last executing test programs:

2m31.100117151s ago: executing program 1 (id=13):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r1, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0)

2m30.662887727s ago: executing program 1 (id=14):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x3}, 0x8)

2m30.341331652s ago: executing program 1 (id=18):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0xff7e82)

2m29.265912808s ago: executing program 1 (id=20):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000140)='./file0\x00')
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')

2m27.925578257s ago: executing program 1 (id=26):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
splice(r0, 0x0, r2, 0x0, 0x2000, 0x0)

2m26.558251257s ago: executing program 1 (id=34):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f00000001c0)='%+9llu \x00'}, 0x20)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0x1, 0x71c, 0x0, 0x0, 0xa, 0x0, 0xc2ca4bd923256b4d, 0x32}, {@in=@loopback, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0x6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x21}, {0xffffffff}, 0x80, 0x34ff, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x2000c002}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0)

2m26.059264054s ago: executing program 32 (id=34):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f00000001c0)='%+9llu \x00'}, 0x20)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0x1, 0x71c, 0x0, 0x0, 0xa, 0x0, 0xc2ca4bd923256b4d, 0x32}, {@in=@loopback, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0x6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x21}, {0xffffffff}, 0x80, 0x34ff, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x2000c002}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0)

4.992521657s ago: executing program 4 (id=1181):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.864851729s ago: executing program 4 (id=1184):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162a82, 0x0)
fallocate(r0, 0x10, 0x0, 0x72200)

4.695992301s ago: executing program 4 (id=1187):
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0)

3.832653434s ago: executing program 4 (id=1193):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="6e6f666c7573685f6d657267652c6e6f757365725f78617474722c6e6f71756f74612c6e6f71756f74612c6e6f646973636172642c6e6f696e6c696e655f64656e7472792c6a71666d743d76667376312c6a71666d743d7666737630000072706a71756f74613d272c6e6f62ba6172726965722c6e6f696e6c696e655f78617474722c00532ce9c75edc805c73af1e7e080908b718fd0828a937e3586554bcab7e1be7aa73459f8662170e991ca8c4b33e9be8c461e5cf93a3f06906d6fa59c7f8886f0b8367599af6dfca0f52ccf121a48c05cee074649107e6b6f3c1de6e4ecb13afd6d0b7a37e1ca7f2a73cfa86fec83ff91813514fc5dad59ef8a68267e2bc0900000000000000a3459a462407e6200beefe217570be55fa53ae668bc248f9910750fe29462516b37659f6d761b21b6ad0715f34", @ANYRES64, @ANYBLOB="3a4be99f9f727e8d0262285f8311dc64a122b0328932c72b2382283dcb1539cb6d4840c2d90f6bb77b5e93c4b5", @ANYRESOCT], 0x1, 0x5530, &(0x7f000000c740)="$eJzs3EtvG1UbB/DHSdP72zdCLNh1pAopkWqrTi+CXYFWXESrqsCCFTi2a7m1PVHsOiErFiwRC74JAokVSz4DC9bsEAsQO6Qgz5m0DTQSIk5M099PGv9njsfPnGNVlZ6ZyAE8txaz33+txLk4FRHzEXE2otivlFvheoqXIuJ8RMw9sVXK8UcDxyPidFEqYjHVrJRvfXlxfOHqL+/89t0PJ46d+erbH2e1ZmD2Xo6I/lra3+inzDsp75fjjXG3yP6VcZnpjf6D8jhPudFeLSpsNHbOaxR5uZPOz9ceDid5r9doTrLTvVeMrw3SBYfjzk6d4gP3G+vFcau9WmR3mBfZ2Urz2txK/ztuDUepTqus90lRPkajnUzj7c12Ws/agyKbg+35NJ7q5q325iTHZZaXi2beaxXzWN3HF/0f92538HAzG7fXh918kF2t1V+p1a9V6+t5qz1qX6k2+q1rV7KlTm9yWnXUbvSvd/K802vXmnl/OVvqNJvVej1butFe7TYGWb1eu1y7VL26XO5dzN68/UHWa2VLk3y9O3g46vaG2b18PUufWM5WapdfXc4u1LP3bt3J7ty9efPWnffjxoe3X7v19hvlSX+bVra0cmllpVq/VF2pLx+Z9Z9/tP6P9lj/Z+Wkp7h+2JfKrCcA8Ow5oP4/4pz+H9jbwfX/63dje7sYn17/f6LIx/1/yn/f/4/Kcf3/tPrf7Wn2/3v1v0e7/5/J+mFf9P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+tnxa+fqvYWUzHZ8rx/5VDL5THlYiYi4jtp5iP47tqzpd1FvY4f+Evc/i+EkWFyTVOlNvpiLhebn/8/6C/BQAAADi6vvn0/BepW08vi7OeEIcp3bSZO/vxlOpVImJh8ecpVZubvLw4pWLFv+9jsTmlasUNrJNTKpZuuR2bVrV/ZH5XnHwiKinmDnU6AADAodjdCRxuFwIAAMBh+vxpgxrBo68SO48yd54FF395//iB4KldRwAAAMAzqDLrCQAAAAAHruj//f4fAAAAHG3p9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5k535u1AaiOAA/2ziQfwqKck8r3KCMlJBjjhEFpAlKIC2kAWogt5QQwQqPFy0rdrWSx/bu6vskGMaCHzMIH+aNNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD06W+9Xf3++fVX15zDsZs8swEAAACu2dfbVfNinvrv2+sf20uf234REWVEXFu7V/HmIrNqc+oH3l/fG8OfiCbh9B3T9vEuIhZVxCIi/n/q+1cAAACA12u33izTaj09zcceEENKRZvyw7dMeUVE1PN/mdLKU96XTGHN/3sSPzKlNQWsWaawVHKb5Ep7kuZ2P1ftZneaIjXl45/PNncAAGBA1UUz7CoEAACAIX0fewCMo4jbrczzVuA0Ne323tuLHgAAAPACFWMPAAAAAOhds/5/1uf/hfP/AAAAoKt0/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB92tfb1W69WXbNORy7yTMbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG7Yn3cUCIEwCIO96zuTuf9hpUFTU5MqED7+xmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDe/+8v/ialxJpl7bSw9jyRrp8bWqbF3bhz9YXz9GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GJ/XlIgBIIgCuaM/530/Q8rCXoGESKg4VFFLRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgi373y/+JqXEmmTttLB2PJGtXja2rxt6DxtGD8fZvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GLnDl7jqMIAgL+Z2dnYqhij5BARBQ96sem2tvYmHpTgwT9BCOm2xq6KNQdbipCLt5JzL6JHEUGJt/4PPbfQS731kEMFD54ib3Zm82wrrq2d2XZ/P3jzvh2Ged+bhZDvvUkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCx9+5BXMTD4jjO63PX71zaiP2Nu/ro6s7NldhinLWZ9OPh5fRDttxdIgAAAMyPoqnvQwi3yt212OeLVf1fNtfEmv+7Z8dxU8/fXfc3fVP7x/brL7dfnAy0OB4n3vTM5mh49N5Ueo9ulrPtuX+9olc9+Wrtpai+kPyD7Rf2yup5ZpevXXuvX4ULbWQLADyII01fB83vQ7EfdJkYAHOjlxTeTf1fLHabEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAb9rbD002chRBWegdxdOPOpY379Vd3bq407eSVKzvpPeMtyhDCmc3R8GiLc5l1X164eG59NBqebz94JYTQ1ejv1NM/99EUF4fQyfMR/E9BXn/Zs5LP4xF0+EMJAIAnUlm3WNffKnfX4rlsKYT97/9e/7+exGHK+v/2xyevp2Ol9f+gtRl2aCGJ83++bHXrz/39/QsX39z8dP3s8Ozws7eODd4eHD914sSp1WqtZNWKCQAAAA+nX7e0/s+X7t3/P5zEYcr6/4tvB1+nYxXzVv9P6WDTr+tMAAAA5tvzr/7xe3af81m/H75a39o6PxgfJ5+PjY8PONzlh0z3P1moW1r/F0ttZgAAAAB0ZW87myx5xOB0Eocp9/+f+eGln9J7FiGEQ/X+/5GNz0en25vOTGvjz4m7niMAAADdOlS3dP+/rN7/zyf1fx5CeOO1cVz/G8Cp6v/i/W9+TMdK3/8/3t4UZ1K+PH4eVb8cQm+564wAAAB4kj1Vt1js/1burn3y8+EP+97/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjbXwEAAP//cDpDKw==")
r0 = open(&(0x7f0000000040)='./file1\x00', 0x181042, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
fdatasync(r0)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)

3.643465007s ago: executing program 2 (id=1195):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x17c04, r0, 0x40, 0x1000fffff, 0x9})

3.338001611s ago: executing program 0 (id=1198):
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x20)
close(r0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

3.179412134s ago: executing program 2 (id=1199):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0xb, 0x5, 0x148, 0x128, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'wg0\x00', 'nr0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00', {}, 0x4, 0x6}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'team0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffc, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0)

2.963827747s ago: executing program 2 (id=1200):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file2\x00', 0x200800, &(0x7f0000000380)={[{@lazytime}, {@gquota}, {@filestreams}, {@uqnoenforce}, {@noalign}]}, 0x4, 0x9698, &(0x7f000001c340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x185042, 0x1d8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1b, 0x11, r0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0)

2.70339803s ago: executing program 3 (id=1202):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

2.590856732s ago: executing program 5 (id=1203):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0xfdef)

2.374387235s ago: executing program 4 (id=1204):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000000), 0x4, 0x982a, &(0x7f0000009b80)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

2.373949226s ago: executing program 0 (id=1205):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000200)={{0x7, 0xe339, 0x1, 0x1}, 'syz1\x00', 0x15})
ioctl$UI_DEV_CREATE(r0, 0x5501)

2.282361947s ago: executing program 5 (id=1206):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
openat$cgroup_subtree(r0, &(0x7f0000000280), 0x2, 0x0)

2.145356739s ago: executing program 5 (id=1207):
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101a02, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x3, 0x2, 0x6e}, 0x2c)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x2, 0x4, 0x87e}, {@loopback, 0x4e20, 0x2, 0xc6, 0x80012d58, 0x12d5c}}, 0x44)

2.143986989s ago: executing program 0 (id=1208):
socket$netlink(0x10, 0x3, 0xb)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
getcwd(0x0, 0x0)

1.991500081s ago: executing program 5 (id=1209):
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x8e4}, 0x801)
r0 = socket(0x2, 0x3, 0xff)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x58)

1.942456872s ago: executing program 0 (id=1210):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000)
r1 = dup2(r0, r0)
read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020)

1.793558954s ago: executing program 5 (id=1211):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

1.597605847s ago: executing program 2 (id=1212):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@utf8no}, {@uni_xlate}, {@fat=@errors_remount}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@rodir}]}, 0x2a, 0x33c, &(0x7f0000000a40)="$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")
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x275a, 0x0)

1.286072101s ago: executing program 0 (id=1213):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYRES8=0x0], 0x25, 0x5586, &(0x7f00000079c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)

1.141817623s ago: executing program 3 (id=1214):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000005c0)="3512", 0x2}], 0x1}, 0x4040891)
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4)
sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="d0", 0x1}], 0x1}, 0x4004890)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002)

960.053866ms ago: executing program 3 (id=1215):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000034c0)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0xcac)
fchown(r0, r2, r3)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x4}, [], {0x4, 0x4}, [], {0x10, 0x1}, {0x20, 0x5}}, 0x24, 0x2)

832.146888ms ago: executing program 3 (id=1216):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b'])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

731.055679ms ago: executing program 4 (id=1217):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000740)={0x1f, @none}, 0x8)
listen(r0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x8)
accept4(r0, 0x0, 0x0, 0x80800)

562.328682ms ago: executing program 3 (id=1218):
syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000300)='./bus\x00', 0x2000002, &(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYRES32=0x0], 0xfe, 0x60f5, &(0x7f000000d780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x0)
getdents64(r0, 0x0, 0x22)
syz_mount_image$msdos(&(0x7f0000000380), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000))

416.478304ms ago: executing program 0 (id=1219):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00'], 0x3}}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf)

262.435706ms ago: executing program 2 (id=1220):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

86.365699ms ago: executing program 2 (id=1221):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

51.634729ms ago: executing program 5 (id=1222):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f00000000c0)=""/8)

0s ago: executing program 3 (id=1223):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r1 = dup(r0)
read$FUSE(r1, &(0x7f00000025c0)={0x2020}, 0x2020)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)

kernel console output (not intermixed with test programs):

