last executing test programs:

1m50.823295817s ago: executing program 2 (id=620):
r0 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7)
fallocate(r0, 0x0, 0x0, 0x8)
fcntl$addseals(r0, 0x409, 0xe)
ftruncate(r0, 0x0)

1m50.757106374s ago: executing program 2 (id=621):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0xb, r2, 0x0, r3})

1m50.756733863s ago: executing program 2 (id=622):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000c80)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@grpquota}, {@barrier_val}, {@grpjquota}, {}, {}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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")
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0)

1m50.621211146s ago: executing program 2 (id=623):
syz_mount_image$ext4(&(0x7f0000000640)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x1, &(0x7f0000000280)="394c11960344487a54ec1fb2791c0e33688ffdda3ebff2392039ff3057bbe8ba5bd90d814ad7db39c3d2bcb22c120c64ecd4ed29369febcd3b609a66d493aa889b1feb0f73130101b750e0b7261ef82e5fbc43b79ffe23d10f420646ef4900181c9e7282e73f5337f7bd358f5eb4e9c24fdf7501a7643232a6d83eea44cbdcf861dd19b4cfebc4dc2bbe")

1m50.487476699s ago: executing program 2 (id=624):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)="88b0bae0e826425499f4d4ddb99bbe211a", 0x11}, 0x1, 0x0, 0x0, 0x8004}, 0x24044044)

1m50.134838687s ago: executing program 2 (id=625):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0)

1m50.023926216s ago: executing program 32 (id=625):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0)

1m41.635380476s ago: executing program 3 (id=668):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1})
setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48)

1m41.514499511s ago: executing program 3 (id=670):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe4)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x4}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0xe4)
close(r0)

1m41.383183581s ago: executing program 3 (id=672):
unshare(0x4020400)
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x124, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)

1m41.318606399s ago: executing program 3 (id=674):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x43b, &(0x7f0000000440)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91)

1m41.014485376s ago: executing program 3 (id=678):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x40810, 0x3}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7, 0xef5, 0x4}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)

1m40.474865576s ago: executing program 3 (id=681):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x40, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000)

1m40.165670421s ago: executing program 33 (id=681):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x40, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000)

1m33.094853971s ago: executing program 4 (id=709):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x51, 0x1, 0x0, "600000eef2000020000000ddee4f9100000000000000000000ff0057e31e9400"})

1m32.897498352s ago: executing program 4 (id=710):
r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x1000000, 0x59455247, 0x640, 0x4b0, 0x0, @discrete={0x7fff, 0xfff}})

1m32.797030549s ago: executing program 4 (id=711):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x84, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x6, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x51}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1m32.595549385s ago: executing program 4 (id=713):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4c1, &(0x7f0000000e40)="$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")
creat(&(0x7f0000000300)='./bus\x00', 0x110)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, 0x0, 0x0)

1m31.933485669s ago: executing program 4 (id=716):
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4040)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000004000000fd09"], 0x50)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x80, 0x8000, 0x0, 0xb9ff, 0x15})
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYRES8], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3})
r1 = syz_open_pts(r0, 0x101000)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)

1m30.607735249s ago: executing program 4 (id=718):
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x200414, &(0x7f0000000400)=ANY=[@ANYRES16], 0xff, 0x5ad0, &(0x7f000000bec0)="$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")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
write$UHID_INPUT(r0, 0x0, 0x0)
fallocate(r0, 0x8, 0x0, 0x10000)

1m30.422848807s ago: executing program 34 (id=718):
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x200414, &(0x7f0000000400)=ANY=[@ANYRES16], 0xff, 0x5ad0, &(0x7f000000bec0)="$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")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
write$UHID_INPUT(r0, 0x0, 0x0)
fallocate(r0, 0x8, 0x0, 0x10000)

2.925720297s ago: executing program 5 (id=1447):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), 0x0}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xe, &(0x7f000001b700)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', r3, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x200}, 0x8, 0x10, &(0x7f0000000040)={0xfffffffd}, 0x10}, 0x94)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_UIE_ON(r4, 0x7003)
ioctl$RTC_AIE_ON(r4, 0x7001)

1.484316798s ago: executing program 5 (id=1462):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$FUSE(r0, &(0x7f0000005800)={0x2020}, 0x2020)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x40c040, &(0x7f0000000240), 0x3e, 0x518, &(0x7f0000000700)="$eJzs3c9vI1cdAPDvTOJtdjfdpIJDqUSJaFFSQexkQ7cRh4VKiFslULkvIXGiKE4cxU67iSo2EX8AEkKAxIkTB5D4A5BQ/wSEVAnuCBAIwRYOHKCDPLbTrGOTdOtkJOfzkSZ+b36873v2+NlvZuIJ4NqaiYi7EfFBlmWt/FRnftqZIomIo/Z67z9+Z7U1JZFlb/49yRe18q3V5k6Vebu9SczPZrlvJ2fjNg4Ot1ZqtepeJ19pbu9WGgeH85vbKxvVjerO0tLiveXXll9dXhhKOycj4v5X//zD7/3sa/d//YW3//Dgr3PfSTrNi1PtGIqff5hsl1+KiVOLxyNib2jBijXWaU/p/FUn7zyZn+mzWwAAcMm63/M/GxGvxFSM5d/mAAAAgFGSfXky/pNEZGf0mdXHMz35UvQrCwAAAChSml8bm6TlznUAk5Gm5XL7Gt5Pxq20Vm80P79e399Za19DOx2ldH2zVl3oXCs8HaWklV/M0x/m7/bklyLiuYj4wdTNPF9erdfWij74AQAAANfE7Z7x/7+m2uN/AAAAYMRMF10BAAAA4NIZ/wMAAMDoM/4HAACAkfb1N95oTVn3/tdrbx3sb9Xfml+rNrbK2/ur5ay+t1veqNc38t/s2z6vvFq9vvvF2Nl/WGlWG81K4+DwwXZ9f6f5YPOJW2ADAAAAV+i5z7z7+yQijr50M59abhRdKeBKjJ/8uYA/XW5dgKs1VnQFgMJc9KMfGD2loisAFC45Z/nAi3d+M/y6AAAAl2P2U/3P/yfnHhs4Sq+oisAlcfwPri/n/+H6eorz//6PF0ZEKcbCQB6ut8s//59lH6lCAADA0E3mU5KWI/LjAJORpuVyxLP5bQFKyfpmrboQEXci4ndTpWda+cV8y+TcMQMAAAAAAAAAAAAAAAAAAAAAAAAA0JZlSWQAAADASItI/5J07v81O/XyZO/xgRvJv6fyx4h4+ydv/ujhSrO5t9ia/4+T+c0fd+bfbW/zFPcUBQAAAIaoO07vjuMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJjef/zOane6yrh/ez0ipvvFH4+J/HEiShFx659JjJ/aLomIsSHEPzqOiOf7xU9a1YrpTi36xb9ZYPw0Im4PIT5cZ++2+p+v9Hv/pTGTP/Z//93Le6iPb2D/l3TXmMj7uX79z7MXjPHCe7+sDIx/HPHCeP/+p9v/Jp34d3riv9SnvNfvn533rW8eHg6Kn/00Yrbv50/yRKxKc3u30jg4nN/cXtmoblR3lpYW7y2/tvzq8kJlfbNW7fw91SXPnKS+/+lffTCw/dmjuDUg/nRP+3uf/5cHFdrjv+89fPyJdrJ0Jv5xxNxL/fe/5wfETzuffZ/rpFvLZ7vpo3b6tBd/8dsXB7b/OGKt3f7x817/3vbPXbD9r3zju3+84KoAwBVoHBxurdRq1b0CE2NRZPRW4mM9G62vRRdYOY2nqdhR4a/OKCceFRr9xkV2m5NE9qi9jw75rTewwAI7JQAA4FI0DpKiqwAAAAAAAAAAAAAAAAAAAADX3lX+ul7XUTFNBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4v/4XAAD//1JbzHA=")
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r3, 0x1)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r4, 0x1)
flock(r2, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r5, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket(0x28, 0x5, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x40, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@loopback, 0x2, 0x6, 0x9}}]}, 0x40}}, 0x4000800)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)

