last executing test programs:

12.167241807s ago: executing program 1 (id=557):
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000480)=ANY=[], 0xff, 0x5a02, &(0x7f000000bc00)="$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")
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
rmdir(&(0x7f0000000340)='./bus/file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0xf7)

11.350152934s ago: executing program 1 (id=561):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050c3000180ffffffffffff0d004a190006"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x403c0, 0x23)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x13, r3, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x2000)=nil, 0x6000)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r5)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r5, 0x550c, &(0x7f0000000080))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, 0x0, 0x0)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x88}}, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0)
r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000000)={'pcl711\x00', [0xcd, 0xe, 0x0, 0x9, 0x0, 0x101, 0x6623, 0x6, 0x8b, 0x0, 0xfffffffa, 0x8, 0xbfe, 0x4, 0x68, 0x4, 0x1, 0x5, 0x4, 0x8, 0x10, 0x4, 0x9, 0x200, 0x1, 0x4, 0x2, 0xc005, 0x57, 0x8008, 0x4]})
dup(r9)
open$dir(&(0x7f0000000000)='./file0\x00', 0x44480, 0x100)

7.577404159s ago: executing program 1 (id=570):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range(r0, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000002c0)={0x4, <r1=>r0, 'id1\x00'})
pwrite64(r1, &(0x7f0000000380)="53cbfa368f52caed22350def6830a8899b385ef08bf2399bc694ef2880600d7fd9196f2a08ebb11837739768a99f6aa5cab707eb9e3ba6b9a51b252349cac28e41df61be4388d9d6a6502f9c4d9825ccf67c05f6cb1e1621d23521e9952975d929bd8e3cb609287451e31061809490eed7d4000f549acf05afb00706b3884f1b44ce2cc37f42f06e6f606e3ce7da9179e2cd12deea3f28deda33ae66c9b10ae39b5fdb954559c06c526ac09ce388112a6707136bcab82fdc", 0xb8, 0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c005}, 0x814)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ffddc1ddcccdde75537d5326a4", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)={0x8c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x70, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x6821, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0x2}}, @void, @val={0x5, 0x4, {0x0, 0x37, 0x2, "ae"}}, @val={0x25, 0x3, {0x1, 0xa1, 0x9}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0xf34, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0xc1}}, @void}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000001280)={0x110, r6, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xdd7b, 0x1c}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x48}, {}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0xcc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7, 0x7}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x3}, {0x7, 0x7}, {0x3, 0x1}, {0x1, 0x6}, {0x5, 0x4}, {0x1, 0x5}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x9}, {0x3, 0x8}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x1}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x0, 0x1}, {0x6, 0x8}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x4, 0x4}, {0x0, 0x2}, {0x7, 0x9}, {0x6, 0x3}, {0x3, 0x7}, {0x4, 0x7}, {0x7, 0x1}, {0x3, 0x9}, {0x7, 0x3}, {0x3}, {0x4, 0x8}, {0x0, 0x1}, {0x6, 0x8}, {0x0, 0x2}, {0x7}, {0x1, 0xa}, {0x7, 0x2}, {0x1, 0x9}, {0x2, 0x7}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x1}, {0x4, 0x4}, {0x7}, {0x3, 0x4}, {0x4, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x3, 0x7}, {0x3}, {0x2, 0x2}, {0x4, 0x4}, {0x4, 0x3}, {0x7, 0x7}, {0x0, 0x7}, {0x0, 0x1}]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x4, 0x6}, {0x2}, {0x4, 0x6}, {0x0, 0x3}, {}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x4, 0x9}, {0x3}, {0x4, 0x9}, {0x1, 0x2}, {0x4, 0x4}, {0x6}, {0x0, 0x8}, {0x5, 0x6}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x7, 0x5}, {0x2, 0x9}, {0x7, 0x4}, {0x5, 0x5}, {0x4, 0x8}, {0x1, 0x7}, {0x2}, {0x3, 0x1}, {0x5, 0x9}, {0x4}, {0x1, 0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x1, 0x6}, {0x6, 0x3}, {0x3, 0x4}, {0x2, 0x8}, {0x4, 0x3}, {0x4, 0x4}, {0x3, 0x9}, {0x0, 0x5}, {0x7, 0x9}, {0x1}, {0x3, 0x3}, {0x2, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x3, 0xa}, {0x7, 0x6}, {0x4, 0x9}, {0x4, 0x4}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x12, 0x1, 0x2, 0x1, 0x12, 0x4, 0xc, 0x18, 0x30, 0x26, 0x5, 0x18, 0x3, 0x6, 0x18, 0xc, 0xc, 0x9, 0x36, 0x1, 0xb]}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x95}, 0x44040)

7.499768951s ago: executing program 1 (id=571):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = socket$phonet(0x23, 0x2, 0x1)
recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/25, 0x19}], 0x1, &(0x7f0000000280)=""/107, 0x6b}, 0x2}], 0x1, 0x40010020, &(0x7f0000000340))
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000300)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=")
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, {0x40000, 0x10000000}})
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x1a06496, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r1, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0xe4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
r9 = dup(r7)
write$UHID_INPUT(r9, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

7.284256985s ago: executing program 1 (id=572):
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000280)='./bus/file0\x00', 0x2816000, &(0x7f0000000480)=ANY=[], 0xff, 0x5a16, &(0x7f0000005480)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000240)=0x9f178645a6095adc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs$userns(r1, &(0x7f0000000000))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/140, 0x8c}, {0x0}], 0x2}, 0x10020)
syz_mount_image$msdos(&(0x7f0000000500), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f0000005440)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="4a4654aa3bb734d314", @ANYRES8, @ANYRESOCT], 0xb, 0x0, &(0x7f0000000000))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000000))

7.019558484s ago: executing program 1 (id=573):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a000000021000100000000020002805a8aba019275000000000000000000d0006401010200000000000000000000000000000000000000000a0000000000f700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a000200"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

6.98137801s ago: executing program 32 (id=573):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a000000021000100000000020002805a8aba019275000000000000000000d0006401010200000000000000000000000000000000000000000a0000000000f700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a000200"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

3.598160546s ago: executing program 0 (id=583):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = gettid()
mkdir(0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x3e8, @local}, 0x10, 0x0}, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0)

3.256869978s ago: executing program 0 (id=584):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400400, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x6004c890}, 0x240080f4)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x33)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40048c0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000e, 0x40010, 0xffffffffffffffff, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x6, 0x3ff)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800800, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=")
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x8)
fallocate(r4, 0x0, 0x0, 0x1000f4)
io_setup(0x7d, &(0x7f0000000600)=<r6=>0x0)
io_submit(r6, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="96", 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r4, 0x0, 0x0, 0xffffffffffffffff}])
socket$kcm(0x29, 0x4, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
r7 = userfaultfd(0x80801)
r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
recvmmsg(r8, &(0x7f0000000240)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, &(0x7f0000000140)}, 0xa4}], 0x1, 0x40011000, &(0x7f0000000280)={0x77359400})
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000340))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})

2.566608456s ago: executing program 3 (id=586):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000240)=0x2)
r2 = dup(r0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x651, 0xd}, 0x90)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)

2.356883013s ago: executing program 2 (id=587):
set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))

2.356180331s ago: executing program 2 (id=588):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000000)={0x7, 'geneve1\x00', {0x10}, 0x10}) (async)
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)

2.300052825s ago: executing program 0 (id=589):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x25}, 0xa)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1], 0x20}], 0x1}, 0x300)
r2 = syz_open_dev$amidi(&(0x7f0000000100), 0x8000008, 0x10000)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000140)={0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x22, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000300)='cpuhp_exit\x00', r6, 0x0, 0x80}, 0x18)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[<r8=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000540)={r8, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[<r10=>0x0], &(0x7f0000000280), 0x1, r9})
ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000300)=[r10], &(0x7f0000000340)})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r11=>0xffffffffffffffff})
mknod(0x0, 0x8001420, 0x0)
r12 = syz_io_uring_setup(0x4e48, &(0x7f0000000140)={0x0, 0xcfe8, 0x1, 0xffffffff, 0x121}, &(0x7f00000004c0)=<r13=>0x0, &(0x7f00000000c0)=<r14=>0x0)
syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}})
io_uring_enter(r12, 0x47f6, 0x0, 0x0, 0x0, 0x0)
recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00)

2.295068179s ago: executing program 2 (id=590):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000)
socket$inet(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

2.294720026s ago: executing program 2 (id=591):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000002c0))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0xe4, 0x1, 0x1, 0x705, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xe}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_PROTOINFO={0x3c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x38, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xa3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x40}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x2}]}}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x212}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x500}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x62}]}, @CTA_PROTOINFO={0x3c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x38, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x40}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x13}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x41}, 0x20004000) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000180)={0x0, 0x8, 0x1, 0xc05})
mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) (async, rerun: 64)
mq_timedreceive(r1, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) (async, rerun: 64)
r3 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d  \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r3, 0x0)