17][ T6113] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  172.877756][   T26] audit: type=1804 audit(1748922908.623:163): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.541" name="/newroot/107/file1/file1" dev="loop4" ino=15 res=1 errno=0
[  172.899086][ T6118] loop3: detected capacity change from 0 to 512
[  172.907110][ T6118] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  172.913442][ T6119] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.541: bg 0: block 264: padding at end of block bitmap is not set
[  172.968721][ T6118] EXT4-fs (loop3): 1 truncate cleaned up
[  172.983596][ T6118] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  173.222281][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  173.236194][ T4529] usb 1-1: reset high-speed USB device number 6 using dummy_hcd
[  173.477292][ T6130] loop2: detected capacity change from 0 to 128
[  173.516284][ T6130] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  173.567362][ T6130] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  173.599078][ T6130] ext2 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.624981][ T6131] loop3: detected capacity change from 0 to 8192
[  173.672417][ T6131] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  173.706165][ T6131] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  173.715462][ T6131] REISERFS (device loop3): using ordered data mode
[  173.744555][ T6131] reiserfs: using flush barriers
[  173.753978][ T6131] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  173.771283][ T6131] REISERFS (device loop3): checking transaction log (loop3)
[  173.775306][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  173.787282][ T6131] REISERFS (device loop3): Using rupasov hash to sort names
[  173.794639][ T6131] REISERFS (device loop3): using 3.5.x disk format
[  173.806520][ T6131] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  173.855241][ T6131] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  173.866869][ T6131] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  173.878319][ T6131] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  173.893492][ T6131] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  173.965394][ T6131] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  173.994630][ T6131] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  174.027312][ T6131] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  174.076503][ T4305] usb 1-1: USB disconnect, device number 6
[  174.099706][ T4305] hid-steam 0003:28DE:1142.000C: Steam wireless receiver disconnected
[  174.110824][ T6131] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  174.150690][ T6131] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  174.189509][ T6131] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  174.221185][ T6142] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  174.276605][ T6142] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  174.414755][ T6150] loop2: detected capacity change from 0 to 2048
[  174.496254][ T6150] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  174.505898][ T6150] NILFS (loop2): mounting unchecked fs
[  174.558693][ T6150] NILFS (loop2): recovery complete
[  174.610696][ T6159] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.451068][ T6183] loop2: detected capacity change from 0 to 8192
[  175.462812][ T6185] loop3: detected capacity change from 0 to 2048
[  175.491343][ T6183] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  175.516451][ T6183] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  175.533744][ T6185]  loop3: p1 < > p3
[  175.550099][ T6185] loop3: p3 size 134217728 extends beyond EOD, truncated
[  175.562978][ T6183] REISERFS (device loop2): using ordered data mode
[  175.585562][ T6183] reiserfs: using flush barriers
[  175.612661][ T6183] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  175.645781][ T6183] REISERFS (device loop2): checking transaction log (loop2)
[  175.682466][ T6193] loop0: detected capacity change from 0 to 128
[  175.703198][ T6183] REISERFS (device loop2): Using rupasov hash to sort names
[  175.720595][ T6193] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  175.724208][ T6183] REISERFS (device loop2): using 3.5.x disk format
[  175.737968][ T6193] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  175.740871][ T6183] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  175.784322][   T26] audit: type=1800 audit(1748922911.533:164): pid=6113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.541" name="file1" dev="loop4" ino=15 res=0 errno=0
[  175.821060][ T6183] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  175.871597][ T6183] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  175.886667][ T6183] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  175.938788][ T6183] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  176.005500][ T4254] EXT4-fs (loop0): unmounting filesystem.
[  176.031139][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  176.047608][ T6183] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.096525][ T6183] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.114363][ T6183] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.132490][ T6183] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.145454][ T6183] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.166507][ T6183] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  176.181626][ T6202] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  176.197468][ T6202] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.358444][ T4445] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  176.412955][ T4305] hid-generic 0000:0004:0009.000E: unknown main item tag 0x0
[  176.430814][ T4305] hid-generic 0000:0004:0009.000E: unknown main item tag 0x0
[  176.439545][ T4305] hid-generic 0000:0004:0009.000E: unknown main item tag 0x0
[  176.455299][ T4305] hid-generic 0000:0004:0009.000E: hidraw0: <UNKNOWN> HID v0.04 Device [syz0] on syz1
[  176.551894][ T4445] usb 1-1: Using ep0 maxpacket: 32
[  176.563271][ T4445] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  176.584991][ T4445] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  176.601928][ T4445] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  176.611162][ T4445] usb 1-1: Product: syz
[  176.615493][ T4445] usb 1-1: Manufacturer: syz
[  176.626056][ T4445] usb 1-1: SerialNumber: syz
[  176.633052][ T4445] usb 1-1: config 0 descriptor??
[  176.639247][ T6199] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  176.856309][ T6210] loop4: detected capacity change from 0 to 32768
[  176.884379][ T4445] usb 1-1: USB disconnect, device number 7
[  176.903678][ T6210] XFS (loop4): Mounting V5 Filesystem
[  176.972578][ T6210] XFS (loop4): Ending clean mount
[  176.993560][ T6210] XFS (loop4): Quotacheck needed: Please wait.
[  177.067943][ T6210] XFS (loop4): Quotacheck: Done.
[  177.202928][ T4252] XFS (loop4): Unmounting Filesystem
[  177.402922][ T6239] loop2: detected capacity change from 0 to 1024
[  177.420782][ T6239] EXT4-fs: Ignoring removed bh option
[  177.471499][ T6239] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  177.559954][ T6237] loop5: detected capacity change from 0 to 8192
[  177.617735][ T6237] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  177.631681][ T6235] loop3: detected capacity change from 0 to 32768
[  177.640552][ T6235] XFS: ikeep mount option is deprecated.
[  177.646296][ T6235] XFS: noikeep mount option is deprecated.
[  177.653129][ T6237] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  177.663370][ T6237] REISERFS (device loop5): using ordered data mode
[  177.670123][ T6237] reiserfs: using flush barriers
[  177.692893][ T6237] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  177.709859][ T6237] REISERFS (device loop5): checking transaction log (loop5)
[  177.718660][ T6237] REISERFS (device loop5): Using rupasov hash to sort names
[  177.732626][ T6237] REISERFS (device loop5): using 3.5.x disk format
[  177.739766][ T6237] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  177.752613][ T6237] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  177.765558][ T6237] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  177.784661][ T6237] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  177.800314][ T6237] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  177.813879][ T6235] XFS (loop3): Mounting V5 Filesystem
[  177.840911][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  177.864836][ T6237] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  177.977582][ T6237] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  177.983117][ T6235] XFS (loop3): Ending clean mount
[  178.012450][ T6235] XFS (loop3): Quotacheck needed: Please wait.
[  178.034068][ T6237] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  178.061007][ T6237] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  178.079549][ T6237] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  178.091181][ T6237] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  178.109505][ T6235] XFS (loop3): Quotacheck: Done.
[  178.127159][ T6263] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  178.142102][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  178.192235][ T6235] XFS (loop3): User initiated shutdown received.
[  178.199888][ T6263] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  178.203101][ T6266] loop4: detected capacity change from 0 to 1024
[  178.219559][ T6235] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  178.246803][ T6235] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  178.302542][ T6266] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  178.323376][ T4264] XFS (loop3): Unmounting Filesystem
[  178.399603][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  178.700110][ T6276] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  179.037104][ T4305] hid-generic 0005:16C4:5505.000F: unknown main item tag 0x6
[  179.045223][ T4305] hid-generic 0005:16C4:5505.000F: unknown main item tag 0x3
[  179.123188][ T4305] hid-generic 0005:16C4:5505.000F: hidraw0: BLUETOOTH HID v0.8f Device [syz0] on aa:aa:aa:aa:aa:aa
[  179.585253][ T6294] loop4: detected capacity change from 0 to 32768
[  179.642832][ T6294] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  179.687892][ T6294] (syz.4.604,6294,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1
[  179.705044][ T6294] (syz.4.604,6294,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1
[  179.808021][ T4252] ocfs2: Unmounting device (7,4) on (node local)
[  179.843599][ T6310] loop3: detected capacity change from 0 to 1024
[  179.922538][ T6310] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  179.935892][ T6310] hfsplus: xattr searching failed
[  179.961584][ T6311] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  180.128977][ T4445] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  180.186816][ T6315] loop4: detected capacity change from 0 to 8192
[  180.234455][ T6315] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  180.247603][ T6315] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  180.256825][ T6315] REISERFS (device loop4): using ordered data mode
[  180.264043][ T6315] reiserfs: using flush barriers
[  180.270752][ T6315] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  180.288358][ T6315] REISERFS (device loop4): checking transaction log (loop4)
[  180.298711][ T6315] REISERFS (device loop4): Using rupasov hash to sort names
[  180.306062][ T6315] REISERFS (device loop4): using 3.5.x disk format
[  180.313198][ T6315] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  180.324471][ T6315] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  180.335650][ T6315] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  180.347413][ T6315] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  180.362252][ T6315] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  180.382361][ T4445] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  180.396952][ T4445] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.415204][ T4445] usb 6-1: Product: syz
[  180.419504][ T4445] usb 6-1: Manufacturer: syz
[  180.424135][ T4445] usb 6-1: SerialNumber: syz
[  180.438730][ T4445] usb 6-1: config 0 descriptor??
[  180.453787][ T6315] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  180.473218][ T6315] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  180.525676][ T6315] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  180.552018][ T6315] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  180.569775][ T6315] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  180.585822][ T6315] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  180.656260][ T6315] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  180.679842][ T4445] usb 6-1: USB disconnect, device number 6
[  180.681453][ T6313] loop2: detected capacity change from 0 to 32768
[  180.728816][ T6315] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  180.873565][ T6334] loop3: detected capacity change from 0 to 24
[  180.990339][ T6313] XFS (loop2): Mounting V5 Filesystem
[  181.113115][ T6342] input: syz0 as /devices/virtual/input/input13
[  181.133699][ T6313] XFS (loop2): Ending clean mount
[  181.152533][ T6313] XFS (loop2): Quotacheck needed: Please wait.
[  181.229924][ T6313] XFS (loop2): Quotacheck: Done.
[  181.378068][ T4257] XFS (loop2): Unmounting Filesystem
[  181.573409][ T6358] loop0: detected capacity change from 0 to 512
[  181.593901][ T6358] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  181.620738][ T6358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  181.639227][ T6358] System zones: 1-12
[  181.683998][ T6358] EXT4-fs (loop0): 1 truncate cleaned up
[  181.724100][ T6358] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  181.947826][ T4254] EXT4-fs (loop0): unmounting filesystem.
[  182.124404][ T6372] Context (ID=0x0) not attached to queue pair (handle=0x0:0xfffffff9)
[  182.267484][   T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  182.293710][ T6376] loop2: detected capacity change from 0 to 2048
[  182.352764][ T6380] device syzkaller1 entered promiscuous mode
[  182.373537][ T6382] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.395096][   T26] audit: type=1800 audit(1748922918.142:165): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.634" name="file1" dev="loop2" ino=15 res=0 errno=0
[  182.467262][   T27] usb 4-1: Using ep0 maxpacket: 8
[  182.476613][   T27] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  182.527033][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.544436][   T27] usb 4-1: Product: syz
[  182.554526][   T27] usb 4-1: Manufacturer: syz
[  182.569666][   T27] usb 4-1: SerialNumber: syz
[  182.578187][   T27] usb 4-1: config 0 descriptor??
[  182.599681][   T27] gspca_main: se401-2.14.0 probing 047d:5003
[  182.787934][ T6390] loop0: detected capacity change from 0 to 8192
[  182.813608][ T6390] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  182.860575][ T6401] loop5: detected capacity change from 0 to 164
[  182.867007][ T6390] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  182.884719][ T6401] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  182.893142][ T4261] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  182.907923][ T6390] REISERFS (device loop0): using ordered data mode
[  182.917154][ T6401] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  182.925455][ T6390] reiserfs: using flush barriers
[  182.939284][ T6401] Symlink component flag not implemented
[  182.949715][ T6390] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  182.976660][ T6401] Symlink component flag not implemented
[  182.989552][ T6390] REISERFS (device loop0): checking transaction log (loop0)
[  182.997181][ T6401] Symlink component flag not implemented (7)
[  183.002203][   T27] gspca_se401: Bayer format not supported!
[  183.016768][ T6401] Symlink component flag not implemented (116)
[  183.110230][ T4261] usb 3-1: Using ep0 maxpacket: 32
[  183.122113][ T4261] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  183.155456][ T4261] usb 3-1: config 0 has no interface number 0
[  183.169027][ T4261] usb 3-1: config 0 interface 12 has no altsetting 0
[  183.181876][ T4261] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  183.196580][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.202952][ T6390] REISERFS (device loop0): Using tea hash to sort names
[  183.205937][ T4261] usb 3-1: Product: syz
[  183.216053][ T6390] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  183.219089][ T4261] usb 3-1: Manufacturer: syz
[  183.237291][ T4261] usb 3-1: SerialNumber: syz
[  183.244136][ T4261] usb 3-1: config 0 descriptor??
[  183.256741][   T27] usb 4-1: USB disconnect, device number 5
[  183.289959][ T6390] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [3 5 0x0 SD] (nlink == 2) not found (pos 4)
[  183.309442][ T6390] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [3 5 0x0 SD] (nlink == 3) not found (pos 4)
