last executing test programs:

1m28.572070886s ago: executing program 0 (id=931):
unshare(0x20060400)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0)

1m28.522416494s ago: executing program 0 (id=932):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)

1m28.262542554s ago: executing program 0 (id=933):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
open$dir(0x0, 0x20400, 0x141)
ptrace(0x10, r0)
ptrace$getenv(0x4201, r0, 0xac0, &(0x7f0000000000))

1m28.202565065s ago: executing program 0 (id=934):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$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")
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0, 0x0)
getdents(r0, 0xfffffffffffffffd, 0x58)

1m28.083748826s ago: executing program 0 (id=935):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000002000)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1})
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}}, 0x14}}, 0x80)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"eb9d8988e81b395b45bd0cba3a8483077474dd3dd0c47bc253e5f8e8b4292aac2796001366e4c71f9f35008b53e42578e610c78571ad7fd714bbf1d6fd513c82063c7b62f80247dae47c5c719fcb141465938af815fb5f2695978afaf02bc89e649ba154d25cd9128fa00c4655085aaa52d42552f2b09df1d9bb0e372396aa8bcb1358797975d0f0609075102a2744764709002ff83c2341d3365f98a022a3adb2984c475f59af4129dbfd9a93d73ebd4e3cb4f1e4ab97495820ac3a2091f1a472e09074da690ef8a1271c19fa97898e3be7b5000d91bbc78a0e2415b557a6ac425159469271188e5adbb631ee32f1c01b8aab308dad8548079f00eb770e058ec6480cb78a47d832ff6f7d23348118d2a8a317c1d0cb05299e4541dd566ca584cbe7508ab24fa6fdd1e5fd301a57f7b01f55543d5289911b1040011acfa9247e9f2b08635fc066b8725bc114c59fdbdd3a35903b19613e3f29ce4457a59c64567f1fea4a17185e7edde0ccc64cf9d0086ef292c318c8a56b28406cdcfd091245a8e0fa721e11aa064b642d9afbcf3dd23c79c466e634e84e0ccf866e8bcc03a6e6ac823fe6056a7aa6aa8622969e263eff3fb74ea46e0bd6a1ce08244e39f59df03e6cdd7fdc2811c4c1719099a56f1c5e07ab0e7d6a07192dcc0d03f6bcbc2323f4606b52950e3ebf54b379a97bb4c0c27db1e0824068a353aa025258f16eec23148997eb0f14ade49c1216cfd2ce324f289ddcf0ff8247984c4567692e9b64c2fbbc1272a3e532122e65f97cec13564ece0b7029c2c34ca9c7a9557d487336d849513afaaaa6c1a0388e72dba891750cebb09747cdadd4228b66ce5972f9c67bc4bd795753bc83fd36897edb29a4d9ca5c5cbb0e92dab163d6c980ef76a5f79f6f05f9a7e0e745a129cbbfc12281f9566f656b1f9de9bec23d3a2bec3852430fb7dcbc692e0fcccb69402639a0e1693a70a5983a462b001131a4774e5e3d8bd9a19389ab7e819a77ae145d2ca8e4477215905e8e1dce02ccd3f8942744313a30b68025844e5a68a9a2dd382a3a32042c232459a776d6e1741eec549b4d2867580fc511393281917f5145952997aebd29d8056d4282586ccd91d633a7c1764012e09d7746fef7246eb56640fef2bdd74b78fbcaa32e6b6f4136431a51229956a8a8149de241511e2760f997886e098fc1847adee880f3ae61a1240581e13758be18a33bde20ffad43a0ae9a4f7144a16993858e445c7c5bc83e13dfeb81ae6fc11be70e0ab490ab976106e3d8e627c44df3ac588239fbf885a2439b69e5a121245fd3c42c86555b198452ffcac7168d789ff3f61da76d389b0fc1e6c39df6608824babcb098c509e0def7f1701e67ab7d6c64ab5150eaaadbe38a11673fee8d286d88ae6f39241966fa6df46464166db4f41d67596d9d67382f1069042ee118b0af630a5e12f07d8cfa4183f2c28b27a6105d69804508235f877693cf1f359ffb95b585496b941c2e3f2170d916ded547beee1ae24e1724f17cb85cfcba15e1cbabe44e60b16c2ac4f4afed9506e25bd35a8897de4ae4a4c929b25289f75b2da34a1b65edfc2dd74b74b8f3d74f1387805cf5933a616798fa890718c9ebd6079c26a5f732298f8e8a2e378fccffd7fc3ecc8b10d1cd013a7340b7842c4b1dff0e9f2ea70329fb9c3013151f43fa5bad0dd5f61a92da5a78e68052ab72c38d915136184a49da2a6b6e248e9d106777c1bde4dfc94f8a4a29dfa95fe7681516061a83650c8b39968bd3a7a34b34e93844fc8ed8a84b59f7e657a025592db7a7252491b18695693a68d178564909e5971b8956479e518a1202af31718fe22f4e65c93a9a08e802e07fd274e5a23cb466a7b48cf344a2176d61ef27d348b40a510e8cc8e372693cb6c1c7cfb4e3972fbe4204f0048bc53793e049b0484b3bbe6d3b6a986bc2c95fdb63f60ebfdbea38b48405a8b85ee84568fb6921a75fb54e9026671ed43b923286d64d60c9060a86c2217f98f049259d99d0c5ce4889b165557fa4536a6d5222eb289a6dd83ff235dbde83897d1627f6d85c3e551997007b5219c5b010d53b92879e19951ba21db665f724d7c45da7c635f3a982047a1ebed638dca4f3e97ee036e18ae68d37cd8fda64fac7dce84587311b2e17420c31d50a5da4d052052ea1b4116aa9a0ef20434420c51887cf2d03a1d578925f19e700451f404413f7371693f2e0a622e1ae49daccd12de5ec59d2acbb635d854ce22a418f143c3a637dc731d45c5d1c38adcb770602a92f3de006a4eef1d838b91178476ff168fa639eb5b420da8a343a0ec6e6144cc802eb08d1833beb6ca18ffa1fd7b019bb2d02c97d62963a8a9180769323d8e45639b68aaa56775306bdc6c020678ecd64e751fb92c85dc474bbde8f94c029d92dea48b837c7b5524dc061374e637e299fef6b1355ce23d0f649f0e61402d375bb444a37a22a812821ade48df3be021ecacff6873654bf21e111d079f5bb140568b5c4b77f1aaa22416ab983eb8fe903286fdf114024622f443686078c8318329aebe5df891a9a91bd5512b3aed59557de62d1a9586e10fa07306f815fc10204200d6282813f729c3f8e8af7c450f55037397125ef5e806306a9ba351a6f3e1dede486bc75ae897581b649ef55f19c97b330c5a61a6f76674722429ea894d1c638074cedb0b863514c19166a5c2baf4ee6d1eaeee85155afd10fdd4361c78b3c0d00d01a37df52be0ed3458bc7a1afa0c8c9a2f3406b1e4607e955f57f626c7ed2efac888e72110e0dc0f79cfdd02bc245f0b3a7939bbdc31229ab99ecd36927e1fdd7b17b5037457856fe3f773b6af24af6d67cbd7978e2f127b86b50153e9b0f13f4942006198d6a6ac335cf7560676fd607e6a3a7b518fa815def5eca1372813f97d6ea9d62b848db37015aa648c8426f26776728332fad5f72c919a6f96d1c3b0a97df4c1892ff814e2e57979da7f7098c42b963ca5929765b1ad2284abd2c1f7ef9570b8c97a513da8f4078130e70f31327708619331571d78d3475b6b41e835dc948f0e809c6610942e4c7d515d9303e6281a3980a742dc85f4528fddc34d22bbd9aa4b4b2351df10884f1dbc877717d984b0b3bafda47801103cda459d006a9a9982f5cf67fc0face3def54d579358e623dae4d9b4248cebd82111cf4c431f8852bcf862a65a124ca709cec2454e4c65514128bc2d6f8cc92624f20c02b008081d334cc7fa0b8e8d9d3dfe2a283600e875c7ecb8e4949f958f6f84f8e52b78e3eae58fa02d85bb8ac52ddf3b262ec52eca50d6d590139c24c042e1c040d8da6c9a2e95055dc91ed65881bc4c43c13c240eb9f6ef9a4cffb44e96c9c055cbbc10b5d63850bc3e2fa46aabb2c732c0c31bf1dba3ad1ce2b1b671259aaaef955d39c420b18d78828248563cacd9417ef2cb63859ebef3936e26803e7ccf5233cb3c0a2f440d898ff258cb03a783415a6f81b1b1a07bb5cef530c78c30ec9adfd2df246d581bc662336d5029f65588995adc3190e97a418c15fa3620eb68cdcc6233f1aa0009ab558b22ae9316003c6af1fe0d7807e583943e48692fcd9fa2525fefe3467d099951c83943312f0e889cef4c1ecf17ad469f5ad683b405eb59230e89df96e8dd94e41e5f62822ba957e065f22d96b1c0c2b83f5a57fbb04d5af399ece3ddd52e5afff783a876e2066fbe30963421acb427c95fd3e7bc6b7d3d731a7e347052cd9636805cab94ad40bdb63a264b3127c7f8d21d25810bd2eadb2c3e31b5c807283ad062d750e5b21ec1e20cc3ac5753ac536faf23e2b5c37e9d021870b0350ecea7187643a00a08ec3ffaf7e6c236c4d694ff41af7b5fbf8a554949f5026a8b2adcf377f94848cd17fbcc0249e796008962d3db16b4bb85483dbe75ef5b301175e052203436b38248fbd1a28a5e2b3ab75c77eb8f853e60e95d5f16cb9858b33b3752b4c69776ec4506ba2bd490a6f17aae1152d8762d86cc0ef32788cf149e8fa9464c3ea588f15d8eb2092254c470acf221cfe680845167fc6778b8af1609681ae4f4e65426ce059b9768eb2e0c89f29de7b91db89a72e4c677c65dd980f9a6bfa656ed01d5e683a33e6b80462139476225cc0fcc309d926c36aa250bdad1454db46cd2536046f909a05b08829cad973bc705231a32a5f2e7ac5e96e2315cb175724607a5af02073fc936272aa724990ba6dcc4ea79da6eb7ec0bbdbd0a878114c493bc4b3e26e24b18553bd0a617981d8ea9e91ed2e3bcbd48f5d67aa913790bf52c31435184d6c73079e964e9ef05194e88b072b372d48cb70dbca99238c4474ed0b6932cc1b233bce0c87d48d478fa3c937c42c8637714e9995041f8b2b7dce17eb2f26c730f5559cf5919b88ee00bbf40726f90e1cf29e0f5fadc64de1bf28d447e8996948dc2fe658620b6fb8cfc592d5e0621b66057eb774c31ab16235456210c5ee7990b71b5b3d51cf13e30361a8cdaa107b13fa6a1c84b172efece3b70753e81e7e9e572d228c7bbcdaba40d8d0eb4de13bda1fca38d3ed667bb0897335aadaa0c3905a1283292c89ef5747ad5462db4011c3f8a4a476aa78d74badf8bf3785997ba9824e21256eed4c2805331fa24c81e28f21e895a0b03e7de52787065faded0f1b59eba1c922dce5576e8ab190ef716c021d8dfa13a1e73b8962d9f9238ba8b9fa2cf84addfe37e78cdb398ee4c0642a716fb8db1e332f873a16c6225ebc51fe05f33273380e64272159bb808336e87b4b0cddb492a992b2e7f423bf37725e1d9dda0dc6b4426172c2a93ee1cc9acea7fe1ece9ba0ddee3e232efb11fc4d4e266cd2a83c017e32315c434b73e9729d5a3a7fe993e72f9bb70d78672493263a2653fe1bfd42d1f97cbf0fffb6705b2e35fe65ceb9ad7ddc525b689027352db9c194939559ebb3b505a58e0404103482ce10f7d67761c13b235b52ad1b25803aa94cf7df5ca8d8bd0d4e6d0ab8bcfb8f72a26cecf071e31c02a1034c0144d850f1732926981dca7a18f0a197da3703d74d3e951ed510ed38a8fcae93eb2bebdf92e0feb0f06dbe1331cb43cfa548ca294ea479ecb325aea7aff8d924745298a3d34f23f40b992995a908130165b44beb8cc9da8390dae2a09cb7e1ac7e95b84f35e7be147b4be04883047cdcaec662aa8b66694ae8914e65edb63696494bff66eacb3aecdb23746a36cec7f832d628d38698ba6b3d4020095eae2a5b36a21039ce50901cdf2582b88ab8c86c6f4a8c345618f10d7aab081edb3ce8e4479e0ac476112d4b261cb8ed952221fb660898491fc7134b091c0565173bebf014caffae12852b5314c930d41e27bcfa7bc536fc4da3b714630e1ac7aaf006755da1da792dcad08f796c2ebdd6427ad3374e25132a103d62f98584462aa164d742b4d7c668a85119480199dd90f0a903f6c76cfca28b84a2279ae6965fdec403072be146d2d1f39b122113fbcfb52cf8c7c1d47a32f437b895bcd7a67ad08f196112a15b07e5b57b4db2b7c7f70a42923d6d0625515375b9281d331bd1e5dd75ff3a6e1ca5b75eb328e6c935f2c8f0c57b0aaf2ad85983160b0e53fca44d95e956ef2726d97acb2da34ca4482bb86aabde6d8b8b85da2e44ae89b8359f7edb88a3e2a9aad23125b8c2bd0c7be0847ac9b1e16db2c395e0c9eb040af710c31d32f7b356bfb6f1704f4d884f37c15b865eda87685ae8926fbf3a4465e7e2968ee18ea1ff5d4f4cbfb55634089687b9f0bce5b9cf10779299893cf64980193fd3a1096507e7a8be", 0x1000}}, 0x1006)
io_uring_enter(r1, 0x27e2, 0x0, 0x7, 0x0, 0x0)

1m27.831530312s ago: executing program 0 (id=936):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000001680)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

1m27.759338652s ago: executing program 32 (id=936):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000001680)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

4.026723301s ago: executing program 3 (id=1877):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'wlan1\x00', &(0x7f0000000340)=@ethtool_ts_info})

