last executing test programs:

2m22.448998962s ago: executing program 1 (id=51):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18)
syz_emit_ethernet(0xc2, &(0x7f0000000580)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x6, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x26, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x1, 0xa, "6580a9e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}, @timestamp_prespec={0x44, 0x4, 0x3c, 0x3, 0x2}]}}}}}}}, 0x0)

2m21.909561511s ago: executing program 1 (id=55):
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240))
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
setreuid(0x0, 0xee01)
unlink(&(0x7f0000000080)='./bus\x00')

2m21.30209539s ago: executing program 1 (id=60):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRES16], 0x15)

2m20.790616823s ago: executing program 1 (id=63):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f0000000c00)="$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")
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x42000, 0x0)
sync_file_range(r0, 0x9, 0x40000fe, 0x7)

2m19.094171043s ago: executing program 1 (id=68):
eventfd(0xfffffffd)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

2m17.342855568s ago: executing program 1 (id=73):
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file1\x00', 0x810000, &(0x7f0000000740)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000002a80)="$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")
openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)

2m14.230804843s ago: executing program 32 (id=73):
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file1\x00', 0x810000, &(0x7f0000000740)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000002a80)="$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")
openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)

10.366984986s ago: executing program 4 (id=512):
r0 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)

8.8281335s ago: executing program 4 (id=515):
syz_usb_connect(0x0, 0x6b, &(0x7f0000000c80)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e010203010902"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000000)=@string={0x2}}, {0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0371da000000000000"]}]})
creat(0x0, 0xd931d3864d39dcdb)
timer_create(0x0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x100808, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="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", @ANYRES16, @ANYRESOCT], 0xfe, 0x1518, &(0x7f00000022c0)="$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")
lstat(0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe)

7.557105103s ago: executing program 0 (id=520):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
sendmsg$can_j1939(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x1d, r1, 0x2, {0x2, 0xff, 0x2}, 0xff}, 0x18, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0xc000)

6.669921359s ago: executing program 2 (id=524):
r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
r1 = fanotify_init(0xf00, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
fanotify_mark(r1, 0x541, 0x4000101b, r2, 0x0)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
sendfile(r0, r0, &(0x7f0000000080)=0x2, 0x7f03)

5.96953036s ago: executing program 4 (id=526):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf1, &(0x7f0000001cc0)="$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")
mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000, 0x0)
fdatasync(r0)

5.826782729s ago: executing program 2 (id=527):
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000140), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710031000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

5.795808768s ago: executing program 3 (id=528):
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000)
r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
ioctl$SNDCTL_SEQ_RESET(r2, 0x5100)

5.147613575s ago: executing program 2 (id=529):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x300000a, &(0x7f0000000180), 0x23, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

5.087523689s ago: executing program 0 (id=530):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd28, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084)

5.072050541s ago: executing program 5 (id=531):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)

4.964101773s ago: executing program 3 (id=532):
r0 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa)
lseek(r2, 0x7fff, 0x0)

4.43195871s ago: executing program 5 (id=533):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000006300)="bdf25e6f0d10668122f289a6bf3cc1c9476de5625a0271b8d988a9f5d5e0081242133ed6d905168ffd12a79b9d0245efce333b69021258af0b7f8fcc7b0ce9b48ff73dc5ebaa2a607033a6220a60c4e1348d92f8d0e9c79504518133021220077e1e0b4e0c8d373c779e03dd36c1f9667c8ee6aa56c2b97e9cded8b1738fea65774c4c5dedf7be75405218742aa9f5348129b9893ca01e43a8f648e689adb9776f9008596ca8a749e94b7d7b906945390e6c68fefd7364e749c35484b0a7b4569e8d5bf6fdc06c3ed56c599d61a21ed03ec5b61f74d9a7400e9a0999404ac63d7849d3f1bc1e777d2c180220c4227c492bd3ee3f854e846baf93fa9759ed96fb69c9bc2fca51d1f24a68e735ba5deeb0afc2b017849a1786574a50b6818e3ee1029b2257fe2ede4b065637fcb05632587600d1090b004d4fc3dc8d3576762d06a964bcc7d31f94e09ecec7a999717dd639a3db03df310a0a4f26134d982e80f00d3f1f20693cf36115046f52734d0bafab657131682c6c415168b87cabb42a125fdd6cb8a545b717e1fc301c0798515f201f7ff7bfd35db7605f4ef97a91a6da5d5f88d1455edce0e86ea60901ea22aee508a567dfcf0f3f630d4e8be3a312a5d997bbb8fcc319f32c45fc62b09778bcf810b48a863c1a0ffeac68af383d3bfb60ad9f69f50bb11557bb2e966bd231c49fee49ec8c2174fd3cfd245c56a1c982a1f818a50713df546cf9d01b70e165d371ce0d2ba41c6758c46da7eb8078d2c7f2a2462a32e37129dded20ec3f6169a33d136765d9ae28addf3fbecb633aee9a7ded0ec160b5ce35c92b855ba8362205017afaf9e45758d5e256e35452f6d03ac89712e81445b32dfdd8cdd28a5af8c75df2a27922dbf5cceabff945327b5f4ec2e93c4b367ebc6a54f903567ff1a3f9469a466ecbfef5c39671c9ac29f14de1575de46ba2e933cdeb068259593e73da67f05858ba0cf3e0316aa1a91c21f1a1ccf157b2f4160b86dd67ea854ddd098f34c0421a7ab541b6d105f76ff19afdef08456da28244b25b61162093592e72bc251936db09134f590ca0a1b844244aa054a748b695346a5d49b979b4c69cdad7ef09f615196bfa2918c07e81c325370461cdc50aeb105b3cc51e0a098d9e49118da9c1bb04da247fc4e7876136059fe1ed10042383502b54c6e26082eddf83196d6b2c9410e4217dc8c4c2de483e328ccfbea9c54ab549a23ec98c9db241a67ffd79af97822bcc0a784e8f4e61c83cfb637f4aa1a80027fb2322bca99b65d4d64e93f3484c83ce7f46e12f7accacf74c5d0362198d60de93925e1a631ea6c786843261c49cadf482f3ff541b88d92f801a8610c195ad6e09e4a1bc15f727d09d063e23bfde60585def96e3963978f0686ca079e86032cd23b30222ff0843fa1d0e883d2d75dffc12bab0109b25ff08cf1caeeb7c39e5f438c7b2a9a2a366d32fa9fa0e2885a473ce6b97455d58d941b46faac1f2d8335f276f14232e193be1301416584c47062059e92ece4347c89aa9bf2c12b7c7b5ef7b3bf27ef23367ca3fd037fd9145f84e6852ea3eb624b7622411851134a7ef388e7799df33bfae12a35bdde94de1b10e0e0fe6b40d158409992244a4e27af355aaf7983aceb0ca6c790ecbe5234fd0ad063ae2ee1fe48aff51c35c5553fd1ab998abcb3dd7b0efb2f9c658fc4671e536c0ea75b36d59efe1901e971a750a4fdaf15bc0d1de7681a18c73bd00329d8a7a59c8dde6ee9156759386428a593d9bcbac57f2ec6387dc713703b30e44e655f663947caf4bf15624517bf3f4df16a8ade7193d0a69d998d970c07406a5892dc625a2695bc5c495079f2100ac033f912b5135551c923b61687574b1c43ca81ae9312d668415c8162aea7582b8db90f96181700ac22771b985c0c3f6081cca160efb1bdcabc2177d081ee618ed92c5af569721cc9f0453fe8e512d089a2aa0a219504ff51ba258f6b3737120e7d55e3ceed42c1aef42ac5e969642e3ffa8bc9e7319927ff971d450ac5a8a12ef68747b2574e89a64dcff67a36cbcf0f166371f98825c6eaa8516e27b81b8701d47fbbb87748a771265afff6fdf0acd2e9da1d759523feb0f33a6b27c050cbd5ea833c4859d7c84878253652dc4277a8ad6dd0b1b118e866cb90f7f29cf3a65cd9ba5c5e888c2afdfcef2b9dca883dcb7908c0a2ba0e76d5992430819f4f7d0369c53f737abc75e7f52ed95320dde44bf8b6397ef1ae719eb550a2bcad515ed99246f753d9d344f668c58c2343873b2af2dbb8d0c1c3280a5e8267a89a16eae734102bf4ed6aec57f4e29eaadb118f5407337387ec12f6629f8de94b2fefceffb735effca8865722334dd3a27c789c96c2fdc7f96d702fa5e360a460856c3559ac65dac1aae0c10712cd99e8f7c9188a43460c2e3775f27518893628cb5f2cd25985570ad101b3ba16a342885d65ea1befef80aca975a3f8428eab9999124aeafa991f68151eb7ab9bffe132c8ad1f2e0ad79e0cbc0806aa46c0c53b6f1217dcd88f197a3c6ddcb5e1ca9c278d02736ab3f81db85d3fd751c38bdd449fb3f9e52c2e067fb8761b94ccf13e4958cb1f703d327cd510089ae4d10a96328b950689efd262f43470dd47c73327c63cd882432807a65d9d21ae39b57e27c14af2b6792c6d6687526593ce97e8000eb49157553fc6fc9e4f040098b43e4308aceb1c5f87f046389b3174cf96459460927b0fff05764d398c7c5e987ec4b08259c4a41a4fd293e0106e2c522cff08f07cb4dcb7165dd6ba7358bb7d389aae1bd76957e1b69e4b65a0443fe2ca48722b3babd8df8c53b6fc1fc0537defa60e79bf6f746771d3be7def7b14a813087804fdb7523566c47041014d0e4eb8e0faa6db79dc05a54299e54b34be446a3d3b0c073e212e305a78a190034885174fe25443061447ea7fa094f104b10dacc382cb353c96e3cf4993aba3b7271ecf3828feaa2490fa03697ac6bcd841130a175d7275033da3e7c094141d2ce798e8cf25b4b9d3356c0d74563ee9b81f9b18d10bf25988ce3f81ed002095c94b2cf2c8799f4e2194b11a6f4a774ac4fbf5c78d8163e681271505c17f47e71cd03a20490241c1f144ae59b19cce564475575e0af7f41984ffa6f5f8b365a338687ad494a79317679c00d74242b4155fb0a06fc735793d66bd6f252a26278896b6df70a393a21b0a9b80056c505f7266f296bbc3587af24c06476539cd1bfe1f20f818c778fd712300feab31861b31c254211c42d9f27ff3f41f5bb170c15b3daad6dda056065b24107ab3976549a353bd6f2859d84fba3d21f4377b1c5a0aa4fd039c485d1bdd8017817cdea1b8ba5b52c30ea06ae1abb942abd1917626deb37297d3df42cc848cd01622f13ad081f9d2c96384f6b4c72d4df9541b2cb36ec119e326f625aba6436dfa5d986cc8a6a15e082e2111c26a6da1d1e387445a7fe5a9ccf05dc01d08fd1b16f768b5b3b8b464976d480f4f1a44346ca5f01f29eff48e2ad585cc32f6c00e2c045c7015cb46f70052e4935c246ebcdbc7c3d091c825f864eea2dfe25459b6456f7b52c168fd565d250514261d171d65c8e9ef6fde70ff716b7c45a24f9666462a0919ed7a1a614df711c7f5b24dda275c71fbf973ed4f8cbbba5ea15bd7e5aaad972711159b20751f5fdb91a223f39cde6a83751a06c1ad0536d387bf3ea4a3d7e5e90bc52f4d101c045d5ad32fb58e45fd2fa2f5c8aa0bb40957465b87bef7fe6b76c16c8d07ecd51edb49faa5bb0070aba2dad3ca7eea1955d939cadb75286904a02db81fceb6b6b9b16ad84d373d33e134007fcdc02d40472fbbf70b57a53b6e5df122c0f8b3d44dc045104690f2d78b8cd2d0905d5d66830cb9125fa041d0fc2f08e20f9fa70bd17815cbb50f8019048d05df1673e9c8cc83e17dc91fd74b024b2b56b41bbff26016c6638b6ecc16deb349ee392776962746d62751b5672755a845b443c85d7c53605f274f3d5c3edd6ecd15e28545d2aea4df5d5e4eb169af361159249daf53f1339c1819370ad4d3ceafa7dc6a9118a2f1e69c4db409093eca05ec1cad8d606db1c5d3b58609eda4f1e71ae62765d79501ce8de42e60cfdc08517559f9c65e8dfbd73a5f971aa96f2cd20f1763e59d3b15367e0b206e97d5f5462e81299743e1959376fcdfac93855ebac2b5235b0f03c58eeaffcea40be5a9fe6bd290deddbb28db6539a72936a1953cb4a558dc93271a54d1e05cc3f4025c0ecca369b0d25d47c3e66049045d0daf9dc9fbe2c69d217d2e6939bf6d1875cd23b73d2e921aea9eee4f1f9b036e8f5cbb0100710c1dc27d1fb37ea26634dc827bfe42d094ce9576611a6bce6b67467f983a327e9dd34896672f257b41b8bee33a041ce2e83a65fad93e1a2a06854a40fe3751997c5233d397e5ce5ea676379527ad0e298fa62cd91ef89e9876db8e0909b60ff16c4a0ba01307826bf18c242e77af8ac40c681b8ae2cbd58c4eb4e6a580bd3f57bf1ffa44a1d080426d3f8c733568ccc75a61980ec92b5b0f4cf03e3ece177954c21b90b7828c9113da0fc53f6f5c5ea8bea08e14a12b889fc705ee44d834f184532421a584bd7301c9bc822deb7e71050a8cf0cd7f96dd2fd93b9d7306bb9702af5b88b2090d2b67bd88a299704e8c556b9066e35e4c864cf1775a6ed94a9685e996c4c671cc807f7c09b45559ee079d56547179e1b1af630c4ba04717cb5e88c0caadaf57964f5197d9d98a7f5b5e622c3eb5844645c4c2408806bbb4be5778925df16518c06597b243019bdc690a4723548a658529717360d474cfb6fcf30060b320cac29b2e42ec4f390a6c7a15274099a64a8d71c4a84e86d206cd2c7ee8125b19752a18dd2eb0dc643aa6b4494760f62acf187080281ec7d0a526374f69051e6aa13d8321372bea8d9e9c7fed4d0a48257e5c7463bc0a0165acc4712aec8cdd014de0b98d0de9b0dc3cc2d40c3be3ea3edb04b18f72209da21f5900a4ef002aeb88a364ed0bb102c2e164ac4f0dff7f082c3757b7ee1cd0e3b1ad45dd77553a4462c8f84ae21f8246281a02160bcf90c00b7816f93524d4d6577c6432d97da328757c3dc06c06760c82946f9f44e909cefaad0734094d8a9076abfc79c79bdb9bcdfa13697bff6f1a219653ac96882d615fe4757b76a8235f2f5e5978cdb5c5bacf4217a56fc6416943552d6e1d6c3f2e8801322368855aed0c5302d1445cbbeb5ef970abd8b5316f0c7cb7f5bd023c619ecf6b1714705a48b67e7a5c2f15bf9c90f6ada82d36484776d20f464d22b88b5d99dc2ba812b9f38754ac71499705f83875eee065482e2fed4c5f3537449857f409c635dbb2c0565ce9f23bbb5bde3ee0bb94f3fca1b5a0d78825c80f50a839a4b3fe6439fbef4190f8ddf1012990268aa8c87b91fdd210530e0bee9c17e35ee59e519801f7fdc72e5d1b96793ff13654b8eb28c2f1a702b1c5ed694d567e70981c596d9997a3e9133e3b623ea071bbd807c86ee191f02400c53851e567f2ceea1a80506af359cdf36c3cd9963d5cf3d32c64f4f7706c78a90d55f6cf12373fac70e17aa1bb6688710eb3b62ee809de762e5093cb326ed56c57b164fd73023021a4be32ec50bbed23bac420880af3a17a5f3502c95781e6251f88b17f83a02511ca782118f1bb07fe73d50fb70043734df8c82f07e74bb4500179d3c1e33d4075aa4a873eec1a34fd09bb3747825e1d821ce6e4f6b8270b0d1123499ca176ad47613bcd02b4825ad70ec79ecd1dbb496737d5258024898dde00e62b0b594f0e830f0c8475a3638ed4c438e87b6919314f9f2b5f81b2c42a9a0269477a637edc4b06486d41e093c65bb26acc7968320713fcf9551e9c6a855dbf7d3961bda89df32fbfb67bc285a1c14692afb72fbc6587e255627fed4971e8058248a926fd586bfa25aa19dc46b3f51d402f74724abcbbea314d8127c7e92ce0adf8af38b7047b8d5269e145c2d58158d178f0d91ed03a451e3a324b7add7377675ab8a56c5395efdaabaafcb6b1348e984677353e6f77296fe7e75a5afe6d2bd1e26be62ecb84801c20a462c4481762d2be207dce9c49e656133c605b16a1b4ff683983e3ececed23fb6540f0dd89776d525f5c4e07a3f50968f35b0bf92cd65514b1759918e333637d383a1810e28a822fb20151878461ff61cca3c340cb23f9602d03c10d4b05d4f712521921148c3e249358925f87d00a351ef7917b4e817a7a1d2191e6bb026dfb8e2ba08e52f1e43346cbab51a45dd2d8bfdd252ec79a7e9203e97a576a7db467def3ac0b789a6d52015712e89bb0df0879d2868d85e2f2d2c90547dae52500db275842eca910e48f0c43fc33fbd179d39ac9aab6e0f397f8eaca95793d8c196e49b050fd9815994f700ad4d22c07756fce9a755768be74dad0589411935de2dbfd10d200da75b4a4f9e523e763034820afc8c7d02132bde03108293263f84d7ed165e587733d255e4c11fffd52f72725fd0238dcd5ff815fd22c26126aae530a7d01e60c14f4f8e701ab527b6483fe78125c5e4402ff51c721cee92e5dd6db40e28b21532a21facbaf396d163237c5cad61a05e9c0c39d1ce99152687a16104787d87b092e9037f147da8bbc0c6456bbe7a2006742534010f507dca79ce8b59097e0cbbe312f48fc0a3ea84e7a484b266ee766a85849b464d93f872acae4af0ff5c7ea06dfb26a66674fba6e8a9481b49a41bed7becbfa680681834b1a3d7961d69d592fdb403d1566770e0173cbf8fa14956e0539a5a4eeae62cb6a7d1ec9e9d9a36b30b511a615395b470fccab197139818a30224c4f053d35e8d9897141c8a94012f8254f325b8ddec5c0e638c09e2cef80cb4e16bd9aea09b86bb48548b012145ef88932040d7cc59cb0265ee451e243c08d672ddc06de38dc15daf50a8ec1c18b9bbd87e2158ea8fd7a7559fe94d4c6680e304e2d500ca016e68d9f8a25271421b9deca3c8067f59a8f3edf2ad1cd20f15e4c820d703b6ffb6e368e8418bd392994c931c50cb4c858a7db9658e2a468fe06b416265b5e236fbcdaa86cee8ef146fe78628ed35c6aaad5bc455ecc2197ae951940e5bb64454b488a3b12e4b67e84f5a35a1daec5d95a33184f6c30fc553f5d0955a797831aeeed051fc7619471e77f5c5c8e40af7d6b354d039c4fcccc8624360cfc8b4a4a266e581f87b2822e1096741e804ad6a70973a3343822bc4138fdb2cac87fe7a74d0f71473668b3c62f00c622f8d9a25f6970700000000000000f412d53976b5fa199c0f85fcec7a6e8ba629b053f1a26597bdea2c53bc17fb1bca3d6ba561ddc17cee05ad161c20a24b420304b805733d613f8c67c6014a873f3d5f4ec973ebaf0078114db4fc6b607f2f9aefd61f439d80dca94c297081f005b63b26012d39d88b32e36d73b6dd5cc1838aed1d594bb3991f4a073330884eb07c2157f6864bec324ebcc8ce6a49c90cd2541323d95fff147ace0e70a86c6e5d758e37b12b6a280f72bdde00411c803607c4241a1d62b595925503636590b2a4fb910b1577026a83629fc039207b6d355e6a06353daf4a8b0f2e9c412044105df627e8686cc69e223b11c961eb00561144defd02ee6f5b8c0db6a314afe11cb68a66b01974c6dc9e685b013b654d9c7a450f7429cf2a26f6e34ea79895051d71b06b1903274f30fe2fd107b7e7bd477d70bd6324824d39d0e07b0f90e5152c562daddcb258a0faf8a9941868e7463910d35da02696ccb6b16567576bd8397337f20c5a5db9ac04fb302c513845883babdd345d7eebbd107fe0d2cdbbc01d5e40c56660eee85bba1c7317ec59a572a4eb9d1fea5d76dfb3e01f416ae4a0795eadd5f32b17dad816e37d630f9a433a05bbf091de03fdb0f4a5c8d74c0846d0fdec786a2adafd535d82401923eb5279009a2a247f41db21afc647b88c82529b65bec96dc5bd799264d32fc15de8a909946a939701d5c60269d0a631d4d9263ef527a69e5875339d5d2bdd0a2cbd5ccd58127b524bbb114b7a306ea220fe082db0e0db14d828cd72900c77dbcad0bb760e85b2986fc76d98e76a327253327bfb4d23aa1d45629ef71e30e453e19acc470538b95c3b77d84f376a5b485f2f5156392e22a99716dc90e653c1eb6343e647c41a60a2604b001f44c2e65c7f0d5040a405e948d9be5cad3aff848de9e9db6268a043c91e666226bcf9a8dadeeda32db2e14bece95d4925e06bf26cf6665000f98e47c4ca4b5a7859f28cca8c7f1b3340bcf616920c3cd53c2789364b03e6a291817766888425b0ec7ccc484d5474a02a7cbb821b058cc853fe830f86f6cb1ca73812dd919f1c79a7dfa13d310654176609f8ca482c3fee11dc8d843116f5a775fdeccbb975d7e833f081e16d914e0f7154a48668c2be7ccedccf2edb407975630e4ae24a16d818fea03b141dea14cbd404ac9b01dc8d0cba227cfbd33f33d20c9101a71f33d1fa832ce68868907be9fd8f9f6a76b03eb4eda0c55d83c57cedd17e3e96d267410287caa26984f84903b8748579a6879a301e7393ed1467cb98be15c34d6d5c0c957e1a7b941ecefe07b9954e207c76065c1f668ec143c533dd3d863fec137f2a00d746d349d8cf9fc438eb9aa22284f75f73891ede03d20757df1df054957ec94d551cfa56f10b2044e257e7d75470dfe0cc6094b8a1f2c6198cc89ba6df91e57fa87340edf426702aca7d2b3ef46b78335c2442b0d775405ad2569ad7ce46dd3494dab4d98d78e7f393ed6816a5b6c9356b7409a5cdc00b4ea99b7823c744e46e4215945cb02edbdf332d7c109fc4a83ceb2d6198fcc6f3a835679cad70c7dff7dc605450d5fa7e29f9b32f5a1d53d12e2561361346c55dd3fc79e2ea2588fbb8e55c42e55c8cf22ccdac9216be9fdad10efea56c393f6f58896a0df541141f829b50e5e7208f6218bb683208af0c542ac5636e5c2eeb15044072f28a9755c63ec67baeedf0941c6d0c5f2fd702ef1011539932368dbe1664de988efbed22a43b215ae69eeb5312ac5cc966ca12f12c034ddaaae340cd6e89e42621053db7969cd9753a72a6451f78fbd8b4840329b6c6eb9bdf365444276ab81251f6894fe3d125e8eecf30f3a98116c96d2de30a1b195c1d10ffdc731b78740a53f09bcb66b6b237bc56f9426135ca651d9329540c386dc5251b537c4b8317460b0dafbc3d4f1b8d6a939e51de59b22d32e5daafb5f0d469e58567cba1f327e67ee8d0f53b041fa643a4a594d4cf28a0004aace404ca95b58a1e26d601563b188fdd2c97b8d8714913c3564d0a445d35060ed2ce20daa4174cb92653626fa9bd10513c8006d757acecd7eda9d41393dfdd683ad50ab4de8cd832b26c82edeb4af5013f43f297dbf502b62fd6c2ced9641235838853c2aeb447fa06b6ecd1c11f17d3261e87aa1ec86ec8b23fd4281f33469d7c4414b60268367d38d9235dfe3ac4c7032e298d0cbee4b705f4085f5653b4637a80ae575b44c6f1a2374b899e061d03abad5770355673020afdb8fecf5be2a8617aab331646f05d49bf5beefd650bfd240ed3b5abadb21941c4a615004284ff7927ef9a745e3d4208dfabb0b04d04002bb7e449ca884373fe4ebe35e18ffd249e992ba779284b1064b1e27e6aa0c4c88e915246e029113b4d01b53583b8282ea1d5d4a305d3e20f894af640abf9e376d6b1c6fd3bf86821b4a57c5c22d8172ea40daf2b398dc0329d4b7dd08c75c902f0368def10217234bea599509a7e61b4a11915009680613bf69f2f4b38e7595449a20aee13949c688a69cfa73af328c7df7a494d0e8d249cb3c843149b11bdddf34282db31b156261254472fbc2e12c7b7133f7d273ef472761b58e7f8e54ea2861ebccfb141e3b245b5e4a75204d12ff5d7b0a44ae039b3cf79869d24f1602060f81785a851b996a3693856c6b2e90f27dbd4be518ae3065e692e5f2842380e4f5cf91582632e6d36b260c27a1e7ae80b47d14067db8720e619c7323f358098ef054fddde357f4453c6e7ace38833ed1c9bc9bf0c054564b79885cc7c8fc5d7ebde25f0307067816067a4a96ddedfbd268ca19a67207ecfec5598a442a1c0e823e012ced27c3266c6721aa5718dc076e7f50023a49a40980bc0fcd568295c8d4c59f1874aa944b88901e38c803ef52c226a7daf055f4ec3bbecd878654a456448e552a0fafa64124688dbd7f3787af8b3fdf661680ae309939542337ab22f510ba9ab1a7229f5244938e9324b0b1ad22ad9e16b84f93cea693186a5c76ad7f74e7c82ce6cb9a9ecf3a4a1a6d06a8fdd6474ae1aeddfcef270c6c637918b7aed3d5068e17d3642e9fa66c985b2dca5b38ffdb3545a4954d0a5813bfec99721259562b80696dadd921e9f18978d21dee1129a386623cf93c804aeb4e511ee8658fcef51746dbe1f87285eae850f008f3effdb78994e6eb370600c1855f672de0b750ad56c22aa937c1eaa8a7a333fc55f814e878bf71e8d9717a8f0854635554f07393ce04cb6d58e9ac0f5808d9158fd6320fdf75b2db9cd0380418e8664b5ccdde967b8a76e8002683849fa507d78e971f7118b2eba2c025dc359684cbd7b6b2e41ed0783da3fa2ae2de5dcb2db67d06a21aa419bd465ecc378842219a55f647535c7f4002061c65338d9c098ef31b77297c9905b91555cb436b83cb88e48821fe750dfcb4305e146b7f68265a35331017dcd902071a8b904534dc26a017f2bd14bcc65963efc9a8689298e039ac717fd460703e7d08ead0ca43c3c88ee423ed92a20e0b7dd6636313d057b97fbfead33d0aea2ff50c57df057bdd6c7470fde9bf9f1fbfc7ddcea22c1ce9273705be952464b3d48aacb7a96e5ddcab0b4d7b564d12b66c07663e05dff55d40d7a2371ead0f948e6921b8d271f8c710f526844db88102e68c3ae1a35a729af6d6521dc587f83ced8263d6d5801dc8b9c11659cca84c6e4076021f2747769cbf50d3362602f6491a1c3734a62aa024e060e69b32a5ca8f5ebdf8deeeda60405610fd182cef2e4cd534ee31db32bb13f0bdd53799dc438c38ac0a49be58f0dacb53286fb7f1648b8eaaf4c997689eb703594f55fdbac9840b91696f1f2ee8599cd84d3a904b3b7515fd22866cc0c2ef1f8db911593801474bc90bc8151ad4b0da717cba6b388440dbf85cfd6fdf874960712e93bfe9cb22bd84139c0e3badc70b36dfb9edb4f4d4b45514e826c5dc0972a9596f14c0b4de118253de91aaf7c6bec8f95ea509c374f35543f678f12e467c394d21f613b446607051943ebd5a49b729e91681f54215f9d1c330e264efd1f214b7196e72eeca6796ca35b17e27c10cb6171e7eb520fbe0394f7399b65fcb0014a5c3b9c9c10b14877520d0a572b8fdf5e0bccd328540422a4ad906e2e358a6916dbae6b36aa8c3bd4514c56fc2602bc84c7c571af4f667eb7c3015f3ff85a6a309db43c6c1dcc922951fbc65c659d4b9c65608086ee33151e02596976109e3e2de848dfcca7b771c1997b9fa6ccc7e0299303ad5d11700611ed70b809ea039b00", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x101, 0xb, 0x0, {0x1, 0x0, 0xbdd6, 0x400, 0x10000, 0x5, 0x9d1f, 0x4, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x100)