[  183.407188][ T6059] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  183.627686][ T6059] usb 5-1: Using ep0 maxpacket: 16
[  183.649339][ T6059] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  183.658808][ T6059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.668299][ T6059] usb 5-1: Product: syz
[  183.680341][ T6059] usb 5-1: Manufacturer: syz
[  183.681038][   T26] audit: type=1326 audit(1748922919.432:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ceef8e969 code=0x7ffc0000
[  183.684992][ T6059] usb 5-1: SerialNumber: syz
[  183.688289][ T6059] usb 5-1: config 0 descriptor??
[  183.715851][   T26] audit: type=1326 audit(1748922919.462:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ceef8e969 code=0x7ffc0000
[  183.723996][ T6059] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  183.746362][   T26] audit: type=1326 audit(1748922919.502:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4ceef8e969 code=0x7ffc0000
[  183.749188][ T6059] usb 5-1: Detected FT232H
[  183.769196][    C0] vkms_vblank_simulate: vblank timer overrun
[  183.798010][   T26] audit: type=1326 audit(1748922919.502:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ceef8e969 code=0x7ffc0000
[  183.820227][    C0] vkms_vblank_simulate: vblank timer overrun
[  183.855340][   T26] audit: type=1326 audit(1748922919.502:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ceef8e969 code=0x7ffc0000
[  183.898047][   T26] audit: type=1326 audit(1748922919.522:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ceef8e969 code=0x7ffc0000
[  183.920096][    C0] vkms_vblank_simulate: vblank timer overrun
[  183.935259][ T6059] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  184.117030][   T26] audit: type=1326 audit(1748922919.862:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ceef8e969 code=0x7ffc0000
[  184.198808][   T26] audit: type=1326 audit(1748922919.952:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ceef8e969 code=0x7ffc0000
[  184.220998][    C0] vkms_vblank_simulate: vblank timer overrun
[  184.288098][   T26] audit: type=1326 audit(1748922919.992:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ceef8e969 code=0x7ffc0000
[  184.298283][ T4261] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  184.329253][ T4261] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  184.347654][ T4261] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  184.362276][ T6059] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  184.375098][ T4261] f81534: probe of 3-1:0.12 failed with error -71
[  184.396346][ T4261] usb 3-1: USB disconnect, device number 8
[  184.496017][ T6436] netlink: 28 bytes leftover after parsing attributes in process `syz.5.661'.
[  184.505075][ T6436] netlink: 32 bytes leftover after parsing attributes in process `syz.5.661'.
[  184.521071][ T6436] netlink: 28 bytes leftover after parsing attributes in process `syz.5.661'.
[  184.532843][ T6436] netlink: 32 bytes leftover after parsing attributes in process `syz.5.661'.
[  184.584728][   T27] usb 5-1: USB disconnect, device number 10
[  184.590717][ T4305] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  184.636429][   T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  184.655949][   T27] ftdi_sio 5-1:0.0: device disconnected
[  184.769074][ T4305] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  184.787587][ T4305] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  184.817600][ T4305] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  184.826718][ T4305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.941938][ T6445] input: syz0 as /devices/virtual/input/input14
[  185.056147][ T4305] usb 4-1: GET_CAPABILITIES returned 0
[  185.062349][ T4305] usbtmc 4-1:16.0: can't read capabilities
[  185.116910][ T6441] loop5: detected capacity change from 0 to 40427
[  185.150116][ T6441] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  185.164474][ T6441] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  185.189406][ T6441] F2FS-fs (loop5): invalid crc value
[  185.222949][ T6441] F2FS-fs (loop5): Found nat_bits in checkpoint
[  185.244556][ T6456] loop2: detected capacity change from 0 to 128
[  185.260955][ T4261] usb 4-1: USB disconnect, device number 6
[  185.302462][ T6455] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  185.328202][ T6455] FAT-fs (loop2): Filesystem has been set read-only
[  185.335596][ T6441] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  185.367635][ T6441] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  185.376108][ T6455] syz.2.667: attempt to access beyond end of device
[  185.376108][ T6455] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  185.410104][ T6455] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  185.427796][ T6455] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  185.446407][ T6456] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  185.462836][ T6456] syz.2.667: attempt to access beyond end of device
[  185.462836][ T6456] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  185.490673][ T6456] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  185.501789][ T6456] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  185.514368][ T6456] syz.2.667: attempt to access beyond end of device
[  185.514368][ T6456] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  185.535611][ T6456] syz.2.667: attempt to access beyond end of device
[  185.535611][ T6456] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  186.292236][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.677'.
[  186.386572][ T6466] loop2: detected capacity change from 0 to 32768
[  186.454879][ T6466] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  186.486270][ T4261] hid-generic 0005:16C4:5505.0010: unknown main item tag 0x6
[  186.511041][ T6466] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  186.515883][ T4261] hid-generic 0005:16C4:5505.0010: unknown main item tag 0x3
[  186.585549][ T4261] hid-generic 0005:16C4:5505.0010: hidraw0: BLUETOOTH HID v0.8f Device [syz0] on aa:aa:aa:aa:aa:aa
[  186.656163][ T6473] loop0: detected capacity change from 0 to 32768
[  186.673844][ T6473] XFS: ikeep mount option is deprecated.
[  186.674253][ T4257] ocfs2: Unmounting device (7,2) on (node local)
[  186.683247][ T6473] XFS: noikeep mount option is deprecated.
[  186.741512][ T6473] XFS (loop0): Mounting V5 Filesystem
[  186.866156][ T6473] XFS (loop0): Ending clean mount
[  186.908140][ T6503] loop2: detected capacity change from 0 to 256
[  186.913813][ T6473] XFS (loop0): Quotacheck needed: Please wait.
[  187.034621][ T6473] XFS (loop0): Quotacheck: Done.
[  187.091062][ T6473] XFS (loop0): User initiated shutdown received.
[  187.115580][ T6473] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  187.147923][ T6473] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  187.218882][ T4254] XFS (loop0): Unmounting Filesystem
[  187.367887][ T4261] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  187.489107][ T6522] loop3: detected capacity change from 0 to 512
[  187.513620][ T6522] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  187.587903][ T4261] usb 6-1: Using ep0 maxpacket: 8
[  187.594938][ T4261] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  187.604481][ T4261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.621191][ T4261] pvrusb2: Hardware description: Terratec Grabster AV400
[  187.637997][ T4261] pvrusb2: **********
[  187.651202][ T4261] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  187.679213][ T4261] pvrusb2: Important functionality might not be entirely working.
[  187.687289][ T4261] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  187.699655][ T4261] pvrusb2: **********
[  187.822251][ T2310] pvrusb2: Invalid write control endpoint
[  187.873254][ T6059] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  187.978536][ T2310] pvrusb2: Invalid write control endpoint
[  187.984874][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  188.023361][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  188.037881][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  188.057884][ T2310] pvrusb2: Device being rendered inoperable
[  188.099768][ T6059] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.110593][ T6511] pvrusb2: Attempted to execute control transfer when device not ok
[  188.128554][ T6059] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  188.133951][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  188.148760][ T4305] usb 6-1: USB disconnect, device number 7
[  188.158544][ T6059] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  188.170237][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  188.186684][ T6059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  188.218169][ T6059] usb 4-1: SerialNumber: syz
[  188.228517][ T2310] pvrusb2: Attached sub-driver cx25840
[  188.261494][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  188.296129][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  188.448878][ T6059] usb 4-1: 0:2 : does not exist
[  188.474544][ T6532] loop0: detected capacity change from 0 to 40427
[  188.500210][ T6552] loop4: detected capacity change from 0 to 512
[  188.507193][ T6532] F2FS-fs (loop0): invalid crc value
[  188.507720][ T6059] usb 4-1: USB disconnect, device number 7
[  188.527823][ T6552] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  188.533219][ T6532] F2FS-fs (loop0): Found nat_bits in checkpoint
[  188.569730][ T6552] EXT4-fs (loop4): 1 truncate cleaned up
[  188.575454][ T6552] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  188.626956][ T6532] F2FS-fs (loop0): Start checkpoint disabled!
[  188.639217][ T6532] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  188.705876][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  188.868741][ T4609] kworker/u4:9: attempt to access beyond end of device
[  188.868741][ T4609] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  189.073657][ T6566] netlink: 64 bytes leftover after parsing attributes in process `syz.2.709'.
[  189.107099][ T6564] loop5: detected capacity change from 0 to 4096
[  189.195072][ T6564] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  189.211443][ T6564] ntfs3: loop5: Failed to load $Extend.
[  189.382916][ T6568] loop3: detected capacity change from 0 to 8192
[  189.421911][ T6568] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  189.439182][ T6568] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  189.448619][ T6568] REISERFS (device loop3): using ordered data mode
[  189.455179][ T6568] reiserfs: using flush barriers
[  189.462029][ T6568] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  189.478779][ T6568] REISERFS (device loop3): checking transaction log (loop3)
[  189.503034][ T6568] REISERFS (device loop3): Using r5 hash to sort names
[  189.515300][ T6568] REISERFS (device loop3): using 3.5.x disk format
[  189.523511][ T6568] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  189.632552][ T6583] loop0: detected capacity change from 0 to 64
[  189.699360][ T6585] netlink: 'syz.5.716': attribute type 1 has an invalid length.
[  189.717587][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.716'.
[  190.116672][ T6597] loop3: detected capacity change from 0 to 4096
[  190.172921][ T6604] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  190.199923][ T4529] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  190.214045][ T6603] device syzkaller1 entered promiscuous mode
[  190.241599][   T26] kauditd_printk_skb: 24 callbacks suppressed
[  190.241615][   T26] audit: type=1804 audit(1748922925.991:199): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.721" name="/newroot/132/file0/file1" dev="loop3" ino=15 res=1 errno=0
[  190.391923][ T4529] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.419992][ T4529] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.447712][ T4529] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  190.468438][ T4529] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.488714][ T6612] loop3: detected capacity change from 0 to 1024
[  190.495915][ T6612] EXT4-fs: Ignoring removed bh option
[  190.502444][ T4529] usb 6-1: config 0 descriptor??
[  190.559967][ T6612] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  190.704613][ T6621] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  190.750575][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  191.071314][ T6634] loop3: detected capacity change from 0 to 4096
[  191.145929][ T6634] NILFS (loop3): invalid segment: Checksum error in segment payload
[  191.163396][ T6634] NILFS (loop3): trying rollback from an earlier position
[  191.215971][ T6634] NILFS (loop3): recovery complete
[  191.246405][ T6641] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  191.329257][ T4529] letsketch 0003:6161:4D15.0011: Device info: Ñ„
[  191.478546][ T4305] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  191.561037][ T6636] loop2: detected capacity change from 0 to 40427
[  191.565221][ T4529] usb 6-1: Max retries (5) exceeded reading string descriptor 201
[  191.569052][ T6636] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  191.576944][ T4529] letsketch: probe of 0003:6161:4D15.0011 failed with error -71
[  191.588889][ T6636] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  191.594141][ T4529] usb 6-1: USB disconnect, device number 8
[  191.607078][ T6636] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x3ffff
[  191.616059][ T6636] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8
[  191.629080][ T6636] F2FS-fs (loop2): invalid crc value
[  191.642550][ T6636] F2FS-fs (loop2): Found nat_bits in checkpoint
[  191.678399][ T4305] usb 5-1: Using ep0 maxpacket: 16
[  191.685836][ T4305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.697694][ T4305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.697811][ T6636] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  191.708721][ T4305] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  191.723080][ T6636] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  191.735341][ T4305] usb 5-1: New USB device found, idVendor=0461, idProduct=07da, bcdDevice= 0.00
[  191.735372][ T4305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.759256][ T4305] usb 5-1: config 0 descriptor??
[  191.800122][ T6636] F2FS-fs (loop2): access invalid blkaddr:3
[  191.806160][ T6636] CPU: 1 PID: 6636 Comm: syz.2.735 Not tainted 6.1.140-syzkaller #0
[  191.814183][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  191.824249][ T6636] Call Trace:
[  191.827562][ T6636]  <TASK>
[  191.830521][ T6636]  dump_stack_lvl+0x168/0x22e
[  191.835247][ T6636]  ? show_regs_print_info+0x12/0x12
[  191.840494][ T6636]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  191.846351][ T6636]  f2fs_is_valid_blkaddr+0xc7e/0x1250
[  191.851764][ T6636]  f2fs_map_blocks+0xd37/0x3840
[  191.856690][ T6636]  ? f2fs_do_map_lock+0x70/0x70
[  191.861583][ T6636]  ? preempt_count_add+0x8d/0x190
[  191.866654][ T6636]  ? clear_nonspinnable+0x60/0x60
[  191.871713][ T6636]  ? preempt_count_add+0x8d/0x190
[  191.876779][ T6636]  ? up_write+0x1bb/0x420
[  191.881155][ T6636]  f2fs_precache_extents+0x17c/0x230
[  191.886480][ T6636]  ? f2fs_pin_file_control+0x1a0/0x1a0
[  191.891996][ T6636]  ? stack_trace_save+0x98/0xe0
[  191.896880][ T6636]  f2fs_fiemap+0x119/0x1990
[  191.901425][ T6636]  ? do_syscall_64+0x4c/0xa0
[  191.906045][ T6636]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  191.912158][ T6636]  ? f2fs_overwrite_io+0x1e0/0x1e0
[  191.917298][ T6636]  ? __lock_acquire+0x7c50/0x7c50
[  191.922356][ T6636]  ? __might_fault+0xa6/0x120
[  191.927083][ T6636]  ? __might_fault+0xc2/0x120
[  191.931777][ T6636]  ? __might_fault+0xa6/0x120
[  191.936497][ T6636]  do_vfs_ioctl+0x1425/0x1d10
[  191.941195][ T6636]  ? __ia32_compat_sys_ioctl+0x780/0x780
[  191.946848][ T6636]  ? tomoyo_path_number_perm+0x1b6/0x600
[  191.952504][ T6636]  ? __lock_acquire+0x7c50/0x7c50
[  191.957572][ T6636]  ? slab_free_freelist_hook+0x131/0x1a0
[  191.963224][ T6636]  ? tomoyo_path_number_perm+0x4ae/0x600
[  191.968871][ T6636]  ? __kmem_cache_free+0xb6/0x1f0
[  191.973909][ T6636]  ? tomoyo_path_number_perm+0x503/0x600
[  191.979553][ T6636]  ? tomoyo_path_number_perm+0x1b6/0x600
[  191.985196][ T6636]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  191.990699][ T6636]  ? __fget_files+0x28/0x4d0
[  191.995314][ T6636]  ? bpf_lsm_file_ioctl+0x5/0x10
[  192.000257][ T6636]  ? security_file_ioctl+0x7c/0xa0
[  192.005417][ T6636]  __se_sys_ioctl+0x83/0x170
[  192.010115][ T6636]  do_syscall_64+0x4c/0xa0
[  192.014542][ T6636]  ? clear_bhb_loop+0x60/0xb0
[  192.019225][ T6636]  ? clear_bhb_loop+0x60/0xb0
[  192.023908][ T6636]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  192.029819][ T6636] RIP: 0033:0x7f4d7098e969
[  192.034239][ T6636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.053867][ T6636] RSP: 002b:00007f4d717d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  192.062291][ T6636] RAX: ffffffffffffffda RBX: 00007f4d70bb5fa0 RCX: 00007f4d7098e969