4.026434542s ago: executing program 3 (id=1878):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000066c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5525, &(0x7f0000018200)="$eJzs3L1vG/UfB/CPk6bPv/4ixMDWkyqkRKqtOk0q2AK04kGkigoMTODYjuXW9kWx44RMDIyIgZl/AoHExMjfwMDMhhhAbEgg312g4UmU2HGbvF7S+X339def+55VVfrcRQ7g1JpPfvqhFFfiQkTMRsTliGy/VGyZ1TyeiYirETHz0FYqxn8bOBsRFyPiyqh4XrNUvPXx9eG1le9f+/HLr8+dufTpF99M76qBaXs2Irpb+f5uN8+0lef9Yrw2bGfZXR4Wmb/RfVAcp3nuNjeyCru1g3m1LG+28vnp1k5/lJudWn2UrfZmNr7Vy0/YH7YO6mQfuF/bzo4bzY0s2/00y9Z+vq69/fz/tv3+IK/TKOq9l5WPweAg8/HmXjO/nq0HWdZ7g2I8r5s2mnujHI5yNaI4XdTTTiNbx8aRvurH2uvt3s5eMmxu99tpL1mpVJ+rVG+Vq9tpozloLpdr3cat5WSh1RlNKw+ate5qK01bnWalnnYXk4VWvV6uVpOF282Ndq2XVKuVm5Ub5ZXFYu968vLdt5JOI1kY5Yvt3s6g3eknm+l2kn9iMVmq3Hx+MblWTd5YW0/W7925s7b+5ju33777wtqrLxWT/rSsZGHpxtJSuXqjvFRdPEXX/0Gx6DFePxxJ6dGmn5vUOgCeIPp/YBom1/9v34uYfP8f/9j/XyjyP/T/of9/bPvfifX/n5za64cjecT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+Pbuc9eyXbm8+NLxfj/iqGniuNSRMxExC9/YTbOHqo5W9SZ+5v5c39Yw1elyCqMznGu2C5GxGqx/fz/SX8LAAAAcHJ9/v7Vj/JuPX+Zn/aCOE75TZuZy++OqV4pIubmvxtTtZnRy9NjKpb9+z4Te2Oqlt3AOj+mYvkttzPjqvavzB6K8w9FKY+ZY10OAABwLA53AsfbhQAAAHCcPpz2ApiOUhw8yjx4Fpz95f3vDwQvHDoCAAAAnkClaS8AAAAAmLis//f7fwAAAHCy5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzKzv3cqA1EcQB+NjiQfwqKck9KyQ3KSAk55hhRQJqgBNJCGqAGcksJEazweNGyYldoPba17PdJZpgR/HhGcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEt/q/Xi98/Pv9rm7PaXi3NjT/Olbd0AAADwEmyr9aJ+Mkv9t834+2boY9MvIqKMODd134/i1UnmqMmpHnh9da+GPxF1wuEzJs31JiK+Ntf/D11/CwAAAHC9NsvVPM3W08Ns6ILoU1q0Kd99y5RXREQ1+5cprTzkfcoUVv++x/EjU1q9gDXNFJaW3Ma50i5S/92Pq3bTO02RmvLx92e7dwAAoEejk6bfWQgAAAB9+j50AQyjiNutzONW4CQ1zfbe65MeAAAA8AwVQxcAAAAAdK6e/zv/DwAAAK5bOv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2r9WKzXM3b5uz27eS5GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABu2J9XHAiBMAiDvcvbkbkwVyftMGhMlfryd0YMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDqevQ/ya8xNc4kc6+NpeeRZO3U2Do19s6Now/GZz8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjZn9sUAEEgDINb2de/8P6HjRf0DBHMgPCwi4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/cM5Zxap2xJZ6qapkm9ox7VR1ZJc6sElcu9PFg6x/+CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAl537eY2jigMA/mZmZ5NWxTXKHiJiwYNebLqtrb2JByV48E8QQrqtsVt/tDnYUoRcvEnOvYgeRQQl3vo/9NxCLvXWwx4qeK7Mr2SS5rAiO7PJfj7w5n1nGOZ93yyEfPe9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhg/OF+nGSHXhHH5bWHT++uZ/2jQ33m/vbuctayOGoy6ePhjfpJ1K+dLDafDAAAAPMhqer7EMLjdGc16+NeXv+n1T1Zzf/TS0Vc1fOH6/6qr2r/rP35x5PX9gbqFeNkD726MRqeez6VzvRm2YbdyW579vIEN3XyN59/95LkH0j8ydar4zR/n9EPDx581M3Dhf+ZMgAwNWervgyq34eyftBmYgDMjU6t8K7q/6TXbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATRhvhReqOAohLHf248yjp3fXj+rvb+8uV+3SvXvb9Wdmj0hDCFc3RsNzYbHB2cy2W7fvXF8bjYY3mw/eDCG0NfoH5fSvfzbBzSFMKY0zLb35OQvi8sOelXyOR9DiDyUAAE6ktGxZXf843VnNrkVLITz7+WD9/3YtDhPW/08+v/SwPla9/h80NsPZt7J54+uVW7fvvLtxY+3a8Nrwy/fOD94fXLh88eLllfy7kuLYdpoAAAAcY92y1ev/eOn59f/TtThMWP9/8+Pgu/pYifr/SPuLfm1nAgAAMN9eOfPP39ER16NuN3y7trl5c1Ac987PF8cWUv3PFspWr/+TpbazAgAAAJow3ooOrP9fqcVhwvX/F395/bf6M5MQwqly/f/s+lejK81NZ6ZN5Y+HF8qH21kAAABAWY+fOrT+n+b7/+O9LQ9xCOGdt4q4/DeAE9X/ycff/1ofq77//0JzU5xJcb94H3nfD6HTbzsjAAAATrLFvPXy+v+vdGf1i99Pf9q1/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgaf8GAAD//xMkPFk=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x6}}, 0x18)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f514, &(0x7f0000000100)={0x0, 0xc158, 0x1})

3.543792603s ago: executing program 3 (id=1888):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

1.237140045s ago: executing program 3 (id=1912):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

1.000659487s ago: executing program 1 (id=1914):
r0 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x40000, 0x10100, 0x0, 0x33a}, &(0x7f0000000600)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

947.46179ms ago: executing program 2 (id=1915):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000600)="001a0000000000", 0x7)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r2, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000001640)=""/142, 0x8e}}, 0x10)

947.238079ms ago: executing program 1 (id=1916):
mount(&(0x7f0000000180)=@nullb, &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000800)='minix\x00', 0x200810, 0x0)

946.956755ms ago: executing program 3 (id=1917):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4242, 0x5c)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0)

901.258172ms ago: executing program 1 (id=1918):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x2, 0x1, 0x6, 0x101, 0x5}, @window={0x3, 0x3, 0xec}]}}}}}}}}, 0x0)

795.899857ms ago: executing program 1 (id=1919):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x28, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="80"}, @NL80211_ATTR_IE={0x4}]}, 0x28}}, 0x4804)

795.44162ms ago: executing program 2 (id=1920):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

794.423121ms ago: executing program 1 (id=1921):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES16=0x0], 0xfb, 0x54fe, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x7f)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x103042, 0xa0)
writev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="9965d739", 0x4}], 0x1)

676.450872ms ago: executing program 2 (id=1922):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@umask={'umask', 0x3d, 0x3}}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@discard}, {@fmask={'fmask', 0x3d, 0x8}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1533, &(0x7f00000009c0)="$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")

557.228249ms ago: executing program 2 (id=1923):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1d, 0x0, 0x2000000)

467.208435ms ago: executing program 2 (id=1924):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000240)={0xe88df0c4fd85dcf, 0x0})

397.444823ms ago: executing program 2 (id=1925):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0xc54, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, 0x59d5}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31687172d956b141e3f4e87e6ab615ea379a12c5a6f5c6e7b3ab38f5f3570909f89f3e47ec97b12cc30a1c48cd0300fd5dfad4624800"}, 0xd8)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="0000101d00", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0xe7}}}}}}, 0x0)

98.642367ms ago: executing program 1 (id=1926):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000200)=0xc775, 0x4)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000100)=0x6, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0)

0s ago: executing program 3 (id=1927):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f00000003c0)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)

kernel console output (not intermixed with test programs):