4.227171412s ago: executing program 4 (id=534):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r1, &(0x7f00000020c0)=[{{&(0x7f00000012c0)={0xa, 0x4e23, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2}, 0x1c, 0x0}}], 0x1, 0x20000000)
setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f00000000c0)=0x1, 0x4)

3.86776183s ago: executing program 0 (id=535):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @local, 0x5}, 0x1c, 0x0}, 0xc4)

3.747069288s ago: executing program 5 (id=536):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x4e23, 0x4e22, [0x7, 0xffff], [], 0x0, [0x5, 0x3]}, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010)

3.720206745s ago: executing program 3 (id=537):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x58}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4)
recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=""/17, 0x11}, 0x5}], 0x1, 0x2, 0x0)

3.459423818s ago: executing program 0 (id=538):
r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x79af, 0x3181, 0x7fff, 0x2a5}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000780)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r0, 0x0, 0x0, 0x0, 0x2})
socket$nl_rdma(0x10, 0x3, 0x14)
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x1ea3, 0x3, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff, 0x8000000000000004}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x6b95}, 0x0, 0x0, 0x0)

3.276922431s ago: executing program 2 (id=539):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000a410000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18)

3.091575792s ago: executing program 3 (id=540):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
shutdown(r0, 0x1)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c)

2.978862159s ago: executing program 5 (id=541):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180), 0x1, 0x2a3, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-'], 0xa)
fsetxattr$security_evm(r0, &(0x7f0000000600), 0x0, 0x0, 0x2)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x138)

2.535592139s ago: executing program 4 (id=542):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@uqnoenforce}]}, 0x1, 0x990f, &(0x7f0000013080)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x3)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0)

2.217869886s ago: executing program 2 (id=543):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
shutdown(r0, 0x1)
poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
accept4(r0, 0x0, 0x0, 0x0)

2.155440365s ago: executing program 3 (id=544):
r0 = syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')

1.601839184s ago: executing program 5 (id=545):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x240, &(0x7f0000000700)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x42, 0x81)

789.832564ms ago: executing program 0 (id=546):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f00000008c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffe}, 0x18, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000800000000000000000bb07"], 0x28}, 0x40c0)

300.216939ms ago: executing program 5 (id=547):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000)
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000000)={0x20, r1, 0x1, 0x0, &(0x7f00000022c0)=[{}]})

281.342788ms ago: executing program 2 (id=548):
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00')
read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0xfffffc7a)

144.079028ms ago: executing program 0 (id=549):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4)
sendto$inet(r0, &(0x7f0000000f00)="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", 0x2bb, 0x4c840, 0x0, 0x0)

73.71899ms ago: executing program 4 (id=550):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
exit(0x100000000000035)
tkill(r0, 0x12)
waitid(0x0, 0x0, 0x0, 0x1000008, 0x0)

0s ago: executing program 3 (id=551):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x4, 0xaf7, &(0x7f0000000380)="$eJzs3U1sXEfhAPDZtdexk/Qfp/+EmjS0CYW2fNRpHBM+IkiqREhETYW4VKq4RGlaIkKQKBJQVcLJiRutqiBx4kOceqkKQqIXFPXEpRKNVCH1VDhwIAqiEgcIJIu8nlnvTnbzdh3vvrX395OeZ+fNezszz2/f97wJwNiqNv4uLs5VQrj85qsn/vbwX2eWxxxtTjHb+DvZEquFECoxPpl93/sTK+HND1460ymshIXG3+X4luURT11vzrsthLAU9oUrYTbsuXz1lbcXnjx18eSl/e+8duTagKoPAABj5atXjizu/vMf79954/UHjoUtzfHpeH02xrfH4/5j8cA/Hf9XQ3u80jK0msqmm4xDdaZ9uokO0zXymew83WSX/Key/GtdptsS7pz/RMu4TvWGjSytx7OhUp1vi1er8/Mr5+ShcV4/VZm/cO78cy+UVFBg3f3zwRDCvpbh+KX2+CCHtLHpZ56jgyhLZWW/PuD61oe1XDfbcGx4ed2oryi9zkMa6jvK3f4AJPn9wtss5VcW7k7z2yZ7y//6E9XO88M6GPb633P+1XhRraz8kzHP/1cXbXFYP5t1bUr1Sr+j7TGe9t7pGab8+aXuv7/8Tkf72Px+RK3Hcna7j7BR7i90K+fEkMuxVt3Kn68Xm9UXY5iWw5ey9NbfT/4/3Sj/Y6Czf+XX/zfyMB0rVUbeEyNQ/4EM+0agDIa2oX0dr93Nd9VL3PYAoy1/bq6e7o9G+XN9efqWgvTpgvSZgvStBenbCtJhnP3muz8OL1dWz/Pzc/p+r4en62z3xPD/+ixPfj2y3/zz5377dbf5588Twyj73emnz37u2Weurjz/X2mu/7fi+p5ON2bjb+tKnCBdL8yvqzef/Z9tz6faZbp7s/Lc02H6xudd7dNVdq1+T2jZztxWjrn2+XZ0m25v+3Sz2XQzcZjOypsfn2zN5kvHH2m7mpbXZFbfWlaPqawcabuyM4Z5OWAt0vrY7fn/tH7OhVrluXPnzz6e7WP/MFHbsjz+4JDLDdy9Xtv/zIX29j/bm+Nr1bRdCC3717S9OBjeiN/XPn6hmU/7+EMxnvZz35iYaYyfP/Pt88+uf/VhrL3wgxe/efr8+bPf8WHNH748GsXo50M6bRmV8vTwIZ0BlVaMaih/IQzxQ4kbJWAoDvxw5SDgsXPfOv382efPXjh0+PChhYXDnz+0eKBxXH+g9ei+1VIJpQXW0+pOP0/ZXk6BAAAAAAAAAAAAgELfO3ni6rtvffa9lfb/q+3/Uvv/9ORvav//o6z9f95OPrWDT+0Ad3ZIb0yTvWB1KpuuFof/z8q7K8tndzbfh2LY7Mcvtv9P2eXvdU3luS8bX8ujMcPsdQK3vS9lKmsfnfcX+NEYXorhLwOUqDLTeXQMi95vndb11Dqr5b0U9YlxeYnyJpD+b2ltWHmPyWpPrh3f69Tyz945pHKyvgbTeHDqji0LgNHw99F7//fS4L77H6sVL7+ehq7D5HDz+2ljjaiO43pRr3frxaPXHmwA1kfZ/X+m654pvPD7r0wvD2my60+0by/z95dCP/70bnt81PufHHT+eb99w86/7PoPu//PZv93PW//sh7zsvc891q6f//s2nst2YY9veaf1z+9B3pXjxlHN2L+qTaPhN7yr/8iyz+/IdSj/2T5b+0x/9vqv3dt+f835p8W26MPFeSfLgxfXClxpdpejpmsHun+X37dOLmZ1T+92/MO9f/ai53qv8Z7DLdi/jDONko/s/3KjiOaB+2tzxeEvvr/jZbWt//fZmGzzVr+HMZnYjztCNJzDnl/J/2WPz1fkfYDu7PvrxTs3/T/u7F9IYZFv4fU/29aH2fjLr8l3liWKV7rsGw367YGNqr3R+/+37gP0yNQBkPvQ31iDfM1+4krufz1en2wF7QKlJo5pS//ss8Tys6/7OVfJO//Nz+Gb55/7uucnvf/m6fn/f/m6TPxP9QtPe//N1+eef+/efp92ffm/QPPFaR/uCB9T+f05mK7v2D+vQXpHylI399MP9o2RUp/oGD+BwvS7y1If6gg/WMF6R8vSH+4IP3RlvTWPqBT+icK5t/sUnuUTvXXpx9sbnn7vHHb/sE4S/d/uv3+dxWkAxvXT14/ePyZX399dqX9/1Tzeki6j3csxmvx/On7MZ7f9w4t8eW0t2L8L1n6qF/vgHGSvz8j378/UpAObFzpOS+/bxhDlenOo2NY9N6qbsf5bCyfjOGnYvjpGD4Ww/kYHohhuje0MKTyMRjH3/jtkZcrq+f7O7L0Xp8nz9sDtb0nKoRwqMfy5NcH+n2ePX+PX7/uNv81NgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoTbXxd3FxrhLC5TdfPfH0qXMHlsccbU4x2/g72RKrNecL4fEYTsTw5/HDzQ9eOtMa3ophJSyESqg0x4enrjdz2hZCWAr7wpUwG/ZcvvrK2wtPnrp48tL+d147cm1wSwAAAAA2v/8FAAD//zjgCFM=")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}])
creat(&(0x7f0000000080)='./bus\x00', 0x2)

