last executing test programs:

3.031527286s ago: executing program 0 (id=769):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
r1 = inotify_init1(0x0)
ppoll(&(0x7f0000000480)=[{r1, 0x40}], 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f00000000c0)=""/73)

2.178164375s ago: executing program 1 (id=774):
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b700000000c300ffcb000000a10000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a740000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)

2.078649018s ago: executing program 1 (id=776):
syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002528bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a240129000302010209050101000203ff0609050a030800030101072501040809"], 0x0)

1.44090648s ago: executing program 2 (id=782):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FBIOBLANK(r0, 0x4611, 0x4)

1.438837595s ago: executing program 2 (id=783):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x63, &(0x7f0000000100)={&(0x7f0000001200)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x0, 0x3e, 0x3}]}, 0x20}, 0x1, 0xf00, 0x0, 0x4884d}, 0x10)

1.317931105s ago: executing program 2 (id=784):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
recvfrom$l2tp(r0, 0x0, 0x0, 0x10100, 0x0, 0x0)

1.269009724s ago: executing program 0 (id=785):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0)
creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.198534741s ago: executing program 0 (id=786):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x9, 0xc3072, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3)

1.129797224s ago: executing program 0 (id=787):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x14}}, 0x4000054)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

588.052881ms ago: executing program 1 (id=788):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x18, 0x30, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0x44000)

489.986006ms ago: executing program 1 (id=789):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x7f, 0x4bc, &(0x7f00000006c0)="$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")
keyctl$search(0x14, 0x0, &(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0xfffffffffffffffc)

489.791692ms ago: executing program 2 (id=790):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c)

419.536203ms ago: executing program 1 (id=791):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value, 0x8)

419.406768ms ago: executing program 2 (id=792):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800)

