 to 256
[  371.206893][ T7312] fido_id[7312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  371.403014][ T7329] loop4: detected capacity change from 0 to 1024
[  371.511047][ T7328] loop2: detected capacity change from 0 to 4096
[  371.759107][ T7328] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  372.225573][ T7329] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  372.763957][ T7349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  372.795117][ T7349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  372.805724][ T7349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  374.320168][ T7365] netlink: set zone limit has 8 unknown bytes
[  375.751864][ T7381] loop3: detected capacity change from 0 to 64
[  375.890384][ T7387] loop1: detected capacity change from 0 to 1024
[  376.334764][ T7387] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  377.802336][ T7405] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  377.829910][ T7405] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  377.852907][ T7405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  377.864741][ T7405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  378.457961][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'.
[  378.487430][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  378.680444][ T7411] loop4: detected capacity change from 0 to 512
[  380.123771][ T7411] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  380.140269][ T7411] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  380.157523][ T7411] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.871: corrupted inode contents
[  380.169917][ T7411] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.871: mark_inode_dirty error
[  380.181955][ T7411] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.871: corrupted inode contents
[  380.194362][ T7411] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.871: mark_inode_dirty error
[  381.158874][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'.
[  383.024778][ T5377] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  383.364749][ T5377] usb 3-1: Using ep0 maxpacket: 8
[  383.495975][ T5377] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  383.533768][ T5377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.812024][ T5377] pvrusb2: Hardware description: Terratec Grabster AV400
[  383.921827][ T5377] pvrusb2: **********
[  384.042998][ T5377] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  384.154030][ T5377] pvrusb2: Important functionality might not be entirely working.
[  384.224950][ T5377] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  384.936617][ T7495] loop1: detected capacity change from 0 to 512
[  385.058346][ T5377] pvrusb2: **********
[  385.640319][ T7495] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  385.657095][ T7495] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  385.696445][ T7495] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #2: comm syz.1.894: corrupted inode contents
[  385.712006][ T7495] EXT4-fs error (device loop1): ext4_dirty_inode:6039: inode #2: comm syz.1.894: mark_inode_dirty error
[  385.726912][ T7495] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #2: comm syz.1.894: corrupted inode contents
[  385.742086][ T7495] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.894: mark_inode_dirty error
[  385.809501][ T2426] pvrusb2: Invalid write control endpoint
[  385.831834][ T5377] usb 3-1: USB disconnect, device number 3
[  385.967655][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'.
[  386.050075][ T2426] pvrusb2: Invalid write control endpoint
[  386.160378][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  386.228431][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  386.258211][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  386.325050][ T2426] pvrusb2: Device being rendered inoperable
[  386.377851][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  386.495043][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  386.540075][ T2426] pvrusb2: Attached sub-driver cx25840
[  386.557220][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  386.572148][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  387.565535][ T7529] loop1: detected capacity change from 0 to 512
[  387.657115][ T7529] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodiscard,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  387.673456][ T7529] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  387.695433][ T7529] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #2: comm syz.1.906: corrupted inode contents
[  387.708069][ T7529] EXT4-fs error (device loop1): ext4_dirty_inode:6039: inode #2: comm syz.1.906: mark_inode_dirty error
[  387.720139][ T7529] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #2: comm syz.1.906: corrupted inode contents
[  387.733793][ T7529] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.906: mark_inode_dirty error
[  387.904685][ T2304] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  388.154687][ T2304] usb 1-1: Using ep0 maxpacket: 8
[  388.274909][ T2304] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  389.206035][ T2304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.464424][ T2304] pvrusb2: Hardware description: Terratec Grabster AV400
[  389.473452][ T2304] pvrusb2: **********
[  389.477888][ T2304] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  389.520823][ T2304] pvrusb2: Important functionality might not be entirely working.
[  389.563315][ T2304] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  389.785535][ T7573] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  390.421124][ T2304] pvrusb2: **********
[  390.569611][ T2304] usb 1-1: USB disconnect, device number 4
[  390.588179][ T2304] pvrusb2: Device being rendered inoperable
[  390.990677][ T7586] loop0: detected capacity change from 0 to 256
[  391.004939][ T7586] FAT-fs (loop0): Unrecognized mount option "codepage=8f8=0" or missing value
[  395.514134][ T7621] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  395.557288][ T5377] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  396.352523][ T7631] loop3: detected capacity change from 0 to 256
[  396.400765][ T7631] FAT-fs (loop3): Unrecognized mount option "codepage=8f8=0" or missing value
[  397.141020][ T7633] loop2: detected capacity change from 0 to 2048
[  397.321941][ T7639] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  397.506924][ T7642] loop0: detected capacity change from 0 to 1024
[  398.777500][ T4277] hfsplus: b-tree write err: -5, ino 4
[  398.961592][ T7636] loop1: detected capacity change from 0 to 32768
[  399.355221][ T7683] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  400.558518][ T6715] Bluetooth: hci4: command 0x0405 tx timeout
[  401.561403][ T7710] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001
[  401.664085][ T7710] loop2: detected capacity change from 0 to 1024
[  401.801722][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  401.881228][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.134141][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.216211][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.308173][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.316253][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.323797][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.331164][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.338582][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.345960][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.353307][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.360783][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.368263][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.375714][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.383294][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.390738][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.398201][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.405723][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.413199][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.420634][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.428108][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.435711][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.443224][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.450656][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.458127][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  402.538605][ T7721] loop0: detected capacity change from 0 to 256
[  402.606559][ T7721] FAT-fs (loop0): Unrecognized mount option "codepage=8f8=0" or missing value
[  403.188339][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  403.202564][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  403.210234][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  403.219004][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  403.226880][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  403.245845][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  403.257274][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  403.267541][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  403.277672][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  403.286232][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  403.294591][ T7710] hfsplus: request for non-existent node 16777216 in B*Tree
[  403.305027][   T26] audit: type=1800 audit(1749698737.573:24): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.960" name="file1" dev="loop2" ino=20 res=0 errno=0
[  403.324413][    C0] vkms_vblank_simulate: vblank timer overrun
[  403.940912][ T7738] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  404.844909][ T5377] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  405.834639][ T5377] usb 5-1: Using ep0 maxpacket: 8
[  406.334864][ T5377] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  406.976370][ T5377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.359007][ T5377] usb 5-1: Product: syz
[  407.363296][ T5377] usb 5-1: Manufacturer: syz
[  407.368070][ T5377] usb 5-1: SerialNumber: syz
[  407.457402][ T5377] usb 5-1: config 0 descriptor??