2.16745124s ago: executing program 2 (id=592):
syz_usb_connect(0x2, 0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="12010102ba3e5e1010141090c22301020301090214000106758000f904d0fd00020600210209434480c50eb1f000005d5fd0128764f27ca9b1065c5bdd13c19a36abb03b5380e675f309dcb292916860b51f94324b1052f0df778c6a0af7fb497aa7004db49fb1619c6ec7f168743e130a7863fc50177711af"], &(0x7f0000000400)={0x0, 0x0, 0x96, 0x0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000002340)=[0x0]})
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000480)=ANY=[], 0xff, 0x5a02, &(0x7f000000bc00)="$eJzs3X+QHNV9IPDXM7Pa1a5WWgkIMpjVIlBCILZW/CpsUrGSS+wUEEouUg7iZMOCVkS2JFT6EUCQIHLgQwW4cIpUgpM/iAtzh1FcVMHZyJQxP07ibGwVZx91hamz77D/8BXmUBnQUS6f92p3+s3O9E5vz87O6gd8PiVtT795832vu9/09PfN7E4AAADgfeHAndsPX37Kn3z3b0ffue1Pv7n59tBXnijviRUG0uVNR6uHHEndlaUTy+y4+J1bvvqzoev+6DuP9X7l3f3rT9/woz8+4bqnPnvJvgf+6dm3+5/4zWtFceN4OntyPXkjCaHnW4f+/vP7Xzx5vCxZOP6ztDuExcmSZxcnmRDDvwohrE9XlmbufPyd8zaML2+/u7uhfFGmnvH+/jZ+nMcH1q7DN54TfvyHa+/4/rKv/WvX3td3T1ZJeurGUwgLr6l/fFcIYX76f1wcbXE8xkG7JoTQW/e4iwr6dUaL/V+Zs35qupyXLvsK4sT7l2fWS5l62fWoK7PsLWhvtvL60W69Igsy69mT0Wzl9TOWL06X30iXZ88wfjndhnISSkmo1Lq/KZkcI6HuuCUhmTiWPbX1Uu3YhnT7M+tJZr2UWS93ZbZrot10oJWTpLE81suUx9NxJS0/vf5c3cQVOeUfSJc96RP13bgesjeq+qbcqG3XhNivQ9P05Ugo1Z2DmpXXDnx6MPrSsr5kyZTHjDUR79u/9p4V5XXPHRjI6UfyWJLGT9qKv+t7ixd85tE9O7Ov67X415TS+KW24v/k0oNvXrXny1/KjX9fjF9uK/65T/e+cenzdy7P3T+H4v6ptBV/5LUX7l124rV7c/v/YIzf01b81fsOdvcffvqZ3P4Px/0zv634r1788Z8+8vKTr+fGDzF+b1vx1+3b+oXuwcNn5cZ/Ju6fvvbGz1t7L3xlcPDnQ3nxX4rx+9uK//DuBz760KK7L8k9vmvi/hloK/5lZz51x4LDT56Wd+5MHuzUKyfA+9MJ6TXWXel6u3nmbNXlC/84VKle8y1I//d3sqHMxed4Ows7GR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQggnnfNfPvG/PjXwRiVd705vvFqqLmP5vBCS+SGE7TtGtu3YuOX6oc/esHPblpFNQyM7hka37Nh289D5vze0bXTrppGbx+8d/tB51cctCUl1mZw2pe3usbGx0kBjWWzv35y598crLvrfvwhh+KQfDlZy+7/ygc0PndjkZ0ayeuxjm3de/sML/iXdroG0XwNN+jU2NjYWcvr1f6789UN/d+hnZ4Uw/FvT9euFV//g2w0dmiiYjJMqdYdqh7qT3qb9qPU67U/cX5UNGzeNDk+/f8cfX87Zjn97y+u/2nDTF39d3b89udvR4v6dv3psU+kf1l72//7h1mpBUb+O1nEv2t9xK2L/4v7rSff3wnS7FuZsVyVnu+78/jMvf+uUPW/vDsOVt5ZNbbtou7rSAdCVfKCldmMLvcnihvKetH484vFxK3ds3rpy+827PrRx88j1o9ePbvnIqvNXXTh8wYUXrJzY8pUd3v7Y/m+3uP1HZjwt+qvd34g/WxtPjf2aN+P9Md6v4v1R36O851/vFZ+//yMPPH95taBonMfatfNJuuwdP86rQt14m7qvmm1X0fEJIQw12w9vvn1JOPm/b7yj6DxUf2Tqf2Ykq8deXP7Lf7non5f+frXgiJzn6zvU5nm+1uvJ/kzsr570eIwdo/u3O5TT7epr2q9VLz7fdc+BX/x1rX/z5oWbRnbs2Laq+nNB2tMFyalN+5Utjdu1bOJnOaS7JdSGaZPxOq4rVPuXPX/G6tm92pfe15csabpdWfG+/WvvWVFe99yBvD2dPFZtcX7ory6TD+bU3JR5YLnW4WbtH6vPv6LxMfiJf37iU098/fwp4+Pc6s+i7UpytutrLz98/1e++O+/3rnt+sQfHBz45f/4yxXVgmP+vFKudqTW67Q/Sf155dwQip5/y0Lz7ch9/pWab0/R8y/bzmT95vGGMut9odzW8/Xcp3vfuPT5O5fnPl8PTfd8rd/YWxseVy54vh4r4yf7/Eoqjf2Yu+dXw0BJVo99564Tdj9725pTqgVFr5e12s3G9Xkt5B852/Xtq14ZvGHo3/23zp03vvp7j1/9o5HVf1MtaP+4x7505rj3pPu3J2f/1nod8876/fvh627YtL5aXrSfj971b7osyH/iqWT7zbs+N7Jp0+i27a1tV6uvp7Gd7F5u9/U0nt2WFGxXacp2zd2NVvZXq8+32P/1be+vxudbX0jael3Y9b3FCz7z6J6dA1MelTZ0TSmNX2or/k8uPfjmVXu+/KXc+PfF+JW24o+89sK9y068dm9u/AeTNH5PW/FX7zvY3X/46Wdy4w/H/s9vK/6rF3/8p4+8/OTrufFDjN/X3v5/a++FrwwO/jw3/ktJ2s74NVIIj79z3obqehK60udb7EdXQ79Cdj3JrJcy6+X69VKcRUgbKCdJY3msl5afXteXZv4ipzxehfUsrS7fjeshe2P68mNNqe7c36y86DoVAOC9Lr7/H69B4/v/o+mFUv5MA0yabR62NCduzMMm53Ma32NdmsaPj4/zgIMfDsPjy9uHqhf6M30fIT4fsvOcsZ2zzmiMUTjPOTbR/pR5zqL59+WZ9div6nx5pS4PTU3Nayqhhfn3qe1MP/+e2fzi97OG7prSraG6eavs8etKZ8yafd4h09/KeIS88ZGdF4uf5xhcGNZMtNfi+Mh+jiYeh+znaGI7p2ROnO1+jiZvfAxM3Q8N/YrjI9abZnxMdLn4/cipxy9Ms38nj1/zaNnjN4Pj3TNef67fn+3AvGHTU9qRmzec2/fDzEvmxE+fYMf6vGEsj9tRaXE+8VM55Z2aT4yni9ivQ9P05Ugwnwi8V8X8P75GjOf/4xfg/zdTryhPyV41xni5nxMqN+9PUd4x9XN6vTN9HZ8/ft+6fVu/0D14+Kzc65xnWv2c3taGtd6Cz/0U7ccVmfXC/ZgzQVOU72XbKdrv2c9l9IX+tq6fHt79wEcfWnT3Jbn7fU31hbR4v9/fsNZfsN+Pg3yheXz5wvsiX5jr+bMO5SMDdeut5SPpB5/mKh/585zymeYjvVNu1LZrwrGbj0y+kDbkI11Htl8AwPEj5v+198/S/P9/xgrpdURR3np2Zj3Gy81bc65P8vLWP0uXN2Xq96W/UTGT6+bxa9/LznzqjgWHnzwtN295sNU89D82rA0U5qGzy5tz84g1nfm8eG4eUcuzZpcn5va/lifOLk/PeZu2Lk+fXR6du39qeXTjPMD9B1uLH+cBcuPX5gE6mOf+ZrLSkctzC+brMo3F1Vbn645KHr2wcTvn5H299Ndn5yqPviKnfKZ5dN+UG7XtmnDs5tGN5fJoAOC9Kub/8TIu5v/PZ+q18T77hHjdnpsXdOi6Pfv3QGrxX5qTvHIyfofe/y3O++Y6b53rvH6u5yWO9/d/53peaGDiD3jONH6r82RH7fOux0penDYqLwYA4FgW8//56Xp+/t+f+xtOreQnU/K3ruol5GR+cvzl5/X15Oc58d8z+fnxPv8188/JBPl/u++Lvzsm/wcA4BgU8//4a4/x7//953Q9+3frj8c8PXgfXZ5+3OTps/scQO7xrf8cgHmAI/v5+PmT9c0DAABwNHRNZEpTf8/+0+ky+3v2eb+Xf1VO/VZV0svja3dsGx29eufW9SM7Rq/ecsP60e1X37ht444do1uq9WabN+bmLWne2BUq6f5oXi+bty1K/x7Copy/h5CtH8OeOnFj6t9DyDY7v+DvCEwev9b6m3f8StPUbzY+8o53Xvy/yKkf1Y7/dX957tUbtl+9ccvGHRtHNm3cNdpYbzxr7Z3B92Ym6f8ZfV9q5scUpZl/f2c8PLPrR2lKP7rS/ZH3/exJph+L054szvv+g5x+f/e//t1fnTn260dCGD6p/MFZ7b9k9dh/unL0z3Yc+OHW8f6Xpu1/rWbar6LvK83Wj9tT2XTD9h3nbLhh55bsN0q2J85nlGrrczSfkT79yy3OT6zLKZ/p7++Xp9w4NrU8PwEAQIP4/n+8no3vH34xvYCK5a3n6bN7/zg3Tx9uLU/Pfi9ZUZ6erR+3t9U8vWeWeXq2/aI8vVn9Znl6Xt6dF//Pc+rPVOvjpI3PecT089E9O3PHyTWtjZPs9xkUjZNs/ZmOk2SW4yTbftE4aVa/2TjJO+558T+ZUz9P0Xio1MbD7D6Xkzse7mttPPxuZr1oPGTrz3Q8lGY5HrLtF42HZvWbjYe845sX//Kc+q1qHB/jA2NiXIxefeMN2z5XV2+uv/8iTP1IRiv9mzf52Ln9/o92tb5/O/S5r2R3Y/+HO9X/EFZPlOT1f24/Vzb7/hft/xl8rmxhmPK5stz+vzS7mbDW+z+33++SkVd96uOP1HxteiYo+vxZ0Tzu2pzymc7jzpty49hkHheOnpj/x7d7Yv5/d7rs9NtAx//3pPkes6bxO/Q9ZkXXMUfj9bx0NF/Ps2+5ez0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeE/oriydWB64c/vhy0/5k+/+7eg7t/3pNzff/ju3fPVnQ9f90Xce6/3Ku/vXn77hR398wnVPffaSfQ/807Nv9z/xm9cKAw9M/Kycna72hJC8kYTQ861Df//5/S+ePF6WhBDKycDuEBYnS55dnGQiDP8qhLC+1s/GOx9/57wN48vb7+5uKF+UCZLdrtBXjv2p72cINxVuEcehnnSc7Tp84znhx3+49o7vL/vav3btfX33ZJWkp248hbDwmvrHd4UQ5qf/x8XRtjQ+OF2uCSH01j3uooJ+ndFi/1fmrJ+aLuely76COPH+5Zn1UqZedj3qyix7C9qbrbx+tFuvyILMevZkNFt5/Yzli9PlN9Ll2TOMX47/k1BKQqXW/U3J5BgJdcctCcnEseyprZdqxzak259ZTzLrpcx6uSuzXRPtpgOtnCSN5bFepjyejitp+en15+omrsgp/0C67EmfqO/G9ZC9UdU35UZtuybEfh2api+p/1BcpX2lELq7m5dPnJtqBz49GH1pWV+yZMpjxpqI9+1fe8+K8rrnDgzk9CN5LEnjJ23F3/W9xQs+8+ienUvz4l9TSuOX2or/k0sPvnnVni9/KTf+fTF+ua345z7d+8alz9+5PHf/HIr7p9JW/JHXXrh32YnX7s3t/4Mxfk9b8VfvO9jdf/jpZ3L7Pxz3z/y24r968cd/+sjLT76eGz/E+L1txV+3b+sXugcPn5Ub/5m4f/raGz9v7b3wlcHBnw/lxX8pxu9vK/7Dux/46EOL7r4k9/iuiftnoK34l5351B0LDj95Wt65M3mwU6+cAO9PJ6TXWHel6+3mmbNVly/841Cles23IP3f38mGMsbbWTiH8QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeG/6wa3nf/rKj31ybSUJIcmpM9ZEvK88b/XqoTbaHXnthXuXnXjt3vqypW3EAQAAAIrFPLxUK+kJS8ONyfxwatP6cY7g1LiWNJZn5xBinOwcQbtxSk3ilNqIU+5QfyoditPVoTjzOhSnu0Nxegri9ITW4syfJk5lfAS02J/eafvTepy+DsVZ0KE4/R2Ks7BDcRZ1KM7AtHFaH4eLOxRnSYfinNChOCd2KM5JHYrzWx2Kc3KH4mTnlGc6DvvTmqfkxZm4US6MU0nKtTuazaefnLZz2izb6Stop7/o9bjFdua32M4ZmceVZthOT4vt/PYs20labOd3Z9lOqaCdOG5vyvYvthPXWhz/N3cozq4OxbmlQ3Fu7VCcv+5QnL/pUJzbZhkHoFUx/5/M9wZCd+X3Q296xsnOAsR8d9nEz6mvd3knpBjvg5nyeUXxsol6Jt6ymfYvO4GQibc8U97VEK9Sy0emiddTH29F5s7ptvfi1c37Vh/v7Ex59zTxGjYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6AH9x6/qev/Ngn14YkjP9raqyJeF953urVQ220u3/tPSvK6547UF/WXWkjEAAAAFAo5uFdtZKe0F1ZFbqTeQ31etJ5gJ50vTxQXQ4uDGvGl8lQaWK9N1k87eMq6eNW7ti8deX2m3d9aOPmketHrx/d8pFV56+6cPiCCy9YuWHjptHh6s8QugvihRAmph+237zrcyObNo1u214tzPZ/afq4pel6kj5u8MNheHx5e9r/JQXtlaa0N3c3io8eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/2fXbkMlLcsHgF/PzJyZ8ej+d/74Ni7uOqyrWFmpHUNLPA8ECb4sHoSYY51kyZWko7vorphNupCaUgTKwrLhhzZM0qQvvqREvrBgmCV0NgmV8kN9KLQMFT+EMnHOzDNnZs5McxrEo+vv9+F5ue7rvq/nfj4cuJ4zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/lpoTM3Vp2dmJ5OIZEhOc4BsLF9M09oYdb/y+M4flDa9fVp3rFQYYyEAAABgpKwPn+hEylEq5CMfJyzdbY6ugVju+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+ehcbUXH16ZvbIJCIZktMcIBvLF9O0NkbdV9588LMvbtr0t+5YdYx1AAAAgNGyPjzXiZSjGifHRHLCYuffiWbfBjb0zW/lLcvW2bjKvP5vB8PyTl5l3qmrzPvYiLyt7fONAQAAAB9+Wf9f6EQqUSqsW9EPZ/3/qL4+yzupLy/fPq/+twLFVWcCAAAA/13W/5c6kWqUCtVOv77afn9zX142f9T/7bP5pwyZP+r/+Ze0z/5PDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHguNqbn69MxsPolIhuQ0B8jG8sU0rY1R96wnJv9x0cHbNnfHSoUxFgIAAABGyvrw5da7HKXCZEzEkUt9/6YL7nn4Sw8/OhURrTa/WIwbt+3add1ZrWOWd+ZzBye+/8xr316Rd2bruGYbBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3jMLjam5+vTM7BFJRDIkpzlANpYvpmltjLovf/6Lf7n/hcde7Y5Vx1gHAAAAGC3rw5d7/3JUoxjFOG7prrvXX5Trmz/smwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+Lj+mzd9Y9v8/PbrXKzNRTMf8QF4DBcuei/W+i8TAADwXjspkmj+j46/dK2fGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CBYaEzN1adnZstJRDIkpzlANpYvpmltjLrp48+X1r39xFPdseoY6wAAAACjZX34cu9fjmpMxEQcu3Q36JvAUv9feR8fEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhAWWhMzdWnZ2bXJRHJkJzmANlYvpimtTHq3rdn/+fuXf+9C7tjpcIYCwEAAAAjZX14sRMpR6nw8SjFie37+d4JSb59HvxdYHnezp5pk6ue1+iZl1/1vDv6dlZo76Y1r5ytV2mdO/Nqy/Ny7Xm1rnnV6JSvdeYtvay9PdXWjXjOdtpEAAAAwBrI+v9SJ1KJUqHU1f//tCe/sro+FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4CFpoTM3Vp2dmkyQiGZLTHCAbyxfTtDZG3Zt++/9HffVnd+7ujlXHWAcAAAAYLevDl3v/clRjY/xfbFzq+6PSm5/l/bP+zr13/+uvp0WccdyhTYX+ZX+UXfz65fOf7D9E5HqzcxHr2/WSIfV+8/u7b9jSfOf+iDOOzZ+4ol701Wuuj+iq17tk2nykvv2SXc8c2jni5QAAAMBhIuv/JzqRSpQK1w7t/7POe0T/37HUgK+/Yc8vjmkf2x1534xcpV0vN6TeF7Y8+OdTzvn7a4v9/8p6n+xcfXr/Nfce01OwFemTpM3pa3ZvPXT2gVy261b9fF/97L18+Vuv/vuqG+96p1W/HOV2fEPfo7SqrTz2lY+0OZ/bN3vxu/savfULQ/Z/2++eeuFXG+58a7H+mydNduqfGoPqt3ZeGFo/jkibk5fdvvfc/Qe39taPiNqg+q+/dWEc/8erb+3f/2Tfwt1vvvvY/wLS5nOb3zhwzj3V83rrJ331s/f/8xfu2/uTu777aFY/+63IaSevtn6ur/6zdxy95+lbLt3QWz83ZP9PXv7iph217/yhf/9X9qxaGPoUK/f/wOkPXfHStvTm/iEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDDy0Jjaq4+PTObSyKSITnNAbKxfDFNa2PUfeWi51+//M4f/7A7Vh1jHQAAAGC0rA9f7v3LUY1iFGNyqe9/pL79kl3PHNoZldZo0j4X5ndcv+sTV+3Yfe2Va/TkAAAAwGq9clGy1P8XOpFKlApbYqLd/09fs3vrobMP5LL+P7d4TiLiqqvnt58Rnbxn7zh6z9O3XLqh850gYulnAeXFvM8s511w/vOVN/709VMG5p21nPfc5jcOnHNP9bwsL7rzzozO94kHTn/oipe2pTd3nq8771Nf2zHf/jyRrTt52e17z91/cGsu+47RPk+2183y5nP7Zi9+d18jV4nS4ni+nVdu7xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWGmhMTVXn56ZjXxEMiSn2a0dyMbyxTStjVH34i2/vPWotx/b2B0rFcZYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYX9+guRquzjAP48M7vvzu7s6q6+0Fa0rlYUdqEURNRNRUVohNCVIWFpXkRBEFHYRWtoJFZ0E2TdSFRQbSEY5CaJFmv0T7rpooIC6yIQaaF2kS4qZuY54+xxTqOzFlSfDwzPPs8553t+5zzPnNkDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8I/S1zNab4/seGju9gtu/uSJe2cfv/W9B7Zd9tgbP4xvuvHjvQOvnpzevHzL1zct3XTgvjVTu186/MvQO78d6xj8aKNZmbqVEOKJGELl/Znnn5z+9LzaWAwhlOPwRAgjccnhkZhLWP1rCGFzs875G/fNXrWl1m7b1TdvfHEuJH9doVrO6mkYnl8v/y6VtM62zj1yRfj2hvXbP1/29lu9k8cnTu0Sa/uU03oKYdHG1uN7Qwj96VOTrbbR7ODUrgshDLQcd02Hui4+w/pXFfQvTO3/UlvtkJNtX5Hrl3L75fuZ3lw70OF8C1VUR7f7dTKY6+cfRgvVrHNV+/GR1L6b2pVnmV/OPjGUYuhpln9/PLVGQsu8xRDrc1lp9kvNuQ3p+nP9mOuXcv1yb+666udNC60c4/zxbL/cePY47knjy1uf1W3cUTB+fmor6Yt6MuuH/B8N1dP+aF5XXVbXzJ/U8ncotTyD2o03Jz5NRjWNVeOS0475vY1s2/T6py8tb/jgyHBBHXFvTPmxq/ytn40M3vXmzodHi/I3llJ+qav879Ye/enOnS+/WJj/XJZf7ir/yoMDJ9Z+uGNF4f2Zye5Pzxnlx9TPtt197KNnlv3/nsl2c13P35PlV7qq//qpo31DcwcPFda/Ors//V3lf3PdLd+//uX+44X5Icsf6Cp/w9SDz/aNzV1emH+o8VWo1ldoF+vn58mrvxob+3G8KP+L7P4PtcmPHfNfm9h97SuLd60pXJ/rsvsznPL7z6r+2y45sH1wbv9FRc/OuOdc/XIC/DctTf9jPZX6nd4z982W2r5nLlTL+8IL4z2NX6DB9Bk6lyfKqZ1n0V+YDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7ADByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFMBAAD//+9DKDw=")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x68, r2, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0x6, 0x40440)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0305602, &(0x7f0000000880)={0x0, 0x10, {0x40, 0x5, 0x200c, 0x0, 0x8, 0x1, 0x0, 0x3}})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
lseek(r4, 0xffffffffffffff7f, 0x2)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x1010, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000240000/0x4000)=nil, 0x4000, 0x2000008, 0x2010, r4, 0x10000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x0, 0x6, r7, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x1, {0x0, r8}})

1.420310744s ago: executing program 0 (id=593):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x60d3, 0xfff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x9, 0x30}, 0xc)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x11)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
r2 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d  \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]\xea\xb5\x00\x002\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xc5\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]r+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]9\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa4IV\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6)
fallocate(r2, 0x0, 0x100000000000000, 0x6)

1.358205847s ago: executing program 0 (id=594):
syz_open_dev$media(&(0x7f00000000c0), 0x10000000800000ff, 0x6e0a82)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100030000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

1.092899438s ago: executing program 3 (id=595):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x0, 0xfffffffc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x5a, 0xb, 0xfffffffc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008045}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000002c0)={0xffffffffffff570c})
connect$unix(r5, 0x0, 0x0)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8182, 0x0)
read$FUSE(r7, &(0x7f0000002600)={0x2020}, 0x2020)
writev(r7, &(0x7f0000000d00)=[{&(0x7f0000000cc0)='T01\n', 0x4}], 0x1)
write$FUSE_INIT(r7, 0x0, 0x2f)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$caif_stream(0x25, 0x1, 0x3)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000280)={0xffffffff, 0x0, &(0x7f0000000240)=[r7, r8, r5, r2, r2]}, 0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0)
r10 = dup(r9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r10, 0x0)

490.052393ms ago: executing program 0 (id=596):
r0 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_setup(0x3, &(0x7f00000004c0)=<r2=>0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0)
io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r3 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x1, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000, 0xfffff000}]})
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
r5 = eventfd2(0x2, 0x80001)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0)
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x4b4800, 0x0)
r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x14, 0x80800)
r9 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x0, 0x0)
openat$cgroup_pressure(r10, &(0x7f00000010c0)='memory.pressure\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000900)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, <r11=>0xffffffffffffffff})
io_submit(r2, 0x8, &(0x7f0000000980)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x7, r3, &(0x7f0000000180)="ff4858f4a0015b859d617acd8675be604893e32b96ed64c72bcf1c642dca6c6608892c06247c547454b9818635c058cc9ca44e19a315cf6c3d0b1dd425464239661844081f08bdc8f9bbfbdbd0ebd775ea79", 0x52, 0xa33, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xf, r0, &(0x7f0000000200)="d04722efc03e45db43097b04f1237e91b8d96eb46ba57bc3dd20c1c4b258d1602516", 0x22, 0x3, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x8, r4, &(0x7f00000002c0)="e805acf529b2455ffcab697d341e3948543bc327b9cc34774f7b2e9206c64d8fa81cc8266f95341d770b951e849bc17118af9b1cc1a5a303a7be6a4d4fd4b716ec5e7342baf0f42078197c20898886e1edee26332cfdd0a444951193a7754a1d2351e2ad247c577c047eca7f3e2619639384d530611adf4839fb25ebab7290290e3ed8a496ef9d694d55209e55c446ff7cb7c56178140b0632b94c735772604f9502a2f1b8c66f51f847b314bc1fdc43b3011f8ebbc8aab0322fbfb9848059e6ae1d7531066e6966975b6d62912d7d577b11c443da3d0b833404ac98c3c397c96a9f2628b236bcf73070eec78032956cda68", 0xf2, 0xffffffffffffffff, 0x0, 0x1, r5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x669c, r6, &(0x7f0000000500)="92c5729542ed06663119bfa309e7e0a6feae1d7740b4293788698bfb8b5491044b72f55c5da93f3fb102f7d64644e55ab9256167591a73fc579a95efa2ef4e1e584ac5926c9ec28b1b306be3d8a2cbc5e493c48a22b3c71a043765265d20b16914a9ba01887439e50a2d4167036ba06c84b994cc4c1262ab1ba0046c864ce410599046f7e8b5c9a77a2defaa20f5751d983749e68ba5d63b23712fb38da42abf63f811b0abd09227e84fd061ae6352c66e6bc5ddcbe29f863399e1238e06a8cea65b68aaed61aef91305a6ead9c4ad0e2afd33dce0fb7482e246a674b57bf5104a8c83f1e8", 0xe5, 0x10000, 0x0, 0x0, r7}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0xdece, r0, &(0x7f0000000600)="6ec8a71395a6fe7a03d9bcc30bbd9461884b2b28b5e9c28fc57e0a2b24c06659b376ce6154ddb6722737f21086dc4a892f31e29842399f268d46f2551a", 0x3d, 0x7, 0x0, 0x3}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0xce1c, r8, &(0x7f0000000700)="4aec49c7e56cb5950c12e1c2383e1b78a2292552a792e0fff081ba1887863015b018a2c16f958af7ddcee382b436c6aa91f8144d15dd1c12507dad1eb06f404d8d5004eefcf32523238cb8194a", 0x4d, 0x0, 0x0, 0x0, r10}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f00000007c0)="410a7ecb2c3886ea047df70168e9b17a10949f955932ba391bc9e74791f3753b8ff72fecabe0e951b85133", 0x2b, 0x0, 0x0, 0x1}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x2, 0x1000, r0, &(0x7f0000000840)="d714e462c11d86ad7197c45ef9b75bb245590187cbd346d06487eee30290ef65f9a670d176d0e008806f52ac905728eab16830af1402ff76abea8a2995263bcaaa3b4171757f1da54004662eaf91d8c54eccd1c6952de7dbaec7a4815318d41a1add36f7a6d028e972bac6b891292e1ce8ba06b0633bbd4a03708af1626da7", 0x7f, 0x7fff, 0x0, 0x0, r11}])
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811f10103010902"], 0x0)
r12 = socket$inet(0xa, 0x801, 0x84)
listen(r12, 0x8)
close(0xffffffffffffffff)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r13 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r14=>0x0, &(0x7f00000001c0)=<r15=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
openat$cgroup_pressure(r10, &(0x7f00000009c0)='io.pressure\x00', 0x2, 0x0)
syz_io_uring_submit(r14, r15, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r13, 0x847ba, 0x0, 0xe, 0x0, 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x4000})