359.966896ms ago: executing program 1 (id=793):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20108c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="34dd0f00135ea23c22845cc5474e7cd7e7ab01d33c4486b62e3b4f9822364f30c34779205bbd653e2b0e7bbbcba1e3dc78833fbb91474ba644d13b9a3bfddc66bfc8ba12f680d556b1b4d4a1ec5b55eeedc8454a11312f3025c08220a36ab6d810b4de0836f341eb18f984b2a7feaef926859b77e733f9bb7220a2460746c81448ccc7a901e32427b8cc656a1b8a1c52fac1524d3a90fc424c13d6cc5708aa1ea205ddd2b967de4068647f1a5fade5146a344fd31daeeaeede8f61b1066ca3a10599230edf07182401e51b28d35033a6f652886ee8d43d7ebf2d546b"], 0x1, 0x61f5, &(0x7f00000075c0)="$eJzs3U1vHVf9B/DfffRD/k2tLqr+I4TctDyU0iROSggUaLsoCzZdoGxRItetIlJASUBpZRFX3rBgxSsAIbFEiCViwQvogi07VqyIZCOBumLQ2OfE48m9vXYd37n2fD6SPfObM9c+4++d++A7MycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjed7+/0omIGz9LC5Yi/i96Ed2IhbJejoiF5aW8fj8inoud5ng2IgZzEeXtd749HfFqRHx8NmJre321XHz5gP146w9/++0Pzrz9198PLv7nj/d6r41b7/79X/77Tw+Ots0AAADQNkVRFJ30Nv9cen/fbbpTAMBU5Of/IsnLT339q3+8/edZ6o9arVar1VOoq4rRHlSLiNio3qZ8zeDjeAA4YTbik6a7QIPk32r9iDjTdCeAmdZpugMci63t9dVOyrdTfT5Y3m3Px4Lsy3+j8+j8jnHTSerHmEzr/rUZvXhmTH8WptSHWZLz79bzv7HbPkzrHXf+0zIu/+HuqU+tk/Pv1fOvOT35d0fm31Y5//6h8u/JHwAAAAAAZlj+//9Sw5//zh19Uw7k0z7/XZ5SHwAAAAAAAADgSTvq+H+PGP8PAAAAZlb5Xr3067N7y8Zdi61cfr0T8VRtfaBl0skyi033AwAAAAAAAAAAAADapL97DO/1TsQgIp5aXCyKovyqqteHddTbnwI71yxouhPA9DX9IA8AALs+Pls7l78TMR8R16O7c62/weLiYlHMLywWi8XCXH49O5ybLxYq7+vztFw2NzzAC+L+sCh/2HzldlWT/l8wqb3+88rfNSx6B+jYEzJIf80xzQ2FDQDJ7rPRlmekU6YonvZpAwdi/z+FlmKp6fsVs6/puykAAABw/IqiKDrpct7n0vh+3aY7BQBMRX7+r38ucKS6O6Y94sn8fLVarVar1Z+pripGe1AtImKjepvyNYPh+AHghNmIT5ruAg2Sf6v1I+K5pjsBzLRO0x3gWGxtr692Ur6d6vNBGt89HwuyL/+Nzs7t8u1HTSepH2MyrfvXZvTimTH9eXZKfZglOf9uPf8bu+3DtN5x5z8t4/If7pwy1z45/149/5rTk393ZP5tlfPvHyr/nvwBAAAAAGCG5f//L/n8N28yAAAAAAAAAJw4W9vrq/m81/z5/+dGrOf8z9Mp5985bP4LaV7+J1rOv1vL/8u19XqV+Ydv7u3//9peX/3dvX/+f54eNP+5PNNJ96xOukd00m/q9NP0KFv3uM1Bb1j+pkGn2+unY36KwbtxK27HWlzat243/T322lf2tZc9Hexrv7yvvf9Y+5V97YN03YFiIbdfiNX4cdyOd3bay7a5Cds/P6G9mNCe8+95/G+lnH+/8lXmv5jaO7Vp6eFH3cf2++p01O9549bnf3Hp+Ddnos3oPdq2qnL7zjfQn/Jv8lYM46d31+5cuH/z3r07K5EmZ6pLL0eaPGE5/8HO19ze4/8Lu+35cb+6vz78aHjo/GfFZvTH5v9CZb7c3pem3Lcm5PyH6Svn/05qH73/n+T8x+//LzfQHwAAAAAAAAAAAAAAAPg0RVHsnCL6RkRcTef/NHVuJgAwXfn5v0jycrVarVar1aevripGe71aRMRfqrcpXzP8fNQPAwBm2X8j4u9Nd4LGyL/F8vX+yumLTXcGmKq7H3z4w5u3b6/dudt0TwAAAAAAAACAzyqP/7lcGf/5xYhYqq23b/zXN2P5qON/9vPMowFGn/BA32Nsdoe9bmW48edjZ3zuC+PG/z4fj4//ncfE7VW3Y4zBhPbhhPa5Ce3zI5fupTXyRI+KnP/zlfHOy/zP1YZfb8P4r/Ux79sg53++cn8u8/9Sbb1q/sVvZi7/jYOuuBndfflfvPf+Ty7e/eDDV269f/O9tffWfnRlZeXSlatXr127dvHdW7fXLu1+P55ez4Ccfx772nGg7ZLzz5nLv11y/l9ItfzbJef/xVTLv11y/vn1nvzbJeef3/vIv11y/i+lWv7tkvP/Sqrl3y5b2+tzZf4vp1r+7ZL3/6+mWv7tkvN/JdXyb5ec/4VUy79dcv4XU32A/F0e/hTJ+edPuOz/7ZLzX0m1/Nsl53851fJvl5z/lVTLv11y/q+mWv7tkvP/Wqrl3y45/6upln+75Py/nurD5L9wjP1iOnL+11Jt/2+XnP83Ui3/dsn5fzPV8m+XnP9rqZZ/u+T8v5Vq+bdLzv/bqZZ/u+T8v5Nq+bdLzv/1VMu/Xfau/2/GjBkzeabpRyYAAAAAAAAAAAAAoG4ahxM3vY0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYe/uYuQ66/uBn1nv2muHEAMhOPkb2CQmhMRk13biF/5NMYEADVAKJBT6guN612bBb3jtEiiSTQMlEkZFFVXTi7aAojZSVRFVXNCK0lxUfbkq7QW9qagqITWqDAqoSG0F2WrmPM/jmdnZmVnveH32PJ+PlPx2Z86Z88yZ55yd366/cwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHa3vnnuc42iKJr/tf63tShe1Px689TW1m1vuNYjBAAAAFbrp63/P39DuuHgECu1LfN3r/rHry8uLi4WH9jwuxPjxWK6Y6ooJjYVReu+6Jl//2DjS23fB48Xk42xtu/HBmx+w4D7xwfcPzHg/o0D7t804P7JAfcv2QFLbC5/H9N6sB2tL7eWu7S4sZho3bejx1qPNzaNjcXf5bQ0WussThwt5ovjxVwx07F8uWyjtfw3b21u6+1F3NZY27a2N2fIDz91JI6hEfbxjo5tXX7M6PtvKqZ+9MNPHfnjs5du7lUH7oaOxyvHeedtzXF+JtxSjrVRbEr7JI5zrG2c23u8Jhs6xtlordf8unuczw85zg2Xh7mmul/zyWKs9fW3W/tpvP3Xemk/bQ+3/fftRVFcuDzs7mWWbKsYK7Z03DJ2+fWZLGdk8zGaU+mlxfiK5umtQ8zTZp3d0TlPu4+J+PrfGtYbX2YM7S/T9z+9ccnrvtJ5GjWf9XLHSvccHPWxUpU5GOfFt1tP+omec3BHeP6fumP5Odhz7vSYg+l5t83B2wbNwbGNG1pjTi9Co7XO5Tm4q2P5Da0tNVr1uTv6z8HpsydOTy984pOvnz9x+NjcsbmTe3btmtmzd+/+/funj84fn5sp/3+Fe7v6thRj6Ri4Ley7eAy8tmvZ9qm6+JXRHYeTfY7DrV3Ljvo4HO9+co21OSCXzuny2Hi4udMnL44VyxxjrdfnrtUfh+l5tx2H423HYc+fKT2Ow/EhjsPmMqfvGu49y3jbf73GcLV+Fmxtm4Pd70e65+Co349UZQ5Ohnnxr3ct/7NgexjvEztX+n5kw5I5mJ5uOPc0b0nv9yf3t0qveXlL847rNhbnFubO3PPY4bNnz+wqQlkTL2ubK93zdUvbcyqWzNexFc/Xg/OveuKWHrdvDftq8vXN/00u+1o1l7n3nv6vVeunW+/92XHr7iKUEVvr/dnrp3lzf6Zess/+bC7zmenVvxdPfWnb+XdimfNv7PtfKLeXHurxDRPj5fG7Ie2diY7zcedLNd46dzVa235+erjz8UT4b63Pxzf2OR9v61p21Ofjie4nF8/HjUG/7Vid7tdzMsyT4zP9z8fNZbbtXumcHO97Pr491EbY/68LnULqi9rmznLzNm1rfHwiPK/xuIXOebqnY/mJ0Js1t/X07iubp3feXj7WhvTsLlureTrVteyo52k6Xy03TxuDfvt2Zbpfz8kwL27c03+eNpd59t7Vnzs3xy/bzp0bB83BiQ0bm2OeSJOwPN8vbo5z8J7iSHGqOF7Mtu7d2JpPjda2dt433BzcGP5b63Pltj5z8M6uZUc9B9PPseXmXmN86ZMfge7XczLMiyfv6z8Hm8u8Zd9o37veGW5Jy7S9d+3+/dpyv/O6pWs3Xc3feTXH+Tf7+v9utrnM8f0r7TP776e7wy3X9dhP3cfvcsfUbLE2+2lbGOel/cvvp+Z4mst86cCQ8+lgURTnP/ZA6/e94e8rf37uO1/v+LtLr7/pnP/YAz+4/ujfrmT8AKx/L5RlS/mzru0vU8P8/R8AAABYF2LfPxZqov8HAACA2oh9f/xX4Yn+HwAAAGoj9v3joSaZ9P/b3nJp/oXzRUrmLwbx/rQbHiqXixnXmfD91OJlzdsfeGrux395frhtjxVF8ZOHfqPn8tseiuMqTYVxPvNg5+1LVzw/1PYffeTycu359S+Hx4/PZ9hp0CuCO1MUxTdv+EJrO1MfvNiqzz70aKu+98ITjzeXef5A+X1c/7mXlcv/QQj/Hjx6uGP958J++F6oM+/ovT/iel+7+Lrt+95/eXtxvcZtL2497Sc/VD5u/JycLz5eLh/383Lj/6vPP/215vKPvab3+M+P9R7/0+Fxn3rw0nxzxv3PK8vl21+D5vdxvc+G8cftPRXWv+er3+o5/mc+Vy5/+q3lco+GGrd/Z/h+x1svzbfvr8cahzueV/G2crm4/Znv/Hbr/vh48fG7xz956GLH/uieH8/+c/k4013Lx9vjdqK/6Np+83Ha52fc/tO/9WjHfh60/Wfe+9wrm4/bvf27u5bb0LV+9yc2/eFnv9Bze3E8B//sdMfzOfiecByH7T/5oTAfw/3/+8wXOrYbPfqezvNPXP7LW893PJ/o7T8qt//MG4+16n9M/fj3r3vR9S++8OrmviuKb7+vfLxB2z/2R6c6xv+Vm+5qvR7x/pjR797+cuL2z3x858lTC+fmZ9v2auuzc95ZjmfT5OYtzfHeEM6t3d8fOnX2w3NnpmamZopiqr4foXfFvhrqD8pyYaXr3/VIeD1v+b1vbrnjnz4fb/+Xh8vbL76j/Ln12rDcF8PtW8vXb7Gxyu0/eetNreO78Wz5fUeOfQS27/jP/UMtGJ5/9/uCON9Pv/zDrf3QvK/1cyMe16sc/3dny8f5Rtivi+GTmW+76fL22pePn41w8X3l8b7q/RdOc/F1/ZPwer/re+Xjx3HF5/vd8D7mW9s6z3dxfnzj/Fj347c+xeNCOJ8UF8r741Jxf198/qaew4ufQ1JcuLn1/e+kx7l5RU9zOQufWJg+Pn/y3GPTZ+cWzk4vfOKTh06cOnfy7KHWZ3ke+sig9S+fn7a0zk+zc3vvLWY2F0VxqphZgxPW1Rl/86vhxn/6kSOz+2bumJ07evjc0bOPnJ47c+zIwsKRudmFOw4fPTr38UHrz8/ev2v3gT37du88Nj97//4DB/Yc2Dl/8lRzGOWgBtg789GdJ88caq2ycP+9B3bdd9+9MztPnJqdu3/fzMzOc4PWb/1s2tlc+9d3npk7fvjs/Im5nQvzn5y7f9eBvXt3D/w0wBOnjy5MTZ85d3L63MLcmenyuUydbd3c/Nk3aH3qaeHfyvez3RrlB/EV7757b/p81qanPr3sQ5WLdH2A6KXwWTT/8JLT+4f5Pvb9E6EmmfT/AAAAkIPY928MNdH/AwAAQG3Evn9TqIn+HwAAAGoj9v2ToSaZ9P/y//L/w+X/y/tHmf/vlZ8v5P8rlf8//bEyV7re8/8xPy//n4drnP9f9fbl/+X/65f/Hz4/v97HL/8v/89SVcv/x75/c1Fk2f8DAABADmLfvyXURP8PAAAAtRH7/utCTfT/AAAAUBux739RqEkm/b/8/1D5/92DAlf1z/+P/vr/8v/y/2uS/48vjvx/Nlacv3//wx3fyv8H8v/y//L/8v/y/6zaxLL3XKv8f+z7rw81yaT/BwAAgBzEvv/FoSb6fwAAAKiN2PffEGqi/wcAAIDaiH3/1lCTTPp/+X/X/5f/l/+vdf5/tdf/bxuM/P/64Pr//cn/D3DF+f9J+f/1mP+fGO34q53/Hzh8+X+uiqpd/z/2/S8JNcmk/wcAAIAcxL7/paEm+n8AAACojdj3vyzURP8PAAAAtRH7/htDTTLp/+X/5f/l/+X/5f97b3/w9f/Lr+T/q0X+vz/5/wFc/z+v/P+Ix1/t/P+or/8/8WD3+vL/9FK1/H/s+18eapJJ/w8AAAA5iH3/TaEm+n8AAACojdj3vyLURP8PAAAAtRH7/m2hJpn0//L/VyP//9PW2vL/8v/d80P+v275/5L8f7XI//cn/z+A/L/8v/z/cPn/Hh9+Jf9PL1XL/8e+/+ZQk0z6fwAAAMhB7PtvCTVZpv9fHPJv2wAAAEB1xL7//4Wa+Ps/AAAA1Ebs+7eHmmTS/8v/u/6//H9e+f+7N8r/y//Xm/x/f/L/A8j/y//L/w95/f+lVpL/3zTowaiNquX/Y9//ylCTTPp/AAAAyEHs+18VaqL/BwAAgNqIff+rQ030/wAAAFAbse+fCjXJpP+X/69X/v9P//rJVxfy//L/A7Zf0/x/nAby/5mT/+9P/n8A+X/5f/n/Ncn/k4+q5f9j339rqEkm/T8AAADkIPb9t4Wa6P8BAACgNmLff3uoif4fAAAAaiP2/TtCTTLp/+X/65X/j+T/5f/7bb+m+f9E/j9v8v89tB2k8v8DyP/L/2ef/4/vfuX/GY2q5f9j3/+aUJNM+n8AAADIQez77wg10f8DAABAbcS+/7WhJvp/AAAAqI3Y998ZapJJ/y//L/8v/y//L//fe/vy/+uT/H9/K83/b5T/l/+X/88s/+/6/4xW1fL/se9/XahJJv0/AAAA5CD2/XeFmuj/AQAAoDbiv98s/92r/h8AAADqKPb9O0NNMun/5f/l/3PK/zfk/+X/5f9rT/6/P9f/H0D+X/5f/l/+n5GqWv4/9v2vDzXJpP8HAACAHMS+/55QE/0/AAAA1Ebs+6dDTfT/AAAAUBux758JNcmk/5f/l//PKf/v+v/y//L/9Sf/398o8v+L5+X/5f97k/+vYP6/KOT/uaaqlv+Pff+uUJNM+n8AAADIQez7d4ea6P8BAACgNmLfvyfURP8PAAAAtRH7/ntDTTLp/+X/5f/l/+X/5f97b1/+f32S/+/P9f8HkP+X/69b/t/1/7nGqpb/j33/faEmmfT/AAAAkIPY9+8NNdH/AwAAQG3Evn9fqEno/3v9u24AAABgfYl9//5Qk0z+/i//X5P8/2/+fce25f/l//ttfzT5/83y/6HK/1dLTfP/3YfFFZP/H0D+/6rl54uxkQzxmo1f/l/+nytTtfx/7PsPhJpk0v8DAABADmLf/4ZQE/0/AAAA1Ebs+/9/qIn+HwAAAGoj9v0/E2qSSf8v/1+T/H8X+X/5/37bd/1/+f86q2n+f2Rqlf8fk/9fT/l/1/+X/x+0PvV09fP/8avh8v+x778/1CST/h8AAAByEPv+nw010f8DAABAbcS+/42hJvp/AAAAqI3Y9x8MNcmk/5f/l/+/Wvn/C2Py/93zI6/8/xuLblXM/zcnj/x/vVQ4/z8xzPbl/13/X/5/Tcbf/aNmJOOX/5f/Z6mqXf8/9v1vCjXJpP8HAACAHMS+/4FQE/0/AAAA1Ebs+98caqL/BwAAgNqIff9bQk0y6f/l/+X/Xf9f/t/1/3tvX/5/fapw/n8o8v/y//L/63f88v/y/yxVtfx/7PsfDDXJpP8HAACAHMS+/62hJvp/AAAAqI3Y978t1ET/DwAAALUR+/63h5pk0v/L/8v/y//L/8v/996+/P/6JP/fn/z/APL/8v/y//L/jFTV8v+x7/+5UJNM+n8AAADIQez7Hwo10f8DAABAbcS+/x2hJvp/AAAAqI3Y978z1CST/l/+X/5f/l/+X/6/9/bl/9cn+f/+5P8HkP+X/5f/l/9npKqW/499/7tCTTLp/wEAACAHse//+VAT/T8AAADURuz73x1qov8HAACA2oh9/y+EmmTS/8v/y/9XK/+/eL59Pfl/+f9iVPn/5kry/1mQ/+9P/n+AHvn/TfL/8v/y//L/XLGq5f9j3/+eUJNM+n8AAADIQez73xtqov8HAACA2oh9//tCTfT/AAAAUBux73841CST/l/+P8v8f3rK1cv/u/6//L/r/8v/r478f3/y/wO4/r/8v/y//D8jVbX8f+z7Hwk1yaT/BwAAgBzEvv/9oSb6fwAAAKiN2Pf/YqiJ/h8AAABqI/b9Hwg1yaT/l//PMv9f4ev/1y3/P94xP3LK/0+2vZ5pXsr/y/+vAfn//uT/B5D/l/+vcv4/zObNy6wv/08VVS3/H/v+D4aaZNL/AwAAQA5i3/9LoSb6fwAAAKiN2Pf/cqiJ/h8AAABqI/b9vxJqkkn/X8P8/4VC/l/+vzL5/875kVP+3/X/l5L/Xxvy//3J/w8g/y//X+X8/wDy/1RR1fL/se//1VCTZRu/H/zXEE8TAAAAqJDY938o1CSTv/8DAABADmLffyjURP8PAAAAtRH7/kdDTTLp/2uY/1/l9f/jFVXl/+X/R53/H5P/l/+X/18Do8v/v+L6opD/l/+X/5f/l/+X/2c1qpb/j33/4VCTTPp/AAAAyEHs+38t1ET/DwAAALUR+/4joSb6fwAAAKiN2PfPhppk0v9fw/z/RDXz/67/f6X5/5/I/7v+fyD/35v8/9pw/f/+5P8HkP+X/5f/l/9npKqW/499/1yoSSb9PwAAANRY+nVw7PuPhpro/wEAAKA2Yt9/LNRE/w8AAAC1Efv+D4eaZNL/u/6//L/r/1+L/P94x/Ly/yX5f/n/UZD/70/+fwD5f/l/+X/5f0aqavn/2PfPh5pk0v8DAABADmLf/5FQE/0/AAAA1Ebs+z8aaqL/BwAAgNqIff/xUJNM+n/5f/n/3PP/jaK44Pr/o83/b5L/70n+f23I//cn/z+A/P9a5uevH8mgr934l5D/l/9nqarl/2PffyLUJJP+///Yu48mu85qj8MbY0vdI/gIjBkxhJH5CEyZUcWYaJODZXIGk3MwOedgosk552iTczTRUNWUW2stqfsc7S2pj/rs/b7PM1lXuhZ9hBtz/1f1qxcAAAB6kLv/vnGL/Q8AAADNyN1/v7jF/gcAAIBm5O6/f9zSyf7X/+v/e+//h628/3/wr2+t//f+/3r6/+Ox0t9fvv6vO1cUfs7+/y53vfpe+n/9v/5/lPf/9f/6fw6bW/+fu/8BcUsn+x8AAAB6kLv/gXGL/Q8AAADNyN1/Vdxi/wMAAEAzcvdfHbd0sv/1//p//b/+/0D/f6P+X/+/bN7/H6f/n6D/1//r//X/bNTc+v/c/Q+KWzrZ/wAAANCD3P0PjlvsfwAAAGhG7v6HxC32PwAAADQjd/9D45ZO9r/+X/+v/19K/3/C+/+Hfj/6f/3/Ovr/cfr/Cfp//b/+X//PRs2t/8/d/7C4pZP9DwAAAD3I3f/wuMX+BwAAgGbk7n9E3GL/AwAAQDNy9z8ybulk/+v/9f/6/6X0/8f0/r/+X/+/cNcPZ/6ZoP9fpf+fMNH/D4P+f8x59/Prf3vL+fznoP/X/7Nqbv1/7v5HxS13H4YTF/ubBAAAAGYld/+j45ZO/vwfAAAAepC7/5q4xf4HAACAZuTuPxW3dLL/9f/6f/2//l//v/7r6/+Xyfv/447e/9/5jve5d7/9v/f/x3n/f9P9/23fGfp/lm1u/X/u/mvjlk72PwAAAPQgd/9j4hb7HwAAAJqRu/+xcYv9DwAAAM3I3f+4uKWT/a//b63/v/2BX3dW/79fu+j/9f/6f/1/6/T/47z/P2H/H3O79UP9v/7f+//6f45mbv1/7v7Hxy2d7H8AAADoQe7+J8Qt9j8AAAA0I3f/E+MW+x8AAACakbv/SXFLJ/tf/99a/3/w13n/X/+/7uvr//X/LdP/j9P/T2jl/f+L/K7Zdj9/VNv+/Pp//T+r5tb/5+5/ctzSyf4HAACAHuTuf0rcYv8DAABAM3L3PzVusf8BAACgGbn7nxa3dLL/9f/6/2X0//kV5tT/7+3tHfoe0v+ftvT+P+n/l0n/P07/P6GV/v8ibbufX/rn1//r/1k1t/4/d//T45ZO9j8AAAD0IHf/M+IW+x8AAACakbv/mXGL/Q8AAADNyN3/rLilk/2v/9f/L6P/9/6//t/7//r/86P/H6f/n6D/1//r//X/bNTc+v/c/dfFLZ3sfwAAAOhB7v5nxy32PwAAADQjd/9z4hb7HwAAAJqRu/+5cUsn+1//r//X/+v/9f/rv77+f5n0/+P0/xM67/+HU/p//b/+n82aUf9/1q/aGZ4Xt3Sy/wEAAKAHufufH7fY/wAAANCM3P0viFvsfwAAAGhG7v4Xxi2d7H/9/2z6//2cr63+f3cYBv3/0Gn/v3vW38/6vtT/6/+Pgf5/nP5/Quf9/7b7+aV/fv2//p/Dds75v9nW+/+5+190+PN1sv8BAACgB7n7Xxy32P8AAADQjNz9L4lb7H8AAABoRu7+l8Ytnex//f9s+v99bfX/3v8//P3RU//v/f9V+v/jof8fp/+foP/X/+v/9f9s1FU3nf6/Zw/bVv+fu/9lcdOJKy76twgAAADMTO7+l8ctnfz5PwAAAPQgd/8r4hb7HwAAABbqupWfyd3/yrilk/2v/99s/3/irJ/T/+v/D39/6P/1//r/S0//P07/P0H/r//X/+v/2ai59f+5+18Vt3Sy/wEAAKAHufuvj1vsfwAAAGhG7v5Xxy32PwAAADQjd/9r4pZO9r/+3/v/+n/9/1T/f+Y5VP2//n/+9P/j9P8T9P/6/5HPf/i/nw7bQP9/8sz/qP+nDRfQ/+/t7V1zyfv/3P2vjVs62f8AAADQg9z9r4tb7H8AAABoRu7+18ct9j8AAAA047bdvzsMwxv2f9Tf/tf/d9r/57f6svr/U8Og//f+v/5f/z9O/z9O/z9B/6//9/6//p+Nmtv7/7n73xi3dLL/AQAAoAe5+98Ut9j/AAAA0Izc/W+OW+x/AAAAaEbu/rfELZ3sf/1/p/2/9//1//r/4+7/bx30/8diEf3/7rm//tz7/2v1//r/Ed31//e424Ef6v/1/6yaW/+fu/+tcUsn+x8AAAB6kLv/bXGL/Q8AAADNyN3/9rjF/gcAAIBm5O5/R9x0eSf7X/+v/9f/6//1/+u//jG//39iGAb9/wYsov8fMff+fzPv/x/+T/kZ+n/9/5I/v/5f/8+qufX/ufvfGbd0sv8BAACgB7n73xW32P8AAADQjNz9745b7H8AAABoRu7+98Qtnex//b/+X/+v/2++/792Ef2/9/83RP8/bh79/7np//X/S/78+n/9P+dvW/1/7v73xi2d7H8AAADoQe7+98Ut9j8AAAA0I3f/++MW+x8AAACakbv/A3FLJ/tf/6//v5D+Pz+n/r+t/v/ksfT/p4bhvPv/nQP/ep28/6//3xD9/7jz6f/3v7f1//p//X+v/f91+n82aW7v/+fuvyFu6WT/AwAAQA9y938wbv2/bu1/AAAAaEbu/g/FLfY/AAAANCN3/4fjlk72v/5f/+/9f/1/8+//6/+7ov8f5/3/Cfp//b/+3/v/bNTc+v/c/R+JWzrZ/wAAANCD3P0fjVvsfwAAAGhG7v6PxS32PwAAADQjd/+NcUsn+1//r//X/+v/9f+n/x7q/9ug/x93PP3/rv5f/1/9/O3iPwX6f/3/1K+nTXPr/3P3fzxu6WT/AwAAQA9y938ibrH/AQAAoBm5+z8Zt9j/AAAAsEiXr/m53P2fils62f/6f/2//l//r/9f//X1/8u0lf4/vyn0/97/D/30/3c68KOlvf9/+L+/9P/6fzZvbv1/7v5Pxy2d7H8AAADoQe7+z8Qt9j8AAAA0I3f/Z+MW+x8AAACakbv/c3FLJ/tf/6//1//r//X/67++/n+ZvP8/Tv8/Qf+/1ffzl/759f/6f1bNrf/P3f/5uKWT/Q8AAAA9yN3/hbjF/gcAAIBm5O7/Ytxi/wMAAEAz9nd/xmUd7n/9v/5f/6//1/+v//r6/2XS/4/T/0/Q/+v/9f/6fzZqbv3/l/Z/1c7w5bilk/0PAAAAPcjd/5W4xf4HAACAZuTu/2rcYv8DAABAM3L3fy1u6WT/6//1/8vo//f29q7R/+v/D/5+zvT/N+v/Kfr/cfr/Cfp//b/+X//PRs2t/8/d//W4pZP9DwAAAD3I3f+NuMX+BwAAgGbk7v9m3GL/AwAAQDNy938rbulk/+v/Z9D/7+j/vf+v/x+8/7/a/192+h/K+v8Lo/8fp/+f0GL/v3P+v/1t9/NHdck+/47+X//PxZpb/5+7/9txSyf7HwAAAHqQu/87cYv9DwAAAM3I3f/duMX+BwAAgGbk7v9e3NLJ/tf/H1//f9u/d728/787rP/8+n/9v/7f+/+Xmv5/nP5/Qov9/wXQ/3v/X//Pps2t/8/d//245eDwu+LCfpcAAADAnOTu/0Hc0smf/wMAAEAPcvf/MG6x/wEAAKAZuft/FLd0sv/1/zN4/7/B/t/7/+u/P/T/s+7/L9P/t+EC+/sbDv+E/j/o//X/+n/9/5H6//xu1v/3bm79f+7+H8ctnex/AAAA6EHu/p/ELfY/AAAANCN3/01xi/0PAAAAzcjdf3Pcctb+X9d2t0L/r//X/+v/9f/rv77+f5m8/z/ufPv/k8PR+v/Uff+/s/Kvr/+/hLb9+fX/3v9n1dz6/9z9P41b/Pk/AAAALM4V5/j53P0/i1vsfwAAAGhG7v6fxy32PwAAADQjd/8v4pZbLtvWRzpW+n/9v/5f/6//X//19f/LpP8f5/3/Cd7/30Q/f6X+v43+fxj0/xzd3Pr/3P2/jFv8+T8AAAA0I3f/r+IW+x8AAACakbv/13GL/Q8AAADNyN3/m7ilk/2v/9f/H7H/308z9f+n6f9P0/+vp/8/Hvr/cfr/Cfp/7//r/73/z0bNrf/P3f/buKWT/Q8AAAA9yN3/u7jF/gcAAIBm5O7/fdxi/wMAAEAzcvf/IW7pZP9vrf+Pf6v1/4vv/73/r//X/+v/Z0X/P67R/n93GAb9/wZsu59f+ufX/+v/WTW3/j93/x/jlk72PwAAAPQgd/+f4hb7HwAAAJqRu//PcYv9DwAAAM3I3f+XuKWT/e/9f/2//l//r/9f//X1/8uk/x/XaP9/5Pf/62+U/l//r//X/7NRc+v/c/f/NW7pZP8DAABAD3L3/y1usf8BAACgGbn7b4lb7H8AAABoRu7+v8ctnex//b/+X/+v/9f/r//6+v9l0v+P22b/f887TH/ZbfX/Rf+fH0H/r//X/7MRc+v/c/f/I27pZP8DAABAD3L3/zNusf8BAACgGbn7/xW32P8AAADQjNz9/45bOtn/E/3/yfoL9f+j9P8HP7/+f/33h/5f/6//v/T0/+O8/z9B/+/9f/2//p+Nmlv/n7v/P3FLJ/sfAAAAepC7/9a4xf4HAACAZuTu/2/cYv8DAABAM3L3/y9u6WT/e/9/Sf3/lfp//b/+X/+v/5+g/x+n/5+g/9f/6//1/2zU3Pr/3P3/DwAA//+2vUye")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x185242, 0x0)

359.675263ms ago: executing program 2 (id=794):
openat$incfs(0xffffffffffffff9c, &(0x7f0000000700)='.log\x00', 0x80, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'erspan0\x00', 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0x10}}}, 0x24}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
syz_read_part_table(0x5e3, &(0x7f0000000000)="$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")

49.179145ms ago: executing program 0 (id=795):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x6c, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{0x0, 0x2}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x38}}, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}}}]]}, 0x6c}}, 0x0)

0s ago: executing program 0 (id=796):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020603000a000000000000000200000005000100070000000900020073797a32000000000c00078008000640fffffff716000300686173683a6e65742c706f72742c6e6574000000050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0)

kernel console output (not intermixed with test programs):