[  407.477997][ T5377] usb 5-1: can't set config #0, error -71
[  407.513256][ T5377] usb 5-1: USB disconnect, device number 3
[  407.608909][ T7789] loop1: detected capacity change from 0 to 256
[  407.880391][ T7789] FAT-fs (loop1): Unrecognized mount option "codepage=8f8=0" or missing value
[  411.278238][ T7804] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  412.020851][ T7801] loop3: detected capacity change from 0 to 1024
[  412.156485][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.194682][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.404811][   T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  412.499998][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.508419][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.524713][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.534766][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.567093][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.614738][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.626957][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.648738][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.658916][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.674769][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.682381][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.691858][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.699846][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.707827][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.716931][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.730570][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.753790][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.777020][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.784881][   T13] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  412.793254][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.803244][   T13] usb 5-1: config 0 has no interface number 0
[  412.809673][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.839928][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.855032][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.888302][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.904888][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.936681][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.944100][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  412.981819][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  413.004628][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree
[  413.005059][   T13] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  413.034756][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.043609][   T26] audit: type=1800 audit(1749698747.303:25): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.976" name="file1" dev="loop3" ino=20 res=0 errno=0
[  413.073720][   T13] usb 5-1: Product: syz
[  413.083881][   T13] usb 5-1: Manufacturer: syz
[  413.089595][   T13] usb 5-1: SerialNumber: syz
[  413.125756][   T13] usb 5-1: config 0 descriptor??
[  413.384768][   T13] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  413.449778][   T13] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  413.491856][   T13] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  413.870170][   T13] usb 5-1: media controller created
[  413.893633][   T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  414.127542][ T7844] loop2: detected capacity change from 0 to 256
[  414.244997][   T13] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  414.354235][   T13] usb 5-1: USB disconnect, device number 4
[  416.990808][ T7866] loop4: detected capacity change from 0 to 1024
[  417.178990][ T7866] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  417.209512][ T7866] EXT4-fs (loop4): orphan cleanup on readonly fs
[  417.298875][ T7866] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #3: block 3: comm syz.4.994: lblock 3 mapped to illegal pblock 3 (length 1)
[  417.328228][ T4241] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  417.448209][ T7866] Quota error (device loop4): write_blk: dquota write failed
[  417.484832][ T7866] Quota error (device loop4): find_free_dqentry: Can't write quota data block 3
[  417.584857][ T7866] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  417.624723][ T4241] usb 4-1: Using ep0 maxpacket: 8
[  417.660513][ T7866] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.994: Failed to acquire dquot type 0
[  418.329432][ T7866] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 3: comm syz.4.994: lblock 3 mapped to illegal pblock 3 (length 1)
[  418.371556][ T7866] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  418.382611][ T4241] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  418.437754][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.517075][ T7866] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.994: Failed to acquire dquot type 0
[  418.643082][ T7866] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.994: Freeing blocks not in datazone - block = 0, count = 4096
[  418.676529][ T4241] pvrusb2: Hardware description: Terratec Grabster AV400
[  418.731754][ T4241] pvrusb2: **********
[  418.763146][ T4241] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  418.833380][ T7866] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 3: comm syz.4.994: lblock 3 mapped to illegal pblock 3 (length 1)
[  418.873382][ T4241] pvrusb2: Important functionality might not be entirely working.
[  418.943598][ T4241] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  419.010205][ T7866] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  419.064395][ T4241] pvrusb2: **********
[  419.080482][ T7866] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.994: Failed to acquire dquot type 0
[  419.103133][ T7866] EXT4-fs (loop4): 1 orphan inode deleted
[  419.131251][ T7866] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  419.149893][ T2426] pvrusb2: Invalid write control endpoint
[  419.273794][ T2426] pvrusb2: Invalid write control endpoint
[  419.287009][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  419.306929][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  419.649052][ T7894] loop2: detected capacity change from 0 to 256
[  420.767886][ T5377] usb 4-1: USB disconnect, device number 4
[  420.905009][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  420.925821][ T2426] pvrusb2: Device being rendered inoperable
[  420.933769][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  422.303890][ T7908] loop3: detected capacity change from 0 to 16
[  422.376962][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  422.680619][ T2426] pvrusb2: Attached sub-driver cx25840
[  422.686435][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  422.696661][ T7908] erofs: (device loop3): mounted with root inode @ nid 36.