[  192.070272][ T6636] RDX: 0000200000000180 RSI: 00000000c020660b RDI: 0000000000000004
[  192.078247][ T6636] RBP: 00007f4d70a10ab1 R08: 0000000000000000 R09: 0000000000000000
[  192.086224][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.094200][ T6636] R13: 0000000000000000 R14: 00007f4d70bb5fa0 R15: 00007ffdef994918
[  192.102198][ T6636]  </TASK>
[  192.105309][    C1] vkms_vblank_simulate: vblank timer overrun
[  192.213603][ T4257] syz-executor: attempt to access beyond end of device
[  192.213603][ T4257] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  192.267999][ T6652] loop0: detected capacity change from 0 to 256
[  192.343234][ T4305] hid-generic 0003:0461:07DA.0012: ignoring exceeding usage max
[  192.350129][ T6652] FAT-fs (loop0): Directory bread(block 64) failed
[  192.377846][ T6652] FAT-fs (loop0): Directory bread(block 65) failed
[  192.381785][ T4305] hid-generic 0003:0461:07DA.0012: unbalanced collection at end of report description
[  192.396187][ T6652] FAT-fs (loop0): Directory bread(block 66) failed
[  192.413040][ T4305] hid-generic: probe of 0003:0461:07DA.0012 failed with error -22
[  192.428494][ T6652] FAT-fs (loop0): Directory bread(block 67) failed
[  192.436001][ T6652] FAT-fs (loop0): Directory bread(block 68) failed
[  192.457771][ T6652] FAT-fs (loop0): Directory bread(block 69) failed
[  192.476773][ T6652] FAT-fs (loop0): Directory bread(block 70) failed
[  192.479241][ T6656] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  192.491858][ T6652] FAT-fs (loop0): Directory bread(block 71) failed
[  192.506611][ T6652] FAT-fs (loop0): Directory bread(block 72) failed
[  192.514173][ T6652] FAT-fs (loop0): Directory bread(block 73) failed
[  192.554486][ T4261] usb 5-1: USB disconnect, device number 11
[  192.768618][   T27] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  192.970263][   T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  192.997707][   T27] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  193.038123][   T27] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  193.057641][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  193.076174][   T27] usb 6-1: SerialNumber: syz
[  193.083012][ T6661] loop3: detected capacity change from 0 to 40427
[  193.095225][ T6661] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff
[  193.107893][ T6661] F2FS-fs (loop3): invalid crc value
[  193.164668][ T6661] F2FS-fs (loop3): Found nat_bits in checkpoint
[  193.214989][ T6665] loop2: detected capacity change from 0 to 32768
[  193.233580][ T6665] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.743 (6665)
[  193.253468][ T6665] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  193.270879][ T6665] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  193.271654][ T6671] loop0: Can't mount, would change RO state
[  193.286033][ T6665] BTRFS info (device loop2): using free space tree
[  193.296972][ T6661] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  193.310684][   T27] usb 6-1: 0:2 : does not exist
[  193.333896][   T27] usb 6-1: USB disconnect, device number 9
[  193.369940][ T4264] syz-executor: attempt to access beyond end of device
[  193.369940][ T4264] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  193.447889][ T6665] BTRFS info (device loop2): enabling ssd optimizations
[  193.568432][ T4257] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  193.805869][ T6697] loop0: detected capacity change from 0 to 512
[  193.817693][ T6697] EXT4-fs: Ignoring removed nomblk_io_submit option
[  193.847163][ T6697] EXT4-fs: Ignoring removed i_version option
[  193.958757][ T4305] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  193.970756][ T6697] EXT4-fs (loop0): 1 orphan inode deleted
[  193.976567][ T6697] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  194.116746][ T4254] EXT4-fs (loop0): unmounting filesystem.
[  194.158695][ T4305] usb 5-1: Using ep0 maxpacket: 8
[  194.177640][ T4305] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  194.218856][ T4305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.226918][ T4305] usb 5-1: Product: syz
[  194.241504][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  194.247847][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  194.262138][ T4305] usb 5-1: Manufacturer: syz
[  194.266796][ T4305] usb 5-1: SerialNumber: syz
[  194.288351][ T4305] usb 5-1: config 0 descriptor??
[  194.301436][ T4305] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  194.444687][ T6715] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  195.094978][ T4304] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  195.229852][ T6729] loop2: detected capacity change from 0 to 128
[  195.279143][ T4304] usb 1-1: Using ep0 maxpacket: 16
[  195.290505][ T4304] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.303212][ T4304] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.316615][ T4305] gspca_sonixj: reg_w1 err -71
[  195.339568][ T4304] usb 1-1: config 0 interface 0 has no altsetting 0
[  195.354607][ T4304] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  195.372519][ T4304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.391007][ T4304] usb 1-1: config 0 descriptor??
[  195.438848][ T4305] sonixj: probe of 5-1:0.0 failed with error -71
[  195.456030][ T4305] usb 5-1: USB disconnect, device number 12
[  195.808708][ T4304] apple 0003:05AC:0247.0013: fixing up Magic Keyboard JIS report descriptor
[  195.838884][ T4304] apple 0003:05AC:0247.0013: unexpected long global item
[  195.859062][ T4304] apple 0003:05AC:0247.0013: parse failed
[  195.868587][ T4304] apple: probe of 0003:05AC:0247.0013 failed with error -22
[  196.014334][ T4304] usb 1-1: USB disconnect, device number 8
[  196.086737][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.775'.
[  196.116190][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.775'.
[  196.454168][ T6737] loop3: detected capacity change from 0 to 32768
[  196.505564][ T6737] XFS (loop3): Mounting V5 Filesystem
[  196.556386][ T6737] XFS (loop3): Ending clean mount
[  196.745224][ T4264] XFS (loop3): Unmounting Filesystem
[  197.087753][ T6761] loop2: detected capacity change from 0 to 32768
[  197.151445][ T6761] XFS (loop2): Mounting V5 Filesystem
[  197.169184][ T6772] process 'syz.4.784' launched './file0' with NULL argv: empty string added
[  197.267873][ T6761] XFS (loop2): Ending clean mount
[  197.285255][ T6761] XFS (loop2): Quotacheck needed: Please wait.
[  197.358479][ T6761] XFS (loop2): Quotacheck: Done.
[  197.425158][ T6761] XFS (loop2): User initiated shutdown received.
[  197.444454][ T6761] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  197.478864][ T6761] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  197.553140][ T6784] sctp: [Deprecated]: syz.4.786 (pid 6784) Use of struct sctp_assoc_value in delayed_ack socket option.
[  197.553140][ T6784] Use struct sctp_sack_info instead
[  197.575560][ T4257] XFS (loop2): Unmounting Filesystem
[  197.699213][ T4261] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  197.946889][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.968195][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.984144][ T4261] usb 1-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00
[  198.003511][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.025510][ T4261] usb 1-1: config 0 descriptor??
[  198.110696][ T4304] kernel write not supported for file bpf-prog (pid: 4304 comm: kworker/0:4)
[  198.257980][ T6792] loop4: detected capacity change from 0 to 1024
[  198.470835][ T4261] wacom 0003:056A:0336.0014: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.0-1/input0
[  198.674870][   T27] usb 1-1: USB disconnect, device number 9
[  199.459262][ T6820] loop0: detected capacity change from 0 to 4096
[  199.495794][ T6820] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  199.503260][ T6820] ntfs3: loop0: Failed to load $Extend.
[  199.669439][ T4304] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  199.747387][ T6814] loop5: detected capacity change from 0 to 32768
[  199.762990][   T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  199.797968][ T6814] XFS (loop5): Mounting V5 Filesystem
[  199.849318][ T4304] usb 5-1: Using ep0 maxpacket: 16
[  199.858866][ T4304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.902410][ T4304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.909010][ T6814] XFS (loop5): Ending clean mount
[  199.928763][ T6814] XFS (loop5): Quotacheck needed: Please wait.
[  199.929360][ T4304] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  199.969363][ T4304] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  199.978459][ T4304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.989447][   T27] usb 4-1: Using ep0 maxpacket: 32
[  199.999969][   T27] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  200.008623][   T27] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  200.018247][   T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.021026][ T4304] usb 5-1: config 0 descriptor??
[  200.029016][   T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  200.042897][   T27] usb 4-1: config 1 has no interface number 0
[  200.050217][   T27] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  200.063217][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.101616][ T6814] XFS (loop5): Quotacheck: Done.
[  200.117955][   T27] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  200.134641][   T26] audit: type=1804 audit(1748922935.880:200): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.798" name="/newroot/138/file0/file1" dev="loop5" ino=9286 res=1 errno=0
[  200.205965][ T4500] XFS (loop5): Unmounting Filesystem
[  200.253050][ T6831] loop0: detected capacity change from 0 to 32768
[  200.260905][ T6831] XFS: ikeep mount option is deprecated.
[  200.356486][   T27] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values
[  200.365975][ T6831] XFS (loop0): Mounting V5 Filesystem
[  200.381557][   T27] snd_usb_pod 4-1:1.1: invalid control EP
[  200.387337][   T27] snd_usb_pod 4-1:1.1: cannot start listening: -22
[  200.395319][   T27] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  200.403309][   T27] snd_usb_pod: probe of 4-1:1.1 failed with error -22
[  200.476586][ T6831] XFS (loop0): Ending clean mount
[  200.488310][ T4304] HID 045e:07da: Invalid code 65791 type 1
[  200.514227][ T4304] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0015/input/input19
[  200.549644][ T4304] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  200.578153][ T6831] XFS (loop0): User initiated shutdown received.
[  200.608732][ T6831] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:489).  Shutting down filesystem.
[  200.625773][ T4304] usb 4-1: USB disconnect, device number 8
[  200.630565][ T6831] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  200.759149][ T4254] XFS (loop0): Unmounting Filesystem
[  200.766172][ T4447] usb 5-1: USB disconnect, device number 13
[  201.099935][ T6861] tipc: Started in network mode
[  201.104947][ T6861] tipc: Node identity ac141425, cluster identity 4711
[  201.112434][ T6861] tipc: New replicast peer: 0.0.0.0
[  201.118170][ T6861] tipc: Enabled bearer <udp:syz2>, priority 10
[  201.126973][ T6861] tipc: New replicast peer: 172.20.20.170
[  201.213982][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'.
[  201.489520][ T4304] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  201.674740][ T6874] loop5: detected capacity change from 0 to 4096
[  201.680013][ T4304] usb 1-1: Using ep0 maxpacket: 16
[  201.683047][ T6874] ntfs3: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿ'
[  201.699601][ T4304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.725061][ T4304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.738876][ T6867] loop3: detected capacity change from 0 to 40427
[  201.745453][ T4304] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  201.759689][ T4304] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  201.768787][ T6867] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  201.775916][ T4304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.784040][ T6867] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  201.794370][ T4304] usb 1-1: config 0 descriptor??
[  201.802354][ T6867] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff
[  201.814269][ T6867] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8
[  201.824345][ T6867] F2FS-fs (loop3): invalid crc value
[  201.859021][ T6867] F2FS-fs (loop3): Found nat_bits in checkpoint
[  201.950176][ T4305] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  201.958014][ T6867] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  201.965386][ T6867] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  202.075915][ T6867] syz.3.814: attempt to access beyond end of device
[  202.075915][ T6867] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  202.149906][ T4305] usb 3-1: Using ep0 maxpacket: 8
[  202.158672][ T4305] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  202.187369][ T4305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.223801][ T4305] pvrusb2: Hardware description: Terratec Grabster AV400
[  202.233152][ T4304] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  202.246045][ T4304] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0016/input/input20
[  202.257759][ T4305] pvrusb2: **********
[  202.262070][ T4305] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  202.276820][ T4304] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  202.289081][ T4305] pvrusb2: Important functionality might not be entirely working.
[  202.297080][ T4305] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  202.328121][ T4305] pvrusb2: **********
[  202.337181][ T4304] tipc: Node number set to 2886997029
[  202.424423][ T2310] pvrusb2: Invalid write control endpoint
[  202.477874][ T4261] usb 1-1: USB disconnect, device number 10
[  202.548452][ T2310] pvrusb2: Invalid write control endpoint
[  202.555986][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  202.565793][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  202.573871][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  202.584429][ T2310] pvrusb2: Device being rendered inoperable
[  202.592229][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  202.599371][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  202.607603][ T2310] pvrusb2: Attached sub-driver cx25840
[  202.619615][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  202.640159][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  202.650784][ T6876] pvrusb2: Attempted to execute control transfer when device not ok
[  202.661741][    T7] usb 3-1: USB disconnect, device number 9
[  202.708959][ T6896] program syz.3.824 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  202.960210][ T6894] loop5: detected capacity change from 0 to 32768
[  202.968167][ T6894] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.825 (6894)
[  202.985092][ T6894] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  203.016947][ T6894] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  203.027424][ T6894] BTRFS info (device loop5): setting nodatacow, compression disabled
[  203.036161][ T6894] BTRFS info (device loop5): max_inline at 0
[  203.042816][ T6894] BTRFS info (device loop5): enabling disk space caching
[  203.050123][ T6894] BTRFS info (device loop5): turning off barriers
[  203.058064][ T6894] BTRFS info (device loop5): turning on flush-on-commit
[  203.065718][ T6894] BTRFS info (device loop5): doing ref verification
[  203.072999][ T6894] BTRFS info (device loop5): force clearing of disk cache
[  203.080741][ T6894] BTRFS info (device loop5): enabling ssd optimizations
[  203.088429][ T6894] BTRFS info (device loop5): max_inline at 4096
[  203.094846][ T6894] BTRFS info (device loop5): disk space caching is enabled
[  203.146552][ T6894] BTRFS info (device loop5): rebuilding free space tree
[  203.186344][ T6894] BTRFS info (device loop5): disabling free space tree
[  203.200248][ T6894] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  203.218750][ T6894] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  203.275197][    T7] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[  203.397214][ T4500] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  203.409219][ T6930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.841'.
[  203.425329][ T6930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.841'.
[  203.488064][    T7] usb 4-1: unable to get BOS descriptor or descriptor too short
[  203.526051][    T7] usb 4-1: unable to read config index 0 descriptor/start: -71
[  203.534401][    T7] usb 4-1: can't read configurations, error -71
[  203.920559][ T6936] loop5: detected capacity change from 0 to 4096
[  203.948174][ T6938] loop2: detected capacity change from 0 to 512
[  203.967968][ T6938] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  204.001178][ T6938] EXT4-fs (loop2): 1 truncate cleaned up