 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   71.483621][ T5843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.483628][ T5843] Call Trace:
[   71.483634][ T5843]  <TASK>
[   71.483640][ T5843]  dump_stack_lvl+0x189/0x250
[   71.483664][ T5843]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.483678][ T5843]  ? __pfx_queue_work_on+0x10/0x10
[   71.483690][ T5843]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.483705][ T5843]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.483729][ T5843]  f2fs_handle_critical_error+0x37c/0x540
[   71.483752][ T5843]  f2fs_write_end_io+0x886/0xb60
[   71.483778][ T5843]  __submit_merged_bio+0x27a/0x6a0
[   71.483801][ T5843]  __submit_merged_write_cond+0x255/0x530
[   71.483823][ T5843]  f2fs_write_data_pages+0x261d/0x3000
[   71.483885][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   71.483944][ T5843]  ? folios_put_refs+0x559/0x640
[   71.483966][ T5843]  ? __lock_acquire+0xab9/0xd20
[   71.483987][ T5843]  ? do_raw_spin_lock+0x121/0x290
[   71.484007][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[   71.484020][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   71.484036][ T5843]  do_writepages+0x32e/0x550
[   71.484059][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[   71.484076][ T5843]  filemap_fdatawrite+0x199/0x240
[   71.484093][ T5843]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   71.484170][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[   71.484190][ T5843]  f2fs_sync_dirty_inodes+0x31f/0x830
[   71.484214][ T5843]  f2fs_write_checkpoint+0x95a/0x1df0
[   71.484245][ T5843]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   71.484289][ T5843]  ? f2fs_stop_gc_thread+0x7f/0xb0
[   71.484300][ T5843]  ? kfree+0x18e/0x440
[   71.484315][ T5843]  ? kill_f2fs_super+0x298/0x6c0
[   71.484332][ T5843]  kill_f2fs_super+0x2c3/0x6c0
[   71.484348][ T5843]  ? __pfx_kill_f2fs_super+0x10/0x10
[   71.484357][ T5843]  ? radix_tree_delete_item+0x2b6/0x400
[   71.484387][ T5843]  ? shrinker_free+0x2ce/0x3e0
[   71.484403][ T5843]  deactivate_locked_super+0xbc/0x130
[   71.484420][ T5843]  cleanup_mnt+0x425/0x4c0
[   71.484433][ T5843]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.484450][ T5843]  task_work_run+0x1d4/0x260
[   71.484469][ T5843]  ? __pfx_task_work_run+0x10/0x10
[   71.484482][ T5843]  ? __x64_sys_umount+0x122/0x160
[   71.484501][ T5843]  ? exit_to_user_mode_loop+0x40/0x110
[   71.484551][ T5843]  exit_to_user_mode_loop+0xec/0x110
[   71.484568][ T5843]  do_syscall_64+0x2bd/0x3b0
[   71.484583][ T5843]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.484598][ T5843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.484609][ T5843]  ? exc_page_fault+0x9f/0xf0
[   71.484625][ T5843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.484635][ T5843] RIP: 0033:0x7fb88f58ff17
[   71.484646][ T5843] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   71.484654][ T5843] RSP: 002b:00007ffed75a5af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   71.484668][ T5843] RAX: 0000000000000000 RBX: 00007fb88f611c05 RCX: 00007fb88f58ff17
[   71.484674][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed75a5bb0
[   71.484680][ T5843] RBP: 00007ffed75a5bb0 R08: 0000000000000000 R09: 0000000000000000
[   71.484686][ T5843] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed75a6c40
[   71.484692][ T5843] R13: 00007fb88f611c05 R14: 00000000000116a8 R15: 00007ffed75a6c80
[   71.484711][ T5843]  </TASK>
[   71.488313][ T5843] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   71.559127][  T794] IPVS: starting estimator thread 0...
[   71.567714][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   71.567733][ T5843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.567740][ T5843] Call Trace:
[   71.567745][ T5843]  <TASK>
[   71.567751][ T5843]  dump_stack_lvl+0x189/0x250
[   71.567774][ T5843]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.567789][ T5843]  ? __pfx_queue_work_on+0x10/0x10
[   71.567801][ T5843]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.567816][ T5843]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.567842][ T5843]  f2fs_handle_critical_error+0x37c/0x540
[   71.567866][ T5843]  f2fs_write_end_io+0x886/0xb60
[   71.567894][ T5843]  __submit_merged_bio+0x27a/0x6a0
[   71.567917][ T5843]  __submit_merged_write_cond+0x255/0x530
[   71.567940][ T5843]  f2fs_write_data_pages+0x261d/0x3000
[   71.567988][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   71.568054][ T5843]  ? folios_put_refs+0x559/0x640
[   71.568079][ T5843]  ? __lock_acquire+0xab9/0xd20
[   71.568104][ T5843]  ? do_raw_spin_lock+0x121/0x290
[   71.568128][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[   71.568143][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   71.568162][ T5843]  do_writepages+0x32e/0x550
[   71.568188][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[   71.568221][ T5843]  filemap_fdatawrite+0x199/0x240
[   71.568239][ T5843]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   71.568297][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[   71.568316][ T5843]  f2fs_sync_dirty_inodes+0x31f/0x830
[   71.568342][ T5843]  f2fs_write_checkpoint+0x95a/0x1df0
[   71.568381][ T5843]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   71.568430][ T5843]  ? f2fs_stop_gc_thread+0x7f/0xb0
[   71.568443][ T5843]  ? kfree+0x18e/0x440
[   71.568459][ T5843]  ? kill_f2fs_super+0x298/0x6c0
[   71.568477][ T5843]  kill_f2fs_super+0x2c3/0x6c0
[   71.568495][ T5843]  ? __pfx_kill_f2fs_super+0x10/0x10
[   71.568505][ T5843]  ? radix_tree_delete_item+0x2b6/0x400
[   71.568557][ T5843]  ? shrinker_free+0x2ce/0x3e0
[   71.568574][ T5843]  deactivate_locked_super+0xbc/0x130
[   71.568591][ T5843]  cleanup_mnt+0x425/0x4c0
[   71.568605][ T5843]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.568624][ T5843]  task_work_run+0x1d4/0x260
[   71.568643][ T5843]  ? __pfx_task_work_run+0x10/0x10
[   71.568657][ T5843]  ? __x64_sys_umount+0x122/0x160
[   71.568679][ T5843]  ? exit_to_user_mode_loop+0x40/0x110
[   71.568700][ T5843]  exit_to_user_mode_loop+0xec/0x110
[   71.568717][ T5843]  do_syscall_64+0x2bd/0x3b0
[   71.568734][ T5843]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.568750][ T5843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.568762][ T5843]  ? exc_page_fault+0x9f/0xf0
[   71.568780][ T5843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.568791][ T5843] RIP: 0033:0x7fb88f58ff17
[   71.568803][ T5843] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   71.568813][ T5843] RSP: 002b:00007ffed75a5af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   71.568826][ T5843] RAX: 0000000000000000 RBX: 00007fb88f611c05 RCX: 00007fb88f58ff17
[   71.568834][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed75a5bb0
[   71.568841][ T5843] RBP: 00007ffed75a5bb0 R08: 0000000000000000 R09: 0000000000000000
[   71.568848][ T5843] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed75a6c40
[   71.568856][ T5843] R13: 00007fb88f611c05 R14: 00000000000116a8 R15: 00007ffed75a6c80
[   71.568880][ T5843]  </TASK>
[   71.568885][ T5843] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   71.683122][ T6241] loop0: detected capacity change from 0 to 1024
[   71.727492][ T6237] IPVS: using max 80 ests per chain, 192000 per kthread
[   71.745309][ T6241] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   71.765887][ T6241] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   71.770262][ T6241] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   71.773273][ T6241] EXT4-fs (loop0): orphan cleanup on readonly fs
[   71.775751][ T6241] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.94: Freeing blocks not in datazone - block = 0, count = 4096
[   71.787203][ T6241] EXT4-fs (loop0): Remounting filesystem read-only
[   71.789535][ T6241] EXT4-fs (loop0): 1 orphan inode deleted
[   71.792442][ T6241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   71.823951][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.169335][   T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   72.319288][   T24] usb 2-1: Using ep0 maxpacket: 8
[   72.322559][   T24] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[   72.325944][   T24] usb 2-1: config 2 has no interface number 0
[   72.328536][   T24] usb 2-1: config 2 interface 31 has no altsetting 0
[   72.333962][   T24] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[   72.338031][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.341620][   T24] usb 2-1: Product: syz
[   72.343450][   T24] usb 2-1: Manufacturer: syz
[   72.345453][   T24] usb 2-1: SerialNumber: syz
[   72.816684][ T5940] r8152-cfgselector 3-1: USB disconnect, device number 5
[   72.971078][   T24] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22
[   72.977584][   T24] usb 2-1: USB disconnect, device number 4
[   73.149629][ T5940] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   73.304542][ T5940] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   73.308227][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.312210][ T5940] usb 3-1: Product: syz
[   73.314174][ T5940] usb 3-1: Manufacturer: syz
[   73.316182][ T5940] usb 3-1: SerialNumber: syz
[   73.326939][ T5940] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   73.352036][ T2388] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   73.564760][ T6258] loop1: detected capacity change from 0 to 4096
[   73.575697][ T6258] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   73.714590][ T6260] loop1: detected capacity change from 0 to 512
[   73.718937][ T6260] EXT4-fs (loop1): ea_inode feature is not supported for Hurd
[   73.777854][ T6263] loop1: detected capacity change from 0 to 512
[   73.783856][ T6263] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   73.795360][ T6263] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   73.814114][ T6263] EXT4-fs (loop1): 1 truncate cleaned up
[   73.821659][ T6263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.847766][   T33] audit: type=1800 audit(1755489408.510:3): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.102" name="file1" dev="loop1" ino=16 res=0 errno=0
[   73.886323][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.609358][ T2388] usb 3-1: Service connection timeout for: 256
[   74.611653][ T2388] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[   74.631922][ T2388] ath9k_htc: Failed to initialize the device
[   74.638467][ T2388] usb 3-1: ath9k_htc: USB layer deinitialized
[   74.846861][   T24] usb 3-1: USB disconnect, device number 6
[   75.173881][ T6297] loop0: detected capacity change from 0 to 4096
[   75.193749][ T6297] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   75.224645][ T6297] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   75.228941][ T6297] ntfs3(loop0): Failed to load $Extend (-22).
[   75.232218][ T6297] ntfs3(loop0): Failed to initialize $Extend.
[   75.352944][ T6295] loop1: detected capacity change from 0 to 32768
[   75.373182][ T6295] XFS: noikeep mount option is deprecated.
[   75.472832][ T6295] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   75.505580][ T6295] XFS (loop1): Ending clean mount
[   75.512814][ T6295] XFS (loop1): Quotacheck needed: Please wait.
[   75.563431][ T6315] loop2: detected capacity change from 0 to 2048
[   75.582049][ T6295] XFS (loop1): Quotacheck: Done.
[   75.595857][   T33] audit: type=1800 audit(1755489410.260:4): pid=6295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.116" name="file1" dev="loop1" ino=9286 res=0 errno=0
[   75.607335][ T6315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.666630][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.666713][ T6320] loop0: detected capacity change from 0 to 4096
[   75.690937][ T6320] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   75.700712][ T5843] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   75.737845][ T6320] ntfs3(loop0): ino=19, mi_enum_attr
[   75.747387][ T6320] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   75.764023][ T6320] ntfs3(loop0): failed to convert "c46c" to cp737
[   75.769807][ T6320] ntfs3(loop0): ino=20, mi_enum_attr
[   76.998106][ T6363] netlink: 36 bytes leftover after parsing attributes in process `syz.2.141'.
[   77.003283][ T6360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.141'.
[   77.008564][ T6360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.141'.
[   77.014609][ T6360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.141'.
[   77.088917][ T6367] netlink: 36 bytes leftover after parsing attributes in process `syz.2.143'.
[   77.101714][ T6367] vlan2: entered promiscuous mode
[   77.104010][ T6367] bridge0: entered promiscuous mode
[   77.199382][   T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   77.205069][ T6371] capability: warning: `syz.2.145' uses deprecated v2 capabilities in a way that may be insecure
[   77.291375][ T6375] capability: warning: `syz.1.147' uses 32-bit capabilities (legacy support in use)
[   77.371073][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.374717][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.378971][   T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   77.383339][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.387515][   T24] usb 1-1: config 0 descriptor??
[   77.572438][ T6382] loop1: detected capacity change from 0 to 1024
[   77.578736][ T6382] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   77.585533][ T6382] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869)
[   77.592869][ T6382] EXT4-fs (loop1): journal inode is deleted
[   77.650258][ T6384] loop1: detected capacity change from 0 to 512
[   77.667907][ T6384] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.151: casefold flag without casefold feature
[   77.674167][ T6384] EXT4-fs (loop1): Remounting filesystem read-only
[   77.681795][ T6384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.723435][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.792014][ T6387] loop1: detected capacity change from 0 to 2048
[   77.807535][   T24] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[   77.821287][   T24] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[   77.831388][ T6388] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   77.895189][ T6390] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15)
[   77.947290][ T6392] trusted_key: syz.1.154 sent an empty control message without MSG_MORE.
[   78.004798][   T24] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE
[   78.605269][   T24] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71
[   78.610283][   T24] usb 1-1: USB disconnect, device number 4
[   78.875078][ T6401] loop1: detected capacity change from 0 to 128
[   78.892402][ T6401] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   78.909118][ T6401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   79.176873][ T6413] loop0: detected capacity change from 0 to 256
[   79.189112][ T6415] loop1: detected capacity change from 0 to 64
[   79.246804][ T6413] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[   79.262655][ T6407] loop2: detected capacity change from 0 to 32768
[   79.303779][ T6407] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt
[   79.303779][ T6407] 
[   79.315579][ T6407] ERROR: (device loop2): remounting filesystem as read-only
[   79.320671][ T6407] jfs_lookup: dtSearch returned -5
[   79.328032][ T6407] ERROR: (device loop2): dtReadFirst: DT_GETPAGE: dtree page corrupt
[   79.328032][ T6407] 
[   79.337270][ T6407] jfs_readdir: unexpected rc = -5 from dtReadNext
[   79.396770][ T6421] loop1: detected capacity change from 0 to 8
[   79.409046][ T6421] SQUASHFS error: zlib decompression failed, data probably corrupt
[   79.412355][ T6421] SQUASHFS error: Failed to read block 0x9b: -5
[   79.415170][ T6421] SQUASHFS error: Unable to read metadata cache entry [99]
[   79.417937][ T6421] SQUASHFS error: Unable to read inode 0x127
[   79.486124][ T6423] netlink: 'syz.1.170': attribute type 10 has an invalid length.
[   79.490165][ T6423] netlink: 55 bytes leftover after parsing attributes in process `syz.1.170'.
[   79.582637][ T5911] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   79.626479][ T6427] loop1: detected capacity change from 0 to 4096
[   79.644675][ T6427] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   79.677578][ T6425] loop2: detected capacity change from 0 to 32768
[   79.687321][ T6425] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.168 (6425)
[   79.696850][ T6425] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   79.706813][ T6425] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   79.713166][ T6425] BTRFS info (device loop2): disk space caching is enabled
[   79.716869][ T6425] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   79.743385][ T5911] usb 1-1: Using ep0 maxpacket: 32
[   79.747212][ T5911] usb 1-1: config 9 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7
[   79.763805][ T5911] usb 1-1: config 9 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[   79.767872][ T5911] usb 1-1: config 9 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   79.802713][ T5911] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[   79.816534][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.842204][ T5911] usb 1-1: Product: syz
[   79.843841][ T5911] usb 1-1: Manufacturer: syz
[   79.845651][ T5911] usb 1-1: SerialNumber: syz
[   79.863089][ T6425] BTRFS info (device loop2): rebuilding free space tree
[   79.877667][ T6425] BTRFS info (device loop2): disabling free space tree
[   79.884042][ T6425] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   79.899055][ T6425] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   79.930340][ T6425] BTRFS info (device loop2): balance: start -f
[   79.937395][ T6425] BTRFS info (device loop2): balance: ended with status: 0
[   79.983891][ T5848] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   80.082200][ T5911] usb 1-1: USB disconnect, device number 5
[   80.107539][ T6443] loop1: detected capacity change from 0 to 32768
[   80.168680][ T6443] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   80.181059][ T6443] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   80.230919][ T5843] ocfs2: Unmounting device (7,1) on (node local)
[   80.569356][ T5911] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   80.649411][ T5940] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   80.729349][ T5911] usb 3-1: Using ep0 maxpacket: 32
[   80.735140][ T5911] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   80.738625][ T5911] usb 3-1: config 0 has no interface number 0
[   80.744223][ T5911] usb 3-1: config 0 interface 184 has no altsetting 0
[   80.751174][ T5911] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   80.755058][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.758493][ T5911] usb 3-1: Product: syz
[   80.762011][ T5911] usb 3-1: Manufacturer: syz
[   80.764038][ T5911] usb 3-1: SerialNumber: syz
[   80.775212][ T5911] usb 3-1: config 0 descriptor??
[   80.783067][ T5911] smsc75xx v1.0.0
[   80.809342][ T5940] usb 2-1: Using ep0 maxpacket: 8
[   80.816026][ T5940] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[   80.821500][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.824993][ T5940] usb 2-1: Product: syz
[   80.826810][ T5940] usb 2-1: Manufacturer: syz
[   80.828821][ T5940] usb 2-1: SerialNumber: syz
[   80.833355][ T5940] usb 2-1: config 0 descriptor??
[   80.840860][ T5940] gspca_main: sonixj-2.14.0 probing 0c45:613a
