last executing test programs:

31.184486508s ago: executing program 0 (id=755):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000480)={[{@jqfmt_vfsold}, {@abort}, {@debug}, {@noload}, {@grpid}, {@noblock_validity}, {@noquota}, {@lazytime}, {@usrjquota}]}, 0xff, 0x46c, &(0x7f0000000940)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQWamhNhBCtHvBoSLwb/wvjSS9GvWjiVe+GhBguoF7WzM4MLMtu2aXbLrCfTzLd55l5us/znZln95l5djeAvjWW/Uki/hcRv0fESJ69ucBY/nDtyvmZv6+cn0miWn3rr6RW7uqV8zNl0fL/tuSZarXIb2hS74V3I6YrlbkzRX5i6dQHE4tnz70wf2r6xNyJudNTR44cPLB7+PDUoa7EmcV1defHC7t2HH3n4hszxy6+91OSRh53NMTRLWP53m3q6W5X1mNb69LJYP2WPb/cSDc7E+ilgYjIDtdQrf+PxEBsur5tJF77rKeNA9ZUtVqtrvCqvFwF7mNJ9LoFQG+Ub/TZ9W+5rNPQ465w+eX8AiiL+1qx5FsGI80Te4Yarm+7aSwiji3/81W2xBrdhwAAqPddNv55vtn4L42H88Rw9uf/xRzKaEQ8EBHbIuLBiNgeEQ9F1Mo+EhGPdlh/4wzJreOf9NIdB9eGbPz3UjG3dfP4Ly2LjA4Uua21+IeS4/OVuf3FPtkXQxuOzydzkyvU8f2rv33Ralv9+C9bsvrLsWDRjkuDDTfoZqeXplcTc73Ln0bsHGwWfxLlNE4SETsiYucd1jH/7GDLbbePfwWtn7Zt1a8jnsmP/3I0xF9KWs5PTr54eOrQxMaozO2fKM+KW/3864U3W9W/qvi7IDv+m5ue/9fjH002RiyePXeyNl+72HkdF/74vOU1TYfn/9Gtxfk/nLxdWzFcbPhoemnpzGTEcPL6reunbjxbmS/LZ/Hv29u8/2+LG3visYjYFRG7I+Lx7KKwaPsTEfFkROxdIf4fX3nq/c7jX5+50iz+2dsd/6g//p0nBk7+8O3t498YEa2O/8Faal+xpp3Xv3YbuJp9BwAAAPeK/DPwSTp+PZ2m4+P5Z/i3x+a0srC49NzxhQ9Pz+aflR+NobS80zVSdz90srg3XOanGvIHivvGXw5squXHZxYqs70OHvrclhb9P/PnQK9bB6y5LsyjAfco/R/6l/4P/SnR/6Gv6f/Qv5r1/09alh7/Zk0bA6wr7//Qv9ro/8v5Q+tRAXBv8v4P/Uv/h77U8rvx6aq+8r/uiX+L3zO8W9pz/ycivSuacf8nBtv+MYsOEtWRvP9nazY0LdPrVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+C8AAP//F0nluw==")
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
getrlimit(0x3, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047ee, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r6, &(0x7f0000001f80)=""/4096, 0x1000)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r8 = dup(r7)
ioctl$BLKROTATIONAL(r8, 0x127e, &(0x7f00000000c0))
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r8, 0x12, 0x0, 0x0)

28.563593178s ago: executing program 0 (id=759):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="010040000000000000000300003f140009800800020002000000080001000b000000840004804c0007800800020008000000080001000100000008000400010000000800010003000000080001000000000008000200ff7f00000800010006000000080002000fdb000008000100130000000900010073797a30000000000900010073797a31000000000c0007800800010012004000040007800c00078008000300070000008c0001800d0001007564703a73797a3000000000080003"], 0x138}}, 0x20000000)

28.38591547s ago: executing program 0 (id=762):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "ff"}, @main=@item_4={0x3, 0x0, 0xb, "78ea0fb9"}]}}, 0x0}, 0x0)

26.407730313s ago: executing program 0 (id=772):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='hugetlbfs\x00', 0x16, 0x0)

26.245342232s ago: executing program 0 (id=773):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000300)}, 0x10)

25.415669829s ago: executing program 0 (id=776):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r0, &(0x7f0000000080), 0x10)

25.131981343s ago: executing program 32 (id=776):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r0, &(0x7f0000000080), 0x10)

3.227354093s ago: executing program 1 (id=929):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001080)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})

3.223771268s ago: executing program 1 (id=931):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r1)

2.99522175s ago: executing program 1 (id=932):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
write(r0, &(0x7f0000001c80)="b1", 0x1)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x3)

2.905557658s ago: executing program 1 (id=933):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x40, 0x7fffffa, 0x6, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x64, 0x0, 0x5, 0x4, 0x0, @remote, @empty}}}})

2.763040204s ago: executing program 1 (id=934):
openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)

1.068857823s ago: executing program 2 (id=944):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000600)={0x0, @bt={0x8000012, 0x800, 0x1, 0x3, 0xd59f82, 0x5, 0x800c9e, 0x7, 0x0, 0x5, 0x722, 0xe72, 0x7, 0x8, 0x2e, 0xa, {0xffff945a, 0x1}, 0x3, 0xf}})

979.593451ms ago: executing program 2 (id=946):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)

979.26467ms ago: executing program 2 (id=947):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4)

870.144408ms ago: executing program 2 (id=950):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

819.554623ms ago: executing program 1 (id=952):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x222a04, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30454070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x9, {0x9, 0x11, "46ff4490d70a1e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

688.06866ms ago: executing program 3 (id=954):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TIOCGPGRP(r0, 0x5437, 0x0)

687.871177ms ago: executing program 3 (id=955):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x343, 0x2002)

655.282421ms ago: executing program 3 (id=956):
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

589.961198ms ago: executing program 3 (id=957):
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

489.387116ms ago: executing program 3 (id=958):
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f00000013c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x7, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)
write$FUSE_CREATE_OPEN(r3, 0x0, 0x0)

409.335463ms ago: executing program 3 (id=959):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c)
poll(&(0x7f0000000000)=[{r0, 0xa420}], 0x1, 0x5)

187.103µs ago: executing program 2 (id=960):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x9)

0s ago: executing program 2 (id=961):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x72)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

kernel console output (not intermixed with test programs):