kernel console output (not intermixed with test programs):

luetooth: hci0: command tx timeout
[  181.571482][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.639604][ T5778] Bluetooth: hci1: command tx timeout
[  181.644938][ T5781] team0: Port device team_slave_0 added
[  181.660725][ T5781] team0: Port device team_slave_1 added
[  181.691198][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.698365][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.725088][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.744516][ T5775] team0: Port device team_slave_0 added
[  181.799776][ T5778] Bluetooth: hci2: command tx timeout
[  181.805364][ T5778] Bluetooth: hci3: command tx timeout
[  181.805687][ T5783] team0: Port device team_slave_0 added
[  181.811145][ T5772] Bluetooth: hci4: command tx timeout
[  181.845230][ T5775] team0: Port device team_slave_1 added
[  181.853332][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.860631][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.887274][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.934059][ T5783] team0: Port device team_slave_1 added
[  181.995583][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.002831][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.029156][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.043300][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.051400][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.077759][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.094509][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.101949][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.128405][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.256010][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.263281][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.291911][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.306013][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.313626][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.340375][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.357547][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.364915][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.391635][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.448540][ T5770] hsr_slave_0: entered promiscuous mode
[  182.457525][ T5770] hsr_slave_1: entered promiscuous mode
[  182.468306][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.475951][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.502624][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.646113][ T5774] hsr_slave_0: entered promiscuous mode
[  182.655911][ T5774] hsr_slave_1: entered promiscuous mode
[  182.664094][ T5774] debugfs: 'hsr0' already exists in 'hsr'
[  182.670154][ T5774] Cannot create hsr debugfs directory
[  182.718199][ T5781] hsr_slave_0: entered promiscuous mode
[  182.726585][ T5781] hsr_slave_1: entered promiscuous mode
[  182.734665][ T5781] debugfs: 'hsr0' already exists in 'hsr'
[  182.740550][ T5781] Cannot create hsr debugfs directory
[  182.988399][ T5783] hsr_slave_0: entered promiscuous mode
[  182.996973][ T5783] hsr_slave_1: entered promiscuous mode
[  183.005403][ T5783] debugfs: 'hsr0' already exists in 'hsr'
[  183.011367][ T5783] Cannot create hsr debugfs directory
[  183.029369][ T5775] hsr_slave_0: entered promiscuous mode
[  183.038017][ T5775] hsr_slave_1: entered promiscuous mode
[  183.046381][ T5775] debugfs: 'hsr0' already exists in 'hsr'
[  183.052334][ T5775] Cannot create hsr debugfs directory
[  183.649544][   T49] Bluetooth: hci0: command tx timeout
[  183.719576][   T49] Bluetooth: hci1: command tx timeout
[  183.879603][   T49] Bluetooth: hci3: command tx timeout
[  183.879734][ T5772] Bluetooth: hci2: command tx timeout
[  183.891155][ T5778] Bluetooth: hci4: command tx timeout
[  184.203871][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  184.229642][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  184.247073][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  184.278011][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  184.391338][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  184.446296][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  184.483555][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  184.502448][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  184.663796][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  184.696423][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  184.718146][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  184.755744][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  185.036182][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  185.056766][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  185.098709][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  185.122566][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  185.353387][ T5781] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  185.378705][ T5781] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  185.399013][ T5781] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  185.453781][ T5781] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  185.578444][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.689163][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.720294][ T5778] Bluetooth: hci0: command tx timeout
[  185.800935][ T5778] Bluetooth: hci1: command tx timeout
[  185.826607][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[  185.884492][ T5770] 8021q: adding VLAN 0 to HW filter on device team0
[  185.916269][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.923649][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.960568][ T5778] Bluetooth: hci4: command tx timeout
[  185.966160][ T5778] Bluetooth: hci2: command tx timeout
[  185.972193][ T5772] Bluetooth: hci3: command tx timeout
[  185.972556][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.028203][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.035757][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.051562][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.058865][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.155223][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.162578][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.283811][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[  186.377043][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.384425][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.467583][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.475124][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.541091][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.773095][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[  186.858450][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.883016][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.890574][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.002975][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.010546][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.385810][ T5781] 8021q: adding VLAN 0 to HW filter on device team0
[  187.497273][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.504857][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.662388][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.669992][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.915868][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.287547][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.571832][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.706749][ T5770] veth0_vlan: entered promiscuous mode
[  188.913677][ T5770] veth1_vlan: entered promiscuous mode
[  188.984058][ T5774] veth0_vlan: entered promiscuous mode
[  189.006828][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.187841][ T5774] veth1_vlan: entered promiscuous mode
[  189.198729][ T5783] veth0_vlan: entered promiscuous mode
[  189.228658][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.273698][ T5770] veth0_macvtap: entered promiscuous mode
[  189.361210][ T5770] veth1_macvtap: entered promiscuous mode
[  189.407365][ T5783] veth1_vlan: entered promiscuous mode
[  189.541899][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.695500][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.808487][ T5774] veth0_macvtap: entered promiscuous mode
[  189.837655][   T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.902466][ T5775] veth0_vlan: entered promiscuous mode
[  189.927497][   T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.951937][   T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.007637][ T5774] veth1_macvtap: entered promiscuous mode
[  190.060966][   T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.086196][ T5783] veth0_macvtap: entered promiscuous mode
[  190.125361][ T5783] veth1_macvtap: entered promiscuous mode
[  190.250458][ T5775] veth1_vlan: entered promiscuous mode
[  190.270298][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.352717][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.382532][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.465085][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.534552][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.594914][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.618088][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.683342][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.702960][   T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.776395][   T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.803865][   T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.882762][   T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.042728][ T5775] veth0_macvtap: entered promiscuous mode
[  191.094361][ T5781] veth0_vlan: entered promiscuous mode
[  191.145432][ T5775] veth1_macvtap: entered promiscuous mode
[  191.224680][ T5781] veth1_vlan: entered promiscuous mode
[  191.389998][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.483631][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.661843][ T1133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.694966][ T1133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.764990][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.790067][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.894519][ T5781] veth0_macvtap: entered promiscuous mode
[  192.008471][ T5781] veth1_macvtap: entered promiscuous mode
[  192.243320][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.353782][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.448956][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.482145][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.520730][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.562398][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.969834][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.977862][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.344768][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.416262][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.825883][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.835212][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.925733][ T5770] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  196.128379][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.178602][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.559556][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.610089][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.942686][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.006581][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.946414][ T5954] loop1: detected capacity change from 0 to 40427
[  197.996330][ T5954] F2FS-fs (loop1): build fault injection rate: 174
[  198.005569][ T5954] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  198.079835][ T5954] F2FS-fs (loop1): invalid crc value
[  198.366733][ T5954] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  198.386246][ T5954] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  198.820876][ T5774] syz-executor: attempt to access beyond end of device
[  198.820876][ T5774] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  198.863750][ T5774] CPU: 1 UID: 0 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  198.863886][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  198.863976][ T5774] Call Trace:
[  198.864020][ T5774]  <TASK>
[  198.864069][ T5774]  __dump_stack+0x26/0x30
[  198.864242][ T5774]  dump_stack_lvl+0x14c/0x1c0
[  198.864393][ T5774]  dump_stack+0x1e/0x25
[  198.864526][ T5774]  f2fs_handle_critical_error+0xa6f/0xc20
[  198.864722][ T5774]  f2fs_stop_checkpoint+0x65/0x80
[  198.864894][ T5774]  f2fs_write_end_io+0x1013/0x2470
[  198.865120][ T5774]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  198.865286][ T5774]  bio_endio+0xf92/0x10e0
[  198.865469][ T5774]  submit_bio_noacct+0x533/0x28d0
[  198.865701][ T5774]  submit_bio+0x57a/0x620
[  198.865890][ T5774]  f2fs_submit_write_bio+0x115/0x2d0
[  198.866055][ T5774]  __submit_merged_bio+0x16f/0x6a0
[  198.866210][ T5774]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  198.866382][ T5774]  __submit_merged_write_cond+0x44a/0x990
[  198.866563][ T5774]  f2fs_write_data_pages+0x4d65/0x5810
[  198.866882][ T5774]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  198.867028][ T5774]  ? kmsan_get_metadata+0xf1/0x160
[  198.867185][ T5774]  ? folio_batch_move_lru+0x6a2/0x6d0
[  198.867344][ T5774]  ? __msan_warning+0x1b/0x30
[  198.867477][ T5774]  ? filter_irq_stacks+0x13f/0x190
[  198.867643][ T5774]  ? stack_depot_save_flags+0x35/0x790
[  198.867800][ T5774]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  198.867953][ T5774]  ? kmsan_get_metadata+0xf1/0x160
[  198.868106][ T5774]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  198.868267][ T5774]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  198.868440][ T5774]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  198.868608][ T5774]  do_writepages+0x3f2/0x860
[  198.868790][ T5774]  ? _raw_spin_unlock+0x30/0x50
[  198.868924][ T5774]  ? wbc_attach_and_unlock_inode+0x131/0x660
[  198.869139][ T5774]  filemap_fdatawrite+0x207/0x260
[  198.869339][ T5774]  f2fs_sync_dirty_inodes+0x2aa/0x9d0
[  198.869537][ T5774]  f2fs_write_checkpoint+0x10a3/0x3720
[  198.869757][ T5774]  ? stack_depot_save_flags+0x610/0x790
[  198.869929][ T5774]  kill_f2fs_super+0x320/0x990
[  198.870096][ T5774]  ? __pfx_kill_f2fs_super+0x10/0x10
[  198.870225][ T5774]  deactivate_locked_super+0xcb/0x3c0
[  198.870416][ T5774]  deactivate_super+0x12f/0x140
[  198.870592][ T5774]  cleanup_mnt+0x7eb/0x870
[  198.870781][ T5774]  ? __pfx___cleanup_mnt+0x10/0x10
[  198.870953][ T5774]  __cleanup_mnt+0x22/0x30
[  198.871119][ T5774]  task_work_run+0x208/0x2b0
[  198.871293][ T5774]  exit_to_user_mode_loop+0x306/0x1b60
[  198.871483][ T5774]  ? user_path_at+0x1fc/0x330
[  198.871623][ T5774]  ? __x64_sys_umount+0x1dc/0x250
[  198.871789][ T5774]  do_syscall_64+0x24d/0xf80
[  198.871944][ T5774]  ? clear_bhb_loop+0x50/0xa0
[  198.872088][ T5774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.872238][ T5774] RIP: 0033:0x7fd9dc39d1d7
[  198.872348][ T5774] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  198.872454][ T5774] RSP: 002b:00007ffce21f2a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  198.872573][ T5774] RAX: 0000000000000000 RBX: 00007fd9dc431c3b RCX: 00007fd9dc39d1d7
[  198.872658][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce21f2ae0
[  198.872746][ T5774] RBP: 00007ffce21f2ae0 R08: 00007ffce21f3ae0 R09: 00000000ffffffff
[  198.872832][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce21f3b70
[  198.872912][ T5774] R13: 00007fd9dc431c3b R14: 0000000000030705 R15: 00007ffce21f3bb0
[  198.873039][ T5774]  </TASK>
[  199.247479][ T5774] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  200.023381][ T5972] loop2: detected capacity change from 0 to 32768
[  200.032866][ T5972] =======================================================
[  200.032866][ T5972] WARNING: The mand mount option has been deprecated and
[  200.032866][ T5972]          and is ignored by this kernel. Remove the mand
[  200.032866][ T5972]          option from the mount to silence this warning.
[  200.032866][ T5972] =======================================================
[  200.144923][ T5972] jfs_strtoUCS: char2uni returned -22.
[  200.150989][ T5972] charset = cp950, char = 0xe9
[  200.536650][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.581305][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.945137][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.002274][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.295079][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.369676][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.943208][ T5989] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  202.963030][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.017577][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.116637][ T5985] loop0: detected capacity change from 0 to 65536
[  203.234032][ T5985] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  203.245768][ T5991] loop2: detected capacity change from 0 to 4096
[  203.345108][ T5991] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  203.596181][ T5985] XFS (loop0): Ending clean mount
[  203.762055][ T5770] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  203.834303][ T5991] ntfs3(loop2): ino=19, mi_enum_attr
[  203.880891][ T5991] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  204.344426][ T5828] kernel write not supported for file bpf-prog (pid: 5828 comm: kworker/1:3)
[  204.426081][ T6010] loop0: detected capacity change from 0 to 128
[  204.718433][ T6010] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  204.774043][   T10] IPVS: starting estimator thread 0...
[  204.796927][ T6010] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  204.879728][ T6018] IPVS: using max 240 ests per chain, 12000 per kthread
[  205.126295][ T6024] syz.4.22 uses obsolete (PF_INET,SOCK_PACKET)
[  206.325690][ T6034] loop1: detected capacity change from 0 to 256
[  206.377924][ T6034] exfat: Deprecated parameter 'utf8'
[  206.407505][ T6034] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x3e6496f2, utbl_chksum : 0xe619d30d)
[  208.256257][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  208.718640][ T6049] loop0: detected capacity change from 0 to 512
[  208.780614][ T6049] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  208.831800][ T6049] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  208.925757][ T6049] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  209.000535][ T6058] loop3: detected capacity change from 0 to 16
[  209.029760][ T6049] EXT4-fs (loop0): 1 truncate cleaned up
[  209.042477][ T6058] erofs (device loop3): mounted with root inode @ nid 36.
[  209.043539][ T6049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.096276][ T6059] loop2: detected capacity change from 0 to 128
[  209.163084][ T6059] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  209.274721][ T6059] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  209.901699][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.877648][ T6082] netlink: 'syz.0.48': attribute type 29 has an invalid length.
[  210.930024][ T6082] netlink: 'syz.0.48': attribute type 29 has an invalid length.
[  210.977123][ T6082] netlink: 500 bytes leftover after parsing attributes in process `syz.0.48'.
[  211.037939][ T6082] unsupported nla_type 58
[  211.716896][ T6091] loop0: detected capacity change from 0 to 512
[  212.460603][ T6106] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ
[  213.093002][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  213.319856][   T10] usb 3-1: Using ep0 maxpacket: 8