489.605223ms ago: executing program 2 (id=597):
socket(0x10, 0x3, 0x0)
r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002500)={0x10, &(0x7f0000000040)={0x0, 0xe}, 0x0, 0x0})
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x30000000}, 0x1c)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00227f99986ac7cee1ba5a070d1e573e47bddca3f1d3012a6bb1d45c3fd2944a83d294b633bd55d157db8df2578159a9773e25ad72734ff0c4850639e8ddc0c7"], 0x1, 0x230, &(0x7f00000003c0)="$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")
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09f1b359b0e2d2e8b6074bb4119ea219d2055df8bab18280f3c3ea8e45510d60a28f7af2a9c471dbe0a88f57ae4580b0b420f5f90b70efb6805d81812d5d64c87c99f9c75e9f656dfd6e0cb005b1abd4d879a097dd9d3e6e12f85505cd45c840f9503b2fff6c33e6a675512ab99729da82acc41b65a398d515700ba76224267cdabfb9576027eb82a82c337e379c488d47691d7fe2c55bbe29a7a37633648559a31b90f145d0f5a2d8d9499f100ba95da30ce9df964d2af22e6551f8a35878071d2b5477c0f1c0ab067a8bd9368c04ed9b6e1547f04d022d726bb32daf66bded05624baa409848f50d96df5d0a86c6ce2b9b0767e85c5233c1e30aaad953301d7294b375db43804290971c857070e9d2c8b6397ab8d56358476fc0359ee79b7956f0ef1ce2edefc6bd340037706a57aa98105019c21be58ce8c868c90db57bfe8304416b3e7e02837ea3ce01ce463321f2ea429ee0c42b27d28c2b6063eb5cd746e26ade0c9ae3049ebb8c5038b01281f26c9777fb1263a5ba1262fa783e07ef5ded966eb85a4a811f5aab0d9575551239e9b0f76e5217744b0a8edcb1504774e36818033e3ab03ca6164df64fdf4352b9c88bfa91add131e13bee44e7eb4e38e613f3bab3c6c8a5038e446d57c9058b975f05f36e0e49171b426b99aa82a0656d7ffc46169ee20456aab06ee429bff9408fb1961e3976e288bee69e9ec6dc72862e1cfcc6c4804457285efcb056b0d834666748129994a3fc172c4c9c622a0c4ddd84bce972d56c70f3687222e5857f9a24b0e138a8359409f5b4ba3206c1a7f35c9e90f3ad903715ab7283e700f9ec2c641f38e998122266a8b1731ce1f03d12a643f281b3ace22f1e403dfe05052fdca3da258f8f1bd7c88949d2a14510b4116c5e403b6cee434d4969113ff8eebc1052e6a1dfa710cadfa0dbd96afa3dd1ab32b10e97d4c015e357bb938d5c2420ed83fff6a17ca9c334fc1b1a3b171f3ca2f4f88a66c59477a73265a8dc10c6d0e5ab2f595e4b9bdd160f35a7917d46df4a50b7651a5991f2444fc0a235f210e8ce8afede0b725d0cabfa20e4d36a836314d180f66614db4fbbd15ef7a947247f7f6f0eb34af0b7aeaaa9210154285dcd0389de273ad3459a1d87f062d9a050c57b6325750aeb9f47d7242117d8e0d38ae1e6cef179809d422ae852bf41f8d5ec42fac487ed46e0511a1f554cd6181e6c81dfdafa7c69daa2ba822e22e305b4b8f34c20fcc8e50cf451f053df249a7f5b20cbc0bc127f55d80bc9c0ba3cf9f0a9c56286215c20f9d60cb61276c6bbf772c151be2520e22b8f6daea2aa1f9e1b30bbeed092d3c2fb92a10fb71e7fea336a0258620c918581487ec04c54ca4e9811a83a6bf39dca6a4e89092cdee6e40024bd7c1ae7b3a8cdbb38c21ccb1de68f7fc9fa4726b832cedcfdd22b71f37d66f350e78e3c19bcae0322f8f070c316bc3c2ba0cb12a43746bd8aaa1645e3f8800b93722ac1791396bb3def1678cb5ab3f42c097c4c3684ea61dc89209ae57906bd4577a93b14eceff6f18893064198d9141a927ced2af06226011187f1851d6a5c1b5ff78a4c6d8b387a781c06a286f052d2e828ed94110cd7b9e6cfcb840e12019678080a6e9e517ce8ba6276c5a919197fd0adf86547135fcec083f2c1fea0e40564f279ceec580e827e39fa77bfa823d6e08aa7bd320491381f21be8b10dc2ed7fee1524680a52bb1e14cb6248519100edd7df29bac5c4ad1c893ee99db03aa7e077ba6608b0db797f31a6cd6d5a01077a41df98fc373ac5c149b87c55bb73bb17b09dffa7847b134b866b9ce179d547750dd2fb9c280e2003d132c87e2535f31232a32d738aeedeff052f256a9c866b6c2cb880d15f1acca7396a8f6113afe45e46e96a6c7762eb09d2c568df561d5484356b4ae71f89bf0126c6670c4fbeee59a89e20206401ef85f083039aa9ceacc2912427b031c35e29c7a702e0054f4dbb01062c0daab2a5faa49a86cd5d48d64bbee12f60ee529a00ad13a579934faff4ec12778038a3e48217fc4eb97ebe3dec9ecdfc0af3e722ed7ca0f12952c2902b0db061098d4bf14664104c440c9d07af7fbaa375274f61b04c17050a3e139dcce999071f18468139182cfe78a84c90c0428d7c75a621a6eaa69e028ce47626235ca3edbbb53e15afebebb25e18c732a820edca2f60be8c0ecd7e5a30282a0add95c6eb43b0afea34d91de7b20f4fb999d17c7fc418738f61cce38d656ce86e2d0a97f31dad0296ee63fb48e859003f88d0a27c874a47301dc0f1fd4f4e9b1bcd7806f715c751b94e182307d2d01278eb0ad2e1a48c3cac80ea5ec28b9b52f5cf6ea8b5611be5a24f91545cae2f581fd58fd47e6aa3b88b380442f21739319050ef702ffe604d7b1341013d330ad4e8d7c3cec17da298b4fcf1205e156f30642d654384d4be8b9eb4add6d9603e8fe122b9d70171d6f8ea5", 0xfffffdef}], 0x1}}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

229.83596ms ago: executing program 3 (id=598):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000011c0)={0x29}, 0x8)
getsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, &(0x7f0000002300))
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local})
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000080)={0x0, 0x0, 0x800})
r2 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6)
syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000000)=@known='user.syz\x00', 0x0, 0x0, 0x1)
llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=""/169, 0xd1)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x2, 0xc43, &(0x7f0000002340)="$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")
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
fallocate(r2, 0x0, 0x9, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3)

128.070278ms ago: executing program 3 (id=599):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=<r0=>0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x8)
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0xc0202)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0x2, 0x3}}, 0x30)
r2 = getpid()
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="e4050000160001000000000000000000e0000001000000000006000000000000fe88000000000000000000000000000100000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x5e4}}, 0x0)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_clone(0xeb80100, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

56.040013ms ago: executing program 3 (id=600):
alarm(0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, &(0x7f0000000040)})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
alarm(0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x2}, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1900)

0s ago: executing program 3 (id=601):
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x1, 0x9, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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")
creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x184)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000240)={[{@flock_local}, {@dyn}]})
read$FUSE(r0, &(0x7f0000000c40)={0x2020}, 0x2020)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
madvise(&(0x7f0000202000/0xe000)=nil, 0xe000, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x38, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x38}}, 0x0)
r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
write$UHID_INPUT(r5, &(0x7f00000027c0)={0x8, {"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", 0xffffffffffffff48}}, 0x1006)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