[   80.980560][   T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   81.043790][ T5940] gspca_sonixj: reg_w1 err -71
[   81.045896][ T5940] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[   81.051997][ T5940] usb 2-1: USB disconnect, device number 5
[   81.131901][   T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   81.135504][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.140408][   T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   81.144331][   T24] usb 1-1: config 1 has no interface number 1
[   81.147020][   T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   81.159868][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   81.163094][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.165848][   T24] usb 1-1: Product: syz
[   81.167352][   T24] usb 1-1: Manufacturer: syz
[   81.169120][   T24] usb 1-1: SerialNumber: syz
[   81.387999][   T24] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[   81.390955][ T5911] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   81.394501][ T5911] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   81.397571][   T24] usb 1-1: MIDIStreaming interface descriptor not found
[   81.420909][   T24] usb 1-1: USB disconnect, device number 6
[   81.778531][ T6469] loop1: detected capacity change from 0 to 32768
[   81.781657][ T6469] BTRFS warning: excessive commit interval 2147483647, use with care
[   81.785819][ T6469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.182 (6469)
[   81.793908][ T6469] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   81.797695][ T6469] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   81.800585][ T6469] BTRFS info (device loop1): disk space caching is enabled
[   81.802964][ T6469] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   81.811258][ T5911] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[   81.815449][ T5911] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[   81.821969][ T5911] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   81.825724][ T5911] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[   81.847880][ T5911] usb 3-1: USB disconnect, device number 7
[   81.856374][ T6469] BTRFS info (device loop1): rebuilding free space tree
[   81.866698][ T6469] BTRFS info (device loop1): disabling free space tree
[   81.869779][ T6469] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   81.873782][ T6469] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   81.900194][ T6469] BTRFS info (device loop1 state M): max_inline set to 0
[   81.924464][ T5843] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   81.970322][ T6487] loop0: detected capacity change from 0 to 16
[   81.974902][ T6487] erofs (device loop0): mounted with root inode @ nid 36.
[   82.111497][ T6491] loop0: detected capacity change from 0 to 256
[   82.172922][ T6491] FAT-fs (loop0): Directory bread(block 64) failed
[   82.175806][ T6491] FAT-fs (loop0): Directory bread(block 65) failed
[   82.186031][ T6491] FAT-fs (loop0): Directory bread(block 66) failed
[   82.188873][ T6491] FAT-fs (loop0): Directory bread(block 67) failed
[   82.202097][ T6491] FAT-fs (loop0): Directory bread(block 68) failed
[   82.205119][ T6491] FAT-fs (loop0): Directory bread(block 69) failed
[   82.207980][ T6491] FAT-fs (loop0): Directory bread(block 70) failed
[   82.211897][ T6491] FAT-fs (loop0): Directory bread(block 71) failed
[   82.214834][ T6491] FAT-fs (loop0): Directory bread(block 72) failed
[   82.217594][ T6491] FAT-fs (loop0): Directory bread(block 73) failed
[   82.387544][ T6505] loop2: detected capacity change from 0 to 128
[   82.392147][ T6505] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   82.398147][ T6505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   82.579386][ T5940] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   83.114772][ T5940] usb 1-1: config index 0 descriptor too short (expected 3133, got 61)
[   83.118975][ T5940] usb 1-1: config 0 has an invalid interface number: 156 but max is 1
[   83.122736][ T5940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.127101][ T5940] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[   83.131183][ T5940] usb 1-1: config 0 has no interface number 0
[   83.134061][ T5940] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   83.138731][ T5940] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   83.143659][ T5940] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   83.148974][ T5940] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[   83.154550][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.167922][ T5940] usb 1-1: config 0 descriptor??
[   83.179185][ T5940] gspca_main: spca561-2.14.0 probing abcd:cdee
[   83.393828][ T5940] spca561 1-1:0.156: probe with driver spca561 failed with error -22
[   83.409326][ T5940] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   83.412209][ T5940] usb 1-1: MIDIStreaming interface descriptor not found
[   83.437740][ T6519] loop1: detected capacity change from 0 to 1024
[   83.482681][ T5940] usb 1-1: USB disconnect, device number 7
[   83.570871][ T6519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.575819][ T6519] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.627620][ T6519] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.197: lblock 1 mapped to illegal pblock 1 (length 1)
[   83.637875][ T6519] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117
[   83.643623][ T6519] EXT4-fs (loop1): This should not happen!! Data will be lost
[   83.643623][ T6519] 
[   83.658752][  T755] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 4: comm kworker/u9:4: lblock 4 mapped to illegal pblock 4 (length 12)
[   83.669690][  T755] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 12 with error 117
[   83.675612][  T755] EXT4-fs (loop1): This should not happen!! Data will be lost
[   83.675612][  T755] 
[   83.690893][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.359554][ T5862] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   84.531873][ T6544] loop2: detected capacity change from 0 to 32768
[   84.538765][ T6544] xfs: Unknown parameter 'fowner'
[   84.546231][ T5862] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.574186][ T5862] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.577334][ T5862] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[   84.592902][ T5862] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   84.596249][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.601170][ T5862] usb 1-1: Product: syz
[   84.609341][ T5862] usb 1-1: Manufacturer: syz
[   84.611186][ T5862] usb 1-1: SerialNumber: syz
[   84.840350][ T6547] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   85.437613][ T6558] loop1: detected capacity change from 0 to 512
[   85.443236][ T6558] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   85.460246][ T6558] EXT4-fs (loop1): 1 truncate cleaned up
[   85.462780][ T6547] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   85.463970][ T6558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.616785][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.672581][ T5862] cdc_ncm 1-1:1.0: bind() failure
[   86.107184][ T5862] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[   86.117125][ T5862] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[   86.123279][ T5862] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[   86.127438][ T6571] loop1: detected capacity change from 0 to 1024
[   86.135478][ T5862] usb 1-1: USB disconnect, device number 8
[   86.140777][ T6571] EXT4-fs: Ignoring removed mblk_io_submit option
[   86.153357][ T6571] EXT4-fs: Ignoring removed nomblk_io_submit option
[   86.173072][ T6571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.204171][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.417641][ T6584] loop1: detected capacity change from 0 to 1024
[   86.460317][   T10] cfg80211: failed to load regulatory.db
[   86.542203][   T64] hfsplus: b-tree write err: -5, ino 4
[   86.598828][ T6588] loop0: detected capacity change from 0 to 4096
[   86.612437][ T6588] ntfs3(loop0): ino=0, mi_enum_attr
[   86.614840][ T6588] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   86.637594][ T6588] ntfs3(loop0): mft corrupted
[   86.647065][ T6588] ntfs3(loop0): Failed to load $MFT.
[   86.657266][ T6592] syz.2.222 uses obsolete (PF_INET,SOCK_PACKET)
[   86.915863][ T6605] loop1: detected capacity change from 0 to 512
[   87.090936][   T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   87.205734][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'.
[   87.269181][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   87.274444][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   87.278679][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   87.299918][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   87.305178][   T24] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[   87.308924][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.330264][   T24] usb 3-1: config 0 descriptor??
[   87.346777][   T24] gspca_main: spca561-2.14.0 probing abcd:cdee
[   87.482433][ T6626] loop1: detected capacity change from 0 to 512
[   87.497975][ T6626] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   87.505165][ T6625] loop0: detected capacity change from 0 to 4096
[   87.513235][ T6626] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.237: invalid indirect mapped block 2683928664 (level 1)
[   87.520797][ T6626] EXT4-fs (loop1): Remounting filesystem read-only
[   87.537305][ T6626] EXT4-fs (loop1): 1 truncate cleaned up
[   87.548516][ T6628] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   87.552732][   T24] spca561 3-1:0.0: probe with driver spca561 failed with error -22
[   87.553342][   T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   87.562971][ T6626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.573664][   T24] usb 3-1: MIDIStreaming interface descriptor not found
[   87.585802][ T6626] EXT4-fs (loop1): shut down requested (2)
[   87.608572][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.656729][   T24] usb 3-1: USB disconnect, device number 8
[   87.686092][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   87.700699][ T6633] loop1: detected capacity change from 0 to 128
[   87.761060][ T6635] loop0: detected capacity change from 0 to 1024
[   87.764305][ T6633] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   87.794644][   T28] hfsplus: b-tree write err: -5, ino 4
[   87.802843][ T6633] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   87.893276][ T6633] fscrypt: AES-128-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   87.918182][ T5843] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   88.035952][ T6647] pim6reg0: tun_chr_ioctl cmd 2148553947
[   88.349057][ T6645] loop0: detected capacity change from 0 to 40427
[   88.364524][ T6645] F2FS-fs (loop0): invalid crc value
[   88.475594][ T6645] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   88.480988][ T6645] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   88.511924][   T33] audit: type=1804 audit(1755489423.180:5): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.244" name="/newroot/77/file0/bus" dev="loop0" ino=10 res=1 errno=0
[   88.543141][ T5839] syz-executor: attempt to access beyond end of device
[   88.543141][ T5839] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   88.548264][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   88.548276][ T5839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.548280][ T5839] Call Trace:
[   88.548284][ T5839]  <TASK>
[   88.548287][ T5839]  dump_stack_lvl+0x189/0x250
[   88.548301][ T5839]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.548310][ T5839]  ? __pfx_queue_work_on+0x10/0x10
[   88.548317][ T5839]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   88.548327][ T5839]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   88.548341][ T5839]  f2fs_handle_critical_error+0x37c/0x540
[   88.548381][ T5839]  f2fs_write_end_io+0x886/0xb60
[   88.548396][ T5839]  __submit_merged_bio+0x27a/0x6a0
[   88.548410][ T5839]  __submit_merged_write_cond+0x255/0x530
[   88.548422][ T5839]  f2fs_write_data_pages+0x261d/0x3000
[   88.548432][ T5839]  ? __lock_acquire+0xab9/0xd20
[   88.548460][ T5839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   88.548489][ T5839]  ? __mod_zone_page_state+0xd7/0x140
[   88.548504][ T5839]  ? folios_put_refs+0x560/0x640
[   88.548517][ T5839]  ? __pfx_folios_put_refs+0x10/0x10
[   88.548523][ T5839]  ? rcu_is_watching+0x15/0xb0
[   88.548535][ T5839]  ? __lock_acquire+0xab9/0xd20
[   88.548552][ T5839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   88.548563][ T5839]  do_writepages+0x32e/0x550
[   88.548578][ T5839]  ? do_raw_spin_unlock+0x4d/0x240
[   88.548589][ T5839]  filemap_fdatawrite+0x199/0x240
[   88.548599][ T5839]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   88.548629][ T5839]  ? do_raw_spin_unlock+0x4d/0x240
[   88.548640][ T5839]  f2fs_sync_dirty_inodes+0x31f/0x830
[   88.548654][ T5839]  f2fs_write_checkpoint+0x95a/0x1df0
[   88.548672][ T5839]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   88.548700][ T5839]  ? kill_f2fs_super+0x298/0x6c0
[   88.548710][ T5839]  kill_f2fs_super+0x2c3/0x6c0
[   88.548719][ T5839]  ? __pfx_kill_f2fs_super+0x10/0x10
[   88.548725][ T5839]  ? radix_tree_delete_item+0x2b6/0x400
[   88.548738][ T5839]  ? shrinker_free+0x2ce/0x3e0
[   88.548748][ T5839]  deactivate_locked_super+0xbc/0x130
[   88.548758][ T5839]  cleanup_mnt+0x425/0x4c0
[   88.548766][ T5839]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.548777][ T5839]  task_work_run+0x1d4/0x260
[   88.548787][ T5839]  ? __pfx_task_work_run+0x10/0x10
[   88.548796][ T5839]  ? __x64_sys_umount+0x122/0x160
[   88.548807][ T5839]  ? exit_to_user_mode_loop+0x40/0x110
[   88.548819][ T5839]  exit_to_user_mode_loop+0xec/0x110
[   88.548829][ T5839]  do_syscall_64+0x2bd/0x3b0
[   88.548838][ T5839]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.548847][ T5839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.548854][ T5839]  ? exc_page_fault+0x9f/0xf0
[   88.548864][ T5839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.548871][ T5839] RIP: 0033:0x7fbec518ff17
[   88.548878][ T5839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   88.548884][ T5839] RSP: 002b:00007ffd8e7ed3d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   88.548892][ T5839] RAX: 0000000000000000 RBX: 00007fbec5211c05 RCX: 00007fbec518ff17
[   88.548897][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8e7ed490
[   88.548901][ T5839] RBP: 00007ffd8e7ed490 R08: 0000000000000000 R09: 0000000000000000
[   88.548906][ T5839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8e7ee520
[   88.548910][ T5839] R13: 00007fbec5211c05 R14: 000000000001595f R15: 00007ffd8e7ee560
[   88.548923][ T5839]  </TASK>
[   88.548926][ T5839] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   88.684668][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   88.684681][ T5839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.684686][ T5839] Call Trace:
[   88.684689][ T5839]  <TASK>
[   88.684692][ T5839]  dump_stack_lvl+0x189/0x250
[   88.684706][ T5839]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.684715][ T5839]  ? __pfx_queue_work_on+0x10/0x10
[   88.684723][ T5839]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   88.684732][ T5839]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   88.684746][ T5839]  f2fs_handle_critical_error+0x37c/0x540
[   88.684760][ T5839]  f2fs_write_end_io+0x886/0xb60
[   88.684774][ T5839]  __submit_merged_bio+0x27a/0x6a0
[   88.684787][ T5839]  __submit_merged_write_cond+0x255/0x530
[   88.684800][ T5839]  f2fs_write_data_pages+0x261d/0x3000
[   88.684810][ T5839]  ? __lock_acquire+0xab9/0xd20
[   88.684835][ T5839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   88.684864][ T5839]  ? __mod_zone_page_state+0xd7/0x140
[   88.684879][ T5839]  ? folios_put_refs+0x560/0x640
[   88.684891][ T5839]  ? __pfx_folios_put_refs+0x10/0x10
[   88.684898][ T5839]  ? rcu_is_watching+0x15/0xb0
[   88.684910][ T5839]  ? __lock_acquire+0xab9/0xd20
[   88.684927][ T5839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   88.684938][ T5839]  do_writepages+0x32e/0x550
[   88.684953][ T5839]  ? do_raw_spin_unlock+0x4d/0x240
[   88.684963][ T5839]  filemap_fdatawrite+0x199/0x240
[   88.684974][ T5839]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   88.685004][ T5839]  ? do_raw_spin_unlock+0x4d/0x240
[   88.685015][ T5839]  f2fs_sync_dirty_inodes+0x31f/0x830
[   88.685029][ T5839]  f2fs_write_checkpoint+0x95a/0x1df0
[   88.685046][ T5839]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   88.685074][ T5839]  ? kill_f2fs_super+0x298/0x6c0
[   88.685084][ T5839]  kill_f2fs_super+0x2c3/0x6c0
[   88.685094][ T5839]  ? __pfx_kill_f2fs_super+0x10/0x10
[   88.685100][ T5839]  ? radix_tree_delete_item+0x2b6/0x400
[   88.685112][ T5839]  ? shrinker_free+0x2ce/0x3e0
[   88.685122][ T5839]  deactivate_locked_super+0xbc/0x130
[   88.685131][ T5839]  cleanup_mnt+0x425/0x4c0
[   88.685139][ T5839]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.685150][ T5839]  task_work_run+0x1d4/0x260
[   88.685181][ T5839]  ? __pfx_task_work_run+0x10/0x10
[   88.685190][ T5839]  ? __x64_sys_umount+0x122/0x160
[   88.685202][ T5839]  ? exit_to_user_mode_loop+0x40/0x110
[   88.685214][ T5839]  exit_to_user_mode_loop+0xec/0x110
[   88.685224][ T5839]  do_syscall_64+0x2bd/0x3b0
[   88.685233][ T5839]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.685242][ T5839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.685249][ T5839]  ? exc_page_fault+0x9f/0xf0
[   88.685259][ T5839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.685266][ T5839] RIP: 0033:0x7fbec518ff17
[   88.685274][ T5839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   88.685280][ T5839] RSP: 002b:00007ffd8e7ed3d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   88.685289][ T5839] RAX: 0000000000000000 RBX: 00007fbec5211c05 RCX: 00007fbec518ff17
[   88.685293][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8e7ed490
[   88.685298][ T5839] RBP: 00007ffd8e7ed490 R08: 0000000000000000 R09: 0000000000000000
[   88.685302][ T5839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8e7ee520
[   88.685306][ T5839] R13: 00007fbec5211c05 R14: 000000000001595f R15: 00007ffd8e7ee560
[   88.685319][ T5839]  </TASK>
[   88.685953][ T5839] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   88.765005][ T6664] loop1: detected capacity change from 0 to 32768
[   88.969871][ T6666] loop1: detected capacity change from 0 to 1024
[   88.972903][ T6666] EXT4-fs: Ignoring removed mblk_io_submit option
[   88.975604][ T6666] EXT4-fs: Ignoring removed mblk_io_submit option
[   88.978149][ T6666] EXT4-fs: Ignoring removed bh option
[   89.002074][ T6666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.868292][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.972230][ T6681] loop2: detected capacity change from 0 to 32768
[   90.081484][ T6685] loop1: detected capacity change from 0 to 32768
[   90.084298][ T6685] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.258 (6685)
[   90.091985][ T6685] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   90.095266][ T6685] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   90.098308][ T6685] BTRFS info (device loop1): using free-space-tree
[   90.129058][   T64] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xde6869b99d7b464d6c680c55f6470da0fc31df226217095e340871b309ba1c93 level 0
[   90.179488][ T6685] BTRFS warning (device loop1): couldn't read tree root