[  422.707092][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  424.001018][ T7928] loop0: detected capacity change from 0 to 256
[  424.016244][ T7928] FAT-fs (loop0): Unrecognized mount option "codepage=8f8=0" or missing value
[  424.991881][ T7932] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1009'.
[  425.001672][ T7932] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1009'.
[  425.110252][ T7932] loop4: detected capacity change from 0 to 1024
[  426.310166][ T7932] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  426.493770][ T7932] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none.
[  426.611029][ T7932] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.1009: missing EA_INODE flag
[  426.627080][ T7932] EXT4-fs (loop4): Remounting filesystem read-only
[  426.634652][ T7932] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1009: error while reading EA inode 11 err=-117
[  426.650109][ T7932] EXT4-fs (loop4): Remounting filesystem read-only
[  426.657303][ T7932] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  429.620237][ T7970] loop3: detected capacity change from 0 to 4096
[  429.754167][ T7975] loop4: detected capacity change from 0 to 256
[  431.574747][   T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  431.854783][   T13] usb 1-1: Using ep0 maxpacket: 8
[  432.224943][   T13] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  432.234038][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.364684][ T8000] loop1: detected capacity change from 0 to 256
[  432.453453][ T8000] FAT-fs (loop1): Unrecognized mount option "codepage=8f8=0" or missing value
[  432.729236][   T13] pvrusb2: Hardware description: Terratec Grabster AV400
[  432.794685][ T1108] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  433.130848][   T13] pvrusb2: **********
[  433.184933][   T13] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  433.313889][   T13] pvrusb2: Important functionality might not be entirely working.
[  433.362861][   T13] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  433.428040][   T13] pvrusb2: **********
[  434.825493][ T2426] pvrusb2: Invalid write control endpoint
[  434.917197][   T13] usb 1-1: USB disconnect, device number 5
[  435.837551][ T2426] pvrusb2: Invalid write control endpoint
[  435.843423][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  435.904837][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  435.913381][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  435.940753][ T2426] pvrusb2: Device being rendered inoperable
[  435.947260][ T1108] usb 3-1: unable to read config index 0 descriptor/start: -71
[  435.957136][ T1108] usb 3-1: can't read configurations, error -71
[  435.967291][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  435.974507][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  436.165645][ T2426] pvrusb2: Attached sub-driver cx25840
[  437.373201][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  437.418061][ T8030] loop0: detected capacity change from 0 to 8
[  437.436387][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  437.511316][ T8030] SQUASHFS error: zlib decompression failed, data probably corrupt
[  437.536267][ T8030] SQUASHFS error: Failed to read block 0x9b: -5
[  437.542572][ T8030] SQUASHFS error: Unable to read metadata cache entry [99]
[  437.654444][ T8030] SQUASHFS error: Unable to read inode 0x127
[  438.222480][ T8043] loop1: detected capacity change from 0 to 2048
[  438.474815][ T8043] EXT4-fs (loop1): Ignoring removed bh option
[  438.712548][ T8043] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  438.852997][ T8060] dlm: no local IP address has been set
[  438.858768][ T8060] dlm: cannot start dlm midcomms -107
[  439.919255][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  443.105212][ T4212] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  443.299546][ T8098] loop0: detected capacity change from 0 to 1024
[  443.434680][ T4212] usb 4-1: Using ep0 maxpacket: 8
[  443.574426][ T4212] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  443.720480][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.024930][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.035558][ T4212] pvrusb2: Hardware description: Terratec Grabster AV400
[  444.109395][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.118108][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.125816][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.133958][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.141672][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.153396][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.230651][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.238667][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.246398][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.255759][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.263521][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.271310][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.278861][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.475247][ T4212] pvrusb2: **********
[  444.479490][ T4212] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  444.490110][ T4212] pvrusb2: Important functionality might not be entirely working.
[  444.497095][ T8105] loop4: detected capacity change from 0 to 1024
[  444.498142][ T4212] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  444.516283][ T4212] pvrusb2: **********
[  444.704341][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.719159][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.727565][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.739484][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.776150][ T8105] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  444.806421][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  444.925128][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  445.316240][ T2426] pvrusb2: Invalid write control endpoint
[  445.329151][ T4212] usb 4-1: USB disconnect, device number 5
[  445.346633][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  445.366358][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  445.401881][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  446.263510][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  446.283236][ T2426] pvrusb2: Invalid write control endpoint
[  446.300477][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  446.300714][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  446.338531][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  446.368693][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  446.376500][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  446.383846][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  446.388500][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  446.391700][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  446.413345][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  446.425440][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  446.432809][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  446.476274][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  446.506100][ T2426] pvrusb2: Device being rendered inoperable
[  446.524839][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  446.532189][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  446.550506][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  446.588275][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  446.602894][ T8097] hfsplus: request for non-existent node 16777216 in B*Tree
[  446.608341][ T2426] pvrusb2: Attached sub-driver cx25840
[  446.632494][   T26] audit: type=1800 audit(1749698780.893:26): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1050" name="file1" dev="loop0" ino=20 res=0 errno=0
[  446.632586][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  446.962410][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  447.797621][ T8148] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  447.825184][ T8148] CIFS: Unable to determine destination address
[  447.860837][ T8148] loop4: detected capacity change from 0 to 128
[  447.932622][ T8148] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  448.158710][ T8148] FAT-fs (loop4): FAT read failed (blocknr 128)
[  449.774734][ T4211] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  450.594717][ T4211] usb 1-1: Using ep0 maxpacket: 8
[  450.724822][ T4211] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  450.743685][ T4211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.779501][ T8175] loop3: detected capacity change from 0 to 2048
[  450.989256][ T4211] pvrusb2: Hardware description: Terratec Grabster AV400
[  451.003089][ T4211] pvrusb2: **********
[  451.007149][ T4211] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  451.033451][ T4211] pvrusb2: Important functionality might not be entirely working.