descriptor??
[   81.625136][ T6624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   81.638049][    C0] port100 3-1:0.0: NFC: Urb failure (status -71)
[   81.640831][ T5907] port100 3-1:0.0: NFC: Could not get supported command types
[   81.678742][ T6632] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   81.729542][ T6634] fuse: Unknown parameter 'fd0xffffffffffffffff'
[   81.797477][  T779] hfsplus: b-tree write err: -5, ino 4
[   81.873120][ T5912] usb 3-1: USB disconnect, device number 6
[   82.169088][ T6644] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   82.173193][ T6644] overlayfs: missing 'lowerdir'
[   82.432279][ T6649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.285'.
[   82.518921][ T6657] netlink: 36 bytes leftover after parsing attributes in process `syz.1.289'.
[   82.522461][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.289'.
[   82.619376][ T6666] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   82.622478][ T6666] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   82.825458][ T6679] netlink: 'syz.0.300': attribute type 10 has an invalid length.
[   82.828348][ T6679] team0: Device dummy0 is up. Set it down before adding it as a team port
[   83.132586][ T5912] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   83.149724][ T6689] loop0: detected capacity change from 0 to 512
[   83.190433][ T6689] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   83.284706][ T5912] usb 2-1: Using ep0 maxpacket: 16
[   83.296675][ T5912] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.363493][ T5912] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   83.400309][ T5912] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[   83.414273][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.431448][ T5912] usb 2-1: Product: syz
[   83.441652][ T5912] usb 2-1: Manufacturer: syz
[   83.453785][ T5912] usb 2-1: SerialNumber: syz
[   83.698422][ T5912] usb 2-1: 0:2 : does not exist
[   83.704648][   T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   83.717357][ T5912] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   83.732448][ T5912] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5)
[   83.744032][ T5912] usb 2-1: USB disconnect, device number 7
[   83.779931][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   83.890343][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[   83.894150][   T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   83.897648][   T24] usb 1-1: config 1 has no interface number 1
[   83.899843][   T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   83.909493][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   83.912658][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.916365][   T24] usb 1-1: Product: syz
[   83.917792][   T24] usb 1-1: Manufacturer: syz
[   83.919342][   T24] usb 1-1: SerialNumber: syz
[   84.141083][   T24] usb 1-1: found format II with max.bitrate = 26774, frame size=2
[   84.143700][   T24] usb 1-1: found format II with max.bitrate = 26774, frame size=2
[   84.149319][   T24] usb 1-1: failed to enable PITCH for EP 0x82
[   84.169087][   T24] usb 1-1: USB disconnect, device number 7
[   84.229937][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   84.423876][ T6699] loop1: detected capacity change from 0 to 32768
[   84.445828][ T6699] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.308 (6699)
[   84.479804][ T6699] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   84.483345][ T6699] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   84.495530][ T6699] BTRFS info (device loop1): disk space caching is enabled
[   84.498229][ T6699] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   84.619922][ T6699] BTRFS info (device loop1): rebuilding free space tree
[   84.638557][ T6699] BTRFS info (device loop1): disabling free space tree
[   84.641343][ T6699] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   84.646143][ T6699] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   84.802575][ T5851] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   85.274650][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   85.446631][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.453732][   T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   85.469527][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.499320][   T24] usb 3-1: config 0 descriptor??
[   85.931296][   T24] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor
[   85.985905][   T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input5
[   86.237766][   T24] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[   86.565861][ T5912] usb 3-1: USB disconnect, device number 7
[   86.634451][ T6732] loop1: detected capacity change from 0 to 40427
[   86.659007][ T6732] F2FS-fs (loop1): invalid crc value
[   86.712765][ T6732] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   86.717900][ T6732] F2FS-fs (loop1): Start checkpoint disabled!
[   86.721938][ T6732] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   86.744733][   T24] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[   86.751732][   T64] kworker/u10:3: attempt to access beyond end of device
[   86.751732][   T64] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   86.758012][   T64] CPU: 1 UID: 0 PID: 64 Comm: kworker/u10:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   86.758022][   T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   86.758027][   T64] Workqueue: writeback wb_workfn (flush-7:1)
[   86.758042][   T64] Call Trace:
[   86.758045][   T64]  <TASK>
[   86.758049][   T64]  dump_stack_lvl+0x189/0x250
[   86.758062][   T64]  ? __pfx_dump_stack_lvl+0x10/0x10
[   86.758070][   T64]  ? __pfx_queue_work_on+0x10/0x10
[   86.758078][   T64]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   86.758089][   T64]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   86.758102][   T64]  f2fs_handle_critical_error+0x37c/0x540
[   86.758116][   T64]  f2fs_write_end_io+0x886/0xb60
[   86.758132][   T64]  __submit_merged_bio+0x27a/0x6a0
[   86.758144][   T64]  __submit_merged_write_cond+0x255/0x530
[   86.758156][   T64]  f2fs_write_data_pages+0x261d/0x3000
[   86.758181][   T64]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   86.758196][   T64]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   86.758219][   T64]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   86.758228][   T64]  ? look_up_lock_class+0x74/0x170
[   86.758242][   T64]  ? trace_f2fs_writepages+0x7f/0x200
[   86.758251][   T64]  ? f2fs_write_node_pages+0x478/0x6e0
[   86.758263][   T64]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   86.758278][   T64]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   86.758287][   T64]  do_writepages+0x32e/0x550
[   86.758300][   T64]  ? reacquire_held_locks+0x127/0x1d0
[   86.758307][   T64]  ? writeback_sb_inodes+0x384/0x1010
[   86.758321][   T64]  __writeback_single_inode+0x145/0xff0
[   86.758329][   T64]  ? do_raw_spin_unlock+0x4d/0x240
[   86.758339][   T64]  writeback_sb_inodes+0x6c7/0x1010
[   86.758359][   T64]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   86.758386][   T64]  ? rcu_is_watching+0x15/0xb0
[   86.758398][   T64]  wb_writeback+0x43b/0xaf0
[   86.758410][   T64]  ? queue_io+0x3c1/0x590
[   86.758420][   T64]  ? __pfx_wb_writeback+0x10/0x10
[   86.758432][   T64]  ? _raw_spin_unlock_irq+0x23/0x50
[   86.758442][   T64]  wb_workfn+0x409/0xef0
[   86.758456][   T64]  ? __pfx_wb_workfn+0x10/0x10
[   86.758465][   T64]  ? __lock_acquire+0xab9/0xd20
[   86.758520][   T64]  ? process_scheduled_works+0x9ef/0x17b0
[   86.758533][   T64]  ? _raw_spin_unlock_irq+0x23/0x50
[   86.758540][   T64]  ? process_scheduled_works+0x9ef/0x17b0
[   86.758546][   T64]  ? process_scheduled_works+0x9ef/0x17b0
[   86.758553][   T64]  process_scheduled_works+0xae1/0x17b0
[   86.758574][   T64]  ? __pfx_process_scheduled_works+0x10/0x10
[   86.758589][   T64]  worker_thread+0x8a0/0xda0
[   86.758597][   T64]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   86.758609][   T64]  ? __kthread_parkme+0x7b/0x200
[   86.758621][   T64]  kthread+0x711/0x8a0
[   86.758631][   T64]  ? __pfx_worker_thread+0x10/0x10
[   86.758638][   T64]  ? __pfx_kthread+0x10/0x10
[   86.758646][   T64]  ? _raw_spin_unlock_irq+0x23/0x50
[   86.758654][   T64]  ? lockdep_hardirqs_on+0x9c/0x150
[   86.758661][   T64]  ? __pfx_kthread+0x10/0x10
[   86.758670][   T64]  ret_from_fork+0x3fc/0x770
[   86.758679][   T64]  ? __pfx_ret_from_fork+0x10/0x10
[   86.758689][   T64]  ? __switch_to_asm+0x39/0x70
[   86.758712][   T64]  ? __switch_to_asm+0x33/0x70
[   86.758719][   T64]  ? __pfx_kthread+0x10/0x10
[   86.758728][   T64]  ret_from_fork_asm+0x1a/0x30
[   86.758748][   T64]  </TASK>
[   86.759231][   T64] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   86.986649][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   86.991574][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[   87.001743][   T24] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[   87.012862][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.018755][   T24] usb 1-1: config 0 descriptor??
[   87.023637][ T6742] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   87.303438][ T6746] loop2: detected capacity change from 0 to 65
[   87.335295][ T6746] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[   87.474153][   T24] saitek 0003:06A3:0CCD.0004: item fetching failed at offset 0/2
[   87.498200][   T24] saitek 0003:06A3:0CCD.0004: parse failed
[   87.500739][   T24] saitek 0003:06A3:0CCD.0004: probe with driver saitek failed with error -22
[   87.514000][ T6748] loop2: detected capacity change from 0 to 164
[   87.552337][ T6748] Unable to read rock-ridge attributes
[   87.559238][ T6748] ISOFS: unable to read i-node block
[   87.679693][   T24] usb 1-1: USB disconnect, device number 8
[   87.896108][ T6756] loop2: detected capacity change from 0 to 256
[   87.924512][ T6756] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[   87.930025][ T6756] FAT-fs (loop2): Filesystem has been set read-only
[   88.106661][ T6760] loop2: detected capacity change from 0 to 256
[   90.106318][ T6772] loop2: detected capacity change from 0 to 32768
[   90.148285][ T6772] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   90.246655][ T6772] XFS (loop2): Ending clean mount
[   90.267237][ T6772] XFS (loop2): Quotacheck needed: Please wait.
[   90.327672][ T6772] XFS (loop2): Quotacheck: Done.
[   90.374824][   T33] audit: type=1800 audit(1755503677.090:9): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.333" name="file1" dev="loop2" ino=9286 res=0 errno=0
[   90.451613][ T5842] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   92.222835][ T6794] loop0: detected capacity change from 0 to 128
[   92.232849][ T6794] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   92.243991][ T6794] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   92.276186][   T27] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   99.116608][    C0] sched: DL replenish lagged too much
[  100.488554][ T6829] loop2: detected capacity change from 0 to 1024
[  100.589637][ T6829] hfsplus: found bad thread record in catalog
[  100.644972][   T36] hfsplus: b-tree write err: -5, ino 4
[  100.779120][ T6836] loop1: detected capacity change from 0 to 8192
[  100.813696][ T6840] netlink: 'syz.2.356': attribute type 10 has an invalid length.
[  100.823565][ T6840] team0: Port device dummy0 added
[  101.006837][ T6846] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.203166][ T6842] loop2: detected capacity change from 0 to 32768
[  101.219845][ T6842] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.357 (6842)
[  101.262519][ T6842] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  101.272211][ T6854] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  101.283266][ T6842] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  101.292617][ T6842] BTRFS info (device loop2): using free-space-tree
[  101.428385][   T33] audit: type=1800 audit(1755503688.150:10): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.357" name="file1" dev="loop2" ino=260 res=0 errno=0
[  101.647770][ T5842] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  101.856681][ T6872] input: syz1 as /devices/virtual/input/input6
[  102.294268][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'.
[  102.310266][ T6878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.366'.
[  103.321046][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'.
[  103.362076][ T6875] loop2: detected capacity change from 0 to 32768
[  103.422310][ T6875] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.365 (6875)
[  103.502209][ T6875] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  103.527695][ T6875] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  103.548435][ T6875] BTRFS info (device loop2): using free-space-tree
[  103.995516][ T6915] netlink: 16 bytes leftover after parsing attributes in process `syz.1.374'.
[  104.051589][ T6915] bond0: entered promiscuous mode
[  104.053868][ T6915] bond_slave_0: entered promiscuous mode
[  104.090976][ T6915] bond_slave_1: entered promiscuous mode
[  104.142188][ T6915] bond0: left promiscuous mode
[  104.154772][ T6915] bond_slave_0: left promiscuous mode
[  104.170350][ T6915] bond_slave_1: left promiscuous mode
[  104.182181][ T5842] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  105.036061][   T95] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  105.219601][   T95] usb 2-1: Using ep0 maxpacket: 16
[  105.231540][   T95] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.242097][   T95] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.263245][   T95] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  105.277350][   T95] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.306945][   T95] usb 2-1: config 0 descriptor??
[  105.890218][ T6941] loop0: detected capacity change from 0 to 1024
[  106.318948][   T95] letsketch 0003:6161:4D15.0005: Device info: ᣍ哙覗돿
[  106.519995][   T95] letsketch 0003:6161:4D15.0005: Device info: ఁ
[  106.757055][   T95] usb 2-1: Max retries (5) exceeded reading string descriptor 202
[  106.765281][   T95] letsketch 0003:6161:4D15.0005: probe with driver letsketch failed with error -71
[  106.781553][ T6961] loop2: detected capacity change from 0 to 16
[  106.791125][   T95] usb 2-1: USB disconnect, device number 8
[  106.829517][ T6961] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  109.253522][ T6983] netlink: 'syz.2.402': attribute type 4 has an invalid length.
[  109.272480][ T6983] netlink: 'syz.2.402': attribute type 4 has an invalid length.
[  109.538685][ T6969] loop1: detected capacity change from 0 to 40427
[  109.548048][ T6969] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(3584) blocks(512)
[  109.567978][ T6969] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  109.619449][ T6969] F2FS-fs (loop1): invalid crc value
[  109.691271][ T6969] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  109.698685][ T6969] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  109.701573][ T6969] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  109.950719][ T5851] syz-executor: attempt to access beyond end of device
[  109.950719][ T5851] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  109.956428][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  109.956441][ T5851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.956445][ T5851] Call Trace:
[  109.956449][ T5851]  <TASK>
[  109.956453][ T5851]  dump_stack_lvl+0x189/0x250
[  109.956467][ T5851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.956476][ T5851]  ? __pfx_queue_work_on+0x10/0x10
[  109.956484][ T5851]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.956494][ T5851]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.956507][ T5851]  f2fs_handle_critical_error+0x37c/0x540
[  109.956521][ T5851]  f2fs_write_end_io+0x886/0xb60
[  109.956535][ T5851]  __submit_merged_bio+0x27a/0x6a0
[  109.956545][ T5851]  ? up_write+0x1c4/0x420
[  109.956556][ T5851]  __submit_merged_write_cond+0x44c/0x530
[  109.956568][ T5851]  f2fs_sync_node_pages+0x1479/0x15e0
[  109.956586][ T5851]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  109.956606][ T5851]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  109.956615][ T5851]  ? up_write+0x1c4/0x420
[  109.956622][ T5851]  ? do_raw_spin_unlock+0x4d/0x240
[  109.956633][ T5851]  f2fs_write_checkpoint+0xe6f/0x1df0
[  109.956653][ T5851]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  109.956678][ T5851]  ? kill_f2fs_super+0x298/0x6c0
[  109.956688][ T5851]  kill_f2fs_super+0x2c3/0x6c0
[  109.956697][ T5851]  ? __pfx_kill_f2fs_super+0x10/0x10
[  109.956702][ T5851]  ? radix_tree_delete_item+0x2b6/0x400
[  109.956714][ T5851]  ? shrinker_free+0x2ce/0x3e0
[  109.956729][ T5851]  deactivate_locked_super+0xbc/0x130
[  109.956739][ T5851]  cleanup_mnt+0x425/0x4c0
[  109.956746][ T5851]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.956757][ T5851]  task_work_run+0x1d4/0x260