[   90.221493][ T6685] BTRFS error (device loop1): open_ctree failed: -5
[   90.413809][ T6708] loop2: detected capacity change from 0 to 512
[   90.698276][ T6708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.725659][ T6708] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   90.887757][ T6708] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.262: corrupted xattr block 33: invalid ea_ino
[   91.052704][ T6708] EXT4-fs (loop2): Remounting filesystem read-only
[   91.200871][ T6720] bond0: entered promiscuous mode
[   91.203197][ T6720] bond_slave_0: entered promiscuous mode
[   91.206716][ T6720] bond_slave_1: entered promiscuous mode
[   91.219838][ T6720] batadv0: entered promiscuous mode
[   91.229064][ T6720] hsr1: entered allmulticast mode
[   91.231368][ T6720] bond0: entered allmulticast mode
[   91.233583][ T6720] bond_slave_0: entered allmulticast mode
[   91.236130][ T6720] bond_slave_1: entered allmulticast mode
[   91.239571][ T6720] batadv0: entered allmulticast mode
[   91.243819][ T6720] 8021q: adding VLAN 0 to HW filter on device hsr1
[   91.280765][ T6719] mmap: syz.1.263 (6719) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   91.319521][ T6720] bond0: left promiscuous mode
[   91.321145][ T6720] bond_slave_0: left promiscuous mode
[   91.323019][ T6720] bond_slave_1: left promiscuous mode
[   91.329386][ T6720] batadv0: left promiscuous mode
[   91.358447][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.368649][  T432] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   91.373961][  T432] Quota error (device loop2): write_blk: dquota write failed
[   91.376460][  T432] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries
[   91.385519][  T432] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   91.395645][  T432] Quota error (device loop2): write_blk: dquota write failed
[   91.398034][  T432] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list
[   91.401481][  T432] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[   91.405642][  T432] Quota error (device loop2): v2_write_file_info: Can't write info structure
[   91.463657][ T6725] loop2: detected capacity change from 0 to 512
[   91.469767][ T6725] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   91.486858][ T6725] EXT4-fs (loop2): 1 truncate cleaned up
[   91.501178][ T6725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.552623][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.594467][ T6723] loop0: detected capacity change from 0 to 32768
[   91.603351][ T6723] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.265 (6723)
[   91.623687][ T6723] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   91.627649][ T6723] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   91.631276][ T6723] BTRFS info (device loop0): using free-space-tree
[   91.783135][ T5839] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   92.110288][ T6758] loop1: detected capacity change from 0 to 4096
[   92.121499][ T6758] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   92.124072][ T6758] ntfs3(loop1): Failed to load $Extend (-22).
[   92.126425][ T6758] ntfs3(loop1): Failed to initialize $Extend.
[   92.165940][ T6758] ntfs3(loop1): ino=1b, "file0" ntfs_readdir
[   92.209352][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   92.359419][   T10] usb 1-1: Using ep0 maxpacket: 16
[   92.367214][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.371911][   T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   92.375924][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.383655][   T10] usb 1-1: config 0 descriptor??
[   92.803611][   T10] usbhid 1-1:0.0: can't add hid device: -71
[   92.806238][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   92.829572][   T10] usb 1-1: USB disconnect, device number 9
[   93.330069][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   93.474167][ T6779] loop1: detected capacity change from 0 to 16
[   93.478368][ T6779] erofs (device loop1): mounted with root inode @ nid 36.
[   93.568677][ T6783] random: crng reseeded on system resumption
[   93.702021][ T6791] netlink: 'syz.0.286': attribute type 8 has an invalid length.
[   93.807571][   T33] audit: type=1804 audit(1755489428.470:6): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.287" name="/newroot/89/file0" dev="tmpfs" ino=481 res=1 errno=0
[   93.868802][ T6796] loop2: detected capacity change from 0 to 1024
[   93.871268][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   93.878456][ T6796] hfsplus: bad catalog folder entry
[   94.049483][   T24] usb 2-1: Using ep0 maxpacket: 16
[   94.072143][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.096151][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.105055][   T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   94.113732][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.141498][   T24] usb 2-1: config 0 descriptor??
[   94.571046][   T24] savu 0003:1E7D:2D5A.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[   94.765041][ T5940] usb 2-1: USB disconnect, device number 6
[   94.891074][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.295'.
[   94.894881][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.295'.
[   94.906819][ T6813] gretap0: entered promiscuous mode
[   94.912680][ T6813] gretap0: left promiscuous mode
[   95.134826][ T6826] loop0: detected capacity change from 0 to 164
[   95.326275][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   95.483835][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.492723][   T10] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[   95.501124][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.505086][   T10] usb 3-1: Product: syz
[   95.508668][   T10] usb 3-1: Manufacturer: syz
[   95.512407][   T10] usb 3-1: SerialNumber: syz
[   95.548611][   T10] usb 3-1: config 0 descriptor??
[   95.559410][ T5941] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   95.560789][   T10] powermate 3-1:0.0: probe with driver powermate failed with error -22
[   95.720347][ T5941] usb 1-1: Using ep0 maxpacket: 8
[   95.730473][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[   95.735190][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   95.739059][ T5941] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   95.744218][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[   95.749842][ T5941] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   95.753995][ T5941] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[   95.757687][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.769944][ T5941] usb 1-1: config 0 descriptor??
[   95.770345][   T10] usb 3-1: USB disconnect, device number 9
[   95.772946][ T6834] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   95.998448][   T54] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   96.001890][   T54] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   96.004755][   T54] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   96.007564][   T54] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   96.010694][   T54] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   96.013666][   T54] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   96.016659][   T54] Bluetooth: hci3: Received unexpected HCI Event 0x00
[   96.198847][ T5236] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[   96.202104][   T10] usb 1-1: USB disconnect, device number 10
[   96.332939][ T6845] loop1: detected capacity change from 0 to 512
[   96.345414][ T6845] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   96.384693][ T6845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.397353][ T6845] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.410336][ T6845] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:335: inode #15: comm syz.1.309: verity file corrupted; can't find descriptor
[   96.417770][ T6845] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size
[   96.434140][ T6852] Zero length message leads to an empty skb
[   96.449012][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.030599][ T6862] loop0: detected capacity change from 0 to 4096
[   97.064700][ T6863] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.083377][ T6862] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424
[   97.086824][ T6862] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12)
[   97.093813][ T6862] Remounting filesystem read-only
[   97.095869][ T6862] NILFS (loop0): error -5 truncating bmap (ino=12)
[   97.114442][ T5839] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[   97.870073][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   98.026557][   T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   98.033242][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.041954][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.046125][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   98.054046][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   98.057733][   T10] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   98.062857][   T10] usb 3-1: Manufacturer: syz
[   98.070108][   T10] usb 3-1: config 0 descriptor??
[   98.182364][ T6887] loop0: detected capacity change from 0 to 1024
[   98.189937][ T6887] EXT4-fs: inline encryption not supported
[   98.192382][ T6887] EXT4-fs: Ignoring removed bh option
[   98.213382][ T6887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.233884][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.491931][   T10] appleir 0003:05AC:8243.0005: item fetching failed at offset 0/1
[   98.494819][   T10] appleir 0003:05AC:8243.0005: parse failed
[   98.497126][   T10] appleir 0003:05AC:8243.0005: probe with driver appleir failed with error -22
[   98.540843][ T6903] netlink: 'syz.0.330': attribute type 1 has an invalid length.
[   98.591692][ T6907] loop0: detected capacity change from 0 to 1024
[   98.619590][   T64] hfsplus: b-tree write err: -5, ino 4
[   98.694278][   T47] usb 3-1: USB disconnect, device number 10
[   98.844629][ T6913] loop0: detected capacity change from 0 to 32768
[   98.876233][ T6913] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   98.884236][ T5860] (kworker/u8:2,5860,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[   98.953400][ T5839] ocfs2: Unmounting device (7,0) on (node local)
[   99.031634][ T6917] loop0: detected capacity change from 0 to 512
[   99.042410][ T6917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.072423][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.378523][ T6934] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.591839][   T33] audit: type=1326 audit(1755489434.240:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.0.345" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbec518ebe9 code=0x0
[   99.686551][ T6936] loop2: detected capacity change from 0 to 32768
[   99.692721][ T6936] (syz.2.344,6936,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   99.698750][ T6936] (syz.2.344,6936,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   99.715651][ T6936] JBD2: Ignoring recovery information on journal
[   99.754107][ T6936] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   99.868306][ T5848] ocfs2: Unmounting device (7,2) on (node local)
[  100.518707][   T33] audit: type=1326 audit(1755489435.180:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.2.355" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1734b8ebe9 code=0x0
[  100.532345][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  100.689850][ T5940] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  100.839347][ T5940] usb 2-1: Using ep0 maxpacket: 8
[  100.845617][ T5940] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  100.852729][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.859022][ T5940] usb 2-1: config 0 descriptor??
[  101.038203][ T6981] loop0: detected capacity change from 0 to 32768
[  101.054603][ T6981] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  101.102180][ T6981] XFS (loop0): Ending clean mount
[  101.110299][ T6981] XFS (loop0): Quotacheck needed: Please wait.
[  101.151808][ T6981] XFS (loop0): Quotacheck: Done.
[  101.193483][ T5839] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  101.534646][ T5940] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  101.539616][ T5940] asix 2-1:0.0: probe with driver asix failed with error -32
[  101.863565][  T794] usb 2-1: USB disconnect, device number 7
[  102.046754][ T7002] loop0: detected capacity change from 0 to 40427
[  102.063613][ T7002] F2FS-fs (loop0): invalid crc value
[  102.129128][ T7002] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  102.138467][ T7002] F2FS-fs (loop0): Start checkpoint disabled!
[  102.146636][ T7002] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  102.434809][ T7013] loop1: detected capacity change from 0 to 1024
[  102.441596][ T7015] loop2: detected capacity change from 0 to 256
[  102.459085][ T7013] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  102.474939][ T7013] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  102.481025][ T7013] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  102.503434][ T7013] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.368: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0)
[  102.518359][ T7013] EXT4-fs (loop1): no journal found
[  102.528384][ T7013] EXT4-fs (loop1): can't get journal size
[  102.540123][ T7013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  102.585953][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.726334][ T7017] loop0: detected capacity change from 0 to 32768
[  102.820382][ T7017] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  102.820395][ T7017]   allowing incompatible features above 0.0: (unknown version)
[  102.820400][ T7017]   features: inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  102.879416][ T7017] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  102.882892][ T7017] bcachefs (loop0): initializing new filesystem
[  102.893252][ T7017] bcachefs (loop0): going read-write
[  102.917816][ T7017] bcachefs (loop0): marking superblocks
[  102.955563][ T7022] loop2: detected capacity change from 0 to 32768
[  102.969890][ T7022] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  103.016720][ T7017] bcachefs (loop0): initializing freespace
[  103.023967][ T7017] bcachefs (loop0): done initializing freespace
[  103.052965][ T7017] bcachefs (loop0): reading snapshots table
[  103.055602][ T7017] bcachefs (loop0): reading snapshots done
[  103.086770][ T7017] bcachefs (loop0): done starting filesystem
[  103.097715][ T7046] netlink: 96 bytes leftover after parsing attributes in process `syz.2.376'.
[  103.153512][ T7017] syz.0.365 (7017) used greatest stack depth: 17448 bytes left
[  103.183261][ T5839] bcachefs (loop0): shutting down
[  103.184961][ T5839] bcachefs (loop0): going read-only
[  103.187036][ T5839] bcachefs (loop0): finished waiting for writes to stop
[  103.236099][ T5839] bcachefs (loop0): flushing journal and stopping allocators, journal seq 5
[  103.287983][ T5839] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 8
[  103.295864][ T5839] bcachefs (loop0): clean shutdown complete, journal seq 9
[  103.301926][ T5839] bcachefs (loop0): marking filesystem clean
[  103.325351][ T5839] bcachefs (loop0): shutdown complete
[  103.402666][ T7051] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  103.879854][ T7055] loop1: detected capacity change from 0 to 4096
[  104.078654][ T7057] loop1: detected capacity change from 0 to 32768
[  104.094039][ T7057] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  104.122675][ T7057] XFS (loop1): Ending clean mount
[  104.128057][ T7057] XFS (loop1): Quotacheck needed: Please wait.
[  104.157143][ T7057] XFS (loop1): Quotacheck: Done.
[  104.191022][ T5843] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  104.423863][ T7067] loop2: detected capacity change from 0 to 32768
[  104.455667][ T7067] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  104.587508][ T5848] ocfs2: Unmounting device (7,2) on (node local)
[  105.041955][ T7089] loop2: detected capacity change from 0 to 2048
[  105.092891][ T7090] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.139440][   T33] audit: type=1800 audit(1755489439.800:9): pid=7089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.389" name="file1" dev="loop2" ino=15 res=0 errno=0
[  105.206891][ T7085] loop0: detected capacity change from 0 to 32768
[  105.231171][ T7085] JBD2: Ignoring recovery information on journal
[  105.272608][ T7085] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  105.385448][ T5839] ocfs2: Unmounting device (7,0) on (node local)
[  105.561443][ T7098] netlink: 56 bytes leftover after parsing attributes in process `syz.0.392'.
[  105.564877][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'.
[  105.570753][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'.
[  105.621679][ T5940] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  105.780277][ T5940] usb 3-1: Using ep0 maxpacket: 16
[  105.801942][ T5940] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  105.805807][ T5940] usb 3-1: config 0 has no interface number 0
[  105.808703][ T5940] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  105.814069][ T5940] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  105.822646][ T5940] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  105.826126][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  105.829535][ T5940] usb 3-1: Product: syz
[  105.831618][ T5940] usb 3-1: SerialNumber: syz
[  105.839496][ T5940] usb 3-1: config 0 descriptor??
[  105.850275][ T5940] cm109 3-1:0.8: invalid payload size 0, expected 4
[  105.855113][ T5940] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input4
[  106.055391][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  106.061271][ T7103] loop1: detected capacity change from 0 to 512
[  106.064165][ T7103] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  106.069126][ T7103] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.394: invalid indirect mapped block 4294967295 (level 1)
[  106.079951][ T7103] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.394: invalid indirect mapped block 4294967295 (level 1)
[  106.087589][ T7103] EXT4-fs (loop1): 2 truncates cleaned up
[  106.092128][ T7103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.114901][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.466385][ T5940] usb 3-1: USB disconnect, device number 11
[  106.493257][ T7111] loop1: detected capacity change from 0 to 65536
[  106.502389][ T5940] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  106.527391][ T7111] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  106.552601][ T7111] XFS (loop1): Ending clean mount
[  106.660507][ T5843] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  106.994566][ T7135] loop1: detected capacity change from 0 to 32768
[  106.997102][ T7135] XFS: ikeep mount option is deprecated.
[  107.005853][ T7135] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  107.021593][ T7135] XFS (loop1): Ending clean mount
[  107.024568][ T7135] XFS (loop1): Quotacheck needed: Please wait.
[  107.047080][ T7135] XFS (loop1): Quotacheck: Done.
[  107.062044][ T5843] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  107.335637][ T7155] loop2: detected capacity change from 0 to 1024
[  107.393378][ T7155] hfsplus: bad catalog entry type
[  107.428225][   T28] hfsplus: b-tree write err: -5, ino 4
[  108.050553][ T5940] kernel read not supported for file /audio1 (pid: 5940 comm: kworker/0:7)
[  109.114808][ T7190] tipc: Started in network mode