1.01499593s ago: executing program 1 (id=1466):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

790.66823ms ago: executing program 1 (id=1467):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0)

691.585475ms ago: executing program 1 (id=1470):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x4)

620.432055ms ago: executing program 0 (id=1472):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000cf48b2900000000020000000000a010800000000000000000a0001000000000000797a310000000034000000140a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0xb0}}, 0x0)

609.274039ms ago: executing program 5 (id=1473):
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f0000000d40)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc0000000000000014000000000000000000000034000000040000"], 0x68}, 0x0)

532.898141ms ago: executing program 1 (id=1474):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x3}]}}}]}, 0x3c}}, 0x0)

532.644179ms ago: executing program 5 (id=1475):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010928bd7000000000000218ee449245a2e6"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

529.128033ms ago: executing program 0 (id=1476):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x90)

442.397477ms ago: executing program 5 (id=1477):
syz_mount_image$exfat(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB="ebe050f9a6e26556b98b3a694ca1d9f8df1d1907a2607c94fad06b78ed9f520e602e86e81adc6386a9cd7f05df985b7d7649fbe21aac9ea3cd407d5b9c5b0b7ff5572dc06f5dc6fa7d1206852880bc490a27a1ec2e3d77acc8c7454c8cfc31b1cddd5727a3a7bb058f019d781f3174f03a4f699b28b8ee3491fe8da4a5d8b2431b5b560ae1638b532ebadbb95c3d0ecece79ca4492a146892118cd97d3a346c6e0eccede0661be772eb19221fdc8f58e6d741bd5212bb2a9b57a1666e4bb084eecf00117c99520a8", @ANYRESHEX, @ANYRESHEX], 0x1, 0x1517, &(0x7f00000046c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0)
pwrite64(r0, &(0x7f00000000c0)='#', 0x1, 0x709d)

442.077926ms ago: executing program 0 (id=1478):
r0 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x1}]}, &(0x7f0000000000)=0x10)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)

342.828723ms ago: executing program 1 (id=1479):
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x200})