d stopping allocators, journal seq 2
[  154.996093][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  155.001381][T10322] loop1: detected capacity change from 0 to 32768
[  155.006211][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 4
[  155.011936][ T5850] bcachefs (loop2): marking filesystem clean
[  155.034001][T10320] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  155.034016][T10320]   allowing incompatible features above 0.0: (unknown version)
[  155.034020][T10320]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  155.046903][T10322] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  155.052925][ T5850] bcachefs (loop2): shutdown complete
[  155.056124][T10322]   allowing incompatible features above 0.0: (unknown version)
[  155.057899][T10320] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  155.061358][T10322]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  155.069505][T10320] bcachefs (loop0): initializing new filesystem
[  155.091817][T10320] bcachefs (loop0): going read-write
[  155.094976][T10322] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  155.098079][T10322] bcachefs (loop1): initializing new filesystem
[  155.107008][T10322] bcachefs (loop1): going read-write
[  155.111171][T10320] bcachefs (loop0): marking superblocks
[  155.123450][T10320] bcachefs (loop0): initializing freespace
[  155.129536][T10320] bcachefs (loop0): done initializing freespace
[  155.133861][T10322] bcachefs (loop1): marking superblocks
[  155.143810][T10320] bcachefs (loop0): reading snapshots table
[  155.151259][T10320] bcachefs (loop0): reading snapshots done
[  155.156039][T10322] bcachefs (loop1): initializing freespace
[  155.161526][T10322] bcachefs (loop1): done initializing freespace
[  155.166892][T10322] bcachefs (loop1): reading snapshots table
[  155.169624][T10322] bcachefs (loop1): reading snapshots done
[  155.190951][T10322] bcachefs (loop1): done starting filesystem
[  155.192645][T10320] bcachefs (loop0): done starting filesystem
[  155.216053][   T33] audit: type=1800 audit(1755056500.699:109): pid=10322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.386" name="file1" dev="loop1" ino=4098 res=0 errno=0
[  155.258192][ T5853] bcachefs (loop0): shutting down
[  155.269455][ T5853] bcachefs (loop0): going read-only
[  155.283424][ T5846] bcachefs (loop1): shutting down
[  155.285182][ T5846] bcachefs (loop1): going read-only
[  155.286903][ T5846] bcachefs (loop1): finished waiting for writes to stop
[  155.299038][ T5853] bcachefs (loop0): finished waiting for writes to stop
[  155.305304][ T5846] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  155.311240][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  155.333069][ T5846] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  155.341341][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  155.344923][ T5846] bcachefs (loop1): clean shutdown complete, journal seq 4
[  155.347994][ T5846] bcachefs (loop1): marking filesystem clean
[  155.352739][ T5853] bcachefs (loop0): clean shutdown complete, journal seq 4
[  155.355708][ T5853] bcachefs (loop0): marking filesystem clean
[  155.382826][ T5853] bcachefs (loop0): shutdown complete
[  155.421511][ T5846] bcachefs (loop1): shutdown complete
[  155.626199][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'.
[  155.640511][T10368] loop2: detected capacity change from 0 to 512
[  155.652813][T10368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.659749][T10368] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  155.673124][T10368] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #2: comm syz.2.390: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  155.680583][T10368] EXT4-fs (loop2): Remounting filesystem read-only
[  155.988045][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.110408][T10378] loop2: detected capacity change from 0 to 128
[  156.114413][T10378] vfat: Unknown parameter ''
[  156.667277][T10383] loop0: detected capacity change from 0 to 32768
[  156.822599][T10383] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  156.822673][T10383]   allowing incompatible features above 0.0: (unknown version)
[  156.822679][T10383]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  156.835747][T10383] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  156.838419][T10383] bcachefs (loop0): initializing new filesystem
[  156.850459][T10383] bcachefs (loop0): going read-write
[  156.861026][T10383] bcachefs (loop0): marking superblocks
[  156.888734][T10383] bcachefs (loop0): initializing freespace
[  156.899032][T10383] bcachefs (loop0): done initializing freespace
[  156.913783][T10383] bcachefs (loop0): reading snapshots table
[  156.915863][T10383] bcachefs (loop0): reading snapshots done
[  156.947561][T10383] bcachefs (loop0): done starting filesystem
[  156.995059][   T33] audit: type=1800 audit(1755056502.469:110): pid=10383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.393" name="file1" dev="loop0" ino=4098 res=0 errno=0
[  157.088983][ T5908] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  157.251481][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.256241][ T5908] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  157.259434][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.267591][ T5908] usb 2-1: config 0 descriptor??
[  157.282310][ T5908] pwc: Askey VC010 type 2 USB webcam detected.
[  157.473048][T10408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'.
[  157.481769][T10408] loop2: detected capacity change from 0 to 512
[  157.494839][T10408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.505520][T10408] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  157.521747][ T5853] bcachefs (loop0): shutting down
[  157.524765][ T5853] bcachefs (loop0): going read-only
[  157.526742][ T5853] bcachefs (loop0): finished waiting for writes to stop
[  157.532872][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  157.539956][T10408] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #2: comm syz.2.394: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  157.549566][T10408] EXT4-fs (loop2): Remounting filesystem read-only
[  157.565365][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  157.569846][ T5853] bcachefs (loop0): clean shutdown complete, journal seq 4
[  157.575562][ T5853] bcachefs (loop0): marking filesystem clean
[  157.591943][ T5853] bcachefs (loop0): shutdown complete
[  157.914002][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.935074][T10397] loop1: detected capacity change from 0 to 32768
[  157.941853][T10397] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.389 (10397)
[  157.952118][T10397] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  157.956461][T10397] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  157.961046][T10397] BTRFS info (device loop1): using free-space-tree
[  158.003773][T10397] BTRFS info (device loop1): rebuilding free space tree
[  158.046001][ T5908] pwc: recv_control_msg error -32 req 02 val 2b00
[  158.054405][ T5908] pwc: recv_control_msg error -32 req 02 val 2700
[  158.057330][ T5908] pwc: recv_control_msg error -32 req 02 val 2c00
[  158.064054][ T5908] pwc: recv_control_msg error -32 req 04 val 1000
[  158.289483][ T5881] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  158.463194][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.467593][ T5881] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  158.473569][ T5908] pwc: recv_control_msg error -71 req 02 val 2000
[  158.475560][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.479050][ T5908] pwc: recv_control_msg error -71 req 02 val 2100
[  158.482572][ T5908] pwc: recv_control_msg error -71 req 04 val 1500
[  158.483480][ T5881] usb 3-1: config 0 descriptor??
[  158.489895][ T5881] pwc: Askey VC010 type 2 USB webcam detected.
[  158.498190][ T5908] pwc: recv_control_msg error -71 req 02 val 2500
[  158.500798][ T5908] pwc: recv_control_msg error -71 req 02 val 2400
[  158.503187][ T5908] pwc: recv_control_msg error -71 req 02 val 2600
[  158.505675][ T5908] pwc: recv_control_msg error -71 req 02 val 2900
[  158.508055][ T5908] pwc: recv_control_msg error -71 req 02 val 2800
[  158.510731][ T5908] pwc: recv_control_msg error -71 req 04 val 1100
[  158.513112][ T5908] pwc: recv_control_msg error -71 req 04 val 1200
[  158.516306][ T5908] pwc: Registered as video103.
[  158.518723][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23
[  158.528477][ T5908] usb 2-1: USB disconnect, device number 21
[  158.915060][T10461] loop0: detected capacity change from 0 to 32768
[  158.919295][T10461] BTRFS info: device /dev/loop0 (7:0) using temp-fsid aa3bc412-3380-41b3-9a83-fba283107c7e
[  158.923265][T10461] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.395 (10461)
[  158.932347][T10461] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  158.937113][T10461] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  158.956418][T10461] BTRFS info (device loop0): rebuilding free space tree
[  158.968667][T10461] BTRFS info (device loop0): disabling free space tree
[  158.971558][T10461] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  158.976716][T10461] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  159.066547][ T5846] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  159.095459][ T5881] pwc: recv_control_msg error -32 req 02 val 2700
[  159.101655][ T5881] pwc: recv_control_msg error -32 req 02 val 2c00
[  159.110571][ T5881] pwc: recv_control_msg error -32 req 04 val 1000
[  159.113655][ T5881] pwc: recv_control_msg error -71 req 04 val 1300
[  159.116408][ T5881] pwc: recv_control_msg error -71 req 04 val 1400
[  159.119069][ T5881] pwc: recv_control_msg error -71 req 02 val 2000
[  159.121912][ T5881] pwc: recv_control_msg error -71 req 02 val 2100
[  159.124827][ T5881] pwc: recv_control_msg error -71 req 04 val 1500
[  159.127549][ T5881] pwc: recv_control_msg error -71 req 02 val 2500
[  159.132886][ T5881] pwc: recv_control_msg error -71 req 02 val 2400
[  159.135902][ T5881] pwc: recv_control_msg error -71 req 02 val 2600
[  159.151276][ T5881] pwc: recv_control_msg error -71 req 02 val 2900
[  159.162062][ T5881] pwc: recv_control_msg error -71 req 02 val 2800
[  159.165040][ T5881] pwc: recv_control_msg error -71 req 04 val 1100
[  159.174332][ T5881] pwc: recv_control_msg error -71 req 04 val 1200
[  159.192149][ T5881] pwc: Registered as video103.
[  159.213503][ T5881] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24
[  159.228724][ T5881] usb 3-1: USB disconnect, device number 15
[  159.360798][   T54] Bluetooth: hci2: ACL packet for unknown connection handle 512
[  159.793327][T10500] loop1: detected capacity change from 0 to 32768
[  159.973591][T10502] loop2: detected capacity change from 0 to 32768
[  160.027769][T10502] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  160.027789][T10502]   allowing incompatible features above 0.0: (unknown version)
[  160.027798][T10502]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  160.045174][T10502] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  160.048610][T10502] bcachefs (loop2): initializing new filesystem
[  160.063098][T10502] bcachefs (loop2): going read-write
[  160.073071][T10502] bcachefs (loop2): marking superblocks
[  160.094236][T10502] bcachefs (loop2): initializing freespace
[  160.100093][T10502] bcachefs (loop2): done initializing freespace
[  160.113320][T10502] bcachefs (loop2): reading snapshots table
[  160.116119][T10502] bcachefs (loop2): reading snapshots done
[  160.137176][T10502] bcachefs (loop2): done starting filesystem
[  160.180940][   T33] audit: type=1800 audit(1755056505.659:111): pid=10502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.398" name="file1" dev="loop2" ino=4098 res=0 errno=0
[  160.240354][ T5850] bcachefs (loop2): shutting down
[  160.242473][ T5850] bcachefs (loop2): going read-only
[  160.245881][ T5850] bcachefs (loop2): finished waiting for writes to stop
[  160.251376][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  160.284043][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  160.289319][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 4
[  160.292881][ T5850] bcachefs (loop2): marking filesystem clean
[  160.311184][ T5850] bcachefs (loop2): shutdown complete
[  160.758334][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'.
[  161.059040][   T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  161.224431][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  161.228577][   T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  161.232557][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.238753][   T10] usb 2-1: config 0 descriptor??
[  161.244062][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  161.658983][T10551] loop2: detected capacity change from 0 to 32768
[  161.709678][T10551] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  161.709699][T10551]   allowing incompatible features above 0.0: (unknown version)
[  161.709707][T10551]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  161.725926][T10551] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  161.729518][T10551] bcachefs (loop2): initializing new filesystem
[  161.740387][T10551] bcachefs (loop2): going read-write
[  161.780828][T10551] bcachefs (loop2): marking superblocks
[  161.811139][T10551] bcachefs (loop2): initializing freespace
[  161.826616][ T5853] BTRFS info (device loop0): last unmount of filesystem aa3bc412-3380-41b3-9a83-fba283107c7e
[  161.836955][T10551] bcachefs (loop2): done initializing freespace
[  161.846261][T10551] bcachefs (loop2): reading snapshots table
[  161.856269][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[  161.876290][T10551] bcachefs (loop2): reading snapshots done
[  161.880063][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[  161.884134][   T10] pwc: recv_control_msg error -71 req 04 val 1000
[  161.887941][   T10] pwc: recv_control_msg error -71 req 04 val 1300
[  161.894925][   T10] pwc: recv_control_msg error -71 req 04 val 1400
[  161.898214][   T10] pwc: recv_control_msg error -71 req 02 val 2000
[  161.904584][   T10] pwc: recv_control_msg error -71 req 02 val 2100
[  161.913450][   T10] pwc: recv_control_msg error -71 req 04 val 1500
[  161.917032][   T10] pwc: recv_control_msg error -71 req 02 val 2500
[  161.923009][T10551] bcachefs (loop2): done starting filesystem
[  161.923055][   T10] pwc: recv_control_msg error -71 req 02 val 2400
[  161.929692][   T10] pwc: recv_control_msg error -71 req 02 val 2600
[  161.932886][   T10] pwc: recv_control_msg error -71 req 02 val 2900
[  161.936004][   T10] pwc: recv_control_msg error -71 req 02 val 2800
[  161.940123][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[  161.943365][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  161.948616][   T10] pwc: Registered as video103.
[  161.953700][   T33] audit: type=1800 audit(1755056507.429:112): pid=10551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.401" name="file1" dev="loop2" ino=4098 res=0 errno=0
[  161.971676][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25
[  162.010414][   T10] usb 2-1: USB disconnect, device number 22
[  162.285953][T10584] loop0: detected capacity change from 0 to 32768
[  162.324934][T10584] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  162.324948][T10584]   allowing incompatible features above 0.0: (unknown version)
[  162.324953][T10584]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  162.338498][T10584] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  162.342261][T10584] bcachefs (loop0): initializing new filesystem
[  162.349662][T10584] bcachefs (loop0): going read-write
[  162.353433][T10584] bcachefs (loop0): marking superblocks
[  162.366047][T10584] bcachefs (loop0): initializing freespace
[  162.371966][T10584] bcachefs (loop0): done initializing freespace
[  162.377224][T10584] bcachefs (loop0): reading snapshots table
[  162.380637][T10584] bcachefs (loop0): reading snapshots done
[  162.403045][ T5850] bcachefs (loop2): shutting down
[  162.405383][ T5850] bcachefs (loop2): going read-only
[  162.409349][T10584] bcachefs (loop0): done starting filesystem
[  162.413807][ T5850] bcachefs (loop2): finished waiting for writes to stop
[  162.431285][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  162.473487][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  162.478305][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 4
[  162.482089][ T5850] bcachefs (loop2): marking filesystem clean
[  162.501408][ T5850] bcachefs (loop2): shutdown complete
[  162.729032][T10601] loop1: detected capacity change from 0 to 32768
[  162.786650][T10601] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  162.786673][T10601]   allowing incompatible features above 0.0: (unknown version)
[  162.786681][T10601]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  162.802935][T10601] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  162.806493][T10601] bcachefs (loop1): initializing new filesystem
[  162.816295][T10601] bcachefs (loop1): going read-write
[  162.821875][T10601] bcachefs (loop1): marking superblocks
[  162.825899][T10608] loop2: detected capacity change from 0 to 32768
[  162.829593][T10608] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.406 (10608)
[  162.837118][T10608] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  162.840486][T10601] bcachefs (loop1): initializing freespace
[  162.842707][T10608] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  162.847589][T10608] BTRFS info (device loop2): using free-space-tree
[  162.851227][T10601] bcachefs (loop1): done initializing freespace
[  162.860030][T10601] bcachefs (loop1): reading snapshots table
[  162.862793][T10601] bcachefs (loop1): reading snapshots done
[  162.880855][   T33] audit: type=1800 audit(1755056508.359:113): pid=10608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.406" name="file1" dev="loop2" ino=260 res=0 errno=0
[  162.900671][T10601] bcachefs (loop1): done starting filesystem
[  162.943771][   T33] audit: type=1800 audit(1755056508.419:114): pid=10601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.407" name="file1" dev="loop1" ino=4098 res=0 errno=0
[  162.978516][ T5846] bcachefs (loop1): shutting down
[  162.984756][ T5846] bcachefs (loop1): going read-only
[  162.987014][ T5846] bcachefs (loop1): finished waiting for writes to stop
[  163.003742][ T5846] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  163.013883][ T5853] bcachefs (loop0): shutting down
[  163.016644][ T5853] bcachefs (loop0): going read-only
[  163.018956][ T5853] bcachefs (loop0): finished waiting for writes to stop
[  163.023724][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  163.057271][ T5846] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  163.062295][ T5846] bcachefs (loop1): clean shutdown complete, journal seq 4
[  163.065794][ T5846] bcachefs (loop1): marking filesystem clean
[  163.073477][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  163.090713][ T5853] bcachefs (loop0): clean shutdown complete, journal seq 4
[  163.094509][ T5853] bcachefs (loop0): marking filesystem clean
[  163.099978][ T5846] bcachefs (loop1): shutdown complete
[  163.145617][ T5853] bcachefs (loop0): shutdown complete
[  163.444092][ T5850] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  163.739625][T10654] loop2: detected capacity change from 0 to 8192
[  163.889726][   T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  164.028993][   T10] usb 2-1: device descriptor read/64, error -71
[  164.168937][ T5908] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  164.299101][   T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  164.339035][ T5908] usb 3-1: Using ep0 maxpacket: 32
[  164.357549][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.364703][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.375724][ T5908] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  164.380867][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.392617][ T5908] usb 3-1: config 0 descriptor??
[  164.396334][ T5908] hub 3-1:0.0: USB hub found
[  164.440330][   T10] usb 2-1: device descriptor read/64, error -71
[  164.544802][T10675] loop0: detected capacity change from 0 to 32768
[  164.550747][   T10] usb usb2-port1: attempt power cycle
[  164.596314][ T5908] hub 3-1:0.0: 1 port detected
[  164.600485][T10675] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  164.600499][T10675]   allowing incompatible features above 0.0: (unknown version)
[  164.600505][T10675]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  164.613733][T10675] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  164.616379][T10675] bcachefs (loop0): initializing new filesystem
[  164.623871][T10675] bcachefs (loop0): going read-write
[  164.629452][T10675] bcachefs (loop0): marking superblocks
[  164.641912][T10675] bcachefs (loop0): initializing freespace
[  164.646875][T10675] bcachefs (loop0): done initializing freespace
[  164.653898][T10675] bcachefs (loop0): reading snapshots table
[  164.655953][T10675] bcachefs (loop0): reading snapshots done
[  164.671428][T10675] bcachefs (loop0): done starting filesystem
[  164.682170][   T33] audit: type=1800 audit(1755056510.159:115): pid=10675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.412" name="file1" dev="loop0" ino=4098 res=0 errno=0
[  164.715043][ T5853] bcachefs (loop0): shutting down
[  164.717314][ T5853] bcachefs (loop0): going read-only
[  164.719880][ T5853] bcachefs (loop0): finished waiting for writes to stop
[  164.723659][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  164.743677][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  164.747239][ T5853] bcachefs (loop0): clean shutdown complete, journal seq 5
[  164.749962][ T5853] bcachefs (loop0): marking filesystem clean
[  164.765682][ T5853] bcachefs (loop0): shutdown complete
[  164.889064][   T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  164.909611][   T10] usb 2-1: device descriptor read/8, error -71
[  165.148999][   T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  165.169587][   T10] usb 2-1: device descriptor read/8, error -71
[  165.202273][ T5908] hub 3-1:0.0: activate --> -90
[  165.280549][   T10] usb usb2-port1: unable to enumerate USB device
[  165.620722][   T24] usb 3-1: USB disconnect, device number 16
[  165.623273][ T5908] usb 3-1-port1: cannot disable (err = -71)
[  166.247853][T10708] loop2: detected capacity change from 0 to 2048
[  166.270869][T10710] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.302046][   T33] audit: type=1800 audit(1755056511.779:116): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.415" name="file2" dev="loop2" ino=16 res=0 errno=0
[  166.311165][T10708] NILFS (loop2): error -2 truncating bmap (ino=16)
[  166.632271][T10716] loop0: detected capacity change from 0 to 4096
[  166.636874][T10714] loop2: detected capacity change from 0 to 32768
[  166.678349][T10730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'.
[  166.683446][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'.
[  166.724389][T10714] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  166.724403][T10714]   allowing incompatible features above 0.0: (unknown version)
[  166.724409][T10714]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  166.744569][T10714] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  166.750605][T10714] bcachefs (loop2): initializing new filesystem
[  166.757549][T10714] bcachefs (loop2): going read-write
[  166.762278][T10714] bcachefs (loop2): marking superblocks
[  166.773225][T10714] bcachefs (loop2): initializing freespace
[  166.780310][T10714] bcachefs (loop2): done initializing freespace
[  166.786802][T10714] bcachefs (loop2): reading snapshots table
[  166.790379][T10714] bcachefs (loop2): reading snapshots done
[  166.805544][T10714] bcachefs (loop2): done starting filesystem
[  166.814611][   T33] audit: type=1800 audit(1755056512.289:117): pid=10714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.416" name="file1" dev="loop2" ino=4098 res=0 errno=0
[  166.845200][ T5850] bcachefs (loop2): shutting down
[  166.846880][ T5850] bcachefs (loop2): going read-only
[  166.848603][ T5850] bcachefs (loop2): finished waiting for writes to stop