[  109.956767][ T5851]  ? __pfx_task_work_run+0x10/0x10
[  109.956775][ T5851]  ? __x64_sys_umount+0x122/0x160
[  109.956785][ T5851]  ? exit_to_user_mode_loop+0x40/0x110
[  109.956796][ T5851]  exit_to_user_mode_loop+0xec/0x110
[  109.956805][ T5851]  do_syscall_64+0x2bd/0x3b0
[  109.956813][ T5851]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.956821][ T5851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.956848][ T5851]  ? exc_page_fault+0x9f/0xf0
[  109.956857][ T5851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.956863][ T5851] RIP: 0033:0x7f5d74b8ff17
[  109.956871][ T5851] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  109.956877][ T5851] RSP: 002b:00007ffccd75a7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  109.956885][ T5851] RAX: 0000000000000000 RBX: 00007f5d74c11c05 RCX: 00007f5d74b8ff17
[  109.956890][ T5851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccd75a860
[  109.956893][ T5851] RBP: 00007ffccd75a860 R08: 0000000000000000 R09: 0000000000000000
[  109.956897][ T5851] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffccd75b8f0
[  109.956902][ T5851] R13: 00007f5d74c11c05 R14: 000000000001ac2c R15: 00007ffccd75b930
[  109.956913][ T5851]  </TASK>
[  109.964741][ T5851] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  110.077433][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  110.077446][ T5851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.077450][ T5851] Call Trace:
[  110.077453][ T5851]  <TASK>
[  110.077456][ T5851]  dump_stack_lvl+0x189/0x250
[  110.077470][ T5851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.077478][ T5851]  ? __pfx_queue_work_on+0x10/0x10
[  110.077485][ T5851]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  110.077494][ T5851]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  110.077506][ T5851]  f2fs_handle_critical_error+0x37c/0x540
[  110.077519][ T5851]  f2fs_write_end_io+0x886/0xb60
[  110.077532][ T5851]  __submit_merged_bio+0x27a/0x6a0
[  110.077541][ T5851]  ? up_write+0x1c4/0x420
[  110.077550][ T5851]  __submit_merged_write_cond+0x44c/0x530
[  110.077562][ T5851]  f2fs_sync_node_pages+0x1479/0x15e0
[  110.077579][ T5851]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  110.077598][ T5851]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  110.077607][ T5851]  ? up_write+0x1c4/0x420
[  110.077613][ T5851]  ? do_raw_spin_unlock+0x4d/0x240
[  110.077623][ T5851]  f2fs_write_checkpoint+0xe6f/0x1df0
[  110.077639][ T5851]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  110.077664][ T5851]  ? kill_f2fs_super+0x298/0x6c0
[  110.077673][ T5851]  kill_f2fs_super+0x2c3/0x6c0
[  110.077682][ T5851]  ? __pfx_kill_f2fs_super+0x10/0x10
[  110.077688][ T5851]  ? radix_tree_delete_item+0x2b6/0x400
[  110.077699][ T5851]  ? shrinker_free+0x2ce/0x3e0
[  110.077708][ T5851]  deactivate_locked_super+0xbc/0x130
[  110.077717][ T5851]  cleanup_mnt+0x425/0x4c0
[  110.077733][ T5851]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.077744][ T5851]  task_work_run+0x1d4/0x260
[  110.077754][ T5851]  ? __pfx_task_work_run+0x10/0x10
[  110.077761][ T5851]  ? __x64_sys_umount+0x122/0x160
[  110.077772][ T5851]  ? exit_to_user_mode_loop+0x40/0x110
[  110.077782][ T5851]  exit_to_user_mode_loop+0xec/0x110
[  110.077791][ T5851]  do_syscall_64+0x2bd/0x3b0
[  110.077799][ T5851]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.077807][ T5851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.077813][ T5851]  ? exc_page_fault+0x9f/0xf0
[  110.077822][ T5851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.077828][ T5851] RIP: 0033:0x7f5d74b8ff17
[  110.077836][ T5851] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  110.077841][ T5851] RSP: 002b:00007ffccd75a7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  110.077850][ T5851] RAX: 0000000000000000 RBX: 00007f5d74c11c05 RCX: 00007f5d74b8ff17
[  110.077854][ T5851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccd75a860
[  110.077858][ T5851] RBP: 00007ffccd75a860 R08: 0000000000000000 R09: 0000000000000000
[  110.077862][ T5851] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffccd75b8f0
[  110.077866][ T5851] R13: 00007f5d74c11c05 R14: 000000000001ac2c R15: 00007ffccd75b930
[  110.077878][ T5851]  </TASK>
[  110.077881][ T5851] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  110.493545][ T7009] loop0: detected capacity change from 0 to 2048
[  110.531485][ T7009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.741411][ T7011] loop2: detected capacity change from 0 to 40427
[  110.746451][ T7011] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  110.749459][ T7011] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  110.752092][ T7011] F2FS-fs (loop2): build fault injection type: 0x6
[  110.941560][ T7011] F2FS-fs (loop2): invalid crc value
[  110.974958][ T7011] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  110.979113][ T7011] F2FS-fs (loop2): Start checkpoint disabled!
[  110.983308][ T7011] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  110.986316][ T7011] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  111.084852][   T95] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  111.266011][   T95] usb 2-1: Using ep0 maxpacket: 8
[  111.297741][   T95] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.302451][   T95] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.307938][   T95] usb 2-1: config 0 interface 0 has no altsetting 0
[  111.310946][   T95] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  111.315528][   T95] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.411261][   T95] usb 2-1: config 0 descriptor??
[  111.714930][   T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  111.849468][   T95] steelseries 0003:1038:1410.0006: item fetching failed at offset 2/5
[  111.853701][   T95] steelseries 0003:1038:1410.0006: parse failed
[  111.856299][   T95] steelseries 0003:1038:1410.0006: probe with driver steelseries failed with error -22
[  111.885403][   T24] usb 1-1: Using ep0 maxpacket: 16
[  111.889565][   T24] usb 1-1: config 1 has an invalid descriptor of length 171, skipping remainder of the config
[  111.893031][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  111.899786][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  111.902895][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.906319][   T24] usb 1-1: Product: syz
[  111.908297][   T24] usb 1-1: Manufacturer: syz
[  111.910373][   T24] usb 1-1: SerialNumber: syz
[  112.063393][ T5892] usb 2-1: USB disconnect, device number 9
[  112.210967][ T5237] Bluetooth: hci1: unexpected event for opcode 0x0c05
[  112.220499][   T24] usb 1-1: 0:2 : does not exist
[  112.222804][   T24] usb 1-1: unit 9 not found!
[  112.277516][   T24] usb 1-1: USB disconnect, device number 9
[  112.363828][ T6926] udevd[6926]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  112.547735][  T779] kworker/u9:3: attempt to access beyond end of device
[  112.547735][  T779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  112.558285][  T779] CPU: 0 UID: 0 PID: 779 Comm: kworker/u9:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  112.558302][  T779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.558310][  T779] Workqueue: writeback wb_workfn (flush-7:2)
[  112.558363][  T779] Call Trace:
[  112.558368][  T779]  <TASK>
[  112.558375][  T779]  dump_stack_lvl+0x189/0x250
[  112.558395][  T779]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.558408][  T779]  ? __pfx_queue_work_on+0x10/0x10
[  112.558420][  T779]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.558436][  T779]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  112.558458][  T779]  f2fs_handle_critical_error+0x37c/0x540
[  112.558481][  T779]  f2fs_write_end_io+0x886/0xb60
[  112.558504][  T779]  __submit_merged_bio+0x27a/0x6a0
[  112.558525][  T779]  __submit_merged_write_cond+0x255/0x530
[  112.558556][  T779]  f2fs_write_data_pages+0x261d/0x3000
[  112.558601][  T779]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.558628][  T779]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  112.558664][  T779]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  112.558680][  T779]  ? look_up_lock_class+0x74/0x170
[  112.558703][  T779]  ? trace_f2fs_writepages+0x7f/0x200
[  112.558720][  T779]  ? f2fs_write_node_pages+0x478/0x6e0
[  112.558738][  T779]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  112.558763][  T779]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.558780][  T779]  do_writepages+0x32e/0x550
[  112.558801][  T779]  ? reacquire_held_locks+0x127/0x1d0
[  112.558815][  T779]  ? writeback_sb_inodes+0x384/0x1010
[  112.558834][  T779]  __writeback_single_inode+0x145/0xff0
[  112.558847][  T779]  ? do_raw_spin_unlock+0x4d/0x240
[  112.558864][  T779]  writeback_sb_inodes+0x6c7/0x1010
[  112.558882][  T779]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.558906][  T779]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  112.558949][  T779]  ? rcu_is_watching+0x15/0xb0
[  112.558967][  T779]  wb_writeback+0x43b/0xaf0
[  112.558988][  T779]  ? queue_io+0x3c1/0x590
[  112.559004][  T779]  ? __pfx_wb_writeback+0x10/0x10
[  112.559025][  T779]  ? _raw_spin_unlock_irq+0x23/0x50
[  112.559040][  T779]  wb_workfn+0x409/0xef0
[  112.559066][  T779]  ? __pfx_wb_workfn+0x10/0x10
[  112.559082][  T779]  ? __lock_acquire+0xab9/0xd20
[  112.559106][  T779]  ? process_scheduled_works+0x9ef/0x17b0
[  112.559123][  T779]  ? _raw_spin_unlock_irq+0x23/0x50
[  112.559135][  T779]  ? process_scheduled_works+0x9ef/0x17b0
[  112.559145][  T779]  ? process_scheduled_works+0x9ef/0x17b0
[  112.559157][  T779]  process_scheduled_works+0xae1/0x17b0
[  112.559190][  T779]  ? __pfx_process_scheduled_works+0x10/0x10
[  112.559215][  T779]  worker_thread+0x8a0/0xda0
[  112.559229][  T779]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  112.559249][  T779]  ? __kthread_parkme+0x7b/0x200
[  112.559269][  T779]  kthread+0x711/0x8a0
[  112.559286][  T779]  ? __pfx_worker_thread+0x10/0x10
[  112.559297][  T779]  ? __pfx_kthread+0x10/0x10
[  112.559312][  T779]  ? _raw_spin_unlock_irq+0x23/0x50
[  112.559348][  T779]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.559364][  T779]  ? __pfx_kthread+0x10/0x10
[  112.559378][  T779]  ret_from_fork+0x3fc/0x770
[  112.559394][  T779]  ? __pfx_ret_from_fork+0x10/0x10
[  112.559411][  T779]  ? __switch_to_asm+0x39/0x70
[  112.559425][  T779]  ? __switch_to_asm+0x33/0x70
[  112.559438][  T779]  ? __pfx_kthread+0x10/0x10
[  112.559453][  T779]  ret_from_fork_asm+0x1a/0x30
[  112.559480][  T779]  </TASK>
[  112.559610][  T779] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  113.041385][ T7030] loop2: detected capacity change from 0 to 1024
[  113.195567][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  113.395143][   T24] usb 2-1: Using ep0 maxpacket: 8
[  113.429429][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  113.434039][   T24] usb 2-1: config 5 has an invalid interface number: 215 but max is 0
[  113.439165][   T24] usb 2-1: config 5 has no interface number 0
[  113.441910][   T24] usb 2-1: config 5 interface 215 has no altsetting 0
[  113.448813][ T7030] hfsplus: xattr searching failed
[  113.450473][   T24] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba
[  113.453740][ T7030] hfsplus: xattr searching failed
[  113.455578][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.461078][   T24] usb 2-1: Product: syz
[  113.463062][   T24] usb 2-1: Manufacturer: syz
[  113.466862][   T24] usb 2-1: SerialNumber: syz
[  113.487682][   T64] hfsplus: b-tree write err: -5, ino 3
[  113.759734][   T24] cypress_m8 2-1:5.215: DeLorme Earthmate USB converter detected
[  113.787579][   T24] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0
[  113.794507][   T24] usb 2-1: USB disconnect, device number 10
[  113.806579][   T24] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0
[  113.816623][   T24] cypress_m8 2-1:5.215: device disconnected
[  113.833223][ T7033] loop2: detected capacity change from 0 to 32768
[  113.863938][   T33] audit: type=1800 audit(1755503700.590:11): pid=7033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.419" name="file1" dev="loop2" ino=4 res=0 errno=0
[  113.932280][ T7039] veth0: entered promiscuous mode
[  113.938782][ T7039] veth0: left promiscuous mode
[  114.085664][ T7033] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[  114.085664][ T7033] 
[  114.092537][ T7033] ERROR: (device loop2): remounting filesystem as read-only
[  114.277533][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'.
[  114.281403][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'.
[  114.573952][ T7055] loop1: detected capacity change from 0 to 32768
[  114.578892][ T7055] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section replicas: no devices in entry need_discard: 0/0 []
[  114.578892][ T7055] replicas (size 40):
[  114.578892][ T7055] need_discard: 0/0 []
[  114.578892][ T7055] 
[  114.590437][ T7055] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  114.709938][ T7063] loop1: detected capacity change from 0 to 24
[  114.713600][ T7063] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  114.722073][ T7059] loop0: detected capacity change from 0 to 32768
[  114.728364][ T7063] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  114.757880][ T7059] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.809424][ T7059] XFS (loop0): Ending clean mount
[  114.812386][ T7073] loop1: detected capacity change from 0 to 1024
[  114.821249][ T7059] XFS (loop0): Quotacheck needed: Please wait.
[  114.851088][ T7059] XFS (loop0): Quotacheck: Done.
[  114.893862][ T5845] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.955734][ T7073] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  115.008643][ T7073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.436'.
[  115.285045][ T7090] trusted_key: syz.1.438 sent an empty control message without MSG_MORE.
[  115.778552][ T7102] loop0: detected capacity change from 0 to 512
[  115.791355][ T7102] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  115.797289][ T7102] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  115.855627][ T7102] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  115.866018][ T7102] EXT4-fs (loop0): 1 truncate cleaned up
[  115.881180][ T7102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.893724][ T7102] bpf: Bad value for 'mode'
[  116.458713][ T7106] netlink: 108 bytes leftover after parsing attributes in process `syz.2.443'.
[  116.599809][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.613672][ T7114] loop2: detected capacity change from 0 to 512
[  116.635087][ T7114] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  116.645368][ T7114] EXT4-fs (loop2): 1 truncate cleaned up
[  116.648434][ T7114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.730229][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.793960][ T7128] syz.1.454 uses obsolete (PF_INET,SOCK_PACKET)
[  116.951086][ T7138] loop1: detected capacity change from 0 to 512
[  117.011423][ T7138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.020978][ T7138] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  117.031934][ T7138] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.458: corrupted inode contents
[  117.039103][ T7138] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.458: mark_inode_dirty error
[  117.043715][ T7138] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.458: corrupted inode contents
[  117.051377][ T7138] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.458: corrupted inode contents
[  117.058004][ T7138] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.458: mark_inode_dirty error
[  117.061997][ T7138] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.458: corrupted inode contents
[  117.066382][ T7138] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.458: mark_inode_dirty error
[  117.070794][ T7138] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.458: corrupted inode contents
[  117.076019][ T7138] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.458: mark_inode_dirty error
[  117.084785][ T7138] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.458: corrupted inode contents
[  117.108231][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.177759][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  117.199785][ T7143] loop1: detected capacity change from 0 to 4096
[  117.214978][ T7143] ntfs3(loop1): ino=3, Correct links count -> 2.
[  117.388052][    T9] usb 1-1: Using ep0 maxpacket: 8
[  117.428569][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.435940][    T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  117.482134][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40
[  117.495361][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.498271][    T9] usb 1-1: Product: syz
[  117.499717][    T9] usb 1-1: Manufacturer: syz