282.793922ms ago: executing program 1 (id=1480):
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000080)='./control\x00', 0x2000094, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8], 0xec, 0x5ab8, &(0x7f00000090c0)="$eJzs3X+QHNV9IPDXM7Pa1a5WWgkcZDCrRUYJwbG14ofKP1KxkkvsFDguuZxyECcbFrQisiWh0o8AMgkiBz6rwC475VSCnT+IC/vORnFRZS5GoUz4cRJnY6u4+KgrTJ2dw/7DKcKhCqCjXD7v1c70m53pmd6enZ0Vkvh8StqeftPzfa+73/T093XvTgAAAOAN4eide0588Nzf++6fT7562+//w47bw1C5Wj4QFxhJpze/Xi3kZOqvrKxOs/3i1z759Z+OXf8733lg8CuvHdlywdYf/u5Z1z/88SsO3/Olx14ZfvCXzxfFjf3p4pn55MUkhIFvH//LTx156pzpsmTp9M/SgRCWJyseW56EcEdjiPGfhxC2pDMrM/G/+eqlW6ent9/V31S+LLOc/v7GNr2fp/f4/hM3vS386Lc33fH9Vd/4u75DLxyYWSQZaOhPISy9tvH1fSGExen/abG3xf6YpNONIYTBhte9s6Bdb+2w/Wtz5s9Lp4vS6VBBnPj86sx8KbNcdj7qy0wHC+qbr7x2dLtckSWZ+aRHcaO8dmbLv5VOL55j/HK6DuUklJJQqTd/ezLTR0LDfktCUt2XA/X5Un3fhnT9M/NJZr6UmS/3ZdarWm/a0cpJ0lwel8uUx8NxJS2/oPFY3caHGx43LvfmWJa+UV/LLpMJOpR9MLUsrldVbNfxWdpyMpQajkHtyus7Pt0ZQ2nZULKi5TVTbcTnjmy6e0158+NHR3LakTyQpPGTruLv/97yJR+7/+C+7Od6Pf61pTR+qav4P77y2EtXH/zyF3Pjfy7GL3cV/5JHBl+88ok7V+dun+Nx+1S6ij/x/JOfWXX2dYdy239vjD/QVfwNh4/1D5945NHc9o/H7bO4q/jPved9P/naMw+9kBs/xPiDXcXffHjXZ/tHT1yUG//RuH2Guus/Lx9a/+zo6M/G8uI/HeMPdxX/qwf6333fsruuyN2/G+P2Gekq/gcufPiOJSceOj/v2Jnc26tPToA3prPSc6xPp/NNeeZtTYvOmmfO18Uzp+t/PVapnfMtSf8P97KizMlnNk8o0Ou0CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAz1Jve9t/e/78/MvJiJZ3vTx88V6pNY/miEJLFIYQ9eyd2792284axj9+4b/fOie1jE3vHJnfu3X3L2GW/MbZ7ctf2iVumnx1/+6W1160ISW2anN9Sd//U1FRppLks1vfvLjz0ozXv/Jd/DWH8TT8YreS2f+09O+47u83PjGTD1Ht37PvgDy7/23S9RtJ2jbRp19TU1FTIadf/ueoX9/3F8Z9eFML4r8zWrief+61/bGpQtWAmTqrUH2oN6k8G27aj3uq0PXF7VbZu2z45Pvv2nX59OWc9/v0nX/j51ps//4va9h3IXY8Ot+/iDVPbS3+16QP/769urRUUtev12u9F2zuuRWxf3H4D6fZemq7X0pz1quSs153ff/SZb5978JUDYbzy8qrWuovWqy/tAH3JmzuqN9YwmCxvKh9Il497PL5u7d4du9buuWX/27ftmLhh8obJne9ad9m69eOXr798bXXN1/Z4/WP9v9rh+ve+Pz3/L631LvuTA9+KPzvrT83tWjTn7THdruLt0diivPff4Ic/9YV33fPEB2sFRf08Ll0/nqTTwen9vC409LeWl7ddr6L9E0IYa7cdXnrlinDO/9x2R9FxqHHPNP7MSDZMPbX63/72nX+z8jdrBSflON/YoC6P8/VWz7Snur0G0v0xdYpu3/5QTtdrqG271j31RN/dR//1T+vtW7Qo3Dyxd+/udbWfS9KWLknOa9uubGlcr1XVn+WQbpZQ76Zt+uu0vlBrX/b4GRfPbtWh9LmhZEXb9cqKzx3ZdPea8ubHj+Zt6eSBWo2Lw3BtmrwlZ8ntmReW6w1uV/+p+v4r6h+j7/+bBz/y4N9f1tI/Lqn9LFqvJGe9vvHMV7/wlc//x7/v3Xq9/7eOjfzb//rjNbWCU/64Uq41pN7qtD1J43HlkhCK3n+rQvv1yH3/ldqvT9H7L1vPzPLt441l5odCuav36yWPDL545RN3rs59vx6f7f3auLK3Nr2uXPB+PVX6T/b9lVSa27Fw76+mjpJsmPrOp8868NhtG8+tFRR9XtaXbtevL+0g/8hZr3+8+tnRG8f+w//o3XHj67/xzWt+OLHhz2oF3e/32Jbe7PeBdPsO5Gzfeqtj3tm4fd9x/Y3bt9TKi7bz63f+m04L8p94KNlzy/5PTGzfPrl7T2fr1ennaawnu5W7/TyNR7cVBetValmvhXvQyfbq9P0W27+l6+1V67kxzlBIuvpc2P+95Us+dv/BfSMtr0oruraUxi91Ff/HVx576eqDX/5ibvzPxfiVruJPPP/kZ1adfd2h3Pj3Jmn8geL4S0NL/A2Hj/UPn3jk0dz447H9i7tq/3Pved9PvvbMQy/kxg8x/lB32//lQ+ufHR39WW78p5O0nulzpBC++eqlW2vzSehL32+xHX1N7QrZ+SQzX8rMlxvnS3EUIa2gnCTN5XG5tPyChra080c55fEsbGBlbfpanA/ZB7OXn2pKDcf+duVF56kAAGe6eP0/noPG6/+T6YlS/kgDzJhvHrYyJ27Mw2bGc5qvsa5M48fXx3HA0XeE8enp7WO1E/25XkeI74fsOGes56K3NsdoOz5xuLGSav0t45xF4++rM/OxXbXx8kpDHppqzWsqoYPx99Z6Zh9/z6x+8fWssU+3NGusYdwqu//60hGzdvc7ZNpbmY6Q1z+y42Lxfo7RpWFjtb5s/1jcWtdUm/to4n7I3kcT6zk3c+Ds9j6avP4x0rodmtoV+0dcbpb+UW1y8fXI1v0XZtm+M/uvfbTs/pvD/h6YXn6hr8/2YNyw7SHt5I0btrketqE4fqfXw06Jcck28U/yuOSSlvjpG+xUHzeM5XE7VTocT/xITnmvxhPj4SK26/gsbTkZjCcCZ6qY/8fPiOn8f/oE/P9mlivKU7JnjTFe7n1C5fbtKco7Wu/TG+zqc3zz4V2f7R89cVHuec6jnd6nt6tpbrDgvp+i7bgmM1+4HXMGaIryvWw9Rds9e1/GUBjuart/9cA9775v2V1X5G73jbUP0uLt/oWmueGC7X4a5Avt47+e+UIH8eULrfHLr8N9DEXjZ/n5SLnejtnykdBtPpLe+LRQ+cgf5pTPNR8ZbHlQX6+qUzcfmfkgbcpH+k5uuwCA00fM/+vXz9L8/5/jiUV6HlGUt16cmY/xcvPWnPOTvLz1D9LpzZnlh6q/UdE+2GznzR+48OE7lpx46PzcvOXeTvPQ/9w0N1KYh84vb87NIzb25n7x3DyinmfNL0/MbX89T5xfnp5zmbYhT59fHp27fep5dPM4wBeOzWQas8WP4wC58evjAD3Mc385s9DJu1+/YLwuU1mc7XS8rjmPnpqauq2z9nebR0+X9C1tXs/mvHiwN9f10l+fXag8+sM55XPNo4daHtTXq+rUzaOby+XRAMCZKub/8TSumv/3h/BEXKB+P+z8rrPn5gVtz9s7jx/P27N/D6Qe/+kFyStn4vfo+m9x3rfQeetC5/ULPS5x6lz/neoqL17ocaGR6h/wnGv8TsfJXrf7XRckL/7n+qOO8+K0UnkxAACnspj/xzQ/Xv9/IrPcfPOTlvytr3YKOZOfnH75eeNyp3F+flU4Wfl5/+mcn5/u418jXcXP5v/rv5SJf0bm/zO6vC7+2tQZnP9X2yz/BwA4LcX8P/7aY/z7f/81nc/+3foO8/R7s7fzuo7uOnqYV54+HEJ4I+TpPR5ni/Eb7wPowThAS/yTNA5QPr3GAWoPGv6m4Jk0DlDVFwwGAACcBvqqmVLr79l/NJ1mf88+7/fyr85ZvlOV9PT4ur27Jyev2bdry8TeyWt23rhlcs81N+3etnfvZP3ceX7Xd3PzljRv7AuVdHu0Xy6bty1L/x7Cspy/h5BdPoY9r/qg9e8hZKtdXPB3BGb2X2ftzdt/pVmWb9c/8vZ3Xvw/ylk+qu//6//4kmu27rlm285te7dNbN+2f7J5uZHqb1J3/r2Z8TrlnL4vNfOjRWnu398Zd8/82lFqaUdfuj3yvp89ybRjedqS5Xnff5DT7u/+97/4kwunfvG1EMbfVH5L+3bfdX/7xmckG6b+y1WTf7D36A92Tbe/NGv760um7Sr6vtLs8nF9Kttv3LP3bVtv3Lcz+42S3YnjGaX6/ALd15C+/csdjk9szimf6+/vl1senJo6Hp8AAKBJvP4fz2fj9cPPpydQsbwwT99ZW26+149z8/TxzvL07PeSFeXp2eXj+naapw/MM0/P1l+Up7dbvl2enpd358X/w5zl56rzftLFfR6VdDvcf3Bfbj+5trN+kv0+g6J+kl1+rv0kmWc/ydZf1E/aLd+un+Tt97z4H8pZPk9Rf6jU+8P87svJ7Q+f66w//Hpmvqg/ZJefa38ozbM/ZOsv6g/tlm/XH/L2b2v8ctMm783473THqPaLyWtuunH3JxqWW+jvvwitt2R00r5FM69d2O//6Fbn23dh7/uaf/vj1xfmtT9eH1g0p/Z3+vtf829/0fafw31lS0PLfWW57X96fiNhnbd/Yb/fJSNv8dbXn6zx2rTbFd1/VjSOuymnfK7juItaHpyajOPC6yfm//FyT8z/70qnvb4MdPp/T1oXn3PxGHyafY9ZN+dJ870/vug85g33eZ695O7zHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCM0F9ZWZ0evXPPiQ+e+3vf/fPJV2/7/X/YcfuvffLrPx27/ne+88DgV147suWCrT/83bOuf/jjVxy+50uPvTL84C+fLww8Uv1ZuTidHQgheTEJYeDbx//yU0eeOme6LAkhlJORAyEsT1Y8tjzJRBj/eQhhS72dzU9+89VLt05Pb7+rv6l8WSZIdr3CUDm2p7GdIdxcuEachgbSfrb/xE1vCz/67U13fH/VN/6u79ALB2YWSQYa+lMIS69tfH1fCGFx+n9a7G0r44vT6cYQwmDD695Z0K63dtj+tTnz56XTRel0qCBOfH51Zr6UWS47H/Vlpg3rurig6q7ktaPb5YosycxnD0bzldfOWL48nX4rnV48x/jl+D8JpSRU6s3fnsz0kdCw35KQVPflQH2+VN+3IV3/zHySmS9l5st9mfWq1pt2tHKSNJfH5TLl8XBcScsvaDxWt/HhnPI3p9OB9I36WpwP2Qc1Qy0P6utVFdt1fJa2pP5T++JK8Ss7UGo4BrUrr+/4dGcMpWVDyYqW10y1EZ87sunuNeXNjx8dyWlH8kCSxk+6ir//e8uXfOz+g/tW5sW/tpTGL3UV/8dXHnvp6oNf/mJu/M/F+OWu4l/yyOCLVz5x5+rc7XM8bp9KV/Ennn/yM6vOvu5QbvvvjfEHuoq/4fCx/uETjzya2/7xuH0WdxX/ufe87ydfe+ahF3Ljhxh/sKv4mw/v+mz/6ImLcuM/GrfPUHf95+VD658dHf3ZWF78p2P84a7if/XAPe++b9ldV+Tu341x+4x0Ff8DFz58x5ITD52fd+xM7u3VJyfAG9NZ6TnWp9P5bvPM+WrIF/56rFI751uS/h/uZUUZ0/UsXcD4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcmf7p1ss+etV7P7SpkoSQ5Cwz1UZ8rrxow4axLuqdeP7Jz6w6+7pDjWUru4gDAAAAFIt5eKleMhBWhpuSxeG8tsvHMYLz4lzSXJ4dQ4hxsmME3cYptYlT6iJOuUftqfQoTl+P4izqUZz+HsUZKIgzEDqLs3iWOJXpHtBhewZnbU/ncYZ6FGdJj+IMZ0J0G2dpj9qzrEdxRmaN03k/XN6jOCt6FOesHsU5u0dx3tSjOL/Sozjn9ChOw5jyba1xivvhcLrkuXntqT4oF8apJOX6E+3G089J6zl/nvUMFdQzXPR53GE9izus562Z15XmWM9Ah/X86jzrSTqs59fnWU+poJ7Yb2/Oti/WE+c67P+39CjO/h7F+WSP4tzaozh/2qM4f9ajONWDVLn7OACdivn/TL43EvorvxkG0yNOdhQg5rurqj9bP+/yDkgx3lsy5YuK4mUT9Uy8VXNtX3YAIRNvdaa8rylepZ6PzBJvoDHemsyTs63veza0b1tjvIsz5f2zxGtaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cf7p1ss+etV7P7QpJGH6X1tTbcTnyos2bBjrot4jm+5eU978+NHGsv5KF4EAAACAQjEP76uXDIT+yrrQnyxqWm4gHQcYSOfLI7Xp6NKwcXqajJWq84PJ8llfV0lft3bvjl1r99yy/+3bdkzcMHnD5M53rbts3frxy9dfvnbrtu2T47WfIfQXxAshVIcf9tyy/xMT27dP7t5TK8y2f2X6upXpfJK+bvQdYXx6enva/hUF9ZVa6lu4B8V7DwAAAAAAAAAAAPj/7NpbiFxnHQDw78zMzky3jV3pbRqa7ZBLiVo1iVtJtXQPCBaaC1kKMltdS7AJFjdNaJMS69gGbGuCIrQEQiQPRmKxtfjSiy1iLwQiNRpwY5C2aB70QWm1kpY8SMrIzs6Z285k1rFkk/j7PZxv5v/9v+9/vkMI/M8sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBuTZVHJkqjY+ODUQhRl5xKB8lcOhvHxT7qfuWlbT/IDZ9e3hzLZfrYCAAAAOgp6cMH6pF8yGXSIR2urX5bHJomQqPvBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/v9MlUcmSqNj45dGIURdciodJHPpbBwX+6h78r1nPvvG8PDfmmOFPvYBAAAAekv68FQ9kg+FsCQMRNdOd/71aPJuYGHb+pm8hmSfRXPMa3930C1vyRzzbphj3sd65K2vjTsDAAAAXPiS/j9TjwyFXGbBrH446f979fVJ3vVteenaWGxOOqvsXJIAAACAOUj6/1w9Ugi5TKHer8+131/cCFV/Ok/W9/rdPlm/rC0vWd/r9/x1tdHv9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw4Zgqj0yURsfG01EIUZecSgfJXDobx8U+6q56efAfaw4/urg5lsv0sREAAADQU9KHN1rvfMhlBsNAuLTa9w/fduC5Lz33wkgIYabNz2bDzo3bt9+3avoaViV5K48eHvj+kXe+PStv5cx13g4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8aKbKIxOl0bHxS6IQoi45lQ6SuXQ2jot91H3r81/8y1MnXny7OVboYx8AAACgt6QPb/T++VAI2ZANV1e/Nff601Jt67u9MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuHvd/88FvbJyc3HSfD/PzoZIO4Ty4jf/xQ/LP6Xy5nwv/Q36+b2N+/18CAAA+fNeHKFT+S9dsmO+7BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzgdT5ZGJ0ujYeD4KIeqSU+kgmUtn47jYR934pWO5BadffrU5VuhjHwAAAKC3pA9v9P75UAgDYSBcVf3W6Z1Atf8fOoc3CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxXpsojE6XRsfEFUQhRl5xKB8lcOhvHxT7qPrlr/+cOXf6925tjuUwfGwEAAAA9JX14th7Jh1zm4yEXrqt9n2xdEKVrY+f3Ao1121qWDc55XbllXfps66JMCPV1u9tOlqmdZmZdPtlvaGas1ys21qVq64pN6wqhXr5YX1d9WHtbqi3ocb7ZTx4AAADOnaT/z9UjQyGXyTX1/z+tjZfURn0uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANDZVHlkojQ6Nh5FIURdciodJHPpbBwX+6j74G8/etlXf7ZnR3Os0Mc+AAAAQG9JH97o/fOhEBaFj4RF1b4/DLXmJ3n/LJ059MS//ro8hBVXHx/OtG/7o+TDr9+69ZX2Swip1uxUCJfX6kVd6v3m9088sLRy5qkQVlyVvm5WvXD2eq1bxpXnS5vWbT9yfFuPhwMAAAAXiaT/H6hHhkIuc2/X/j/pvHv0/3XVBvzyB3b94sratdaRt61IDdXqpbrU+8LSZ/68bPXf35nu/2fX+2T906f3bzl0ZUvBmUibKK6Mbtmx/vhNB1PJqWfqp9vqJ8/ly996+9+bdz5+ZqZ+PuRr8YVttzJTbfa1rXyIK5OpfeNrP9hXbq2f6XL+R3/36olfLdzz/nT9964frNe/YfqSa68/c/JM1/rhkrgyeMdje2/ef3h9a/0QQrFT/Xffvz1c88d7Hmk//2Dbxs1Pvvna/gDiytHFpw6uPlC4pbV+1FY/ef4/P/Hk3p88/t0XkvrJ34osXzLX+qm2+q/vvmLXaw9vWNhaP9Xl/K/c+cbw1uJ3/tB+/rtbds10vYvZ53/6xmfvenNj/FD7FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMVlqjwyURodG09FIURdciodJHPpbBwX+6h7cs2xd+/c8+MfNscKfewDAAAA9Jb04Y3ePx8KIRuyYbDa9z9f2rRu+5Hj28LQzGxUGzOTW+/f/onNW3fce/c83TkAAAAwVyfXRNX+P1OPDIVcZmkYqPX/o1t2rD9+08FU0v+npscohLD5nslNK0I97/XdV+x67eENC+vvCUKo/llAfjrvM4282249NnTqT19f1jFvVSPv6OJTB1cfKNyS5IXmvJWh/n7i6RufvevNjfFD9ftrzvvU17ZO1l5PJPsO3vHY3pv3H16fSt5j1MbB2r5J3mRq3/jaD/aVU0MhNz2fruXla+cGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGabKo9MlEbHxkM6hKhLTqVZLZDMpbNxXOyj7tqlv3zkstMvLmqO5TJ9bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyHHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzXX4hUVRwH8HNmdts/s6u7GrQVrasVhT0oBRH1UlERGiH0ZEhYmg9REEQU9tAaGokVvQRZLxIVVFsIBrlJosUa/ZNeeqigwHoIRFqoHaSHip05d3b2OrfRWQvKzweGs+fce7/3d+89c2YvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8p/R0jdTaIzseqd550a2fPXX/zJO3f/DQtiueeOunsU03f7q3//WTU5uXb/n2lqWbDjywZnL3K4d/G3zvj2Ntgx+vNytTtzeEeCKG0Pvh9ItPT31+wexYDCGU49B4CMNxyeHhmEtY/XsIYXOjzvkb981cs2W23barZ9744lxI/rpCpZzVUzc0v17+X3rTPNtafeyq8P1N67d/uezdd7onjo/P7RJn9ymn+RTCoo3Nx3eHEPrSZ1Y220ayg1O7LoTQ33TcdW3quvQ0618VQjXXr7k4teelttImJ9u+Itcv5fbL9zPduba/zfkWqqiOTvdrZyDXzy9GC9Woc1Xr8eHUvp/alWeYX84+MZRi6GqU/2CcmyOh/txqK2kMsfYss3UwhlLj2YZ0/bl+zPVLuX65O3ddtfOmiVaOcf54tl9uPFuOu9L48ua1uoW7CsYvTG1v+qKezPoh/0dd5ZQ/GtdVk9U1/Te1/BtKTWtQq/FUb+P5V1KnEpeccsyfLWTbptY/e3l5w0dHhgrqiHtjyo8d5W/9Ynjgnrd3PjpSlL+xlPJLHeX/sPboL3fvfPXlwvwXsvxyR/lXH+w/sfbjHSsK78/03ApyOvkx9bNt9x775Lll59830epZ1zL3ZPe/t6P6b5w82jNYPXiosP7V2f3p6yj/uxtu+/HNr/cfL8wPWX5/R/kbJh9+vme0emVh/qH6d6BSm6EdzJ9fJ679ZnT057Gi/K+y+z/YIj+2zX9jfPf1ry3etaZwfq7L7s9Qyu87o/rvuOzA9oHq/kuK1s6452z9cgKcm5am/7GeSf1275n7Zkot3zMXqul94aWxrvov0ED6DJ7NE+XMnmfRP5gPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xQ4ckAAAAAAI+v+6HYECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUwEAAP//cMgbUA==")