eption: true
[  165.258419][ T8808] vivid-004: RDS Program Type: 0 inactive
[  165.262048][ T8808] vivid-004: RDS PS Name:  inactive
[  165.264116][ T8808] vivid-004: RDS Radio Text:  inactive
[  165.266241][ T8808] vivid-004: RDS Traffic Announcement: false inactive
[  165.268589][ T8808] vivid-004: RDS Traffic Program: false inactive
[  165.271187][ T8808] vivid-004: RDS Music: false inactive
[  165.273263][ T8808] vivid-004: ==================  END STATUS  ==================
[  165.494060][ T8818] loop2: detected capacity change from 0 to 2048
[  165.510928][ T8818] syz.2.1130: attempt to access beyond end of device
[  165.510928][ T8818] loop2: rw=524288, sector=9007199254741068, nr_sectors = 2 limit=2048
[  165.526172][ T8819] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  165.532090][ T8818] NILFS (loop2): the device already has a read/write mount.
[  165.706542][ T8829] loop2: detected capacity change from 0 to 512
[  165.722869][ T8829] EXT4-fs: Ignoring removed mblk_io_submit option
[  165.731708][ T8829] EXT4-fs: Ignoring removed mblk_io_submit option
[  165.745865][ T8829] EXT4-fs (loop2): Test dummy encryption mode enabled
[  165.748211][ T8829] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  165.758933][ T8829] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  165.768574][ T8829] EXT4-fs (loop2): 1 truncate cleaned up
[  165.772633][ T8829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.820622][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.151941][ T8849] loop3: detected capacity change from 0 to 4096
[  166.170871][ T8849] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  166.193735][ T8845] loop2: detected capacity change from 0 to 32768
[  166.196720][ T8845] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1142 (8845)
[  166.210099][ T8845] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  166.213869][ T8845] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  166.230736][ T8845] BTRFS info (device loop2): using free-space-tree
[  166.345366][ T8845] BTRFS info (device loop2): rebuilding free space tree
[  166.427229][ T5847] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  166.472872][ T8867] [U] .
[  166.616771][ T8879] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1148'.
[  166.620971][ T8877] loop1: detected capacity change from 0 to 3
[  166.625972][ T8877] syz.1.1150: attempt to access beyond end of device
[  166.625972][ T8877] loop1: rw=2048, sector=0, nr_sectors = 8 limit=3
[  166.653010][ T8877] SQUASHFS error: Failed to read block 0x0: -5
[  166.655596][ T8877] unable to read squashfs_super_block
[  166.696084][ T8875] loop3: detected capacity change from 0 to 8192
[  166.752576][ T8881] loop2: detected capacity change from 0 to 4096
[  166.759204][ T8881] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  167.277357][ T8890] ntfs3(loop2): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  167.288942][ T8890] ntfs3(loop2): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  167.773286][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'.
[  167.782225][ T8911] netlink: 'syz.2.1163': attribute type 30 has an invalid length.
[  167.803745][ T5860] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  167.803860][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'.
[  167.806886][ T5860] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  167.823231][ T8911] netlink: 'syz.2.1163': attribute type 30 has an invalid length.
[  167.845948][ T5860] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  167.858641][ T5860] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  167.882848][ T8905] loop3: detected capacity change from 0 to 32768
[  167.895649][ T8905] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1160 (8905)
[  167.916069][ T8915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1165'.
[  167.924129][ T8905] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  167.935932][ T8905] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  167.939325][ T8918] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1166'.
[  167.949918][ T8915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1165'.
[  167.958827][ T8905] BTRFS info (device loop3): using free-space-tree
[  167.966197][ T8915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1165'.
[  168.141757][ T8258] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  168.444932][ T8951] loop3: detected capacity change from 0 to 256
[  168.466009][ T8951] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x200c26b4, utbl_chksum : 0xe619d30d)
[  168.537818][ T8955] loop1: detected capacity change from 0 to 512
[  168.552969][ T8955] EXT4-fs: inline encryption not supported
[  168.565305][ T8955] EXT4-fs: Ignoring removed i_version option
[  168.585644][ T8955] EXT4-fs (loop1): 1 orphan inode deleted
[  168.591501][ T8955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.592789][ T8957] loop3: detected capacity change from 0 to 4096
[  168.607726][ T8957] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  168.618949][ T8957] ntfs3(loop3): It is recommened to use chkdsk.
[  168.627315][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.710123][ T8963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1180'.
[  168.782898][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'.
[  168.805456][ T5911] IPVS: starting estimator thread 0...
[  168.839005][ T8969] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  168.895999][ T8976] loop3: detected capacity change from 0 to 128
[  168.900797][ T8971] IPVS: using max 38 ests per chain, 91200 per kthread
[  168.912199][ T8976] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  168.923568][ T8976] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.958120][ T8258] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  168.999010][ T8981] kAFS: No cell specified
[  169.155303][ T8992] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1192'.
[  169.511116][ T9003] loop1: detected capacity change from 0 to 32768
[  169.518173][ T9003] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1196 (9003)
[  169.527576][ T9003] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  169.538854][ T9003] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  169.542081][ T9003] BTRFS info (device loop1): using free-space-tree
[  169.639773][ T5856] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  170.808843][ T9042] loop1: detected capacity change from 0 to 4096
[  170.871316][ T4350] ntfs3(loop1): ino=5, mi_enum_attr
[  171.402851][ T9061] loop2: detected capacity change from 0 to 32768
[  171.406244][ T9075] loop1: detected capacity change from 0 to 1024
[  171.428888][ T9061] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1215 (9061)
[  171.438631][ T9075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.449996][ T9061] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  171.454067][ T9061] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  171.457587][ T9061] BTRFS info (device loop2): using free-space-tree
[  171.467819][ T9075] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.588565][ T5847] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  171.807150][ T9099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1224'.
[  171.866199][ T9101] Driver unsupported XDP return value 0 on prog  (id 99) dev N/A, expect packet loss!
[  172.153366][ T9103] loop2: detected capacity change from 0 to 32768
[  172.166434][ T9103] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  172.187878][ T9103] XFS (loop2): Ending clean mount
[  172.219198][ T5847] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  172.292557][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.441245][ T9119] netlink: 'syz.1.1230': attribute type 84 has an invalid length.
[  172.648892][   T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  172.798970][   T24] usb 3-1: Using ep0 maxpacket: 8
[  172.803166][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.807034][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  172.810660][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  172.814373][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  172.817997][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  172.826015][   T24] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8
[  172.829964][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.832971][   T24] usb 3-1: Product: syz
[  172.834550][   T24] usb 3-1: Manufacturer: syz
[  172.836372][   T24] usb 3-1: SerialNumber: syz
[  172.841146][   T24] usb 3-1: config 0 descriptor??
[  172.846582][   T24] redrat3 3-1:0.0: Couldn't find all endpoints
[  173.053661][   T24] usb 3-1: USB disconnect, device number 22
[  173.269871][ T9129] loop3: detected capacity change from 0 to 40427
[  173.286507][ T9129] F2FS-fs (loop3): invalid crc value
[  173.334101][ T9129] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  173.337128][ T9129] F2FS-fs (loop3): Start checkpoint disabled!
[  173.340766][ T9129] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  173.956601][ T9151] tmpfs: User quota inode hardlimit too large.
[  174.146690][ T9149] loop1: detected capacity change from 0 to 32768
[  174.167513][ T9149] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1242 (9149)
[  174.243035][ T9149] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  174.256499][ T9149] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  174.270218][ T9149] BTRFS info (device loop1): using free-space-tree
[  174.537607][ T1088] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0
[  174.568250][ T9149] BTRFS error (device loop1): failed to load root extent
[  174.573356][ T1090] BTRFS warning (device loop1 state C): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0
[  174.595766][ T9149] BTRFS error (device loop1 state C): failed to load root free space
[  174.600795][ T1090] BTRFS warning (device loop1 state C): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xceda3bc49047826ec4468b88ec74a14d6cd3232f25b2c41331ed48993507590e level 0
[  174.637714][   T36] BTRFS warning (device loop1 state C): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0
[  174.731222][ T5856] BTRFS info (device loop1 state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  175.237657][ T1088] kworker/u10:3: attempt to access beyond end of device
[  175.237657][ T1088] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  175.259038][ T1088] CPU: 1 UID: 0 PID: 1088 Comm: kworker/u10:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  175.259055][ T1088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.259061][ T1088] Workqueue: writeback wb_workfn (flush-7:3)
[  175.259076][ T1088] Call Trace:
[  175.259080][ T1088]  <TASK>
[  175.259084][ T1088]  dump_stack_lvl+0x189/0x250
[  175.259097][ T1088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.259106][ T1088]  ? __pfx_queue_work_on+0x10/0x10
[  175.259115][ T1088]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  175.259125][ T1088]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  175.259139][ T1088]  f2fs_handle_critical_error+0x37c/0x540
[  175.259153][ T1088]  f2fs_write_end_io+0x886/0xb60
[  175.259169][ T1088]  __submit_merged_bio+0x27a/0x6a0
[  175.259182][ T1088]  __submit_merged_write_cond+0x255/0x530
[  175.259195][ T1088]  f2fs_write_data_pages+0x261d/0x3000
[  175.259222][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  175.259239][ T1088]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  175.259284][ T1088]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  175.259302][ T1088]  ? trace_f2fs_writepages+0x7f/0x200
[  175.259313][ T1088]  ? f2fs_write_node_pages+0x478/0x6e0
[  175.259325][ T1088]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  175.259342][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  175.259353][ T1088]  do_writepages+0x32e/0x550
[  175.259367][ T1088]  ? reacquire_held_locks+0x127/0x1d0
[  175.259374][ T1088]  ? writeback_sb_inodes+0x384/0x1010
[  175.259388][ T1088]  __writeback_single_inode+0x145/0xff0
[  175.259398][ T1088]  ? do_raw_spin_unlock+0x4d/0x240
[  175.259409][ T1088]  writeback_sb_inodes+0x6c7/0x1010
[  175.259430][ T1088]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  175.259458][ T1088]  ? rcu_is_watching+0x15/0xb0
[  175.259470][ T1088]  wb_writeback+0x43b/0xaf0
[  175.259483][ T1088]  ? queue_io+0x3c1/0x590
[  175.259499][ T1088]  ? __pfx_wb_writeback+0x10/0x10
[  175.259513][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  175.259524][ T1088]  wb_workfn+0x409/0xef0
[  175.259539][ T1088]  ? __pfx_wb_workfn+0x10/0x10
[  175.259549][ T1088]  ? __lock_acquire+0xab9/0xd20
[  175.259564][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  175.259575][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  175.259584][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  175.259590][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  175.259598][ T1088]  process_scheduled_works+0xae1/0x17b0
[  175.259619][ T1088]  ? __pfx_process_scheduled_works+0x10/0x10
[  175.259634][ T1088]  worker_thread+0x8a0/0xda0
[  175.259655][ T1088]  kthread+0x711/0x8a0
[  175.259666][ T1088]  ? __pfx_worker_thread+0x10/0x10
[  175.259673][ T1088]  ? __pfx_kthread+0x10/0x10
[  175.259683][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  175.259692][ T1088]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.259701][ T1088]  ? __pfx_kthread+0x10/0x10
[  175.259710][ T1088]  ret_from_fork+0x3fc/0x770
[  175.259720][ T1088]  ? __pfx_ret_from_fork+0x10/0x10
[  175.259731][ T1088]  ? __switch_to_asm+0x39/0x70
[  175.259739][ T1088]  ? __switch_to_asm+0x33/0x70
[  175.259748][ T1088]  ? __pfx_kthread+0x10/0x10
[  175.259757][ T1088]  ret_from_fork_asm+0x1a/0x30
[  175.259774][ T1088]  </TASK>
[  175.259778][ T1088] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  175.272103][ T9181] loop2: detected capacity change from 0 to 32768
[  175.399843][ T9181] XFS: noattr2 mount option is deprecated.
[  175.402340][ T9181] XFS (loop2): attr2 and noattr2 cannot both be specified.
[  175.560820][ T9196] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  175.571627][ T9196] CIFS mount error: No usable UNC path provided in device string!
[  175.571627][ T9196] 
[  175.574842][ T9196] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  175.637700][ T9204] loop2: detected capacity change from 0 to 8
[  175.660216][ T9204] SQUASHFS error: lzo decompression failed, data probably corrupt
[  175.666377][ T9204] SQUASHFS error: Failed to read block 0x91: -5
[  175.669205][ T9204] SQUASHFS error: Unable to read metadata cache entry [8f]
[  175.671770][ T9204] SQUASHFS error: Unable to read inode 0x11f
[  175.784903][ T9200] loop1: detected capacity change from 0 to 32768
[  175.802996][ T9200] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  175.809013][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  175.825632][ T9200] XFS (loop1): Ending clean mount
[  175.829956][ T9200] XFS (loop1): Quotacheck needed: Please wait.
[  175.861197][ T9200] XFS (loop1): Quotacheck: Done.
[  175.888966][ T5856] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  175.970917][   T24] usb 4-1: Using ep0 maxpacket: 32
[  175.983962][   T24] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  175.987179][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.000529][   T24] usb 4-1: Product: syz
[  176.001928][   T24] usb 4-1: Manufacturer: syz
[  176.009076][   T24] usb 4-1: SerialNumber: syz
[  176.013159][   T24] usb 4-1: config 0 descriptor??
[  176.032711][   T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  176.214039][ T9227] loop1: detected capacity change from 0 to 512
[  176.280655][ T9227] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.1262: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  176.287485][ T9227] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.1262: Bad quota inode: 3, type: 0
[  176.298089][ T9227] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  176.304236][ T9227] EXT4-fs (loop1): mount failed
[  176.968811][ T5884] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  177.127081][ T5884] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  177.131651][ T5884] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[  177.142879][ T5884] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29
[  177.146397][ T5884] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  177.151715][ T5884] usb 2-1: Manufacturer: syz
[  177.153673][ T5884] usb 2-1: SerialNumber: syz
[  177.377115][ T5884] usbhid 2-1:36.0: couldn't find an input interrupt endpoint
[  177.385616][ T5884] usb 2-1: USB disconnect, device number 15
[  177.390561][ T5891] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  177.413035][   T24] gspca_ov534_9: reg_w failed -71
[  177.538897][ T5891] usb 3-1: Using ep0 maxpacket: 32
[  177.542830][ T5891] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  177.545875][ T5891] usb 3-1: config 0 has no interface number 0
[  177.552511][ T5891] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  177.556033][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.559394][ T5891] usb 3-1: Product: syz
[  177.561075][ T5891] usb 3-1: Manufacturer: syz
[  177.563116][ T5891] usb 3-1: SerialNumber: syz
[  177.567472][ T5891] usb 3-1: config 0 descriptor??
[  177.573092][ T5891] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  177.719417][   T24] gspca_ov534_9: Unknown sensor 0000
[  177.719566][   T24] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  177.729977][   T24] usb 4-1: USB disconnect, device number 3
[  177.778102][ T5891] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  177.785343][ T5891] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  178.025613][ T9246] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776
[  178.030887][ T9246] PKCS7: Only support pkcs7_signedData type
[  178.165382][ T9256] loop3: detected capacity change from 0 to 512
[  178.187825][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  178.189002][  T791] usb 3-1: USB disconnect, device number 23
[  178.194596][ T9256] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  178.197838][ T9256] EXT4-fs (loop3): orphan cleanup on readonly fs
[  178.212068][  T791] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  178.221034][ T9256] __quota_error: 1 callbacks suppressed
[  178.221047][ T9256] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  178.229324][ T9256] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  178.243824][  T791] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  178.250794][  T791] quatech2 3-1:0.51: device disconnected
[  178.252418][ T9256] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  178.266260][ T9256] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1278: bg 0: block 40: padding at end of block bitmap is not set
[  178.273259][ T9256] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  178.286613][ T9256] EXT4-fs (loop3): 1 truncate cleaned up
[  178.300619][ T9256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  178.324905][ T9261] loop1: detected capacity change from 0 to 2048
[  178.351152][ T8258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.366484][ T9261] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  178.379792][ T9261] UDF-fs: Scanning with blocksize 512 failed
[  178.394605][ T9261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.454277][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'.
[  178.841138][ T9281] loop2: detected capacity change from 0 to 256