[  451.055502][ T4211] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  451.069710][ T4211] pvrusb2: **********
[  451.319479][ T8175] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  451.431789][ T4290] udevd[4290]: incorrect nilfs2 checksum on /dev/loop3
[  451.451960][ T8187] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  452.247744][ T8191] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001
[  452.416104][ T2426] pvrusb2: Invalid write control endpoint
[  452.422301][ T4211] usb 1-1: USB disconnect, device number 6
[  452.492707][ T8191] loop2: detected capacity change from 0 to 1024
[  452.932737][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  453.074267][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  453.084510][ T8204] vivid-001: =================  START STATUS  =================
[  453.101439][ T8204] vivid-001: Generate PTS: true
[  453.111110][ T8204] vivid-001: Generate SCR: true
[  453.120439][ T8204] tpg source WxH: 640x360 (Y'CbCr)
[  453.127441][ T8204] tpg field: 1
[  453.133420][ T8204] tpg crop: 640x360@0x0
[  453.217444][ T8204] tpg compose: 640x360@0x0
[  453.222521][ T8204] tpg colorspace: 8
[  453.227631][ T8204] tpg transfer function: 0/0
[  453.234450][ T8204] tpg Y'CbCr encoding: 0/0
[  453.241447][ T8204] tpg quantization: 0/0
[  453.246787][ T8204] tpg RGB range: 0/2
[  453.252443][ T8204] vivid-001: ==================  END STATUS  ==================
[  453.705034][ T2426] pvrusb2: Invalid write control endpoint
[  453.714864][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  453.722267][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  453.730144][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  453.737563][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  453.746448][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  453.783824][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  456.359216][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  456.457613][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  456.484727][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  456.504776][ T4209] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  456.527041][ T2426] pvrusb2: Device being rendered inoperable
[  456.553483][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  456.581430][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d)
[  456.616292][ T2426] pvrusb2: Attached sub-driver cx25840
[  456.621801][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  456.699948][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  456.743655][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  456.764116][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  456.777149][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  456.786487][ T8220] binder: BINDER_SET_CONTEXT_MGR already set
[  456.793236][ T8220] binder: 8219:8220 ioctl 4018620d 200000000040 returned -16
[  456.809068][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  456.873787][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  456.895990][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  456.955450][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  457.106769][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  458.194966][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  458.202361][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  458.276089][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  458.313392][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  458.412707][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  458.457291][ T8249] loop3: detected capacity change from 0 to 512
[  458.481581][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  458.497264][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  458.516388][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  458.545042][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  459.908412][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  459.946460][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  459.954421][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  459.962073][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  459.969385][ T8253] loop1: detected capacity change from 0 to 4096
[  459.976195][ T8249] EXT4-fs (loop3): can't mount with both data=journal and delalloc
[  459.984393][ T8191] hfsplus: request for non-existent node 16777216 in B*Tree
[  459.992531][   T26] audit: type=1800 audit(1749698794.263:27): pid=8191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1077" name="file1" dev="loop2" ino=20 res=0 errno=0
[  462.758754][ T1108] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  463.164873][ T1108] usb 2-1: Using ep0 maxpacket: 8
[  463.285946][ T1108] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  463.309836][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.885039][ T1108] usb 2-1: can't set config #252, error -71
[  465.164212][ T1108] usb 2-1: USB disconnect, device number 5
[  465.470412][ T8296] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001
[  465.603533][ T8301] loop4: detected capacity change from 0 to 256
[  465.651875][ T8301] FAT-fs (loop4): Unrecognized mount option "codepage=8f8=0" or missing value
[  466.769252][ T8296] loop1: detected capacity change from 0 to 1024
[  466.992658][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  467.031776][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  467.055626][ T8309] loop2: detected capacity change from 0 to 164
[  467.177848][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  467.208027][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  467.225214][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  467.232673][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  467.241684][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  467.249368][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  467.257320][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  468.034910][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  468.065276][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  468.073060][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  468.102301][ T8309] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  468.220528][ T8309] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  469.134035][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.175117][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.185346][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.192819][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.200792][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.208269][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.216066][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.223418][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.231249][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.239362][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.247634][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.255027][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.262538][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.269974][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.277614][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.285032][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.292643][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.300062][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.308149][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.315643][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.323189][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.330608][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.339034][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.346519][ T8296] hfsplus: request for non-existent node 16777216 in B*Tree