[  117.501386][    T9] usb 1-1: SerialNumber: syz
[  117.789682][    T9] usb 1-1: USB disconnect, device number 10
[  118.124763][   T51] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  118.202516][ T7153] loop1: detected capacity change from 0 to 512
[  118.210012][ T7153] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  118.222578][ T7153] EXT4-fs (loop1): 1 truncate cleaned up
[  118.229016][ T7153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.240557][ T7153] syz.1.464 (pid 7153) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  118.281961][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.291656][   T51] usb 3-1: Using ep0 maxpacket: 16
[  118.297490][   T51] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.301396][   T51] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  118.350640][   T51] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  118.354174][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.376281][   T51] usb 3-1: Product: syz
[  118.377997][   T51] usb 3-1: Manufacturer: syz
[  118.379867][   T51] usb 3-1: SerialNumber: syz
[  118.635125][   T51] usb 3-1: 0:2 : does not exist
[  118.672171][   T51] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  118.737845][   T51] usb 3-1: USB disconnect, device number 8
[  118.804499][ T6926] udevd[6926]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  119.099663][ T7166] loop1: detected capacity change from 0 to 32768
[  119.124179][ T7166] find_entry called with index = 0
[  119.613640][ T7191] mmap: syz.2.481 (7191): VmData 37474304 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data.
[  122.094674][   T51] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  122.248349][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  122.253183][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.257674][   T51] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  122.261441][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.273639][   T51] usb 2-1: config 0 descriptor??
[  122.696106][   T51] samsung 0003:0419:0001.0007: item 0 2 0 8 parsing failed
[  122.718512][    C1] hrtimer: interrupt took 81793 ns
[  122.735400][   T51] samsung 0003:0419:0001.0007: parse failed
[  122.737443][   T51] samsung 0003:0419:0001.0007: probe with driver samsung failed with error -22
[  122.858685][ T7207] loop2: detected capacity change from 0 to 1024
[  122.916039][ T7207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.930834][   T51] usb 2-1: USB disconnect, device number 11
[  122.940746][ T7207] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #12: block 7: comm syz.2.487: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  122.984677][ T7207] EXT4-fs (loop2): Remounting filesystem read-only
[  123.070625][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.280916][ T7215] loop0: detected capacity change from 0 to 256
[  123.421304][ T7215] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5658fca8, utbl_chksum : 0xe619d30d)
[  124.761144][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'.
[  124.772609][ T7223] netlink: 312 bytes leftover after parsing attributes in process `syz.1.493'.
[  125.265672][ T7233] loop1: detected capacity change from 0 to 2048
[  125.284056][ T7233] EXT4-fs: Ignoring removed nobh option
[  125.321766][ T7233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.348082][ T7233] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.413825][   T33] audit: type=1800 audit(1755503712.140:12): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.498" name="file0" dev="loop1" ino=13 res=0 errno=0
[  125.490441][ T7239] loop2: detected capacity change from 0 to 2048
[  125.552635][ T7239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.581052][ T7239] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.608404][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.756109][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.049962][ T7229] loop0: detected capacity change from 0 to 40427
[  126.109777][ T7229] F2FS-fs (loop0): invalid crc value
[  126.376345][ T7229] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  126.401206][ T7229] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  126.491117][ T7229] syz.0.496: attempt to access beyond end of device
[  126.491117][ T7229] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  126.518115][ T7229] syz.0.496: attempt to access beyond end of device
[  126.518115][ T7229] loop0: rw=0, sector=77888, nr_sectors = 8 limit=40427
[  126.534450][ T7229] syz.0.496: attempt to access beyond end of device
[  126.534450][ T7229] loop0: rw=0, sector=77944, nr_sectors = 8 limit=40427
[  126.573090][ T7229] syz.0.496: attempt to access beyond end of device
[  126.573090][ T7229] loop0: rw=0, sector=77952, nr_sectors = 8 limit=40427
[  126.646218][ T5845] syz-executor: attempt to access beyond end of device
[  126.646218][ T5845] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  126.651709][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  126.651722][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.651727][ T5845] Call Trace:
[  126.651731][ T5845]  <TASK>
[  126.651735][ T5845]  dump_stack_lvl+0x189/0x250
[  126.651750][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.651759][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[  126.651767][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  126.651778][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  126.651791][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[  126.651805][ T5845]  f2fs_write_end_io+0x886/0xb60
[  126.651821][ T5845]  __submit_merged_bio+0x27a/0x6a0
[  126.651833][ T5845]  __submit_merged_write_cond+0x255/0x530
[  126.651845][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[  126.651854][ T5845]  ? __lock_acquire+0xab9/0xd20
[  126.651878][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  126.651907][ T5845]  ? __mod_zone_page_state+0xd7/0x140
[  126.651921][ T5845]  ? folios_put_refs+0x560/0x640
[  126.651934][ T5845]  ? __pfx_folios_put_refs+0x10/0x10
[  126.651941][ T5845]  ? rcu_is_watching+0x15/0xb0
[  126.651953][ T5845]  ? __lock_acquire+0xab9/0xd20
[  126.651969][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  126.651979][ T5845]  do_writepages+0x32e/0x550
[  126.651993][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  126.652004][ T5845]  filemap_fdatawrite+0x199/0x240
[  126.652014][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  126.652063][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  126.652075][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[  126.652089][ T5845]  f2fs_write_checkpoint+0x95a/0x1df0
[  126.652108][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  126.652136][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[  126.652146][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[  126.652156][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  126.652161][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[  126.652174][ T5845]  ? shrinker_free+0x2ce/0x3e0
[  126.652183][ T5845]  deactivate_locked_super+0xbc/0x130
[  126.652193][ T5845]  cleanup_mnt+0x425/0x4c0
[  126.652202][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.652213][ T5845]  task_work_run+0x1d4/0x260
[  126.652224][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  126.652232][ T5845]  ? __x64_sys_umount+0x122/0x160
[  126.652265][ T5845]  ? exit_to_user_mode_loop+0x40/0x110
[  126.652279][ T5845]  exit_to_user_mode_loop+0xec/0x110
[  126.652288][ T5845]  do_syscall_64+0x2bd/0x3b0
[  126.652298][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.652306][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.652313][ T5845]  ? exc_page_fault+0x9f/0xf0
[  126.652323][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.652329][ T5845] RIP: 0033:0x7f52ad18ff17
[  126.652337][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  126.652343][ T5845] RSP: 002b:00007ffdf1b736c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  126.652351][ T5845] RAX: 0000000000000000 RBX: 00007f52ad211c05 RCX: 00007f52ad18ff17
[  126.652356][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf1b73780
[  126.652360][ T5845] RBP: 00007ffdf1b73780 R08: 0000000000000000 R09: 0000000000000000
[  126.652364][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf1b74810
[  126.652368][ T5845] R13: 00007f52ad211c05 R14: 000000000001ee10 R15: 00007ffdf1b74850
[  126.652381][ T5845]  </TASK>
[  126.868738][ T7259] loop2: detected capacity change from 0 to 32768
[  126.871462][ T7259] XFS: attr2 mount option is deprecated.
[  126.874044][ T5845] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  126.910568][ T7259] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  126.913628][ T7259] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  126.954406][ T7259] XFS (loop2): Ending clean mount
[  126.959546][ T7259] XFS (loop2): Quotacheck needed: Please wait.
[  127.012150][ T7259] XFS (loop2): Quotacheck: Done.
[  127.110227][ T7269] loop1: detected capacity change from 0 to 1024
[  127.128018][ T5842] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  127.368236][ T7273] loop0: detected capacity change from 0 to 512
[  127.415272][ T7273] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  127.436210][ T7273] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.506: invalid indirect mapped block 4294967295 (level 0)
[  127.455817][ T7273] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.506: invalid indirect mapped block 4294967295 (level 1)
[  127.488610][ T7273] EXT4-fs (loop0): 1 orphan inode deleted
[  127.490535][ T7273] EXT4-fs (loop0): 1 truncate cleaned up
[  127.493479][ T7273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.564507][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.856101][ T7290] loop0: detected capacity change from 0 to 64
[  127.881753][ T7290] MINIX-fs: mounting file system with errors, running fsck is recommended
[  128.148607][ T7284] loop1: detected capacity change from 0 to 32768
[  128.447485][ T7286] loop2: detected capacity change from 0 to 40427
[  128.477506][ T7286] F2FS-fs (loop2): invalid crc value
[  128.686892][ T7286] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.701792][ T7286] F2FS-fs (loop2): Start checkpoint disabled!
[  128.713824][ T7286] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  128.798496][ T7294] loop0: detected capacity change from 0 to 32768
[  128.828865][   T52] kworker/u10:2: attempt to access beyond end of device
[  128.828865][   T52] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  128.833560][   T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u10:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  128.833571][   T52] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.833575][   T52] Workqueue: writeback wb_workfn (flush-7:2)
[  128.833591][   T52] Call Trace:
[  128.833594][   T52]  <TASK>
[  128.833598][   T52]  dump_stack_lvl+0x189/0x250
[  128.833611][   T52]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.833619][   T52]  ? __pfx_queue_work_on+0x10/0x10
[  128.833627][   T52]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  128.833637][   T52]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  128.833651][   T52]  f2fs_handle_critical_error+0x37c/0x540
[  128.833665][   T52]  f2fs_write_end_io+0x886/0xb60
[  128.833680][   T52]  __submit_merged_bio+0x27a/0x6a0
[  128.833692][   T52]  __submit_merged_write_cond+0x255/0x530
[  128.833705][   T52]  f2fs_write_data_pages+0x261d/0x3000
[  128.833729][   T52]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.833748][   T52]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  128.833788][   T52]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  128.833799][   T52]  ? look_up_lock_class+0x74/0x170
[  128.833813][   T52]  ? trace_f2fs_writepages+0x7f/0x200
[  128.833822][   T52]  ? f2fs_write_node_pages+0x478/0x6e0
[  128.833833][   T52]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  128.833848][   T52]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.833858][   T52]  do_writepages+0x32e/0x550
[  128.833870][   T52]  ? reacquire_held_locks+0x127/0x1d0
[  128.833877][   T52]  ? writeback_sb_inodes+0x384/0x1010
[  128.833890][   T52]  __writeback_single_inode+0x145/0xff0
[  128.833899][   T52]  ? do_raw_spin_unlock+0x4d/0x240
[  128.833908][   T52]  writeback_sb_inodes+0x6c7/0x1010
[  128.833929][   T52]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  128.833956][   T52]  ? rcu_is_watching+0x15/0xb0
[  128.833969][   T52]  wb_writeback+0x43b/0xaf0
[  128.833981][   T52]  ? queue_io+0x3c1/0x590
[  128.833991][   T52]  ? __pfx_wb_writeback+0x10/0x10
[  128.834003][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  128.834013][   T52]  wb_workfn+0x409/0xef0
[  128.834027][   T52]  ? __pfx_wb_workfn+0x10/0x10
[  128.834037][   T52]  ? __lock_acquire+0xab9/0xd20
[  128.834051][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  128.834061][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  128.834068][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  128.834074][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  128.834081][   T52]  process_scheduled_works+0xae1/0x17b0
[  128.834101][   T52]  ? __pfx_process_scheduled_works+0x10/0x10
[  128.834117][   T52]  worker_thread+0x8a0/0xda0
[  128.834130][   T52]  ? __kthread_parkme+0x7b/0x200
[  128.834143][   T52]  kthread+0x711/0x8a0
[  128.834153][   T52]  ? __pfx_worker_thread+0x10/0x10
[  128.834160][   T52]  ? __pfx_kthread+0x10/0x10
[  128.834168][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  128.834176][   T52]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.834183][   T52]  ? __pfx_kthread+0x10/0x10
[  128.834192][   T52]  ret_from_fork+0x3fc/0x770
[  128.834201][   T52]  ? __pfx_ret_from_fork+0x10/0x10
[  128.834211][   T52]  ? __switch_to_asm+0x39/0x70
[  128.834219][   T52]  ? __switch_to_asm+0x33/0x70
[  128.834226][   T52]  ? __pfx_kthread+0x10/0x10
[  128.834256][   T52]  ret_from_fork_asm+0x1a/0x30
[  128.834272][   T52]  </TASK>
[  128.949745][   T52] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  129.038884][ T7294] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  129.355925][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'.
[  129.448216][ T7294] syz.0.518 (7294) used greatest stack depth: 18344 bytes left
[  129.540900][ T5845] ocfs2: Unmounting device (7,0) on (node local)
[  129.675215][   T24] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  129.750364][ T7325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.527'.
[  129.827301][   T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  129.830322][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.847291][   T24] usb 3-1: config 0 descriptor??
[  129.862522][   T24] cp210x 3-1:0.0: cp210x converter detected
[  130.005980][ T7335] loop1: detected capacity change from 0 to 4096
[  130.038155][ T7335] NILFS (loop1): invalid segment: Checksum error in segment payload
[  130.046609][ T7335] NILFS (loop1): trying rollback from an earlier position
[  130.078553][ T7335] NILFS (loop1): recovery complete
[  130.099869][ T7338] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.284010][   T24] usb 3-1: cp210x converter now attached to ttyUSB0
[  130.426533][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'.
[  130.475861][   T24] usb 3-1: USB disconnect, device number 9
[  130.481557][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  130.496879][ T7349] netlink: zone id is out of range
[  130.522076][ T7349] netlink: set zone limit has 4 unknown bytes
[  130.536979][ T7349] netlink: del zone limit has 4 unknown bytes
[  130.601915][ T7351] loop0: detected capacity change from 0 to 512
[  130.630415][ T7351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.642080][ T7351] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  130.675618][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.746589][   T24] cp210x 3-1:0.0: device disconnected
[  131.333853][ T7371] netlink: 56 bytes leftover after parsing attributes in process `syz.0.550'.
[  131.349955][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.550'.
[  131.359158][ T7371] netlink: 31 bytes leftover after parsing attributes in process `syz.0.550'.
[  131.371075][ T7371] netlink: 'syz.0.550': attribute type 3 has an invalid length.
[  131.379326][ T7371] netlink: 'syz.0.550': attribute type 2 has an invalid length.
[  131.390620][ T7371] netlink: 31 bytes leftover after parsing attributes in process `syz.0.550'.
[  131.466808][ T7375] loop0: detected capacity change from 0 to 8
[  131.518528][ T7375] SQUASHFS error: zlib decompression failed, data probably corrupt
[  131.534636][ T7375] SQUASHFS error: Failed to read block 0x4e8: -5
[  131.541947][ T7375] SQUASHFS error: zlib decompression failed, data probably corrupt
[  131.550025][ T7375] SQUASHFS error: Failed to read block 0x4ee: -5
[  131.558055][ T7375] SQUASHFS error: zlib decompression failed, data probably corrupt