[  178.844295][ T9281] exfat: Deprecated parameter 'utf8'
[  178.846849][ T9281] exfat: Deprecated parameter 'namecase'
[  178.848651][ T9281] exfat: Deprecated parameter 'utf8'
[  178.866133][ T9281] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  178.887756][ T9269] loop3: detected capacity change from 0 to 40427
[  178.961438][ T9269] F2FS-fs (loop3): build fault injection rate: 771
[  178.982674][ T9269] F2FS-fs (loop3): invalid crc value
[  179.062088][ T9269] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  179.304771][ T9269] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  179.412887][ T8258] syz-executor: attempt to access beyond end of device
[  179.412887][ T8258] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  179.416201][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1295'.
[  179.424813][ T8258] CPU: 0 UID: 0 PID: 8258 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  179.424836][ T8258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.424846][ T8258] Call Trace:
[  179.424852][ T8258]  <TASK>
[  179.424859][ T8258]  dump_stack_lvl+0x189/0x250
[  179.424884][ T8258]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.424900][ T8258]  ? __pfx_queue_work_on+0x10/0x10
[  179.424913][ T8258]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  179.424929][ T8258]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  179.424955][ T8258]  f2fs_handle_critical_error+0x37c/0x540
[  179.424979][ T8258]  f2fs_write_end_io+0x886/0xb60
[  179.425007][ T8258]  __submit_merged_bio+0x27a/0x6a0
[  179.425061][ T8258]  __submit_merged_write_cond+0x255/0x530
[  179.425085][ T8258]  f2fs_write_data_pages+0x261d/0x3000
[  179.425130][ T8258]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  179.425182][ T8258]  ? check_path+0x21/0x40
[  179.425195][ T8258]  ? check_noncircular+0xe0/0x160
[  179.425246][ T8258]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  179.425268][ T8258]  do_writepages+0x32e/0x550
[  179.425295][ T8258]  ? do_raw_spin_unlock+0x4d/0x240
[  179.425314][ T8258]  filemap_fdatawrite+0x199/0x240
[  179.425333][ T8258]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  179.425384][ T8258]  ? do_raw_spin_unlock+0x4d/0x240
[  179.425404][ T8258]  f2fs_sync_dirty_inodes+0x31f/0x830
[  179.425436][ T8258]  f2fs_write_checkpoint+0x95a/0x1df0
[  179.425469][ T8258]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  179.425513][ T8258]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  179.425527][ T8258]  ? kfree+0x18e/0x440
[  179.425544][ T8258]  ? kill_f2fs_super+0x298/0x6c0
[  179.425561][ T8258]  kill_f2fs_super+0x2c3/0x6c0
[  179.425580][ T8258]  ? __pfx_kill_f2fs_super+0x10/0x10
[  179.425593][ T8258]  ? radix_tree_delete_item+0x2b6/0x400
[  179.425616][ T8258]  ? shrinker_free+0x2ce/0x3e0
[  179.425633][ T8258]  deactivate_locked_super+0xbc/0x130
[  179.425651][ T8258]  cleanup_mnt+0x425/0x4c0
[  179.425666][ T8258]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.425704][ T8258]  task_work_run+0x1d4/0x260
[  179.425725][ T8258]  ? __pfx_task_work_run+0x10/0x10
[  179.425741][ T8258]  ? __x64_sys_umount+0x122/0x160
[  179.425763][ T8258]  ? exit_to_user_mode_loop+0x40/0x110
[  179.425785][ T8258]  exit_to_user_mode_loop+0xec/0x110
[  179.425804][ T8258]  do_syscall_64+0x2bd/0x3b0
[  179.425821][ T8258]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.425837][ T8258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.425850][ T8258]  ? exc_page_fault+0x9f/0xf0
[  179.425869][ T8258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.425883][ T8258] RIP: 0033:0x7f142ef8ff17
[  179.425897][ T8258] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  179.425908][ T8258] RSP: 002b:00007fff902ae898 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  179.425923][ T8258] RAX: 0000000000000000 RBX: 00007f142f011c05 RCX: 00007f142ef8ff17
[  179.425931][ T8258] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff902ae950
[  179.425940][ T8258] RBP: 00007fff902ae950 R08: 0000000000000000 R09: 0000000000000000
[  179.425948][ T8258] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff902af9e0
[  179.425956][ T8258] R13: 00007f142f011c05 R14: 000000000002bc35 R15: 00007fff902afa20
[  179.425979][ T8258]  </TASK>
[  179.427866][ T8258] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  179.622069][ T9300] loop2: detected capacity change from 0 to 4096
[  179.643044][ T9300] NILFS (loop2): invalid segment: Checksum error in segment payload
[  179.646410][ T9300] NILFS (loop2): trying rollback from an earlier position
[  179.660542][ T9300] NILFS (loop2): recovery complete
[  179.663505][ T9301] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  179.678173][   T33] audit: type=1800 audit(1755249230.454:24): pid=9300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1298" name="file2" dev="loop2" ino=12 res=0 errno=0
[  179.923037][ T9303] loop2: detected capacity change from 0 to 8192
[  180.019542][ T9311] sctp: [Deprecated]: syz.1.1302 (pid 9311) Use of int in max_burst socket option deprecated.
[  180.019542][ T9311] Use struct sctp_assoc_value instead
[  180.051660][   T33] audit: type=1326 audit(1755249230.834:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9312 comm="syz.2.1304" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  180.063031][   T33] audit: type=1326 audit(1755249230.834:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9312 comm="syz.2.1304" exe="/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  180.081075][   T33] audit: type=1326 audit(1755249230.834:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9312 comm="syz.2.1304" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  180.458897][ T5884] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  180.574264][ T9332] loop3: detected capacity change from 0 to 512
[  180.585054][ T9332] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1312: casefold flag without casefold feature
[  180.590611][ T9332] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1312: couldn't read orphan inode 15 (err -117)
[  180.596932][ T9332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.618884][ T5884] usb 3-1: Using ep0 maxpacket: 32
[  180.623282][ T5884] usb 3-1: config 0 interface 0 has no altsetting 0
[  180.629511][ T5884] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  180.632887][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.636211][ T5884] usb 3-1: Product: syz
[  180.638056][ T5884] usb 3-1: Manufacturer: syz
[  180.641344][ T5884] usb 3-1: SerialNumber: syz
[  180.651383][ T5884] usb 3-1: config 0 descriptor??
[  180.653149][ T8258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.983915][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1319'.
[  181.078104][ T5884] gs_usb 3-1:0.0: Configuring for 2 interfaces
[  181.088177][ T9355] random: crng reseeded on system resumption
[  181.373366][ T9354] loop3: detected capacity change from 0 to 40427
[  181.387840][ T9354] F2FS-fs (loop3): invalid crc value
[  181.469541][ T9354] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  181.474401][ T9354] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  181.535883][ T9354] syz.3.1322: attempt to access beyond end of device
[  181.535883][ T9354] loop3: rw=2049, sector=77824, nr_sectors = 2568 limit=40427
[  181.541332][   T33] audit: type=1800 audit(1755249232.284:28): pid=9354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1322" name="file1" dev="loop3" ino=10 res=0 errno=0
[  181.581926][ T9354] syz.3.1322: attempt to access beyond end of device
[  181.581926][ T9354] loop3: rw=34817, sector=80392, nr_sectors = 8 limit=40427
[  181.617681][ T8258] syz-executor: attempt to access beyond end of device
[  181.617681][ T8258] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  181.624235][ T8258] CPU: 0 UID: 0 PID: 8258 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  181.624265][ T8258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.624271][ T8258] Call Trace:
[  181.624275][ T8258]  <TASK>
[  181.624279][ T8258]  dump_stack_lvl+0x189/0x250
[  181.624295][ T8258]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.624305][ T8258]  ? __pfx_queue_work_on+0x10/0x10
[  181.624313][ T8258]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  181.624324][ T8258]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  181.624339][ T8258]  f2fs_handle_critical_error+0x37c/0x540
[  181.624355][ T8258]  f2fs_write_end_io+0x886/0xb60
[  181.624372][ T8258]  __submit_merged_bio+0x27a/0x6a0
[  181.624386][ T8258]  __submit_merged_write_cond+0x255/0x530
[  181.624405][ T8258]  f2fs_write_data_pages+0x261d/0x3000
[  181.624435][ T8258]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  181.624469][ T8258]  ? __kernel_text_address+0xd/0x40
[  181.624480][ T8258]  ? unwind_get_return_address+0x4d/0x90
[  181.624489][ T8258]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  181.624509][ T8258]  ? __pfx_stack_trace_save+0x10/0x10
[  181.624523][ T8258]  ? __lock_acquire+0xab9/0xd20
[  181.624543][ T8258]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  181.624554][ T8258]  do_writepages+0x32e/0x550
[  181.624572][ T8258]  ? do_raw_spin_unlock+0x4d/0x240
[  181.624584][ T8258]  filemap_fdatawrite+0x199/0x240
[  181.624595][ T8258]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  181.624630][ T8258]  ? do_raw_spin_unlock+0x4d/0x240
[  181.624641][ T8258]  f2fs_sync_dirty_inodes+0x31f/0x830
[  181.624657][ T8258]  f2fs_write_checkpoint+0x95a/0x1df0
[  181.624678][ T8258]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  181.624710][ T8258]  ? kill_f2fs_super+0x298/0x6c0
[  181.624722][ T8258]  kill_f2fs_super+0x2c3/0x6c0
[  181.624733][ T8258]  ? __pfx_kill_f2fs_super+0x10/0x10
[  181.624739][ T8258]  ? radix_tree_delete_item+0x2b6/0x400
[  181.624754][ T8258]  ? shrinker_free+0x2ce/0x3e0
[  181.624764][ T8258]  deactivate_locked_super+0xbc/0x130
[  181.624775][ T8258]  cleanup_mnt+0x425/0x4c0
[  181.624785][ T8258]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.624797][ T8258]  task_work_run+0x1d4/0x260
[  181.624808][ T8258]  ? __pfx_task_work_run+0x10/0x10
[  181.624817][ T8258]  ? __x64_sys_umount+0x122/0x160
[  181.624830][ T8258]  ? exit_to_user_mode_loop+0x40/0x110
[  181.624843][ T8258]  exit_to_user_mode_loop+0xec/0x110
[  181.624853][ T8258]  do_syscall_64+0x2bd/0x3b0
[  181.624863][ T8258]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.624873][ T8258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.624901][ T8258]  ? exc_page_fault+0x9f/0xf0
[  181.624914][ T8258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.624922][ T8258] RIP: 0033:0x7f142ef8ff17
[  181.624931][ T8258] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  181.624938][ T8258] RSP: 002b:00007fff902ae898 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  181.624947][ T8258] RAX: 0000000000000000 RBX: 00007f142f011c05 RCX: 00007f142ef8ff17
[  181.624952][ T8258] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff902ae950
[  181.624957][ T8258] RBP: 00007fff902ae950 R08: 0000000000000000 R09: 0000000000000000
[  181.624962][ T8258] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff902af9e0
[  181.624967][ T8258] R13: 00007f142f011c05 R14: 000000000002c4dd R15: 00007fff902afa20
[  181.624981][ T8258]  </TASK>
[  181.625863][ T8258] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  182.027824][ T5884] usb 3-1: USB disconnect, device number 24
[  182.477809][ T9370] loop3: detected capacity change from 0 to 256
[  182.545176][ T9370] FAT-fs (loop3): Directory bread(block 64) failed
[  182.553125][ T9370] FAT-fs (loop3): Directory bread(block 65) failed
[  182.562940][ T9370] FAT-fs (loop3): Directory bread(block 66) failed
[  182.569496][ T9370] FAT-fs (loop3): Directory bread(block 67) failed
[  182.575433][ T9370] FAT-fs (loop3): Directory bread(block 68) failed
[  182.578143][ T9370] FAT-fs (loop3): Directory bread(block 69) failed
[  182.586629][ T9370] FAT-fs (loop3): Directory bread(block 70) failed
[  182.609030][ T9370] FAT-fs (loop3): Directory bread(block 71) failed
[  182.611589][ T9370] FAT-fs (loop3): Directory bread(block 72) failed
[  182.616148][ T9370] FAT-fs (loop3): Directory bread(block 73) failed
[  183.338498][ T9395] nbd: socks must be embedded in a SOCK_ITEM attr
[  183.506890][ T9404] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  183.513369][ T9404] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  183.755172][ T9414] overlayfs: statfs failed on './file0'
[  183.911557][ T5891] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  184.065529][ T5891] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  184.069623][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.072836][ T5891] usb 4-1: Product: syz
[  184.074644][ T5891] usb 4-1: Manufacturer: syz
[  184.076564][ T5891] usb 4-1: SerialNumber: syz
[  184.085140][ T5891] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  184.133070][   T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  184.429082][ T5891] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  184.578856][ T5891] usb 3-1: Using ep0 maxpacket: 16
[  184.591874][ T5891] usb 3-1: unable to get BOS descriptor or descriptor too short
[  184.597748][ T5891] usb 3-1: unable to read config index 0 descriptor/start: -71
[  184.600806][ T5891] usb 3-1: can't read configurations, error -71
[  185.046512][ T9439] netlink: 'syz.1.1354': attribute type 39 has an invalid length.
[  185.214328][   T33] audit: type=1326 audit(1755249235.994:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.2.1357" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  185.225258][   T33] audit: type=1326 audit(1755249236.004:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.2.1357" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  185.234153][   T33] audit: type=1326 audit(1755249236.004:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.2.1357" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  185.243106][   T33] audit: type=1326 audit(1755249236.004:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.2.1357" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  185.251930][   T33] audit: type=1326 audit(1755249236.004:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.2.1357" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  185.264000][   T33] audit: type=1326 audit(1755249236.004:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.2.1357" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  185.272910][   T33] audit: type=1326 audit(1755249236.004:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.2.1357" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  185.399973][   T24] usb 4-1: Service connection timeout for: 256
[  185.402602][   T24] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  185.455918][   T24] ath9k_htc: Failed to initialize the device
[  185.487792][   T24] usb 4-1: ath9k_htc: USB layer deinitialized
[  185.701238][ T5884] usb 4-1: USB disconnect, device number 4
[  186.163738][ T9459] x_tables: ip_tables: udp match: only valid for protocol 17
[  187.057695][ T9485] loop2: detected capacity change from 0 to 32768
[  187.063715][ T9485] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1376 (9485)
[  187.072808][ T9485] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  187.076959][ T9485] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  187.080588][ T9485] BTRFS info (device loop2): disk space caching is enabled
[  187.083484][ T9485] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  187.244598][ T9485] BTRFS info (device loop2): rebuilding free space tree
[  187.258458][ T9485] BTRFS info (device loop2): disabling free space tree
[  187.261533][ T9485] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  187.265421][ T9485] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  187.294818][ T9485] Bluetooth: MGMT ver 1.23
[  187.456601][ T9510] BTRFS info (device loop2 state M): max_inline set to 4096
[  187.498771][  T791] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  187.673597][  T791] usb 4-1: Using ep0 maxpacket: 32
[  187.691387][  T791] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  187.708915][  T791] usb 4-1: config 0 has no interface number 0
[  187.711330][  T791] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  187.715255][  T791] usb 4-1: config 0 interface 1 has no altsetting 0
[  187.748272][  T791] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  187.758778][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.779448][  T791] usb 4-1: Product: syz
[  187.781139][  T791] usb 4-1: Manufacturer: syz
[  187.782874][  T791] usb 4-1: SerialNumber: syz
[  187.790747][ T5847] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  187.801005][  T791] usb 4-1: config 0 descriptor??
[  188.020609][  T791] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  188.026956][  T791] cx231xx 4-1:0.1: Failed to read PCB config
[  188.039560][  T791] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71
[  188.056436][  T791] usb 4-1: USB disconnect, device number 5
[  188.072105][ T9516] loop1: detected capacity change from 0 to 32768
[  188.332322][   T33] audit: type=1326 audit(1755249239.114:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.2.1387" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3be738ebe9 code=0x0
[  188.877018][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1392'.
[  188.884338][ T9546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1392'.
[  189.191360][ T9554] loop3: detected capacity change from 0 to 32768
[  189.208422][ T9554] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  189.256408][ T9554] (syz.3.1396,9554,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  189.264051][ T9554] (syz.3.1396,9554,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  189.267303][ T9554] (syz.3.1396,9554,1):ocfs2_rename:1486 ERROR: status = -2
[  189.271021][ T9554] (syz.3.1396,9554,1):ocfs2_rename:1702 ERROR: status = -2
[  189.307905][ T8258] ocfs2: Unmounting device (7,3) on (node local)
[  189.468216][ T9568] loop2: detected capacity change from 0 to 512
[  189.471504][ T9568] EXT4-fs: Ignoring removed i_version option
[  189.509903][ T9568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.513546][ T9568] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.630787][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.761159][ T9584] loop3: detected capacity change from 0 to 256
[  189.764495][ T9584] vfat: Deprecated parameter 'posix'
[  189.767778][ T9584] FAT-fs: "posix" option is obsolete, not supported now
[  189.935329][ T9590] syzkaller0: entered promiscuous mode
[  189.941632][ T9590] syzkaller0: entered allmulticast mode
[  190.105122][ T9602] loop1: detected capacity change from 0 to 256
[  190.146792][ T9602] FAT-fs (loop1): Directory bread(block 64) failed
[  190.150130][ T9602] FAT-fs (loop1): Directory bread(block 65) failed
[  190.152174][ T9602] FAT-fs (loop1): Directory bread(block 66) failed
[  190.154489][ T9602] FAT-fs (loop1): Directory bread(block 67) failed
[  190.157153][ T9602] FAT-fs (loop1): Directory bread(block 68) failed
[  190.159992][ T9602] FAT-fs (loop1): Directory bread(block 69) failed
[  190.162631][ T9602] FAT-fs (loop1): Directory bread(block 70) failed
[  190.164954][ T9602] FAT-fs (loop1): Directory bread(block 71) failed
[  190.167300][ T9602] FAT-fs (loop1): Directory bread(block 72) failed
[  190.172239][ T9602] FAT-fs (loop1): Directory bread(block 73) failed