[  166.852539][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  166.871741][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  166.875278][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 4
[  166.878069][ T5850] bcachefs (loop2): marking filesystem clean
[  166.893420][ T5850] bcachefs (loop2): shutdown complete
[  166.917251][T10730] loop1: detected capacity change from 0 to 32768
[  166.926210][T10730] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  166.932145][   T24] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  166.946666][T10730] XFS (loop1): Ending clean mount
[  166.950498][T10730] XFS (loop1): Quotacheck needed: Please wait.
[  166.972659][T10730] XFS (loop1): Quotacheck: Done.
[  167.044289][ T5846] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.065779][   T24] usb 1-1: device descriptor read/64, error -71
[  167.232532][T10763] loop1: detected capacity change from 0 to 128
[  167.235750][T10763] msdos: Bad value for 'gid'
[  167.237355][T10763] msdos: Bad value for 'gid'
[  167.309162][   T24] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  167.448958][   T24] usb 1-1: device descriptor read/64, error -71
[  167.562056][   T24] usb usb1-port1: attempt power cycle
[  167.899249][   T24] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  167.929921][   T24] usb 1-1: device descriptor read/8, error -71
[  168.091765][T10772] loop2: detected capacity change from 0 to 32768
[  168.145202][T10772] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  168.145224][T10772]   allowing incompatible features above 0.0: (unknown version)
[  168.145232][T10772]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  168.162440][T10772] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  168.166128][T10772] bcachefs (loop2): initializing new filesystem
[  168.168992][   T24] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  168.175446][T10772] bcachefs (loop2): going read-write
[  168.180834][T10772] bcachefs (loop2): marking superblocks
[  168.190314][   T24] usb 1-1: device descriptor read/8, error -71
[  168.196899][T10772] bcachefs (loop2): initializing freespace
[  168.206789][T10772] bcachefs (loop2): done initializing freespace
[  168.216243][T10772] bcachefs (loop2): reading snapshots table
[  168.219195][T10772] bcachefs (loop2): reading snapshots done
[  168.239311][T10772] bcachefs (loop2): done starting filesystem
[  168.255766][   T33] audit: type=1800 audit(1755056513.729:118): pid=10772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.419" name="file1" dev="loop2" ino=4098 res=0 errno=0
[  168.271535][T10781] loop1: detected capacity change from 0 to 32768
[  168.301013][ T5850] bcachefs (loop2): shutting down
[  168.303058][ T5850] bcachefs (loop2): going read-only
[  168.306533][   T24] usb usb1-port1: unable to enumerate USB device
[  168.309798][ T5850] bcachefs (loop2): finished waiting for writes to stop
[  168.312806][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  168.327341][T10781] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  168.327362][T10781]   allowing incompatible features above 0.0: (unknown version)
[  168.327370][T10781]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  168.329765][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  168.335491][T10781] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  168.336858][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 5
[  168.344667][T10781] bcachefs (loop1): initializing new filesystem
[  168.349390][ T5850] bcachefs (loop2): marking filesystem clean
[  168.361498][ T5850] bcachefs (loop2): shutdown complete
[  168.381520][T10781] bcachefs (loop1): going read-write
[  168.394424][T10781] bcachefs (loop1): marking superblocks
[  168.411677][T10781] bcachefs (loop1): initializing freespace
[  168.417022][T10781] bcachefs (loop1): done initializing freespace
[  168.424046][T10781] bcachefs (loop1): reading snapshots table
[  168.426264][T10781] bcachefs (loop1): reading snapshots done
[  168.442308][T10781] bcachefs (loop1): done starting filesystem
[  168.452585][   T33] audit: type=1800 audit(1755056513.929:119): pid=10781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.423" name="file1" dev="loop1" ino=4098 res=0 errno=0
[  168.475862][ T5846] bcachefs (loop1): shutting down
[  168.477740][ T5846] bcachefs (loop1): going read-only
[  168.480033][ T5846] bcachefs (loop1): finished waiting for writes to stop
[  168.482854][ T5846] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  168.531224][ T5846] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  168.541461][ T5846] bcachefs (loop1): clean shutdown complete, journal seq 4
[  168.544308][ T5846] bcachefs (loop1): marking filesystem clean
[  168.564276][ T5846] bcachefs (loop1): shutdown complete
[  168.805711][T10810] loop2: detected capacity change from 0 to 32768
[  168.824762][T10810] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  169.016624][T10810] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #0
[  169.022429][T10810] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  169.025490][T10810] OCFS2: File system is now read-only.
[  169.027312][T10810] (syz.2.424,10810,0):ocfs2_search_chain:1817 ERROR: status = -30
[  169.030746][T10810] (syz.2.424,10810,0):ocfs2_search_chain:1940 ERROR: status = -30
[  169.033277][T10810] (syz.2.424,10810,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  169.035924][T10810] (syz.2.424,10810,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  169.038625][T10810] (syz.2.424,10810,0):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  169.041371][T10810] (syz.2.424,10810,0):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  169.044005][T10810] (syz.2.424,10810,0):ocfs2_mknod_locked:641 ERROR: status = -30
[  169.046484][T10810] (syz.2.424,10810,0):ocfs2_mknod:388 ERROR: status = -30
[  169.049079][T10810] (syz.2.424,10810,0):ocfs2_mknod:505 ERROR: status = -30
[  169.051641][T10810] (syz.2.424,10810,0):ocfs2_create:678 ERROR: status = -30
[  169.489630][ T5850] ocfs2: Unmounting device (7,2) on (node local)
[  169.558542][T10818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'.
[  169.568352][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'.
[  169.792608][T10825] loop0: detected capacity change from 0 to 32768
[  169.795691][T10825] xfs: Unknown parameter 'euid<00000000000000000000'
[  169.804746][T10818] loop2: detected capacity change from 0 to 32768
[  169.823811][T10818] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  169.846315][T10825] capability: warning: `syz.0.427' uses deprecated v2 capabilities in a way that may be insecure
[  169.850773][T10818] XFS (loop2): Ending clean mount
[  169.855511][T10818] XFS (loop2): Quotacheck needed: Please wait.
[  169.871257][   T33] audit: type=1326 audit(1755056515.349:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49678ebe9 code=0x7ffc0000
[  169.880611][   T33] audit: type=1326 audit(1755056515.349:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb49678d550 code=0x7ffc0000
[  169.888478][   T33] audit: type=1326 audit(1755056515.349:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb496790417 code=0x7ffc0000
[  169.919522][   T33] audit: type=1326 audit(1755056515.349:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb49678ebe9 code=0x7ffc0000
[  169.924914][T10818] XFS (loop2): Quotacheck: Done.
[  169.935185][   T33] audit: type=1326 audit(1755056515.349:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb496790417 code=0x7ffc0000
[  169.944609][   T33] audit: type=1326 audit(1755056515.349:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb49678d84a code=0x7ffc0000
[  169.974021][   T33] audit: type=1326 audit(1755056515.349:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49678ebe9 code=0x7ffc0000
[  169.989911][   T33] audit: type=1326 audit(1755056515.349:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.0.428" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb49678ebe9 code=0x7ffc0000
[  170.040907][ T5850] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  170.158298][T10849] loop0: detected capacity change from 0 to 32768
[  170.291586][T10849] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  170.291601][T10849]   allowing incompatible features above 0.0: (unknown version)
[  170.291607][T10849]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  170.322065][T10849] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  170.325376][T10849] bcachefs (loop0): initializing new filesystem
[  170.342940][T10849] bcachefs (loop0): going read-write
[  170.360545][T10849] bcachefs (loop0): marking superblocks
[  170.375304][T10849] bcachefs (loop0): initializing freespace
[  170.391150][T10849] bcachefs (loop0): done initializing freespace
[  170.394389][T10849] bcachefs (loop0): reading snapshots table
[  170.396719][T10849] bcachefs (loop0): reading snapshots done
[  170.408468][T10855] loop2: detected capacity change from 0 to 32768
[  170.437892][T10849] bcachefs (loop0): done starting filesystem
[  170.449537][T10855] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  170.449560][T10855]   allowing incompatible features above 0.0: (unknown version)
[  170.449568][T10855]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  170.463727][T10865] loop1: detected capacity change from 0 to 32768
[  170.465667][T10855] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  170.476022][T10855] bcachefs (loop2): initializing new filesystem
[  170.485006][T10855] bcachefs (loop2): going read-write
[  170.492063][T10855] bcachefs (loop2): marking superblocks
[  170.498381][ T5853] bcachefs (loop0): shutting down
[  170.500910][ T5853] bcachefs (loop0): going read-only
[  170.502685][ T5853] bcachefs (loop0): finished waiting for writes to stop
[  170.509071][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  170.513976][T10855] bcachefs (loop2): initializing freespace
[  170.523653][T10855] bcachefs (loop2): done initializing freespace
[  170.530991][T10855] bcachefs (loop2): reading snapshots table
[  170.533656][T10855] bcachefs (loop2): reading snapshots done
[  170.536938][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  170.543223][ T5853] bcachefs (loop0): clean shutdown complete, journal seq 5
[  170.545887][ T5853] bcachefs (loop0): marking filesystem clean
[  170.547399][T10855] bcachefs (loop2): done starting filesystem
[  170.561541][T10865] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  170.561554][T10865]   allowing incompatible features above 0.0: (unknown version)
[  170.561559][T10865]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  170.571421][ T5853] bcachefs (loop0): shutdown complete
[  170.575598][T10865] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  170.580750][T10865] bcachefs (loop1): initializing new filesystem
[  170.587819][T10865] bcachefs (loop1): going read-write
[  170.605425][ T5850] bcachefs (loop2): shutting down
[  170.608600][ T5850] bcachefs (loop2): going read-only
[  170.611767][ T5850] bcachefs (loop2): finished waiting for writes to stop
[  170.614964][T10865] bcachefs (loop1): marking superblocks
[  170.621505][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  170.642066][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  170.647251][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 5
[  170.652765][T10865] bcachefs (loop1): initializing freespace
[  170.656361][ T5850] bcachefs (loop2): marking filesystem clean
[  170.660459][T10865] bcachefs (loop1): done initializing freespace
[  170.672888][T10865] bcachefs (loop1): reading snapshots table
[  170.686635][T10865] bcachefs (loop1): reading snapshots done
[  170.687553][ T5850] bcachefs (loop2): shutdown complete
[  170.719640][T10865] bcachefs (loop1): done starting filesystem
[  170.793091][   T24] bcachefs (loop1): going read-only
[  170.795522][   T24] bcachefs (loop1): finished waiting for writes to stop
[  170.798627][T10865] bcachefs (loop1): shutdown by ioctl type 0emergency read only at seq 2
[  170.813289][   T24] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  170.817233][   T24] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 2
[  170.820903][   T24] bcachefs (loop1): unclean shutdown complete, journal seq 2
[  170.835613][ T5846] bcachefs (loop1): shutting down
[  170.841227][   T24] bcachefs (loop1): done going read-only, filesystem not clean
[  170.877126][ T5846] bcachefs (loop1): shutdown complete
[  170.941493][T10909] loop0: detected capacity change from 0 to 8192
[  170.991141][T10909]  loop0: AHDI p1 p2 p4
[  171.210431][T10919] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  171.685733][T10924] netlink: 'syz.0.436': attribute type 54 has an invalid length.
[  171.935484][T10929] loop0: detected capacity change from 0 to 32768
[  171.955715][T10932] loop2: detected capacity change from 0 to 4096
[  171.959030][T10932] ntfs3: Unknown parameter ''
[  172.134454][T10929] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  172.134467][T10929]   allowing incompatible features above 0.0: (unknown version)
[  172.134473][T10929]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  172.159260][T10929] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  172.169065][T10929] bcachefs (loop0): initializing new filesystem
[  172.175882][T10929] bcachefs (loop0): going read-write
[  172.189645][T10929] bcachefs (loop0): marking superblocks
[  172.223382][T10929] bcachefs (loop0): initializing freespace
[  172.251012][T10938] loop2: detected capacity change from 0 to 32768
[  172.251123][T10929] bcachefs (loop0): done initializing freespace
[  172.254085][T10938] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.439 (10938)
[  172.263265][T10938] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  172.267215][T10938] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  172.272851][T10938] BTRFS info (device loop2): using free-space-tree
[  172.290123][T10929] bcachefs (loop0): reading snapshots table
[  172.299045][T10929] bcachefs (loop0): reading snapshots done
[  172.332705][T10929] bcachefs (loop0): done starting filesystem
[  172.413064][ T5853] bcachefs (loop0): shutting down
[  172.415371][ T5853] bcachefs (loop0): going read-only
[  172.417688][ T5853] bcachefs (loop0): finished waiting for writes to stop
[  172.433072][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  172.497326][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  172.502301][ T5853] bcachefs (loop0): clean shutdown complete, journal seq 5
[  172.504971][ T5853] bcachefs (loop0): marking filesystem clean
[  172.522641][ T5853] bcachefs (loop0): shutdown complete
[  172.837984][T10938] netlink: 60 bytes leftover after parsing attributes in process `syz.2.439'.
[  173.013961][ T5850] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  173.715931][T10989] loop1: detected capacity change from 0 to 32768
[  173.779377][   T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  173.808292][T10989] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  173.808313][T10989]   allowing incompatible features above 0.0: (unknown version)
[  173.808322][T10989]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  173.858321][T10989] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  173.862321][T10989] bcachefs (loop1): initializing new filesystem
[  173.887634][T10989] bcachefs (loop1): going read-write
[  173.917586][T10989] bcachefs (loop1): marking superblocks
[  173.932462][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  173.935799][   T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  173.943259][T10989] bcachefs (loop1): initializing freespace
[  173.948304][   T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  173.953875][T10989] bcachefs (loop1): done initializing freespace
[  173.964291][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  173.967606][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  173.972568][T10989] bcachefs (loop1): reading snapshots table
[  173.974682][T10989] bcachefs (loop1): reading snapshots done
[  173.977121][   T10] usb 3-1: Product: syz
[  173.978558][   T10] usb 3-1: Manufacturer: syz
[  173.982418][   T10] usb 3-1: SerialNumber: syz
[  173.995082][T10989] bcachefs (loop1): done starting filesystem
[  174.094568][ T5846] bcachefs (loop1): shutting down
[  174.097300][ T5846] bcachefs (loop1): going read-only
[  174.099661][ T5846] bcachefs (loop1): finished waiting for writes to stop
[  174.107895][ T5846] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  174.158914][ T5846] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4
[  174.169831][ T5846] bcachefs (loop1): clean shutdown complete, journal seq 5
[  174.173311][ T5846] bcachefs (loop1): marking filesystem clean
[  174.209133][   T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  174.217369][ T5846] bcachefs (loop1): shutdown complete
[  174.252821][T11010] loop0: detected capacity change from 0 to 32768
[  174.409946][   T10] usb 3-1: USB disconnect, device number 17
[  174.414603][   T10] usblp0: removed
[  174.777809][T11010] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  174.777831][T11010]   allowing incompatible features above 0.0: (unknown version)
[  174.777839][T11010]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  174.838964][T11010] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  174.842525][T11010] bcachefs (loop0): initializing new filesystem
[  174.865478][T11010] bcachefs (loop0): going read-write
[  174.880941][T11010] bcachefs (loop0): marking superblocks
[  174.917854][T11010] bcachefs (loop0): initializing freespace
[  174.941125][T11010] bcachefs (loop0): done initializing freespace
[  174.948494][T11010] bcachefs (loop0): reading snapshots table
[  174.958766][T11010] bcachefs (loop0): reading snapshots done
[  175.072580][T11010] bcachefs (loop0): done starting filesystem
[  175.138103][  T794] bcachefs (loop0): going read-only
[  175.147497][  T794] bcachefs (loop0): finished waiting for writes to stop
[  175.150799][T11010] bcachefs (loop0): shutdown by ioctl type 0emergency read only at seq 2
[  175.163061][  T794] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  175.163127][  T794] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 2
[  175.163398][  T794] bcachefs (loop0): unclean shutdown complete, journal seq 2
[  175.173565][  T794] bcachefs (loop0): done going read-only, filesystem not clean
[  175.451235][ T5853] bcachefs (loop0): shutting down
[  175.466692][ T5853] bcachefs (loop0): shutdown complete
[  175.604485][T11050] loop2: detected capacity change from 0 to 32768
[  176.099517][T11058] loop1: detected capacity change from 0 to 32768
[  176.189180][T11058] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  176.189202][T11058]   allowing incompatible features above 0.0: (unknown version)
[  176.189210][T11058]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  176.207123][T11050] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  176.207166][T11050]   allowing incompatible features above 0.0: (unknown version)
[  176.207172][T11050]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  176.207185][T11050] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  176.207209][T11050] bcachefs (loop2): initializing new filesystem
[  176.212167][T11050] bcachefs (loop2): going read-write
[  176.214085][T11058] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  176.257922][T11050] bcachefs (loop2): marking superblocks
[  176.268997][T11058] bcachefs (loop1): initializing new filesystem
[  176.288776][T11050] bcachefs (loop2): initializing freespace
[  176.292936][T11058] bcachefs (loop1): going read-write
[  176.310738][T11050] bcachefs (loop2): done initializing freespace
[  176.335065][T11058] bcachefs (loop1): marking superblocks
[  176.337813][T11050] bcachefs (loop2): reading snapshots table
[  176.348685][T11058] bcachefs (loop1): initializing freespace
[  176.349011][T11050] bcachefs (loop2): reading snapshots done
[  176.376094][T11058] bcachefs (loop1): done initializing freespace
[  176.384017][T11058] bcachefs (loop1): reading snapshots table
[  176.386756][T11058] bcachefs (loop1): reading snapshots done
[  176.390737][T11050] bcachefs (loop2): done starting filesystem
[  176.415061][T11058] bcachefs (loop1): done starting filesystem
[  176.437583][T11050] bcachefs (loop2): shutdown by ioctl type 0emergency read only at seq 2
[  176.441665][ T5909] bcachefs (loop2): going read-only
[  176.441693][ T5909] bcachefs (loop2): finished waiting for writes to stop
[  176.443116][ T5909] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  176.443202][ T5909] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 2
[  176.445405][ T5909] bcachefs (loop2): unclean shutdown complete, journal seq 2
[  176.446506][ T5909] bcachefs (loop2): done going read-only, filesystem not clean
[  176.489954][ T5846] bcachefs (loop1): shutting down
[  176.492193][ T5846] bcachefs (loop1): going read-only
[  176.494989][ T5846] bcachefs (loop1): finished waiting for writes to stop
[  176.499020][ T5846] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  176.506310][ T5850] bcachefs (loop2): shutting down
[  176.530244][ T5846] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  176.535450][ T5846] bcachefs (loop1): clean shutdown complete, journal seq 4
[  176.538058][ T5850] bcachefs (loop2): shutdown complete
[  176.539363][ T5846] bcachefs (loop1): marking filesystem clean
[  176.559587][ T5846] bcachefs (loop1): shutdown complete
[  176.969774][T11098] loop2: detected capacity change from 0 to 32768
[  177.176235][T11102] loop0: detected capacity change from 0 to 32768
[  177.181566][T11102] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.458 (11102)
[  177.187711][T11102] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  177.191219][T11102] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  177.194193][T11102] BTRFS info (device loop0): using free-space-tree
[  177.233526][   T33] kauditd_printk_skb: 30 callbacks suppressed
[  177.233537][   T33] audit: type=1800 audit(1755056522.709:158): pid=11102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.458" name="file1" dev="loop0" ino=260 res=0 errno=0
[  177.397960][T11098] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  177.397975][T11098]   allowing incompatible features above 0.0: (unknown version)
[  177.397981][T11098]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  177.428407][T11098] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  177.431428][T11098] bcachefs (loop2): initializing new filesystem
[  177.439328][T11098] bcachefs (loop2): going read-write
[  177.454761][T11098] bcachefs (loop2): marking superblocks
[  177.482935][T11098] bcachefs (loop2): initializing freespace
[  177.512158][ T5853] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  177.516529][T11098] bcachefs (loop2): done initializing freespace
[  177.536352][T11098] bcachefs (loop2): reading snapshots table
[  177.546106][T11098] bcachefs (loop2): reading snapshots done
[  177.598288][T11098] bcachefs (loop2): done starting filesystem
[  177.612599][  T794] bcachefs (loop2): going read-only
[  177.614275][  T794] bcachefs (loop2): finished waiting for writes to stop
[  177.616594][T11098] bcachefs (loop2): shutdown by ioctl type 0emergency read only at seq 2
[  177.622872][  T794] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  177.625706][  T794] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 2
[  177.636036][  T794] bcachefs (loop2): unclean shutdown complete, journal seq 2
[  177.648922][ T5850] bcachefs (loop2): shutting down
[  177.653707][  T794] bcachefs (loop2): done going read-only, filesystem not clean
[  177.682230][ T5850] bcachefs (loop2): shutdown complete
[  177.809736][ T5909] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  177.875327][T11148] loop0: detected capacity change from 0 to 32768
[  177.981301][ T5909] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  177.984016][ T5909] usb 2-1: config 179 has no interface number 0
[  177.986107][ T5909] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  177.999012][ T5909] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[  178.008397][ T5909] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64