[  131.572559][ T7375] SQUASHFS error: Failed to read block 0x4ef: -5
[  131.587683][   T33] audit: type=1800 audit(1755503718.320:13): pid=7375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.552" name="file1" dev="loop0" ino=5 res=0 errno=0
[  131.755436][   T33] audit: type=1804 audit(1755503718.480:14): pid=7382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.555" name="/newroot/172/bus/file0" dev="overlay" ino=929 res=1 errno=0
[  131.768081][ T7382] evm: overlay not supported
[  132.831927][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.870308][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.840084][ T7405] loop0: detected capacity change from 0 to 2048
[  133.843276][ T7405] EXT4-fs: Ignoring removed bh option
[  133.889411][ T7405] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  134.334299][ T7421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.574'.
[  134.361725][ T7423] syz_tun: entered allmulticast mode
[  134.531802][ T7422] syz_tun: left allmulticast mode
[  134.610468][ T7429] loop0: detected capacity change from 0 to 4096
[  134.620645][ T7429] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  134.649909][ T7429] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  134.653914][ T7429] ntfs3(loop0): Failed to load $Extend (-22).
[  134.656415][ T7429] ntfs3(loop0): Failed to initialize $Extend.
[  134.735967][ T7431] dns_resolver: Unsupported server list version (0)
[  134.771953][ T7433] sctp: [Deprecated]: syz.1.579 (pid 7433) Use of struct sctp_assoc_value in delayed_ack socket option.
[  134.771953][ T7433] Use struct sctp_sack_info instead
[  134.988126][ T7445] loop1: detected capacity change from 0 to 512
[  134.997176][ T7445] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  135.120401][   T95] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  135.260330][ T7453] loop1: detected capacity change from 0 to 512
[  135.298522][ T7453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.302503][ T7453] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  135.330228][   T95] usb 1-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad
[  135.333120][   T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.352848][   T95] usb 1-1: config 0 descriptor??
[  135.370158][   T95] gspca_main: tv8532-2.14.0 probing 0545:808b
[  135.397842][ T7458] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set
[  135.421945][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.642712][   T95] usb 1-1: USB disconnect, device number 11
[  135.869915][ T7475] loop1: detected capacity change from 0 to 16
[  135.880306][ T7475] erofs (device loop1): mounted with root inode @ nid 36.
[  135.888852][   T33] audit: type=1800 audit(1755503722.620:15): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.598" name="file1" dev="loop1" ino=86 res=0 errno=0
[  135.934665][ T5912] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  136.118500][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  136.129006][ T5912] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  136.131990][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.171799][ T5912] usb 3-1: config 0 descriptor??
[  136.174727][ T7469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  136.230883][ T7488] bridge0: entered allmulticast mode
[  136.235710][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'.
[  136.238697][ T7488] bridge_slave_1: left allmulticast mode
[  136.253108][ T7488] bridge_slave_1: left promiscuous mode
[  136.257597][ T7488] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.305835][ T7488] bridge_slave_0: left allmulticast mode
[  136.308955][ T7488] bridge_slave_0: left promiscuous mode
[  136.313566][ T7488] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.322282][ T7491] delete_channel: no stack
[  136.393223][ T7488] bridge0 (unregistering): left allmulticast mode
[  136.616015][ T5912] elan 0003:04F3:0755.0008: unknown main item tag 0x0
[  136.623460][ T5912] elan 0003:04F3:0755.0008: item fetching failed at offset 3/5
[  136.627534][ T5912] elan 0003:04F3:0755.0008: Hid Parse failed
[  136.630162][ T5912] elan 0003:04F3:0755.0008: probe with driver elan failed with error -22
[  136.667098][ T7496] netlink: 'syz.0.608': attribute type 8 has an invalid length.
[  136.837666][ T5912] usb 3-1: USB disconnect, device number 10
[  136.992645][ T7505] loop1: detected capacity change from 0 to 64
[  137.016888][   T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  138.326220][   T24] usb 1-1: Using ep0 maxpacket: 32
[  138.329844][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  138.334414][   T24] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  138.349036][   T24] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  138.353554][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.361968][   T24] usb 1-1: Product: syz
[  138.365880][   T24] usb 1-1: Manufacturer: syz
[  138.368670][   T24] usb 1-1: SerialNumber: syz
[  138.791579][   T24] usb 1-1: Invalid number of CPorts: 0
[  138.794057][   T24] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -22
[  139.598743][ T5912] usb 1-1: USB disconnect, device number 12
[  139.820763][ T7524] loop2: detected capacity change from 0 to 1024
[  139.826473][ T7524] EXT4-fs: Ignoring removed bh option
[  139.861148][ T7524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.950898][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.427683][ T5912] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  140.588121][ T5912] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.594833][ T5912] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  140.608296][ T5912] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  140.611233][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  140.632519][ T5912] usb 2-1: SerialNumber: syz
[  140.644701][   T51] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  140.804868][   T51] usb 1-1: Using ep0 maxpacket: 8
[  140.815974][   T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  140.819925][   T51] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  140.834608][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.849142][ T5912] usb 2-1: 0:2 : does not exist
[  140.861910][   T51] usb 1-1: config 0 descriptor??
[  140.889314][ T5912] usb 2-1: USB disconnect, device number 12
[  140.973772][ T6926] udevd[6926]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  141.082482][ T7552] loop2: detected capacity change from 0 to 64
[  141.107819][   T51] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  141.116557][ T7552] syz.2.631: attempt to access beyond end of device
[  141.116557][ T7552] loop2: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  141.121141][ T7552] Buffer I/O error on dev loop2, logical block 8388608, async page read
[  141.320072][   T51] usb 1-1: USB disconnect, device number 13
[  141.470180][ T7560] loop1: detected capacity change from 0 to 512
[  141.504449][ T7560] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  141.607851][ T7566] loop1: detected capacity change from 0 to 256
[  141.623722][ T7566] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  141.638996][ T7566] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  141.668383][ T7566] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb62de5b7, utbl_chksum : 0xe619d30d)
[  141.781500][ T7570] loop1: detected capacity change from 0 to 1024
[  141.805582][ T7570] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  141.978680][ T7574] loop1: detected capacity change from 0 to 512
[  142.020235][ T7574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.029287][ T7574] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.111953][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.139506][ T7578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.643'.
[  142.654116][   T33] audit: type=1400 audit(1755503729.380:16): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7585 comm="syz.2.647"
[  142.732829][ T7581] loop1: detected capacity change from 0 to 32768
[  142.738990][ T7581] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.644 (7581)
[  142.776134][ T7581] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  142.794497][ T7581] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  142.813861][ T7581] BTRFS info (device loop1): using free-space-tree
[  143.061735][ T7581] BTRFS info (device loop1): rebuilding free space tree
[  143.314735][   T51] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  143.442290][ T5851] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  143.498678][   T51] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  143.502808][   T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24929, setting to 64
[  143.539869][   T51] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  143.643774][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.667278][   T51] usb 1-1: Product: syz
[  143.669086][   T51] usb 1-1: Manufacturer: syz
[  143.671109][   T51] usb 1-1: SerialNumber: syz
[  143.723850][   T51] usb 1-1: config 0 descriptor??
[  143.742483][ T7609] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  143.906499][   T51] rc_core: IR keymap rc-streamzap not found
[  143.909110][   T51] Registered IR keymap rc-empty
[  143.946398][   T51] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  143.987750][   T51] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7
[  144.057839][   T33] audit: type=1800 audit(1755503730.780:17): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.653" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  144.072109][   T51] usb 1-1: USB disconnect, device number 14
[  144.462524][ T7629] loop1: detected capacity change from 0 to 2048
[  144.518795][ T7629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  144.643903][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  146.260724][ T7645] loop1: detected capacity change from 0 to 512
[  146.278041][ T7645] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  146.312632][ T7645] EXT4-fs (loop1): 1 truncate cleaned up
[  146.318561][ T7645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.461245][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.368142][ T7682] loop1: detected capacity change from 0 to 32768
[  148.425332][ T7682] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  148.433967][ T7682] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74
[  148.439492][ T7682] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  148.442640][ T7682] OCFS2: Returning error to the calling process.
[  148.444830][ T7682] (syz.1.674,7682,1):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5
[  148.447607][ T7682] (syz.1.674,7682,1):ocfs2_reserve_new_inode:1097 ERROR: status = -5
[  148.450288][ T7682] (syz.1.674,7682,1):ocfs2_reserve_new_inode:1120 ERROR: status = -5
[  148.453294][ T7682] (syz.1.674,7682,1):ocfs2_mknod:309 ERROR: status = -5
[  148.455662][ T7682] (syz.1.674,7682,1):ocfs2_mknod:505 ERROR: status = -5
[  148.458148][ T7682] (syz.1.674,7682,1):ocfs2_mkdir:661 ERROR: status = -5
[  148.528823][ T5851] ocfs2: Unmounting device (7,1) on (node local)
[  149.532263][ T7715] loop2: detected capacity change from 0 to 512
[  149.554772][   T51] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  149.565174][ T7715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.579673][ T7715] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.647268][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.714918][   T51] usb 1-1: Using ep0 maxpacket: 8
[  149.723477][   T51] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  149.726956][   T51] usb 1-1: config 0 has no interface number 0
[  149.729452][   T51] usb 1-1: config 0 interface 1 has no altsetting 0
[  149.735571][   T51] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[  149.739218][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.742731][   T51] usb 1-1: Product: syz
[  149.744497][   T51] usb 1-1: Manufacturer: syz
[  149.748151][   T51] usb 1-1: SerialNumber: syz
[  149.752013][   T51] usb 1-1: config 0 descriptor??
[  149.989012][   T51] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  150.201512][   T24] usb 1-1: USB disconnect, device number 15
[  150.251254][ T7730] loop1: detected capacity change from 0 to 256
[  151.411065][   T51] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  151.657972][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'.
[  151.774819][   T51] usb 3-1: Using ep0 maxpacket: 16
[  151.791636][   T51] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  151.849045][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.852491][   T51] usb 3-1: Product: syz
[  151.854274][   T51] usb 3-1: Manufacturer: syz
[  151.860397][   T51] usb 3-1: SerialNumber: syz
[  151.878482][   T51] usb 3-1: config 0 descriptor??
[  151.885566][   T51] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  151.992648][ T7738] loop0: detected capacity change from 0 to 16
[  152.014176][ T7738] erofs (device loop0): unsupported chunk format ffff of nid 36
[  152.106188][   T51] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71
[  152.168034][   T51] usb 3-1: USB disconnect, device number 11
[  152.501203][ T7745] loop0: detected capacity change from 0 to 2048
[  152.545895][ T7745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.617120][   T33] audit: type=1800 audit(1755503995.355:18): pid=7745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.699" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=1436 res=0 errno=0
[  153.905503][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'.
[  153.908542][ T7759] netlink: 120 bytes leftover after parsing attributes in process `syz.1.705'.
[  153.928989][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'.
[  154.153305][ T7771] loop0: detected capacity change from 0 to 128
[  154.224568][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.712'.
[  154.396191][ T7779] input: syz1 as /devices/virtual/input/input8
[  154.669677][   T51] kernel write not supported for file /537/sched (pid: 51 comm: kworker/1:1)
[  154.801548][ T7797] loop1: detected capacity change from 0 to 4096
[  154.812835][ T7797] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  154.856014][ T7801] loop0: detected capacity change from 0 to 256
[  154.861833][ T7797] ntfs3(loop1): ino=19, mi_enum_attr
[  154.875684][ T7797] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  154.888298][ T7801] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x200c26b4, utbl_chksum : 0xe619d30d)
[  155.093069][ T7807] netlink: 'syz.1.729': attribute type 15 has an invalid length.
[  155.124386][ T7809] loop0: detected capacity change from 0 to 256
[  155.150999][ T7809] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  155.260293][ T7815] netlink: 104 bytes leftover after parsing attributes in process `syz.1.733'.
[  155.296667][ T7817] loop1: detected capacity change from 0 to 512
[  155.378540][ T7817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.382947][ T7817] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.447614][ T7824] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  155.470801][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.927905][ T7841] usb usb5: usbfs: process 7841 (syz.1.739) did not claim interface 0 before use
[  156.285654][ T7850] netlink: 'syz.0.746': attribute type 1 has an invalid length.
[  156.592711][   T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  156.762615][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.789253][   T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  156.810261][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.845146][   T24] usb 1-1: config 0 descriptor??
[  157.509656][   T24] lenovo 0003:17EF:6047.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0
[  157.661474][   T24] lenovo 0003:17EF:6047.0009: Failed to switch F7/9/11 mode: -71
[  157.684507][ T7859] loop2: detected capacity change from 0 to 16
[  157.696388][   T24] lenovo 0003:17EF:6047.0009: Failed to switch middle button: -71
[  157.735583][   T24] lenovo 0003:17EF:6047.0009: Fn-lock setting failed: -71
[  157.770301][   T24] lenovo 0003:17EF:6047.0009: Sensitivity setting failed: -71
[  157.847217][   T24] usb 1-1: USB disconnect, device number 16
[  158.290596][ T7859] erofs (device loop2): mounted with root inode @ nid 36.
[  158.393084][ T7861] loop0: detected capacity change from 0 to 512
[  158.449464][ T7861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.472029][ T7861] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.498105][ T7861] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present
[  158.503406][ T7861] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  158.506427][ T7861] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.752: Failed to acquire dquot type 0
[  158.514121][ T7861] EXT4-fs (loop0): Remounting filesystem read-only