[  190.366796][ T9606] loop1: detected capacity change from 0 to 128
[  190.641035][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'.
[  190.644050][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'.
[  191.081084][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  191.643746][ T5236] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  191.653000][ T5236] Bluetooth: hci2: Injecting HCI hardware error event
[  191.669393][ T5850] Bluetooth: hci2: hardware error 0x00
[  192.742391][ T9622] loop2: detected capacity change from 0 to 40427
[  192.748402][ T9622] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  192.751799][ T9622] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  192.761347][ T9622] F2FS-fs (loop2): invalid crc value
[  192.900105][ T9622] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  192.914158][ T9622] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  192.917041][ T9622] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  193.182331][ T9626] loop3: detected capacity change from 0 to 4096
[  193.188184][ T9626] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  193.382431][ T9632] f2fs: Unknown parameter '01777777777777777777777	Z* m.Dc8'@C9G9?9S{1Jլ5æԌqqY糔'
[  193.407824][   T33] audit: type=1800 audit(1755249244.184:37): pid=9632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1422" name="file1" dev="loop2" ino=10 res=0 errno=0
[  193.718937][ T5850] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  194.055723][ T9645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1431'.
[  194.061590][ T9645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.131035][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.133453][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.235352][ T9653] loop2: detected capacity change from 0 to 2048
[  194.242983][ T9653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  194.377736][ T9661] futex_wake_op: syz.2.1436 tries to shift op by 32; fix this program
[  194.393969][ T9660] loop1: detected capacity change from 0 to 128
[  194.407472][ T9660] EXT4-fs: Ignoring removed nobh option
[  194.439449][ T9660] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.447814][ T9660] ext4 filesystem being mounted at /514/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  194.499248][ T5856] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.583031][ T9670] loop2: detected capacity change from 0 to 1024
[  194.586948][ T9670] EXT4-fs: Ignoring removed oldalloc option
[  194.594969][ T9670] EXT4-fs: Ignoring removed bh option
[  194.649764][ T9670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.794581][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.960184][ T5891] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  195.139705][ T5891] usb 4-1: Using ep0 maxpacket: 16
[  195.184110][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.199322][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  195.207657][ T5891] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  195.215366][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.224640][ T5891] usb 4-1: config 0 descriptor??
[  195.388052][ T9695] loop2: detected capacity change from 0 to 4096
[  195.392251][ T9695] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  195.401619][ T9695] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  195.415822][ T9695] ntfs3(loop2): Failed to load $MFT (-2).
[  195.678102][ T5891] HID 045e:07da: Invalid code 65791 type 1
[  195.700795][ T5891] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input14
[  195.718651][ T9704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1457'.
[  195.722364][ T9704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1457'.
[  195.745892][ T5891] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  195.924355][   T33] audit: type=1400 audit(1755249246.704:38): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9713 comm="syz.2.1461"
[  196.069401][ T5911] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  196.118398][ T9724] loop2: detected capacity change from 0 to 256
[  196.229104][ T5911] usb 2-1: Using ep0 maxpacket: 32
[  196.232989][ T5911] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  196.248513][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.254150][ T5911] usb 2-1: config 0 descriptor??
[  196.260110][ T5911] gspca_main: sq930x-2.14.0 probing 041e:403c
[  196.351030][ T9732] loop2: detected capacity change from 0 to 256
[  196.366267][ T9732] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  196.377426][ T9732] exFAT-fs (loop2): valid_size(150994954) is greater than size(10)
[  196.497627][ T5884] usb 4-1: USB disconnect, device number 6
[  196.663225][ T5911] gspca_sq930x: ucbus_write failed -71
[  196.664983][ T5911] sq930x 2-1:0.0: probe with driver sq930x failed with error -71
[  196.669331][ T5911] usb 2-1: USB disconnect, device number 16
[  196.891882][ T9756] openvswitch: netlink: Key type 40 is out of range max 32
[  196.975271][ T9760] macvtap1: entered allmulticast mode
[  196.977001][ T9760] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  196.984090][ T9760] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[  197.222242][ T9772] netlink: 'syz.3.1488': attribute type 2 has an invalid length.
[  197.257765][ T9772] : entered promiscuous mode
[  197.314306][ T9778] tipc: Can't bind to reserved service type 2
[  197.930366][ T9780] loop1: detected capacity change from 0 to 32768
[  198.392658][ T9800] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1501'.
[  198.396342][ T9800] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1501'.
[  198.448933][   T24] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  198.562903][   T33] audit: type=1326 audit(1755249249.344:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.1.1500" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffbd8ebe9 code=0x7fc00000
[  198.623485][   T24] usb 3-1: config 0 has an invalid interface number: 3 but max is 0
[  198.627094][   T24] usb 3-1: config 0 has no interface number 0
[  198.631076][   T24] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  198.635110][   T24] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  198.639566][   T24] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  198.643944][   T24] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  198.648230][   T24] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[  198.651840][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.671840][   T24] usb 3-1: config 0 descriptor??
[  198.692955][   T24] hub 3-1:0.3: bad descriptor, ignoring hub
[  198.699654][   T24] hub 3-1:0.3: probe with driver hub failed with error -5
[  198.708432][   T24] sierra 3-1:0.3: Sierra USB modem converter detected
[  198.925626][   T24] usb 3-1: Sierra USB modem converter now attached to ttyUSB0
[  198.961880][   T24] usb 3-1: Sierra USB modem converter now attached to ttyUSB1
[  199.047812][   T24] usb 3-1: USB disconnect, device number 27
[  199.071018][   T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  199.079078][   T24] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  199.083038][   T24] sierra 3-1:0.3: device disconnected
[  199.132180][   T33] audit: type=1326 audit(1755249249.914:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.1.1500" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ffbd8ebe9 code=0x7fc00000
[  199.342437][ T9805] binder: 9804:9805 ioctl c0306201 200000000640 returned -22
[  199.574223][ T9811] veth1_vlan: entered allmulticast mode
[  199.601696][ T9811] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  199.669649][ T9818] 9pnet: p9_errstr2errno: server reported unknown error FF2
[  199.792110][ T9828] netlink: 'syz.3.1513': attribute type 8 has an invalid length.
[  199.794564][ T9828] netlink: 'syz.3.1513': attribute type 4 has an invalid length.
[  199.796997][ T9828] netlink: 'syz.3.1513': attribute type 5 has an invalid length.
[  199.799720][ T9828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1513'.
[  200.005283][ T9830] loop1: detected capacity change from 0 to 32768
[  200.008660][ T9833] loop3: detected capacity change from 0 to 32768
[  200.012418][ T9833] bcachefs (/dev/loop3): error reading default superblock: Invalid superblock: too big (got 4696 bytes, layout max 512)
[  200.017632][ T9833] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  200.017632][ T9833] members_v2 (size 96):
[  200.017632][ T9833] member_bytes 0
[  200.025236][ T9833] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  200.046816][ T9830] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  200.091534][ T9830] XFS (loop1): Ending clean mount
[  200.137357][ T5856] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  200.458879][ T5314] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  200.608843][ T5314] usb 4-1: Using ep0 maxpacket: 16
[  200.613149][ T5314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  200.617455][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  200.625302][ T5314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  200.632583][ T5314] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  200.636224][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.641522][ T5314] usb 4-1: Product: syz
[  200.648933][ T5314] usb 4-1: Manufacturer: syz
[  200.651379][ T5314] usb 4-1: SerialNumber: syz
[  200.662254][ T5314] usb 4-1: config 0 descriptor??
[  200.671189][ T5314] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  200.673835][ T5314] gspca_stv06xx: st6422 sensor detected
[  200.936013][ T5314] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71
[  200.940198][ T5314] usb 4-1: USB disconnect, device number 7
[  200.955902][ T9868] loop1: detected capacity change from 0 to 32768
[  200.964654][ T9868] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  200.964654][ T9868] clean (size 2912):
[  200.964654][ T9868] flags:          0
[  200.964654][ T9868] journal_seq:    10
[  200.964654][ T9868] usage: type=inodes v=8
[  200.964654][ T9868] usage: type=key_version v=0
[  200.964654][ T9868] usage: type=reserved v=0
[  200.964654][ T9868] usage: type=reserved v=0
[  200.964654][ T9868] usage: type=reserved v=0
[  200.964654][ T9868] usage: type=reserved v=0
[  200.964654][ T9868] data_usage: btree: 1/1 [0]=2816
[  200.964654][ T9868] data_usage: journal: 1/1 [0]=0
[  200.964654][ T9868] data_usage: user: 1/1 [0]=16
[  200.964654][ T9868] dev_usage: dev=0  
[  200.964654][ T9868]   free: buckets=83 sectors=0 fragmented=0
[  200.964654][ T9868]   sb: buckets=25 sectors=6152 fragmented=248
[  200.964654][ T9868]   journal: buckets=8 sectors=2048 fragmented=0
[  200.964654][ T9868]   btree: buckets=11 sectors=2816 fragmented=0
[  200.964654][ T9868]   user: buckets=1 sectors=16 fragmented=240
[  200.964654][ T9868]   cached: buckets=0 sectors=0 fragmented=0
[  200.964654][ T9868]   parity: buckets=0 sectors=0 fragmented=0
[  200.964654][ T9868]   stripe: buckets=0 sectors=0 fragmented=0
[  200.964654][ T9868]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  200.964654][ T9868]   need_discard: buckets=0 sectors=0 fragmented=0
[  200.964654][ T9868] log: 
[  200.964654][ T9868] clock: write=1280
[  200.964654][ T9868] 
[  201.017469][ T9868] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  201.099037][ T9874] loop2: detected capacity change from 0 to 32768
[  201.121048][ T9874] syz.2.1531: attempt to access beyond end of device
[  201.121048][ T9874] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  201.128031][ T9874] metapage_write_end_io: I/O error
[  201.132530][ T9874] ERROR: (device loop2): release_metapage: metapage_write_one() failed
[  201.132530][ T9874] 
[  201.149373][ T9874] ERROR: (device loop2): remounting filesystem as read-only
[  201.156251][ T9874] blkno = 8ed2c, nblocks = 1
[  201.157906][ T9874] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  201.157906][ T9874] 
[  201.198114][  T114] blkno = 8ed2c, nblocks = 4
[  201.201261][  T114] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  201.201261][  T114] 
[  201.206062][ T5847] syz-executor: attempt to access beyond end of device
[  201.206062][ T5847] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  201.213363][ T5847] metapage_write_end_io: I/O error
[  201.216229][ T5847] JFS: metapage_get_blocks failed
[  201.218574][ T5847] JFS: metapage_get_blocks failed
[  201.221859][ T5847] JFS: metapage_get_blocks failed
[  201.224081][ T5847] JFS: metapage_get_blocks failed
[  201.267552][ T9880] vivid-000: disconnect
[  201.332337][ T9881] random: crng reseeded on system resumption
[  201.351885][ T9881] vivid-000: reconnect
[  201.393167][ T9885] binder: 9884:9885 ioctl c0306201 200000000080 returned -14
[  202.566876][ T9911] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1548'.
[  202.571167][ T9911] netlink: 'syz.1.1548': attribute type 9 has an invalid length.
[  202.573550][ T9911] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1548'.
[  202.576459][ T9911] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1548'.
[  202.712430][ T9919] loop1: detected capacity change from 0 to 128
[  202.725133][ T9919] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  202.728222][ T9919] System zones: 1-3, 19-19, 35-36
[  202.736097][ T9919] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  202.741498][ T9919] ext4 filesystem being mounted at /551/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  202.773204][ T5856] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  202.905682][   T33] audit: type=1400 audit(1755249253.684:41): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=9922 comm="syz.3.1554"
[  202.979263][ T9927] mkiss: ax0: crc mode is auto.
[  203.355190][ T9935] loop3: detected capacity change from 0 to 32768
[  203.366123][ T9935] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1559 (9935)
[  203.411359][ T9935] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  203.415363][ T9935] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  203.418641][ T9935] BTRFS info (device loop3): disk space caching is enabled
[  203.422165][ T9935] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  203.494227][ T9935] BTRFS info (device loop3): rebuilding free space tree
[  203.524439][ T9935] BTRFS info (device loop3): disabling free space tree
[  203.527156][ T9935] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  203.534707][ T9935] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  203.917108][ T8258] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  205.669783][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1580'.
[  205.796902][ T9989] loop3: detected capacity change from 0 to 32768
[  205.813579][ T9989] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  205.813579][ T9989] clean (size 2912):
[  205.813579][ T9989] flags:          0
[  205.813579][ T9989] journal_seq:    10
[  205.813579][ T9989] usage: type=inodes v=8
[  205.813579][ T9989] usage: type=key_version v=0
[  205.813579][ T9989] usage: type=reserved v=0
[  205.813579][ T9989] usage: type=reserved v=0
[  205.813579][ T9989] usage: type=reserved v=0
[  205.813579][ T9989] usage: type=reserved v=0
[  205.813579][ T9989] data_usage: btree: 1/1 [0]=2816
[  205.813579][ T9989] data_usage: journal: 1/1 [0]=0
[  205.813579][ T9989] data_usage: user: 1/1 [0]=16
[  205.813579][ T9989] dev_usage: dev=0  
[  205.813579][ T9989]   free: buckets=83 sectors=0 fragmented=0
[  205.813579][ T9989]   sb: buckets=25 sectors=6152 fragmented=248
[  205.813579][ T9989]   journal: buckets=8 sectors=2048 fragmented=0
[  205.813579][ T9989]   btree: buckets=11 sectors=2816 fragmented=0
[  205.813579][ T9989]   user: buckets=1 sectors=16 fragmented=240
[  205.813579][ T9989]   cached: buckets=0 sectors=0 fragmented=13565952
[  205.813579][ T9989]   parity: buckets=0 sectors=0 fragmented=0
[  205.813579][ T9989]   stripe: buckets=0 sectors=0 fragmented=0
[  205.813579][ T9989]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  205.813579][ T9989]   need_discard: buckets=0 sectors=0 fragmented=0
[  205.813579][ T9989] clock: read=0
[  205.813579][ T9989] blacklist_v2: start=1 end=1280
[  205.813579][ T9989] btree_root: btree=extents level=0 u64s 11 type xattr SPOS_MAX len 0 
[  205.814040][ T9989] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  206.284097][ T9995] loop2: detected capacity change from 0 to 40427
[  206.306814][ T9995] F2FS-fs (loop2): build fault injection rate: 771
[  206.388633][ T9995] F2FS-fs (loop2): invalid crc value
[  206.637157][ T9995] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  206.647072][ T9995] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  206.777203][ T9995] syz.2.1578: attempt to access beyond end of device
[  206.777203][ T9995] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  206.848843][ T5847] syz-executor: attempt to access beyond end of device
[  206.848843][ T5847] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  206.855647][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  206.855663][ T5847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  206.855668][ T5847] Call Trace:
[  206.855673][ T5847]  <TASK>
[  206.855677][ T5847]  dump_stack_lvl+0x189/0x250
[  206.855692][ T5847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  206.855702][ T5847]  ? __pfx_queue_work_on+0x10/0x10
[  206.855710][ T5847]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  206.855721][ T5847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  206.855735][ T5847]  f2fs_handle_critical_error+0x37c/0x540
[  206.855750][ T5847]  f2fs_write_end_io+0x886/0xb60
[  206.855765][ T5847]  __submit_merged_bio+0x27a/0x6a0
[  206.855779][ T5847]  __submit_merged_write_cond+0x255/0x530
[  206.855792][ T5847]  f2fs_write_data_pages+0x261d/0x3000
[  206.855802][ T5847]  ? __lock_acquire+0xab9/0xd20
[  206.855828][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  206.855862][ T5847]  ? __mod_zone_page_state+0xd7/0x140
[  206.855877][ T5847]  ? folios_put_refs+0x560/0x640
[  206.855890][ T5847]  ? __pfx_folios_put_refs+0x10/0x10
[  206.855898][ T5847]  ? rcu_is_watching+0x15/0xb0
[  206.855910][ T5847]  ? __lock_acquire+0xab9/0xd20
[  206.855927][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  206.855939][ T5847]  do_writepages+0x32e/0x550
[  206.855954][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  206.855965][ T5847]  filemap_fdatawrite+0x199/0x240
[  206.855976][ T5847]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  206.856007][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  206.856017][ T5847]  f2fs_sync_dirty_inodes+0x31f/0x830
[  206.856032][ T5847]  f2fs_write_checkpoint+0x95a/0x1df0
[  206.856050][ T5847]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  206.856076][ T5847]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  206.856084][ T5847]  ? kfree+0x18e/0x440
[  206.856094][ T5847]  ? kill_f2fs_super+0x298/0x6c0
[  206.856104][ T5847]  kill_f2fs_super+0x2c3/0x6c0
[  206.856115][ T5847]  ? __pfx_kill_f2fs_super+0x10/0x10
[  206.856121][ T5847]  ? radix_tree_delete_item+0x2b6/0x400
[  206.856135][ T5847]  ? shrinker_free+0x2ce/0x3e0
[  206.856144][ T5847]  deactivate_locked_super+0xbc/0x130
[  206.856155][ T5847]  cleanup_mnt+0x425/0x4c0
[  206.856165][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.856176][ T5847]  task_work_run+0x1d4/0x260
[  206.856188][ T5847]  ? __pfx_task_work_run+0x10/0x10
[  206.856197][ T5847]  ? __x64_sys_umount+0x122/0x160
[  206.856212][ T5847]  ? exit_to_user_mode_loop+0x40/0x110