[  109.116983][ T7190] tipc: Node identity 000000002e0000000000000000000001, cluster identity 4711
[  109.120175][ T7190] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  109.285052][ T7186] loop1: detected capacity change from 0 to 32768
[  109.293014][ T7186] 
[  109.293014][ T7186]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  109.293014][ T7186] 
[  109.319633][ T5843] 
[  109.319633][ T5843]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  109.319633][ T5843] 
[  109.325078][ T5843] 
[  109.325078][ T5843]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  109.325078][ T5843] 
[  109.439341][ T5940] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  109.641443][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  109.646308][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  109.651427][ T5940] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  109.655278][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.664967][ T5940] usb 3-1: config 0 descriptor??
[  109.852857][ T7209] usb usb1: check_ctrlrecip: process 7209 (syz.0.429) requesting ep 01 but needs 81
[  109.861914][ T7209] usb usb1: usbfs: process 7209 (syz.0.429) did not claim interface 0 before use
[  110.011272][ T7204] loop1: detected capacity change from 0 to 40427
[  110.015365][ T7204] F2FS-fs: heap/no_heap options were deprecated
[  110.020209][ T7204] F2FS-fs (loop1): Image doesn't support compression
[  110.023048][ T7204] F2FS-fs (loop1): build fault injection rate: 690
[  110.030052][ T7204] F2FS-fs (loop1): invalid crc value
[  110.052247][ T5940] ath6kl: Failed to submit usb control message: -71
[  110.057277][ T5940] ath6kl: unable to send the bmi data to the device: -71
[  110.067406][ T5940] ath6kl: Unable to send get target info: -71
[  110.071341][ T5940] ath6kl: Failed to init ath6kl core: -71
[  110.078562][ T5940] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  110.253257][ T7204] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  110.260589][ T7204] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  110.274351][ T5940] usb 3-1: USB disconnect, device number 12
[  110.942241][ T7226] loop1: detected capacity change from 0 to 512
[  110.950633][ T7226] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  110.982519][ T7226] EXT4-fs (loop1): 1 truncate cleaned up
[  110.992368][ T7226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.018177][   T33] audit: type=1800 audit(1755489445.680:10): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.435" name="file2" dev="loop1" ino=16 res=0 errno=0
[  111.287151][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.111842][ T5911] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  112.346014][ T5911] usb 1-1: Using ep0 maxpacket: 32
[  112.353625][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.357887][ T5911] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  112.363923][ T5911] usb 1-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00
[  112.367691][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.401403][ T5911] usb 1-1: config 0 descriptor??
[  112.700313][ T7241] warning: `syz.0.440' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  112.736337][   T47] usb 1-1: USB disconnect, device number 11
[  112.869654][ T7263] loop1: detected capacity change from 0 to 32768
[  112.877279][ T7263] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.450 (7263)
[  112.888507][ T7263] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  112.894323][ T7263] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  112.897780][ T7263] BTRFS info (device loop1): using free-space-tree
[  112.917614][ T7263] BTRFS info (device loop1): rebuilding free space tree
[  113.008894][ T5843] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  113.307942][ T7287] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  113.363596][ T5862] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  113.521993][ T5862] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  113.525662][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.539979][ T5862] usb 2-1: config 0 descriptor??
[  113.551517][ T5862] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  113.748859][ T5862] gp8psk: usb in 128 operation failed.
[  113.829371][   T47] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  113.952545][ T5862] gp8psk: usb in 146 operation failed.
[  113.954514][ T5862] gp8psk: failed to get FW version
[  113.957060][ T5862] gp8psk: usb in 149 operation failed.
[  113.958920][ T5862] gp8psk: failed to get FPGA version
[  113.979415][   T47] usb 3-1: Using ep0 maxpacket: 8
[  113.984019][   T47] usb 3-1: unable to get BOS descriptor or descriptor too short
[  113.988474][   T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.995833][   T47] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  114.002589][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.005999][   T47] usb 3-1: Product: syz
[  114.007834][   T47] usb 3-1: Manufacturer: syz
[  114.019313][   T47] usb 3-1: SerialNumber: syz
[  114.045293][ T7304] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  114.048283][ T7304] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  114.054779][ T7304] vhci_hcd vhci_hcd.0: Device attached
[  114.062804][ T7305] vhci_hcd: connection closed
[  114.064208][ T5871] vhci_hcd: stop threads
[  114.068040][ T5871] vhci_hcd: release socket
[  114.070803][ T5871] vhci_hcd: disconnect device
[  114.163535][ T5862] gp8psk: usb out operation failed.
[  114.167855][ T5862] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  114.172384][ T5862] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  114.177813][ T5862] usb 2-1: USB disconnect, device number 8
[  114.233528][   T47] cdc_mbim 3-1:1.0: MBIM functional descriptor missing
[  114.236563][   T47] cdc_mbim 3-1:1.0: bind() failure
[  114.248686][   T47] usb 3-1: USB disconnect, device number 13
[  114.765973][ T7317] loop1: detected capacity change from 0 to 2048
[  114.797032][ T7318] loop0: detected capacity change from 0 to 1024
[  114.811822][ T7317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.913748][ T7318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  114.947386][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  115.494045][ T7333] loop0: detected capacity change from 0 to 1764
[  115.663829][ T7337] loop0: detected capacity change from 0 to 512
[  115.664623][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.668222][ T7337] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  115.717609][ T7337] EXT4-fs (loop0): 1 truncate cleaned up
[  115.721530][ T7337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.738903][   T33] audit: type=1800 audit(1755489450.400:11): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.473" name="file2" dev="loop0" ino=16 res=0 errno=0
[  115.752373][ T7340] loop2: detected capacity change from 0 to 1024
[  115.759824][ T7343] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[  115.763351][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.474'.
[  115.770738][ T7340] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  115.779973][ T7340] EXT4-fs (loop2): group descriptors corrupted!
[  115.831140][ T7340] tmpfs: Bad value for 'mpol'
[  115.861663][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.912674][ T7345] loop1: detected capacity change from 0 to 256
[  115.933779][ T7345] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  115.947475][ T7347] pimreg: entered allmulticast mode
[  115.962023][ T7347] pimreg: left allmulticast mode
[  116.181606][ T7359] netlink: 'syz.0.484': attribute type 11 has an invalid length.
[  116.200140][ T5940] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  116.258675][ T7365] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  116.350963][ T5940] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[  116.354438][ T5940] usb 3-1: config 0 has no interface number 0
[  116.357111][ T5940] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  116.362124][ T5940] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  116.368994][ T5940] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  116.374551][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.377954][ T5940] usb 3-1: Product: syz
[  116.379941][ T5940] usb 3-1: Manufacturer: syz
[  116.382036][ T5940] usb 3-1: SerialNumber: syz
[  116.386291][ T5940] usb 3-1: config 0 descriptor??
[  116.395734][ T7349] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  116.400912][ T5940] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  116.409386][ T5940] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  116.419387][ T5862] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  116.571875][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  116.576042][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  116.580358][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  116.587222][ T5862] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  116.591317][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.594038][ T5862] usb 2-1: Product: syz
[  116.595688][ T5862] usb 2-1: Manufacturer: syz
[  116.597346][ T5862] usb 2-1: SerialNumber: syz
[  116.602162][ T5862] usb 2-1: config 0 descriptor??
[  116.659718][ T5911] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  116.689370][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  116.810219][   T47] usb 2-1: USB disconnect, device number 9
[  116.818571][ T5911] usb 1-1: config index 0 descriptor too short (expected 69, got 36)
[  116.825106][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.831361][  T794] usb 3-1: USB disconnect, device number 14
[  116.843300][ T5911] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  116.846978][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.852362][  T794] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  116.857259][  T794] cyberjack 3-1:0.69: device disconnected
[  116.860101][ T5911] usb 1-1: Product: syz
[  116.862153][ T5911] usb 1-1: Manufacturer: syz
[  116.864148][ T5911] usb 1-1: SerialNumber: syz
[  116.874483][ T5911] usb 1-1: config 0 descriptor??
[  116.879184][ T5911] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  117.081412][ T5911] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  117.084267][ T5911] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  117.092261][ T5911] usb 1-1: USB disconnect, device number 12
[  117.701830][   T33] audit: type=1326 audit(1755489452.360:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7386 comm="syz.0.496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec518ebe9 code=0x7ffc0000
[  117.712730][   T33] audit: type=1326 audit(1755489452.360:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7386 comm="syz.0.496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec518ebe9 code=0x7ffc0000
[  117.738643][ T7393] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  117.757178][   T33] audit: type=1326 audit(1755489452.360:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7386 comm="syz.0.496" exe="/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fbec518ebe9 code=0x7ffc0000
[  117.771843][   T33] audit: type=1326 audit(1755489452.360:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7386 comm="syz.0.496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec518ebe9 code=0x7ffc0000
[  117.784000][   T33] audit: type=1326 audit(1755489452.360:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7386 comm="syz.0.496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec518ebe9 code=0x7ffc0000
[  117.817579][ T7395] process 'syz.2.499' launched './file0' with NULL argv: empty string added
[  118.328288][ T7404] loop2: detected capacity change from 0 to 2048
[  118.384806][ T7401] binder: 7390:7401 ioctl c0306201 200000000100 returned -11
[  118.388789][ T7401] fuse: Bad value for 'fd'
[  118.397657][ T7404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.408643][ T7404] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  118.430793][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.605688][ T7412] Bluetooth: MGMT ver 1.23
[  118.792788][   T33] audit: type=1326 audit(1755489453.460:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.1.508" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88f58ebe9 code=0x7ffc0000
[  118.804817][   T33] audit: type=1326 audit(1755489453.460:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.1.508" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88f58ebe9 code=0x7ffc0000
[  118.820647][   T33] audit: type=1326 audit(1755489453.460:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.1.508" exe="/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fb88f58ebe9 code=0x7ffc0000
[  118.836895][   T33] audit: type=1326 audit(1755489453.460:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.1.508" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88f58ebe9 code=0x7ffc0000
[  118.851237][   T33] audit: type=1326 audit(1755489453.460:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.1.508" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88f58ebe9 code=0x7ffc0000
[  118.862419][ T7426] loop0: detected capacity change from 0 to 2048
[  118.889892][ T7426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.945647][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.034195][ T7448] loop0: detected capacity change from 0 to 1024
[  120.037196][ T7448] EXT4-fs (loop0): first meta block group too large: 33024 (group descriptor block count 1)
[  121.604627][ T7488] loop2: detected capacity change from 0 to 128
[  121.617660][ T7488] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.652500][ T7488] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  121.654425][ T7472] loop1: detected capacity change from 0 to 32768
[  121.676167][ T7472] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  121.700553][ T5848] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  121.713697][ T7472] XFS (loop1): Ending clean mount
[  121.740730][ T7472] XFS (loop1): Quotacheck needed: Please wait.
[  121.823831][ T7472] XFS (loop1): Quotacheck: Done.
[  121.865777][ T5843] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  122.084455][ T7508] block device autoloading is deprecated and will be removed.
[  122.112743][ T7508] loop2: detected capacity change from 0 to 8
[  122.125574][ T7508] Page size > filesystem block size (0).  This is currently not supported!
[  122.211297][ T7511] loop0: detected capacity change from 0 to 256
[  122.214111][ T7511] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  122.217638][ T7511] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  122.224324][ T7511] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  122.283029][ T7513] loop0: detected capacity change from 0 to 512
[  122.296913][ T7513] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  122.310461][ T7513] EXT4-fs (loop0): 1 truncate cleaned up
[  122.318967][ T7513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.390246][ T7519] loop1: detected capacity change from 0 to 1024
[  122.414711][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.427859][  T755] hfsplus: b-tree write err: -5, ino 4
[  122.799479][ T5940] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  122.951837][ T5940] usb 2-1: Using ep0 maxpacket: 32
[  122.955632][ T5940] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  122.966586][ T5940] usb 2-1: language id specifier not provided by device, defaulting to English
[  122.975239][ T5940] usb 2-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40
[  122.978918][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.989776][ T5940] usb 2-1: Product: syz
[  122.991480][ T5940] usb 2-1: Manufacturer: 剩ꗨ㌌谮㞔畺魶๊≱還뛌큭⡋≣ᆓෟ劚썵췚眃赺漉ꋋㄐ鸒씀芆栯혁煮薂酒ꄙ╚둥შ볚酔⏓䣣ᛖ齗䔟顱ﬠ㎵稃ն䍳
[  123.016900][ T5940] usb 2-1: SerialNumber: syz
[  123.031262][ T5940] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[  123.234452][   T47] usb 2-1: USB disconnect, device number 10
[  123.248557][ T7560] netlink: 'syz.2.564': attribute type 1 has an invalid length.
[  123.258780][ T7560] netlink: 224 bytes leftover after parsing attributes in process `syz.2.564'.
[  123.389662][ T5911] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  123.468288][ T7570] loop2: detected capacity change from 0 to 512
[  123.475133][ T7570] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[  123.479896][ T7570] EXT4-fs (loop2): group descriptors corrupted!
[  123.730731][ T7572] loop2: detected capacity change from 0 to 32768
[  123.734928][ T7572] XFS: ikeep mount option is deprecated.
[  123.747150][ T7572] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  123.752857][ T5911] usb 1-1: config 0 has an invalid interface number: 120 but max is 0
[  123.766768][ T5911] usb 1-1: config 0 has no interface number 0
[  123.780759][ T7582] ptrace attach of "/syz-executor exec"[5843] was attempted by "/syz-executor exec"[7582]
[  123.783450][ T5911] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  123.789087][ T5911] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  123.814880][ T7572] XFS (loop2): Ending clean mount
[  123.824233][ T7572] XFS (loop2): Quotacheck needed: Please wait.
[  123.835668][ T5911] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  123.848650][ T5911] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  123.855863][ T7572] XFS (loop2): Quotacheck: Done.
[  123.859535][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.126576][ T5911] usb 1-1: config 0 descriptor??
[  124.139652][ T5940] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  124.289804][ T5940] usb 2-1: Using ep0 maxpacket: 32
[  124.302699][ T5940] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  124.307132][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.312154][ T5940] usb 2-1: Product: syz
[  124.315343][ T5940] usb 2-1: Manufacturer: syz
[  124.317582][ T5940] usb 2-1: SerialNumber: syz
[  124.365680][ T5940] usb 2-1: config 0 descriptor??
[  124.380527][ T5911] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input5
[  124.412351][ T5911] usb 1-1: USB disconnect, device number 13
[  124.467374][ T5848] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  124.735597][ T7597] loop2: detected capacity change from 0 to 128
[  124.746871][ T7597] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  124.760832][ T7597] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.782181][ T5940] airspy 2-1:0.0: Board ID: 00
[  124.784170][ T5940] airspy 2-1:0.0: Firmware version: 
[  124.797627][ T5848] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  125.067696][ T7613] loop2: detected capacity change from 0 to 256
[  125.074523][ T7613] exfat: Deprecated parameter 'utf8'
[  125.095334][ T7613] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  125.183532][ T5940] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e
[  125.194196][ T5940] airspy 2-1:0.0: Registered as swradio24
[  125.197537][ T5940] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  125.203893][ T5940] usb 2-1: USB disconnect, device number 11
[  125.206066][ T7617] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  125.481896][ T7631] loop2: detected capacity change from 0 to 64
[  125.766532][ T7635] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  125.808423][ T7633] loop2: detected capacity change from 0 to 32768
[  126.437040][ T7652] loop2: detected capacity change from 0 to 4096
[  126.445913][ T7652] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  126.464124][ T7658] loop0: detected capacity change from 0 to 128
[  126.477678][ T7652] ntfs3(loop2): ino=19, mi_enum_attr