[  469.354690][   T26] audit: type=1800 audit(1749698803.613:28): pid=8296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1109" name="file1" dev="loop1" ino=20 res=0 errno=0
[  469.473346][ T8329] loop2: detected capacity change from 0 to 256
[  469.746115][ T8329] FAT-fs (loop2): Directory bread(block 64) failed
[  469.819459][ T8329] FAT-fs (loop2): Directory bread(block 65) failed
[  469.920231][ T8329] FAT-fs (loop2): Directory bread(block 66) failed
[  470.019451][ T8329] FAT-fs (loop2): Directory bread(block 67) failed
[  470.110978][ T8329] FAT-fs (loop2): Directory bread(block 68) failed
[  470.206049][ T8329] FAT-fs (loop2): Directory bread(block 69) failed
[  470.297550][ T8329] FAT-fs (loop2): Directory bread(block 70) failed
[  470.383009][ T8329] FAT-fs (loop2): Directory bread(block 71) failed
[  470.469611][ T8329] FAT-fs (loop2): Directory bread(block 72) failed
[  470.548765][ T8329] FAT-fs (loop2): Directory bread(block 73) failed
[  471.729006][ T8336] loop0: detected capacity change from 0 to 256
[  472.736956][ T8336] FAT-fs (loop0): Unrecognized mount option "codepage=8f8=0" or missing value
[  473.181400][ T8339] loop1: detected capacity change from 0 to 8
[  473.254693][ T8339] SQUASHFS error: zlib decompression failed, data probably corrupt
[  473.264324][ T8339] SQUASHFS error: Failed to read block 0x4de: -5
[  473.271288][ T8339] SQUASHFS error: Failed to read block 0x4e2: -5
[  473.279734][ T8339] SQUASHFS error: Failed to read block 0x9ca: -5
[  473.287623][ T8339] SQUASHFS error: Failed to read block 0x2cf2: -5
[  473.295211][ T8339] SQUASHFS error: Failed to read block 0x52cf2: -5
[  473.301812][ T8339] SQUASHFS error: Failed to read block 0x535f2: -5
[  473.322655][   T26] audit: type=1800 audit(1749698807.583:29): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1124" name="file1" dev="loop1" ino=5 res=0 errno=0
[  475.003135][ T8361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  475.017282][ T8364] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001
[  475.087955][ T8361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  475.108249][ T8366] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001
[  475.121260][ T8361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  475.150195][ T8364] loop0: detected capacity change from 0 to 1024
[  475.190307][ T8366] loop1: detected capacity change from 0 to 1024
[  475.272361][ T8367] netlink: 'syz.2.1133': attribute type 10 has an invalid length.
[  475.300602][ T8361] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  475.342667][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  475.389099][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  475.396801][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  475.404361][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  475.412559][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  475.420085][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  475.423861][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  475.431283][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  475.488370][ T8367] 8021q: adding VLAN 0 to HW filter on device team0
[  475.981309][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.037692][ T8367] bond0: (slave team0): Enslaving as an active interface with an up link
[  476.145892][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.175328][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.182896][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.190681][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.238649][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.246560][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.253927][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.261850][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.269255][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.277074][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.284432][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.454923][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.462355][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.472409][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.480146][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.489984][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.497707][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.508388][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.508857][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.524244][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.534487][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.544724][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.597687][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.606070][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.644019][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.651727][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.660466][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.668262][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.675887][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.686099][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.693688][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.701394][ T8364] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.711608][   T26] audit: type=1800 audit(1749698810.973:30): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1134" name="file1" dev="loop0" ino=20 res=0 errno=0
[  476.774808][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  476.846501][ T8384] loop2: detected capacity change from 0 to 256
[  479.637762][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  479.655976][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  479.665027][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  479.672927][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  479.684622][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  479.692487][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  479.832780][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  479.841969][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  479.858575][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  479.902407][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  479.915684][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  479.933754][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  479.959487][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  479.967810][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  479.979059][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  480.064349][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  480.092313][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  480.257575][ T8366] hfsplus: request for non-existent node 16777216 in B*Tree
[  480.303627][   T26] audit: type=1800 audit(1749698814.563:31): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1135" name="file1" dev="loop1" ino=20 res=0 errno=0
[  481.250310][ T8403] loop4: detected capacity change from 0 to 512
[  481.277361][ T8407] bridge0: port 3(vlan2) entered blocking state
[  481.485913][ T8407] bridge0: port 3(vlan2) entered disabled state
[  481.507229][ T8404] loop1: detected capacity change from 0 to 8
[  481.516807][ T8407] device vlan2 entered promiscuous mode
[  482.188729][ T8407] device bond0 entered promiscuous mode
[  482.194449][ T8407] device bond_slave_0 entered promiscuous mode
[  482.225037][ T8407] device bond_slave_1 entered promiscuous mode
[  482.380919][ T8420] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001
[  482.462704][ T8421] loop2: detected capacity change from 0 to 256
[  485.277580][ T8403] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4.