282.544064ms ago: executing program 0 (id=1481):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)

259.412122ms ago: executing program 5 (id=1482):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})

77.089043ms ago: executing program 0 (id=1483):
r0 = fsopen(&(0x7f0000000040)='gfs2meta\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

0s ago: executing program 0 (id=1484):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000140)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

0: entered allmulticast mode
[  160.596493][ T8068] bridge_slave_0: entered promiscuous mode
[  160.619745][ T8068] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.622685][ T8068] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.625579][ T8068] bridge_slave_1: entered allmulticast mode
[  160.653994][ T8068] bridge_slave_1: entered promiscuous mode
[  160.782964][ T8068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.794896][ T8101] loop1: detected capacity change from 0 to 16
[  160.816761][ T8101] erofs (device loop1): mounted with root inode @ nid 36.
[  160.849187][ T8068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.908972][ T8093] loop0: detected capacity change from 0 to 32768
[  160.925167][ T8093] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.965644][ T8068] team0: Port device team_slave_0 added
[  160.986342][ T8068] team0: Port device team_slave_1 added
[  161.013777][ T8093] XFS (loop0): Ending clean mount
[  161.034309][ T8093] XFS (loop0): Quotacheck needed: Please wait.
[  161.091063][ T5707] bridge_slave_1: left allmulticast mode
[  161.093252][ T5707] bridge_slave_1: left promiscuous mode
[  161.096460][ T8093] XFS (loop0): Quotacheck: Done.
[  161.099617][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.105212][ T5707] bridge_slave_0: left allmulticast mode
[  161.108001][ T5707] bridge_slave_0: left promiscuous mode
[  161.110270][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.231174][ T5852] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  161.751135][ T5707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.756624][ T5707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.761914][ T5707] bond0 (unregistering): Released all slaves
[  161.773005][ T8068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.777279][ T8068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.790972][ T8068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.797874][ T8068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.800847][ T8068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.813619][ T8068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.820993][ T8123] netlink: 'syz.0.733': attribute type 29 has an invalid length.
[  161.895797][ T8124] netlink: 'syz.0.733': attribute type 29 has an invalid length.
[  161.924959][ T8125] netlink: 'syz.0.733': attribute type 29 has an invalid length.
[  161.949566][ T5236] Bluetooth: hci2: command tx timeout
[  162.013451][ T8068] hsr_slave_0: entered promiscuous mode
[  162.019988][ T8068] hsr_slave_1: entered promiscuous mode
[  162.023483][ T8068] debugfs: 'hsr0' already exists in 'hsr'
[  162.031254][ T8068] Cannot create hsr debugfs directory
[  162.078776][ T8131] loop0: detected capacity change from 0 to 128
[  162.081711][ T8131] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  162.092149][ T8131] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  162.215645][ T5707] hsr_slave_0: left promiscuous mode
[  162.223371][ T5707] hsr_slave_1: left promiscuous mode
[  162.228293][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.231037][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.243505][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.246092][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.264329][ T5707] veth1_macvtap: left promiscuous mode
[  162.268245][ T5707] veth0_macvtap: left promiscuous mode
[  162.270731][ T5707] veth1_vlan: left promiscuous mode
[  162.272664][ T5707] veth0_vlan: left promiscuous mode