[  206.856230][ T5847]  exit_to_user_mode_loop+0xec/0x110
[  206.856247][ T5847]  do_syscall_64+0x2bd/0x3b0
[  206.856258][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.856267][ T5847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.856275][ T5847]  ? exc_page_fault+0x9f/0xf0
[  206.856285][ T5847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.856293][ T5847] RIP: 0033:0x7f3be738ff17
[  206.856302][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  206.856310][ T5847] RSP: 002b:00007ffc50cb63a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  206.856325][ T5847] RAX: 0000000000000000 RBX: 00007f3be7411c05 RCX: 00007f3be738ff17
[  206.856334][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc50cb6460
[  206.856342][ T5847] RBP: 00007ffc50cb6460 R08: 0000000000000000 R09: 0000000000000000
[  206.856348][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc50cb74f0
[  206.856353][ T5847] R13: 00007f3be7411c05 R14: 0000000000032756 R15: 00007ffc50cb7530
[  206.856367][ T5847]  </TASK>
[  206.858671][ T5847] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  206.878933][ T5911] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  207.129513][ T5911] usb 4-1: device descriptor read/64, error -71
[  207.218472][T10019] loop2: detected capacity change from 0 to 8
[  207.301808][T10021] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1588'.
[  207.370333][ T5911] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  207.523153][ T5911] usb 4-1: device descriptor read/64, error -71
[  207.913614][ T5911] usb usb4-port1: attempt power cycle
[  208.158231][T10029] loop1: detected capacity change from 0 to 32768
[  208.182449][T10029] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  208.242362][ T5856] (syz-executor,5856,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  208.248472][ T5856] ocfs2: Unmounting device (7,1) on (node local)
[  208.289042][ T5911] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  208.309216][ T5911] usb 4-1: device descriptor read/8, error -71
[  208.425996][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'.
[  208.544022][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'.
[  208.548941][ T5911] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  208.579661][ T5911] usb 4-1: device descriptor read/8, error -71
[  208.654025][T10045] loop1: detected capacity change from 0 to 32768
[  208.659407][T10045] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  208.659407][T10045] clean (size 2912):
[  208.659407][T10045] flags:          0
[  208.659407][T10045] journal_seq:    10
[  208.659407][T10045] usage: type=inodes v=8
[  208.659407][T10045] write_buffer_keys: btree=dirents level=0 u64s 5 type deleted 0:21491613697:0 len 0 ver 4294967296
[  208.659407][T10045] usage: type=reserved v=0
[  208.659407][T10045] usage: type=reserved v=0
[  208.659407][T10045] usage: type=reserved v=0
[  208.659407][T10045] usage: type=reserved v=0
[  208.659407][T10045] data_usage: free: 0/0 []=83888896
[  208.659407][T10045] data_usage: journal: 1/1 [0]=0
[  208.659407][T10045] data_usage: user: 1/1 [0]=32
[  208.659407][T10045] dev_usage: dev=0  
[  208.659407][T10045]   free: buckets=83 sectors=0 fragmented=0
[  208.659407][T10045]   sb: buckets=25 sectors=6152 fragmented=248
[  208.659407][T10045]   journal: buckets=8 sectors=2048 fragmented=0
[  208.659407][T10045]   btree: buckets=11 sectors=2816 fragmented=0
[  208.659407][T10045]   user: buckets=1 sectors=32 fragmented=224
[  208.659407][T10045]   cached: buckets=0 sectors=0 fragmented=0
[  208.659407][T10045]   parity: buckets=0 sectors=0 fragmented=0
[  208.659407][T10045]   stripe: buckets=0 sectors=0 fragmented=0
[  208.659407][T10045]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  208.659407][T10045]   need_discard: buckets=0 sectors=0 fragmented=0
[  208.659407][T10045] clock: read=0
[  208.659407][T10045] clock: write=1336
[  208.659407][T10045] btree_root: btre
[  208.659611][T10045] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  208.716063][ T5911] usb usb4-port1: unable to enumerate USB device
[  208.879000][ T5891] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  209.028886][ T5891] usb 3-1: Using ep0 maxpacket: 32
[  209.032236][ T5891] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  209.034851][ T5891] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  209.038641][ T5891] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  209.041932][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  209.045532][ T5891] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  209.048635][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  209.051762][ T5891] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  209.054944][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  209.059420][ T5891] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  209.062933][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.067736][ T5891] usb 3-1: config 0 descriptor??
[  209.284033][ T5891] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  209.488041][ T5884] usb 3-1: USB disconnect, device number 28
[  209.502606][ T5884] usblp0: removed
[  209.697976][ T5850] Bluetooth: hci0: unexpected event 0x14 length: 20 > 6
[  209.832016][T10072] loop3: detected capacity change from 0 to 64
[  209.852027][T10072] MINIX-fs: file system does not have enough zmap blocks allocated.  Refusing to mount.
[  209.856952][T10072] MINIX-fs: bad superblock or unable to read bitmaps
[  210.098160][T10087] loop2: detected capacity change from 0 to 2048
[  210.124361][T10087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.143467][T10087] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  210.158976][ T5911] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  210.185316][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.297475][T10102] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1621'.
[  210.315476][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  210.323443][ T5911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.336862][ T5911] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  210.341485][ T5911] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  210.364048][ T5911] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.367889][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  210.373018][ T5911] usb 2-1: SerialNumber: syz
[  210.442516][T10108] netlink: 'syz.2.1625': attribute type 2 has an invalid length.
[  210.647315][ T5884] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  210.652545][ T5911] usb 2-1: USB disconnect, device number 17
[  210.998872][ T5884] usb 4-1: Using ep0 maxpacket: 8
[  211.004796][ T5884] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  211.007730][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.011217][ T5884] usb 4-1: Product: syz
[  211.012767][ T5884] usb 4-1: Manufacturer: syz
[  211.014399][ T5884] usb 4-1: SerialNumber: syz
[  211.018357][ T5884] usb 4-1: config 0 descriptor??
[  211.025341][ T5884] gspca_main: sq905-2.14.0 probing 2770:9120
[  211.131343][T10116] random: crng reseeded on system resumption
[  211.653730][T10130] loop2: detected capacity change from 0 to 512
[  211.663149][T10130] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1635: casefold flag without casefold feature
[  211.667512][T10130] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1635: couldn't read orphan inode 15 (err -117)
[  211.676021][T10130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.696930][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.723613][T10133] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1636'.
[  211.951005][T10147] loop2: detected capacity change from 0 to 512
[  211.966055][T10147] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  211.984633][T10147] EXT4-fs (loop2): 1 orphan inode deleted
[  211.987146][T10147] EXT4-fs (loop2): 1 truncate cleaned up
[  211.991860][T10147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.003226][T10147] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #12: block 7: comm syz.2.1643: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[  212.021348][T10147] EXT4-fs (loop2): Remounting filesystem read-only
[  212.032059][ T5884] gspca_sq905: sq905_read_data: usb_control_msg failed (-71)
[  212.038114][ T5884] sq905 4-1:0.0: probe with driver sq905 failed with error -71
[  212.046383][ T5884] usb 4-1: USB disconnect, device number 12
[  212.046507][T10116] Restarting kernel threads ...
[  212.054385][T10116] Done restarting kernel threads.
[  212.057026][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.144762][T10152] loop1: detected capacity change from 0 to 256
[  212.157143][T10152] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  212.170154][T10152] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  212.182747][T10152] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  212.325358][T10161] loop1: detected capacity change from 0 to 256
[  212.502826][T10171] netlink: 'syz.1.1654': attribute type 13 has an invalid length.
[  212.565420][T10171] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.631844][T10171] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.639102][T10171] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.751267][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.755692][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  212.760006][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.763639][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  212.769921][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.773424][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  212.776929][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.780860][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  214.502544][T10205] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  214.608667][T10203] loop1: detected capacity change from 0 to 32768
[  214.634901][T10203] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  214.642091][T10203] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  214.686001][T10203] overlayfs: upper fs does not support tmpfile.
[  214.695397][T10203] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  214.698129][T10203] overlayfs: failed to set xattr on upper
[  214.701429][T10203] overlayfs: ...falling back to redirect_dir=nofollow.
[  214.704304][T10203] overlayfs: ...falling back to index=off.
[  214.706567][T10203] overlayfs: ...falling back to uuid=null.
[  214.709088][T10203] overlayfs: upper fs missing required features.
[  214.747711][ T5856] ocfs2: Unmounting device (7,1) on (node local)
[  215.009067][ T5911] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  215.134298][T10215] loop1: detected capacity change from 0 to 32768
[  215.137984][T10215] bcachefs: bch2_fs_parse_param() Error parsing option fix_errors: option_value
[  215.178812][ T5911] usb 3-1: Using ep0 maxpacket: 8
[  215.194318][ T5911] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1023
[  215.198038][ T5911] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 32
[  215.208917][ T5911] usb 3-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  215.213958][ T5911] usb 3-1: config 1 interface 0 has no altsetting 0
[  215.220606][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  215.224228][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.227353][ T5911] usb 3-1: Product: syz
[  215.238829][ T5911] usb 3-1: Manufacturer: syz
[  215.240748][ T5911] usb 3-1: SerialNumber: syz
[  215.245676][T10207] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  215.253751][T10207] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  215.369910][T10217] loop1: detected capacity change from 0 to 4096
[  215.479151][ T5911] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  215.482310][T10219] syz.1.1673: attempt to access beyond end of device
[  215.482310][T10219] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0
[  215.488076][T10219] EXT4-fs (nbd1): unable to read superblock
[  215.499506][ T5911] usb 3-1: USB disconnect, device number 29
[  215.762437][T10221] loop1: detected capacity change from 0 to 32768
[  216.104817][T10233] loop2: detected capacity change from 0 to 256
[  216.219229][ T5314] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  216.237154][T10235] bridge0: entered promiscuous mode
[  216.239996][T10235] macvlan2: entered promiscuous mode
[  216.268287][T10223] loop3: detected capacity change from 0 to 131072
[  216.272529][T10223] F2FS-fs (loop3): invalid crc value
[  216.322127][T10223] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  216.326344][T10223] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  216.376868][ T5314] usb 2-1: Using ep0 maxpacket: 8
[  216.383986][ T5314] usb 2-1: config 5 has an invalid interface number: 22 but max is 0
[  216.387091][ T5314] usb 2-1: config 5 has no interface number 0
[  216.390776][ T5314] usb 2-1: config 5 interface 22 altsetting 25 endpoint 0x6 has invalid wMaxPacketSize 0
[  216.394468][ T5314] usb 2-1: config 5 interface 22 has no altsetting 0
[  216.405901][ T5314] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=ba.fa
[  216.412383][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.415896][ T5314] usb 2-1: Product: syz
[  216.417859][ T5314] usb 2-1: Manufacturer: syz
[  216.421335][ T5314] usb 2-1: SerialNumber: syz
[  216.637581][ T5314] kvaser_usb 2-1:5.22: error -ENODEV: Cannot get usb endpoint(s)
[  216.644176][ T5314] rndis_host 2-1:5.22: skipping garbage
[  216.647030][ T5314] usb 2-1: bad CDC descriptors
[  216.654164][ T5314] usb 2-1: USB disconnect, device number 18
[  216.980493][T10253] binder: 10252:10253 ioctl c018620c 200000000040 returned -22
[  217.145195][T10261] binder: 10260:10261 ioctl c018620c 200000000280 returned -1
[  217.357394][T10275] loop2: detected capacity change from 0 to 1024
[  217.365634][T10275] EXT4-fs: Ignoring removed orlov option
[  217.367310][T10275] EXT4-fs: Ignoring removed mblk_io_submit option
[  217.382431][T10275] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  217.407334][T10275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.448667][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.471051][ T5911] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  217.537477][T10288] loop1: detected capacity change from 0 to 512
[  217.548189][T10288] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[  217.552187][T10288] EXT4-fs (loop1): group descriptors corrupted!
[  217.639504][ T5911] usb 4-1: Using ep0 maxpacket: 32
[  217.647686][ T5911] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  217.652026][ T5911] usb 4-1: config 0 has no interface number 0
[  217.654432][ T5911] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.658548][ T5911] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.671086][ T5911] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  217.674773][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.692813][ T5911] usb 4-1: config 0 descriptor??
[  217.899129][   T33] audit: type=1326 audit(1755249268.664:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  217.907123][   T33] audit: type=1326 audit(1755249268.664:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  217.933024][   T33] audit: type=1326 audit(1755249268.664:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  217.951582][   T33] audit: type=1326 audit(1755249268.664:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  217.963707][   T33] audit: type=1326 audit(1755249268.664:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  217.976447][   T33] audit: type=1326 audit(1755249268.664:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  217.987639][   T33] audit: type=1326 audit(1755249268.704:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.1.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  218.008889][   T33] audit: type=1326 audit(1755249268.704:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  218.029392][   T33] audit: type=1326 audit(1755249268.704:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  218.039260][   T33] audit: type=1326 audit(1755249268.754:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  218.538452][ T5911] uclogic 0003:28BD:0094.0007: pen parameters not found
[  218.541594][ T5911] uclogic 0003:28BD:0094.0007: interface is invalid, ignoring
[  218.689428][ T5911] usb 4-1: USB disconnect, device number 13
[  220.118951][ T5911] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  220.280836][T10330] netlink: 'syz.1.1719': attribute type 12 has an invalid length.
[  220.284930][ T5911] usb 3-1: Using ep0 maxpacket: 16
[  220.301754][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.318075][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.323529][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  220.337041][ T5911] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  220.342893][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.351308][ T5911] usb 3-1: config 0 descriptor??
[  220.558916][ T5314] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  220.710233][ T5314] usb 2-1: Using ep0 maxpacket: 32
[  220.725435][ T5314] usb 2-1: unable to get BOS descriptor or descriptor too short
[  220.739334][ T5314] usb 2-1: config 128 has an invalid interface number: 127 but max is 3
[  220.742488][ T5314] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  220.745889][ T5314] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4
[  220.751472][ T5314] usb 2-1: config 128 has no interface number 0
[  220.753847][ T5314] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024
[  220.758020][ T5314] usb 2-1: config 128 interface 127 has no altsetting 0
[  220.765401][ T5314] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  220.770758][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.773590][ T5314] usb 2-1: Product: syz
[  220.774914][ T5314] usb 2-1: Manufacturer: syz
[  220.776647][ T5314] usb 2-1: SerialNumber: syz
[  220.785271][ T5911] hid-multitouch 0003:0457:07DA.0008: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0
[  220.791056][T10332] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  220.969846][ T5911] usb 3-1: USB disconnect, device number 30
[  221.035504][ T5314] usb 2-1: USB disconnect, device number 19
[  221.052220][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  221.377243][T10369] loop3: detected capacity change from 0 to 2048
[  221.403885][T10370] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  221.415672][T10369] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  221.430355][T10369] Remounting filesystem read-only
[  221.743630][T10388] loop3: detected capacity change from 0 to 128
[  221.941525][T10401] loop1: detected capacity change from 0 to 2048
[  222.001363][T10401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.088991][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.254799][T10418] loop3: detected capacity change from 0 to 736
[  222.347889][T10403] loop2: detected capacity change from 0 to 32768
[  222.364042][T10403] ERROR: (device loop2): diRead: i_ino != di_number
[  222.364042][T10403] 
[  222.398990][T10420] loop6: detected capacity change from 0 to 524287999
[  222.423775][ T5855] buffer_io_error: 122 callbacks suppressed
[  222.423791][ T5855] Buffer I/O error on dev loop6, logical block 65535999, async page read
[  222.594330][T10416] loop1: detected capacity change from 0 to 32768
[  222.634292][T10416] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1753 (10416)