[  213.358453][   T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  213.384685][ T6114] loop1: detected capacity change from 0 to 4096
[  213.409566][   T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  213.580877][ T6114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.210283][ T6120] loop0: detected capacity change from 0 to 32768
[  214.219949][ T6120] xfs: Deprecated parameter 'attr2'
[  214.230102][ T6120] XFS: attr2 mount option is deprecated.
[  214.238176][   T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  214.279580][   T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  214.316112][   T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  214.419367][ T6120] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  214.448988][   T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  214.557101][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.620289][ T5774] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109
[  214.750191][ T5774] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109
[  214.896357][ T6120] XFS (loop0): Ending clean mount
[  214.916711][ T6120] XFS (loop0): Quotacheck needed: Please wait.
[  214.965283][   T10] usb 3-1: GET_CAPABILITIES returned 0
[  214.982283][   T10] usbtmc 3-1:16.0: can't read capabilities
[  215.022096][ T6120] XFS (loop0): Quotacheck: Done.
[  215.261522][   T10] usb 3-1: USB disconnect, device number 2
[  215.492079][ T5770] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  215.852097][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.006886][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.440058][ T5824] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  216.496975][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.669492][ T5824] usb 1-1: Using ep0 maxpacket: 8
[  216.722537][ T5824] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  216.776630][ T5824] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  216.811748][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.833699][ T5824] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  216.896345][ T5824] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  216.958939][ T5824] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  217.044901][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.066672][ T5824] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  217.107463][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.461973][ T5824] usb 1-1: usb_control_msg returned -32
[  217.509741][ T5824] usbtmc 1-1:16.0: can't read capabilities
[  217.977310][   T12] bridge_slave_1: left allmulticast mode
[  217.989700][   T12] bridge_slave_1: left promiscuous mode
[  217.996306][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.054671][   T12] bridge_slave_0: left allmulticast mode
[  218.061368][   T12] bridge_slave_0: left promiscuous mode
[  218.067913][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.131744][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.208027][ T5824] usb 1-1: USB disconnect, device number 2
[  219.222060][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.274849][   T12] bond0 (unregistering): Released all slaves
[  219.555499][ T6159] process 'syz.2.79' launched './file0' with NULL argv: empty string added
[  219.597886][ T6159] Invalid argument reading file caps for ./file0
[  220.428064][ T6158] loop0: detected capacity change from 0 to 40427
[  220.480500][ T6158] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  220.487667][ T6158] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  220.512268][ T6158] F2FS-fs (loop0): build fault injection rate: 2
[  220.540560][ T6158] F2FS-fs (loop0): invalid crc value
[  220.546098][ T6158] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root and reserve_node
[  220.908425][ T6158] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  220.998009][ T6158] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  221.005728][ T6158] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  221.377229][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  221.381276][ T5824] kernel write not supported for file bpf-prog (pid: 5824 comm: kworker/0:4)
[  221.433520][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  221.454348][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  221.467942][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  221.483098][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  221.635101][   T12] hsr_slave_0: left promiscuous mode
[  221.769754][   T12] hsr_slave_1: left promiscuous mode
[  221.830361][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.890997][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.943485][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.993382][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.138084][   T12] veth1_macvtap: left promiscuous mode
[  222.158050][   T12] veth0_macvtap: left promiscuous mode
[  222.188718][   T12] veth1_vlan: left promiscuous mode
[  222.252323][   T12] veth0_vlan: left promiscuous mode
[  223.354776][ T6195] loop4: detected capacity change from 0 to 32768
[  223.559583][ T5778] Bluetooth: hci1: command tx timeout
[  223.596110][ T6202] loop2: detected capacity change from 0 to 512
[  224.472227][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  224.477787][ T6205] loop0: detected capacity change from 0 to 32768
[  224.478817][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  224.581175][ T6205] 
[  224.581175][ T6205]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.581175][ T6205] 
[  224.617417][ T6202] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.91: Parent and EA inode have the same ino 15
[  224.631033][ T6205] 
[  224.631033][ T6205]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.631033][ T6205] 
[  224.641845][ T6205] 
[  224.641845][ T6205]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.641845][ T6205] 
[  224.652934][ T6205] 
[  224.652934][ T6205]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.652934][ T6205] 
[  224.663814][ T6205] 
[  224.663814][ T6205]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.663814][ T6205] 
[  224.678887][ T6205] 
[  224.678887][ T6205]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.678887][ T6205] 
[  224.689854][ T6205] 
[  224.689854][ T6205]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.689854][ T6205] 
[  224.712167][ T6202] loop2: lost filesystem error report for type 5 error -117
[  224.713768][ T6202] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.91: Parent and EA inode have the same ino 15
[  224.721435][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  224.721527][    C1] EXT4-fs (loop2): initial error at time 1770978642: ext4_xattr_inode_iget:437
[  224.721650][    C1] EXT4-fs (loop2): last error at time 1770978642: ext4_xattr_inode_iget:437
[  224.758627][ T6202] loop2: lost filesystem error report for type 5 error -117
[  224.758787][  T109] 
[  224.758787][  T109]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.758787][  T109] 
[  224.797073][ T6202] EXT4-fs (loop2): 1 orphan inode deleted
[  224.829069][ T6202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.839981][ T6211] 
[  224.839981][ T6211]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.839981][ T6211] 
[  224.880856][ T6211] 
[  224.880856][ T6211]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.880856][ T6211] 
[  224.927623][ T6211] 
[  224.927623][ T6211]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.927623][ T6211] 
[  224.959722][ T6211] 
[  224.959722][ T6211]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.959722][ T6211] 
[  225.006454][  T110] 
[  225.006454][  T110]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  225.006454][  T110] 
[  225.327544][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.351819][ T5770] 
[  225.351819][ T5770]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  225.351819][ T5770] 
[  225.392088][ T5770] 
[  225.392088][ T5770]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  225.392088][ T5770] 
[  225.617159][   T12] team0 (unregistering): Port device team_slave_1 removed
[  225.650215][ T5778] Bluetooth: hci1: command tx timeout
[  225.785999][   T12] team0 (unregistering): Port device team_slave_0 removed
[  225.976277][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.95'.
[  226.542137][ T6216] bond0: ARP target 128.0.0.0 is already present
[  226.568075][ T6216] bond0: option arp_ip_target: invalid value (128)
[  227.725864][ T5772] Bluetooth: hci1: command tx timeout
[  228.543159][ T6181] chnl_net:caif_netlink_parms(): no params data found
[  229.727222][ T6266] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  229.801704][ T5772] Bluetooth: hci1: command 0x0419 tx timeout
[  230.336091][ T6273] input: syz0 as /devices/virtual/input/input5
[  230.700725][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.739484][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.747371][ T6181] bridge_slave_0: entered allmulticast mode
[  230.835035][ T6181] bridge_slave_0: entered promiscuous mode
[  230.925959][ T6281] loop0: detected capacity change from 0 to 256
[  230.929484][ T6181] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.952933][ T6277] loop2: detected capacity change from 0 to 4096
[  230.979049][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.017291][ T6281] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d)
[  231.022109][ T6181] bridge_slave_1: entered allmulticast mode
[  231.127894][ T6181] bridge_slave_1: entered promiscuous mode
[  231.203594][ T6283] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  231.673849][ T6181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.685719][ T5824] IPVS: starting estimator thread 0...
[  231.701354][ T6288] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  231.769970][ T6291] IPVS: using max 240 ests per chain, 12000 per kthread
[  231.860891][ T6181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.879787][ T5778] Bluetooth: hci1: command 0x0419 tx timeout
[  232.481865][ T6181] team0: Port device team_slave_0 added
[  232.590972][ T6181] team0: Port device team_slave_1 added
[  232.993020][ T6181] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.013071][ T6295] loop2: detected capacity change from 0 to 40427
[  233.016645][ T6181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.073843][ T6295] F2FS-fs (loop2): invalid crc value
[  233.090691][ T6181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.126200][ T6181] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.172390][ T6181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.377524][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'.
[  233.418233][ T6181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.469978][ T6295] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  233.497534][ T6295] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  234.338834][ T6304] loop4: detected capacity change from 0 to 32768
[  234.393623][ T6304] 
[  234.393623][ T6304]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  234.393623][ T6304] 
[  234.432274][ T5783] syz-executor: attempt to access beyond end of device
[  234.432274][ T5783] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  234.517135][ T5783] CPU: 1 UID: 0 PID: 5783 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  234.517262][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  234.517336][ T5783] Call Trace:
[  234.517382][ T5783]  <TASK>
[  234.517430][ T5783]  __dump_stack+0x26/0x30
[  234.517580][ T5783]  dump_stack_lvl+0x14c/0x1c0
[  234.517733][ T5783]  dump_stack+0x1e/0x25
[  234.517871][ T5783]  f2fs_handle_critical_error+0xa6f/0xc20
[  234.518085][ T5783]  f2fs_stop_checkpoint+0x65/0x80
[  234.518253][ T5783]  f2fs_write_end_io+0x1013/0x2470
[  234.518483][ T5783]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  234.518653][ T5783]  bio_endio+0xf92/0x10e0
[  234.518831][ T5783]  submit_bio_noacct+0x533/0x28d0
[  234.519066][ T5783]  submit_bio+0x57a/0x620
[  234.519254][ T5783]  f2fs_submit_write_bio+0x115/0x2d0
[  234.519404][ T5783]  __submit_merged_bio+0x16f/0x6a0
[  234.519556][ T5783]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  234.519728][ T5783]  __submit_merged_write_cond+0x44a/0x990
[  234.519914][ T5783]  f2fs_write_data_pages+0x4d65/0x5810
[  234.520226][ T5783]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  234.520370][ T5783]  ? kmsan_get_metadata+0xf1/0x160
[  234.520527][ T5783]  ? folio_batch_move_lru+0x6a2/0x6d0
[  234.520685][ T5783]  ? __msan_warning+0x1b/0x30
[  234.520817][ T5783]  ? filter_irq_stacks+0x13f/0x190
[  234.520979][ T5783]  ? stack_depot_save_flags+0x35/0x790
[  234.521123][ T5783]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  234.521272][ T5783]  ? kmsan_get_metadata+0xf1/0x160
[  234.521425][ T5783]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  234.521580][ T5783]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  234.521750][ T5783]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  234.521919][ T5783]  do_writepages+0x3f2/0x860
[  234.522090][ T5783]  ? _raw_spin_unlock+0x30/0x50
[  234.522223][ T5783]  ? wbc_attach_and_unlock_inode+0x131/0x660
[  234.522432][ T5783]  filemap_fdatawrite+0x207/0x260
[  234.522639][ T5783]  f2fs_sync_dirty_inodes+0x2aa/0x9d0
[  234.522852][ T5783]  f2fs_write_checkpoint+0x10a3/0x3720
[  234.523105][ T5783]  ? stack_depot_save_flags+0x35/0x790
[  234.523282][ T5783]  kill_f2fs_super+0x320/0x990
[  234.523448][ T5783]  ? __pfx_kill_f2fs_super+0x10/0x10
[  234.523577][ T5783]  deactivate_locked_super+0xcb/0x3c0
[  234.523778][ T5783]  deactivate_super+0x12f/0x140
[  234.523964][ T5783]  cleanup_mnt+0x7eb/0x870
[  234.524143][ T5783]  ? __pfx___cleanup_mnt+0x10/0x10
[  234.524311][ T5783]  __cleanup_mnt+0x22/0x30
[  234.524476][ T5783]  task_work_run+0x208/0x2b0
[  234.524650][ T5783]  exit_to_user_mode_loop+0x306/0x1b60
[  234.524821][ T5783]  ? user_path_at+0x1fc/0x330
[  234.524963][ T5783]  ? __x64_sys_umount+0x1dc/0x250
[  234.525125][ T5783]  do_syscall_64+0x24d/0xf80
[  234.525278][ T5783]  ? clear_bhb_loop+0x50/0xa0
[  234.525421][ T5783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.525559][ T5783] RIP: 0033:0x7f80d359d1d7
[  234.525660][ T5783] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  234.525767][ T5783] RSP: 002b:00007fffb5ead9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  234.525895][ T5783] RAX: 0000000000000000 RBX: 00007f80d3631c3b RCX: 00007f80d359d1d7
[  234.525982][ T5783] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb5eada90
[  234.526063][ T5783] RBP: 00007fffb5eada90 R08: 00007fffb5eaea90 R09: 00000000ffffffff
[  234.526152][ T5783] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb5eaeb20
[  234.526234][ T5783] R13: 00007f80d3631c3b R14: 0000000000039019 R15: 00007fffb5eaeb60
[  234.526358][ T5783]  </TASK>
[  234.881283][ T6181] hsr_slave_0: entered promiscuous mode
[  234.901384][ T6181] hsr_slave_1: entered promiscuous mode
[  234.931092][ T6181] debugfs: 'hsr0' already exists in 'hsr'
[  234.937012][ T6181] Cannot create hsr debugfs directory
[  235.000503][ T5783] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  235.035479][ T5781] 
[  235.035479][ T5781]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  235.035479][ T5781] 
[  235.060356][ T5781] 
[  235.060356][ T5781]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  235.060356][ T5781] 
[  235.576999][ T6313] netlink: 56 bytes leftover after parsing attributes in process `syz.4.125'.
[  235.972934][ T6312] loop0: detected capacity change from 0 to 32768
[  237.789651][ T5824] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  238.009797][ T5824] usb 1-1: Using ep0 maxpacket: 32
[  238.028448][ T6335] ALSA: mixer_oss: invalid OSS volume 'ress'
[  238.052866][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.087031][ T6335] ALSA: mixer_oss: invalid OSS volume ''
[  238.118079][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.154676][ T6181] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  238.179557][ T5824] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  238.251004][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.303736][ T6181] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  238.326420][ T5824] usb 1-1: config 0 descriptor??
[  238.462773][ T6181] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  238.640979][ T6181] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  238.961982][ T5824] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  239.160508][ T5824] usb 1-1: USB disconnect, device number 3
[  239.279609][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  239.497254][   T10] usb 4-1: Using ep0 maxpacket: 32
[  239.549578][   T10] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  239.587253][   T10] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  239.668434][   T10] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  239.703706][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.773735][   T10] usb 4-1: Product: syz
[  239.778125][   T10] usb 4-1: Manufacturer: syz
[  239.837595][   T10] usb 4-1: SerialNumber: syz
[  240.175469][ T6346] fido_id[6346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  240.290170][   T10] usb 4-1: USB disconnect, device number 2
[  240.728415][ T6181] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.909541][ T5824] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  241.015537][ T6181] 8021q: adding VLAN 0 to HW filter on device team0
[  241.144103][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  241.174010][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.181776][ T6169] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.203787][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.235144][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  241.299481][ T5824] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  241.324515][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.371349][ T5824] usb 3-1: config 0 descriptor??
[  241.429497][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.437034][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.735730][ T6367] loop0: detected capacity change from 0 to 256
[  241.796628][ T6367] exfat: Deprecated parameter 'utf8'
[  241.828160][ T6367] exfat: Deprecated parameter 'utf8'
[  241.913071][ T6367] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  241.965796][ T5824] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  242.032349][ T6369] loop3: detected capacity change from 0 to 256
[  242.103847][ T6369] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  242.203096][  T792] usb 3-1: USB disconnect, device number 3
[  242.245036][   T29] audit: type=1800 audit(1770978659.972:2): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.143" name="file1" dev="loop3" ino=1048613 res=0 errno=0
[  242.380135][ T6369] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  242.459841][ T6369] FAT-fs (loop3): Filesystem has been set read-only
[  243.460492][ T6375] fido_id[6375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  243.545831][ T6387] Zero length message leads to an empty skb
[  243.849499][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  244.054093][   T10] usb 3-1: Using ep0 maxpacket: 32
[  244.075607][   T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  244.122115][   T10] usb 3-1: config 0 has no interface number 0
[  244.132239][  T792] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  244.168942][   T10] usb 3-1: config 0 interface 184 has no altsetting 0
[  244.234750][   T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  244.279772][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.344341][   T10] usb 3-1: Product: syz
[  244.348725][   T10] usb 3-1: Manufacturer: syz
[  244.354976][  T792] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.392087][   T10] usb 3-1: SerialNumber: syz