[  126.486763][ T7658] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  126.496104][ T7658] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  126.517103][ T7652] ntfs3(loop2): ino=5, "/" indx_read
[  126.522305][ T7652] ntfs3(loop2): ino=5, "/" ntfs_readdir
[  126.545136][ T5839] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  127.789413][   T47] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  127.971057][   T47] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.980073][   T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.986859][   T47] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  127.997092][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  128.008080][   T47] usb 2-1: SerialNumber: syz
[  128.249443][   T47] usb 2-1: 0:2 : does not exist
[  128.275792][   T47] usb 2-1: USB disconnect, device number 12
[  128.342241][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  128.759439][ T5862] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  128.869305][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  128.869320][   T33] audit: type=1326 audit(1755489463.520:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.617" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb88f52add9 code=0x7ffc0000
[  128.888648][   T33] audit: type=1326 audit(1755489463.540:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.617" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb88f52add9 code=0x7ffc0000
[  128.898040][   T33] audit: type=1326 audit(1755489463.540:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.617" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb88f52add9 code=0x7ffc0000
[  128.918171][   T33] audit: type=1326 audit(1755489463.540:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.617" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb88f52add9 code=0x7ffc0000
[  128.929309][ T5862] usb 1-1: Using ep0 maxpacket: 16
[  128.939984][ T5862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.945843][ T5862] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  128.950040][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.953298][ T5862] usb 1-1: Product: syz
[  128.954086][ T7694] loop2: detected capacity change from 0 to 40427
[  128.955000][ T5862] usb 1-1: Manufacturer: syz
[  128.959199][ T5862] usb 1-1: SerialNumber: syz
[  128.961767][   T33] audit: type=1326 audit(1755489463.540:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.617" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb88f52add9 code=0x7ffc0000
[  128.965077][ T7694] F2FS-fs (loop2): build fault injection rate: 771
[  128.972814][   T33] audit: type=1326 audit(1755489463.540:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.617" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb88f52add9 code=0x7ffc0000
[  128.983695][ T5862] usb 1-1: config 0 descriptor??
[  128.986022][   T33] audit: type=1326 audit(1755489463.540:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.617" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb88f52add9 code=0x7ffc0000
[  128.997986][   T33] audit: type=1326 audit(1755489463.540:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.617" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb88f52add9 code=0x7ffc0000
[  129.006544][   T33] audit: type=1326 audit(1755489463.540:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.617" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb88f52add9 code=0x7ffc0000
[  129.006680][ T7694] F2FS-fs (loop2): invalid crc value
[  129.015172][   T33] audit: type=1326 audit(1755489463.540:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.617" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb88f52add9 code=0x7ffc0000
[  129.067009][ T7700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.618'.
[  129.106175][ T7694] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  129.111022][ T7694] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  129.144340][ T7697] f2fs_ckpt-7:2: attempt to access beyond end of device
[  129.144340][ T7697] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  129.150325][ T7697] CPU: 1 UID: 0 PID: 7697 Comm: f2fs_ckpt-7:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  129.150342][ T7697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.150348][ T7697] Call Trace:
[  129.150353][ T7697]  <TASK>
[  129.150358][ T7697]  dump_stack_lvl+0x189/0x250
[  129.150376][ T7697]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.150389][ T7697]  ? __pfx_queue_work_on+0x10/0x10
[  129.150399][ T7697]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.150412][ T7697]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.150433][ T7697]  f2fs_handle_critical_error+0x37c/0x540
[  129.150451][ T7697]  f2fs_write_end_io+0x886/0xb60
[  129.150473][ T7697]  __submit_merged_bio+0x27a/0x6a0
[  129.150486][ T7697]  ? up_write+0x1c4/0x420
[  129.150501][ T7697]  __submit_merged_write_cond+0x44c/0x530
[  129.150519][ T7697]  f2fs_sync_node_pages+0x1479/0x15e0
[  129.150546][ T7697]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  129.150577][ T7697]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  129.150591][ T7697]  ? up_write+0x1c4/0x420
[  129.150601][ T7697]  ? do_raw_spin_unlock+0x4d/0x240
[  129.150617][ T7697]  f2fs_write_checkpoint+0xe6f/0x1df0
[  129.150642][ T7697]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  129.150677][ T7697]  ? down_write+0x162/0x1f0
[  129.150686][ T7697]  ? __pfx_down_write+0x10/0x10
[  129.150695][ T7697]  ? __pfx___schedule+0x10/0x10
[  129.150713][ T7697]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  129.150727][ T7697]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  129.150749][ T7697]  issue_checkpoint_thread+0xd9/0x260
[  129.150761][ T7697]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  129.150772][ T7697]  ? __pfx_autoremove_wake_function+0x10/0x10
[  129.150786][ T7697]  ? __kthread_parkme+0x7b/0x200
[  129.150798][ T7697]  ? __kthread_parkme+0x1a1/0x200
[  129.150823][ T7697]  kthread+0x711/0x8a0
[  129.150838][ T7697]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  129.150849][ T7697]  ? __pfx_kthread+0x10/0x10
[  129.150862][ T7697]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.150874][ T7697]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.150886][ T7697]  ? __pfx_kthread+0x10/0x10
[  129.150900][ T7697]  ret_from_fork+0x3fc/0x770
[  129.150913][ T7697]  ? __pfx_ret_from_fork+0x10/0x10
[  129.150928][ T7697]  ? __switch_to_asm+0x39/0x70
[  129.150968][ T7697]  ? __switch_to_asm+0x33/0x70
[  129.150982][ T7697]  ? __pfx_kthread+0x10/0x10
[  129.150995][ T7697]  ret_from_fork_asm+0x1a/0x30
[  129.151019][ T7697]  </TASK>
[  129.151024][ T7697] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  129.203176][ T5862] usb 1-1: USB disconnect, device number 14
[  129.206450][ T7697] CPU: 1 UID: 0 PID: 7697 Comm: f2fs_ckpt-7:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  129.206465][ T7697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.206473][ T7697] Call Trace:
[  129.206478][ T7697]  <TASK>
[  129.206483][ T7697]  dump_stack_lvl+0x189/0x250
[  129.206503][ T7697]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.206517][ T7697]  ? __pfx_queue_work_on+0x10/0x10
[  129.206527][ T7697]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.206541][ T7697]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.206563][ T7697]  f2fs_handle_critical_error+0x37c/0x540
[  129.206584][ T7697]  f2fs_write_end_io+0x886/0xb60
[  129.206609][ T7697]  __submit_merged_bio+0x27a/0x6a0
[  129.206622][ T7697]  ? up_write+0x1c4/0x420
[  129.206639][ T7697]  __submit_merged_write_cond+0x44c/0x530
[  129.206659][ T7697]  f2fs_sync_node_pages+0x1479/0x15e0
[  129.206688][ T7697]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  129.206724][ T7697]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  129.206739][ T7697]  ? up_write+0x1c4/0x420
[  129.206748][ T7697]  ? do_raw_spin_unlock+0x4d/0x240
[  129.206765][ T7697]  f2fs_write_checkpoint+0xe6f/0x1df0
[  129.206794][ T7697]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  129.206844][ T7697]  ? down_write+0x162/0x1f0
[  129.206853][ T7697]  ? __pfx_down_write+0x10/0x10
[  129.206864][ T7697]  ? __pfx___schedule+0x10/0x10
[  129.206883][ T7697]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  129.206898][ T7697]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  129.206922][ T7697]  issue_checkpoint_thread+0xd9/0x260
[  129.206937][ T7697]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  129.206979][ T7697]  ? __pfx_autoremove_wake_function+0x10/0x10
[  129.206994][ T7697]  ? __kthread_parkme+0x7b/0x200
[  129.207006][ T7697]  ? __kthread_parkme+0x1a1/0x200
[  129.207023][ T7697]  kthread+0x711/0x8a0
[  129.207039][ T7697]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  129.207050][ T7697]  ? __pfx_kthread+0x10/0x10
[  129.207065][ T7697]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.207077][ T7697]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.207091][ T7697]  ? __pfx_kthread+0x10/0x10
[  129.207104][ T7697]  ret_from_fork+0x3fc/0x770
[  129.207119][ T7697]  ? __pfx_ret_from_fork+0x10/0x10
[  129.207135][ T7697]  ? __switch_to_asm+0x39/0x70
[  129.207147][ T7697]  ? __switch_to_asm+0x33/0x70
[  129.207159][ T7697]  ? __pfx_kthread+0x10/0x10
[  129.207173][ T7697]  ret_from_fork_asm+0x1a/0x30
[  129.207199][ T7697]  </TASK>
[  129.207204][ T7697] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  129.399114][ T7709] loop1: detected capacity change from 0 to 128
[  129.583240][ T7717] netlink: 'syz.2.625': attribute type 1 has an invalid length.
[  129.585805][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'.
[  129.659185][ T7711] loop1: detected capacity change from 0 to 32768
[  129.665111][ T7711] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.623 (7711)
[  129.691143][ T7711] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.695107][ T7711] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  129.698532][ T7711] BTRFS info (device loop1): using free-space-tree
[  129.828771][ T7719] loop2: detected capacity change from 0 to 32768
[  129.841716][ T7719] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 6074bbd4-9c56-43b7-bf4e-97e00ce29271
[  129.859457][ T7719] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.626 (7719)
[  129.886983][ T5843] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.892136][ T7719] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.898572][ T7719] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  129.909569][ T7719] BTRFS info (device loop2): using free-space-tree
[  129.919151][ T7744] loop0: detected capacity change from 0 to 512
[  129.943898][ T7744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.009792][ T7719] BTRFS info (device loop2): rebuilding free space tree
[  130.068710][ T5848] BTRFS info (device loop2): last unmount of filesystem 6074bbd4-9c56-43b7-bf4e-97e00ce29271
[  130.086386][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.750193][ T7770] could not allocate digest TFM handle sha1-avx2
[  131.757110][ T7796] loop1: detected capacity change from 0 to 32768
[  132.003471][ T7811] loop2: detected capacity change from 0 to 8
[  132.082761][ T7809] loop1: detected capacity change from 0 to 32768
[  132.207468][ T7809] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  132.207490][ T7809]   allowing incompatible features above 0.0: (unknown version)
[  132.207498][ T7809]   features: lz4
[  132.223808][ T7809] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  132.227391][ T7809] bcachefs (loop1): initializing new filesystem
[  132.239327][ T7809] bcachefs (loop1): going read-write
[  132.245875][ T7809] bcachefs (loop1): marking superblocks
[  132.377081][ T7809] bcachefs (loop1): initializing freespace
[  132.387124][ T7809] bcachefs (loop1): done initializing freespace
[  132.398990][ T7809] bcachefs (loop1): reading snapshots table
[  132.402328][ T7809] bcachefs (loop1): reading snapshots done
[  132.428433][ T7809] bcachefs (loop1): done starting filesystem
[  132.534085][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.536799][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.571759][ T7809] syz.1.648 (7809) used greatest stack depth: 16784 bytes left
[  132.599700][ T5843] bcachefs (loop1): shutting down
[  132.993816][ T5843] bcachefs (loop1): going read-only
[  132.998543][ T7838] netlink: 'syz.0.657': attribute type 11 has an invalid length.
[  133.006804][ T5843] bcachefs (loop1): finished waiting for writes to stop
[  133.013777][ T7838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.657'.
[  133.029432][ T5843] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4
[  133.078391][ T5843] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4
[  133.092143][ T5843] bcachefs (loop1): clean shutdown complete, journal seq 5
[  133.100797][ T5843] bcachefs (loop1): marking filesystem clean
[  133.129931][ T5843] bcachefs (loop1): shutdown complete
[  134.129425][   T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  134.279360][   T10] usb 3-1: Using ep0 maxpacket: 32
[  134.286050][   T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  134.294362][   T10] usb 3-1: config 0 has no interface number 0
[  134.296853][   T10] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  134.301116][   T10] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  134.308195][   T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  134.319300][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.322096][   T10] usb 3-1: Product: syz
[  134.323477][   T10] usb 3-1: Manufacturer: syz
[  134.325038][   T10] usb 3-1: SerialNumber: syz
[  134.334633][   T10] usb 3-1: config 0 descriptor??
[  134.343382][   T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  134.543596][   T10] usb 3-1: qt2_setup_urbs - submit read urb failed -90
[  134.546769][   T10] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90
[  134.594772][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'.
[  134.666386][ T7866] loop0: detected capacity change from 0 to 32768
[  134.733977][ T7874] loop1: detected capacity change from 0 to 4096
[  134.755787][   T47] usb 3-1: USB disconnect, device number 15
[  135.310800][ T5941] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  135.459701][ T5941] usb 1-1: Using ep0 maxpacket: 8
[  135.463705][ T5941] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  135.472548][ T5941] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  135.477081][ T5941] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  135.481030][ T5941] usb 1-1: Product: syz
[  135.482667][ T5941] usb 1-1: Manufacturer: syz
[  135.484582][ T5941] usb 1-1: SerialNumber: syz
[  135.712246][ T5941] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  135.715517][ T5941] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  135.718646][ T5941] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2
[  135.753996][ T7892] loop1: detected capacity change from 0 to 512
[  135.757242][ T7892] EXT4-fs: Ignoring removed i_version option
[  135.763787][ T7892] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  135.779518][ T7892] EXT4-fs (loop1): 1 truncate cleaned up
[  135.786110][ T7892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.858234][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.914577][ T5941] usb 1-1: palm_os_3_probe - error -71 getting bytes available request
[  135.918062][ T5941] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[  135.941745][ T5941] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  135.962097][ T5941] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  135.981315][ T5941] usb 1-1: USB disconnect, device number 15
[  135.981669][   T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  135.992793][ T5941] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  136.014111][ T5941] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  136.018473][ T5941] visor 1-1:1.0: device disconnected
[  136.139468][   T10] usb 3-1: Using ep0 maxpacket: 8
[  136.145953][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.150664][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  136.156145][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.165511][   T10] usb 3-1: config 0 descriptor??
[  136.173107][   T10] gspca_main: vc032x-2.14.0 probing 046d:0892
[  136.466293][ T7907] loop1: detected capacity change from 0 to 32768
[  136.482234][ T7907] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.686 (7907)
[  136.511294][ T7907] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  136.515632][ T7907] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  136.519175][ T7907] BTRFS info (device loop1): using free-space-tree
[  136.619619][ T7907] BTRFS info (device loop1 state M): max_inline set to 0
[  136.658204][ T5843] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  136.767388][ T7931] hfs: can't find a HFS filesystem on dev nullb0
[  136.964500][ T7939] netlink: 'syz.1.694': attribute type 1 has an invalid length.
[  136.968255][ T7939] netlink: 'syz.1.694': attribute type 4 has an invalid length.
[  136.978203][ T7939] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.694'.
[  137.160431][ T7945] loop1: detected capacity change from 0 to 1024
[  137.184649][ T7945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.216907][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.258928][ T7938] loop0: detected capacity change from 0 to 32768
[  137.285687][ T7938] ERROR: (device loop0): xtTruncate_pmap: xt_getpage: xtree page corrupt
[  137.285687][ T7938] 
[  137.292897][ T7938] ERROR: (device loop0): remounting filesystem as read-only
[  137.295268][ T7938] ERROR: (device loop0): jfs_unlink: 
[  137.295268][ T7938] 
[  137.310056][ T5839] ERROR: (device loop0): xtTruncate: xt_getpage: xtree page corrupt
[  137.310056][ T5839] 
[  137.377722][ T7949] loop1: detected capacity change from 0 to 4096
[  137.384524][   T10] gspca_vc032x: reg_w err -71
[  137.386586][   T10] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[  137.391980][ T7949] ntfs3(loop1): Primary boot: invalid bytes per sector 0.
[  137.398367][   T10] usb 3-1: USB disconnect, device number 16
[  137.403694][ T7949] ntfs3(loop1): try to read out of volume at offset 0x1ffe00
[  137.622153][ T7964] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  137.627370][ T7964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.954192][ T7973] loop1: detected capacity change from 0 to 40427
[  137.972633][ T7973] F2FS-fs (loop1): invalid crc value
[  138.023288][ T7973] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  138.028769][ T7973] F2FS-fs (loop1): Start checkpoint disabled!
[  138.035164][ T7973] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  138.052409][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'.
[  138.724258][ T8001] loop0: detected capacity change from 0 to 32768
[  138.754562][ T8001] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  138.777245][ T8014] virt_wifi0 speed is unknown, defaulting to 1000
[  138.787014][ T8014] virt_wifi0 speed is unknown, defaulting to 1000
[  138.792706][ T8001] XFS (loop0): Ending clean mount
[  138.798036][ T8014] virt_wifi0 speed is unknown, defaulting to 1000
[  138.803180][ T8001] XFS (loop0): Quotacheck needed: Please wait.
[  138.827703][ T8014] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  138.839904][ T8001] XFS (loop0): Quotacheck: Done.