[  204.007126][ T6938] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  204.111610][ T6944] loop3: detected capacity change from 0 to 128
[  204.113296][ T4500] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  204.119136][ T6944] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  204.168053][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  204.200104][ T4500] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  204.283383][ T6949] loop2: detected capacity change from 0 to 256
[  204.400562][ T6955] loop5: detected capacity change from 0 to 128
[  204.592969][ T6962] loop5: detected capacity change from 0 to 512
[  204.626974][ T6962] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  204.720005][ T4261] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  204.736020][   T26] audit: type=1804 audit(1748922940.489:201): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.845" name="/newroot/146/file1/file1" dev="loop5" ino=15 res=1 errno=0
[  204.746182][ T6965] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.845: bg 0: block 264: padding at end of block bitmap is not set
[  204.849929][    T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  204.914539][ T4261] usb 5-1: Using ep0 maxpacket: 8
[  204.915597][ T6959] loop2: detected capacity change from 0 to 32768
[  204.922451][ T4261] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  204.952377][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.975125][ T4261] pvrusb2: Hardware description: Terratec Grabster AV400
[  204.975643][   T26] audit: type=1800 audit(1748922940.729:202): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.844" name="file1" dev="loop2" ino=4 res=0 errno=0
[  204.992804][ T4261] pvrusb2: **********
[  205.028065][ T4261] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  205.039641][   T26] audit: type=1800 audit(1748922940.759:203): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.844" name="file1" dev="loop2" ino=4 res=0 errno=0
[  205.056163][ T4261] pvrusb2: Important functionality might not be entirely working.
[  205.063781][    T7] usb 4-1: Using ep0 maxpacket: 16
[  205.084739][    T7] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[  205.101365][    T7] usb 4-1: config 0 has no interface number 0
[  205.108644][ T4261] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  205.114975][    T7] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  205.147675][    T7] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  205.158421][ T6953] loop0: detected capacity change from 0 to 40427
[  205.166391][    T7] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  205.169364][ T4261] pvrusb2: **********
[  205.190432][ T2310] pvrusb2: Invalid write control endpoint
[  205.202117][    T7] usb 4-1: Manufacturer: syz
[  205.212604][    T7] usb 4-1: SerialNumber: syz
[  205.223006][ T6953] F2FS-fs (loop0): Found nat_bits in checkpoint
[  205.230415][    T7] usb 4-1: config 0 descriptor??
[  205.322513][ T6953] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  205.350581][ T2310] pvrusb2: Invalid write control endpoint
[  205.356350][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  205.395434][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  205.419980][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  205.456997][ T2310] pvrusb2: Device being rendered inoperable
[  205.476421][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  205.493777][ T6957] pvrusb2: Attempted to execute control transfer when device not ok
[  205.504437][ T4609] kworker/u4:9: attempt to access beyond end of device
[  205.504437][ T4609] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  205.513849][ T4447] usb 5-1: USB disconnect, device number 14
[  205.546716][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  205.555582][ T2310] pvrusb2: Attached sub-driver cx25840
[  205.577854][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  205.615591][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  205.647532][    T7] usbtouchscreen: probe of 4-1:0.214 failed with error -71
[  205.676711][    T7] usb 4-1: USB disconnect, device number 11
[  205.692819][ T6953] F2FS-fs (loop0): Inconsistent error blkaddr:5633, sit bitmap:0
[  205.710197][ T6953] CPU: 1 PID: 6953 Comm: syz.0.840 Not tainted 6.1.140-syzkaller #0
[  205.718236][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  205.728293][ T6953] Call Trace:
[  205.731584][ T6953]  <TASK>
[  205.734542][ T6953]  dump_stack_lvl+0x168/0x22e
[  205.739264][ T6953]  ? show_regs_print_info+0x12/0x12
[  205.744691][ T6953]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  205.750551][ T6953]  f2fs_is_valid_blkaddr+0xc3b/0x1250
[  205.755968][ T6953]  f2fs_map_blocks+0xd37/0x3840
[  205.760902][ T6953]  ? f2fs_do_map_lock+0x70/0x70
[  205.765814][ T6953]  ? xa_load+0x60/0x2e0
[  205.770016][ T6953]  ? page_index+0xe7/0x470
[  205.774479][ T6953]  f2fs_mpage_readpages+0xa58/0x27e0
[  205.779793][ T6953]  ? mark_lock+0x94/0x320
[  205.784158][ T6953]  ? dquot_release_reservation_block+0xa0/0xa0
[  205.790326][ T6953]  ? __mod_lruvec_page_state+0xa1/0x410
[  205.795903][ T6953]  ? f2fs_is_compress_backend_ready+0x97/0x120
[  205.802067][ T6953]  ? f2fs_readahead+0x180/0x380
[  205.806928][ T6953]  ? blk_start_plug+0x94/0x110
[  205.811702][ T6953]  read_pages+0x173/0x840
[  205.816044][ T6953]  ? folio_put+0xd0/0xd0
[  205.820300][ T6953]  ? folio_add_lru+0xd50/0xd50
[  205.825075][ T6953]  ? page_cache_ra_unbounded+0x770/0x770
[  205.830723][ T6953]  ? filemap_add_folio+0x188/0x3c0
[  205.835856][ T6953]  page_cache_ra_unbounded+0x690/0x770
[  205.841339][ T6953]  f2fs_readdir+0x468/0x990
[  205.845872][ T6953]  ? f2fs_fill_dentries+0xcb0/0xcb0
[  205.851095][ T6953]  ? lockdep_hardirqs_on+0x94/0x140
[  205.856356][ T6953]  ? end_current_label_crit_section+0x14b/0x170
[  205.862613][ T6953]  ? preempt_count_add+0x8d/0x190
[  205.867733][ T6953]  ? down_read_killable+0x1cc/0x340
[  205.872938][ T6953]  ? fsnotify_perm+0x248/0x550
[  205.877733][ T6953]  iterate_dir+0x218/0x560
[  205.882192][ T6953]  ? f2fs_fill_dentries+0xcb0/0xcb0
[  205.887404][ T6953]  __se_sys_getdents64+0xe5/0x260
[  205.892481][ T6953]  ? __x64_sys_getdents64+0x80/0x80
[  205.897699][ T6953]  ? filldir+0x700/0x700
[  205.901965][ T6953]  ? lockdep_hardirqs_on+0x94/0x140
[  205.907182][ T6953]  do_syscall_64+0x4c/0xa0
[  205.911618][ T6953]  ? clear_bhb_loop+0x60/0xb0
[  205.916301][ T6953]  ? clear_bhb_loop+0x60/0xb0
[  205.920984][ T6953]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  205.927067][ T6953] RIP: 0033:0x7f4ceef8e969
[  205.931487][ T6953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.951097][ T6953] RSP: 002b:00007f4cefd27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  205.959520][ T6953] RAX: ffffffffffffffda RBX: 00007f4cef1b5fa0 RCX: 00007f4ceef8e969
[  205.967497][ T6953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  205.975471][ T6953] RBP: 00007f4cef010ab1 R08: 0000000000000000 R09: 0000000000000000
[  205.983448][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.991423][ T6953] R13: 0000000000000000 R14: 00007f4cef1b5fa0 R15: 00007ffdcc7deea8
[  205.999424][ T6953]  </TASK>
[  206.053734][ T6953] F2FS-fs (loop0): Inconsistent error blkaddr:5633, sit bitmap:0
[  206.070101][ T6953] CPU: 0 PID: 6953 Comm: syz.0.840 Not tainted 6.1.140-syzkaller #0
[  206.078160][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  206.088259][ T6953] Call Trace:
[  206.091568][ T6953]  <TASK>
[  206.094534][ T6953]  dump_stack_lvl+0x168/0x22e
[  206.099252][ T6953]  ? show_regs_print_info+0x12/0x12
[  206.104490][ T6953]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  206.110345][ T6953]  f2fs_is_valid_blkaddr+0xc3b/0x1250
[  206.115765][ T6953]  f2fs_get_read_data_page+0x3ed/0x610
[  206.121275][ T6953]  ? f2fs_get_block+0x130/0x130
[  206.126353][ T6953]  ? PageHeadHuge+0x8f/0x1c0
[  206.130986][ T6953]  f2fs_find_data_page+0x9b/0x3a0
[  206.136056][ T6953]  f2fs_readdir+0x47b/0x990
[  206.140626][ T6953]  ? f2fs_fill_dentries+0xcb0/0xcb0
[  206.145866][ T6953]  ? lockdep_hardirqs_on+0x94/0x140
[  206.151116][ T6953]  ? end_current_label_crit_section+0x14b/0x170
[  206.157399][ T6953]  ? preempt_count_add+0x8d/0x190
[  206.162461][ T6953]  ? down_read_killable+0x1cc/0x340
[  206.167696][ T6953]  ? fsnotify_perm+0x248/0x550
[  206.172508][ T6953]  iterate_dir+0x218/0x560
[  206.176968][ T6953]  ? f2fs_fill_dentries+0xcb0/0xcb0
[  206.182207][ T6953]  __se_sys_getdents64+0xe5/0x260
[  206.187287][ T6953]  ? __x64_sys_getdents64+0x80/0x80
[  206.192546][ T6953]  ? filldir+0x700/0x700
[  206.196856][ T6953]  ? lockdep_hardirqs_on+0x94/0x140
[  206.202122][ T6953]  do_syscall_64+0x4c/0xa0
[  206.206580][ T6953]  ? clear_bhb_loop+0x60/0xb0
[  206.211295][ T6953]  ? clear_bhb_loop+0x60/0xb0
[  206.216052][ T6953]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  206.222011][ T6953] RIP: 0033:0x7f4ceef8e969
[  206.226454][ T6953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.246096][ T6953] RSP: 002b:00007f4cefd27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  206.254551][ T6953] RAX: ffffffffffffffda RBX: 00007f4cef1b5fa0 RCX: 00007f4ceef8e969
[  206.262561][ T6953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  206.270569][ T6953] RBP: 00007f4cef010ab1 R08: 0000000000000000 R09: 0000000000000000
[  206.278577][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  206.286582][ T6953] R13: 0000000000000000 R14: 00007f4cef1b5fa0 R15: 00007ffdcc7deea8
[  206.294618][ T6953]  </TASK>
[  206.844847][ T6982] loop0: detected capacity change from 0 to 256
[  206.898576][ T6986] loop4: detected capacity change from 0 to 256
[  207.581011][ T7000] loop0: detected capacity change from 0 to 4096
[  207.588766][   T26] audit: type=1800 audit(1748922943.339:204): pid=6962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.845" name="file1" dev="loop5" ino=15 res=0 errno=0
[  207.618882][ T7000] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  207.810319][ T6987] loop2: detected capacity change from 0 to 32768
[  207.868937][ T6987] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  207.886661][ T4254] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22.
[  207.940969][ T4254] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22.
[  207.960463][ T6987] (syz.2.850,6987,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1
[  207.978420][ T4254] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  208.010523][ T6987] (syz.2.850,6987,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1
[  208.015187][ T4500] EXT4-fs (loop5): unmounting filesystem.
[  208.133074][ T7010] loop5: detected capacity change from 0 to 1024
[  208.146293][ T7012] program syz.0.864 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  208.157792][ T4257] ocfs2: Unmounting device (7,2) on (node local)
[  208.205611][   T26] audit: type=1800 audit(1748922943.959:205): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.862" name="file1" dev="loop5" ino=20 res=0 errno=0
[  208.639315][ T7020] loop5: detected capacity change from 0 to 1024
[  208.666251][ T7020] ext4: Unknown parameter 'noacl'
[  208.914191][ T4261] kernel write not supported for file /snd/seq (pid: 4261 comm: kworker/1:3)
[  209.079729][ T7032] loop3: detected capacity change from 0 to 256
[  209.218173][ T7034] loop5: detected capacity change from 0 to 2048
[  209.272150][ T7024] loop4: detected capacity change from 0 to 32768
[  209.278703][ T7035] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  209.296638][ T7024] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.869 (7024)
[  209.325498][ T7035] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  209.336737][ T7024] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  209.350145][ T7035] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  209.367865][ T7024] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  209.395469][ T7024] BTRFS info (device loop4): setting nodatacow, compression disabled
[  209.410423][ T7035] Remounting filesystem read-only
[  209.415931][ T7024] BTRFS info (device loop4): max_inline at 0
[  209.422521][ T7024] BTRFS info (device loop4): enabling disk space caching
[  209.429666][ T7024] BTRFS info (device loop4): turning off barriers
[  209.437794][ T7024] BTRFS info (device loop4): turning on flush-on-commit
[  209.445152][ T7024] BTRFS info (device loop4): doing ref verification
[  209.452091][ T7024] BTRFS info (device loop4): force clearing of disk cache
[  209.459363][ T7024] BTRFS info (device loop4): enabling ssd optimizations
[  209.476947][ T7024] BTRFS info (device loop4): max_inline at 4096
[  209.479564][ T7042] loop3: detected capacity change from 0 to 2048
[  209.490539][ T7024] BTRFS info (device loop4): disk space caching is enabled
[  209.516132][ T7042] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  209.526167][ T7042] NILFS (loop3): mounting unchecked fs
[  209.536558][ T4500] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  209.552714][ T4500] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  209.644614][ T7051] loop0: detected capacity change from 0 to 512
[  209.681557][ T7056] loop2: detected capacity change from 0 to 7
[  209.710275][ T7042] NILFS (loop3): recovery complete
[  209.726128][ T7051] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  209.750725][ T7065] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  209.770710][ T7056] Dev loop2: unable to read RDB block 7
[  209.772247][ T7024] BTRFS info (device loop4): rebuilding free space tree
[  209.784555][ T7056]  loop2: AHDI p1 p2 p3 p4
[  209.789022][ T7056] loop2: partition table partially beyond EOD, truncated
[  209.817974][ T7024] BTRFS info (device loop4): disabling free space tree
[  209.839948][ T7024] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  209.871375][ T7024] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  209.875132][ T7056] loop2: p1 start 1601398130 is beyond EOD, 
[  209.886921][   T26] audit: type=1804 audit(1748922945.639:206): pid=7067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.875" name="/newroot/209/file1/file1" dev="loop0" ino=15 res=1 errno=0
[  209.915154][ T7067] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.875: bg 0: block 264: padding at end of block bitmap is not set
[  209.946938][ T7056] truncated
[  209.950115][ T7056] loop2: p2 start 1702059890 is beyond EOD, truncated
[  209.973263][ T7056] loop2: p3 size 150995200 extends beyond EOD, truncated
[  210.341253][ T4252] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  210.466035][ T7073] loop3: detected capacity change from 0 to 128
[  210.510977][ T7073] VFS: Found a Xenix FS (block size = 512) on device loop3
[  210.644998][ T7073] syz.3.880: attempt to access beyond end of device
[  210.644998][ T7073] loop3: rw=2049, sector=2066843070, nr_sectors = 1 limit=128
[  210.751001][ T7073] Buffer I/O error on dev loop3, logical block 2066843070, lost async page write
[  210.760237][ T7073] syz.3.880: attempt to access beyond end of device
[  210.760237][ T7073] loop3: rw=2049, sector=8767744, nr_sectors = 1 limit=128
[  210.846157][ T7073] Buffer I/O error on dev loop3, logical block 8767744, lost async page write
[  210.866467][ T7073] syz.3.880: attempt to access beyond end of device
[  210.866467][ T7073] loop3: rw=2049, sector=13269809, nr_sectors = 1 limit=128
[  210.894923][ T7073] Buffer I/O error on dev loop3, logical block 13269809, lost async page write
[  210.910780][ T7073] syz.3.880: attempt to access beyond end of device
[  210.910780][ T7073] loop3: rw=2049, sector=1157, nr_sectors = 1 limit=128
[  210.960730][ T7073] Buffer I/O error on dev loop3, logical block 1157, lost async page write
[  210.990716][ T7073] syz.3.880: attempt to access beyond end of device
[  210.990716][ T7073] loop3: rw=2049, sector=3211264, nr_sectors = 1 limit=128
[  211.027212][ T7073] Buffer I/O error on dev loop3, logical block 3211264, lost async page write
[  211.050928][ T7073] syz.3.880: attempt to access beyond end of device
[  211.050928][ T7073] loop3: rw=2049, sector=8768635, nr_sectors = 1 limit=128
[  211.080774][ T7073] Buffer I/O error on dev loop3, logical block 8768635, lost async page write
[  211.100161][ T7073] syz.3.880: attempt to access beyond end of device
[  211.100161][ T7073] loop3: rw=2049, sector=13466417, nr_sectors = 1 limit=128
[  211.125975][ T7073] Buffer I/O error on dev loop3, logical block 13466417, lost async page write
[  211.146339][ T7073] syz.3.880: attempt to access beyond end of device
[  211.146339][ T7073] loop3: rw=2049, sector=209285, nr_sectors = 1 limit=128
[  211.180877][ T7073] Buffer I/O error on dev loop3, logical block 209285, lost async page write
[  211.220891][ T7076] syz.3.880: attempt to access beyond end of device
[  211.220891][ T7076] loop3: rw=2049, sector=2066843070, nr_sectors = 1 limit=128
[  211.290914][ T7076] Buffer I/O error on dev loop3, logical block 2066843070, lost async page write