[  158.594320][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.871483][   T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  158.878559][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'.
[  158.952500][ T7872] loop0: detected capacity change from 0 to 512
[  158.971918][ T7872] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  158.999916][ T7872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102]
[  159.012223][ T7872] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.755: corrupted in-inode xattr: e_value size too large
[  159.017393][ T7872] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.755: couldn't read orphan inode 15 (err -117)
[  159.032667][ T7872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.987284][   T24] usb 2-1: Using ep0 maxpacket: 32
[  160.680394][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.685823][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.689925][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  160.697552][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.704077][   T24] usb 2-1: config 0 descriptor??
[  160.714538][   T24] hub 2-1:0.0: USB hub found
[  160.931647][   T24] hub 2-1:0.0: 1 port detected
[  161.135466][   T24] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  161.148466][   T24] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  161.157112][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  161.159793][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  161.358340][   T24] usb 2-1: USB disconnect, device number 13
[  161.579312][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.693824][ T7886] netlink: 112 bytes leftover after parsing attributes in process `syz.0.759'.
[  161.698671][ T7886] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  161.937530][ T7898] loop1: detected capacity change from 0 to 8192
[  161.986596][ T7898]  loop1: AHDI p1 p2 p4
[  162.019894][   T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  162.023152][   T95] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  162.206007][ T7900] loop1: detected capacity change from 0 to 32768
[  162.219982][   T24] usb 3-1: Using ep0 maxpacket: 32
[  162.225987][   T95] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.232571][   T24] usb 3-1: config 0 has an invalid interface number: 126 but max is 0
[  162.239923][   T95] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  162.243084][   T24] usb 3-1: config 0 has no interface number 0
[  162.246624][   T24] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  162.250321][   T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.254862][ T7900] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  162.259667][   T24] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  162.263515][   T95] usb 1-1: config 0 descriptor??
[  162.277197][   T24] usb 3-1: config 0 interface 126 has no altsetting 0
[  162.289262][   T24] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  162.295285][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.297985][   T24] usb 3-1: Product: syz
[  162.299475][   T24] usb 3-1: Manufacturer: syz
[  162.301525][   T24] usb 3-1: SerialNumber: syz
[  162.310186][   T24] usb 3-1: config 0 descriptor??
[  162.314211][ T7888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  162.317580][ T7888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  162.345171][ T7900] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2048 but claims that 39166 are free
[  162.354894][ T7900] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  162.362366][ T7900] OCFS2: File system is now read-only.
[  162.364580][ T7900] (syz.1.767,7900,1):ocfs2_search_chain:1817 ERROR: status = -30
[  162.367335][ T7900] (syz.1.767,7900,1):ocfs2_search_chain:1940 ERROR: status = -30
[  162.371993][ T7900] (syz.1.767,7900,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  162.375774][ T7900] (syz.1.767,7900,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  162.378676][ T7900] (syz.1.767,7900,1):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  162.385970][ T7900] (syz.1.767,7900,1):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  162.388719][ T7900] (syz.1.767,7900,1):ocfs2_mknod_locked:641 ERROR: status = -30
[  162.391908][ T7900] (syz.1.767,7900,1):ocfs2_mknod:388 ERROR: status = -30
[  162.395242][ T7900] (syz.1.767,7900,1):ocfs2_mknod:505 ERROR: status = -30
[  162.398556][ T7900] (syz.1.767,7900,1):ocfs2_create:678 ERROR: status = -30
[  162.442186][ T5851] ocfs2: Unmounting device (7,1) on (node local)
[  162.562233][   T24] ir_usb 3-1:0.126: IR Dongle converter detected
[  162.572249][   T24] usb 3-1: IRDA class descriptor not found, device not bound
[  162.603996][   T24] usb 3-1: USB disconnect, device number 12
[  162.736478][   T95] itetech 0003:258A:6A88.000A: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.0-1/input0
[  162.906934][ T7904] loop1: detected capacity change from 0 to 40427
[  162.914278][ T7904] F2FS-fs (loop1): invalid crc value
[  162.922890][   T24] usb 1-1: USB disconnect, device number 17
[  162.976894][ T7904] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  162.980257][ T7904] F2FS-fs (loop1): Start checkpoint disabled!
[  162.984333][ T7904] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  163.023409][   T52] kworker/u10:2: attempt to access beyond end of device
[  163.023409][   T52] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  163.029135][   T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u10:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  163.029146][   T52] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.029150][   T52] Workqueue: writeback wb_workfn (flush-7:1)
[  163.029165][   T52] Call Trace:
[  163.029169][   T52]  <TASK>
[  163.029172][   T52]  dump_stack_lvl+0x189/0x250
[  163.029185][   T52]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.029193][   T52]  ? __pfx_queue_work_on+0x10/0x10
[  163.029201][   T52]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  163.029210][   T52]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.029224][   T52]  f2fs_handle_critical_error+0x37c/0x540
[  163.029257][   T52]  f2fs_write_end_io+0x886/0xb60
[  163.029273][   T52]  __submit_merged_bio+0x27a/0x6a0
[  163.029286][   T52]  __submit_merged_write_cond+0x255/0x530
[  163.029298][   T52]  f2fs_write_data_pages+0x261d/0x3000
[  163.029323][   T52]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.029339][   T52]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  163.029363][   T52]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  163.029372][   T52]  ? look_up_lock_class+0x74/0x170
[  163.029386][   T52]  ? trace_f2fs_writepages+0x7f/0x200
[  163.029408][   T52]  ? f2fs_write_node_pages+0x478/0x6e0
[  163.029420][   T52]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  163.029435][   T52]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.029446][   T52]  do_writepages+0x32e/0x550
[  163.029458][   T52]  ? reacquire_held_locks+0x127/0x1d0
[  163.029465][   T52]  ? writeback_sb_inodes+0x384/0x1010
[  163.029478][   T52]  __writeback_single_inode+0x145/0xff0
[  163.029486][   T52]  ? do_raw_spin_unlock+0x4d/0x240
[  163.029497][   T52]  writeback_sb_inodes+0x6c7/0x1010
[  163.029517][   T52]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  163.029545][   T52]  ? rcu_is_watching+0x15/0xb0
[  163.029557][   T52]  wb_writeback+0x43b/0xaf0
[  163.029569][   T52]  ? queue_io+0x3c1/0x590
[  163.029579][   T52]  ? __pfx_wb_writeback+0x10/0x10
[  163.029591][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.029602][   T52]  wb_workfn+0x409/0xef0
[  163.029616][   T52]  ? __pfx_wb_workfn+0x10/0x10
[  163.029626][   T52]  ? __lock_acquire+0xab9/0xd20
[  163.029640][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  163.029652][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.029659][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  163.029665][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  163.029672][   T52]  process_scheduled_works+0xae1/0x17b0
[  163.029693][   T52]  ? __pfx_process_scheduled_works+0x10/0x10
[  163.029708][   T52]  worker_thread+0x8a0/0xda0
[  163.029722][   T52]  ? __kthread_parkme+0x7b/0x200
[  163.029735][   T52]  kthread+0x711/0x8a0
[  163.029745][   T52]  ? __pfx_worker_thread+0x10/0x10
[  163.029751][   T52]  ? __pfx_kthread+0x10/0x10
[  163.029760][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.029768][   T52]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.029775][   T52]  ? __pfx_kthread+0x10/0x10
[  163.029783][   T52]  ret_from_fork+0x3fc/0x770
[  163.029793][   T52]  ? __pfx_ret_from_fork+0x10/0x10
[  163.029803][   T52]  ? __switch_to_asm+0x39/0x70
[  163.029810][   T52]  ? __switch_to_asm+0x33/0x70
[  163.029818][   T52]  ? __pfx_kthread+0x10/0x10
[  163.029826][   T52]  ret_from_fork_asm+0x1a/0x30
[  163.029842][   T52]  </TASK>
[  163.186686][   T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  163.449185][   T95] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  163.640444][   T95] usb 3-1: Using ep0 maxpacket: 16
[  163.646083][   T95] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  163.650528][   T95] usb 3-1: config 0 has no interface number 0
[  163.652987][   T95] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.657244][   T95] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.662118][   T95] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  163.665534][   T95] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.679456][   T95] usb 3-1: config 0 descriptor??
[  164.325815][   T95] uclogic 0003:28BD:0071.000B: pen parameters not found
[  164.338965][   T95] uclogic 0003:28BD:0071.000B: interface is invalid, ignoring
[  164.353123][   T95] usb 3-1: USB disconnect, device number 13
[  164.806151][ T5857] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.979196][ T5857] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.095331][ T7928] loop1: detected capacity change from 0 to 512
[  165.106377][ T5857] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.119276][ T7928] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  165.137937][ T7928] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  165.157426][ T7928] System zones: 1-12
[  165.159507][ T7928] EXT4-fs (loop1): orphan cleanup on readonly fs
[  165.268512][ T7928] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.779: invalid indirect mapped block 12 (level 1)
[  165.281156][ T7928] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.779: invalid indirect mapped block 2 (level 2)
[  165.292203][ T7928] EXT4-fs (loop1): 1 truncate cleaned up
[  165.309283][ T7928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  165.379619][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  165.572783][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  165.577474][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  165.583834][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  165.588582][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  165.591697][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  165.844089][ T7945] loop2: detected capacity change from 0 to 1024
[  165.868895][ T7945] EXT4-fs: Ignoring removed bh option
[  165.870985][ T7945] EXT4-fs: inline encryption not supported
[  165.911375][ T7945] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  165.959178][ T7945] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.787: lblock 2 mapped to illegal pblock 2 (length 1)
[  165.975870][ T7945] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  165.982174][ T5857] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.991277][ T7945] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.787: lblock 0 mapped to illegal pblock 48 (length 1)
[  166.019270][ T7945] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  166.022783][ T7945] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.787: Failed to acquire dquot type 0
[  166.054948][ T7945] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  166.082115][ T7945] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.787: mark_inode_dirty error
[  166.091999][ T7945] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  166.095949][ T7945] EXT4-fs (loop2): 1 orphan inode deleted
[  166.124053][ T7945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.129527][   T27] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  166.174441][   T27] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  166.190501][   T27] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u10:0: Failed to release dquot type 0
[  166.197623][ T7945] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.787: Invalid inode table block 1 in block_group 0
[  166.232331][ T7945] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  166.326778][ T5857] bridge_slave_1: left allmulticast mode
[  166.338625][ T5857] bridge_slave_1: left promiscuous mode
[  166.349937][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.374634][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.380439][ T5857] bridge_slave_0: left allmulticast mode
[  166.382694][ T5857] bridge_slave_0: left promiscuous mode
[  166.385112][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.413651][   T27] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  166.420633][   T27] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  166.423405][   T27] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u10:0: Failed to release dquot type 0
[  166.439127][ T5842] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  166.450740][ T5842] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  166.469957][ T5842] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  166.757720][   T51] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  166.921484][   T51] usb 3-1: Using ep0 maxpacket: 8
[  166.928822][   T51] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  166.932765][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.936031][   T51] usb 3-1: Product: syz
[  166.942395][   T51] usb 3-1: Manufacturer: syz
[  166.944566][   T51] usb 3-1: SerialNumber: syz
[  166.963038][   T51] usb 3-1: config 0 descriptor??
[  166.986904][   T51] usb 3-1: selecting invalid altsetting 3
[  166.991225][   T51] comedi comedi5: could not set alternate setting 3 in high speed
[  166.999616][   T51] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device.
[  167.005235][   T51] usbdux 3-1:0.0: probe with driver usbdux failed with error -22
[  167.085507][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  167.093757][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.099683][ T5857] bond0 (unregistering): Released all slaves
[  167.165592][ T5857] : left promiscuous mode
[  167.176781][   T24] usb 3-1: USB disconnect, device number 14
[  167.340200][   T51] IPVS: starting estimator thread 0...
[  167.438943][ T7984] IPVS: using max 81 ests per chain, 194400 per kthread
[  167.453044][ T7988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.801'.
[  167.628902][   T54] Bluetooth: hci1: command tx timeout
[  167.740732][ T7934] chnl_net:caif_netlink_parms(): no params data found
[  168.009957][ T7995] loop1: detected capacity change from 0 to 32768
[  168.017114][ T7995] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.803 (7995)
[  168.068089][ T7995] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.078824][ T7995] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  168.094927][ T7995] BTRFS info (device loop1): using free-space-tree
[  168.392478][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.394849][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.421332][ T7934] bridge_slave_0: entered allmulticast mode
[  168.442827][ T7934] bridge_slave_0: entered promiscuous mode
[  168.459631][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.462061][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.464486][ T7934] bridge_slave_1: entered allmulticast mode
[  168.475951][ T5851] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.506544][ T7934] bridge_slave_1: entered promiscuous mode
[  168.602991][ T8033] loop1: detected capacity change from 0 to 512
[  168.618116][ T8033] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  168.722879][ T8033] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  168.760288][ T8033] EXT4-fs (loop1): 1 truncate cleaned up
[  168.763897][ T8033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.825957][ T7934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.864451][ T7934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.917852][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.933188][ T5857] hsr_slave_0: left promiscuous mode
[  168.949667][ T5857] hsr_slave_1: left promiscuous mode
[  168.953616][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.956182][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.995814][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.999256][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.063787][ T5857] veth1_macvtap: left promiscuous mode