[  244.417453][  T792] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  244.467393][   T10] usb 3-1: config 0 descriptor??
[  244.490289][  T792] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  244.528778][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.544892][  T792] usb 4-1: Product: syz
[  244.549629][  T792] usb 4-1: Manufacturer: syz
[  244.555930][  T792] usb 4-1: SerialNumber: syz
[  244.667498][ T6181] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.248275][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  245.332213][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  245.599798][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  245.666651][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  245.712083][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'.
[  245.720079][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  245.752668][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  245.771248][  T792] cdc_ncm 4-1:1.0: bind() failure
[  245.794884][   T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  245.840032][   T10] usb 3-1: USB disconnect, device number 4
[  245.896908][  T792] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71
[  245.947509][  T792] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71
[  245.992230][  T792] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[  246.050901][  T792] usb 4-1: USB disconnect, device number 3
[  246.620554][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  246.880909][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[  246.974990][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024
[  247.083879][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  247.238370][ T6422] loop0: detected capacity change from 0 to 32768
[  247.251571][ T6422] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.158 (6422)
[  247.274354][ T6422] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  247.284828][ T6422] BTRFS info (device loop0): using sha256 checksum algorithm
[  247.298394][ T6422] workqueue: max_active 33554440 requested for btrfs-worker is out of range, clamping between 1 and 2048
[  247.308817][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  247.321978][ T6422] workqueue: max_active 33554440 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[  247.359948][ T6422] workqueue: max_active 33554440 requested for btrfs-endio is out of range, clamping between 1 and 2048
[  247.364133][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.389986][ T6422] workqueue: max_active 33554440 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[  247.421449][ T6422] workqueue: max_active 33554440 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[  247.439751][ T6422] workqueue: max_active 33554440 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[  247.538818][   T10] usb 5-1: Product: syz
[  247.547478][   T10] usb 5-1: Manufacturer: syz
[  247.589040][   T10] usb 5-1: SerialNumber: syz
[  247.618929][ T6422] BTRFS info (device loop0): rebuilding free space tree
[  247.667688][ T6422] BTRFS info (device loop0): disabling free space tree
[  247.675028][ T6422] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  247.684983][ T6422] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  247.717646][   T10] usb 5-1: config 0 descriptor??
[  247.748474][ T6445] loop2: detected capacity change from 0 to 512
[  247.764970][ T6427] loop3: detected capacity change from 0 to 2048
[  247.775648][ T6422] BTRFS info (device loop0): disabling tree log
[  247.775812][ T6419] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  247.782195][ T6422] BTRFS info (device loop0): turning on async discard
[  247.796310][ T6422] BTRFS info (device loop0): force clearing of disk cache
[  247.933378][ T6427] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  248.061942][ T6445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.144223][ T6419] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  248.215869][ T6445] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.348078][ T6445] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.161: corrupted xattr block 33: invalid ea_ino
[  248.408395][ T6450] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.161: corrupted xattr block 33: invalid ea_ino
[  248.501787][ T6445] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  248.597452][ T5770] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  248.726495][   T29] audit: type=1800 audit(1770978666.462:3): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.161" name="file1" dev="loop2" ino=15 res=0 errno=0
[  248.936119][ T6181] veth0_vlan: entered promiscuous mode
[  249.138363][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.170760][ T6181] veth1_vlan: entered promiscuous mode
[  249.211428][   T10] usb 5-1: USB disconnect, device number 2
[  249.641618][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  249.881766][ T6465] loop2: detected capacity change from 0 to 1024
[  249.934962][ T6181] veth0_macvtap: entered promiscuous mode
[  250.177879][ T6181] veth1_macvtap: entered promiscuous mode
[  250.398438][ T6465] hfsplus: request for non-existent node 16777216 in B*Tree
[  250.437692][ T6465] hfsplus: request for non-existent node 16777216 in B*Tree
[  250.455665][ T6469] overlayfs: upper fs does not support file handles, falling back to index=off.
[  250.500478][ T6465] hfsplus: request for non-existent node 16777216 in B*Tree
[  250.517261][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.534632][ T6472] loop4: detected capacity change from 0 to 512
[  250.553117][ T6473] Bluetooth: MGMT ver 1.23
[  250.556386][ T6465] hfsplus: request for non-existent node 16777216 in B*Tree
[  250.608718][ T6472] EXT4-fs: Ignoring removed oldalloc option
[  250.654640][ T6472] EXT4-fs (loop4): Test dummy encryption mode enabled
[  250.729861][ T6472] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  250.748790][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_1
[  250.845186][ T6472] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.168: inode has both inline data and extents flags
[  250.901902][ T6472] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  250.909416][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  250.925298][    C0] EXT4-fs (loop4): initial error at time 1770978668: ext4_orphan_get:1391: inode 15
[  250.935092][    C0] EXT4-fs (loop4): last error at time 1770978668: ext4_orphan_get:1391: inode 15
[  251.023185][ T6472] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.168: couldn't read orphan inode 15 (err -117)
[  251.069521][   T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.114390][   T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.141292][ T6472] loop4: lost filesystem error report for type 5 error -117
[  251.153565][ T6169] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.171094][ T6472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.249472][ T6169] hfsplus: request for non-existent node 16777216 in B*Tree
[  251.249466][   T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.334339][   T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.417317][ T6478] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  252.321898][ T6472] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  252.423390][ T6472] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  252.519839][ T6493] loop0: detected capacity change from 0 to 512
[  252.770022][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.804376][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.823485][ T5781] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.193499][ T6507] loop3: detected capacity change from 0 to 4096
[  254.249646][ T6507] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  255.368705][ T6526] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  256.745131][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.191'.
[  257.104077][ T6551] loop0: detected capacity change from 0 to 2048
[  257.181115][ T6551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.400785][ T6551] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  257.479809][ T6551] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[  257.570328][ T6551] EXT4-fs (loop0): This should not happen!! Data will be lost
[  257.570328][ T6551] 
[  257.722516][ T6551] EXT4-fs (loop0): Total free blocks count 0
[  257.731648][ T6551] EXT4-fs (loop0): Free/Dirty block details
[  257.768675][ T6551] EXT4-fs (loop0): free_blocks=2415919504
[  257.809750][ T6551] EXT4-fs (loop0): dirty_blocks=48
[  257.829597][ T6551] EXT4-fs (loop0): Block reservation details
[  257.879924][ T6551] EXT4-fs (loop0): i_reserved_data_blocks=3
[  257.938751][ T6560] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 12 with error 28
[  258.222075][ T6569] TCP: TCP_TX_DELAY enabled
[  258.587740][ T6573] macvtap1: entered promiscuous mode
[  258.609770][ T6573] macvtap1: entered allmulticast mode
[  258.617635][ T6573] dummy0: entered promiscuous mode
[  258.673284][ T6573] dummy0: entered allmulticast mode
[  258.728993][ T6573] team0: Device macvtap1 failed to register rx_handler
[  258.758918][ T6573] dummy0: left allmulticast mode
[  258.790392][ T6573] dummy0: left promiscuous mode
[  259.533984][ T6587] netlink: 'syz.3.203': attribute type 4 has an invalid length.
[  259.614514][ T6592] input: syz1 as /devices/virtual/input/input6
[  259.804206][ T5828] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  260.029599][ T5828] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  260.076467][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.089083][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.131923][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.136914][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.219642][ T5828] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  260.277138][ T5828] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  260.310163][ T5828] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  260.318476][ T5828] usb 3-1: Manufacturer: syz
[  260.453779][ T5828] usb 3-1: config 0 descriptor??
[  260.517603][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.550243][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.984998][ T5828] appleir 0003:05AC:8243.0003: unknown main item tag 0x0
[  261.112557][ T5828] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  261.321252][ T5828] usb 3-1: USB disconnect, device number 5
[  261.932030][ T6620] loop3: detected capacity change from 0 to 256
[  262.411661][ T6615] fido_id[6615]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  262.658194][ T6630] loop0: detected capacity change from 0 to 512
[  262.729631][ T6630] FAT-fs (loop0): bogus number of FAT sectors
[  262.747848][ T6630] FAT-fs (loop0): Can't find a valid FAT filesystem
[  262.930941][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'.
[  263.469700][ T5828] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  263.664812][ T5828] usb 6-1: Using ep0 maxpacket: 16
[  263.770361][ T5828] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.817050][ T5828] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.868748][ T5828] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  263.944001][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.690644][ T5828] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  264.975330][ T5828] usb 6-1: USB disconnect, device number 2
[  265.281257][ T6662] loop5: detected capacity change from 0 to 7
[  265.348096][ T6662] Dev loop5: unable to read RDB block 7
[  265.366763][ T6662]  loop5: AHDI p1 p2
[  265.391024][ T6662] loop5: partition table partially beyond EOD, truncated
[  265.446835][ T6662] loop5: p1 start 1818582900 is beyond EOD, truncated
[  265.447578][ T6661] loop3: detected capacity change from 0 to 2048
[  265.581447][ T6661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  265.619874][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  265.723062][   T29] audit: type=1800 audit(1770978683.462:4): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.231" name="file1" dev="loop3" ino=1415 res=0 errno=0
[  265.794824][   T10] usb 5-1: Using ep0 maxpacket: 32
[  265.827451][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.887081][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.949797][   T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  265.978535][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.052749][   T10] usb 5-1: config 0 descriptor??
[  266.781500][   T10] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  266.947379][   T10] usb 5-1: USB disconnect, device number 3
[  267.117766][ T6687] netlink: 'syz.3.237': attribute type 29 has an invalid length.
[  267.199569][ T6690] netlink: 'syz.3.237': attribute type 29 has an invalid length.
[  267.237215][ T6686] loop2: detected capacity change from 0 to 512
[  267.252111][ T6687] netlink: 500 bytes leftover after parsing attributes in process `syz.3.237'.
[  267.353228][ T6686] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  267.510388][ T6686] EXT4-fs (loop2): 1 truncate cleaned up
[  267.518126][ T6686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.192382][ T6691] fido_id[6691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  268.200008][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.786524][ T6703] loop2: detected capacity change from 0 to 1024
[  268.902513][ T6703] EXT4-fs: inline encryption not supported
[  269.027275][ T6703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.387804][ T6720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.248'.
[  269.412710][ T6714] loop5: detected capacity change from 0 to 4096
[  269.511368][ T6714] EXT4-fs (loop5): Test dummy encryption mode enabled
[  269.571236][ T6714] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled
[  269.644338][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.679719][ T6714] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002]
[  269.709625][ T6714] System zones: 0-5
[  269.737525][ T6714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.986073][ T6730] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  270.273476][ T6181] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.566729][ T6751] loop3: detected capacity change from 0 to 2048
[  271.638310][ T6751] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  271.714152][ T6751] UDF-fs: Scanning with blocksize 512 failed
[  271.929132][ T6751] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  272.239792][ T6751] [syz.3.258/6751] FS: loop3 File: /bus/file1 would truncate fibmap result
[  272.502338][ T6761] loop5: detected capacity change from 0 to 128
[  272.956661][ T6769] loop2: detected capacity change from 0 to 4095
[  273.671074][ T6766] loop0: detected capacity change from 0 to 40427
[  273.681656][ T6766] F2FS-fs: heap/no_heap options were deprecated
[  273.689890][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  273.770554][ T6766] F2FS-fs (loop0): Image doesn't support compression
[  273.806539][ T6766] F2FS-fs (loop0): invalid crc value
[  274.134333][   T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  274.151818][ T6766] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  274.173841][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.185256][ T6766] F2FS-fs (loop0): Start checkpoint disabled!
[  274.208518][ T6766] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  274.218052][ T6766] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  274.267657][   T10] usb 3-1: config 0 descriptor??
[  274.411609][   T10] cp210x 3-1:0.0: cp210x converter detected
[  274.468737][   T53] kworker/u8:3: attempt to access beyond end of device
[  274.468737][   T53] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  274.554709][   T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  274.554843][   T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  274.554964][   T53] Workqueue: writeback wb_workfn (flush-7:0)
[  274.555159][   T53] Call Trace:
[  274.555205][   T53]  <TASK>
[  274.555250][   T53]  __dump_stack+0x26/0x30
[  274.555397][   T53]  dump_stack_lvl+0x14c/0x1c0
[  274.555542][   T53]  dump_stack+0x1e/0x25
[  274.555672][   T53]  f2fs_handle_critical_error+0xa6f/0xc20
[  274.555876][   T53]  f2fs_stop_checkpoint+0x65/0x80
[  274.556036][   T53]  f2fs_write_end_io+0x1013/0x2470
[  274.556264][   T53]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  274.556436][   T53]  bio_endio+0xf92/0x10e0
[  274.556619][   T53]  submit_bio_noacct+0x533/0x28d0
[  274.556851][   T53]  submit_bio+0x57a/0x620
[  274.557038][   T53]  f2fs_submit_write_bio+0x115/0x2d0
[  274.557194][   T53]  __submit_merged_bio+0x16f/0x6a0
[  274.557341][   T53]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  274.557514][   T53]  __submit_merged_write_cond+0x44a/0x990
[  274.557686][   T53]  f2fs_write_data_pages+0x4d65/0x5810
[  274.557964][   T53]  ? __update_load_avg_cfs_rq+0xe6/0x1000
[  274.558167][   T53]  ? update_cfs_rq_load_avg+0x747/0x8c0
[  274.558345][   T53]  ? kmsan_get_metadata+0xf1/0x160
[  274.558498][   T53]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  274.558672][   T53]  ? update_load_avg+0x1539/0x2550
[  274.558830][   T53]  ? kmsan_get_metadata+0xf1/0x160
[  274.558987][   T53]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  274.559147][   T53]  ? kmsan_get_metadata+0xf1/0x160
[  274.559297][   T53]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  274.559439][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  274.559596][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  274.559756][   T53]  do_writepages+0x3f2/0x860
[  274.559918][   T53]  ? wb_writeback+0x4d0/0xc00
[  274.560031][   T53]  ? wb_writeback+0x4d0/0xc00
[  274.560155][   T53]  ? __msan_warning+0x1b/0x30
[  274.560282][   T53]  ? kmsan_get_metadata+0xf1/0x160
[  274.560453][   T53]  __writeback_single_inode+0x101/0x1030
[  274.560606][   T53]  ? kmsan_get_metadata+0xf1/0x160
[  274.560755][   T53]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  274.560924][   T53]  writeback_sb_inodes+0xb2d/0x1f10
[  274.561150][   T53]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  274.561328][   T53]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  274.561484][   T53]  wb_writeback+0x4d0/0xc00
[  274.561631][   T53]  ? queue_io+0x4b1/0x790
[  274.561771][   T53]  wb_workfn+0x397/0x1900
[  274.561953][   T53]  ? kmsan_get_metadata+0xf1/0x160
[  274.562133][   T53]  ? __pfx_wb_workfn+0x10/0x10
[  274.562302][   T53]  process_scheduled_works+0xae7/0x1d60
[  274.562497][   T53]  worker_thread+0xede/0x1580
[  274.562670][   T53]  kthread+0x53f/0x600
[  274.562821][   T53]  ? __pfx_worker_thread+0x10/0x10
[  274.562965][   T53]  ? __pfx_kthread+0x10/0x10
[  274.563105][   T53]  ret_from_fork+0x20f/0x910
[  274.563231][   T53]  ? __switch_to+0x51c/0x750
[  274.563380][   T53]  ? __pfx_kthread+0x10/0x10
[  274.563522][   T53]  ret_from_fork_asm+0x1a/0x30
[  274.563712][   T53]  </TASK>
[  275.028965][   T53] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  275.234804][   T10] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  275.263783][   T10] usb 3-1: cp210x converter now attached to ttyUSB0
[  275.509504][   T10] usb 3-1: USB disconnect, device number 6
[  275.535077][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  275.634200][   T10] cp210x 3-1:0.0: device disconnected
[  275.711129][ T5828] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  275.814908][ T6787] loop5: detected capacity change from 0 to 512
[  275.857637][ T6787] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  275.936881][ T6787] EXT4-fs (loop5): 1 truncate cleaned up
[  275.948198][ T5828] usb 4-1: Using ep0 maxpacket: 8