[  211.310721][ T4447] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  211.380443][ T4264] sysv_free_block: trying to free block not in datazone
[  211.410540][ T4264] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  211.520686][ T4447] usb 6-1: Using ep0 maxpacket: 16
[  211.534254][ T4447] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.570689][ T4447] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.580503][ T4447] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  211.629348][ T4447] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.662442][ T4447] usb 6-1: config 0 descriptor??
[  211.670757][ T4267] Bluetooth: hci0: command 0x0406 tx timeout
[  211.671353][ T4258] Bluetooth: hci4: command 0x0406 tx timeout
[  211.676798][ T4267] Bluetooth: hci2: command 0x0406 tx timeout
[  211.683333][ T4269] Bluetooth: hci3: command 0x0406 tx timeout
[  211.914526][ T7093] loop3: detected capacity change from 0 to 8
[  212.083490][ T4447] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.0017/input/input22
[  212.185100][ T4447] appleir 0003:05AC:8241.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0
[  212.309936][ T4261] usb 6-1: USB disconnect, device number 10
[  212.626667][   T26] audit: type=1800 audit(1748922948.378:207): pid=7051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.875" name="file1" dev="loop0" ino=15 res=0 errno=0
[  212.963114][ T4254] EXT4-fs (loop0): unmounting filesystem.
[  212.968107][ T7102] loop3: detected capacity change from 0 to 190
[  212.992153][ T7102] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid boot sector checksum.
[  213.033636][ T7102] ntfs: (device loop3): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing.
[  213.069792][ T7102] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  213.111128][ T7102] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  213.163840][ T7102] ntfs: volume version 3.1.
[  213.188723][ T7102] ntfs: (device loop3): load_system_files(): Volume is dirty.  Will not be able to remount read-write.  Run chkdsk and mount in Windows.
[  213.223623][ T7102] ntfs: (device loop3): ntfs_read_locked_inode(): Inode is an extent inode!
[  213.251033][ T7102] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  213.296482][ T7102] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  213.330784][ T7102] ntfs: (device loop3): ntfs_lookup_inode_by_name(): No index allocation attribute but index entry requires one. Directory inode 0x5 is corrupt or driver bug.
[  213.357719][ T7102] syz.3.904: attempt to access beyond end of device
[  213.357719][ T7102] loop3: rw=0, sector=224, nr_sectors = 8 limit=190
[  213.871004][ T4306] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  214.001348][ T7117] loop5: detected capacity change from 0 to 128
[  214.065005][ T4306] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  214.084786][ T4306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.107244][ T4306] usb 4-1: Product: syz
[  214.125276][ T4306] usb 4-1: Manufacturer: syz
[  214.129935][ T4306] usb 4-1: SerialNumber: syz
[  214.150533][ T4306] usb 4-1: config 0 descriptor??
[  214.248174][ T7113] loop0: detected capacity change from 0 to 40427
[  214.264412][ T7113] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  214.278204][ T7113] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  214.309160][ T7113] F2FS-fs (loop0): invalid crc value
[  214.346542][ T7113] F2FS-fs (loop0): Found nat_bits in checkpoint
[  214.459886][ T7113] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  214.477923][ T7113] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  214.498159][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.5.905'.
[  214.589341][ T4306] usb 4-1: Firmware version (0.0) predates our first public release.
[  214.621489][ T4306] usb 4-1: Please update to version 0.2 or newer
[  214.658977][ T4306] usb 4-1: Firmware: build 
[  214.848228][ T7139] loop2: detected capacity change from 0 to 256
[  214.888224][ T4306] usb 4-1: USB disconnect, device number 12
[  214.914364][ T7139] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  214.978425][ T7139] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  215.088496][ T7123] loop4: detected capacity change from 0 to 32768
[  215.132690][ T7144] loop0: detected capacity change from 0 to 128
[  215.164106][ T7144] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  215.173121][ T7123] XFS (loop4): Mounting V5 Filesystem
[  215.180785][ T7144] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.255128][ T7123] XFS (loop4): Ending clean mount
[  215.315290][ T4254] EXT4-fs (loop0): unmounting filesystem.
[  215.390015][ T4252] XFS (loop4): Unmounting Filesystem
[  215.657440][ T7169] netlink: 'syz.3.916': attribute type 1 has an invalid length.
[  215.678487][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.916'.
[  216.291287][ T4306] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  216.422473][ T7208] input: syz0 as /devices/virtual/input/input23
[  216.444082][ T7206] loop2: detected capacity change from 0 to 2048
[  216.483092][ T4306] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  216.484809][ T7206] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  216.499974][ T4306] usb 4-1: config 0 has no interface number 0
[  216.513159][ T4306] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  216.523038][ T7206] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.527270][ T4306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.542126][ T4306] usb 4-1: Product: syz
[  216.546315][ T4306] usb 4-1: Manufacturer: syz
[  216.550935][ T4306] usb 4-1: SerialNumber: syz
[  216.557648][ T4306] usb 4-1: config 0 descriptor??
[  216.619251][ T7206] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.929: bg 0: block 440: padding at end of block bitmap is not set
[  216.640351][ T7206] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -117
[  216.704010][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  216.780693][ T4306] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  216.802419][ T4306] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  216.819149][ T4306] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  216.828272][ T4306] usb 4-1: media controller created
[  216.849708][ T4306] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  216.861335][ T4527] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  216.989619][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.937'.
[  216.999392][ T7230] netlink: 'syz.2.937': attribute type 7 has an invalid length.
[  217.007807][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'.
[  217.020683][ T7230] device erspan0 entered promiscuous mode
[  217.028275][ T7230] device erspan0 left promiscuous mode
[  217.051423][ T4527] usb 1-1: Using ep0 maxpacket: 16
[  217.063525][ T4306] i2c i2c-1: ec100: i2c rd failed=-32 reg=33
[  217.070546][ T4527] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  217.093924][ T4527] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  217.117653][ T4527] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  217.146965][ T4527] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  217.162228][ T4527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.170406][ T4527] usb 1-1: Product: syz
[  217.174976][ T4527] usb 1-1: Manufacturer: syz
[  217.179710][ T4527] usb 1-1: SerialNumber: syz
[  217.597774][ T4527] usb 1-1: 0:2 : does not exist
[  217.630512][ T7235] loop2: detected capacity change from 0 to 32768
[  217.660338][ T7235] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.939 (7235)
[  217.695345][ T7235] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  217.713334][ T7235] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  217.727034][ T7235] BTRFS info (device loop2): using free space tree
[  217.835522][ T7235] BTRFS info (device loop2): enabling ssd optimizations
[  218.084523][ T1089] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  218.098679][ T7267] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  218.170829][ T4306] usb 4-1: USB disconnect, device number 13
[  218.215430][ T4527] usb 1-1: USB disconnect, device number 11
[  218.325358][ T4257] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  218.717916][ T7279] capability: warning: `syz.2.947' uses 32-bit capabilities (legacy support in use)
[  218.939560][ T7285] loop0: detected capacity change from 0 to 256
[  218.995697][ T7285] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x20261ffc, utbl_chksum : 0xe619d30d)
[  219.405597][ T7300] loop2: detected capacity change from 0 to 256
[  219.800561][ T7295] loop4: detected capacity change from 0 to 32768
[  219.866580][ T7295] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.958 (7295)
[  219.885039][ T7314] overlayfs: failed to set xattr on upper
[  219.904546][ T7314] overlayfs: ...falling back to index=off,metacopy=off.
[  219.913015][ T7295] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  219.928557][ T7314] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  219.936742][ T7295] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  219.946375][ T7295] BTRFS info (device loop4): using free space tree
[  220.048456][   T26] kauditd_printk_skb: 12 callbacks suppressed
[  220.048473][   T26] audit: type=1326 audit(1748922955.797:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7098e969 code=0x7fc00000
[  220.064323][ T7331] Context (ID=0x0) not attached to queue pair (handle=0x0:0xfffffff9)
[  220.111732][   T26] audit: type=1326 audit(1748922955.837:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d7098e969 code=0x7fc00000
[  220.224838][ T7336] loop0: detected capacity change from 0 to 2048
[  220.231393][ T7295] BTRFS info (device loop4): enabling ssd optimizations
[  220.253281][ T7344] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  220.261757][   T26] audit: type=1326 audit(1748922955.837:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7098e969 code=0x7fc00000
[  220.319348][ T7346] loop5: detected capacity change from 0 to 1024
[  220.338333][ T7346] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  220.344963][ T7346] hfsplus: xattr searching failed
[  220.353588][ T7346] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  220.413394][   T26] audit: type=1326 audit(1748922955.837:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7098e969 code=0x7fc00000
[  220.461412][   T26] audit: type=1326 audit(1748922955.837:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7098e969 code=0x7fc00000
[  220.519971][   T26] audit: type=1326 audit(1748922955.837:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7098e969 code=0x7fc00000
[  220.561290][    T9] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  220.579720][   T26] audit: type=1326 audit(1748922955.837:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7098e969 code=0x7fc00000
[  220.685785][   T26] audit: type=1326 audit(1748922955.837:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7098e969 code=0x7fc00000
[  220.736793][   T26] audit: type=1326 audit(1748922955.837:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7098e969 code=0x7fc00000
[  220.779240][ T7357] loop0: detected capacity change from 0 to 8
[  220.796500][   T26] audit: type=1326 audit(1748922955.837:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7098e969 code=0x7fc00000
[  220.836334][ T7357] SQUASHFS error: lzo decompression failed, data probably corrupt
[  220.859787][ T7357] SQUASHFS error: Failed to read block 0x91: -5
[  220.874144][ T7357] SQUASHFS error: Unable to read metadata cache entry [8f]
[  220.889360][ T7357] SQUASHFS error: Unable to read inode 0x11f
[  220.902521][ T4252] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  221.019736][ T7360] loop5: detected capacity change from 0 to 8192
[  221.094312][ T7360] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  221.125375][ T7360] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  221.136999][ T7360] REISERFS (device loop5): using ordered data mode
[  221.145501][ T7360] reiserfs: using flush barriers
[  221.160699][ T7360] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  221.181399][ T7340] loop3: detected capacity change from 0 to 32768
[  221.189694][ T7360] REISERFS (device loop5): checking transaction log (loop5)
[  221.217056][ T7360] REISERFS (device loop5): Using r5 hash to sort names
[  221.227989][ T7360] REISERFS (device loop5): using 3.5.x disk format
[  221.243832][ T7360] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  221.281077][ T7340] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  221.301981][ T7340] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  221.450129][ T4264] ocfs2: Unmounting device (7,3) on (node local)
[  221.703373][ T7370] loop8: detected capacity change from 0 to 7
[  221.722397][ T7370] Dev loop8: unable to read RDB block 7
[  221.738748][ T7370]  loop8: unable to read partition table
[  221.745110][ T7370] loop8: partition table beyond EOD, truncated
[  221.763239][ T7370] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû
[  221.763239][ T7370] 
) failed (rc=-5)
[  221.780205][ T7372] loop3: detected capacity change from 0 to 1024
[  221.810443][ T7372] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  221.975356][ T7381] loop4: detected capacity change from 0 to 256
[  222.116990][ T7384] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  222.539632][ T7400] loop3: detected capacity change from 0 to 1024
[  222.648530][ T7400] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  222.679171][ T7400] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.722923][ T7407] raw_sendmsg: syz.2.1004 forgot to set AF_INET. Fix it!
[  222.759614][ T7392] loop0: detected capacity change from 0 to 40427
[  222.827632][ T7392] F2FS-fs (loop0): Found nat_bits in checkpoint
[  222.853675][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  222.942310][ T7392] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  223.147071][ T4254] bio_check_eod: 2 callbacks suppressed
[  223.147090][ T4254] syz-executor: attempt to access beyond end of device
[  223.147090][ T4254] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  223.706578][ T7434] loop5: detected capacity change from 0 to 8192
[  224.508712][ T7469] bridge0: port 3(vlan2) entered blocking state
[  224.517722][ T7469] bridge0: port 3(vlan2) entered disabled state
[  224.529714][ T7469] device vlan2 entered promiscuous mode
[  224.541554][ T7469] bridge0: mtu less than device minimum
[  225.121739][ T7461] loop2: detected capacity change from 0 to 40427
[  225.147547][ T7461] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  225.168897][ T7461] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  225.185025][ T7461] F2FS-fs (loop2): invalid crc value
[  225.185198][ T7472] loop0: detected capacity change from 0 to 32768
[  225.213277][ T7461] F2FS-fs (loop2): Found nat_bits in checkpoint
[  225.221995][ T7472] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1021 (7472)
[  225.252466][ T7472] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  225.269438][ T7461] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  225.274595][ T7472] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  225.282502][ T7461] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  225.294230][ T7472] BTRFS info (device loop0): using free space tree
[  225.457319][ T7480] loop5: detected capacity change from 0 to 32768
[  225.469532][ T7472] BTRFS info (device loop0): enabling ssd optimizations
[  225.521355][ T7480] JBD2: Ignoring recovery information on journal
[  225.619847][ T7480] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  225.700934][ T4254] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  225.782139][ T4500] ocfs2: Unmounting device (7,5) on (node local)
[  226.011808][ T7514] loop5: detected capacity change from 0 to 64
[  226.417030][ T7518] loop3: detected capacity change from 0 to 8192
[  226.430804][ T7518] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  226.451316][ T7518] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  226.460713][ T7518] REISERFS (device loop3): using ordered data mode
[  226.474347][ T7518] reiserfs: using flush barriers
[  226.513014][ T7518] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  226.532953][ T7518] REISERFS (device loop3): checking transaction log (loop3)
[  226.543004][ T7518] REISERFS (device loop3): Using r5 hash to sort names
[  226.550319][ T7518] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  226.707539][ T7531] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  226.919717][ T7540] loop3: detected capacity change from 0 to 64
[  226.966328][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  226.966345][   T26] audit: type=1800 audit(1748922962.717:221): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1040" name="file2" dev="loop3" ino=19 res=0 errno=0
[  227.434228][ T7565] device syzkaller1 entered promiscuous mode
[  227.496705][ T7567] loop3: detected capacity change from 0 to 1024