syzkaller
syzkaller login: [  162.745513][ T5707] team0 (unregistering): Port device team_slave_1 removed
[  162.780385][ T5707] team0 (unregistering): Port device team_slave_0 removed
[  163.386858][ T5236] Bluetooth: hci3: command 0xfc11 tx timeout
[  163.387345][ T5854] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  163.504625][ T8068] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  163.535742][ T8068] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  163.548591][ T8068] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  163.559873][ T8068] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  163.677634][ T8068] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.689494][ T8068] 8021q: adding VLAN 0 to HW filter on device team0
[  163.703518][ T4779] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.705974][ T4779] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.722011][ T4779] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.724803][ T4779] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.900295][ T8172] loop0: detected capacity change from 0 to 32768
[  163.912206][ T8068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.980249][ T8172] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  164.013280][ T8172] XFS (loop0): Ending clean mount
[  164.027205][ T5854] Bluetooth: hci2: command tx timeout
[  164.133368][ T5852] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  164.334493][ T8068] veth0_vlan: entered promiscuous mode
[  164.352110][ T8068] veth1_vlan: entered promiscuous mode
[  164.422986][ T8068] veth0_macvtap: entered promiscuous mode
[  164.443109][ T8068] veth1_macvtap: entered promiscuous mode
[  164.455525][ T8068] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.463857][ T8068] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.473633][ T5883] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.482473][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.502175][ T8215] loop1: detected capacity change from 0 to 8
[  164.504268][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.514332][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.648446][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.657890][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.685669][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.693426][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.789549][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.5.719'.
[  164.990479][ T8234] loop5: detected capacity change from 0 to 1024
[  165.940410][ T8247] loop5: detected capacity change from 0 to 32768
[  165.950079][ T8247] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.759 (8247)
[  165.992964][ T8247] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  166.012104][ T8247] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  166.015750][ T8247] BTRFS info (device loop5): using free-space-tree
[  166.028310][ T5904] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  166.117349][ T5854] Bluetooth: hci2: command tx timeout
[  166.167562][   T33] audit: type=1800 audit(1755447922.982:15): pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.759" name="file1" dev="loop5" ino=260 res=0 errno=0
[  166.186717][ T5904] usb 2-1: Using ep0 maxpacket: 8
[  166.200243][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  166.204167][ T5904] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  166.227383][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.239686][ T5904] usb 2-1: config 0 descriptor??
[  166.246629][ T5862] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  166.247744][ T5904] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22
[  166.396609][ T5862] usb 1-1: Using ep0 maxpacket: 32
[  166.406822][ T5862] usb 1-1: unable to get BOS descriptor or descriptor too short
[  166.420469][ T5862] usb 1-1: config 7 has an invalid interface number: 187 but max is 0
[  166.432228][ T5862] usb 1-1: config 7 has no interface number 0
[  166.434514][ T5862] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  166.452057][ T5862] usb 1-1: config 7 interface 187 has no altsetting 0
[  166.465441][ T5904] usb 2-1: USB disconnect, device number 17
[  166.468134][ T5862] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  166.471769][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.494346][ T5862] usb 1-1: Product: syz
[  166.496122][ T5862] usb 1-1: Manufacturer: syz
[  166.499184][ T5862] usb 1-1: SerialNumber: syz
[  166.734955][ T5862] usb 1-1: Unknown endpoint type found, address 0x07
[  166.746819][ T5862] usb 1-1: Unknown endpoint type found, address 0x03
[  166.751557][ T5862] usb 1-1: Not enough endpoints found in device, aborting!
[  166.937501][ T5862] usb 1-1: USB disconnect, device number 14
[  167.030126][ T8068] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  167.096429][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'.
[  167.114853][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'.
[  167.119637][ T8305] netlink: 'syz.1.765': attribute type 18 has an invalid length.
[  167.518781][ T8324] futex_wake_op: syz.0.770 tries to shift op by 32; fix this program
[  167.616610][ T8331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.772'.
[  167.626490][   T52] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  167.737302][ T2258] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  167.777282][   T52] usb 2-1: Using ep0 maxpacket: 16
[  167.786412][   T52] usb 2-1: too many configurations: 212, using maximum allowed: 8
[  167.793179][   T52] usb 2-1: config 6 has no interfaces?
[  167.795946][   T52] usb 2-1: config 6 has no interfaces?
[  167.801078][   T52] usb 2-1: config 6 has no interfaces?
[  167.813162][   T52] usb 2-1: config 6 has no interfaces?
[  167.821903][   T52] usb 2-1: config 6 has no interfaces?
[  167.825140][   T52] usb 2-1: config 6 has no interfaces?
[  167.829427][   T52] usb 2-1: config 6 has no interfaces?
[  167.831390][ T8346] netlink: 'syz.0.777': attribute type 2 has an invalid length.
[  167.833800][ T8346] netlink: 'syz.0.777': attribute type 11 has an invalid length.
[  167.836625][ T8346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.777'.
[  167.841669][   T52] usb 2-1: config 6 has no interfaces?
[  167.849256][   T52] usb 2-1: string descriptor 0 read error: -71
[  167.855289][   T52] usb 2-1: New USB device found, idVendor=0980, idProduct=06fd, bcdDevice=14.8c
[  167.872654][   T52] usb 2-1: New USB device strings: Mfr=54, Product=54, SerialNumber=151
[  167.889958][   T52] usb 2-1: rejected 8 configurations due to insufficient available bus power
[  167.892900][   T52] usb 2-1: no configuration chosen from 8 choices
[  167.894651][ T2258] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  167.907217][ T2258] usb 6-1: config 0 has no interface number 0
[  167.907418][   T52] usb 2-1: USB disconnect, device number 18
[  167.914669][ T2258] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  167.926308][ T2258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.932664][ T2258] usb 6-1: Product: syz
[  167.939376][ T2258] usb 6-1: Manufacturer: syz
[  167.941160][ T2258] usb 6-1: SerialNumber: syz
[  167.960145][ T2258] usb 6-1: config 0 descriptor??
[  168.186658][ T5854] Bluetooth: hci2: command tx timeout
[  168.207553][ T2258] usb 6-1: Found UVC 0.08 device syz (046d:0823)
[  168.210233][ T2258] usb 6-1: No valid video chain found.
[  168.217909][ T2258] usb 6-1: USB disconnect, device number 2
[  169.215359][ T8383] netlink: 'syz.5.785': attribute type 4 has an invalid length.
[  169.613645][ T8390] loop5: detected capacity change from 0 to 40427
[  169.622496][ T8390] F2FS-fs (loop5): invalid crc value
[  169.675375][ T8390] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  169.682873][ T8390] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  169.703661][ T8390] F2FS-fs (loop5): inconsistent node block, node_type:1, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  169.718932][ T8390] bio_check_eod: 15 callbacks suppressed
[  169.718965][ T8390] syz.5.787: attempt to access beyond end of device
[  169.718965][ T8390] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  169.731774][ T8390] syz.5.787: attempt to access beyond end of device
[  169.731774][ T8390] loop5: rw=2049, sector=53256, nr_sectors = 136 limit=40427