[  178.012258][ T5909] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  178.016869][ T5909] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  178.020009][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.025572][T11138] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  178.028587][T11138] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  178.178015][T11148] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  178.178038][T11148]   allowing incompatible features above 0.0: (unknown version)
[  178.178047][T11148]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  178.238027][T11148] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  178.244277][T11148] bcachefs (loop0): initializing new filesystem
[  178.255618][T11148] bcachefs (loop0): going read-write
[  178.275016][T11138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.283507][T11138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.301312][ T5909] usb 2-1: USB disconnect, device number 27
[  178.303409][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  178.303434][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  178.314106][T11148] bcachefs (loop0): marking superblocks
[  178.370572][T11148] bcachefs (loop0): initializing freespace
[  178.377190][T11148] bcachefs (loop0): done initializing freespace
[  178.387307][T11148] bcachefs (loop0): reading snapshots table
[  178.391802][T11148] bcachefs (loop0): reading snapshots done
[  178.414235][T11148] bcachefs (loop0): done starting filesystem
[  178.456924][ T5853] bcachefs (loop0): shutting down
[  178.458718][ T5853] bcachefs (loop0): going read-only
[  178.460950][ T5853] bcachefs (loop0): finished waiting for writes to stop
[  178.464164][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  178.483973][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  178.487624][ T5853] bcachefs (loop0): clean shutdown complete, journal seq 4
[  178.492566][ T5853] bcachefs (loop0): marking filesystem clean
[  178.504265][ T5853] bcachefs (loop0): shutdown complete
[  178.581818][T11179] loop2: detected capacity change from 0 to 32768
[  179.255035][T11179] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  179.255065][T11179]   allowing incompatible features above 0.0: (unknown version)
[  179.255074][T11179]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  179.272674][T11179] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  179.276161][T11179] bcachefs (loop2): initializing new filesystem
[  179.286026][T11179] bcachefs (loop2): going read-write
[  179.303228][T11179] bcachefs (loop2): marking superblocks
[  179.321378][T11179] bcachefs (loop2): initializing freespace
[  179.339707][T11179] bcachefs (loop2): done initializing freespace
[  179.356201][T11179] bcachefs (loop2): reading snapshots table
[  179.369886][T11179] bcachefs (loop2): reading snapshots done
[  179.404202][T11179] bcachefs (loop2): done starting filesystem
[  179.446207][T11179] bcachefs (loop2): shutdown by ioctl type 0emergency read only at seq 2
[  179.450106][   T24] bcachefs (loop2): going read-only
[  179.450159][   T24] bcachefs (loop2): finished waiting for writes to stop
[  179.468473][   T24] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  179.485638][   T24] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 2
[  179.491574][   T24] bcachefs (loop2): unclean shutdown complete, journal seq 2
[  179.496158][   T24] bcachefs (loop2): done going read-only, filesystem not clean
[  179.512482][ T5850] bcachefs (loop2): shutting down
[  179.513583][T11194] loop1: detected capacity change from 0 to 32768
[  179.525737][ T5850] bcachefs (loop2): shutdown complete
[  179.726783][T11209] loop0: detected capacity change from 0 to 32768
[  179.730858][T11194] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  179.730876][T11194]   allowing incompatible features above 0.0: (unknown version)
[  179.730885][T11194]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  179.751431][T11194] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  179.755020][T11194] bcachefs (loop1): initializing new filesystem
[  179.766670][T11194] bcachefs (loop1): going read-write
[  179.772066][T11209] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  179.775339][T11194] bcachefs (loop1): marking superblocks
[  179.794524][T11194] bcachefs (loop1): initializing freespace
[  179.800594][T11209] XFS (loop0): Ending clean mount
[  179.807142][T11209] XFS (loop0): Quotacheck needed: Please wait.
[  179.833142][T11194] bcachefs (loop1): done initializing freespace
[  179.845071][T11194] bcachefs (loop1): reading snapshots table
[  179.847670][T11194] bcachefs (loop1): reading snapshots done
[  179.866245][T11194] bcachefs (loop1): done starting filesystem
[  179.965530][   T24] bcachefs (loop1): going read-only
[  179.967704][   T24] bcachefs (loop1): finished waiting for writes to stop
[  179.969286][T11209] XFS (loop0): Quotacheck: Done.
[  179.970645][T11194] bcachefs (loop1): shutdown by ioctl type 0emergency read only at seq 2
[  179.975766][   T24] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  179.989046][   T24] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 2
[  179.991831][T11209] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  179.993401][   T24] bcachefs (loop1): unclean shutdown complete, journal seq 2
[  180.020007][   T24] bcachefs (loop1): done going read-only, filesystem not clean
[  180.036630][ T5853] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  180.044658][ T5846] bcachefs (loop1): shutting down
[  180.103843][ T5846] bcachefs (loop1): shutdown complete
[  180.620653][T11184] Bluetooth: hci0: command 0x0406 tx timeout
[  180.622780][T11184] Bluetooth: hci1: command 0x0406 tx timeout
[  180.624965][T11184] Bluetooth: hci2: command 0x0406 tx timeout
[  180.736491][T11272] loop2: detected capacity change from 0 to 32768
[  180.903148][T11289] netlink: 'syz.0.480': attribute type 10 has an invalid length.
[  180.905755][T11289] netlink: 40 bytes leftover after parsing attributes in process `syz.0.480'.
[  180.911024][T11289] team0: entered promiscuous mode
[  180.912781][T11289] team_slave_0: entered promiscuous mode
[  180.915008][T11289] team_slave_1: entered promiscuous mode
[  180.917014][T11289] team0: entered allmulticast mode
[  180.918754][T11289] team_slave_0: entered allmulticast mode
[  180.940917][T11289] team_slave_1: entered allmulticast mode
[  180.943368][T11289] bridge0: port 3(team0) entered blocking state
[  180.949097][T11289] bridge0: port 3(team0) entered disabled state
[  180.985219][T11289] bridge0: port 3(team0) entered blocking state
[  180.987715][T11289] bridge0: port 3(team0) entered forwarding state
[  180.997733][T11272] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  180.997748][T11272]   allowing incompatible features above 0.0: (unknown version)
[  180.997753][T11272]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  181.027627][T11289] loop0: detected capacity change from 0 to 256
[  181.038996][T11272] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  181.041682][T11272] bcachefs (loop2): initializing new filesystem
[  181.062341][T11272] bcachefs (loop2): going read-write
[  181.098609][T11272] bcachefs (loop2): marking superblocks
[  181.107192][T11272] bcachefs (loop2): initializing freespace
[  181.120723][T11272] bcachefs (loop2): done initializing freespace
[  181.131739][T11272] bcachefs (loop2): reading snapshots table
[  181.149307][T11272] bcachefs (loop2): reading snapshots done
[  181.179501][T11272] bcachefs (loop2): done starting filesystem
[  181.283256][ T5850] bcachefs (loop2): shutting down
[  181.285225][ T5850] bcachefs (loop2): going read-only
[  181.287144][ T5850] bcachefs (loop2): finished waiting for writes to stop
[  181.291612][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  181.323147][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  181.338989][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 4
[  181.341696][ T5850] bcachefs (loop2): marking filesystem clean
[  181.393524][ T5850] bcachefs (loop2): shutdown complete
[  182.002025][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'.
[  182.009727][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'.
[  182.194163][T11323] loop0: detected capacity change from 0 to 32768
[  182.203095][T11323] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  182.221885][T11323] XFS (loop0): Ending clean mount
[  182.225348][T11323] XFS (loop0): Quotacheck needed: Please wait.
[  182.251483][T11323] XFS (loop0): Quotacheck: Done.
[  182.256988][T11327] loop1: detected capacity change from 0 to 32768
[  182.354034][ T5853] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  182.567035][T11327] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  182.567068][T11327]   allowing incompatible features above 0.0: (unknown version)
[  182.567076][T11327]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  182.584709][T11327] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  182.589878][T11327] bcachefs (loop1): initializing new filesystem
[  182.600941][T11327] bcachefs (loop1): going read-write
[  182.605986][T11327] bcachefs (loop1): marking superblocks
[  182.652285][T11327] bcachefs (loop1): initializing freespace
[  182.673207][T11327] bcachefs (loop1): done initializing freespace
[  182.707200][T11327] bcachefs (loop1): reading snapshots table
[  182.720555][T11327] bcachefs (loop1): reading snapshots done
[  182.761585][T11327] bcachefs (loop1): done starting filesystem
[  182.787002][   T33] audit: type=1800 audit(1755056528.269:159): pid=11327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.488" name="file1" dev="loop1" ino=4098 res=0 errno=0
[  182.819223][T11370] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  182.843565][ T5846] bcachefs (loop1): shutting down
[  182.845720][ T5846] bcachefs (loop1): going read-only
[  182.848161][ T5846] bcachefs (loop1): finished waiting for writes to stop
[  182.853299][ T5846] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  182.856334][T11379] loop2: detected capacity change from 0 to 256
[  182.858873][   T33] audit: type=1326 audit(1755056528.329:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.2.492" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92b3d8ebe9 code=0x0
[  182.905537][ T5846] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  182.927029][ T5846] bcachefs (loop1): clean shutdown complete, journal seq 4
[  182.932741][ T5846] bcachefs (loop1): marking filesystem clean
[  182.941982][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'.
[  182.956404][ T5846] bcachefs (loop1): shutdown complete
[  182.959468][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'.
[  183.023266][T11405] syz_tun: entered allmulticast mode
[  183.029358][T11404] syz_tun: left allmulticast mode
[  183.330557][T11411] loop0: detected capacity change from 0 to 32768
[  183.333848][T11411] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.501 (11411)
[  183.341827][T11411] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  183.345071][T11411] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  183.348159][T11411] BTRFS info (device loop0): using free-space-tree
[  183.350126][T11415] loop2: detected capacity change from 0 to 32768
[  183.367131][   T33] audit: type=1800 audit(1755056528.839:161): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.501" name="file1" dev="loop0" ino=260 res=0 errno=0
[  183.573858][ T5853] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  183.827666][T11443] binder: BINDER_SET_CONTEXT_MGR already set
[  183.837714][T11443] binder: 11441:11443 ioctl 4018620d 200000000040 returned -16
[  183.848376][T11443] binder: 11441:11443 unknown command 22
[  183.851726][T11443] binder: 11441:11443 ioctl c0306201 2000000001c0 returned -22
[  183.982686][T11415] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  183.982706][T11415]   allowing incompatible features above 0.0: (unknown version)
[  183.982713][T11415]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  183.998422][T11415] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  184.001584][T11415] bcachefs (loop2): initializing new filesystem
[  184.008528][T11415] bcachefs (loop2): going read-write
[  184.015350][T11415] bcachefs (loop2): marking superblocks
[  184.035459][T11415] bcachefs (loop2): initializing freespace
[  184.045248][T11415] bcachefs (loop2): done initializing freespace
[  184.053051][T11415] bcachefs (loop2): reading snapshots table
[  184.055739][T11415] bcachefs (loop2): reading snapshots done
[  184.070043][T11415] bcachefs (loop2): done starting filesystem
[  184.083321][   T33] audit: type=1800 audit(1755056529.559:162): pid=11415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.503" name="file1" dev="loop2" ino=4099 res=0 errno=0
[  184.116527][   T33] audit: type=1804 audit(1755056529.569:163): pid=11415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.503" name="/newroot/184/file1/bus" dev="loop2" ino=4098 res=1 errno=0
[  184.137129][   T33] audit: type=1804 audit(1755056529.569:164): pid=11415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.503" name="/newroot/184/file1/bus" dev="loop2" ino=4098 res=1 errno=0
[  184.150494][ T5850] bcachefs (loop2): shutting down
[  184.152215][ T5850] bcachefs (loop2): going read-only
[  184.156145][ T5850] bcachefs (loop2): finished waiting for writes to stop
[  184.160138][  T794] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  184.162938][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  184.183864][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  184.187689][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 5
[  184.195783][ T5850] bcachefs (loop2): marking filesystem clean
[  184.221479][ T5850] bcachefs (loop2): shutdown complete
[  184.310599][  T794] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.313990][  T794] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  184.316946][  T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.323575][  T794] usb 1-1: config 0 descriptor??
[  184.327726][  T794] pwc: Askey VC010 type 2 USB webcam detected.
[  184.748508][  T794] pwc: recv_control_msg error -71 req 02 val 2b00
[  184.753186][  T794] pwc: recv_control_msg error -71 req 02 val 2700
[  184.756368][  T794] pwc: recv_control_msg error -71 req 02 val 2c00
[  184.758971][  T794] pwc: recv_control_msg error -71 req 04 val 1000
[  184.761437][  T794] pwc: recv_control_msg error -71 req 04 val 1300
[  184.764071][  T794] pwc: recv_control_msg error -71 req 04 val 1400
[  184.766404][  T794] pwc: recv_control_msg error -71 req 02 val 2000
[  184.769734][  T794] pwc: recv_control_msg error -71 req 02 val 2100
[  184.772738][  T794] pwc: recv_control_msg error -71 req 04 val 1500
[  184.775833][  T794] pwc: recv_control_msg error -71 req 02 val 2500
[  184.779243][  T794] pwc: recv_control_msg error -71 req 02 val 2400
[  184.782414][  T794] pwc: recv_control_msg error -71 req 02 val 2600
[  184.785433][  T794] pwc: recv_control_msg error -71 req 02 val 2900
[  184.788472][  T794] pwc: recv_control_msg error -71 req 02 val 2800
[  184.796412][  T794] pwc: recv_control_msg error -71 req 04 val 1100
[  184.808042][  T794] pwc: recv_control_msg error -71 req 04 val 1200
[  184.811117][  T794] pwc: Registered as video103.
[  184.813681][  T794] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27
[  184.823227][  T794] usb 1-1: USB disconnect, device number 18
[  184.922432][T11471] loop1: detected capacity change from 0 to 32768
[  184.925589][T11471] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.493 (11471)
[  184.932068][T11471] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  184.935395][T11471] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  184.938341][T11471] BTRFS info (device loop1): using free-space-tree
[  184.970161][   T33] audit: type=1800 audit(1755056530.449:165): pid=11471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.493" name="file1" dev="loop1" ino=260 res=0 errno=0
[  185.174285][ T5846] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  185.572842][T11512] loop0: detected capacity change from 0 to 32768
[  185.578273][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.508'.
[  185.664348][T11512] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  185.664363][T11512]   allowing incompatible features above 0.0: (unknown version)
[  185.664367][T11512]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  185.677078][T11512] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  185.679827][T11512] bcachefs (loop0): initializing new filesystem
[  185.686537][T11512] bcachefs (loop0): going read-write
[  185.693324][T11512] bcachefs (loop0): marking superblocks
[  185.703607][T11512] bcachefs (loop0): initializing freespace
[  185.707839][T11512] bcachefs (loop0): done initializing freespace
[  185.713525][T11512] bcachefs (loop0): reading snapshots table
[  185.715575][T11512] bcachefs (loop0): reading snapshots done
[  185.734664][T11512] bcachefs (loop0): done starting filesystem
[  185.760162][   T33] audit: type=1800 audit(1755056531.239:166): pid=11512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.512" name="file1" dev="loop0" ino=4099 res=0 errno=0
[  185.769223][T11512] bcachefs (loop0): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
[  185.769223][T11512]   set version_upgrade=incompat to enable
[  185.803308][T11518] loop2: detected capacity change from 0 to 32768
[  185.856154][ T5853] bcachefs (loop0): shutting down
[  185.858440][ T5853] bcachefs (loop0): going read-only
[  185.860881][ T5853] bcachefs (loop0): finished waiting for writes to stop
[  185.865694][T11518] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  185.865715][T11518]   allowing incompatible features above 0.0: (unknown version)
[  185.865722][T11518]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  185.867750][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 19
[  185.875294][T11518] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  185.875333][T11518] bcachefs (loop2): initializing new filesystem
[  185.900973][T11518] bcachefs (loop2): going read-write
[  185.909937][T11518] bcachefs (loop2): marking superblocks
[  185.932922][T11518] bcachefs (loop2): initializing freespace
[  185.934603][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 20
[  185.941531][ T5853] bcachefs (loop0): clean shutdown complete, journal seq 21
[  185.943469][T11518] bcachefs (loop2): done initializing freespace
[  185.945991][ T5853] bcachefs (loop0): marking filesystem clean
[  185.955560][T11518] bcachefs (loop2): reading snapshots table
[  185.958519][T11518] bcachefs (loop2): reading snapshots done
[  185.962968][ T5853] bcachefs (loop0): shutdown complete
[  185.983328][T11518] bcachefs (loop2): done starting filesystem
[  186.018523][ T5850] bcachefs (loop2): shutting down
[  186.020492][ T5850] bcachefs (loop2): going read-only
[  186.022215][ T5850] bcachefs (loop2): finished waiting for writes to stop
[  186.025245][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  186.062015][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  186.071118][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 4
[  186.073810][ T5850] bcachefs (loop2): marking filesystem clean
[  186.100179][ T5850] bcachefs (loop2): shutdown complete
[  186.323593][T11553] loop0: detected capacity change from 0 to 32768
[  186.599068][ T5908] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  186.752149][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.756228][ T5908] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  186.760911][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.767211][ T5908] usb 2-1: config 0 descriptor??
[  186.775402][ T5908] pwc: Askey VC010 type 2 USB webcam detected.
[  186.842177][T11553] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  186.842192][T11553]   allowing incompatible features above 0.0: (unknown version)
[  186.842197][T11553]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  186.863345][T11553] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  186.866773][T11553] bcachefs (loop0): initializing new filesystem
[  186.884315][T11553] bcachefs (loop0): going read-write
[  186.891984][T11553] bcachefs (loop0): marking superblocks
[  186.901937][T11553] bcachefs (loop0): initializing freespace
[  186.906107][T11553] bcachefs (loop0): done initializing freespace
[  186.913928][T11553] bcachefs (loop0): reading snapshots table
[  186.916117][T11553] bcachefs (loop0): reading snapshots done
[  186.928405][T11553] bcachefs (loop0): done starting filesystem
[  186.949504][ T5853] bcachefs (loop0): shutting down
[  186.951696][ T5853] bcachefs (loop0): going read-only
[  186.953594][ T5853] bcachefs (loop0): finished waiting for writes to stop
[  186.957228][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 1
[  186.977339][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 2
[  186.982340][ T5853] bcachefs (loop0): clean shutdown complete, journal seq 3
[  186.984949][ T5853] bcachefs (loop0): marking filesystem clean
[  187.000694][ T5853] bcachefs (loop0): shutdown complete
[  187.128938][   T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  187.177174][ T5908] pwc: recv_control_msg error -71 req 02 val 2b00
[  187.181421][ T5908] pwc: recv_control_msg error -71 req 02 val 2700
[  187.184561][ T5908] pwc: recv_control_msg error -71 req 02 val 2c00
[  187.187722][ T5908] pwc: recv_control_msg error -71 req 04 val 1000
[  187.190907][ T5908] pwc: recv_control_msg error -71 req 04 val 1300
[  187.193278][ T5908] pwc: recv_control_msg error -71 req 04 val 1400
[  187.197675][ T5908] pwc: recv_control_msg error -71 req 02 val 2000
[  187.201000][ T5908] pwc: recv_control_msg error -71 req 02 val 2100
[  187.204119][ T5908] pwc: recv_control_msg error -71 req 04 val 1500
[  187.207409][ T5908] pwc: recv_control_msg error -71 req 02 val 2500
[  187.212337][ T5908] pwc: recv_control_msg error -71 req 02 val 2400
[  187.215592][ T5908] pwc: recv_control_msg error -71 req 02 val 2600
[  187.219750][ T5908] pwc: recv_control_msg error -71 req 02 val 2900
[  187.223038][ T5908] pwc: recv_control_msg error -71 req 02 val 2800
[  187.226258][ T5908] pwc: recv_control_msg error -71 req 04 val 1100
[  187.229473][ T5908] pwc: recv_control_msg error -71 req 04 val 1200
[  187.233766][ T5908] pwc: Registered as video103.
[  187.239377][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28
[  187.249452][ T5908] usb 2-1: USB disconnect, device number 28
[  187.281658][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.286142][   T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  187.289412][   T10] usb 3-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7
[  187.292380][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.296537][   T10] usb 3-1: config 0 descriptor??
[  187.701974][T11574] loop2: detected capacity change from 0 to 32768
[  187.726571][T11574] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.764060][T11574] XFS (loop2): Ending clean mount
[  187.767349][T11574] XFS (loop2): Quotacheck needed: Please wait.
[  187.794713][T11574] XFS (loop2): Quotacheck: Done.
[  188.181202][T11605] loop1: detected capacity change from 0 to 32768
[  188.405412][T11605] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  188.407053][T11605]   allowing incompatible features above 0.0: (unknown version)
[  188.407338][T11605]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  188.445056][T11605] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  188.451808][T11605] bcachefs (loop1): initializing new filesystem
[  188.480236][T11605] bcachefs (loop1): going read-write
[  188.496824][T11605] bcachefs (loop1): marking superblocks
[  188.574243][T11605] bcachefs (loop1): initializing freespace
[  188.612958][T11605] bcachefs (loop1): done initializing freespace
[  188.630987][T11605] bcachefs (loop1): reading snapshots table
[  188.633151][T11605] bcachefs (loop1): reading snapshots done
[  188.680709][T11605] bcachefs (loop1): done starting filesystem
[  188.753023][   T33] audit: type=1800 audit(1755056534.229:167): pid=11605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.518" name="file1" dev="loop1" ino=4098 res=0 errno=0
[  188.913393][ T5846] bcachefs (loop1): shutting down
[  188.915265][ T5846] bcachefs (loop1): going read-only