[  227.633026][ T4451] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  227.845010][ T4451] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  227.858379][ T4451] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  227.868881][ T4451] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  227.878408][ T4451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.889452][ T7559] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  228.145272][ T4451] usb 1-1: USB disconnect, device number 12
[  228.322358][ T7575] loop4: detected capacity change from 0 to 32768
[  228.338331][ T7575] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1055 (7575)
[  228.361873][ T7575] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  228.378186][ T7575] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  228.388151][ T7575] BTRFS info (device loop4): using free space tree
[  228.479873][ T7575] BTRFS info (device loop4): enabling ssd optimizations
[  228.547073][   T26] audit: type=1800 audit(1748922964.296:222): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1055" name="file2" dev="loop4" ino=261 res=0 errno=0
[  228.614311][ T7580] loop3: detected capacity change from 0 to 32768
[  228.993740][ T4252] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  229.451407][   T52] block nbd5: Attempted send on invalid socket
[  229.458257][   T52] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  229.473192][ T7602] EXT4-fs (nbd5): unable to read superblock
[  229.498672][ T7582] loop2: detected capacity change from 0 to 65536
[  229.510698][ T7582] XFS (loop2): Mounting V5 Filesystem
[  229.629263][ T7582] XFS (loop2): Ending clean mount
[  229.671261][ T7582] XFS (loop2): EXPERIMENTAL online shrink feature in use. Use at your own risk!
[  229.956283][ T4257] XFS (loop2): Unmounting Filesystem
[  230.044791][ T7630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1070'.
[  230.168370][ T7611] loop3: detected capacity change from 0 to 40427
[  230.205086][ T7611] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  230.223196][ T7611] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  230.239859][ T7611] F2FS-fs (loop3): invalid crc_offset: 33558524
[  230.287080][ T7611] F2FS-fs (loop3): Found nat_bits in checkpoint
[  230.423937][ T7611] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  230.432313][ T7611] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  230.497282][ T7611] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix.
[  230.521602][ T7611] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix.
[  230.535258][ T7626] loop0: detected capacity change from 0 to 32768
[  230.593564][   T26] audit: type=1800 audit(1748922966.346:223): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1067" name="file1" dev="loop0" ino=4 res=0 errno=0
[  230.961255][ T7653] tipc: Started in network mode
[  230.979867][ T7653] tipc: Node identity 8, cluster identity 3
[  230.998675][ T7653] tipc: Node number set to 8
[  231.008948][ T7655] loop3: detected capacity change from 0 to 128
[  231.053239][ T7657] loop5: detected capacity change from 0 to 512
[  231.061098][ T7657] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  231.103034][ T7657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  231.124030][ T7657] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1081: invalid block
[  231.183064][ T7657] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1081: invalid indirect mapped block 4294967295 (level 1)
[  231.203317][ T7657] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1081: invalid indirect mapped block 4294967295 (level 1)
[  231.279143][ T7657] EXT4-fs (loop5): 2 truncates cleaned up
[  231.286642][ T7657] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  231.347041][ T7657] EXT4-fs (loop5): shut down requested (2)
[  231.440148][ T4500] EXT4-fs (loop5): unmounting filesystem.
[  231.567411][ T7671] loop3: detected capacity change from 0 to 256
[  231.593307][ T7671] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  231.613130][ T7671] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  231.639463][ T7671] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  231.709303][ T7673] program syz.5.1088 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  232.366336][ T7667] loop4: detected capacity change from 0 to 32768
[  232.462555][ T7667] XFS (loop4): Mounting V5 Filesystem
[  232.601180][ T7667] XFS (loop4): Ending clean mount
[  232.629286][ T7667] XFS (loop4): Quotacheck needed: Please wait.
[  232.825978][ T7667] XFS (loop4): Quotacheck: Done.
[  233.141965][ T4252] XFS (loop4): Unmounting Filesystem
[  233.728197][ T7677] loop5: detected capacity change from 0 to 32768
[  233.822410][ T7677] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun"
[  233.883448][ T7677] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)...
[  234.066445][ T7681] loop2: detected capacity change from 0 to 262144
[  234.080883][ T7681] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.1091 (7681)
[  234.099312][ T7681] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  234.109716][ T7681] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  234.119082][ T7681] BTRFS info (device loop2): using free space tree
[  234.140455][ T7677] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 1ms
[  234.165744][ T7681] BTRFS info (device loop2): enabling ssd optimizations
[  234.198032][ T4306] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use
[  234.225298][ T4306] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal...
[  234.330654][ T7700] loop0: detected capacity change from 0 to 32768
[  234.338727][ T7700] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1097 (7700)
[  234.413763][ T4306] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 188ms
[  234.415316][ T7700] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  234.422585][ T4306] gfs2: fsid=_dev_net_tun.0: jid=0: Done
[  234.441038][ T7677] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount
[  234.454654][ T7700] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  234.468468][ T7700] BTRFS info (device loop0): using free space tree
[  234.487704][ T4257] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  234.744068][ T7700] BTRFS info (device loop0): enabling ssd optimizations
[  234.838452][   T26] audit: type=1800 audit(1748922970.586:224): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1097" name="file2" dev="loop0" ino=261 res=0 errno=0
[  234.858995][    C0] vkms_vblank_simulate: vblank timer overrun
[  235.291099][ T4254] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  235.730242][ T7759] loop5: detected capacity change from 0 to 128
[  236.452067][ T7770] loop2: detected capacity change from 0 to 1024
[  236.978073][ T7792] loop4: detected capacity change from 0 to 128
[  236.998698][ T7792] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  237.011817][ T7793] device syzkaller1 entered promiscuous mode
[  237.029701][ T7793] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  237.064097][ T7792] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  237.144436][ T7796] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  237.471469][ T7813] loop4: detected capacity change from 0 to 256
[  237.809294][ T7828] loop3: detected capacity change from 0 to 8
[  238.325193][ T7823] loop5: detected capacity change from 0 to 32768
[  238.409298][ T7823] XFS (loop5): Mounting V5 Filesystem
[  238.432594][ T7845] device syzkaller1 entered promiscuous mode
[  238.500327][ T7823] XFS (loop5): Ending clean mount
[  238.531535][ T7823] XFS (loop5): Quotacheck needed: Please wait.
[  238.651947][ T7823] XFS (loop5): Quotacheck: Done.
[  238.808394][ T4500] XFS (loop5): Unmounting Filesystem
[  238.911803][ T7861] TCP: TCP_TX_DELAY enabled
[  238.981943][ T7865] loop2: detected capacity change from 0 to 512
[  238.988549][ T4538] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  239.044892][ T7865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  239.124494][   T26] audit: type=1804 audit(1748922974.875:225): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1153" name="/newroot/210/file1/file1" dev="loop2" ino=15 res=1 errno=0
[  239.125436][ T7872] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1153: bg 0: block 264: padding at end of block bitmap is not set
[  239.174078][ T4538] usb 1-1: Using ep0 maxpacket: 32
[  239.182035][ T4538] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.206337][ T4538] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.218788][ T4538] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  239.228191][ T4538] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.239277][ T4538] usb 1-1: config 0 descriptor??
[  239.302970][ T7876] loop5: detected capacity change from 0 to 128
[  239.304154][ T4530] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  239.320259][ T7876] VFS: Found a Xenix FS (block size = 512) on device loop5
[  239.340334][ T7876] syz.5.1150: attempt to access beyond end of device
[  239.340334][ T7876] loop5: rw=2049, sector=2066843070, nr_sectors = 1 limit=128
[  239.362992][ T7876] Buffer I/O error on dev loop5, logical block 2066843070, lost async page write
[  239.372291][ T7876] syz.5.1150: attempt to access beyond end of device
[  239.372291][ T7876] loop5: rw=2049, sector=8767744, nr_sectors = 1 limit=128
[  239.399034][ T7876] Buffer I/O error on dev loop5, logical block 8767744, lost async page write
[  239.414679][ T7876] syz.5.1150: attempt to access beyond end of device
[  239.414679][ T7876] loop5: rw=2049, sector=13269809, nr_sectors = 1 limit=128
[  239.433177][ T7876] Buffer I/O error on dev loop5, logical block 13269809, lost async page write
[  239.443507][ T7876] syz.5.1150: attempt to access beyond end of device
[  239.443507][ T7876] loop5: rw=2049, sector=1157, nr_sectors = 1 limit=128
[  239.462970][ T7876] Buffer I/O error on dev loop5, logical block 1157, lost async page write
[  239.472120][ T7876] syz.5.1150: attempt to access beyond end of device
[  239.472120][ T7876] loop5: rw=2049, sector=3211264, nr_sectors = 1 limit=128
[  239.493357][ T7876] Buffer I/O error on dev loop5, logical block 3211264, lost async page write
[  239.496240][ T4530] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.503278][ T7876] syz.5.1150: attempt to access beyond end of device
[  239.503278][ T7876] loop5: rw=2049, sector=8768635, nr_sectors = 1 limit=128
[  239.514713][ T4309] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  239.535053][ T7876] Buffer I/O error on dev loop5, logical block 8768635, lost async page write
[  239.554181][ T7876] syz.5.1150: attempt to access beyond end of device
[  239.554181][ T7876] loop5: rw=2049, sector=13466417, nr_sectors = 1 limit=128
[  239.568414][ T4530] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.578758][ T4530] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  239.583471][ T7876] Buffer I/O error on dev loop5, logical block 13466417, lost async page write
[  239.589327][ T4530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.613264][ T7876] syz.5.1150: attempt to access beyond end of device
[  239.613264][ T7876] loop5: rw=2049, sector=209285, nr_sectors = 1 limit=128
[  239.615602][ T4530] usb 5-1: config 0 descriptor??
[  239.633963][ T7876] Buffer I/O error on dev loop5, logical block 209285, lost async page write
[  239.653694][ T7877] syz.5.1150: attempt to access beyond end of device
[  239.653694][ T7877] loop5: rw=2049, sector=2066843070, nr_sectors = 1 limit=128
[  239.680447][ T4538] savu 0003:1E7D:2D5A.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  239.699487][ T7877] Buffer I/O error on dev loop5, logical block 2066843070, lost async page write
[  239.764073][ T4309] usb 4-1: Using ep0 maxpacket: 32
[  239.771215][ T4309] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  239.772235][ T4500] sysv_free_block: trying to free block not in datazone
[  239.788126][ T4309] usb 4-1: config 0 has no interface number 0
[  239.806353][ T4309] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  239.810083][ T4500] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  239.824271][ T4309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.832356][ T4309] usb 4-1: Product: syz
[  239.844076][ T4309] usb 4-1: Manufacturer: syz
[  239.848765][ T4309] usb 4-1: SerialNumber: syz
[  239.889989][ T4309] usb 4-1: config 0 descriptor??
[  239.899138][ T4309] smsc95xx v2.0.0
[  239.974890][ T4538] usb 1-1: USB disconnect, device number 13
[  240.068625][ T4530] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0
[  240.081954][ T4530] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0
[  240.092896][ T4530] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0
[  240.102709][ T4530] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0
[  240.110080][ T4530] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0
[  240.121843][ T4530] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0
[  240.129387][ T4530] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0
[  240.138580][ T4530] arvo 0003:1E7D:30D4.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0
[  240.600293][ T4538] usb 5-1: USB disconnect, device number 15
[  240.735315][ T4309] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  240.936351][ T4309] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  240.955146][ T7891] loop0: detected capacity change from 0 to 1024
[  240.964776][ T4309] smsc95xx: probe of 4-1:0.67 failed with error -71
[  240.979652][ T4309] usb 4-1: USB disconnect, device number 14
[  240.991128][ T7891] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  241.013975][ T7891] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.176867][ T4254] EXT4-fs (loop0): unmounting filesystem.
[  241.324436][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1165'.
[  241.618275][ T7909] loop3: detected capacity change from 0 to 256
[  241.629330][ T7907] loop0: detected capacity change from 0 to 1024
[  241.663240][ T7909] FAT-fs (loop3): Directory bread(block 64) failed
[  241.674031][ T7907] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  241.692363][ T7909] FAT-fs (loop3): Directory bread(block 65) failed
[  241.699930][ T7909] FAT-fs (loop3): Directory bread(block 66) failed
[  241.712107][ T7909] FAT-fs (loop3): Directory bread(block 67) failed
[  241.718956][ T7909] FAT-fs (loop3): Directory bread(block 68) failed
[  241.725939][ T7909] FAT-fs (loop3): Directory bread(block 69) failed
[  241.733544][ T7909] FAT-fs (loop3): Directory bread(block 70) failed
[  241.740337][ T7909] FAT-fs (loop3): Directory bread(block 71) failed
[  241.747127][ T7909] FAT-fs (loop3): Directory bread(block 72) failed
[  241.753833][ T7909] FAT-fs (loop3): Directory bread(block 73) failed
[  241.773408][ T7907] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  241.817899][ T7907] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  241.851334][ T7907] EXT4-fs (loop0): This should not happen!! Data will be lost
[  241.851334][ T7907] 
[  241.874398][ T7907] EXT4-fs (loop0): Total free blocks count 0
[  241.880604][ T7907] EXT4-fs (loop0): Free/Dirty block details
[  241.886688][ T7907] EXT4-fs (loop0): free_blocks=68451041280
[  241.892635][ T1089] kworker/u4:5: attempt to access beyond end of device
[  241.892635][ T1089] loop3: rw=1, sector=1224, nr_sectors = 12 limit=256
[  241.892729][ T7907] EXT4-fs (loop0): dirty_blocks=16
[  241.892748][ T7907] EXT4-fs (loop0): Block reservation details
[  241.892763][ T7907] EXT4-fs (loop0): i_reserved_data_blocks=1
[  241.953873][   T26] audit: type=1800 audit(1748922977.695:226): pid=7865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1153" name="file1" dev="loop2" ino=15 res=0 errno=0
[  242.006972][ T1089] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  242.217019][ T7921] loop0: detected capacity change from 0 to 256
[  242.230719][ T7921] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  242.269766][ T7921] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  242.295430][ T7921] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  242.352346][ T7924] loop3: detected capacity change from 0 to 1024
[  242.436774][ T7924] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  242.438642][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  242.481106][ T7924] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.575151][ T7924] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  242.624805][ T7924] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[  242.659005][ T7924] EXT4-fs (loop3): This should not happen!! Data will be lost
[  242.659005][ T7924] 
[  242.684458][ T7924] EXT4-fs (loop3): Total free blocks count 0
[  242.715271][ T7924] EXT4-fs (loop3): Free/Dirty block details
[  242.721520][ T7924] EXT4-fs (loop3): free_blocks=4293918720
[  242.735215][ T7924] EXT4-fs (loop3): dirty_blocks=16
[  242.754641][ T7924] EXT4-fs (loop3): Block reservation details
[  242.764192][ T7924] EXT4-fs (loop3): i_reserved_data_blocks=1
[  242.810203][ T7944] loop0: detected capacity change from 0 to 512