[  169.082625][ T5857] veth0_macvtap: left promiscuous mode
[  169.084544][ T5857] veth1_vlan: left promiscuous mode
[  169.114652][ T5857] veth0_vlan: left promiscuous mode
[  169.128223][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'.
[  169.288497][ T8037] loop2: detected capacity change from 0 to 40427
[  169.309619][ T8037] F2FS-fs (loop2): invalid crc value
[  169.373536][ T8037] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  169.379426][ T8037] F2FS-fs (loop2): Start checkpoint disabled!
[  169.382482][ T8037] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  169.480209][   T36] kworker/u10:1: attempt to access beyond end of device
[  169.480209][   T36] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  169.494562][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  169.494575][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.494580][   T36] Workqueue: writeback wb_workfn (flush-7:2)
[  169.494593][   T36] Call Trace:
[  169.494597][   T36]  <TASK>
[  169.494600][   T36]  dump_stack_lvl+0x189/0x250
[  169.494612][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.494620][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  169.494627][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  169.494636][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  169.494650][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  169.494663][   T36]  f2fs_write_end_io+0x886/0xb60
[  169.494678][   T36]  __submit_merged_bio+0x27a/0x6a0
[  169.494687][   T36]  ? up_write+0x1c4/0x420
[  169.494697][   T36]  __submit_merged_write_cond+0x44c/0x530
[  169.494709][   T36]  f2fs_sync_node_pages+0x1479/0x15e0
[  169.494727][   T36]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  169.494735][   T36]  ? __percpu_counter_sum+0x1c2/0x1e0
[  169.494756][   T36]  ? do_raw_spin_lock+0x121/0x290
[  169.494765][   T36]  ? rcu_is_watching+0x15/0xb0
[  169.494772][   T36]  ? blk_start_plug+0x52/0x1b0
[  169.494784][   T36]  f2fs_write_node_pages+0x303/0x6e0
[  169.494795][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  169.494810][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  169.494819][   T36]  do_writepages+0x32e/0x550
[  169.494831][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  169.494838][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  169.494850][   T36]  __writeback_single_inode+0x145/0xff0
[  169.494858][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  169.494868][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  169.494889][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  169.494916][   T36]  ? rcu_is_watching+0x15/0xb0
[  169.494927][   T36]  wb_writeback+0x43b/0xaf0
[  169.494939][   T36]  ? queue_io+0x3c1/0x590
[  169.494949][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  169.494961][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  169.494971][   T36]  wb_workfn+0x409/0xef0
[  169.494985][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  169.495019][   T36]  ? __lock_acquire+0xab9/0xd20
[  169.495034][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  169.495044][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  169.495051][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  169.495057][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  169.495065][   T36]  process_scheduled_works+0xae1/0x17b0
[  169.495085][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  169.495100][   T36]  worker_thread+0x8a0/0xda0
[  169.495119][   T36]  kthread+0x711/0x8a0
[  169.495129][   T36]  ? __pfx_worker_thread+0x10/0x10
[  169.495135][   T36]  ? __pfx_kthread+0x10/0x10
[  169.495144][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  169.495152][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.495159][   T36]  ? __pfx_kthread+0x10/0x10
[  169.495168][   T36]  ret_from_fork+0x3fc/0x770
[  169.495177][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  169.495187][   T36]  ? __switch_to_asm+0x39/0x70
[  169.495195][   T36]  ? __switch_to_asm+0x33/0x70
[  169.495202][   T36]  ? __pfx_kthread+0x10/0x10
[  169.495210][   T36]  ret_from_fork_asm+0x1a/0x30
[  169.495226][   T36]  </TASK>
[  169.495229][   T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  169.643622][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  169.643634][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.643639][   T36] Workqueue: writeback wb_workfn (flush-7:2)
[  169.643653][   T36] Call Trace:
[  169.643656][   T36]  <TASK>
[  169.643660][   T36]  dump_stack_lvl+0x189/0x250
[  169.643672][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.643680][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  169.643687][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  169.643696][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  169.643710][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  169.643723][   T36]  f2fs_write_end_io+0x886/0xb60
[  169.643738][   T36]  __submit_merged_bio+0x27a/0x6a0
[  169.643746][   T36]  ? up_write+0x1c4/0x420
[  169.643756][   T36]  __submit_merged_write_cond+0x44c/0x530
[  169.643768][   T36]  f2fs_sync_node_pages+0x1479/0x15e0
[  169.643786][   T36]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  169.643794][   T36]  ? __percpu_counter_sum+0x1c2/0x1e0
[  169.643816][   T36]  ? do_raw_spin_lock+0x121/0x290
[  169.643824][   T36]  ? rcu_is_watching+0x15/0xb0
[  169.643832][   T36]  ? blk_start_plug+0x52/0x1b0
[  169.643843][   T36]  f2fs_write_node_pages+0x303/0x6e0
[  169.643854][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  169.643869][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  169.643878][   T36]  do_writepages+0x32e/0x550
[  169.643889][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  169.643896][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  169.643908][   T36]  __writeback_single_inode+0x145/0xff0
[  169.643916][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  169.643926][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  169.643946][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  169.643974][   T36]  ? rcu_is_watching+0x15/0xb0
[  169.643984][   T36]  wb_writeback+0x43b/0xaf0
[  169.644022][   T36]  ? queue_io+0x3c1/0x590
[  169.644032][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  169.644044][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  169.644054][   T36]  wb_workfn+0x409/0xef0
[  169.644069][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  169.644078][   T36]  ? __lock_acquire+0xab9/0xd20
[  169.644092][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  169.644102][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  169.644109][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  169.644115][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  169.644122][   T36]  process_scheduled_works+0xae1/0x17b0
[  169.644143][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  169.644158][   T36]  worker_thread+0x8a0/0xda0
[  169.644177][   T36]  kthread+0x711/0x8a0
[  169.644187][   T36]  ? __pfx_worker_thread+0x10/0x10
[  169.644193][   T36]  ? __pfx_kthread+0x10/0x10
[  169.644203][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  169.644210][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.644218][   T36]  ? __pfx_kthread+0x10/0x10
[  169.644226][   T36]  ret_from_fork+0x3fc/0x770
[  169.644235][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  169.644245][   T36]  ? __switch_to_asm+0x39/0x70
[  169.644253][   T36]  ? __switch_to_asm+0x33/0x70
[  169.644260][   T36]  ? __pfx_kthread+0x10/0x10
[  169.644268][   T36]  ret_from_fork_asm+0x1a/0x30
[  169.644284][   T36]  </TASK>
[  169.644287][   T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  169.789904][   T54] Bluetooth: hci1: command tx timeout
[  169.816432][   T51] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  169.966162][   T51] usb 2-1: Using ep0 maxpacket: 32
[  169.975462][   T51] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  169.984981][   T51] usb 2-1: config 0 has no interface number 0
[  169.988348][   T51] usb 2-1: config 0 interface 184 has no altsetting 0
[  169.995016][   T51] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  170.003026][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.006312][   T51] usb 2-1: Product: syz
[  170.011591][   T51] usb 2-1: Manufacturer: syz
[  170.013336][   T51] usb 2-1: SerialNumber: syz
[  170.022547][   T51] usb 2-1: config 0 descriptor??
[  170.031247][   T51] smsc75xx v1.0.0
[  170.163880][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  170.204145][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  170.657531][   T51] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  170.661592][   T51] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  170.814960][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.815'.
[  170.833712][ T7934] team0: Port device team_slave_0 added
[  170.846735][ T7934] team0: Port device team_slave_1 added
[  170.972737][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.975154][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.006050][ T7934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.026569][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.038819][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.060427][ T7934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.112234][   T51] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  171.128916][   T51] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  171.132954][   T51] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  171.149258][   T51] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  171.179029][   T51] usb 2-1: USB disconnect, device number 14
[  171.223931][ T7934] hsr_slave_0: entered promiscuous mode
[  171.231871][ T7934] hsr_slave_1: entered promiscuous mode
[  171.234082][ T7934] debugfs: 'hsr0' already exists in 'hsr'
[  171.236699][ T7934] Cannot create hsr debugfs directory
[  171.433246][ T7934] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  171.469303][ T7934] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  171.480104][ T7934] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  171.490908][ T7934] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  171.702761][ T7934] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.736314][ T7934] 8021q: adding VLAN 0 to HW filter on device team0
[  171.755633][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.758102][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.774940][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.777421][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.875681][   T54] Bluetooth: hci1: command tx timeout
[  172.133345][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'.
[  172.142945][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'.
[  172.179632][ T7934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.204725][ T8090] netlink: 'syz.1.822': attribute type 30 has an invalid length.
[  172.246432][ T7934] veth0_vlan: entered promiscuous mode
[  172.268706][ T7934] veth1_vlan: entered promiscuous mode
[  172.311937][ T7934] veth0_macvtap: entered promiscuous mode
[  172.343917][ T7934] veth1_macvtap: entered promiscuous mode
[  172.375197][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.397331][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.419719][ T5906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.441406][ T5906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.444335][ T5906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.469809][ T5906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.888788][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.891424][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.991571][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.996618][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.287997][ T8123] loop2: detected capacity change from 0 to 256
[  173.291401][ T8123] exfat: Deprecated parameter 'namecase'
[  173.293845][ T8123] exfat: Deprecated parameter 'utf8'
[  173.351796][ T8123] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  173.404784][ T8123] overlay: filesystem on ./file0 not supported
[  173.472383][ T8126] loop3: detected capacity change from 0 to 4096
[  173.575109][   T33] audit: type=1400 audit(1755504016.316:19): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8129 comm="syz.2.833"
[  173.609923][ T8126] ntfs3(loop3): ino=1a, mi_enum_attr
[  173.746736][ T8133] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.834'.
[  173.765832][ T8114] loop1: detected capacity change from 0 to 32768
[  173.827581][ T8114] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt
[  173.827581][ T8114] 
[  173.860248][ T8114] xtLookup: xtSearch returned -5
[  173.862514][ T8114] read_mapping_page failed!
[  173.891333][ T8114] jfs_mount: diMount(ipaimap) failed w/rc = -5
[  173.915821][ T8114] Mount JFS Failure: -5
[  173.917711][ T8114] jfs_mount failed w/return code = -5
[  173.954267][   T54] Bluetooth: hci1: command tx timeout
[  174.803124][ T8150] loop1: detected capacity change from 0 to 1024
[  174.838322][ T8150] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  174.857897][ T8150] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  174.937771][ T8150] EXT4-fs (loop1): orphan cleanup on readonly fs
[  174.941930][ T8150] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.839: Freeing blocks not in datazone - block = 0, count = 4096
[  174.998207][ T8150] EXT4-fs (loop1): 1 orphan inode deleted
[  175.008103][ T8150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  175.019143][ T8146] loop2: detected capacity change from 0 to 40427
[  175.039305][ T8146] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  175.042418][ T8146] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  175.104366][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.150081][ T8146] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  175.162847][ T8142] loop3: detected capacity change from 0 to 40427
[  175.181528][ T8146] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  175.191744][ T8146] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  175.203213][ T8142] F2FS-fs (loop3): Image doesn't support compression
[  175.214785][ T8142] F2FS-fs (loop3): LFS is not compatible with ATGC
[  175.759150][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'.
[  176.883785][ T8184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.847'.
[  176.905243][ T8184] netlink: 'syz.1.847': attribute type 1 has an invalid length.
[  176.925648][ T8184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.847'.
[  177.211748][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'.
[  178.604925][ T8212] loop2: detected capacity change from 0 to 8
[  178.622863][ T8212] SQUASHFS error: zlib decompression failed, data probably corrupt
[  178.639360][ T8212] SQUASHFS error: Failed to read block 0x9b: -5
[  178.659075][ T8212] SQUASHFS error: Unable to read metadata cache entry [99]
[  178.674062][ T8212] SQUASHFS error: Unable to read inode 0x127
[  178.687624][ T8216] loop3: detected capacity change from 0 to 256
[  178.706159][ T8216] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  178.724669][ T8216] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  178.755460][ T8216] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  178.784448][   T33] audit: type=1800 audit(1755504021.528:20): pid=8216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.858" name="file1" dev="loop3" ino=1048620 res=0 errno=0
[  179.518354][ T8226] loop3: detected capacity change from 0 to 32768
[  179.572698][ T8226] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  179.679859][ T7934] ocfs2: Unmounting device (7,3) on (node local)
[  180.271700][ T8235] loop3: detected capacity change from 0 to 32768
[  180.289437][ T8235] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  180.316844][ T8235] XFS (loop3): Ending clean mount
[  180.361473][   T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  180.366347][ T7934] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  180.520125][   T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  180.524372][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.528337][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  180.551807][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.567171][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.577271][   T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  180.580278][   T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  180.592253][ T5850] Bluetooth: hci0: command 0x0406 tx timeout
[  180.594118][ T5844] Bluetooth: hci2: command 0x0406 tx timeout
[  180.595663][   T24] usb 3-1: Product: syz
[  180.598662][   T24] usb 3-1: Manufacturer: syz
[  180.635289][   T24] cdc_wdm 3-1:1.0: skipping garbage
[  180.637061][   T24] cdc_wdm 3-1:1.0: skipping garbage
[  180.648330][   T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  180.660660][   T24] cdc_wdm 3-1:1.0: Unknown control protocol