[  138.863865][ T8014] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  138.884801][ T5839] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  138.933530][ T8014] virt_wifi0 speed is unknown, defaulting to 1000
[  138.952193][ T8014] virt_wifi0 speed is unknown, defaulting to 1000
[  138.964058][ T8014] virt_wifi0 speed is unknown, defaulting to 1000
[  140.065202][ T5862] libceph: connect (1)[c::]:6789 error -101
[  140.068339][ T5862] libceph: mon0 (1)[c::]:6789 connect error
[  140.143454][ T8030] ceph: No mds server is up or the cluster is laggy
[  140.797121][ T8040] loop0: detected capacity change from 0 to 32768
[  140.804559][ T8040] XFS: attr2 mount option is deprecated.
[  140.843925][ T8040] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  140.965725][ T8040] XFS (loop0): Ending clean mount
[  140.985778][ T8040] XFS (loop0): Quotacheck needed: Please wait.
[  141.033619][ T8040] XFS (loop0): Quotacheck: Done.
[  141.294497][ T5839] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.387989][ T8052] loop2: detected capacity change from 0 to 256
[  141.412491][ T8052] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  141.483413][   T40] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  141.488368][ T8059] loop0: detected capacity change from 0 to 512
[  141.502535][ T8059] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.734: casefold flag without casefold feature
[  141.506796][ T8059] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.734: couldn't read orphan inode 15 (err -117)
[  141.511137][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.738'.
[  141.524584][ T8059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.537949][ T8064] netlink: 'syz.2.739': attribute type 2 has an invalid length.
[  141.560518][ T8064] bridge: entered promiscuous mode
[  141.565044][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.508855][ T8072] loop1: detected capacity change from 0 to 32768
[  142.551722][ T8072] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  142.596704][ T8072] XFS (loop1): Ending clean mount
[  142.611005][ T8072] XFS (loop1): Quotacheck needed: Please wait.
[  142.642690][ T8072] XFS (loop1): Quotacheck: Done.
[  142.655619][   T33] kauditd_printk_skb: 130 callbacks suppressed
[  142.655632][   T33] audit: type=1800 audit(1755489477.320:163): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.743" name="file1" dev="loop1" ino=9286 res=0 errno=0
[  142.722650][ T5843] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  142.925510][ T5940] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  142.962248][ T8079] loop0: detected capacity change from 0 to 32768
[  143.060831][ T8079] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  143.060853][ T8079]   allowing incompatible features above 0.0: (unknown version)
[  143.060861][ T8079]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  143.080147][ T8079] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  143.083624][ T8079] bcachefs (loop0): initializing new filesystem
[  143.092586][ T8079] bcachefs (loop0): going read-write
[  143.095684][ T8089] loop1: detected capacity change from 0 to 32768
[  143.099913][ T5940] usb 3-1: Using ep0 maxpacket: 8
[  143.104021][ T8079] bcachefs (loop0): marking superblocks
[  143.106826][ T5940] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  143.110279][ T5940] usb 3-1: config 0 has no interface number 0
[  143.112798][ T5940] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  143.117174][ T5940] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  143.139794][ T8079] bcachefs (loop0): initializing freespace
[  143.145208][ T5940] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  143.152004][ T8079] bcachefs (loop0): done initializing freespace
[  143.159493][ T5940] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  143.170322][ T5940] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  143.174206][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.178098][ T8079] bcachefs (loop0): reading snapshots table
[  143.178636][ T8089] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  143.181876][ T8079] bcachefs (loop0): reading snapshots done
[  143.192879][ T5940] usb 3-1: config 0 descriptor??
[  143.199664][ T5940] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  143.226254][ T8079] bcachefs (loop0): done starting filesystem
[  143.257377][ T5843] ocfs2: Unmounting device (7,1) on (node local)
[  143.287560][ T5839] bcachefs (loop0): shutting down
[  143.294047][ T5839] bcachefs (loop0): going read-only
[  143.296424][ T5839] bcachefs (loop0): finished waiting for writes to stop
[  143.304752][ T5839] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  143.339924][ T5839] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  143.345023][ T5839] bcachefs (loop0): clean shutdown complete, journal seq 4
[  143.348661][ T5839] bcachefs (loop0): marking filesystem clean
[  143.383445][ T5839] bcachefs (loop0): shutdown complete
[  143.433704][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'.
[  143.438233][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'.
[  143.442514][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'.
[  143.637285][ T8109] loop1: detected capacity change from 0 to 1024
[  144.564890][ T8113] loop1: detected capacity change from 0 to 512
[  144.568309][ T8113] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  144.599341][ T8113] EXT4-fs (loop1): 1 truncate cleaned up
[  144.605310][ T8113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.624504][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  144.636884][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.090900][ T8122] netlink: 'syz.0.753': attribute type 2 has an invalid length.
[  145.094094][ T8122] netlink: 'syz.0.753': attribute type 2 has an invalid length.
[  145.097133][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'.
[  145.526741][ T8132] loop0: detected capacity change from 0 to 32768
[  145.557573][ T8132] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  145.586662][ T8132] XFS (loop0): Ending clean mount
[  145.592602][ T8132] XFS (loop0): Quotacheck needed: Please wait.
[  145.627068][ T8132] XFS (loop0): Quotacheck: Done.
[  145.661638][ T8124] loop1: detected capacity change from 0 to 32768
[  145.665274][ T8124] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.754 (8124)
[  145.679966][ T5862] usb 3-1: USB disconnect, device number 17
[  145.683976][ T8124] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  145.685351][ T5839] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  145.687938][ T5862] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  145.703111][ T8124] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  145.706351][ T8124] BTRFS info (device loop1): using free-space-tree
[  145.984606][ T5843] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  146.849399][ T5941] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  146.999382][ T5941] usb 3-1: Using ep0 maxpacket: 16
[  147.002702][ T5941] usb 3-1: config 0 has an invalid interface number: 49 but max is 0
[  147.005532][ T5941] usb 3-1: config 0 has no interface number 0
[  147.007721][ T5941] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  147.012190][ T5941] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9
[  147.016972][ T5941] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  147.022809][ T5941] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  147.026333][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.030602][ T5941] usb 3-1: Product: syz
[  147.032249][ T5941] usb 3-1: Manufacturer: syz
[  147.034115][ T5941] usb 3-1: SerialNumber: syz
[  147.038201][ T5941] usb 3-1: config 0 descriptor??
[  147.043161][ T8181] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  147.199373][   T47] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  147.255363][ T5941] usb 3-1: USB disconnect, device number 18
[  147.361129][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  147.365864][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.370171][   T47] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  147.373912][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.379563][   T47] usb 1-1: config 0 descriptor??
[  147.432588][ T8186] loop1: detected capacity change from 0 to 8
[  147.446307][ T8186] SQUASHFS error: lzo decompression failed, data probably corrupt
[  147.450935][ T8186] SQUASHFS error: Failed to read block 0x91: -5
[  147.453502][ T8186] SQUASHFS error: Unable to read metadata cache entry [8f]
[  147.457499][ T8186] SQUASHFS error: Unable to read inode 0x11f
[  147.591609][ T8190] loop1: detected capacity change from 0 to 4096
[  147.597141][ T8190] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  147.604981][ T8190] ntfs3(loop1): ino=3, mi_enum_attr
[  147.609190][ T8190] ntfs3(loop1): ino=0, mi_enum_attr
[  147.613350][ T8190] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  147.616253][ T8190] ntfs3(loop1): ino=0, mi_enum_attr
[  147.618466][ T8190] ntfs3(loop1): Failed to load $MFT.
[  147.666863][ T8193] loop1: detected capacity change from 0 to 512
[  147.710466][ T8193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.715917][ T8193] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  147.738139][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.875532][   T47] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  147.942617][ T8203] virt_wifi0 speed is unknown, defaulting to 1000
[  148.070634][ T8210] loop2: detected capacity change from 0 to 2048
[  148.103334][ T8210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.116551][   T47] usb 1-1: USB disconnect, device number 16
[  148.120884][ T5862] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  148.134960][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.178643][ T8214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.279393][ T5862] usb 2-1: Using ep0 maxpacket: 8
[  148.283170][ T5862] usb 2-1: config 3 has an invalid interface number: 45 but max is 0
[  148.286577][ T5862] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  148.292617][ T5862] usb 2-1: config 3 has no interface number 0
[  148.295105][ T5862] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.301276][ T5862] usb 2-1: config 3 interface 45 has no altsetting 0
[  148.306358][ T5862] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  148.312038][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.315910][ T5862] usb 2-1: Product: syz
[  148.317592][ T5862] usb 2-1: Manufacturer: syz
[  148.319979][ T5862] usb 2-1: SerialNumber: syz
[  148.428477][ T8216] loop2: detected capacity change from 0 to 40427
[  148.432234][ T8216] f2fs: Unexpected value for 'grpquota'
[  148.558301][ T5862] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  148.572807][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'.
[  148.613297][ T5862] usb 2-1: USB disconnect, device number 13
[  148.691550][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  149.093891][ T8231] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  149.098403][ T8231] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  149.432675][ T8236] loop1: detected capacity change from 0 to 128
[  149.436102][ T8236] udf: Unknown parameter '01777777777777777777777'
[  149.527478][ T8240] sctp: [Deprecated]: syz.1.791 (pid 8240) Use of struct sctp_assoc_value in delayed_ack socket option.
[  149.527478][ T8240] Use struct sctp_sack_info instead
[  149.896571][ T8249] loop2: detected capacity change from 0 to 2048
[  149.988930][ T5985]  loop2: p1 < > p4
[  150.008927][ T5985] loop2: p4 size 722688 extends beyond EOD, truncated
[  150.051885][ T8249]  loop2: p1 < > p4
[  150.054111][ T8249] loop2: p4 size 722688 extends beyond EOD, truncated
[  150.065895][ T8244] loop1: detected capacity change from 0 to 32768
[  150.077696][   T33] audit: type=1800 audit(1755489484.740:164): pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.793" name="file1" dev="loop1" ino=4 res=0 errno=0
[  150.096975][  T114] ------------[ cut here ]------------
[  150.098809][  T114] WARNING: CPU: 0 PID: 114 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x454/0x4e0
[  150.102550][  T114] Modules linked in:
[  150.104621][  T114] CPU: 0 UID: 0 PID: 114 Comm: jfsCommit Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  150.110916][  T114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.114441][  T114] RIP: 0010:dbAdjTree+0x454/0x4e0
[  150.116255][  T114] Code: 5a ff ff ff e8 bd 34 81 fe eb 05 e8 b6 34 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 43 b5 3d 08 cc e8 9d 34 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  150.125043][  T114] RSP: 0018:ffffc9000244f988 EFLAGS: 00010293
[  150.127681][  T114] RAX: ffffffff833e7723 RBX: ffff88803c9ea010 RCX: ffff8881061fb980
[  150.131651][  T114] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  150.135075][  T114] RBP: 0000000000020056 R08: ffffea0000f27a87 R09: 1ffffd40001e4f50
[  150.138474][  T114] R10: dffffc0000000000 R11: fffff940001e4f51 R12: ffff88803c9ea018
[  150.141976][  T114] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  150.145369][  T114] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  150.149321][  T114] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  150.151646][  T114] CR2: 00005555574215c8 CR3: 000000002786c000 CR4: 00000000000006f0
[  150.154315][  T114] Call Trace:
[  150.155536][  T114]  <TASK>
[  150.156600][  T114]  ? __pfx_lock_metapage+0x10/0x10
[  150.158622][  T114]  dbJoin+0x238/0x300
[  150.160212][  T114]  ? do_read_cache_folio+0x4c6/0x590
[  150.162079][  T114]  dbFreeBits+0x4e1/0xdb0
[  150.163599][  T114]  dbFree+0x336/0x650
[  150.165059][  T114]  txFreeMap+0x7ff/0xde0
[  150.166696][  T114]  txUpdateMap+0x308/0x9c0
[  150.168291][  T114]  jfs_lazycommit+0x43f/0xa90
[  150.170144][  T114]  ? __pfx_jfs_lazycommit+0x10/0x10
[  150.172362][  T114]  ? __pfx_default_wake_function+0x10/0x10
[  150.174583][  T114]  ? __kthread_parkme+0x7b/0x200
[  150.176361][  T114]  ? __kthread_parkme+0x1a1/0x200
[  150.178122][  T114]  kthread+0x711/0x8a0
[  150.179667][  T114]  ? __pfx_jfs_lazycommit+0x10/0x10
[  150.181455][  T114]  ? __pfx_kthread+0x10/0x10
[  150.183138][  T114]  ? _raw_spin_unlock_irq+0x23/0x50
[  150.185164][  T114]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.187387][  T114]  ? __pfx_kthread+0x10/0x10
[  150.189757][  T114]  ret_from_fork+0x3fc/0x770
[  150.191886][  T114]  ? __pfx_ret_from_fork+0x10/0x10
[  150.194252][  T114]  ? __switch_to_asm+0x39/0x70
[  150.196161][  T114]  ? __switch_to_asm+0x33/0x70
[  150.198346][  T114]  ? __pfx_kthread+0x10/0x10
[  150.200862][  T114]  ret_from_fork_asm+0x1a/0x30
[  150.203045][  T114]  </TASK>
[  150.204484][  T114] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  150.207604][  T114] CPU: 0 UID: 0 PID: 114 Comm: jfsCommit Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  150.212818][  T114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.216946][  T114] Call Trace:
[  150.218366][  T114]  <TASK>
[  150.219644][  T114]  dump_stack_lvl+0x99/0x250
[  150.221560][  T114]  ? __asan_memcpy+0x40/0x70
[  150.223439][  T114]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.225548][  T114]  ? __pfx__printk+0x10/0x10
[  150.227533][  T114]  vpanic+0x281/0x750
[  150.229275][  T114]  ? __pfx__printk+0x10/0x10
[  150.231242][  T114]  ? __pfx_vpanic+0x10/0x10
[  150.233087][  T114]  ? is_bpf_text_address+0x26/0x2b0
[  150.235205][  T114]  panic+0xb9/0xc0
[  150.236769][  T114]  ? __pfx_panic+0x10/0x10
[  150.238565][  T114]  __warn+0x31b/0x4b0
[  150.240242][  T114]  ? dbAdjTree+0x454/0x4e0
[  150.242103][  T114]  ? dbAdjTree+0x454/0x4e0
[  150.243943][  T114]  report_bug+0x2be/0x4f0
[  150.245662][  T114]  ? dbAdjTree+0x454/0x4e0
[  150.247530][  T114]  ? dbAdjTree+0x454/0x4e0
[  150.249371][  T114]  ? dbAdjTree+0x456/0x4e0
[  150.251217][  T114]  handle_bug+0x84/0x160
[  150.253083][  T114]  exc_invalid_op+0x1a/0x50
[  150.254941][  T114]  asm_exc_invalid_op+0x1a/0x20
[  150.256972][  T114] RIP: 0010:dbAdjTree+0x454/0x4e0
[  150.259172][  T114] Code: 5a ff ff ff e8 bd 34 81 fe eb 05 e8 b6 34 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 43 b5 3d 08 cc e8 9d 34 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  150.267193][  T114] RSP: 0018:ffffc9000244f988 EFLAGS: 00010293
[  150.269851][  T114] RAX: ffffffff833e7723 RBX: ffff88803c9ea010 RCX: ffff8881061fb980
[  150.273117][  T114] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  150.276701][  T114] RBP: 0000000000020056 R08: ffffea0000f27a87 R09: 1ffffd40001e4f50
[  150.280028][  T114] R10: dffffc0000000000 R11: fffff940001e4f51 R12: ffff88803c9ea018
[  150.283225][  T114] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  150.286527][  T114]  ? dbAdjTree+0x453/0x4e0
[  150.288502][  T114]  ? dbAdjTree+0x453/0x4e0
[  150.290395][  T114]  ? __pfx_lock_metapage+0x10/0x10
[  150.292615][  T114]  dbJoin+0x238/0x300
[  150.294299][  T114]  ? do_read_cache_folio+0x4c6/0x590
[  150.296457][  T114]  dbFreeBits+0x4e1/0xdb0
[  150.298257][  T114]  dbFree+0x336/0x650
[  150.299951][  T114]  txFreeMap+0x7ff/0xde0
[  150.301775][  T114]  txUpdateMap+0x308/0x9c0
[  150.303676][  T114]  jfs_lazycommit+0x43f/0xa90
[  150.305703][  T114]  ? __pfx_jfs_lazycommit+0x10/0x10
[  150.307830][  T114]  ? __pfx_default_wake_function+0x10/0x10
[  150.310205][  T114]  ? __kthread_parkme+0x7b/0x200
[  150.312241][  T114]  ? __kthread_parkme+0x1a1/0x200
[  150.314269][  T114]  kthread+0x711/0x8a0
[  150.316018][  T114]  ? __pfx_jfs_lazycommit+0x10/0x10
[  150.318117][  T114]  ? __pfx_kthread+0x10/0x10
[  150.320116][  T114]  ? _raw_spin_unlock_irq+0x23/0x50
[  150.322289][  T114]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.324434][  T114]  ? __pfx_kthread+0x10/0x10
[  150.326328][  T114]  ret_from_fork+0x3fc/0x770
[  150.328272][  T114]  ? __pfx_ret_from_fork+0x10/0x10
[  150.330312][  T114]  ? __switch_to_asm+0x39/0x70
[  150.332249][  T114]  ? __switch_to_asm+0x33/0x70
[  150.334214][  T114]  ? __pfx_kthread+0x10/0x10
[  150.336142][  T114]  ret_from_fork_asm+0x1a/0x30
[  150.338135][  T114]  </TASK>
[  150.340171][  T114] Kernel Offset: disabled
[  150.341978][  T114] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:58:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000244f130
R8 =ffff888107cc8237 R9 =1ffff11020f99046 R10=dffffc0000000000 R11=ffffffff854f0270
R12=dffffc0000000000 R13=ffffffff99af98cc R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f02ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555574215c8 CR3=000000002786c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=6161616161616161 6161616161616161 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fb88f612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90003d9f701 RBX=ffffc90003d9f738 RCX=1ffff920007b3d01 RDX=ffffffff903d9ee6
RSI=0000000000000002 RDI=ffffc90003d9f738 RBP=1ffff920007b3da6 RSP=ffffc90003d9ec50
R8 =0000000000000001 R9 =ffffffff8172c195 R10=ffffc90003d9ed78 R11=ffffffff81ac38a0
R12=ffffc90003da0000 R13=1ffff920007b3da7 R14=ffffc90003d9ed28 R15=ffffc90003d98000
RIP=ffffffff8172f0b0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6283765c80 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d15dfc47e8 CR3=000000010cbf6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ffecb51a5d0 0000003000000010 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00ff00000000ff00 XMM05=000000002a6c290b 000000002f6b0034
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffff00000000 ffffffff0000ff00 XMM09=7032706f6f6c2f32 706f6f6c2f6b636f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