[  242.867713][ T7944] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  242.893154][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  242.923498][ T7940] loop5: detected capacity change from 0 to 4096
[  242.924875][ T7944] EXT4-fs (loop0): 1 truncate cleaned up
[  242.955189][ T7944] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  242.994265][ T7953] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  243.034084][ T7944] EXT4-fs error (device loop0): ext4_find_extent:900: inode #15: comm syz.0.1183: inode has invalid extent depth: 25964
[  243.074002][ T7944] EXT4-fs (loop0): Remounting filesystem read-only
[  243.090936][ T7944] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size
[  243.178794][ T4254] EXT4-fs (loop0): unmounting filesystem.
[  243.296884][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'.
[  243.640382][ T7963] device vlan2 entered promiscuous mode
[  243.666430][ T7963] device team0 entered promiscuous mode
[  243.683200][ T7963] device team_slave_0 entered promiscuous mode
[  243.705869][ T7954] loop3: detected capacity change from 0 to 32768
[  243.719893][ T7963] device team_slave_1 entered promiscuous mode
[  243.742359][ T7963] team0: Device vlan2 is already an upper device of the team interface
[  243.772281][ T7965] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2
[  243.777004][ T7954] XFS (loop3): Mounting V5 Filesystem
[  243.815701][ T7965] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0
[  243.944444][ T7954] XFS (loop3): Ending clean mount
[  243.962841][ T7954] XFS (loop3): Quotacheck needed: Please wait.
[  243.979926][ T7979] loop2: detected capacity change from 0 to 512
[  244.029284][ T7981] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input25
[  244.030530][ T7979] EXT4-fs: Ignoring removed oldalloc option
[  244.053101][ T7954] XFS (loop3): Quotacheck: Done.
[  244.106719][ T7979] EXT4-fs (loop2): 1 truncate cleaned up
[  244.118450][ T7979] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  244.198727][ T4264] XFS (loop3): Unmounting Filesystem
[  244.225720][ T7979] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1195: invalid indirect mapped block 234881024 (level 0)
[  244.255515][ T7979] EXT4-fs (loop2): Remounting filesystem read-only
[  244.382798][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  244.656667][ T7974] loop4: detected capacity change from 0 to 40427
[  244.691331][ T7974] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[  244.712527][ T7974] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  244.738095][ T7994] loop5: detected capacity change from 0 to 64
[  244.751368][ T7974] F2FS-fs (loop4): invalid crc value
[  244.773947][ T7974] F2FS-fs (loop4): Found nat_bits in checkpoint
[  244.790605][ T7994] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  244.921075][ T7974] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  244.940548][ T7974] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  245.026780][ T7996] f2fs_ckpt-7:4: attempt to access beyond end of device
[  245.026780][ T7996] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  245.195407][ T4447] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  245.299199][ T8005] input: syz1 as /devices/virtual/input/input26
[  245.314789][ T8005] input: failed to attach handler leds to device input26, error: -6
[  245.387821][ T4447] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  245.402107][ T7991] loop2: detected capacity change from 0 to 32768
[  245.424159][ T4447] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  245.455744][ T4447] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  245.475851][ T4447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.498037][ T7999] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  245.560238][ T7991] XFS (loop2): Mounting V5 Filesystem
[  245.724565][ T7991] XFS (loop2): Ending clean mount
[  245.732033][ T7991] XFS (loop2): Quotacheck needed: Please wait.
[  245.758070][ T4447] usb 4-1: USB disconnect, device number 15
[  245.847685][ T7991] XFS (loop2): Quotacheck: Done.
[  245.881928][   T26] audit: type=1800 audit(1748922981.614:227): pid=7991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1200" name="file2" dev="loop2" ino=9287 res=0 errno=0
[  245.967551][ T4257] XFS (loop2): Unmounting Filesystem
[  246.150305][ T4530] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  246.172890][ T8025] loop4: detected capacity change from 0 to 32768
[  246.194577][ T8025] XFS (loop4): Mounting V5 Filesystem
[  246.281624][ T8025] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  246.334054][ T8025] XFS (loop4): Starting recovery (logdev: internal)
[  246.344863][ T4530] usb 6-1: Using ep0 maxpacket: 8
[  246.352628][ T4530] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  246.378506][ T4530] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  246.385561][ T8039] loop2: detected capacity change from 0 to 256
[  246.405784][ T4530] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  246.430225][ T4530] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  246.450118][ T4530] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  246.463667][ T4530] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.471574][ T8039] FAT-fs (loop2): Directory bread(block 64) failed
[  246.488891][ T8039] FAT-fs (loop2): Directory bread(block 65) failed
[  246.494364][ T8025] XFS (loop4): Ending recovery (logdev: internal)
[  246.505013][ T8039] FAT-fs (loop2): Directory bread(block 66) failed
[  246.534895][ T8039] FAT-fs (loop2): Directory bread(block 67) failed
[  246.553533][ T8039] FAT-fs (loop2): Directory bread(block 68) failed
[  246.592049][ T8039] FAT-fs (loop2): Directory bread(block 69) failed
[  246.612629][ T8039] FAT-fs (loop2): Directory bread(block 70) failed
[  246.623730][ T8039] FAT-fs (loop2): Directory bread(block 71) failed
[  246.639486][ T8039] FAT-fs (loop2): Directory bread(block 72) failed
[  246.648543][ T8039] FAT-fs (loop2): Directory bread(block 73) failed
[  246.682363][ T4530] usb 6-1: GET_CAPABILITIES returned 0
[  246.692377][ T4530] usbtmc 6-1:16.0: can't read capabilities
[  246.833552][ T4252] XFS (loop4): Unmounting Filesystem
[  246.890446][ T8038] loop0: detected capacity change from 0 to 40427
[  246.898385][ T8038] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  246.908877][ T8038] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  246.913970][ T4530] usb 6-1: USB disconnect, device number 11
[  246.938551][ T8038] F2FS-fs (loop0): invalid crc value
[  246.956128][ T8038] F2FS-fs (loop0): Found nat_bits in checkpoint
[  247.019052][ T8038] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  247.034878][ T8038] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  247.310669][ T8052] loop3: detected capacity change from 0 to 32768
[  247.346297][ T8052] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  247.346297][ T8052] 
[  247.392359][ T8052] ERROR: (device loop3): remounting filesystem as read-only
[  247.416543][ T8052] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3
[  247.416543][ T8052] 
[  247.445127][ T8052] ERROR: (device loop3): remounting filesystem as read-only
[  247.452601][ T8052] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  247.452601][ T8052] 
[  247.582041][  T107] BUG: Bad page state in process jfsCommit  pfn:60f05
[  247.591230][  T107] page:ffffea000183c140 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x60f05
[  247.628204][  T107] flags: 0xfff00000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  247.642581][  T107] raw: 00fff00000002047 dead000000000100 dead000000000122 0000000000000000
[  247.677900][  T107] raw: 000000000000001c ffff88802b93fd90 00000000ffffffff 0000000000000000
[  247.697085][  T107] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  247.712454][  T107] page_owner tracks the page as allocated
[  247.725076][  T107] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 8052, tgid 8051 (syz.3.1218), ts 247339921569, free_ts 247288871376
[  247.762445][  T107]  post_alloc_hook+0x173/0x1a0
[  247.773169][  T107]  get_page_from_freelist+0x1a26/0x1ac0
[  247.779146][  T107]  __alloc_pages+0x1df/0x4e0
[  247.783860][  T107]  folio_alloc+0x1c/0x60
[  247.788702][  T107]  filemap_alloc_folio+0xdb/0x460
[  247.793794][  T107]  do_read_cache_folio+0x1bb/0x760
[  247.799337][  T107]  do_read_cache_page+0x32/0x220
[  247.804314][  T107]  __get_metapage+0x316/0xfa0
[  247.809196][  T107]  diRead+0x6f7/0xbb0
[  247.813206][  T107]  jfs_iget+0x89/0x3c0
[  247.817371][  T107]  jfs_fill_super+0x708/0xac0
[  247.822073][  T107]  mount_bdev+0x287/0x3c0
[  247.826534][  T107]  legacy_get_tree+0xe6/0x180
[  247.831244][  T107]  vfs_get_tree+0x88/0x270
[  247.835824][  T107]  do_new_mount+0x24a/0xa40
[  247.840367][  T107]  __se_sys_mount+0x2d6/0x3c0
[  247.845309][  T107] page last free stack trace:
[  247.850012][  T107]  free_unref_page_prepare+0x8b4/0x9a0
[  247.855560][  T107]  free_unref_page+0x2e/0x3f0
[  247.860287][  T107]  tlb_finish_mmu+0x10c/0x1c0
[  247.865090][  T107]  exit_mmap+0x343/0x8e0
[  247.869374][  T107]  __mmput+0x118/0x3c0
[  247.873459][  T107]  exit_mm+0x1e6/0x2c0
[  247.878959][  T107]  do_exit+0x8b9/0x2400
[  247.883167][  T107]  do_group_exit+0x217/0x2d0
[  247.887920][  T107]  get_signal+0x1272/0x1350
[  247.892462][  T107]  arch_do_signal_or_restart+0xb0/0x1230
[  247.898154][  T107]  exit_to_user_mode_loop+0x70/0x110
[  247.903477][  T107]  exit_to_user_mode_prepare+0xb1/0x140
[  247.909187][  T107]  syscall_exit_to_user_mode+0x16/0x40
[  247.914679][  T107]  do_syscall_64+0x58/0xa0
[  247.919488][  T107]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  247.925613][  T107] Modules linked in:
[  247.930628][  T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted 6.1.140-syzkaller #0
[  247.938570][  T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  247.948661][  T107] Call Trace:
[  247.951942][  T107]  <TASK>
[  247.954881][  T107]  dump_stack_lvl+0x168/0x22e
[  247.959573][  T107]  ? show_regs_print_info+0x12/0x12
[  247.964779][  T107]  ? swiotlb_print_info+0x60/0x60
[  247.969822][  T107]  bad_page+0x14b/0x170
[  247.973981][  T107]  free_unref_page_prepare+0x42a/0x9a0
[  247.979457][  T107]  free_unref_page+0x2e/0x3f0
[  247.984146][  T107]  ? __folio_put+0xf1/0x210
[  247.988670][  T107]  txUnlock+0x27e/0xcb0
[  247.992878][  T107]  ? lockdep_hardirqs_on+0x94/0x140
[  247.998090][  T107]  jfs_lazycommit+0x56c/0xa50
[  248.002777][  T107]  ? txFreelock+0x5a0/0x5a0
[  248.007293][  T107]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  248.013240][  T107]  ? do_task_dead+0xd0/0xd0
[  248.017770][  T107]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  248.023673][  T107]  ? __kthread_parkme+0x162/0x1c0
[  248.028721][  T107]  kthread+0x29d/0x330
[  248.032812][  T107]  ? txFreelock+0x5a0/0x5a0
[  248.037420][  T107]  ? kthread_blkcg+0xd0/0xd0
[  248.042047][  T107]  ret_from_fork+0x1f/0x30
[  248.046500][  T107]  </TASK>
[  248.051205][  T107] Disabling lock debugging due to kernel taint
[  248.058387][  T107] page:ffffea000183c140 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x60f05
[  248.068772][  T107] flags: 0xfff00000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  248.080647][  T107] raw: 00fff00000002047 dead000000000100 dead000000000122 0000000000000000
[  248.089348][  T107] raw: 000000000000001c ffff88802b93fd90 00000000ffffffff 0000000000000000
[  248.098025][  T107] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u))
[  248.109188][  T107] page_owner tracks the page as allocated
[  248.114934][  T107] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 8052, tgid 8051 (syz.3.1218), ts 247339921569, free_ts 247288871376
[  248.134620][  T107]  post_alloc_hook+0x173/0x1a0
[  248.139535][  T107]  get_page_from_freelist+0x1a26/0x1ac0
[  248.145120][  T107]  __alloc_pages+0x1df/0x4e0
[  248.149708][  T107]  folio_alloc+0x1c/0x60
[  248.153952][  T107]  filemap_alloc_folio+0xdb/0x460
[  248.159101][  T107]  do_read_cache_folio+0x1bb/0x760
[  248.164238][  T107]  do_read_cache_page+0x32/0x220
[  248.169248][  T107]  __get_metapage+0x316/0xfa0
[  248.173941][  T107]  diRead+0x6f7/0xbb0
[  248.177968][  T107]  jfs_iget+0x89/0x3c0
[  248.182625][  T107]  jfs_fill_super+0x708/0xac0
[  248.187369][  T107]  mount_bdev+0x287/0x3c0
[  248.191716][  T107]  legacy_get_tree+0xe6/0x180
[  248.196441][  T107]  vfs_get_tree+0x88/0x270
[  248.200874][  T107]  do_new_mount+0x24a/0xa40
[  248.205436][  T107]  __se_sys_mount+0x2d6/0x3c0
[  248.210149][  T107] page last free stack trace:
[  248.214812][  T107]  free_unref_page_prepare+0x8b4/0x9a0
[  248.220327][  T107]  free_unref_page+0x2e/0x3f0
[  248.225069][  T107]  tlb_finish_mmu+0x10c/0x1c0
[  248.229754][  T107]  exit_mmap+0x343/0x8e0
[  248.234103][  T107]  __mmput+0x118/0x3c0
[  248.238294][  T107]  exit_mm+0x1e6/0x2c0
[  248.242380][  T107]  do_exit+0x8b9/0x2400
[  248.246577][  T107]  do_group_exit+0x217/0x2d0
[  248.251184][  T107]  get_signal+0x1272/0x1350
[  248.255740][  T107]  arch_do_signal_or_restart+0xb0/0x1230
[  248.261390][  T107]  exit_to_user_mode_loop+0x70/0x110
[  248.266802][  T107]  exit_to_user_mode_prepare+0xb1/0x140
[  248.272375][  T107]  syscall_exit_to_user_mode+0x16/0x40
[  248.277871][  T107]  do_syscall_64+0x58/0xa0
[  248.282309][  T107]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  248.289157][  T107] ------------[ cut here ]------------
[  248.294648][  T107] kernel BUG at include/linux/mm.h:1135!
[  248.300443][  T107] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  248.306535][  T107] CPU: 1 PID: 107 Comm: jfsCommit Tainted: G    B              6.1.140-syzkaller #0
[  248.315918][  T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  248.325978][  T107] RIP: 0010:put_metapage+0x24f/0x340
[  248.331276][  T107] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 2b 9d e4 fe e9 25 ff ff ff e8 31 27 93 fe 48 8b 3c 24 48 c7 c6 c0 41 a6 8a e8 21 0d cf fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 ea 2a 93
[  248.350888][  T107] RSP: 0018:ffffc90002647ce0 EFLAGS: 00010246
[  248.356958][  T107] RAX: 5aa1d23b83f79200 RBX: ffff88802b93fd90 RCX: 5aa1d23b83f79200
[  248.364933][  T107] RDX: 0000000000000000 RSI: ffffffff8abf1240 RDI: ffffffff8abf1200
[  248.372903][  T107] RBP: 000000000000007f R08: dffffc0000000000 R09: fffffbfff1bfd006
[  248.380875][  T107] R10: fffffbfff1bfd006 R11: 1ffffffff1bfd005 R12: ffff88802b93fdb8
[  248.389029][  T107] R13: ffffea000183c174 R14: 1ffff11005727fb7 R15: 1ffff11005727fc4
[  248.397004][  T107] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  248.405933][  T107] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  248.412531][  T107] CR2: 00007f4d70b80178 CR3: 000000005bdc1000 CR4: 00000000003506e0
[  248.420506][  T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  248.428473][  T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  248.436443][  T107] Call Trace:
[  248.439723][  T107]  <TASK>
[  248.442655][  T107]  txUnlock+0x427/0xcb0
[  248.446824][  T107]  jfs_lazycommit+0x56c/0xa50
[  248.451510][  T107]  ? txFreelock+0x5a0/0x5a0
[  248.456020][  T107]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  248.461946][  T107]  ? do_task_dead+0xd0/0xd0
[  248.466457][  T107]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  248.472370][  T107]  ? __kthread_parkme+0x162/0x1c0
[  248.477405][  T107]  kthread+0x29d/0x330
[  248.481483][  T107]  ? txFreelock+0x5a0/0x5a0
[  248.485996][  T107]  ? kthread_blkcg+0xd0/0xd0
[  248.490596][  T107]  ret_from_fork+0x1f/0x30
[  248.495111][  T107]  </TASK>
[  248.498134][  T107] Modules linked in:
[  248.505616][  T107] ---[ end trace 0000000000000000 ]---
[  248.511525][  T107] RIP: 0010:put_metapage+0x24f/0x340
[  248.517683][  T107] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 2b 9d e4 fe e9 25 ff ff ff e8 31 27 93 fe 48 8b 3c 24 48 c7 c6 c0 41 a6 8a e8 21 0d cf fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 ea 2a 93
[  248.537430][  T107] RSP: 0018:ffffc90002647ce0 EFLAGS: 00010246
[  248.543692][  T107] RAX: 5aa1d23b83f79200 RBX: ffff88802b93fd90 RCX: 5aa1d23b83f79200
[  248.551791][  T107] RDX: 0000000000000000 RSI: ffffffff8abf1240 RDI: ffffffff8abf1200
[  248.559990][  T107] RBP: 000000000000007f R08: dffffc0000000000 R09: fffffbfff1bfd006
[  248.568426][  T107] R10: fffffbfff1bfd006 R11: 1ffffffff1bfd005 R12: ffff88802b93fdb8
[  248.576789][  T107] R13: ffffea000183c174 R14: 1ffff11005727fb7 R15: 1ffff11005727fc4
[  248.584859][  T107] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  248.594836][  T107] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  248.601720][  T107] CR2: 00007f4d70b80178 CR3: 0000000072c85000 CR4: 00000000003506e0
[  248.610569][  T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  248.620709][  T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  248.629739][  T107] Kernel panic - not syncing: Fatal exception
[  248.636132][  T107] Kernel Offset: disabled
[  248.640469][  T107] Rebooting in 86400 seconds..