[  222.685025][T10416] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  222.692645][T10416] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  222.696121][T10416] BTRFS info (device loop1): using free-space-tree
[  222.718119][T10431] loop3: detected capacity change from 0 to 128
[  222.751198][T10431] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  222.936652][T10427] loop2: detected capacity change from 0 to 32768
[  222.946048][T10427] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  223.038495][ T5847] ocfs2: Unmounting device (7,2) on (node local)
[  223.068563][ T5856] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  223.287074][T10457] loop3: detected capacity change from 0 to 4096
[  223.295194][T10457] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  223.336981][T10457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.356671][T10460] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1763'.
[  223.458188][ T8258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.661083][T10480] loop3: detected capacity change from 0 to 2048
[  223.692043][T10481] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.812186][T10485] loop3: detected capacity change from 0 to 1024
[  223.843016][T10485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  223.847220][T10485] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.856897][   T33] kauditd_printk_skb: 133 callbacks suppressed
[  223.856910][   T33] audit: type=1800 audit(1755249274.634:185): pid=10485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1776" name="file2" dev="loop3" ino=16 res=0 errno=0
[  223.862526][T10476] loop2: detected capacity change from 0 to 40427
[  223.874030][T10476] F2FS-fs (loop2): Invalid log blocks per segment (3279)
[  223.879353][T10476] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  223.886182][T10476] F2FS-fs (loop2): invalid crc value
[  223.888608][T10476] F2FS-fs (loop2): invalid journal entries nats 0 sits 50950
[  223.893189][T10476] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-22)
[  223.902456][ T8258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  224.161941][T10502] loop3: detected capacity change from 0 to 16
[  224.177833][T10502] erofs (device loop3): mounted with root inode @ nid 36.
[  224.819315][   T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  224.870253][ T5314] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  224.969090][   T24] usb 4-1: Using ep0 maxpacket: 8
[  224.979016][   T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  224.982487][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.985638][   T24] usb 4-1: Product: syz
[  224.987431][   T24] usb 4-1: Manufacturer: syz
[  224.989556][   T24] usb 4-1: SerialNumber: syz
[  224.993567][   T24] usb 4-1: config 0 descriptor??
[  225.023858][ T5314] usb 2-1: config 8 has an invalid interface number: 95 but max is 0
[  225.027701][ T5314] usb 2-1: config 8 has no interface number 0
[  225.035694][ T5314] usb 2-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=29.78
[  225.039782][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.043128][ T5314] usb 2-1: Product: syz
[  225.044947][ T5314] usb 2-1: Manufacturer: syz
[  225.046892][ T5314] usb 2-1: SerialNumber: syz
[  225.115878][T10518] loop2: detected capacity change from 0 to 4096
[  225.141999][T10519] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  225.150477][   T33] audit: type=1800 audit(1755249275.924:186): pid=10518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1790" name="file1" dev="loop2" ino=15 res=0 errno=0
[  225.168057][   T33] audit: type=1800 audit(1755249275.944:187): pid=10518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1790" name="file1" dev="loop2" ino=15 res=0 errno=0
[  225.204742][   T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  225.275808][ T5314] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.95/input/input15
[  225.287427][ T5281] bcm5974 2-1:8.95: could not read from device
[  225.295343][ T5314] usb 2-1: USB disconnect, device number 20
[  225.302036][ T5281] bcm5974 2-1:8.95: could not read from device
[  225.676884][T10522] loop2: detected capacity change from 0 to 32768
[  225.681169][T10522] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1791 (10522)
[  225.696304][T10522] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  225.700818][T10522] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  225.704489][T10522] BTRFS info (device loop2): disk space caching is enabled
[  225.707321][T10522] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  225.766454][T10522] BTRFS info (device loop2): rebuilding free space tree
[  225.792298][T10522] BTRFS info (device loop2): disabling free space tree
[  225.794530][T10522] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  225.809041][T10522] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  225.892427][ T5847] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  226.088964][ T5314] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  226.240951][ T5314] usb 2-1: Using ep0 maxpacket: 32
[  226.244592][ T5314] usb 2-1: New USB device found, idVendor=04cb, idProduct=013d, bcdDevice=a4.42
[  226.247424][ T5314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.261956][ T5314] usb 2-1: config 0 descriptor??
[  226.277513][ T5314] gspca_main: finepix-2.14.0 probing 04cb:013d
[  226.307171][   T33] audit: type=1326 audit(1755249277.084:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.2.1799" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  226.326339][   T33] audit: type=1326 audit(1755249277.094:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.2.1799" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  226.343513][   T33] audit: type=1326 audit(1755249277.094:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.2.1799" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  226.355656][   T33] audit: type=1326 audit(1755249277.094:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.2.1799" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  226.363439][   T33] audit: type=1326 audit(1755249277.094:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.2.1799" exe="/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  226.370672][   T33] audit: type=1326 audit(1755249277.094:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.2.1799" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  226.380138][   T33] audit: type=1326 audit(1755249277.094:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.2.1799" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be738ebe9 code=0x7ffc0000
[  226.401739][T10557] loop2: detected capacity change from 0 to 1024
[  226.455303][   T53] hfsplus: b-tree write err: -5, ino 4
[  226.484134][ T7507] usb 2-1: USB disconnect, device number 21
[  226.496809][T10559] loop2: detected capacity change from 0 to 256
[  226.507274][T10559] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  226.622955][   T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  226.627977][   T24] usb 4-1: USB disconnect, device number 14
[  226.670944][T10563] cgroup: Need name or subsystem set
[  226.725064][T10567] netlink: 'syz.2.1805': attribute type 2 has an invalid length.
[  226.802237][T10571] loop2: detected capacity change from 0 to 512
[  226.811517][T10571] EXT4-fs (loop2): orphan cleanup on readonly fs
[  226.813600][T10571] EXT4-fs error (device loop2): ext4_quota_enable:7124: comm syz.2.1807: inode #16777216: comm syz.2.1807: iget: illegal inode #
[  226.822001][T10571] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1807: Bad quota inode: 16777216, type: 2
[  226.826194][T10571] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix.
[  226.832707][T10571] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  226.836096][T10571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0007-000000000000 ro without journal. Quota mode: writeback.
[  226.861315][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0007-000000000000.
[  226.983357][T10578] loop2: detected capacity change from 0 to 256
[  227.009722][T10578] FAT-fs (loop2): Directory bread(block 64) failed
[  227.012005][T10578] FAT-fs (loop2): Directory bread(block 65) failed
[  227.019000][T10578] FAT-fs (loop2): Directory bread(block 66) failed
[  227.021537][T10578] FAT-fs (loop2): Directory bread(block 67) failed
[  227.024080][T10578] FAT-fs (loop2): Directory bread(block 68) failed
[  227.028093][T10578] FAT-fs (loop2): Directory bread(block 69) failed
[  227.037879][T10578] FAT-fs (loop2): Directory bread(block 70) failed
[  227.040574][T10580] loop1: detected capacity change from 0 to 128
[  227.043794][T10578] FAT-fs (loop2): Directory bread(block 71) failed
[  227.046324][T10578] FAT-fs (loop2): Directory bread(block 72) failed
[  227.050491][T10578] FAT-fs (loop2): Directory bread(block 73) failed
[  227.057670][T10580] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  227.062712][T10580] ext4 filesystem being mounted at /629/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.242363][ T5856] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  227.911448][T10603] loop2: detected capacity change from 0 to 32768
[  227.916933][T10603] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  227.932834][T10603] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  227.977837][ T5847] ocfs2: Unmounting device (7,2) on (node local)
[  228.216761][T10620] loop3: detected capacity change from 0 to 32768
[  228.245948][T10620] JBD2: Ignoring recovery information on journal
[  228.291695][T10620] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  228.352937][ T8258] ocfs2: Unmounting device (7,3) on (node local)
[  228.528202][T10645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1839'.
[  228.779166][   T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  228.929029][   T24] usb 3-1: Using ep0 maxpacket: 32
[  228.933557][   T24] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[  228.936948][   T24] usb 3-1: config 0 has no interface number 0
[  228.942670][   T24] usb 3-1: config 0 interface 89 has no altsetting 0
[  228.947254][   T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  228.950672][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.953357][   T24] usb 3-1: Product: syz
[  228.954997][   T24] usb 3-1: Manufacturer: syz
[  228.957000][   T24] usb 3-1: SerialNumber: syz
[  228.964150][   T24] usb 3-1: config 0 descriptor??
[  228.974629][   T24] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  228.978610][   T24] em28xx 3-1:0.89: Video interface 89 found: bulk
[  229.556233][T10639] loop1: detected capacity change from 0 to 262144
[  229.561088][T10639] F2FS-fs (loop1): invalid crc value
[  229.578584][   T24] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[  229.600093][T10639] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  229.603734][T10639] F2FS-fs (loop1): Start checkpoint disabled!
[  229.611482][T10639] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  230.218859][   T24] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64)
[  230.227700][   T24] em28xx 3-1:0.89: board has no eeprom
[  230.321208][T10672] loop3: detected capacity change from 0 to 512
[  230.326032][T10672] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  230.334033][T10672] EXT4-fs (loop3): invalid journal inode
[  230.337692][T10672] EXT4-fs (loop3): can't get journal size
[  230.358983][T10672] EXT4-fs (loop3): 1 truncate cleaned up
[  230.363588][T10672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.438011][ T8258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.488866][   T24] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[  230.491916][   T24] em28xx 3-1:0.89: analog set to bulk mode.
[  230.494583][ T5314] em28xx 3-1:0.89: Registering V4L2 extension
[  230.520155][   T24] usb 3-1: USB disconnect, device number 31
[  230.542790][   T24] em28xx 3-1:0.89: Disconnecting em28xx
[  230.568008][ T5314] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[  230.581514][ T5314] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[  230.584333][ T5314] em28xx 3-1:0.89: No AC97 audio processor
[  230.603767][ T5314] usb 3-1: Decoder not found
[  230.605666][ T5314] em28xx 3-1:0.89: failed to create media graph
[  230.608054][ T5314] em28xx 3-1:0.89: V4L2 device video103 deregistered
[  230.630850][ T5314] em28xx 3-1:0.89: Registering snapshot button...
[  230.637169][ T5314] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input16
[  230.658279][ T5314] em28xx 3-1:0.89: Remote control support is not available for this card.
[  230.662570][   T24] em28xx 3-1:0.89: Closing input extension
[  230.667012][   T24] em28xx 3-1:0.89: Deregistering snapshot button
[  230.704949][   T24] em28xx 3-1:0.89: Freeing device
[  230.944760][T10679] loop1: detected capacity change from 0 to 32768
[  230.965887][T10679] jfs_strtoUCS: char2uni returned -22.
[  230.985416][T10679] charset = cp932, char = 0xfc
[  231.159017][   T24] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  231.268881][ T5884] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  231.288799][T10697] loop1: detected capacity change from 0 to 4096
[  231.312075][T10697] ntfs3(loop1): ino=b, Correct links count -> 1.
[  231.313015][   T24] usb 4-1: not running at top speed; connect to a high speed hub
[  231.315238][T10697] ntfs3(loop1): ino=18, mi_enum_attr
[  231.320281][T10697] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  231.320688][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.326552][   T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  231.332668][   T24] usb 4-1: config 1 has no interface number 1
[  231.334726][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  231.342219][   T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  231.348103][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  231.351209][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.354285][   T24] usb 4-1: Product: syz
[  231.355615][   T24] usb 4-1: Manufacturer: syz
[  231.357283][   T24] usb 4-1: SerialNumber: syz
[  231.432885][ T5884] usb 3-1: Using ep0 maxpacket: 32
[  231.440607][ T5884] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[  231.443813][ T5884] usb 3-1: config 0 has no interface number 0
[  231.446273][ T5884] usb 3-1: config 0 interface 89 has no altsetting 0
[  231.455240][ T5884] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  231.459146][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.462281][ T5884] usb 3-1: Product: syz
[  231.464075][ T5884] usb 3-1: Manufacturer: syz
[  231.465952][ T5884] usb 3-1: SerialNumber: syz
[  231.475375][ T5884] usb 3-1: config 0 descriptor??
[  231.491366][ T5884] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  231.495076][ T5884] em28xx 3-1:0.89: Video interface 89 found: bulk
[  231.584685][   T24] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  231.640532][   T24] usb 4-1: USB disconnect, device number 15
[  231.712468][T10699] loop1: detected capacity change from 0 to 32768
[  231.718151][T10699] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1861 (10699)
[  231.737450][T10699] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  231.741937][T10699] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  231.746671][T10699] BTRFS info (device loop1): using free-space-tree
[  231.763165][ T6959] udevd[6959]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  231.815756][T10699] BTRFS info (device loop1): rebuilding free space tree
[  232.085519][ T5884] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[  232.233143][ T5856] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  232.394370][T10723] syzkaller1: entered promiscuous mode
[  232.396726][T10723] syzkaller1: entered allmulticast mode
[  232.500064][T10726] loop1: detected capacity change from 0 to 1024
[  232.503906][T10726] ext4: Unknown parameter 'uid<00000000000000000000'
[  232.522730][   T33] audit: type=1326 audit(1755249283.294:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1863" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  232.539417][   T33] audit: type=1326 audit(1755249283.294:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1863" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  232.556514][   T33] audit: type=1326 audit(1755249283.304:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.1.1863" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ffbdc14a5 code=0x7ffc0000
[  232.574133][   T33] audit: type=1326 audit(1755249283.304:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1863" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  232.599058][   T33] audit: type=1326 audit(1755249283.304:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1863" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  232.607599][   T33] audit: type=1326 audit(1755249283.324:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1863" exe="/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  232.625493][   T33] audit: type=1326 audit(1755249283.324:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1863" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  232.633902][   T33] audit: type=1326 audit(1755249283.324:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1863" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  232.666359][   T33] audit: type=1326 audit(1755249283.334:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1863" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  232.684930][   T33] audit: type=1326 audit(1755249283.334:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.1.1863" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffbd8ebe9 code=0x7ffc0000
[  232.854517][T10741] netlink: 'syz.1.1870': attribute type 10 has an invalid length.
[  232.861236][T10741] team0: Port device wlan1 added
[  232.911400][ T5884] em28xx 3-1:0.89: writing to i2c device at 0xa0 failed (error=-5)
[  232.914179][ T5884] em28xx 3-1:0.89: failed to read eeprom (err=-5)
[  232.916324][ T5884] em28xx 3-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  232.980434][ T5884] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[  232.983184][ T5884] em28xx 3-1:0.89: analog set to bulk mode.
[  232.985565][ T5911] em28xx 3-1:0.89: Registering V4L2 extension
[  233.033119][ T5884] usb 3-1: USB disconnect, device number 32
[  233.041478][ T5884] em28xx 3-1:0.89: Disconnecting em28xx
[  233.063061][ T5911] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[  233.065273][ T5911] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[  233.067735][ T5911] em28xx 3-1:0.89: No AC97 audio processor
[  233.073758][ T5911] usb 3-1: Decoder not found
[  233.075469][ T5911] em28xx 3-1:0.89: failed to create media graph
[  233.077880][ T5911] em28xx 3-1:0.89: V4L2 device video103 deregistered
[  233.086765][ T5911] em28xx 3-1:0.89: Registering snapshot button...
[  233.093775][ T5911] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input17
[  233.098462][ T5911] em28xx 3-1:0.89: Remote control support is not available for this card.
[  233.102601][ T5884] em28xx 3-1:0.89: Closing input extension
[  233.105759][ T5884] em28xx 3-1:0.89: Deregistering snapshot button
[  233.116205][ T5884] em28xx 3-1:0.89: Freeing device
[  233.214344][T10755] loop1: detected capacity change from 0 to 128
[  233.227879][T10755] EXT4-fs: Ignoring removed oldalloc option
[  233.231023][T10755] EXT4-fs: Ignoring removed nomblk_io_submit option