[  485.325990][ T8420] loop0: detected capacity change from 0 to 1024
[  485.887712][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  486.634978][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  486.643511][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  486.651029][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  486.659306][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  486.666964][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  486.676535][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  486.683989][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  486.733267][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  486.740889][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  486.749713][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  486.757247][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  486.765464][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  486.772904][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  486.781674][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  487.085809][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  487.559083][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  487.740706][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  487.834201][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  487.916551][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  487.988559][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  488.062780][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  488.214148][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  488.267870][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  488.277790][ T8443] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001
[  488.317375][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  488.356896][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  488.369116][ T8443] loop3: detected capacity change from 0 to 1024
[  488.378432][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  488.429457][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  488.472075][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  488.481776][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  488.498962][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  488.644640][ T8420] hfsplus: request for non-existent node 16777216 in B*Tree
[  489.492869][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  489.529569][   T26] audit: type=1800 audit(1749698823.793:32): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1150" name="file1" dev="loop0" ino=20 res=0 errno=0
[  490.003017][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  490.100466][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  490.871187][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  490.930313][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  491.540850][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  491.591009][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  491.824416][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  491.854803][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  494.582200][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  494.626408][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  494.635289][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  494.642866][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  494.650665][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  494.662204][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  494.861627][ T8478] loop1: detected capacity change from 0 to 40427
[  494.871485][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  494.924872][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  495.946956][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  495.954315][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  495.995207][ T8478] F2FS-fs (loop1): invalid crc value
[  496.000648][ T8478] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4)
[  496.028224][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  496.094855][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  496.117439][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  496.156617][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  496.215327][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  496.364640][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  496.373132][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  496.390141][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  497.227851][ T8443] hfsplus: request for non-existent node 16777216 in B*Tree
[  497.415141][   T26] audit: type=1800 audit(1749698831.683:33): pid=8443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1156" name="file1" dev="loop3" ino=20 res=0 errno=0
[  497.467095][ T8499] loop1: detected capacity change from 0 to 1024
[  498.183177][ T8499] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  498.207605][    C1] vkms_vblank_simulate: vblank timer overrun
[  498.477487][ T8521] binder: BINDER_SET_CONTEXT_MGR already set
[  498.483808][ T8521] binder: 8517:8521 ioctl 4018620d 200000000040 returned -16
[  500.246149][ T8499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  500.254334][ T8499] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  500.262934][ T8499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  500.270500][ T8499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  500.395154][   T23] Bluetooth: hci5: command 0x0409 tx timeout
[  501.215039][ T4252] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  501.366505][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  501.504822][ T4252] usb 1-1: Using ep0 maxpacket: 8
[  501.634786][ T4252] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  501.665306][ T4252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.848550][ T4252] pvrusb2: Hardware description: Terratec Grabster AV400
[  501.863205][ T4252] pvrusb2: **********
[  501.871172][ T4252] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  502.294632][ T4252] pvrusb2: Important functionality might not be entirely working.
[  502.302478][ T4252] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  502.314966][ T4252] pvrusb2: **********
[  502.344894][ T8542] loop1: detected capacity change from 0 to 256
[  502.357001][ T2426] pvrusb2: Invalid write control endpoint
[  502.383005][ T8513] chnl_net:caif_netlink_parms(): no params data found
[  502.419017][ T8536] pvrusb2: Invalid write control endpoint
[  502.468616][ T8542] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  502.483218][ T4241] Bluetooth: hci5: command 0x041b tx timeout
[  502.489783][ T2426] pvrusb2: Invalid write control endpoint
[  502.499488][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  502.601725][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  502.666885][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  502.726327][ T2426] pvrusb2: Device being rendered inoperable
[  502.777411][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  503.501058][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d)
[  503.558863][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.573761][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.593685][ T2426] pvrusb2: Attached sub-driver cx25840
[  503.620584][ T8513] device bridge_slave_0 entered promiscuous mode
[  503.703467][   T13] usb 1-1: USB disconnect, device number 7
[  503.713099][ T8554] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001
[  503.741692][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  503.753436][ T8554] loop1: detected capacity change from 0 to 1024
[  503.760148][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  503.794739][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.822385][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.841378][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  503.864777][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  503.873909][ T8513] device bridge_slave_1 entered promiscuous mode
[  503.920152][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.092903][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.166374][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.204736][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.236804][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.244371][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.252912][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.260859][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.268790][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.327665][ T8513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.393765][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.555363][   T23] Bluetooth: hci5: command 0x040f tx timeout
[  504.565947][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.580974][ T8513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.598840][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.667724][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.677607][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.687764][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.695743][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.703995][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.711843][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.720478][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.728181][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.737667][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.746151][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.747869][ T8513] team0: Port device team_slave_0 added
[  504.762975][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.771728][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.779224][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.788906][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.808988][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.818160][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.831539][ T8513] team0: Port device team_slave_1 added
[  504.839036][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.859549][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.881353][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.900781][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_0
[  504.912846][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.920343][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  504.950088][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.958178][ T8554] hfsplus: request for non-existent node 16777216 in B*Tree
[  504.968632][   T26] audit: type=1800 audit(1749698839.233:34): pid=8554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1184" name="file1" dev="loop1" ino=20 res=0 errno=0
[  504.988106][    C0] vkms_vblank_simulate: vblank timer overrun
[  505.058624][ T8513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.254939][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.275840][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  506.648647][ T4241] Bluetooth: hci5: command 0x0419 tx timeout
[  506.719435][ T8513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  506.742164][ T8580] loop1: detected capacity change from 0 to 1024
[  507.049256][ T8586] loop2: detected capacity change from 0 to 256
[  507.093261][ T8580] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,delalloc,grpquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  507.123031][ T8513] device hsr_slave_0 entered promiscuous mode
[  507.755196][ T8586] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  507.975012][ T8513] device hsr_slave_1 entered promiscuous mode
[  507.991575][ T8513] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  508.159943][ T8513] Cannot create hsr debugfs directory
[  508.245011][ T8598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  508.246164][ T8598] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  508.247217][ T8598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  508.247356][ T8598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  509.285285][ T8612] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001
[  509.325854][ T8612] loop0: detected capacity change from 0 to 1024
[  509.354977][ T8513] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  509.384264][ T8612] hfsplus: request for non-existent node 16777216 in B*Tree
[  509.402946][ T8513] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  509.406728][ T8612] hfsplus: request for non-existent node 16777216 in B*Tree
[  509.429991][ T8513] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  509.458232][ T8612] hfsplus: request for non-existent node 16777216 in B*Tree
[  509.539901][ T8612] hfsplus: request for non-existent node 16777216 in B*Tree
[  509.640321][ T8612] hfsplus: request for non-existent node 16777216 in B*Tree
[  509.674605][    C1] ------------[ cut here ]------------
[  509.680804][    C1] refcount_t: addition on 0; use-after-free.