[  188.917209][ T5846] bcachefs (loop1): finished waiting for writes to stop
[  188.932501][ T5846] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  189.004411][ T5846] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  189.010671][ T5846] bcachefs (loop1): clean shutdown complete, journal seq 4
[  189.017312][ T5846] bcachefs (loop1): marking filesystem clean
[  189.099596][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'.
[  189.161387][ T5846] bcachefs (loop1): shutdown complete
[  189.311460][   T10] usb 3-1: string descriptor 0 read error: -71
[  189.316113][   T10] usb 3-1: USB disconnect, device number 18
[  189.382976][T11643] loop0: detected capacity change from 0 to 32768
[  189.828577][ T5850] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.081051][T11643] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  190.081104][T11643]   allowing incompatible features above 0.0: (unknown version)
[  190.081112][T11643]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  190.125847][T11643] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  190.147684][T11643] bcachefs (loop0): initializing new filesystem
[  190.154991][T11643] bcachefs (loop0): going read-write
[  190.183239][T11643] bcachefs (loop0): marking superblocks
[  190.197766][T11643] bcachefs (loop0): initializing freespace
[  190.207580][T11657] loop2: detected capacity change from 0 to 32768
[  190.211941][T11643] bcachefs (loop0): done initializing freespace
[  190.215498][T11643] bcachefs (loop0): reading snapshots table
[  190.217427][T11643] bcachefs (loop0): reading snapshots done
[  190.233484][T11643] bcachefs (loop0): done starting filesystem
[  190.259968][ T5853] bcachefs (loop0): shutting down
[  190.261666][ T5853] bcachefs (loop0): going read-only
[  190.263358][ T5853] bcachefs (loop0): finished waiting for writes to stop
[  190.269913][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  190.283960][T11657] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  190.283972][T11657]   allowing incompatible features above 0.0: (unknown version)
[  190.283976][T11657]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  190.296926][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  190.298294][T11657] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  190.305953][T11657] bcachefs (loop2): initializing new filesystem
[  190.308551][ T5853] bcachefs (loop0): clean shutdown complete, journal seq 4
[  190.312347][ T5853] bcachefs (loop0): marking filesystem clean
[  190.313047][T11657] bcachefs (loop2): going read-write
[  190.318390][T11657] bcachefs (loop2): marking superblocks
[  190.328380][T11657] bcachefs (loop2): initializing freespace
[  190.331744][ T5853] bcachefs (loop0): shutdown complete
[  190.333434][T11657] bcachefs (loop2): done initializing freespace
[  190.347864][T11657] bcachefs (loop2): reading snapshots table
[  190.351011][T11657] bcachefs (loop2): reading snapshots done
[  190.364188][T11657] bcachefs (loop2): done starting filesystem
[  190.406993][T11657] bcachefs (loop2): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
[  190.406993][T11657]   set version_upgrade=incompat to enable
[  190.487977][  T794] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  190.527106][ T5850] bcachefs (loop2): shutting down
[  190.530713][ T5850] bcachefs (loop2): going read-only
[  190.532873][ T5850] bcachefs (loop2): finished waiting for writes to stop
[  190.550136][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 20
[  190.608476][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 20
[  190.613732][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 21
[  190.614687][T11695] loop0: detected capacity change from 0 to 2048
[  190.617190][ T5850] bcachefs (loop2): marking filesystem clean
[  190.627012][T11695] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  190.634272][T11695] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  190.636461][ T5850] bcachefs (loop2): shutdown complete
[  190.677275][  T794] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  190.681937][  T794] usb 2-1: config 0 has an invalid interface number: 4 but max is 0
[  190.685267][  T794] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  190.689266][  T794] usb 2-1: config 0 has no interface number 0
[  190.691799][  T794] usb 2-1: config 0 has no interface number 1
[  190.696760][  T794] usb 2-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f
[  190.700641][  T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.704219][  T794] usb 2-1: Product: syz
[  190.705920][  T794] usb 2-1: Manufacturer: syz
[  190.707822][  T794] usb 2-1: SerialNumber: syz
[  190.712576][  T794] usb 2-1: config 0 descriptor??
[  190.719315][  T794] cdc_acm 2-1:0.51: probe with driver cdc_acm failed with error -22
[  190.930153][T11671] loop1: detected capacity change from 0 to 2048
[  190.940496][T11671] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  191.017115][   T10] usb 2-1: USB disconnect, device number 29
[  191.484502][T11738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.511059][T11738] loop1: detected capacity change from 0 to 4096
[  191.514333][T11738] EXT4-fs: Ignoring removed nomblk_io_submit option
[  191.517420][T11738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  191.520963][T11738] EXT4-fs (loop1): Test dummy encryption mode enabled
[  191.526878][T11738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.532573][T11738] EXT4-fs: Ignoring removed nomblk_io_submit option
[  191.534884][T11738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  191.538444][T11738] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  192.847496][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.881201][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'.
[  193.446603][T11823] loop2: detected capacity change from 0 to 32768
[  193.475348][T11823] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  193.475360][T11823]   allowing incompatible features above 0.0: (unknown version)
[  193.475364][T11823]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  193.488452][T11823] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  193.491385][T11823] bcachefs (loop2): initializing new filesystem
[  193.497843][T11823] bcachefs (loop2): going read-write
[  193.502492][T11823] bcachefs (loop2): marking superblocks
[  193.513899][T11823] bcachefs (loop2): initializing freespace
[  193.518228][T11823] bcachefs (loop2): done initializing freespace
[  193.524436][T11823] bcachefs (loop2): reading snapshots table
[  193.526339][T11823] bcachefs (loop2): reading snapshots done
[  193.540747][T11823] bcachefs (loop2): done starting filesystem
[  193.570823][ T5850] bcachefs (loop2): shutting down
[  193.572641][ T5850] bcachefs (loop2): going read-only
[  193.574431][ T5850] bcachefs (loop2): finished waiting for writes to stop
[  193.577219][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  193.591298][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  193.595159][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 4
[  193.597906][ T5850] bcachefs (loop2): marking filesystem clean
[  193.609454][ T5850] bcachefs (loop2): shutdown complete
[  193.767783][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'.
[  193.801565][T11840] loop0: detected capacity change from 0 to 32768
[  193.810946][T11840] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  193.817611][T11840] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #0
[  193.824218][T11840] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  193.827816][T11840] OCFS2: File system is now read-only.
[  193.829713][T11840] (syz.0.546,11840,0):ocfs2_search_chain:1817 ERROR: status = -30
[  193.832298][T11840] (syz.0.546,11840,0):ocfs2_search_chain:1940 ERROR: status = -30
[  193.834906][T11840] (syz.0.546,11840,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  193.837903][T11840] (syz.0.546,11840,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  193.841648][T11840] (syz.0.546,11840,0):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  193.844235][T11840] (syz.0.546,11840,0):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  193.846803][T11840] (syz.0.546,11840,0):ocfs2_mknod_locked:641 ERROR: status = -30
[  193.849348][T11840] (syz.0.546,11840,0):ocfs2_mknod:388 ERROR: status = -30
[  193.852267][T11840] (syz.0.546,11840,0):ocfs2_mknod:505 ERROR: status = -30
[  193.854491][T11840] (syz.0.546,11840,0):ocfs2_create:678 ERROR: status = -30
[  193.873309][ T5853] ocfs2: Unmounting device (7,0) on (node local)
[  193.912878][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.914989][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  193.951991][T11844] loop1: detected capacity change from 0 to 32768
[  193.956531][T11844] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.548 (11844)
[  193.964010][T11844] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  193.967341][T11844] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  193.971298][T11844] BTRFS info (device loop1): using free-space-tree
[  193.982028][ T1091] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x229468c04b6036d81c5b233d3b277cb9824f2afa61a3e8eb0a4163c5aaced5a3 found 0xf8b65bdbeae45eab05df5baaf76f0a7e798447e83d43ae03f7c52a162c1106ba level 0
[  193.991613][T11844] BTRFS warning (device loop1): couldn't read tree root
[  194.062354][T11844] BTRFS error (device loop1): open_ctree failed: -5
[  194.745268][T11878] loop0: detected capacity change from 0 to 32768
[  194.852453][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'.
[  195.194286][T11887] loop0: detected capacity change from 0 to 32768
[  195.306876][T11891] loop1: detected capacity change from 0 to 32768
[  195.313850][T11891] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  195.330757][T11891] XFS (loop1): Ending clean mount
[  195.334865][T11891] XFS (loop1): Quotacheck needed: Please wait.
[  195.356351][T11891] XFS (loop1): Quotacheck: Done.
[  195.517848][T11887] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  195.517859][T11887]   allowing incompatible features above 0.0: (unknown version)
[  195.517864][T11887]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  195.559041][T11887] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  195.561997][T11887] bcachefs (loop0): initializing new filesystem
[  195.579107][ T5237] Bluetooth: hci1: command 0x0406 tx timeout
[  195.584338][T11887] bcachefs (loop0): going read-write
[  195.609534][T11887] bcachefs (loop0): marking superblocks
[  195.651021][T11887] bcachefs (loop0): initializing freespace
[  195.655667][T11919] loop2: detected capacity change from 0 to 128
[  195.659697][T11887] bcachefs (loop0): done initializing freespace
[  195.667566][T11887] bcachefs (loop0): reading snapshots table
[  195.670959][T11887] bcachefs (loop0): reading snapshots done
[  195.673512][T11919] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  195.678964][T11919] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  195.686961][T11887] bcachefs (loop0): done starting filesystem
[  195.697179][   T33] audit: type=1800 audit(1755056541.169:168): pid=11919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.545" name="file1" dev="loop2" ino=13 res=0 errno=0
[  195.706240][T11887] bcachefs (loop0): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
[  195.706240][T11887]   set version_upgrade=incompat to enable
[  195.713562][   T33] audit: type=1800 audit(1755056541.169:169): pid=11887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.553" name="file1" dev="loop0" ino=4098 res=0 errno=0
[  195.739696][   T33] audit: type=1800 audit(1755056541.219:170): pid=11905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.555" name="file1" dev="loop1" ino=9286 res=0 errno=0
[  195.764644][ T5853] bcachefs (loop0): shutting down
[  195.766729][ T5853] bcachefs (loop0): going read-only
[  195.769951][ T5853] bcachefs (loop0): finished waiting for writes to stop
[  195.773283][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4
[  195.795578][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 5
[  195.799692][ T5853] bcachefs (loop0): clean shutdown complete, journal seq 6
[  195.802412][ T5853] bcachefs (loop0): marking filesystem clean
[  195.814618][ T5853] bcachefs (loop0): shutdown complete
[  195.979152][ T5846] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  196.175678][T11928] loop1: detected capacity change from 0 to 32768
[  196.314243][ T5850] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.574460][T11928] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  196.574480][T11928]   allowing incompatible features above 0.0: (unknown version)
[  196.574488][T11928]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  196.596477][T11938] loop2: detected capacity change from 0 to 32768
[  196.640294][T11928] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  196.643902][T11928] bcachefs (loop1): initializing new filesystem
[  196.654466][T11938] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  196.677958][T11928] bcachefs (loop1): going read-write
[  196.681886][T11928] bcachefs (loop1): marking superblocks
[  196.698392][ T5850] ocfs2: Unmounting device (7,2) on (node local)
[  196.716256][T11928] bcachefs (loop1): initializing freespace
[  196.720931][T11928] bcachefs (loop1): done initializing freespace
[  196.726632][T11928] bcachefs (loop1): reading snapshots table
[  196.728671][T11928] bcachefs (loop1): reading snapshots done
[  196.742972][T11928] bcachefs (loop1): done starting filesystem
[  196.767007][   T33] audit: type=1800 audit(1755056542.239:171): pid=11928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.557" name="file1" dev="loop1" ino=4098 res=0 errno=0
[  196.800273][ T5846] bcachefs (loop1): shutting down
[  196.802533][ T5846] bcachefs (loop1): going read-only
[  196.804918][ T5846] bcachefs (loop1): finished waiting for writes to stop
[  196.808504][ T5846] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  196.848274][ T5846] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  196.853865][ T5846] bcachefs (loop1): clean shutdown complete, journal seq 4
[  196.857214][ T5846] bcachefs (loop1): marking filesystem clean
[  196.882844][ T5846] bcachefs (loop1): shutdown complete
[  196.908993][  T794] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  196.980033][T11970] loop2: detected capacity change from 0 to 32768
[  197.071147][  T794] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.074722][  T794] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  197.077748][  T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.081683][  T794] usb 1-1: config 0 descriptor??
[  197.085405][  T794] pwc: Askey VC010 type 2 USB webcam detected.
[  197.407945][T11970] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  197.407961][T11970]   allowing incompatible features above 0.0: (unknown version)
[  197.407966][T11970]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  197.427786][T11970] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  197.432456][T11970] bcachefs (loop2): initializing new filesystem
[  197.440301][T11970] bcachefs (loop2): going read-write
[  197.449945][T11970] bcachefs (loop2): marking superblocks
[  197.470170][T11970] bcachefs (loop2): initializing freespace
[  197.477133][T11970] bcachefs (loop2): done initializing freespace
[  197.485670][T11970] bcachefs (loop2): reading snapshots table
[  197.487725][T11970] bcachefs (loop2): reading snapshots done
[  197.499694][  T794] pwc: recv_control_msg error -32 req 02 val 2b00
[  197.504812][  T794] pwc: recv_control_msg error -32 req 02 val 2700
[  197.515914][T11970] bcachefs (loop2): done starting filesystem
[  197.533902][T11990] loop1: detected capacity change from 0 to 512
[  197.543459][   T33] audit: type=1800 audit(1755056543.019:172): pid=11970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.563" name="file1" dev="loop2" ino=4098 res=0 errno=0
[  197.545091][T11990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  197.570932][T11990] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.571422][  T794] pwc: recv_control_msg error -32 req 02 val 2c00
[  197.580982][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'.
[  197.588071][ T5850] bcachefs (loop2): shutting down
[  197.590027][ T5850] bcachefs (loop2): going read-only
[  197.591784][ T5850] bcachefs (loop2): finished waiting for writes to stop
[  197.599474][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  197.624498][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  197.629517][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 5
[  197.632398][ T5850] bcachefs (loop2): marking filesystem clean
[  197.648095][ T5850] bcachefs (loop2): shutdown complete
[  197.907807][T11999] comedi comedi0: pcl711: I/O port conflict (0xcd,16)
[  199.707241][  T794] pwc: recv_control_msg error -71 req 04 val 1300
[  199.711390][  T794] pwc: recv_control_msg error -71 req 04 val 1400
[  199.714122][  T794] pwc: recv_control_msg error -71 req 02 val 2000
[  199.716864][  T794] pwc: recv_control_msg error -71 req 02 val 2100
[  199.720093][  T794] pwc: recv_control_msg error -71 req 04 val 1500
[  199.722908][  T794] pwc: recv_control_msg error -71 req 02 val 2500
[  199.728501][  T794] pwc: recv_control_msg error -71 req 02 val 2400
[  199.731540][  T794] pwc: recv_control_msg error -71 req 02 val 2600
[  199.734583][  T794] pwc: recv_control_msg error -71 req 02 val 2900
[  199.737220][  T794] pwc: recv_control_msg error -71 req 02 val 2800
[  199.741382][  T794] pwc: recv_control_msg error -71 req 04 val 1100
[  199.744173][  T794] pwc: recv_control_msg error -71 req 04 val 1200
[  199.750536][  T794] pwc: Registered as video103.
[  199.756309][  T794] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29
[  199.769572][  T794] usb 1-1: USB disconnect, device number 19
[  199.917051][T12029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.567'.
[  199.920890][T12029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.567'.
[  200.006250][T12035] netlink: 240 bytes leftover after parsing attributes in process `syz.0.568'.
[  200.168930][ T5909] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  200.215242][T12040] loop0: detected capacity change from 0 to 32768
[  200.260497][T12040] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  200.260514][T12040]   allowing incompatible features above 0.0: (unknown version)
[  200.260521][T12040]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  200.277338][T12040] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  200.280970][T12040] bcachefs (loop0): initializing new filesystem
[  200.289859][T12040] bcachefs (loop0): going read-write
[  200.294593][T12040] bcachefs (loop0): marking superblocks
[  200.310247][T12040] bcachefs (loop0): initializing freespace
[  200.316128][T12040] bcachefs (loop0): done initializing freespace
[  200.322706][ T5909] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  200.326330][T12040] bcachefs (loop0): reading snapshots table
[  200.328370][T12040] bcachefs (loop0): reading snapshots done
[  200.330506][ T5909] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  200.337370][ T5909] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  200.346011][ T5909] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  200.349388][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  200.352059][T12040] bcachefs (loop0): done starting filesystem
[  200.352175][ T5909] usb 3-1: Product: syz
[  200.356329][ T5909] usb 3-1: Manufacturer: syz
[  200.358501][ T5909] usb 3-1: SerialNumber: syz
[  200.366770][   T33] audit: type=1800 audit(1755056545.839:173): pid=12040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.569" name="file1" dev="loop0" ino=4098 res=0 errno=0
[  200.564643][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  200.587884][T12029] netlink: 76 bytes leftover after parsing attributes in process `syz.2.567'.
[  200.615129][  T794] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  200.644367][T12029] loop2: detected capacity change from 0 to 4096
[  200.655434][T12066] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  200.678111][T12068] loop1: detected capacity change from 0 to 2048
[  200.693084][T12068] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  200.707624][T12068] overlayfs: upper fs needs to support d_type.
[  200.717309][ T5909] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  200.718584][T12068] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  200.725059][ T5909] usb 3-1: USB disconnect, device number 19
[  200.725158][T12068] overlayfs: failed to set xattr on upper
[  200.730887][T12068] overlayfs: ...falling back to redirect_dir=nofollow.
[  200.733887][T12068] overlayfs: ...falling back to metacopy=off.
[  200.734630][ T5909] usblp0: removed
[  200.736895][T12068] overlayfs: ...falling back to index=off.
[  200.741674][T12068] overlayfs: ...falling back to uuid=null.
[  200.782917][  T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  200.782943][  T794] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  200.782961][  T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  200.786335][  T794] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  200.786356][  T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.786371][  T794] usb 1-1: Product: syz
[  200.786380][  T794] usb 1-1: Manufacturer: syz
[  200.786389][  T794] usb 1-1: SerialNumber: syz
[  200.793834][  T794] usb 1-1: config 0 descriptor??
[  200.813244][T12040] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  200.813330][T12040] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  200.817461][  T794] usb 1-1: ucan: probing device on interface #0
[  200.860492][ T5846] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[  200.863572][ T5846] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[  201.156709][ T5873] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.208245][ T5873] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.285453][ T5873] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.334176][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  201.339989][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  201.343462][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  201.346920][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  201.349887][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  201.372537][ T5873] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.420860][  T794] ucan 1-1:0.0: probe with driver ucan failed with error -22
[  201.632107][ T5873] bridge_slave_1: left allmulticast mode
[  201.635465][ T5873] bridge_slave_1: left promiscuous mode
[  201.639155][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.644823][   T24] usb 1-1: USB disconnect, device number 20
[  201.648684][ T5873] bridge_slave_0: left allmulticast mode
[  201.653554][ T5873] bridge_slave_0: left promiscuous mode
[  201.656725][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.737065][T12144] loop2: detected capacity change from 0 to 32768
[  201.813801][T12144] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  201.813813][T12144]   allowing incompatible features above 0.0: (unknown version)
[  201.813817][T12144]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  201.832270][T12144] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  201.836044][T12144] bcachefs (loop2): initializing new filesystem
[  201.846229][T12144] bcachefs (loop2): going read-write
[  201.861748][T12144] bcachefs (loop2): marking superblocks
[  201.884259][T12144] bcachefs (loop2): initializing freespace
[  201.892680][T12144] bcachefs (loop2): done initializing freespace
[  201.903184][T12144] bcachefs (loop2): reading snapshots table
[  201.905828][T12144] bcachefs (loop2): reading snapshots done
[  201.923370][T12144] bcachefs (loop2): done starting filesystem
[  202.024210][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.032534][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.037128][ T5873] bond0 (unregistering): Released all slaves
[  202.055607][T12097] chnl_net:caif_netlink_parms(): no params data found
[  202.170107][ T5853] bcachefs (loop0): shutting down
[  202.172401][ T5853] bcachefs (loop0): going read-only
[  202.178524][ T5853] bcachefs (loop0): finished waiting for writes to stop