[  169.769371][ T8068] syz-executor: attempt to access beyond end of device
[  169.769371][ T8068] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  169.779460][ T8068] CPU: 1 UID: 0 PID: 8068 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  169.779479][ T8068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.779487][ T8068] Call Trace:
[  169.779492][ T8068]  <TASK>
[  169.779498][ T8068]  dump_stack_lvl+0x189/0x250
[  169.779516][ T8068]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.779526][ T8068]  ? __pfx_queue_work_on+0x10/0x10
[  169.779536][ T8068]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  169.779548][ T8068]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  169.779565][ T8068]  f2fs_handle_critical_error+0x37c/0x540
[  169.779613][ T8068]  f2fs_write_end_io+0x886/0xb60
[  169.779640][ T8068]  __submit_merged_bio+0x27a/0x6a0
[  169.779656][ T8068]  ? up_write+0x1c4/0x420
[  169.779674][ T8068]  __submit_merged_write_cond+0x44c/0x530
[  169.779694][ T8068]  f2fs_sync_node_pages+0x1479/0x15e0
[  169.779730][ T8068]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  169.779764][ T8068]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  169.779776][ T8068]  ? up_write+0x1c4/0x420
[  169.779783][ T8068]  ? do_raw_spin_unlock+0x4d/0x240
[  169.779796][ T8068]  f2fs_write_checkpoint+0xe6f/0x1df0
[  169.779818][ T8068]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  169.779852][ T8068]  ? kill_f2fs_super+0x298/0x6c0
[  169.779864][ T8068]  kill_f2fs_super+0x2c3/0x6c0
[  169.779876][ T8068]  ? __pfx_kill_f2fs_super+0x10/0x10
[  169.779883][ T8068]  ? radix_tree_delete_item+0x2b6/0x400
[  169.779899][ T8068]  ? shrinker_free+0x2ce/0x3e0
[  169.779911][ T8068]  deactivate_locked_super+0xbc/0x130
[  169.779923][ T8068]  cleanup_mnt+0x425/0x4c0
[  169.779933][ T8068]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.779946][ T8068]  task_work_run+0x1d4/0x260
[  169.779959][ T8068]  ? __pfx_task_work_run+0x10/0x10
[  169.779968][ T8068]  ? __x64_sys_umount+0x122/0x160
[  169.779982][ T8068]  ? exit_to_user_mode_loop+0x40/0x110
[  169.779997][ T8068]  exit_to_user_mode_loop+0xec/0x110
[  169.780008][ T8068]  do_syscall_64+0x2bd/0x3b0
[  169.780019][ T8068]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.780029][ T8068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.780037][ T8068]  ? exc_page_fault+0x9f/0xf0
[  169.780049][ T8068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.780057][ T8068] RIP: 0033:0x7f769e98ff17
[  169.780066][ T8068] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  169.780075][ T8068] RSP: 002b:00007ffc27390a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  169.780085][ T8068] RAX: 0000000000000000 RBX: 00007f769ea11c05 RCX: 00007f769e98ff17
[  169.780090][ T8068] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc27390b20
[  169.780096][ T8068] RBP: 00007ffc27390b20 R08: 0000000000000000 R09: 0000000000000000
[  169.780100][ T8068] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc27391bb0
[  169.780106][ T8068] R13: 00007f769ea11c05 R14: 00000000000296b4 R15: 00007ffc27391bf0
[  169.780121][ T8068]  </TASK>
[  169.780125][ T8068] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  169.896105][ T8068] CPU: 0 UID: 0 PID: 8068 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  169.896123][ T8068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.896129][ T8068] Call Trace:
[  169.896134][ T8068]  <TASK>
[  169.896138][ T8068]  dump_stack_lvl+0x189/0x250
[  169.896157][ T8068]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.896166][ T8068]  ? __pfx_queue_work_on+0x10/0x10
[  169.896175][ T8068]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  169.896187][ T8068]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  169.896201][ T8068]  f2fs_handle_critical_error+0x37c/0x540
[  169.896217][ T8068]  f2fs_write_end_io+0x886/0xb60
[  169.896234][ T8068]  __submit_merged_bio+0x27a/0x6a0
[  169.896244][ T8068]  ? up_write+0x1c4/0x420
[  169.896257][ T8068]  __submit_merged_write_cond+0x44c/0x530
[  169.896271][ T8068]  f2fs_sync_node_pages+0x1479/0x15e0
[  169.896291][ T8068]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  169.896314][ T8068]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  169.896327][ T8068]  ? up_write+0x1c4/0x420
[  169.896337][ T8068]  ? do_raw_spin_unlock+0x4d/0x240
[  169.896356][ T8068]  f2fs_write_checkpoint+0xe6f/0x1df0
[  169.896380][ T8068]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  169.896411][ T8068]  ? kill_f2fs_super+0x298/0x6c0
[  169.896422][ T8068]  kill_f2fs_super+0x2c3/0x6c0
[  169.896438][ T8068]  ? __pfx_kill_f2fs_super+0x10/0x10
[  169.896448][ T8068]  ? radix_tree_delete_item+0x2b6/0x400
[  169.896472][ T8068]  ? shrinker_free+0x2ce/0x3e0
[  169.896491][ T8068]  deactivate_locked_super+0xbc/0x130
[  169.896505][ T8068]  cleanup_mnt+0x425/0x4c0
[  169.896515][ T8068]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.896527][ T8068]  task_work_run+0x1d4/0x260
[  169.896540][ T8068]  ? __pfx_task_work_run+0x10/0x10
[  169.896548][ T8068]  ? __x64_sys_umount+0x122/0x160
[  169.896562][ T8068]  ? exit_to_user_mode_loop+0x40/0x110
[  169.896601][ T8068]  exit_to_user_mode_loop+0xec/0x110
[  169.896612][ T8068]  do_syscall_64+0x2bd/0x3b0
[  169.896624][ T8068]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.896633][ T8068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.896641][ T8068]  ? exc_page_fault+0x9f/0xf0
[  169.896652][ T8068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.896659][ T8068] RIP: 0033:0x7f769e98ff17
[  169.896669][ T8068] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  169.896676][ T8068] RSP: 002b:00007ffc27390a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  169.896706][ T8068] RAX: 0000000000000000 RBX: 00007f769ea11c05 RCX: 00007f769e98ff17
[  169.896711][ T8068] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc27390b20
[  169.896716][ T8068] RBP: 00007ffc27390b20 R08: 0000000000000000 R09: 0000000000000000
[  169.896721][ T8068] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc27391bb0
[  169.896726][ T8068] R13: 00007f769ea11c05 R14: 00000000000296b4 R15: 00007ffc27391bf0
[  169.896740][ T8068]  </TASK>
[  169.897780][ T8068] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  170.003795][ T8068] CPU: 0 UID: 0 PID: 8068 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  170.003817][ T8068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.003827][ T8068] Call Trace:
[  170.003833][ T8068]  <TASK>
[  170.003839][ T8068]  dump_stack_lvl+0x189/0x250
[  170.003867][ T8068]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.003885][ T8068]  ? __pfx_queue_work_on+0x10/0x10
[  170.003899][ T8068]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  170.003915][ T8068]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  170.003942][ T8068]  f2fs_handle_critical_error+0x37c/0x540
[  170.003967][ T8068]  f2fs_write_end_io+0x886/0xb60
[  170.003999][ T8068]  __submit_merged_bio+0x27a/0x6a0
[  170.004018][ T8068]  ? up_write+0x1c4/0x420
[  170.004039][ T8068]  __submit_merged_write_cond+0x44c/0x530
[  170.004065][ T8068]  f2fs_sync_node_pages+0x1479/0x15e0
[  170.004102][ T8068]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  170.004129][ T8068]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  170.004140][ T8068]  ? up_write+0x1c4/0x420
[  170.004147][ T8068]  ? do_raw_spin_unlock+0x4d/0x240
[  170.004159][ T8068]  f2fs_write_checkpoint+0xe6f/0x1df0
[  170.004181][ T8068]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  170.004215][ T8068]  ? kill_f2fs_super+0x298/0x6c0
[  170.004227][ T8068]  kill_f2fs_super+0x2c3/0x6c0
[  170.004239][ T8068]  ? __pfx_kill_f2fs_super+0x10/0x10
[  170.004245][ T8068]  ? radix_tree_delete_item+0x2b6/0x400
[  170.004260][ T8068]  ? shrinker_free+0x2ce/0x3e0
[  170.004272][ T8068]  deactivate_locked_super+0xbc/0x130
[  170.004286][ T8068]  cleanup_mnt+0x425/0x4c0
[  170.004300][ T8068]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.004319][ T8068]  task_work_run+0x1d4/0x260
[  170.004338][ T8068]  ? __pfx_task_work_run+0x10/0x10
[  170.004351][ T8068]  ? __x64_sys_umount+0x122/0x160
[  170.004374][ T8068]  ? exit_to_user_mode_loop+0x40/0x110
[  170.004395][ T8068]  exit_to_user_mode_loop+0xec/0x110