[  509.687378][    C1] WARNING: CPU: 1 PID: 0 at lib/refcount.c:25 refcount_warn_saturate+0xff/0x1a0
[  509.696621][    C1] Modules linked in:
[  509.700599][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.185-syzkaller #0
[  509.708556][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  509.718732][    C1] RIP: 0010:refcount_warn_saturate+0xff/0x1a0
[  509.724873][    C1] Code: 09 01 48 c7 c7 40 6b 59 8a e8 dd 27 bb 05 0f 0b eb e0 e8 04 42 9c fd c6 05 ae 8f 79 09 01 48 c7 c7 80 6a 59 8a e8 c1 27 bb 05 <0f> 0b eb c4 e8 e8 41 9c fd c6 05 93 8f 79 09 01 48 c7 c7 e0 6a 59
[  509.744688][    C1] RSP: 0018:ffffc90000dd0848 EFLAGS: 00010246
[  509.750909][    C1] RAX: 9e854afec0e25100 RBX: 0000000000000002 RCX: ffff88813fe48000
[  509.758980][    C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000
[  509.767046][    C1] RBP: ffffc90000dd09b0 R08: dffffc0000000000 R09: fffff520001ba06d
[  509.775105][    C1] R10: fffff520001ba06d R11: 1ffff920001ba06c R12: ffff888073831a80
[  509.783149][    C1] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000
[  509.791203][    C1] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  509.800220][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  509.806881][    C1] CR2: 00007fd313de9f12 CR3: 0000000063094000 CR4: 00000000003506e0
[  509.815043][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  509.823170][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  509.831221][    C1] Call Trace:
[  509.834574][    C1]  <IRQ>
[  509.837461][    C1]  tipc_crypto_xmit+0x1949/0x2560
[  509.842673][    C1]  ? tipc_crypto_do_cmd+0xd60/0xd60
[  509.847972][    C1]  tipc_bearer_xmit_skb+0x228/0x3c0
[  509.853218][    C1]  ? tipc_bearer_min_mtu+0x190/0x190
[  509.858584][    C1]  tipc_disc_timeout+0x568/0x6b0
[  509.863669][    C1]  ? tipc_disc_create+0x920/0x920
[  509.868775][    C1]  ? tipc_disc_create+0x920/0x920
[  509.873868][    C1]  call_timer_fn+0x16c/0x530
[  509.878524][    C1]  ? tipc_disc_create+0x920/0x920
[  509.883593][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  509.889735][    C1]  ? __run_timers+0x7c0/0x7c0
[  509.894463][    C1]  ? rcu_is_watching+0x11/0xa0
[  509.899277][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  509.904562][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  509.909822][    C1]  ? tipc_disc_create+0x920/0x920
[  509.914904][    C1]  __run_timers+0x525/0x7c0
[  509.919461][    C1]  ? detach_timer+0x2b0/0x2b0
[  509.924168][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  509.930216][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  509.935124][    C1]  ? ktime_get_real_ts64+0x420/0x420
[  509.940473][    C1]  run_timer_softirq+0x63/0xf0
[  509.945380][    C1]  handle_softirqs+0x328/0x820
[  509.950204][    C1]  ? __irq_exit_rcu+0x12f/0x220
[  509.955202][    C1]  ? do_softirq+0x200/0x200
[  509.959763][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  509.965019][    C1]  __irq_exit_rcu+0x12f/0x220
[  509.969737][    C1]  ? irq_exit_rcu+0x20/0x20
[  509.974276][    C1]  irq_exit_rcu+0x5/0x20
[  509.978574][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  509.984252][    C1]  </IRQ>
[  509.987221][    C1]  <TASK>
[  509.990207][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  509.996273][    C1] RIP: 0010:default_idle+0xb/0x10
[  510.001347][    C1] Code: bf 48 89 df e8 26 8c 12 f8 eb b5 e8 3f be f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 97 13 5b 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[  510.021129][    C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2
[  510.027267][    C1] RAX: 9e854afec0e25100 RBX: ffff88813fe48000 RCX: 9e854afec0e25100
[  510.035321][    C1] RDX: 0000000000000001 RSI: ffffffff8a0b11c0 RDI: ffffffff8a59a740
[  510.043391][    C1] RBP: ffffc90000d67e80 R08: dffffc0000000000 R09: ffffed101722765a
[  510.051467][    C1] R10: ffffed101722765a R11: 1ffff11017227659 R12: ffffffff8d68abe8
[  510.059519][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11027fc9000
[  510.067591][    C1]  default_idle_call+0x81/0xc0
[  510.072398][    C1]  do_idle+0x21b/0x5b0
[  510.076539][    C1]  ? idle_inject_timer_fn+0x60/0x60
[  510.081780][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  510.087047][    C1]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  510.092775][    C1]  cpu_startup_entry+0x14/0x20
[  510.097699][    C1]  start_secondary+0x31f/0x430
[  510.102513][    C1]  ? arch_scale_freq_tick+0x120/0x120
[  510.107952][    C1]  secondary_startup_64_no_verify+0xb1/0xbb
[  510.113909][    C1]  </TASK>
[  510.116980][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  510.124250][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.185-syzkaller #0