[  275.970459][ T6787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.006863][   T29] audit: type=1800 audit(1770978693.752:5): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.271" name="file1" dev="loop5" ino=15 res=0 errno=0
[  276.035040][ T5828] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=9a.32
[  276.046336][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.064950][ T5828] usb 4-1: config 0 descriptor??
[  276.100688][ T5828] pcwd_usb: The device isn't a Human Interface Device
[  276.295299][ T6181] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.368488][ T5828] usb 4-1: USB disconnect, device number 4
[  276.946170][ T6796] loop2: detected capacity change from 0 to 128
[  278.208095][ T6793] loop4: detected capacity change from 0 to 65536
[  278.311661][ T6793] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  278.666625][ T6793] XFS (loop4): Ending clean mount
[  278.684298][ T6793] XFS (loop4): Quotacheck needed: Please wait.
[  278.729000][ T6793] XFS (loop4): Quotacheck: Done.
[  279.074532][ T6822] capability: warning: `syz.3.279' uses deprecated v2 capabilities in a way that may be insecure
[  279.241859][ T5781] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  280.089689][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  280.318673][   T10] usb 6-1: Using ep0 maxpacket: 16
[  280.389066][   T10] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  280.444654][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.512495][   T10] usb 6-1: Product: syz
[  280.568536][   T10] usb 6-1: Manufacturer: syz
[  280.597370][   T10] usb 6-1: SerialNumber: syz
[  280.647123][ T6840] loop0: detected capacity change from 0 to 512
[  280.728016][   T10] usb 6-1: config 0 descriptor??
[  280.754425][   T10] visor 6-1:0.0: Sony Clie 3.5 converter detected
[  280.979911][   T10] usb 6-1: clie_3_5_startup: get config number bad return length: 0
[  280.988013][ T6834] loop3: detected capacity change from 0 to 32768
[  281.042753][ T6834] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  281.051331][ T6834] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  281.090651][ T6834] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  281.107656][ T5828] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  281.117796][ T5828] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  281.181074][   T10] visor 6-1:0.0: probe with driver visor failed with error -5
[  281.336334][   T10] usb 6-1: USB disconnect, device number 3
[  281.648669][ T5828] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 530ms
[  281.740208][ T5828] gfs2: fsid=syz:syz.0: jid=0: Done
[  281.745702][ T6834] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  282.704613][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.5.288'.
[  283.162839][ T6861] loop2: detected capacity change from 0 to 1024
[  283.177324][ T6863] loop4: detected capacity change from 0 to 512
[  283.228643][ T6863] EXT4-fs: Ignoring removed i_version option
[  283.294114][ T6863] EXT4-fs: Ignoring removed oldalloc option
[  283.430021][ T6863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.893170][ T6874] loop3: detected capacity change from 0 to 512
[  284.405580][ T5781] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.975516][ T6883] loop4: detected capacity change from 0 to 64
[  285.151228][ T6886] loop3: detected capacity change from 0 to 512
[  285.225867][ T6886] EXT4-fs: Ignoring removed i_version option
[  285.295481][ T6886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  285.480749][ T6886] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  285.519363][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  285.525980][    C0] EXT4-fs (loop3): initial error at time 1770978703: ext4_mb_generate_buddy:1315
[  285.535456][    C0] EXT4-fs (loop3): last error at time 1770978703: ext4_mb_generate_buddy:1315
[  285.558443][ T6886] EXT4-fs (loop3): 1 truncate cleaned up
[  285.631665][ T6886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.914842][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  285.922710][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  286.248531][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.804564][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'.
[  287.298957][ T6914] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  287.306231][ T6914] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  287.356869][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'.
[  287.420926][ T6916] hsr_slave_0: left promiscuous mode
[  287.467371][ T6916] hsr_slave_1: left promiscuous mode
[  288.203826][ T6921] loop5: detected capacity change from 0 to 4096
[  288.293105][ T6921] EXT4-fs (loop5): Test dummy encryption mode enabled
[  288.368119][ T6921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.539524][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  288.751878][   T10] usb 5-1: Using ep0 maxpacket: 8
[  288.924836][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  288.992016][   T10] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  289.060793][   T10] usb 5-1: Product: syz
[  289.085609][   T10] usb 5-1: Manufacturer: syz
[  289.115364][   T10] usb 5-1: SerialNumber: syz
[  289.163163][   T10] usb 5-1: config 0 descriptor??
[  289.255369][   T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  289.268886][ T6934] loop3: detected capacity change from 0 to 32768
[  289.278703][ T6934] xfs: Deprecated parameter 'noikeep'
[  289.287401][ T6934] XFS: noikeep mount option is deprecated.
[  289.374849][ T6181] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.413063][ T6934] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  289.424648][ T6934] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  289.952935][ T6934] XFS (loop3): Ending clean mount
[  289.992950][ T6934] XFS (loop3): Quotacheck needed: Please wait.
[  290.084762][   T10] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8
[  290.094638][ T6934] XFS (loop3): Quotacheck: Done.
[  290.303638][   T32] usb 5-1: USB disconnect, device number 4
[  290.328636][ T5775] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  290.640007][   T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  290.844939][ T6957] loop5: detected capacity change from 0 to 1764
[  290.895729][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  290.953260][   T10] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  290.998045][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.063915][   T10] usb 1-1: config 0 descriptor??
[  291.104637][ T6953] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  291.617163][   T29] audit: type=1326 audit(1770978709.362:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.4.327" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c61b9bf79 code=0x0
[  291.678879][ T6966] capability: warning: `syz.4.327' uses 32-bit capabilities (legacy support in use)
[  292.003743][ T6960] loop3: detected capacity change from 0 to 32768
[  292.082779][   T10] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  292.286652][   T10] usb 1-1: USB disconnect, device number 4
[  293.659955][ T6984] loop4: detected capacity change from 0 to 2048
[  293.815344][   T32] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  293.827861][ T6984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.909985][ T6984] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.979795][   T32] usb 3-1: Using ep0 maxpacket: 32
[  293.998600][   T32] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  294.052499][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  294.100405][ T6993] loop5: detected capacity change from 0 to 1024
[  294.109651][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  294.171730][   T32] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  294.214459][ T6993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  294.270115][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.300570][ T6993] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.381828][   T32] usb 3-1: config 0 descriptor??
[  294.441013][ T6988] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  294.487909][   T32] hub 3-1:0.0: USB hub found
[  294.692452][ T5781] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.768089][   T32] hub 3-1:0.0: 2 ports detected
[  294.985708][ T6181] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  295.279649][   T32] hub 3-1:0.0: set hub depth failed
[  295.382288][ T6998] fido_id[6998]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  295.401160][   T32] usb 3-1: USB disconnect, device number 7
[  295.748441][ T7007] loop0: detected capacity change from 0 to 128
[  295.895095][   T29] audit: type=1800 audit(1770978713.622:7): pid=7007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.343" name="file2" dev="loop0" ino=1048644 res=0 errno=0
[  295.930368][ T7007] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 550)
[  295.985943][ T7007] FAT-fs (loop0): Filesystem has been set read-only
[  296.140274][   T32] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  296.333420][   T32] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  296.389231][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.408484][   T32] usb 4-1: Product: syz
[  296.430033][   T32] usb 4-1: Manufacturer: syz
[  296.435870][   T32] usb 4-1: SerialNumber: syz
[  296.553359][   T32] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  296.750682][ T5828] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  297.050636][ T7024] netlink: 'syz.4.349': attribute type 11 has an invalid length.
[  298.002926][   T10] usb 4-1: USB disconnect, device number 5
[  298.314874][ T7031] netlink: 'syz.2.352': attribute type 15 has an invalid length.
[  298.344335][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'.
[  298.444613][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  298.454773][ T7031] netlink: 'syz.2.352': attribute type 15 has an invalid length.
[  298.473088][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  298.496039][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'.
[  298.530545][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  298.564957][   T57] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  298.868443][ T5828] usb 4-1: Service connection timeout for: 260
[  298.885661][ T5828] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  298.942493][ T5828] ath9k_htc: Failed to initialize the device
[  298.986703][   T10] usb 4-1: ath9k_htc: USB layer deinitialized
[  299.793752][ T7049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.360'.
[  299.867472][ T7048] loop3: detected capacity change from 0 to 1024
[  300.034812][ T7048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.161201][ T7057] loop0: detected capacity change from 0 to 256
[  300.263494][ T7048] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.359: inode #1919248754: comm syz.3.359: iget: illegal inode #
[  300.316041][ T7048] EXT4-fs (loop3): Remounting filesystem read-only
[  300.339708][ T7048] EXT4-fs warning (device loop3): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.3.359: cleanup dec ref error -30
[  300.380855][ T7057] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  300.392393][ T7048] EXT4-fs warning (device loop3): ext4_xattr_block_set:2200: inode #19: comm syz.3.359: dec ref error=-30
[  300.655704][ T7059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.363'.
[  300.675851][ T7059] bond0: invalid ARP target 0.0.0.0 specified for addition
[  300.696686][ T7059] bond0: option arp_ip_target: invalid value (0)
[  301.192294][ T7061] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  301.307986][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.305245][ T7073] loop3: detected capacity change from 0 to 2048
[  302.483538][ T7068] loop5: detected capacity change from 0 to 8192
[  302.532772][ T7073] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  302.572599][ T7068] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  302.633481][ T7068] UDF-fs: Scanning with blocksize 512 failed
[  302.719752][ T7068] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  302.771557][ T7068] UDF-fs: Scanning with blocksize 1024 failed
[  302.869657][ T7068] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  302.938234][ T7068] UDF-fs: Scanning with blocksize 2048 failed
[  302.951641][ T7077] loop4: detected capacity change from 0 to 32768
[  303.048220][ T7077] JBD2: Ignoring recovery information on journal
[  303.090161][ T7068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  303.165350][ T7077] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  303.267686][   T29] audit: type=1800 audit(1770978721.012:8): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.367" name="file1" dev="loop5" ino=818 res=0 errno=0
[  303.320754][   T49] Bluetooth: hci3: command 0x0406 tx timeout
[  303.328157][ T5072] Bluetooth: hci0: command 0x0406 tx timeout
[  303.335777][ T5072] Bluetooth: hci2: command 0x0406 tx timeout
[  303.429889][   T29] audit: type=1800 audit(1770978721.092:9): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.367" name="file1" dev="loop5" ino=818 res=0 errno=0
[  303.710526][ T5781] ocfs2: Unmounting device (7,4) on (node local)
[  304.549122][ T7089] loop2: detected capacity change from 0 to 32768
[  304.694715][ T7089] JBD2: Ignoring recovery information on journal
[  304.877289][ T7089] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  305.151925][ T5783] ocfs2: Unmounting device (7,2) on (node local)
[  305.331474][ T7107] veth0: entered promiscuous mode
[  305.384428][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'.
[  306.851293][ T7111] loop4: detected capacity change from 0 to 40427
[  306.910579][ T7111] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010)
[  306.919061][ T7111] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  306.932756][ T7111] F2FS-fs (loop4): Image doesn't support compression
[  306.939770][ T7111] F2FS-fs (loop4): build fault injection type: 0x4
[  306.975950][ T7111] F2FS-fs (loop4): invalid crc value
[  307.282527][ T7111] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  307.292979][ T7111] F2FS-fs (loop4): Start checkpoint disabled!
[  307.312666][ T7111] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  307.323756][ T7111] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  307.331534][ T7111] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  308.896745][ T7132] input: syz1 as /devices/virtual/input/input9
[  309.647755][ T7144] af_packet: tpacket_rcv: packet too big, clamped from 26 to 4294967272. macoff=96
[  309.657927][ T7144] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  310.771531][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  311.005519][   T10] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  311.049223][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  311.056453][   T10] usb 4-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00
[  311.161224][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.202733][   T10] usb 4-1: config 0 descriptor??
[  311.687067][   T10] wacom 0003:056A:00BA.0007: unbalanced collection at end of report description
[  311.758158][   T10] wacom 0003:056A:00BA.0007: parse failed
[  311.789857][   T10] wacom 0003:056A:00BA.0007: probe with driver wacom failed with error -22
[  311.822859][ T7169] loop4: detected capacity change from 0 to 4096
[  311.888490][   T10] usb 4-1: USB disconnect, device number 6
[  312.091154][ T7175] netlink: 'syz.2.406': attribute type 83 has an invalid length.
[  312.239621][ T7169] ntfs3(loop4): ino=5, "/" mi_enum_attr
[  312.607312][ T7178] kvm: MWAIT instruction emulated as NOP!
[  313.720140][ T7193] loop5: detected capacity change from 0 to 256
[  314.022592][ T7193] FAT-fs (loop5): Directory bread(block 64) failed
[  314.055226][ T7193] FAT-fs (loop5): Directory bread(block 65) failed
[  314.099880][ T7193] FAT-fs (loop5): Directory bread(block 66) failed
[  314.112616][ T7193] FAT-fs (loop5): Directory bread(block 67) failed
[  314.161483][ T7193] FAT-fs (loop5): Directory bread(block 68) failed
[  314.213753][ T7193] FAT-fs (loop5): Directory bread(block 69) failed
[  314.242227][ T7193] FAT-fs (loop5): Directory bread(block 70) failed
[  314.248971][ T7193] FAT-fs (loop5): Directory bread(block 71) failed
[  314.315211][ T7193] FAT-fs (loop5): Directory bread(block 72) failed
[  314.361378][ T7193] FAT-fs (loop5): Directory bread(block 73) failed
[  314.709578][   T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  314.898068][   T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  314.927301][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.967723][   T10] usb 5-1: config 0 descriptor??
[  315.012980][   T10] cp210x 5-1:0.0: cp210x converter detected
[  315.433712][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.441766][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.483708][   T10] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  315.622301][   T10] usb 5-1: cp210x converter now attached to ttyUSB0
[  315.770674][   T32] usb 5-1: USB disconnect, device number 5
[  315.887567][   T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  316.512907][ T7214] loop0: detected capacity change from 0 to 32768
[  316.558866][ T7214] (syz.0.425,7214,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  316.577155][ T7214] (syz.0.425,7214,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  316.634365][   T32] cp210x 5-1:0.0: device disconnected
[  316.708785][ T7214] JBD2: Ignoring recovery information on journal
[  316.897073][ T7218] loop3: detected capacity change from 0 to 2048
[  316.951844][ T5772] Bluetooth: hci1: unexpected cc 0x0c5b length: 5 > 1
[  316.959484][ T5772] Bluetooth: hci1: unexpected event for opcode 0x0c5b
[  317.031847][ T7214] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  317.069432][ T7226] loop4: detected capacity change from 0 to 1024
[  317.109242][ T7218]  loop3: p1 < >
[  317.182431][   T29] audit: type=1800 audit(1770978734.932:10): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.429" name="file1" dev="loop4" ino=20 res=0 errno=0
[  317.422616][ T5126]  loop3: p1 < >
[  317.612135][ T5770] ocfs2: Unmounting device (7,0) on (node local)
[  318.958614][ T7234] loop4: detected capacity change from 0 to 40427
[  319.030076][ T7234] F2FS-fs (loop4): Image doesn't support compression
[  319.037097][ T7234] F2FS-fs (loop4): build fault injection rate: 690
[  319.048432][ T7234] F2FS-fs (loop4): invalid crc value
[  319.148051][ T7238] loop2: detected capacity change from 0 to 40427
[  319.295233][ T7238] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  319.303934][ T7238] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  319.334472][ T7238] F2FS-fs (loop2): invalid crc value
[  319.398541][ T7234] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  319.409773][ T7234] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  319.685278][ T7238] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  319.713098][ T7238] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  319.720514][ T7238] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  319.771587][ T7246] loop5: detected capacity change from 0 to 1024
[  319.851753][ T7246] EXT4-fs: Ignoring removed nomblk_io_submit option
[  320.047452][ T7246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.099570][ T5781] syz-executor: attempt to access beyond end of device
[  320.099570][ T5781] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  320.169946][ T5781] CPU: 1 UID: 0 PID: 5781 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  320.170084][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  320.170166][ T5781] Call Trace:
[  320.170213][ T5781]  <TASK>
[  320.170260][ T5781]  __dump_stack+0x26/0x30
[  320.170416][ T5781]  dump_stack_lvl+0x14c/0x1c0
[  320.170577][ T5781]  dump_stack+0x1e/0x25