[  180.918696][ T8241] cdc_wdm 3-1:1.0: Error submitting int urb - -90
[  180.937864][   T51] usb 3-1: USB disconnect, device number 15
[  181.120269][ T5892] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  181.270259][ T5892] usb 4-1: Using ep0 maxpacket: 16
[  181.285628][ T5892] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  181.288797][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.294587][ T5892] usb 4-1: config 0 has no interface number 0
[  181.302181][ T5892] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  181.305681][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.313719][ T5892] usb 4-1: Product: syz
[  181.315399][ T5892] usb 4-1: Manufacturer: syz
[  181.317219][ T5892] usb 4-1: SerialNumber: syz
[  181.324206][ T5892] usb 4-1: config 0 descriptor??
[  181.488604][ T8273] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4)
[  181.500971][ T8273] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  181.503474][ T8273] comedi comedi3: 8255: I/O port conflict (0x100000,4)
[  181.507508][ T8273] comedi comedi3: 8255: I/O port conflict (0x8f,4)
[  181.510294][ T8273] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  181.515971][ T8273] comedi comedi3: 8255: I/O port conflict (0x100010,4)
[  181.518895][ T8273] comedi comedi3: 8255: I/O port conflict (0x1000002,4)
[  181.522061][ T8273] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffbf,4)
[  181.527490][ T8273] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  181.531184][ T8273] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  181.534059][ T8273] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  181.536868][ T8273] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  181.537311][ T5892] usb 4-1: USB disconnect, device number 2
[  181.539877][ T8273] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  181.560351][ T8273] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  181.563263][ T8273] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  181.566102][ T8273] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  181.569144][ T8273] comedi comedi3: 8255: I/O port conflict (0x100,4)
[  181.573938][ T8273] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  181.576180][ T8273] comedi comedi3: 8255: I/O port conflict (0x80,4)
[  181.578633][ T8273] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  181.581475][ T8273] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  181.583898][ T8273] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  181.586386][ T8273] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  181.588584][ T8273] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  182.532254][ T8296] loop2: detected capacity change from 0 to 256
[  182.556117][ T8296] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d)
[  182.636154][ T8298] loop3: detected capacity change from 0 to 1024
[  182.715671][ T8298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.742368][ T7934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.891892][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'.
[  182.894870][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'.
[  183.058594][ T8321] loop2: detected capacity change from 0 to 256
[  183.171370][ T8319] loop3: detected capacity change from 0 to 32768
[  183.185664][ T8319] bcachefs (/dev/loop3): error validating superblock: Filesystem has incompatible feature bit 35, highest supported small_image (22)
[  183.190224][ T8319] bcachefs: bch2_fs_get_tree() error: invalid_sb_features
[  183.439249][ T5892] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  183.468328][ T8327] loop3: detected capacity change from 0 to 32768
[  183.480819][   T33] audit: type=1800 audit(1755504026.231:21): pid=8327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.894" name="file1" dev="loop3" ino=4 res=0 errno=0
[  183.498732][ T8327] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[  183.498732][ T8327] 
[  183.591699][ T5892] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  183.594880][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.599420][ T5892] usb 3-1: config 0 descriptor??
[  183.843811][ T5892] kaweth 3-1:0.0: Firmware present in device.
[  184.019604][ T5892] kaweth 3-1:0.0: Statistics collection: 0
[  184.022161][ T5892] kaweth 3-1:0.0: Multicast filter limit: 0
[  184.034996][ T5892] kaweth 3-1:0.0: MTU: 0
[  184.036807][ T5892] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00
[  184.358811][   T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  184.541558][   T24] usb 4-1: config 5 has an invalid interface number: 123 but max is 0
[  184.551775][   T24] usb 4-1: config 5 has no interface number 0
[  184.581034][   T24] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0x6B, changing to 0xB
[  184.595316][   T24] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  184.602290][   T24] usb 4-1: config 5 interface 123 has no altsetting 0
[  184.607679][   T24] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  184.607980][ T5892] kaweth 3-1:0.0: Error setting SOFS wait
[  184.612754][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.614377][ T5892] kaweth 3-1:0.0: probe with driver kaweth failed with error -5
[  184.617539][   T24] usb 4-1: Product: syz
[  184.617554][   T24] usb 4-1: Manufacturer: syz
[  184.617565][   T24] usb 4-1: SerialNumber: syz
[  184.630404][ T5892] usb 3-1: USB disconnect, device number 16
[  184.910164][   T24] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device.
[  184.932928][   T24] usb 4-1: USB disconnect, device number 3
[  184.938190][ T8368] syz_tun: entered allmulticast mode
[  185.165135][ T8378] netlink: 256 bytes leftover after parsing attributes in process `syz.2.911'.
[  185.277188][ T8380] loop2: detected capacity change from 0 to 4096
[  185.289412][ T8380] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  186.261463][ T8399] loop1: detected capacity change from 0 to 40427
[  186.272318][ T8399] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  186.275977][ T8399] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  186.280495][ T8399] F2FS-fs (loop1): build fault injection type: 0x6
[  186.291697][ T8399] F2FS-fs (loop1): invalid crc value
[  186.376686][ T8399] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  186.380978][ T8399] F2FS-fs (loop1): Start checkpoint disabled!
[  186.386448][ T8399] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  186.391502][ T8399] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  186.469789][   T52] kworker/u10:2: attempt to access beyond end of device
[  186.469789][   T52] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  186.474472][   T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u10:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  186.474499][   T52] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  186.474504][   T52] Workqueue: writeback wb_workfn (flush-7:1)
[  186.474521][   T52] Call Trace:
[  186.474525][   T52]  <TASK>
[  186.474529][   T52]  dump_stack_lvl+0x189/0x250
[  186.474541][   T52]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.474550][   T52]  ? __pfx_queue_work_on+0x10/0x10
[  186.474557][   T52]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  186.474566][   T52]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  186.474580][   T52]  f2fs_handle_critical_error+0x37c/0x540
[  186.474593][   T52]  f2fs_write_end_io+0x886/0xb60
[  186.474608][   T52]  __submit_merged_bio+0x27a/0x6a0
[  186.474620][   T52]  __submit_merged_write_cond+0x255/0x530
[  186.474633][   T52]  f2fs_write_data_pages+0x261d/0x3000
[  186.474658][   T52]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  186.474674][   T52]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  186.474697][   T52]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  186.474712][   T52]  ? trace_f2fs_writepages+0x7f/0x200
[  186.474722][   T52]  ? f2fs_write_node_pages+0x478/0x6e0
[  186.474742][   T52]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  186.474751][   T52]  do_writepages+0x32e/0x550
[  186.474763][   T52]  ? reacquire_held_locks+0x127/0x1d0
[  186.474770][   T52]  ? writeback_sb_inodes+0x384/0x1010
[  186.474783][   T52]  __writeback_single_inode+0x145/0xff0
[  186.474792][   T52]  ? do_raw_spin_unlock+0x4d/0x240
[  186.474802][   T52]  writeback_sb_inodes+0x6c7/0x1010
[  186.474809][   T52]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.474830][   T52]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  186.474857][   T52]  ? rcu_is_watching+0x15/0xb0
[  186.474869][   T52]  wb_writeback+0x43b/0xaf0
[  186.474881][   T52]  ? queue_io+0x3c1/0x590
[  186.474911][   T52]  ? __pfx_wb_writeback+0x10/0x10
[  186.474925][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  186.474936][   T52]  wb_workfn+0x409/0xef0
[  186.474950][   T52]  ? __pfx_wb_workfn+0x10/0x10
[  186.474960][   T52]  ? __lock_acquire+0xab9/0xd20
[  186.474974][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  186.474984][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  186.474991][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  186.474997][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  186.475005][   T52]  process_scheduled_works+0xae1/0x17b0
[  186.475025][   T52]  ? __pfx_process_scheduled_works+0x10/0x10
[  186.475041][   T52]  worker_thread+0x8a0/0xda0
[  186.475054][   T52]  ? __kthread_parkme+0x7b/0x200
[  186.475066][   T52]  kthread+0x711/0x8a0
[  186.475076][   T52]  ? __pfx_worker_thread+0x10/0x10
[  186.475082][   T52]  ? __pfx_kthread+0x10/0x10
[  186.475092][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  186.475099][   T52]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.475107][   T52]  ? __pfx_kthread+0x10/0x10
[  186.475119][   T52]  ret_from_fork+0x3fc/0x770
[  186.475128][   T52]  ? __pfx_ret_from_fork+0x10/0x10
[  186.475138][   T52]  ? __switch_to_asm+0x39/0x70
[  186.475146][   T52]  ? __switch_to_asm+0x33/0x70
[  186.475153][   T52]  ? __pfx_kthread+0x10/0x10
[  186.475161][   T52]  ret_from_fork_asm+0x1a/0x30
[  186.475179][   T52]  </TASK>
[  186.481211][   T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  186.497672][ T5975] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  186.794432][ T5975] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  186.803737][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.811017][ T5975] usb 4-1: Product: syz
[  186.812865][ T5975] usb 4-1: Manufacturer: syz
[  186.814696][ T5975] usb 4-1: SerialNumber: syz
[  186.846356][ T5975] usb 4-1: config 0 descriptor??
[  186.872518][ T5975] gspca_main: sq930x-2.14.0 probing 2770:930c
[  186.924635][ T8425] tmpfs: Bad value for 'mpol'
[  186.981045][ T8428] netlink: 'syz.2.930': attribute type 20 has an invalid length.
[  186.981996][ T8427] netlink: 48 bytes leftover after parsing attributes in process `syz.1.931'.
[  187.812525][ T5975] gspca_sq930x: ucbus_write failed -71
[  187.814807][ T5975] sq930x 4-1:0.0: probe with driver sq930x failed with error -71
[  187.839174][ T5975] usb 4-1: USB disconnect, device number 4
[  189.234370][ T8496] overlay: Unknown parameter '\'
[  189.539984][ T5892] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  189.674132][ T8517] 
[  189.687653][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  189.693016][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.701003][ T5892] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00
[  189.704169][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.709747][ T5892] usb 2-1: config 0 descriptor??
[  190.147364][ T5892] hid-generic 0003:04F3:0754.000C: failed to start in urb: -90
[  190.155193][ T8528] 
[  190.156668][ T8528] =============================
[  190.158644][ T8528] WARNING: suspicious RCU usage
[  190.160564][ T8528] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  190.165195][ T8528] -----------------------------
[  190.167196][ T8528] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage!
[  190.169343][ T5892] hid-generic 0003:04F3:0754.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.1-1/input0
[  190.170464][ T8528] 
[  190.170464][ T8528] other info that might help us debug this:
[  190.170464][ T8528] 
[  190.179548][ T8528] 
[  190.179548][ T8528] rcu_scheduler_active = 2, debug_locks = 1
[  190.182611][ T8528] 1 lock held by syz.2.961/8528:
[  190.184555][ T8528]  #0: ffffffff8e13a0c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[  190.188618][ T8528] 
[  190.188618][ T8528] stack backtrace:
[  190.190988][ T8528] CPU: 1 UID: 0 PID: 8528 Comm: syz.2.961 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  190.191004][ T8528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.191011][ T8528] Call Trace:
[  190.191016][ T8528]  <TASK>
[  190.191021][ T8528]  dump_stack_lvl+0x189/0x250
[  190.191038][ T8528]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.191052][ T8528]  ? __pfx__printk+0x10/0x10
[  190.191077][ T8528]  lockdep_rcu_suspicious+0x140/0x1d0
[  190.191091][ T8528]  get_callchain_entry+0x2b6/0x3c0
[  190.191112][ T8528]  get_perf_callchain+0xa1/0x6b0
[  190.191128][ T8528]  ? rcu_read_lock_sched_held+0x89/0x100
[  190.191142][ T8528]  ? __pfx_get_perf_callchain+0x10/0x10
[  190.191162][ T8528]  ? preempt_schedule+0xae/0xc0
[  190.191177][ T8528]  __bpf_get_stack+0x3fc/0xa60
[  190.191200][ T8528]  ? __pfx___bpf_get_stack+0x10/0x10
[  190.191217][ T8528]  ? __lock_acquire+0xab9/0xd20
[  190.191237][ T8528]  bpf_get_stack+0x33/0x50
[  190.191251][ T8528]  ? bpf_prog_d43750871481577d+0x46/0x4e
[  190.191261][ T8528]  bpf_get_stack_raw_tp+0x1a9/0x220
[  190.191278][ T8528]  bpf_prog_d43750871481577d+0x46/0x4e
[  190.191289][ T8528]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[  190.191307][ T8528]  bpf_prog_test_run_syscall+0x312/0x4b0
[  190.191324][ T8528]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  190.191337][ T8528]  ? __fget_files+0x2a/0x420
[  190.191350][ T8528]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  190.191365][ T8528]  bpf_prog_test_run+0x2c7/0x340
[  190.191380][ T8528]  __sys_bpf+0x581/0x870
[  190.191395][ T8528]  ? __pfx___sys_bpf+0x10/0x10
[  190.191418][ T8528]  ? rcu_is_watching+0x15/0xb0
[  190.191433][ T8528]  __x64_sys_bpf+0x7c/0x90
[  190.191445][ T8528]  do_syscall_64+0xfa/0x3b0
[  190.191459][ T8528]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.191471][ T8528]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.191481][ T8528]  ? exc_page_fault+0x9f/0xf0
[  190.191495][ T8528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.191504][ T8528] RIP: 0033:0x7fceecb8ebe9
[  190.191520][ T8528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.191531][ T8528] RSP: 002b:00007fceed959038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  190.191541][ T8528] RAX: ffffffffffffffda RBX: 00007fceecdb5fa0 RCX: 00007fceecb8ebe9
[  190.191548][ T8528] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a
[  190.191555][ T8528] RBP: 00007fceecc11e19 R08: 0000000000000000 R09: 0000000000000000
[  190.191561][ T8528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.191567][ T8528] R13: 00007fceecdb6038 R14: 00007fceecdb5fa0 R15: 00007ffd48fbca68
[  190.191584][ T8528]  </TASK>
[  190.296174][    C1] vkms_vblank_simulate: vblank timer overrun
[  190.355456][ T5892] usb 2-1: USB disconnect, device number 15
[  193.860902][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.863727][ T1364] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
07:56:17  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff92000fceff8 RBX=ffffc90007e77ef0 RCX=ffff88801ff5d640 RDX=0000000000000000
RSI=000000000000013e RDI=ffffc90007e77fc0 RBP=ffffc90007e77ee0 RSP=ffffc90007e77de0
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=000000000000013e R13=dffffc0000000000 R14=1ffff92000fcefc0 R15=ffffc90007e77f58
RIP=ffffffff85522c01 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe445180380 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe445247321 CR3=0000000022d88000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=00000000ff000000 ff00000000000000
XMM02=0000000000000000 00ff0000ff000000 XMM03=0000000000000000 000000000042494c
XMM04=6362696c5f5f0045 5441564952505f43 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000cc2 RDI=0000000000000cc3 RBP=00000000000003f8 RSP=ffffc90007ad72b0
R8 =ffff8881082a8237 R9 =1ffff11021055046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9912 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fceed9596c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3b6887 CR3=000000011e5d4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fceecd87498 00007fceecd87470 XMM03=00007fceecd874a8 00007fceecd874a0
XMM04=00007fceed8ed100 00007fceecd87460 XMM05=00007fceecd87478 00007fceecd874c0
XMM06=00007fceecd874b8 00007fceecd874b0 XMM07=00007fceecd874a8 00007fceecd874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fceecc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