[  233.244216][T10755] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  233.250666][T10755] ext4 filesystem being mounted at /649/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  233.302898][ T5856] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  233.351503][T10765] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1879'.
[  233.354362][T10765] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  233.370062][T10765] bridge_slave_0: left promiscuous mode
[  233.372058][T10765] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.376847][T10765] bridge_slave_1: left allmulticast mode
[  233.378616][T10765] bridge_slave_1: left promiscuous mode
[  233.380888][T10765] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.386049][T10765] bond0: (slave bond_slave_0): Releasing backup interface
[  233.390495][T10765] bond_slave_0: left allmulticast mode
[  233.393269][T10765] bond0: (slave bond_slave_1): Releasing backup interface
[  233.396036][T10765] bond_slave_1: left allmulticast mode
[  233.399379][T10765] team0: Port device team_slave_0 removed
[  233.402316][T10765] team0: Port device team_slave_1 removed
[  233.404550][T10765] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.407883][T10765] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.423200][T10765] team0: Port device wlan1 removed
[  233.426415][T10765] bond1: (slave geneve2): Releasing backup interface
[  233.583620][T10763] loop3: detected capacity change from 0 to 40427
[  233.610120][T10763] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  233.661833][T10763] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  233.675588][T10763] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  233.722038][T10763] syz.3.1878: attempt to access beyond end of device
[  233.722038][T10763] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  233.762093][T10785] loop2: detected capacity change from 0 to 2048
[  233.767950][T10785] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  233.776382][ T5855] udevd[5855]: incorrect nilfs2 checksum on /dev/loop2
[  233.793506][T10786] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.801491][ T8258] syz-executor: attempt to access beyond end of device
[  233.801491][ T8258] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  233.806087][ T8258] CPU: 0 UID: 0 PID: 8258 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  233.806100][ T8258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.806106][ T8258] Call Trace:
[  233.806110][ T8258]  <TASK>
[  233.806114][ T8258]  dump_stack_lvl+0x189/0x250
[  233.806130][ T8258]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.806140][ T8258]  ? __pfx_queue_work_on+0x10/0x10
[  233.806149][ T8258]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.806159][ T8258]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.806175][ T8258]  f2fs_handle_critical_error+0x37c/0x540
[  233.806190][ T8258]  f2fs_write_end_io+0x886/0xb60
[  233.806208][ T8258]  __submit_merged_bio+0x27a/0x6a0
[  233.806222][ T8258]  __submit_merged_write_cond+0x255/0x530
[  233.806236][ T8258]  f2fs_write_data_pages+0x261d/0x3000
[  233.806246][ T8258]  ? __lock_acquire+0xab9/0xd20
[  233.806275][ T8258]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  233.806309][ T8258]  ? __mod_zone_page_state+0xd7/0x140
[  233.806325][ T8258]  ? folios_put_refs+0x560/0x640
[  233.806340][ T8258]  ? __lock_acquire+0xab9/0xd20
[  233.806354][ T8258]  ? do_raw_spin_lock+0x121/0x290
[  233.806370][ T8258]  ? do_raw_spin_unlock+0x4d/0x240
[  233.806379][ T8258]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  233.806390][ T8258]  do_writepages+0x32e/0x550
[  233.806407][ T8258]  ? do_raw_spin_unlock+0x4d/0x240
[  233.806418][ T8258]  filemap_fdatawrite+0x199/0x240
[  233.806428][ T8258]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  233.806463][ T8258]  ? do_raw_spin_unlock+0x4d/0x240
[  233.806475][ T8258]  f2fs_sync_dirty_inodes+0x31f/0x830
[  233.806490][ T8258]  f2fs_write_checkpoint+0x95a/0x1df0
[  233.806511][ T8258]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  233.806543][ T8258]  ? kill_f2fs_super+0x298/0x6c0
[  233.806554][ T8258]  kill_f2fs_super+0x2c3/0x6c0
[  233.806565][ T8258]  ? __pfx_kill_f2fs_super+0x10/0x10
[  233.806571][ T8258]  ? radix_tree_delete_item+0x2b6/0x400
[  233.806585][ T8258]  ? shrinker_free+0x2ce/0x3e0
[  233.806595][ T8258]  deactivate_locked_super+0xbc/0x130
[  233.806606][ T8258]  cleanup_mnt+0x425/0x4c0
[  233.806614][ T8258]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.806626][ T8258]  task_work_run+0x1d4/0x260
[  233.806638][ T8258]  ? __pfx_task_work_run+0x10/0x10
[  233.806646][ T8258]  ? __x64_sys_umount+0x122/0x160
[  233.806659][ T8258]  ? exit_to_user_mode_loop+0x40/0x110
[  233.806672][ T8258]  exit_to_user_mode_loop+0xec/0x110
[  233.806682][ T8258]  do_syscall_64+0x2bd/0x3b0
[  233.806692][ T8258]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.806702][ T8258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.806710][ T8258]  ? exc_page_fault+0x9f/0xf0
[  233.806720][ T8258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.806728][ T8258] RIP: 0033:0x7f142ef8ff17
[  233.806737][ T8258] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  233.806744][ T8258] RSP: 002b:00007fff902ae898 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  233.806754][ T8258] RAX: 0000000000000000 RBX: 00007f142f011c05 RCX: 00007f142ef8ff17
[  233.806759][ T8258] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff902ae950
[  233.806764][ T8258] RBP: 00007fff902ae950 R08: 0000000000000000 R09: 0000000000000000
[  233.806769][ T8258] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff902af9e0
[  233.806774][ T8258] R13: 00007f142f011c05 R14: 000000000003908b R15: 00007fff902afa20
[  233.806811][ T8258]  </TASK>
[  233.806817][ T8258] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  233.973389][T10790] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.1890'.
[  234.096889][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1894'.
[  234.101624][T10798] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  234.105216][T10798] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  234.182854][T10802] netlink: 'syz.2.1895': attribute type 5 has an invalid length.
[  234.600417][T10816] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1900'.
[  234.729305][   T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  234.878910][   T24] usb 4-1: Using ep0 maxpacket: 8
[  234.886372][   T24] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  234.890540][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.893491][   T24] usb 4-1: Product: syz
[  234.894828][   T24] usb 4-1: Manufacturer: syz
[  234.896413][   T24] usb 4-1: SerialNumber: syz
[  234.903414][   T24] usb 4-1: config 0 descriptor??
[  234.910459][   T24] gspca_main: se401-2.14.0 probing 047d:5003
[  234.919228][ T5912] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  235.078985][ T5912] usb 3-1: Using ep0 maxpacket: 32
[  235.084405][ T5912] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  235.087121][ T5912] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  235.094489][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.097698][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  235.101201][ T5912] usb 3-1: config 1 has no interface number 0
[  235.105220][ T5912] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  235.108150][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.125533][ T5912] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  235.216336][T10830] tmpfs: Bad value for 'mpol'
[  235.322268][   T24] gspca_se401: Wrong descriptor type
[  235.336153][ T5912] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values
[  235.342250][ T5912] snd_usb_pod 3-1:1.1: invalid control EP
[  235.344634][ T5912] snd_usb_pod 3-1:1.1: cannot start listening: -22
[  235.347402][ T5912] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  235.352097][ T5912] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22
[  235.527313][ T5912] usb 4-1: USB disconnect, device number 16
[  235.665043][ T5911] usb 3-1: USB disconnect, device number 33
[  236.101544][T10842] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  236.111479][T10842] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  236.377995][T10849] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  236.636257][T10863] loop2: detected capacity change from 0 to 256
[  236.650271][T10863] exfat: Deprecated parameter 'namecase'
[  236.652520][T10863] exfat: Deprecated parameter 'utf8'
[  236.665947][T10863] exFAT-fs (loop2): bogus fat length
[  236.668082][T10863] exFAT-fs (loop2): failed to read boot sector
[  236.671005][T10863] exFAT-fs (loop2): failed to recognize exfat type
[  236.783234][T10853] loop3: detected capacity change from 0 to 32768
[  237.044095][T10861] loop1: detected capacity change from 0 to 40427
[  237.062871][T10861] F2FS-fs (loop1): invalid crc value
[  237.149833][T10861] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  237.154654][T10861] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  237.183395][T10853] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root
[  237.183395][T10853] 
[  237.191156][T10853] ERROR: (device loop3): remounting filesystem as read-only
[  237.243765][ T5856] syz-executor: attempt to access beyond end of device
[  237.243765][ T5856] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  237.261152][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  237.261177][ T5856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  237.261188][ T5856] Call Trace:
[  237.261193][ T5856]  <TASK>
[  237.261200][ T5856]  dump_stack_lvl+0x189/0x250
[  237.261224][ T5856]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.261242][ T5856]  ? __pfx_queue_work_on+0x10/0x10
[  237.261256][ T5856]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  237.261274][ T5856]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  237.261301][ T5856]  f2fs_handle_critical_error+0x37c/0x540
[  237.261325][ T5856]  f2fs_write_end_io+0x886/0xb60
[  237.261352][ T5856]  __submit_merged_bio+0x27a/0x6a0
[  237.261376][ T5856]  __submit_merged_write_cond+0x255/0x530
[  237.261399][ T5856]  f2fs_write_data_pages+0x261d/0x3000
[  237.261445][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  237.261498][ T5856]  ? ktime_get+0x3e/0x1f0
[  237.261513][ T5856]  ? ktime_get+0x3e/0x1f0
[  237.261532][ T5856]  ? rcu_is_watching+0x15/0xb0
[  237.261563][ T5856]  ? __lock_acquire+0xab9/0xd20
[  237.261621][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  237.261642][ T5856]  do_writepages+0x32e/0x550
[  237.261671][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[  237.261690][ T5856]  filemap_fdatawrite+0x199/0x240
[  237.261709][ T5856]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  237.261763][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[  237.261791][ T5856]  f2fs_sync_dirty_inodes+0x31f/0x830
[  237.261816][ T5856]  f2fs_write_checkpoint+0x95a/0x1df0
[  237.261849][ T5856]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  237.261898][ T5856]  ? kill_f2fs_super+0x298/0x6c0
[  237.261916][ T5856]  kill_f2fs_super+0x2c3/0x6c0
[  237.261935][ T5856]  ? __pfx_kill_f2fs_super+0x10/0x10
[  237.261947][ T5856]  ? radix_tree_delete_item+0x2b6/0x400
[  237.261970][ T5856]  ? shrinker_free+0x2ce/0x3e0
[  237.261988][ T5856]  deactivate_locked_super+0xbc/0x130
[  237.262007][ T5856]  cleanup_mnt+0x425/0x4c0
[  237.262022][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.262042][ T5856]  task_work_run+0x1d4/0x260
[  237.262061][ T5856]  ? __pfx_task_work_run+0x10/0x10
[  237.262077][ T5856]  ? __x64_sys_umount+0x122/0x160
[  237.262098][ T5856]  ? exit_to_user_mode_loop+0x40/0x110
[  237.262120][ T5856]  exit_to_user_mode_loop+0xec/0x110
[  237.262139][ T5856]  do_syscall_64+0x2bd/0x3b0
[  237.262158][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.262175][ T5856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.262188][ T5856]  ? exc_page_fault+0x9f/0xf0
[  237.262206][ T5856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.262219][ T5856] RIP: 0033:0x7f2ffbd8ff17
[  237.262233][ T5856] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  237.262245][ T5856] RSP: 002b:00007ffebadcb7f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  237.262261][ T5856] RAX: 0000000000000000 RBX: 00007f2ffbe11c05 RCX: 00007f2ffbd8ff17
[  237.262271][ T5856] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebadcb8b0
[  237.262279][ T5856] RBP: 00007ffebadcb8b0 R08: 0000000000000000 R09: 0000000000000000
[  237.262287][ T5856] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffebadcc940
[  237.262296][ T5856] R13: 00007f2ffbe11c05 R14: 0000000000039e21 R15: 00007ffebadcc980
[  237.262318][ T5856]  </TASK>
[  237.262325][ T5856] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  237.412266][ T8258] ------------[ cut here ]------------
[  237.414449][ T8258] kernel BUG at fs/jfs/inode.c:169!
[  237.418664][ T8258] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  237.419259][ T5856] syz-executor: attempt to access beyond end of device
[  237.419259][ T5856] loop1: rw=2051, sector=36920, nr_sectors = 8144 limit=40427
[  237.422108][ T8258] CPU: 0 UID: 0 PID: 8258 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  237.427251][ T5856] syz-executor: attempt to access beyond end of device
[  237.427251][ T5856] loop1: rw=2051, sector=45104, nr_sectors = 85968 limit=40427
[  237.431545][ T8258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  237.431561][ T8258] RIP: 0010:jfs_evict_inode+0x438/0x440
[  237.431611][ T8258] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 53 7d e8 fe e9 16 fe ff ff e8 29 14 85 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  237.431624][ T8258] RSP: 0018:ffffc90007d17ae0 EFLAGS: 00010293
[  237.431636][ T8258] RAX: ffffffff833a9767 RBX: ffff888103558430 RCX: ffff8880223e5640
[  237.431647][ T8258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103558430
[  237.431654][ T8258] RBP: 0000000000000001 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  237.431662][ T8258] R10: dffffc0000000000 R11: ffffffff833a7460 R12: dffffc0000000000
[  237.431671][ T8258] R13: dffffc0000000000 R14: ffff8881035580b8 R15: ffffffff833a9330
[  237.431681][ T8258] FS:  0000555566608500(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  237.431692][ T8258] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  237.431700][ T8258] CR2: 000055b98f6b57e8 CR3: 000000003817a000 CR4: 00000000000006f0
[  237.431728][ T8258] Call Trace:
[  237.431735][ T8258]  <TASK>
[  237.431741][ T8258]  ? evict+0x4f8/0x9c0
[  237.431758][ T8258]  ? __pfx_jfs_evict_inode+0x10/0x10
[  237.431781][ T8258]  evict+0x504/0x9c0
[  237.431798][ T8258]  ? __pfx_evict+0x10/0x10
[  237.431815][ T8258]  ? do_raw_spin_unlock+0x4d/0x240
[  237.431833][ T8258]  evict_inodes+0x64c/0x6d0
[  237.443014][ T5856] F2FS-fs (loop1): Issue discard(4615, 4615, 1018) failed, ret: -5
[  237.449384][ T8258]  ? __pfx_evict_inodes+0x10/0x10
[  237.449407][ T8258]  generic_shutdown_super+0x9a/0x2c0
[  237.449418][ T8258]  kill_block_super+0x44/0x90
[  237.449428][ T8258]  deactivate_locked_super+0xbc/0x130
[  237.449437][ T8258]  cleanup_mnt+0x425/0x4c0
[  237.449446][ T8258]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.449457][ T8258]  task_work_run+0x1d4/0x260
[  237.451786][ T5856] F2FS-fs (loop1): Issue discard(5638, 5638, 10746) failed, ret: -5
[  237.454380][ T8258]  ? __pfx_task_work_run+0x10/0x10
[  237.503846][ T8258]  ? __x64_sys_umount+0x122/0x160
[  237.505345][ T8258]  ? exit_to_user_mode_loop+0x40/0x110
[  237.507449][ T8258]  exit_to_user_mode_loop+0xec/0x110
[  237.509430][ T8258]  do_syscall_64+0x2bd/0x3b0
[  237.511023][ T8258]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.512665][ T8258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.514830][ T8258]  ? exc_page_fault+0x9f/0xf0
[  237.516619][ T8258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.518716][ T8258] RIP: 0033:0x7f142ef8ff17
[  237.520215][ T8258] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  237.526277][ T8258] RSP: 002b:00007fff902ae898 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  237.528962][ T8258] RAX: 0000000000000000 RBX: 00007f142f011c05 RCX: 00007f142ef8ff17
[  237.531619][ T8258] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff902ae950
[  237.534246][ T8258] RBP: 00007fff902ae950 R08: 0000000000000000 R09: 0000000000000000
[  237.537323][ T8258] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff902af9e0
[  237.540309][ T8258] R13: 00007f142f011c05 R14: 0000000000039e66 R15: 00007fff902afa20
[  237.543400][ T8258]  </TASK>
[  237.544611][ T8258] Modules linked in:
[  237.546316][ T8258] ---[ end trace 0000000000000000 ]---
[  237.549030][ T8258] RIP: 0010:jfs_evict_inode+0x438/0x440
[  237.551595][ T8258] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 53 7d e8 fe e9 16 fe ff ff e8 29 14 85 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  237.557970][ T8258] RSP: 0018:ffffc90007d17ae0 EFLAGS: 00010293
[  237.561403][ T8258] RAX: ffffffff833a9767 RBX: ffff888103558430 RCX: ffff8880223e5640
[  237.564602][ T8258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103558430
[  237.567098][ T8258] RBP: 0000000000000001 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  237.573528][ T8258] R10: dffffc0000000000 R11: ffffffff833a7460 R12: dffffc0000000000
[  237.576248][ T8258] R13: dffffc0000000000 R14: ffff8881035580b8 R15: ffffffff833a9330
[  237.578863][ T8258] FS:  0000555566608500(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  237.582043][ T8258] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  237.584227][ T8258] CR2: 000055b98f6b57e8 CR3: 000000003817a000 CR4: 00000000000006f0
[  237.586964][ T8258] Kernel panic - not syncing: Fatal exception
[  237.589586][ T8258] Kernel Offset: disabled
[  237.590993][ T8258] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:14:48  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007d17230
R8 =ffff8880204b8237 R9 =1ffff11004097046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98e4 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555566608500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b98f6b57e8 CR3=000000003817a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000000000000000
XMM02=0000555562899713 0000555562899690 XMM03=00005555628a1414 00005555628a1410
XMM04=0000000000000000 0000555562898498 XMM05=0102a8100000040a 1000060102a20008
XMM06=0002a00300080002 9803200800029003 XMM07=0fffffffffffff04 0280030fffffffff
XMM08=ffff0401f0030008 0001e80300080001 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81a023e5 RBX=ffffffff81a023a4 RCX=ffff8881058a8000 RDX=0000000000000000
RSI=ffffffff8be333e0 RDI=ffffffff8be333a0 RBP=ffffc90003e1f490 RSP=ffffc90003e1f380
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1c25c19
R12=dffffc0000000000 R13=1ffff920007c3e74 R14=0000000000000200 R15=0000000000000070
RIP=ffffffff81a023da RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555575928500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcfb7a00010 CR3=0000000122626000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=fffffc080005f003 00080005e003409c XMM03=0005800401000000 08060a0156e60fff
XMM04=0000000000000000 0000000000000000 XMM05=00005555628cf191 00005555628cf020
XMM06=0000000000000000 0000000000000000 XMM07=0ffffffffc080005 f00300080005e003
XMM08=409c100005d0033f 800405c003001000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