[  320.170715][ T5781]  f2fs_handle_critical_error+0xa6f/0xc20
[  320.170932][ T5781]  f2fs_stop_checkpoint+0x65/0x80
[  320.171106][ T5781]  f2fs_write_end_io+0x1013/0x2470
[  320.171336][ T5781]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  320.171512][ T5781]  bio_endio+0xf92/0x10e0
[  320.171695][ T5781]  submit_bio_noacct+0x533/0x28d0
[  320.171918][ T5781]  submit_bio+0x57a/0x620
[  320.172104][ T5781]  f2fs_submit_write_bio+0x115/0x2d0
[  320.172269][ T5781]  __submit_merged_bio+0x16f/0x6a0
[  320.172427][ T5781]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  320.172607][ T5781]  __submit_merged_write_cond+0x44a/0x990
[  320.172788][ T5781]  f2fs_write_data_pages+0x4d65/0x5810
[  320.173097][ T5781]  ? __entry_text_end+0xddb5/0x101eb9
[  320.173263][ T5781]  ? kmsan_get_metadata+0xf1/0x160
[  320.173419][ T5781]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  320.173595][ T5781]  ? __set_next_task_fair+0x2a4/0x9b0
[  320.173728][ T5781]  ? kmsan_get_metadata+0xf1/0x160
[  320.173897][ T5781]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  320.174052][ T5781]  ? kmsan_get_metadata+0xf1/0x160
[  320.174212][ T5781]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  320.174375][ T5781]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  320.174551][ T5781]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  320.174721][ T5781]  do_writepages+0x3f2/0x860
[  320.174894][ T5781]  ? _raw_spin_unlock+0x30/0x50
[  320.175033][ T5781]  ? wbc_attach_and_unlock_inode+0x131/0x660
[  320.175244][ T5781]  filemap_fdatawrite+0x207/0x260
[  320.175457][ T5781]  f2fs_sync_dirty_inodes+0x2aa/0x9d0
[  320.175679][ T5781]  f2fs_write_checkpoint+0x10a3/0x3720
[  320.175897][ T5781]  ? stack_depot_save_flags+0x35/0x790
[  320.176073][ T5781]  kill_f2fs_super+0x320/0x990
[  320.176243][ T5781]  ? __pfx_kill_f2fs_super+0x10/0x10
[  320.176371][ T5781]  deactivate_locked_super+0xcb/0x3c0
[  320.176576][ T5781]  deactivate_super+0x12f/0x140
[  320.176763][ T5781]  cleanup_mnt+0x7eb/0x870
[  320.176948][ T5781]  ? __pfx___cleanup_mnt+0x10/0x10
[  320.177122][ T5781]  __cleanup_mnt+0x22/0x30
[  320.177286][ T5781]  task_work_run+0x208/0x2b0
[  320.177467][ T5781]  exit_to_user_mode_loop+0x306/0x1b60
[  320.177629][ T5781]  ? user_path_at+0x1fc/0x330
[  320.177771][ T5781]  ? __x64_sys_umount+0x1dc/0x250
[  320.177932][ T5781]  do_syscall_64+0x24d/0xf80
[  320.178086][ T5781]  ? clear_bhb_loop+0x50/0xa0
[  320.178227][ T5781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.178374][ T5781] RIP: 0033:0x7f5c61b9d1d7
[  320.178484][ T5781] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  320.178599][ T5781] RSP: 002b:00007ffd4bf4d5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  320.178722][ T5781] RAX: 0000000000000000 RBX: 00007f5c61c31c3b RCX: 00007f5c61b9d1d7
[  320.178809][ T5781] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4bf4d670
[  320.178891][ T5781] RBP: 00007ffd4bf4d670 R08: 00007ffd4bf4e670 R09: 00000000ffffffff
[  320.178981][ T5781] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4bf4e700
[  320.179063][ T5781] R13: 00007f5c61c31c3b R14: 000000000004e070 R15: 00007ffd4bf4e740
[  320.179189][ T5781]  </TASK>
[  320.679507][ T5781] F2FS-fs (loop4): Remounting filesystem read-only
[  321.268314][ T7005] udevd[7005]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  321.794092][ T7005] udevd[7005]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  321.999462][ T7259] loop0: detected capacity change from 0 to 32768
[  322.131364][ T7259] 
[  322.131364][ T7259]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  322.131364][ T7259] 
[  322.162023][ T7259] 
[  322.162023][ T7259]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  322.162023][ T7259] 
[  322.172778][ T7259] 
[  322.172778][ T7259]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  322.172778][ T7259] 
[  322.183532][ T7259] 
[  322.183532][ T7259]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  322.183532][ T7259] 
[  322.194330][ T7259] 
[  322.194330][ T7259]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  322.194330][ T7259] 
[  322.205056][ T7259] 
[  322.205056][ T7259]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  322.205056][ T7259] 
[  322.324679][  T109] 
[  322.324679][  T109]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  322.324679][  T109] 
[  322.971913][ T1129] 
[  322.971913][ T1129]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  322.971913][ T1129] 
[  323.206721][ T1129] 
[  323.206721][ T1129]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  323.206721][ T1129] 
[  323.210078][ T6181] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.286358][ T5770] 
[  323.286358][ T5770]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  323.286358][ T5770] 
[  323.315303][  T110] 
[  323.315303][  T110]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  323.315303][  T110] 
[  323.421109][ T5770] 
[  323.421109][ T5770]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  323.421109][ T5770] 
[  323.800645][ T5785] Bluetooth: hci4: command 0x0406 tx timeout
[  324.379571][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  324.629583][   T10] usb 4-1: Using ep0 maxpacket: 32
[  324.666425][   T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  324.706108][   T10] usb 4-1: config 0 has no interface number 0
[  324.752989][ T7284] loop5: detected capacity change from 0 to 512
[  324.793300][ T7284] EXT4-fs: Ignoring removed bh option
[  324.822217][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  324.835229][ T7284] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  324.865177][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.939112][   T10] usb 4-1: Product: syz
[  324.943651][   T10] usb 4-1: Manufacturer: syz
[  324.990205][ T7284] EXT4-fs (loop5): 1 truncate cleaned up
[  324.996387][   T10] usb 4-1: SerialNumber: syz
[  325.116796][ T7284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.121781][ T7288] loop2: detected capacity change from 0 to 128
[  325.199568][   T10] usb 4-1: config 0 descriptor??
[  325.307903][ T7288] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  325.455080][ T7288] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  325.570114][ T7293] input: syz1 as /devices/virtual/input/input10
[  325.726096][   T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  325.732264][ T6181] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.831729][   T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  326.272945][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  326.513639][   T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  326.554731][   T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  326.706641][   T10] usb 4-1: USB disconnect, device number 7
[  326.988948][ T7304] warning: `syz.2.453' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  327.818257][ T7318] loop3: detected capacity change from 0 to 128
[  327.947255][ T7318] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  328.084270][ T7318] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  329.602789][ T7330] loop0: detected capacity change from 0 to 40427
[  329.618869][ T7330] F2FS-fs (loop0): build fault injection rate: 690
[  329.682074][ T7330] F2FS-fs (loop0): invalid crc value
[  330.107220][ T7330] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  330.132948][ T7330] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  330.332566][ T5770] syz-executor: attempt to access beyond end of device
[  330.332566][ T5770] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  330.432621][ T5770] CPU: 0 UID: 0 PID: 5770 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  330.432759][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  330.432832][ T5770] Call Trace:
[  330.432879][ T5770]  <TASK>
[  330.432926][ T5770]  __dump_stack+0x26/0x30
[  330.433082][ T5770]  dump_stack_lvl+0x14c/0x1c0
[  330.433234][ T5770]  dump_stack+0x1e/0x25
[  330.433373][ T5770]  f2fs_handle_critical_error+0xa6f/0xc20
[  330.433581][ T5770]  f2fs_stop_checkpoint+0x65/0x80
[  330.433751][ T5770]  f2fs_write_end_io+0x1013/0x2470
[  330.433980][ T5770]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  330.434143][ T5770]  bio_endio+0xf92/0x10e0
[  330.434331][ T5770]  submit_bio_noacct+0x533/0x28d0
[  330.434563][ T5770]  submit_bio+0x57a/0x620
[  330.434747][ T5770]  f2fs_submit_write_bio+0x115/0x2d0
[  330.434909][ T5770]  __submit_merged_bio+0x16f/0x6a0
[  330.435071][ T5770]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  330.435241][ T5770]  __submit_merged_write_cond+0x44a/0x990
[  330.435430][ T5770]  f2fs_write_data_pages+0x4d65/0x5810
[  330.435737][ T5770]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  330.435885][ T5770]  ? kmsan_get_metadata+0xf1/0x160
[  330.436033][ T5770]  ? folio_batch_move_lru+0x6a2/0x6d0
[  330.436180][ T5770]  ? __msan_warning+0x1b/0x30
[  330.436313][ T5770]  ? filter_irq_stacks+0x13f/0x190
[  330.436467][ T5770]  ? stack_depot_save_flags+0x35/0x790
[  330.436607][ T5770]  ? kmsan_get_metadata+0xf1/0x160
[  330.436753][ T5770]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  330.436910][ T5770]  ? kmsan_get_metadata+0xf1/0x160
[  330.437063][ T5770]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  330.437219][ T5770]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  330.437398][ T5770]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  330.437565][ T5770]  do_writepages+0x3f2/0x860
[  330.437737][ T5770]  ? _raw_spin_unlock+0x30/0x50
[  330.437867][ T5770]  ? wbc_attach_and_unlock_inode+0x131/0x660
[  330.438069][ T5770]  filemap_fdatawrite+0x207/0x260
[  330.438308][ T5770]  f2fs_sync_dirty_inodes+0x2aa/0x9d0
[  330.438521][ T5770]  f2fs_write_checkpoint+0x10a3/0x3720
[  330.438737][ T5770]  ? stack_depot_save_flags+0x35/0x790
[  330.438908][ T5770]  kill_f2fs_super+0x320/0x990
[  330.439056][ T5770]  ? __pfx_kill_f2fs_super+0x10/0x10
[  330.439176][ T5770]  deactivate_locked_super+0xcb/0x3c0
[  330.439363][ T5770]  deactivate_super+0x12f/0x140
[  330.439536][ T5770]  cleanup_mnt+0x7eb/0x870
[  330.439708][ T5770]  ? __pfx___cleanup_mnt+0x10/0x10
[  330.439876][ T5770]  __cleanup_mnt+0x22/0x30
[  330.440034][ T5770]  task_work_run+0x208/0x2b0
[  330.440204][ T5770]  exit_to_user_mode_loop+0x306/0x1b60
[  330.440384][ T5770]  ? user_path_at+0x1fc/0x330
[  330.440523][ T5770]  ? __x64_sys_umount+0x1dc/0x250
[  330.440685][ T5770]  do_syscall_64+0x24d/0xf80
[  330.440841][ T5770]  ? clear_bhb_loop+0x50/0xa0
[  330.440985][ T5770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.441125][ T5770] RIP: 0033:0x7f505039d1d7
[  330.441225][ T5770] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  330.441337][ T5770] RSP: 002b:00007fffdefd9148 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  330.441460][ T5770] RAX: 0000000000000000 RBX: 00007f5050431c3b RCX: 00007f505039d1d7
[  330.441547][ T5770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffdefd9200
[  330.441628][ T5770] RBP: 00007fffdefd9200 R08: 00007fffdefda200 R09: 00000000ffffffff
[  330.441717][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffdefda290
[  330.441799][ T5770] R13: 00007f5050431c3b R14: 00000000000509dc R15: 00007fffdefda2d0
[  330.441923][ T5770]  </TASK>
[  330.891744][ T5770] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  331.120556][ T7359] input: syz1 as /devices/virtual/input/input11
[  331.292535][   T10] kernel read not supported for file /rfkill (pid: 10 comm: kworker/0:1)
[  331.773619][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'.
[  333.033073][ T7371] loop3: detected capacity change from 0 to 32768
[  333.042636][ T7371] btrfs: Deprecated parameter 'usebackuproot'
[  333.048925][ T7371] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  333.062112][ T7371] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.475 (7371)
[  333.081157][ T7371] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  333.092489][ T7371] BTRFS info (device loop3): using sha256 checksum algorithm
[  333.100289][ T7371] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  333.460063][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  333.525554][ T7371] BTRFS info (device loop3): rebuilding free space tree
[  333.564520][ T7371] BTRFS info (device loop3): disabling free space tree
[  333.572236][ T7371] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  333.582331][ T7371] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  333.631729][ T7371] BTRFS info (device loop3): turning on async discard
[  333.638722][ T7371] BTRFS info (device loop3): enabling disk space caching
[  333.646148][ T7371] BTRFS info (device loop3): force clearing of disk cache
[  333.653913][ T7371] BTRFS info (device loop3): trying to use backup root at mount time
[  333.662457][ T7371] BTRFS info (device loop3): force zstd compression, level 3
[  333.823793][   T29] audit: type=1800 audit(1770978751.532:11): pid=7371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.475" name="file1" dev="loop3" ino=260 res=0 errno=0
[  333.951137][ T7399] sctp: [Deprecated]: syz.2.481 (pid 7399) Use of struct sctp_assoc_value in delayed_ack socket option.
[  333.951137][ T7399] Use struct sctp_sack_info instead
[  334.289180][ T5775] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  336.236356][ T7414] loop2: detected capacity change from 0 to 40427
[  336.300684][ T7414] F2FS-fs (loop2): invalid crc value
[  336.358687][ T7410] overlayfs: failed to resolve './file0': -2
[  336.663016][ T7414] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  336.673506][ T7414] F2FS-fs (loop2): Start checkpoint disabled!
[  336.687442][ T7414] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  336.701491][ T7414] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  336.754544][   T29] audit: type=1800 audit(1770978754.502:12): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.488" name="file1" dev="loop2" ino=10 res=0 errno=0
[  336.850245][   T29] audit: type=1800 audit(1770978754.502:13): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.488" name="file1" dev="loop2" ino=10 res=0 errno=0
[  337.025169][ T7421] overlayfs: upper fs does not support file handles, falling back to index=off.
[  337.041191][   T57] kworker/u8:4: attempt to access beyond end of device
[  337.041191][   T57] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  337.098917][ T7421] evm: overlay not supported
[  337.150313][   T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  337.150447][   T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  337.150546][   T57] Workqueue: writeback wb_workfn (flush-7:2)
[  337.150755][   T57] Call Trace:
[  337.150809][   T57]  <TASK>
[  337.150857][   T57]  __dump_stack+0x26/0x30
[  337.151008][   T57]  dump_stack_lvl+0x14c/0x1c0
[  337.151154][   T57]  dump_stack+0x1e/0x25
[  337.151294][   T57]  f2fs_handle_critical_error+0xa6f/0xc20
[  337.151503][   T57]  f2fs_stop_checkpoint+0x65/0x80
[  337.151675][   T57]  f2fs_write_end_io+0x1013/0x2470
[  337.151908][   T57]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  337.152092][   T57]  bio_endio+0xf92/0x10e0
[  337.152263][   T57]  submit_bio_noacct+0x533/0x28d0
[  337.152485][   T57]  submit_bio+0x57a/0x620
[  337.152666][   T57]  f2fs_submit_write_bio+0x115/0x2d0
[  337.152828][   T57]  __submit_merged_bio+0x16f/0x6a0
[  337.152978][   T57]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  337.153146][   T57]  __submit_merged_write_cond+0x44a/0x990
[  337.153331][   T57]  f2fs_write_data_pages+0x4d65/0x5810
[  337.153649][   T57]  ? list_lru_add+0x19d/0x890
[  337.153825][   T57]  ? __msan_warning+0x1b/0x30
[  337.153954][   T57]  ? filter_irq_stacks+0x13f/0x190
[  337.154101][   T57]  ? kmsan_get_metadata+0xf1/0x160
[  337.154247][   T57]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  337.154401][   T57]  ? kmsan_get_metadata+0xf1/0x160
[  337.154546][   T57]  ? kmsan_get_metadata+0xf1/0x160
[  337.154697][   T57]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  337.154864][   T57]  ? kmsan_get_metadata+0xf1/0x160
[  337.155019][   T57]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  337.155176][   T57]  ? kmsan_get_metadata+0xf1/0x160
[  337.155328][   T57]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  337.155489][   T57]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  337.155660][   T57]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  337.155834][   T57]  do_writepages+0x3f2/0x860
[  337.155990][   T57]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  337.156143][   T57]  ? writeback_sb_inodes+0x11/0x1f10
[  337.156275][   T57]  ? kmsan_get_metadata+0xf1/0x160
[  337.156443][   T57]  __writeback_single_inode+0x101/0x1030
[  337.156579][   T57]  ? kmsan_get_metadata+0xf1/0x160
[  337.156722][   T57]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  337.156893][   T57]  writeback_sb_inodes+0xb2d/0x1f10
[  337.157135][   T57]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  337.157307][   T57]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  337.157469][   T57]  wb_writeback+0x4d0/0xc00
[  337.157643][   T57]  ? queue_io+0x4b1/0x790
[  337.157794][   T57]  wb_workfn+0x397/0x1900
[  337.157969][   T57]  ? kmsan_get_metadata+0xf1/0x160
[  337.158142][   T57]  ? __pfx_wb_workfn+0x10/0x10
[  337.158306][   T57]  process_scheduled_works+0xae7/0x1d60
[  337.158506][   T57]  worker_thread+0xede/0x1580
[  337.158680][   T57]  kthread+0x53f/0x600
[  337.158839][   T57]  ? __pfx_worker_thread+0x10/0x10
[  337.158987][   T57]  ? __pfx_kthread+0x10/0x10
[  337.159133][   T57]  ret_from_fork+0x20f/0x910
[  337.159268][   T57]  ? __switch_to+0x51c/0x750
[  337.159416][   T57]  ? __pfx_kthread+0x10/0x10
[  337.159562][   T57]  ret_from_fork_asm+0x1a/0x30
[  337.159755][   T57]  </TASK>
[  337.644467][   T57] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  339.000888][ T7433] loop4: detected capacity change from 0 to 32768
[  339.010585][ T7433] btrfs: Deprecated parameter 'usebackuproot'
[  339.016852][ T7433] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  339.028770][ T7433] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.495 (7433)
[  339.047845][ T7433] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  339.060606][ T7433] BTRFS info (device loop4): using sha256 checksum algorithm
[  339.336886][ T7433] BTRFS info (device loop4): rebuilding free space tree
[  339.377008][ T7433] BTRFS info (device loop4): disabling free space tree
[  339.384414][ T7433] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  339.394586][ T7433] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  339.444915][ T7433] BTRFS info (device loop4): turning on async discard
[  339.452120][ T7433] BTRFS info (device loop4): force clearing of disk cache
[  339.462664][ T7433] BTRFS info (device loop4): trying to use backup root at mount time
[  339.471069][ T7433] BTRFS info (device loop4): force lzo compression, level 1
[  339.556975][   T29] audit: type=1800 audit(1770978757.302:14): pid=7433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.495" name="file1" dev="loop4" ino=260 res=0 errno=0
[  339.934564][ T5781] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  340.480613][ T7457] loop0: detected capacity change from 0 to 32768
[  340.542282][ T7457] (syz.0.499,7457,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  340.556810][ T7457] (syz.0.499,7457,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  340.700515][ T7457] JBD2: Ignoring recovery information on journal
[  340.851230][ T7457] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  341.133706][ T7466] loop5: detected capacity change from 0 to 512
[  341.300411][ T7466] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  341.437652][ T7466] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  341.471567][ T5770] ocfs2: Unmounting device (7,0) on (node local)