[  510.132045][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  510.142097][    C1] Call Trace:
[  510.145371][    C1]  <IRQ>
[  510.148210][    C1]  dump_stack_lvl+0x168/0x230
[  510.152885][    C1]  ? show_regs_print_info+0x20/0x20
[  510.158077][    C1]  ? load_image+0x3b0/0x3b0
[  510.162580][    C1]  panic+0x2c9/0x7f0
[  510.166473][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  510.170978][    C1]  ? secondary_startup_64_no_verify+0xb1/0xbb
[  510.177041][    C1]  ? refcount_warn_saturate+0xff/0x1a0
[  510.182501][    C1]  __warn+0x248/0x2b0
[  510.186482][    C1]  ? refcount_warn_saturate+0xff/0x1a0
[  510.191936][    C1]  report_bug+0x1b7/0x2e0
[  510.196262][    C1]  handle_bug+0x3a/0x70
[  510.200414][    C1]  exc_invalid_op+0x16/0x40
[  510.204912][    C1]  asm_exc_invalid_op+0x16/0x20
[  510.209756][    C1] RIP: 0010:refcount_warn_saturate+0xff/0x1a0
[  510.215821][    C1] Code: 09 01 48 c7 c7 40 6b 59 8a e8 dd 27 bb 05 0f 0b eb e0 e8 04 42 9c fd c6 05 ae 8f 79 09 01 48 c7 c7 80 6a 59 8a e8 c1 27 bb 05 <0f> 0b eb c4 e8 e8 41 9c fd c6 05 93 8f 79 09 01 48 c7 c7 e0 6a 59
[  510.235424][    C1] RSP: 0018:ffffc90000dd0848 EFLAGS: 00010246
[  510.241526][    C1] RAX: 9e854afec0e25100 RBX: 0000000000000002 RCX: ffff88813fe48000
[  510.249529][    C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000
[  510.257511][    C1] RBP: ffffc90000dd09b0 R08: dffffc0000000000 R09: fffff520001ba06d
[  510.265497][    C1] R10: fffff520001ba06d R11: 1ffff920001ba06c R12: ffff888073831a80
[  510.273486][    C1] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000
[  510.281470][    C1]  ? refcount_warn_saturate+0xff/0x1a0
[  510.286942][    C1]  tipc_crypto_xmit+0x1949/0x2560
[  510.291990][    C1]  ? tipc_crypto_do_cmd+0xd60/0xd60
[  510.297204][    C1]  tipc_bearer_xmit_skb+0x228/0x3c0
[  510.302434][    C1]  ? tipc_bearer_min_mtu+0x190/0x190
[  510.307731][    C1]  tipc_disc_timeout+0x568/0x6b0
[  510.312675][    C1]  ? tipc_disc_create+0x920/0x920
[  510.317709][    C1]  ? tipc_disc_create+0x920/0x920
[  510.322727][    C1]  call_timer_fn+0x16c/0x530
[  510.327317][    C1]  ? tipc_disc_create+0x920/0x920
[  510.332344][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  510.338325][    C1]  ? __run_timers+0x7c0/0x7c0
[  510.343243][    C1]  ? rcu_is_watching+0x11/0xa0
[  510.348148][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  510.353362][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  510.358573][    C1]  ? tipc_disc_create+0x920/0x920
[  510.363620][    C1]  __run_timers+0x525/0x7c0
[  510.368141][    C1]  ? detach_timer+0x2b0/0x2b0
[  510.372822][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  510.378812][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  510.383664][    C1]  ? ktime_get_real_ts64+0x420/0x420
[  510.388953][    C1]  run_timer_softirq+0x63/0xf0
[  510.393723][    C1]  handle_softirqs+0x328/0x820
[  510.398486][    C1]  ? __irq_exit_rcu+0x12f/0x220
[  510.403341][    C1]  ? do_softirq+0x200/0x200
[  510.407852][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  510.413049][    C1]  __irq_exit_rcu+0x12f/0x220
[  510.417722][    C1]  ? irq_exit_rcu+0x20/0x20
[  510.422226][    C1]  irq_exit_rcu+0x5/0x20
[  510.426470][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  510.432116][    C1]  </IRQ>
[  510.435043][    C1]  <TASK>
[  510.437967][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  510.443943][    C1] RIP: 0010:default_idle+0xb/0x10
[  510.448972][    C1] Code: bf 48 89 df e8 26 8c 12 f8 eb b5 e8 3f be f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 97 13 5b 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[  510.468789][    C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2
[  510.474862][    C1] RAX: 9e854afec0e25100 RBX: ffff88813fe48000 RCX: 9e854afec0e25100
[  510.483007][    C1] RDX: 0000000000000001 RSI: ffffffff8a0b11c0 RDI: ffffffff8a59a740
[  510.491236][    C1] RBP: ffffc90000d67e80 R08: dffffc0000000000 R09: ffffed101722765a
[  510.499220][    C1] R10: ffffed101722765a R11: 1ffff11017227659 R12: ffffffff8d68abe8
[  510.507191][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11027fc9000
[  510.515187][    C1]  default_idle_call+0x81/0xc0
[  510.519960][    C1]  do_idle+0x21b/0x5b0
[  510.524034][    C1]  ? idle_inject_timer_fn+0x60/0x60
[  510.529255][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  510.534483][    C1]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  510.540151][    C1]  cpu_startup_entry+0x14/0x20
[  510.544913][    C1]  start_secondary+0x31f/0x430
[  510.549676][    C1]  ? arch_scale_freq_tick+0x120/0x120
[  510.555049][    C1]  secondary_startup_64_no_verify+0xb1/0xbb
[  510.560946][    C1]  </TASK>
[  510.564237][    C1] Kernel Offset: disabled
[  510.568876][    C1] Rebooting in 86400 seconds..