[  202.186064][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  202.223160][T12097] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.228075][T12097] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.235161][T12097] bridge_slave_0: entered allmulticast mode
[  202.237357][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  202.238624][T12097] bridge_slave_0: entered promiscuous mode
[  202.242172][ T5853] bcachefs (loop0): clean shutdown complete, journal seq 5
[  202.244374][T12097] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.245868][ T5853] bcachefs (loop0): marking filesystem clean
[  202.248262][T12097] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.256191][T12097] bridge_slave_1: entered allmulticast mode
[  202.262433][T12097] bridge_slave_1: entered promiscuous mode
[  202.275205][ T5853] bcachefs (loop0): shutdown complete
[  202.392752][T12097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.406565][T12097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.412005][ T5850] bcachefs (loop2): shutting down
[  202.418074][ T5850] bcachefs (loop2): going read-only
[  202.430130][ T5850] bcachefs (loop2): finished waiting for writes to stop
[  202.440804][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  202.481013][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  202.486582][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 4
[  202.486842][T12097] team0: Port device team_slave_0 added
[  202.497458][ T5850] bcachefs (loop2): marking filesystem clean
[  202.501458][T12097] team0: Port device team_slave_1 added
[  202.605870][ T5873] hsr_slave_0: left promiscuous mode
[  202.610194][ T5850] bcachefs (loop2): shutdown complete
[  202.618185][ T5873] hsr_slave_1: left promiscuous mode
[  202.622807][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.625326][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.660943][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.663538][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.701705][ T5873] veth1_macvtap: left promiscuous mode
[  202.703830][ T5873] veth0_macvtap: left promiscuous mode
[  202.705777][ T5873] veth1_vlan: left promiscuous mode
[  202.707670][ T5873] veth0_vlan: left promiscuous mode
[  202.955192][T12362] loop0: detected capacity change from 0 to 32768
[  202.962720][T12362] XFS: noikeep mount option is deprecated.
[  202.988515][T12362] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  203.028625][T12362] XFS (loop0): Ending clean mount
[  203.033652][T12362] XFS (loop0): Quotacheck needed: Please wait.
[  203.056604][T12362] XFS (loop0): Quotacheck: Done.
[  203.125916][ T5853] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  203.257109][T12381] loop0: detected capacity change from 0 to 1024
[  203.394160][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  203.420601][   T54] Bluetooth: hci0: command tx timeout
[  203.440321][ T5873] team0 (unregistering): Port device team_slave_0 removed
[  203.892816][T12097] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.895491][T12097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.905300][T12097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.917924][T12097] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.922420][T12097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.935814][T12097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.041130][T12097] hsr_slave_0: entered promiscuous mode
[  204.043674][T12097] hsr_slave_1: entered promiscuous mode
[  204.280196][T12503] program syz.2.578 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  204.292131][T12503] netlink: 'syz.2.578': attribute type 5 has an invalid length.
[  204.377434][T12097] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  204.391295][T12097] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  204.405739][T12097] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  204.414999][T12097] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  204.415919][T12418] loop0: detected capacity change from 0 to 40427
[  204.422833][T12418] F2FS-fs (loop0): Invalid log sectors per block(0) log sectorsize(9)
[  204.426613][T12418] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  204.434070][T12418] F2FS-fs (loop0): invalid crc value
[  204.487703][T12418] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  204.493713][T12418] F2FS-fs (loop0): Start checkpoint disabled!
[  204.500991][T12097] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.502703][T12418] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  204.506986][T12418] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  204.523636][T12097] 8021q: adding VLAN 0 to HW filter on device team0
[  204.542424][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.545567][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.561519][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.564674][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.756637][T12097] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.788044][T12097] veth0_vlan: entered promiscuous mode
[  204.793531][T12097] veth1_vlan: entered promiscuous mode
[  204.808048][T12097] veth0_macvtap: entered promiscuous mode
[  204.814252][T12097] veth1_macvtap: entered promiscuous mode
[  204.826070][T12097] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.835349][T12097] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.843213][T12363] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.847475][T12363] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.860723][T12363] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.873719][T12363] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.881298][T12540] bridge_slave_1: left allmulticast mode
[  204.883899][T12540] bridge_slave_1: left promiscuous mode
[  204.888345][T12540] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.960572][T12543] loop0: detected capacity change from 0 to 128
[  205.009453][   T33] audit: type=1800 audit(1755056550.469:174): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.584" name="bus" dev="loop0" ino=1048601 res=0 errno=0
[  205.095769][T12545] loop2: detected capacity change from 0 to 256
[  205.104042][T12545] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  205.135567][  T563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.141960][  T563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.182349][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.186449][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.254943][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'.
[  205.420856][T12559] loop3: detected capacity change from 0 to 32768
[  205.462449][T12559] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  205.462470][T12559]   allowing incompatible features above 0.0: (unknown version)
[  205.462478][T12559]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  205.478089][T12559] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  205.481911][T12559] bcachefs (loop3): initializing new filesystem
[  205.488690][T12559] bcachefs (loop3): going read-write
[  205.494057][T12559] bcachefs (loop3): marking superblocks
[  205.499533][   T54] Bluetooth: hci0: command tx timeout
[  205.508404][T12559] bcachefs (loop3): initializing freespace
[  205.514146][T12559] bcachefs (loop3): done initializing freespace
[  205.520716][T12559] bcachefs (loop3): reading snapshots table
[  205.523420][T12559] bcachefs (loop3): reading snapshots done
[  205.541754][T12559] bcachefs (loop3): done starting filesystem
[  205.576880][T12097] bcachefs (loop3): shutting down
[  205.579651][T12097] bcachefs (loop3): going read-only
[  205.581901][T12097] bcachefs (loop3): finished waiting for writes to stop
[  205.585388][T12097] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  205.617814][T12097] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  205.623992][T12097] bcachefs (loop3): clean shutdown complete, journal seq 4
[  205.629459][T12097] bcachefs (loop3): marking filesystem clean
[  205.657173][T12097] bcachefs (loop3): shutdown complete
[  206.239179][  T794] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  206.392123][  T794] usb 3-1: unable to get BOS descriptor or descriptor too short
[  206.395968][  T794] usb 3-1: not running at top speed; connect to a high speed hub
[  206.401576][  T794] usb 3-1: config 6 has an invalid descriptor of length 249, skipping remainder of the config
[  206.405768][  T794] usb 3-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  206.411578][  T794] usb 3-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=23.c2
[  206.415116][  T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.418493][  T794] usb 3-1: Product: syz
[  206.421475][  T794] usb 3-1: Manufacturer: syz
[  206.423420][  T794] usb 3-1: SerialNumber: syz
[  206.911524][T12596] loop2: detected capacity change from 0 to 32768
[  206.989186][T12596] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  206.989203][T12596]   allowing incompatible features above 0.0: (unknown version)
[  206.989211][T12596]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  207.008719][T12596] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  207.012402][T12596] bcachefs (loop2): initializing new filesystem
[  207.026728][T12596] bcachefs (loop2): going read-write
[  207.036539][T12596] bcachefs (loop2): marking superblocks
[  207.065811][T12596] bcachefs (loop2): initializing freespace
[  207.074180][T12596] bcachefs (loop2): done initializing freespace
[  207.075670][   T33] audit: type=1800 audit(1755056552.549:175): pid=12623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.595" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  207.094968][T12596] bcachefs (loop2): reading snapshots table
[  207.101063][T12596] bcachefs (loop2): reading snapshots done
[  207.115587][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'.
[  207.129919][T12596] bcachefs (loop2): done starting filesystem
[  207.167916][  T794] usb 3-1: USB disconnect, device number 20
[  207.579073][   T54] Bluetooth: hci0: command tx timeout
[  207.696888][ T5850] bcachefs (loop2): shutting down
[  207.705580][ T5850] bcachefs (loop2): going read-only
[  207.708942][ T5850] bcachefs (loop2): finished waiting for writes to stop
[  207.712927][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  207.745417][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  207.756909][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 4
[  207.761893][ T5850] bcachefs (loop2): marking filesystem clean
[  207.785787][ T5850] bcachefs (loop2): shutdown complete
[  207.972799][T12640] loop3: detected capacity change from 0 to 2048
[  207.976527][T12640] udf: Unknown parameter ''
[  208.039790][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'.
[  208.365842][T12653] loop3: detected capacity change from 0 to 32768
[  208.387253][T12653] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  208.415565][T12653] 
[  208.416757][T12653] ======================================================
[  208.419862][T12653] WARNING: possible circular locking dependency detected
[  208.422905][T12653] 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 Not tainted
[  208.427154][T12653] ------------------------------------------------------
[  208.430250][T12653] syz.3.601/12653 is trying to acquire lock:
[  208.432920][T12653] ffff88811924cf78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  208.436954][T12653] 
[  208.436954][T12653] but task is already holding lock:
[  208.440136][T12653] ffff888022894950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  208.444125][T12653] 
[  208.444125][T12653] which lock already depends on the new lock.
[  208.444125][T12653] 
[  208.448409][T12653] 
[  208.448409][T12653] the existing dependency chain (in reverse order) is:
[  208.452376][T12653] 
[  208.452376][T12653] -> #4 (jbd2_handle){++++}-{0:0}:
[  208.455616][T12653]        lock_acquire+0x120/0x360
[  208.457749][T12653]        start_this_handle+0x1fa7/0x21c0
[  208.460112][T12653]        jbd2__journal_start+0x2c1/0x5b0
[  208.462447][T12653]        jbd2_journal_start+0x2a/0x40
[  208.464761][T12653]        ocfs2_start_trans+0x376/0x6d0
[  208.467184][T12653]        ocfs2_mknod+0xe93/0x2050
[  208.469402][T12653]        ocfs2_create+0x1a5/0x440
[  208.471617][T12653]        path_openat+0x14f4/0x3830
[  208.473891][T12653]        do_filp_open+0x1fa/0x410
[  208.476133][T12653]        do_sys_openat2+0x121/0x1c0
[  208.478539][T12653]        __x64_sys_creat+0x8f/0xc0
[  208.480857][T12653]        do_syscall_64+0xfa/0x3b0
[  208.483108][T12653]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.485913][T12653] 
[  208.485913][T12653] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  208.489541][T12653]        lock_acquire+0x120/0x360
[  208.491741][T12653]        down_read+0x46/0x2e0
[  208.493802][T12653]        ocfs2_start_trans+0x36a/0x6d0
[  208.496193][T12653]        ocfs2_mknod+0xe93/0x2050
[  208.498399][T12653]        ocfs2_create+0x1a5/0x440
[  208.500625][T12653]        path_openat+0x14f4/0x3830
[  208.502874][T12653]        do_filp_open+0x1fa/0x410
[  208.505117][T12653]        do_sys_openat2+0x121/0x1c0
[  208.507376][T12653]        __x64_sys_creat+0x8f/0xc0
[  208.509601][T12653]        do_syscall_64+0xfa/0x3b0
[  208.511804][T12653]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.514592][T12653] 
[  208.514592][T12653] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  208.517805][T12653]        lock_acquire+0x120/0x360
[  208.519972][T12653]        ocfs2_start_trans+0x26b/0x6d0
[  208.522374][T12653]        ocfs2_truncate_file+0x643/0x1420
[  208.524688][T12653]        ocfs2_setattr+0x1520/0x1b40
[  208.526887][T12653]        notify_change+0xb36/0xe40
[  208.529056][T12653]        do_truncate+0x1a4/0x220
[  208.531225][T12653]        path_openat+0x306c/0x3830
[  208.533452][T12653]        do_filp_open+0x1fa/0x410
[  208.535599][T12653]        do_sys_openat2+0x121/0x1c0
[  208.537750][T12653]        __x64_sys_creat+0x8f/0xc0
[  208.539894][T12653]        do_syscall_64+0xfa/0x3b0
[  208.542146][T12653]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.544926][T12653] 
[  208.544926][T12653] -> #1 (&oi->ip_alloc_sem){++++}-{4:4}:
[  208.548314][T12653]        lock_acquire+0x120/0x360
[  208.550519][T12653]        down_write+0x96/0x1f0
[  208.552609][T12653]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  208.555343][T12653]        ocfs2_truncate_file+0xda0/0x1420
[  208.557714][T12653]        ocfs2_setattr+0x1520/0x1b40
[  208.560020][T12653]        notify_change+0xb36/0xe40
[  208.562249][T12653]        do_truncate+0x1a4/0x220
[  208.564407][T12653]        path_openat+0x306c/0x3830
[  208.566639][T12653]        do_filp_open+0x1fa/0x410
[  208.568770][T12653]        do_sys_openat2+0x121/0x1c0
[  208.570901][T12653]        __x64_sys_creat+0x8f/0xc0
[  208.572943][T12653]        do_syscall_64+0xfa/0x3b0
[  208.575103][T12653]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.577829][T12653] 
[  208.577829][T12653] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  208.581207][T12653]        validate_chain+0xb9b/0x2140
[  208.583535][T12653]        __lock_acquire+0xab9/0xd20
[  208.585818][T12653]        lock_acquire+0x120/0x360
[  208.588053][T12653]        down_read+0x46/0x2e0
[  208.590113][T12653]        ocfs2_init_acl+0x2f9/0x720
[  208.592368][T12653]        ocfs2_mknod+0x1321/0x2050
[  208.594592][T12653]        ocfs2_create+0x1a5/0x440
[  208.596777][T12653]        path_openat+0x14f4/0x3830
[  208.599027][T12653]        do_filp_open+0x1fa/0x410
[  208.601212][T12653]        do_sys_openat2+0x121/0x1c0
[  208.603461][T12653]        __x64_sys_creat+0x8f/0xc0
[  208.605674][T12653]        do_syscall_64+0xfa/0x3b0
[  208.607884][T12653]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.610641][T12653] 
[  208.610641][T12653] other info that might help us debug this:
[  208.610641][T12653] 
[  208.614888][T12653] Chain exists of:
[  208.614888][T12653]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  208.614888][T12653] 
[  208.620617][T12653]  Possible unsafe locking scenario:
[  208.620617][T12653] 
[  208.623817][T12653]        CPU0                    CPU1
[  208.626134][T12653]        ----                    ----
[  208.628384][T12653]   rlock(jbd2_handle);
[  208.630214][T12653]                                lock(&journal->j_trans_barrier);
[  208.633590][T12653]                                lock(jbd2_handle);
[  208.636472][T12653]   rlock(&oi->ip_xattr_sem);
[  208.638520][T12653] 
[  208.638520][T12653]  *** DEADLOCK ***
[  208.638520][T12653] 
[  208.641898][T12653] 8 locks held by syz.3.601/12653:
[  208.644134][T12653]  #0: ffff888022890428 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  208.648086][T12653]  #1: ffff88811924d240 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: path_openat+0x8da/0x3830
[  208.652410][T12653]  #2: ffff8881034b26c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  208.657981][T12653]  #3: ffff88811924c3c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  208.663864][T12653]  #4: ffff8881034b60c0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  208.669782][T12653]  #5: ffff888022890618 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  208.673712][T12653]  #6: ffff888126db84e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  208.678283][T12653]  #7: ffff888022894950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  208.682439][T12653] 
[  208.682439][T12653] stack backtrace:
[  208.685026][T12653] CPU: 1 UID: 0 PID: 12653 Comm: syz.3.601 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  208.685051][T12653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.685060][T12653] Call Trace:
[  208.685067][T12653]  <TASK>
[  208.685074][T12653]  dump_stack_lvl+0x189/0x250
[  208.685093][T12653]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.685108][T12653]  ? __pfx__printk+0x10/0x10
[  208.685127][T12653]  ? stack_trace_save+0x9c/0xe0
[  208.685146][T12653]  print_circular_bug+0x2ee/0x310
[  208.685163][T12653]  check_noncircular+0x134/0x160
[  208.685178][T12653]  validate_chain+0xb9b/0x2140
[  208.685197][T12653]  __lock_acquire+0xab9/0xd20
[  208.685216][T12653]  ? ocfs2_init_acl+0x2f9/0x720
[  208.685228][T12653]  lock_acquire+0x120/0x360
[  208.685243][T12653]  ? ocfs2_init_acl+0x2f9/0x720
[  208.685256][T12653]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  208.685270][T12653]  down_read+0x46/0x2e0
[  208.685286][T12653]  ? ocfs2_init_acl+0x2f9/0x720
[  208.685298][T12653]  ocfs2_init_acl+0x2f9/0x720
[  208.685308][T12653]  ? ocfs2_mknod_locked+0x148/0x250
[  208.685328][T12653]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  208.685339][T12653]  ? dquot_alloc_inode+0x216/0xa50
[  208.685351][T12653]  ? ocfs2_block_signals+0x94/0xe0
[  208.685367][T12653]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  208.685383][T12653]  ? ocfs2_init_security_get+0x139/0x1a0
[  208.685398][T12653]  ocfs2_mknod+0x1321/0x2050
[  208.685418][T12653]  ? __pfx_ocfs2_mknod+0x10/0x10
[  208.685434][T12653]  ? __pfx_ocfs2_find_entry+0x10/0x10
[  208.685447][T12653]  ? __lock_acquire+0xab9/0xd20
[  208.685469][T12653]  ? look_up_lock_class+0x74/0x170
[  208.685483][T12653]  ? register_lock_class+0x51/0x320
[  208.685500][T12653]  ? __lock_acquire+0xab9/0xd20
[  208.685518][T12653]  ? __lock_acquire+0xab9/0xd20
[  208.685536][T12653]  ? do_raw_spin_lock+0x121/0x290
[  208.685552][T12653]  ? do_raw_spin_unlock+0x4d/0x240
[  208.685567][T12653]  ? rcu_is_watching+0x15/0xb0
[  208.685579][T12653]  ? ocfs2_lookup+0x5b9/0x9b0
[  208.685597][T12653]  ocfs2_create+0x1a5/0x440
[  208.685614][T12653]  ? __pfx_ocfs2_lookup+0x10/0x10
[  208.685629][T12653]  ? from_kgid+0x1b0/0x650
[  208.685646][T12653]  ? __pfx_ocfs2_create+0x10/0x10
[  208.685662][T12653]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  208.685675][T12653]  ? inode_permission+0x149/0x470
[  208.685686][T12653]  ? __pfx_ocfs2_permission+0x10/0x10
[  208.685701][T12653]  ? bpf_lsm_inode_create+0x9/0x20
[  208.685714][T12653]  ? __pfx_ocfs2_create+0x10/0x10
[  208.685730][T12653]  path_openat+0x14f4/0x3830
[  208.685744][T12653]  ? arch_stack_walk+0xfc/0x150
[  208.685765][T12653]  ? __pfx_path_openat+0x10/0x10
[  208.685778][T12653]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.685795][T12653]  do_filp_open+0x1fa/0x410
[  208.685808][T12653]  ? __lock_acquire+0xab9/0xd20
[  208.685825][T12653]  ? __pfx_do_filp_open+0x10/0x10
[  208.685843][T12653]  ? _raw_spin_unlock+0x28/0x50
[  208.685856][T12653]  ? alloc_fd+0x64c/0x6c0
[  208.685875][T12653]  do_sys_openat2+0x121/0x1c0
[  208.685887][T12653]  ? __se_sys_futex+0x36f/0x400
[  208.685902][T12653]  ? __pfx_do_sys_openat2+0x10/0x10
[  208.685915][T12653]  ? rcu_is_watching+0x15/0xb0
[  208.685928][T12653]  __x64_sys_creat+0x8f/0xc0
[  208.685941][T12653]  do_syscall_64+0xfa/0x3b0
[  208.685955][T12653]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.685968][T12653]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.685979][T12653]  ? exc_page_fault+0x9f/0xf0
[  208.686021][T12653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.686035][T12653] RIP: 0033:0x7fa44e58ebe9
[  208.686054][T12653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.686066][T12653] RSP: 002b:00007fa44f436038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  208.686081][T12653] RAX: ffffffffffffffda RBX: 00007fa44e7b5fa0 RCX: 00007fa44e58ebe9
[  208.686092][T12653] RDX: 0000000000000000 RSI: 0000000000000184 RDI: 0000200000000d80
[  208.686099][T12653] RBP: 00007fa44e611e19 R08: 0000000000000000 R09: 0000000000000000
[  208.686108][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  208.686117][T12653] R13: 00007fa44e7b6038 R14: 00007fa44e7b5fa0 R15: 00007ffe5f636b28
[  208.686130][T12653]  </TASK>
[  208.924725][T12097] ocfs2: Unmounting device (7,3) on (node local)
[  208.935651][ T5315] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  209.088909][ T5315] usb 1-1: Using ep0 maxpacket: 8
[  209.092871][ T5315] usb 1-1: config 0 has no interfaces?
[  209.097299][ T5315] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  209.102448][ T5315] usb 1-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  209.106115][ T5315] usb 1-1: Product: syz
[  209.108062][ T5315] usb 1-1: Manufacturer: syz
[  209.111097][ T5315] usb 1-1: SerialNumber: syz
[  209.114853][ T5315] usb 1-1: config 0 descriptor??
[  209.376869][   T24] usb 1-1: USB disconnect, device number 21
[  209.659475][   T54] Bluetooth: hci0: command tx timeout
[  209.749443][   T47] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  209.911094][   T47] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  209.915496][   T47] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  209.919599][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.925611][   T47] gspca_main: stv0680-2.14.0 probing 041e:4007
[  210.943465][   T47] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71
[  210.947101][   T47] stv0680 3-1:4.0: STV(e): camera ping failed!!
[  210.950342][   T47] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  210.954232][   T47] stv0680 3-1:4.0: last error: 0,  command = 0x0
[  210.958221][   T47] usb 3-1: USB disconnect, device number 21

VM DIAGNOSIS:
03:42:34  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820068de RBX=0000000000000000 RCX=ffff8880435d8000 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc900039fe978
R8 =0000000000000000 R9 =0000000000000002 R10=0000000000000001 R11=0000000000000000
R12=ffff88803afcf710 R13=dffffc0000000000 R14=0000000000000000 R15=0000000000002251
RIP=ffffffff81bfabe7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa44f416e40 CR3=0000000027f82000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000005368 RDI=0000000000005369 RBP=00000000000003f8 RSP=ffffc90003abe8f0
R8 =ffff888108728237 R9 =1ffff110210e5046 R10=dffffc0000000000 R11=ffffffff854e7220
R12=dffffc0000000000 R13=ffffffff99af1902 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e729c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa44f4366c0 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c411975 CR3=0000000111380000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fb496812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