[  341.551208][ T7466] EXT4-fs (loop5): 1 truncate cleaned up
[  341.610821][ T7466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.695118][ T7466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.499654][   T32] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  342.672296][ T7489] loop2: detected capacity change from 0 to 128
[  342.733973][   T32] usb 4-1: Using ep0 maxpacket: 32
[  342.745888][ T7489] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  342.785817][   T32] usb 4-1: config 0 has an invalid interface number: 182 but max is 0
[  342.799897][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  342.808434][ T7489] hpfs: filesystem error: improperly stopped
[  342.832144][ T7489] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  342.847919][   T32] usb 4-1: config 0 has no interface number 0
[  342.848036][   T32] usb 4-1: config 0 interface 182 has no altsetting 0
[  342.880248][ T7489] hpfs: You really don't want any checks? You are crazy...
[  342.888034][ T7489] hpfs: hpfs_map_sector(): read error
[  342.910149][ T7489] hpfs: code page support is disabled
[  342.920342][ T7489] hpfs: hpfs_map_4sectors(): unaligned read
[  342.927060][ T7489] hpfs: hpfs_map_4sectors(): unaligned read
[  342.933373][ T7489] hpfs: filesystem error: unable to find root dir
[  342.979465][   T10] usb 6-1: Using ep0 maxpacket: 32
[  342.990305][   T32] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db
[  343.003499][   T10] usb 6-1: config 2 has an invalid interface number: 88 but max is 0
[  343.041287][ T7489] hpfs: hpfs_map_4sectors(): unaligned read
[  343.066960][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.079710][   T10] usb 6-1: config 2 has no interface number 0
[  343.117066][   T10] usb 6-1: config 2 interface 88 has no altsetting 0
[  343.119723][   T32] usb 4-1: Product: syz
[  343.171164][   T10] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  343.178324][   T32] usb 4-1: Manufacturer: syz
[  343.221561][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.224266][   T32] usb 4-1: SerialNumber: syz
[  343.280111][   T10] usb 6-1: Product: syz
[  343.284472][   T10] usb 6-1: Manufacturer: syz
[  343.315887][   T32] usb 4-1: config 0 descriptor??
[  343.334490][   T10] usb 6-1: SerialNumber: syz
[  343.383244][   T32] hub 4-1:0.182: bad descriptor, ignoring hub
[  343.428946][   T32] hub 4-1:0.182: probe with driver hub failed with error -5
[  343.651563][   T32] kaweth 4-1:0.182: Firmware present in device.
[  343.854808][   T32] kaweth 4-1:0.182: Statistics collection: 0
[  343.892579][   T32] kaweth 4-1:0.182: Multicast filter limit: 0
[  343.916287][   T32] kaweth 4-1:0.182: MTU: 0
[  343.940710][   T32] kaweth 4-1:0.182: Read MAC address 00:00:00:00:00:00
[  343.951695][ T7498] loop2: detected capacity change from 0 to 128
[  344.030526][ T7498] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  344.086468][ T7498] hpfs: filesystem error: improperly stopped
[  344.140362][ T7498] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  344.189775][ T7498] hpfs: You really don't want any checks? You are crazy...
[  344.197769][ T7498] hpfs: hpfs_map_sector(): read error
[  344.248989][ T7498] hpfs: code page support is disabled
[  344.317804][ T7498] hpfs: hpfs_map_4sectors(): unaligned read
[  344.336881][ T7498] hpfs: hpfs_map_4sectors(): unaligned read
[  344.389907][ T7498] hpfs: filesystem error: unable to find root dir
[  344.516431][ T7498] openvswitch: netlink: IP tunnel attribute has 1620 unknown bytes.
[  344.540679][   T32] kaweth 4-1:0.182: kaweth interface created at eth5
[  344.749828][   T10] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  344.801173][   T10] asix 6-1:2.88: probe with driver asix failed with error -71
[  344.899668][   T10] usb 6-1: USB disconnect, device number 4
[  344.899940][   T32] usb 4-1: USB disconnect, device number 8
[  345.309998][ T7506] netlink: 'syz.2.516': attribute type 13 has an invalid length.
[  345.404041][ T5828] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  345.609084][ T5828] usb 5-1: Using ep0 maxpacket: 8
[  345.702711][ T7506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  345.746205][ T5828] usb 5-1: unable to get BOS descriptor or descriptor too short
[  345.795975][ T5828] usb 5-1: config 0 has no interfaces?
[  345.855283][ T5828] usb 5-1: language id specifier not provided by device, defaulting to English
[  345.962424][ T5828] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  346.009609][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.089018][ T5828] usb 5-1: Product: syz
[  346.104148][ T5828] usb 5-1: SerialNumber: syz
[  346.142280][ T5828] usb 5-1: config 0 descriptor??
[  346.500368][ T7517] loop2: detected capacity change from 0 to 164
[  346.583895][ T7503] loop4: detected capacity change from 0 to 256
[  346.671005][ T5828] usb 5-1: USB disconnect, device number 6
[  347.352866][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  347.362470][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  347.580364][    C1] vcan0: j1939_tp_rxtimer: 0xffff888050331c00: rx timeout, send abort
[  347.822496][ T7532] cgroup: Unknown subsys name 'cpuset'
[  347.999422][ T7530] loop4: detected capacity change from 0 to 2048
[  348.087082][ T7535] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  348.089127][    C1] vcan0: j1939_tp_rxtimer: 0xffff888050331c00: abort rx timeout. Force session deactivation
[  348.155123][   T10] kernel read not supported for file /admmidi2 (pid: 10 comm: kworker/0:1)
[  348.317292][ T7530] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '..'
[  348.404455][ T7530] Remounting filesystem read-only
[  348.601463][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'.
[  349.312206][ T5781] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  349.475756][ T7543] loop2: detected capacity change from 0 to 32768
[  349.493537][ T7543] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.529 (7543)
[  349.530990][ T7543] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  349.541563][ T7543] BTRFS info (device loop2): using sha256 checksum algorithm
[  349.705331][ T7543] BTRFS info (device loop2): enabling ssd optimizations
[  349.712632][ T7543] BTRFS info (device loop2): turning on async discard
[  349.719845][ T7543] BTRFS info (device loop2): enabling free space tree
[  349.902257][ T7543] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4)
[  350.355056][ T5783] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  350.901378][ T7581] loop5: detected capacity change from 0 to 512
[  350.957324][ T7582] IPVS: length: 24 != 36888
[  351.128297][   T29] audit: type=1800 audit(1770978768.832:15): pid=7581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.541" name="file2" dev="loop5" ino=1048650 res=0 errno=0
[  351.141795][ T7581] FAT-fs (loop5): error, corrupted file size (i_pos 51, 8960)
[  351.190241][ T7581] FAT-fs (loop5): Filesystem has been set read-only
[  351.197428][ T7581] FAT-fs (loop5): error, corrupted file size (i_pos 51, 8960)
[  351.918536][ T7590] loop3: detected capacity change from 0 to 512
[  352.033681][ T7590] EXT4-fs: Ignoring removed mblk_io_submit option
[  352.191033][ T7590] EXT4-fs (loop3): orphan cleanup on readonly fs
[  352.220504][ T7590] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  352.240104][ T7586] loop4: detected capacity change from 0 to 32768
[  352.323797][ T7586] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  352.326488][ T7590] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.544: attempt to clear invalid blocks 2 len 1
[  352.347182][ T7601] loop5: detected capacity change from 0 to 128
[  352.382949][ T7590] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  352.388847][ T7590] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, 
[  352.398604][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  352.398710][    C1] EXT4-fs (loop3): initial error at time 1770978770: ext4_clear_blocks:876: inode 13
[  352.398872][    C1] EXT4-fs (loop3): last error at time 1770978770: ext4_clear_blocks:876: inode 13
[  352.433610][ T7590] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  352.483738][ T7590] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.544: invalid indirect mapped block 1819239214 (level 0)
[  352.499469][ T7590] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  352.506517][ T7590] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.544: invalid indirect mapped block 1819239214 (level 1)
[  352.547000][ T7601] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  352.576362][ T7601] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  352.651365][ T7590] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  352.673876][ T7590] EXT4-fs (loop3): 1 truncate cleaned up
[  352.788424][ T7590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  352.793630][ T7586] XFS (loop4): Ending clean mount
[  352.816896][ T7586] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0xaf/0x2c0, xfs_finobt block 0x10 
[  352.828459][ T7586] XFS (loop4): Unmount and run xfs_repair
[  352.834543][ T7586] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  352.842264][ T7586] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  352.851581][ T7586] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  352.860824][ T7586] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  352.872314][ T7586] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[  352.890127][ T7586] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  352.899742][ T7586] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.908778][ T7586] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[  352.917913][ T7586] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.929679][ T7586] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x10 len 4 error 74
[  352.941953][ T7586] loop4: lost filesystem error report for type 5 error -117
[  352.942507][ T7586] XFS (loop4): Failed to initialize disk quotas, err -117.
[  353.243631][ T6181] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  353.437103][ T5775] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0
[  353.556552][ T5781] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  353.604180][ T5775] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds
[  353.637379][ T5781] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  353.665822][ T5775] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds
[  353.810167][ T7005] =====================================================
[  353.817463][ T7005] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400
[  353.825774][ T7005]  _copy_to_iter+0xef3/0x3400
[  353.830735][ T7005]  copy_page_to_iter+0x482/0x900
[  353.835850][ T7005]  filemap_read+0x1cd6/0x2300
[  353.840908][ T7005]  blkdev_read_iter+0x89f/0xb00
[  353.845913][ T7005]  vfs_read+0x8ec/0xf90
[  353.850308][ T7005]  ksys_read+0x1d9/0x470
[  353.854712][ T7005]  __x64_sys_read+0x97/0xf0
[  353.859519][ T7005]  x64_sys_call+0x311c/0x3ea0
[  353.867899][ T7005]  do_syscall_64+0x134/0xf80
[  353.872789][ T7005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.878859][ T7005] 
[  353.881358][ T7005] Uninit was stored to memory at:
[  353.886599][ T7005]  _copy_to_iter+0x130f/0x3400
[  353.891718][ T7005]  copy_page_to_iter+0x482/0x900
[  353.896818][ T7005]  shmem_file_read_iter+0x904/0x1140
[  353.906069][ T7005]  lo_rw_aio+0x1164/0x14a0
[  353.913705][ T7005]  loop_process_work+0xf05/0x1ff0
[  353.918976][ T7005]  loop_rootcg_workfn+0x2b/0x40
[  353.924374][ T7005]  process_scheduled_works+0xae7/0x1d60
[  353.930298][ T7005]  worker_thread+0xede/0x1580
[  353.935136][ T7005]  kthread+0x53f/0x600
[  353.939442][ T7005]  ret_from_fork+0x20f/0x910
[  353.944183][ T7005]  ret_from_fork_asm+0x1a/0x30
[  353.949114][ T7005] 
[  353.952219][ T7005] Uninit was stored to memory at:
[  353.957484][ T7005]  copy_folio_from_iter_atomic+0xea0/0x38b0
[  353.963639][ T7005]  generic_perform_write+0x8b7/0x1050
[  353.969197][ T7005]  shmem_file_write_iter+0x2b7/0x2f0
[  353.974711][ T7005]  lo_rw_aio+0x1164/0x14a0
[  353.979448][ T7005]  loop_process_work+0xf05/0x1ff0
[  353.984622][ T7005]  loop_workfn+0x3e/0x60
[  353.989031][ T7005]  process_scheduled_works+0xae7/0x1d60
[  353.994842][ T7005]  worker_thread+0xede/0x1580
[  353.999794][ T7005]  kthread+0x53f/0x600
[  354.007920][ T7005]  ret_from_fork+0x20f/0x910
[  354.014523][ T7005]  ret_from_fork_asm+0x1a/0x30
[  354.019554][ T7005] 
[  354.021958][ T7005] Uninit was stored to memory at:
[  354.027201][ T7005]  xlog_write+0x1a75/0x20f0
[  354.031959][ T7005]  xlog_cil_push_work+0x3533/0x5030
[  354.037351][ T7005]  process_scheduled_works+0xae7/0x1d60
[  354.043231][ T7005]  worker_thread+0xede/0x1580
[  354.048054][ T7005]  kthread+0x53f/0x600
[  354.052353][ T7005]  ret_from_fork+0x20f/0x910
[  354.057098][ T7005]  ret_from_fork_asm+0x1a/0x30
[  354.062150][ T7005] 
[  354.064538][ T7005] Uninit was stored to memory at:
[  354.069892][ T7005]  xfs_inode_item_format_attr_fork+0x6f1/0xa80
[  354.076256][ T7005]  xfs_inode_item_format+0x2024/0x2280
[  354.081995][ T7005]  xlog_cil_commit+0x17f8/0x4760
[  354.087124][ T7005]  __xfs_trans_commit+0x556/0xf20
[  354.092425][ T7005]  xfs_trans_roll+0xfd/0x600
[  354.097200][ T7005]  xfs_defer_trans_roll+0x106/0x520
[  354.106671][ T7005]  xfs_defer_finish_noroll+0xce3/0x1d80
[  354.114274][ T7005]  xfs_trans_commit+0x165/0x270
[  354.119438][ T7005]  xfs_attr_set+0x1da1/0x2030
[  354.124301][ T7005]  xfs_attr_change+0x408/0x5b0
[  354.129236][ T7005]  xfs_xattr_set+0x1d4/0x2f0
[  354.134047][ T7005]  __vfs_setxattr+0x742/0x840
[  354.138976][ T7005]  __vfs_setxattr_noperm+0x224/0xad0
[  354.144530][ T7005]  __vfs_setxattr_locked+0x1f8/0x510
[  354.150075][ T7005]  vfs_setxattr+0x276/0x690
[  354.154742][ T7005]  filename_setxattr+0x396/0xcb0
[  354.160194][ T7005]  path_setxattrat+0x702/0x800
[  354.165213][ T7005]  __x64_sys_lsetxattr+0x103/0x1c0
[  354.170647][ T7005]  x64_sys_call+0x168d/0x3ea0
[  354.175510][ T7005]  do_syscall_64+0x134/0xf80
[  354.180351][ T7005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.186404][ T7005] 
[  354.188795][ T7005] Uninit was created at:
[  354.193371][ T7005]  __kmalloc_node_track_caller_noprof+0x4ff/0x1710
[  354.200245][ T7005]  krealloc_node_align_noprof+0x463/0xf10
[  354.211579][ T7005]  xfs_broot_realloc+0x361/0x480
[  354.216700][ T7005]  xfs_bmap_broot_realloc+0x243/0x650
[  354.224298][ T7005]  xfs_bmap_extents_to_btree+0x1f8/0x1430
[  354.230328][ T7005]  xfs_bmap_add_extent_hole_real+0x2267/0x3040
[  354.236689][ T7005]  xfs_bmapi_allocate+0x48d2/0x4f50
[  354.242217][ T7005]  xfs_bmapi_write+0x10a9/0x26f0
[  354.247344][ T7005]  xfs_attr_rmtval_set_blk+0x171/0x390
[  354.253089][ T7005]  xfs_attr_set_iter+0x35f/0x7980
[  354.258307][ T7005]  xfs_attr_finish_item+0x16c/0x540
[  354.263788][ T7005]  xfs_defer_finish_one+0x528/0x13c0
[  354.269357][ T7005]  xfs_defer_finish_noroll+0x1064/0x1d80
[  354.275184][ T7005]  xfs_trans_commit+0x165/0x270
[  354.280502][ T7005]  xfs_attr_set+0x1da1/0x2030
[  354.285377][ T7005]  xfs_attr_change+0x408/0x5b0
[  354.290357][ T7005]  xfs_xattr_set+0x1d4/0x2f0
[  354.295082][ T7005]  __vfs_setxattr+0x742/0x840
[  354.300064][ T7005]  __vfs_setxattr_noperm+0x224/0xad0
[  354.305612][ T7005]  __vfs_setxattr_locked+0x1f8/0x510
[  354.316182][ T7005]  vfs_setxattr+0x276/0x690
[  354.322845][ T7005]  filename_setxattr+0x396/0xcb0
[  354.328068][ T7005]  path_setxattrat+0x702/0x800
[  354.333065][ T7005]  __x64_sys_lsetxattr+0x103/0x1c0
[  354.338373][ T7005]  x64_sys_call+0x168d/0x3ea0
[  354.343391][ T7005]  do_syscall_64+0x134/0xf80
[  354.348161][ T7005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.354289][ T7005] 
[  354.356678][ T7005] Bytes 1588-1591 of 4096 are uninitialized
[  354.362915][ T7005] Memory access of size 4096 starts at ffff888131e3a000
[  354.370051][ T7005] Data copied to user address 00007fdca4dd6000
[  354.376293][ T7005] 
[  354.378708][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[  354.387886][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  354.398227][ T7005] =====================================================
[  354.405382][ T7005] Disabling lock debugging due to kernel taint
[  354.419487][ T7005] Kernel panic - not syncing: kmsan.panic set ...
[  354.426071][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: udevd Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  354.436664][ T7005] Tainted: [B]=BAD_PAGE
[  354.440910][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  354.451081][ T7005] Call Trace:
[  354.454451][ T7005]  <TASK>
[  354.457475][ T7005]  __dump_stack+0x26/0x30
[  354.461992][ T7005]  dump_stack_lvl+0x50/0x1c0
[  354.466763][ T7005]  ? dump_stack+0x12/0x25
[  354.471255][ T7005]  dump_stack+0x1e/0x25
[  354.475552][ T7005]  vpanic+0x7b4/0x1430
[  354.479790][ T7005]  panic+0x15d/0x160
[  354.483873][ T7005]  kmsan_report+0x31a/0x320
[  354.488528][ T7005]  ? kmsan_internal_check_memory+0x166/0x240
[  354.494642][ T7005]  ? kmsan_copy_to_user+0xef/0x190
[  354.499888][ T7005]  ? _copy_to_iter+0xef3/0x3400
[  354.504852][ T7005]  ? copy_page_to_iter+0x482/0x900
[  354.510084][ T7005]  ? filemap_read+0x1cd6/0x2300
[  354.515066][ T7005]  ? blkdev_read_iter+0x89f/0xb00
[  354.520234][ T7005]  ? vfs_read+0x8ec/0xf90
[  354.524689][ T7005]  ? ksys_read+0x1d9/0x470
[  354.529229][ T7005]  ? __x64_sys_read+0x97/0xf0
[  354.534034][ T7005]  ? x64_sys_call+0x311c/0x3ea0
[  354.539033][ T7005]  ? do_syscall_64+0x134/0xf80
[  354.543943][ T7005]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.550153][ T7005]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  354.556370][ T7005]  ? up_read+0x6a/0xf0
[  354.560594][ T7005]  ? kmsan_get_metadata+0xf1/0x160
[  354.565859][ T7005]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  354.571828][ T7005]  ? raw_irqentry_exit_cond_resched+0x3f/0x80
[  354.578062][ T7005]  ? irqentry_exit+0x8f/0x6d0
[  354.582887][ T7005]  ? kmsan_get_metadata+0xf1/0x160
[  354.588148][ T7005]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  354.594127][ T7005]  kmsan_internal_check_memory+0x166/0x240
[  354.600101][ T7005]  kmsan_copy_to_user+0xef/0x190
[  354.605186][ T7005]  _copy_to_iter+0xef3/0x3400
[  354.609976][ T7005]  ? kmsan_get_shadow_origin_ptr+0x35/0xb0
[  354.615944][ T7005]  ? filemap_get_pages+0x398d/0x3cd0
[  354.621436][ T7005]  copy_page_to_iter+0x482/0x900
[  354.626510][ T7005]  ? kmsan_get_metadata+0xf1/0x160
[  354.631834][ T7005]  filemap_read+0x1cd6/0x2300
[  354.636814][ T7005]  blkdev_read_iter+0x89f/0xb00
[  354.641831][ T7005]  vfs_read+0x8ec/0xf90
[  354.646126][ T7005]  ? __pfx_blkdev_read_iter+0x10/0x10
[  354.651655][ T7005]  ksys_read+0x1d9/0x470
[  354.656051][ T7005]  __x64_sys_read+0x97/0xf0
[  354.660692][ T7005]  x64_sys_call+0x311c/0x3ea0
[  354.665533][ T7005]  do_syscall_64+0x134/0xf80
[  354.670271][ T7005]  ? clear_bhb_loop+0x50/0xa0
[  354.675085][ T7005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.681107][ T7005] RIP: 0033:0x7fdca46a7407
[  354.685613][ T7005] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  354.705361][ T7005] RSP: 002b:00007ffce0c69b70 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  354.713910][ T7005] RAX: ffffffffffffffda RBX: 00007fdca4e30880 RCX: 00007fdca46a7407
[  354.721997][ T7005] RDX: 0000000000040000 RSI: 00007fdca4dc8000 RDI: 0000000000000009
[  354.730072][ T7005] RBP: 00005653fdd0e9d0 R08: 0000000000000000 R09: 0000000000000000
[  354.738144][ T7005] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  354.746205][ T7005] R13: 0000000000000000 R14: 00005653fdd01748 R15: 00007fdca4f5739c
[  354.754310][ T7005]  </TASK>
[  354.757771][ T7005] Kernel Offset: disabled
[  354.762166][ T7005] Rebooting in 86400 seconds..