[  170.004414][ T8068]  do_syscall_64+0x2bd/0x3b0
[  170.004431][ T8068]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.004448][ T8068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.004461][ T8068]  ? exc_page_fault+0x9f/0xf0
[  170.004474][ T8068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.004482][ T8068] RIP: 0033:0x7f769e98ff17
[  170.004491][ T8068] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  170.004499][ T8068] RSP: 002b:00007ffc27390a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  170.004509][ T8068] RAX: 0000000000000000 RBX: 00007f769ea11c05 RCX: 00007f769e98ff17
[  170.004515][ T8068] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc27390b20
[  170.004520][ T8068] RBP: 00007ffc27390b20 R08: 0000000000000000 R09: 0000000000000000
[  170.004525][ T8068] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc27391bb0
[  170.004530][ T8068] R13: 00007f769ea11c05 R14: 00000000000296b4 R15: 00007ffc27391bf0
[  170.004545][ T8068]  </TASK>
[  170.004550][ T8068] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  170.108925][ T8068] CPU: 1 UID: 0 PID: 8068 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  170.108949][ T8068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.108958][ T8068] Call Trace:
[  170.108964][ T8068]  <TASK>
[  170.108970][ T8068]  dump_stack_lvl+0x189/0x250
[  170.108997][ T8068]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.109014][ T8068]  ? __pfx_queue_work_on+0x10/0x10
[  170.109029][ T8068]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  170.109047][ T8068]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  170.109073][ T8068]  f2fs_handle_critical_error+0x37c/0x540
[  170.109099][ T8068]  f2fs_write_end_io+0x886/0xb60
[  170.109127][ T8068]  __submit_merged_bio+0x27a/0x6a0
[  170.109144][ T8068]  ? up_write+0x1c4/0x420
[  170.109165][ T8068]  __submit_merged_write_cond+0x44c/0x530
[  170.109190][ T8068]  f2fs_sync_node_pages+0x1479/0x15e0
[  170.109224][ T8068]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  170.109263][ T8068]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  170.109282][ T8068]  ? up_write+0x1c4/0x420
[  170.109294][ T8068]  ? do_raw_spin_unlock+0x4d/0x240
[  170.109314][ T8068]  f2fs_write_checkpoint+0xe6f/0x1df0
[  170.109348][ T8068]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  170.109409][ T8068]  ? kill_f2fs_super+0x298/0x6c0
[  170.109429][ T8068]  kill_f2fs_super+0x2c3/0x6c0
[  170.109447][ T8068]  ? __pfx_kill_f2fs_super+0x10/0x10
[  170.109459][ T8068]  ? radix_tree_delete_item+0x2b6/0x400
[  170.109483][ T8068]  ? shrinker_free+0x2ce/0x3e0
[  170.109502][ T8068]  deactivate_locked_super+0xbc/0x130
[  170.109521][ T8068]  cleanup_mnt+0x425/0x4c0
[  170.109537][ T8068]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.109589][ T8068]  task_work_run+0x1d4/0x260
[  170.109612][ T8068]  ? __pfx_task_work_run+0x10/0x10
[  170.109627][ T8068]  ? __x64_sys_umount+0x122/0x160
[  170.109650][ T8068]  ? exit_to_user_mode_loop+0x40/0x110
[  170.109672][ T8068]  exit_to_user_mode_loop+0xec/0x110
[  170.109691][ T8068]  do_syscall_64+0x2bd/0x3b0
[  170.109709][ T8068]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.109726][ T8068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.109740][ T8068]  ? exc_page_fault+0x9f/0xf0
[  170.109759][ T8068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.109772][ T8068] RIP: 0033:0x7f769e98ff17
[  170.109786][ T8068] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  170.109838][ T8068] RSP: 002b:00007ffc27390a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  170.109854][ T8068] RAX: 0000000000000000 RBX: 00007f769ea11c05 RCX: 00007f769e98ff17
[  170.109864][ T8068] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc27390b20
[  170.109901][ T8068] RBP: 00007ffc27390b20 R08: 0000000000000000 R09: 0000000000000000
[  170.109910][ T8068] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc27391bb0
[  170.109918][ T8068] R13: 00007f769ea11c05 R14: 00000000000296b4 R15: 00007ffc27391bf0
[  170.109943][ T8068]  </TASK>
[  170.110003][ T8068] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  170.640308][ T8414] loop1: detected capacity change from 0 to 512
[  170.654542][ T8416] netlink: 28 bytes leftover after parsing attributes in process `syz.5.795'.
[  170.662006][ T8414] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  170.672556][ T8414] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  170.676422][ T8414] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.794: Corrupt directory, running e2fsck is recommended
[  170.688015][ T8414] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  170.691337][ T8414] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.794: corrupted in-inode xattr: bad e_name length
[  170.698266][ T8414] EXT4-fs (loop1): Remounting filesystem read-only
[  170.701632][ T8414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.708336][ T8414] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.673885][ T8459] loop0: detected capacity change from 0 to 16
[  171.682272][ T8459] erofs (device loop0): mounted with root inode @ nid 36.
[  171.912592][ T8464] loop0: detected capacity change from 0 to 32768
[  171.969220][ T8464] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.816 (8464)
[  171.980571][ T8468] loop5: detected capacity change from 0 to 32768
[  172.001785][ T8464] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.005965][ T8464] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  172.009283][ T8464] BTRFS info (device loop0): disk space caching is enabled
[  172.012207][ T8464] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  172.030058][ T8468] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  172.045872][   T33] audit: type=1800 audit(1755447928.853:16): pid=8468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.818" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  172.195535][ T8464] BTRFS info (device loop0): rebuilding free space tree
[  172.221452][ T8464] BTRFS info (device loop0): disabling free space tree
[  172.225827][ T8464] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  172.229559][ T8464] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  172.491036][ T8492] btrfs: Unknown parameter '18446744073709551615@LqE: 艞t}0$'
[  172.820159][ T8497] loop1: detected capacity change from 0 to 512
[  172.841250][ T8497] EXT4-fs error (device loop1): ext4_quota_enable:7120: comm syz.1.821: Bad quota inum: 1, type: 2
[  172.861691][ T8497] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix.
[  172.915982][ T8068] ocfs2: Unmounting device (7,5) on (node local)
[  172.922198][ T8497] EXT4-fs (loop1): mount failed
[  172.956523][ T5852] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  173.246143][ T8509] virtio-fs: tag </dev/md0> not found
[  173.411977][ T8520] netlink: 'syz.5.822': attribute type 12 has an invalid length.
[  173.540604][ T8523] loop0: detected capacity change from 0 to 1024
[  173.575534][ T5904] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  173.667559][   T46] hfsplus: b-tree write err: -5, ino 8
[  173.741548][ T5904] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  173.744704][ T5904] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  173.756679][ T5904] usb 2-1: config 220 has an invalid descriptor of length 119, skipping remainder of the config
[  173.760874][ T5904] usb 2-1: config 220 has no interface number 2
[  173.765752][ T5904] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  173.771252][ T5904] usb 2-1: config 220 interface 0 has no altsetting 0
[  173.775770][ T5904] usb 2-1: config 220 interface 76 has no altsetting 0
[  173.805552][ T5904] usb 2-1: config 220 interface 1 has no altsetting 0
[  173.821764][ T5904] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  173.825577][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.828960][ T5904] usb 2-1: Product: syz
[  173.830669][ T5904] usb 2-1: Manufacturer: syz
[  173.832559][ T5904] usb 2-1: SerialNumber: syz
[  174.077301][ T5904] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  174.079826][ T5904] usb 2-1: No valid video chain found.
[  174.082002][ T5904] usb 2-1: selecting invalid altsetting 0
[  174.098782][ T2258] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  174.119862][ T5904] usb 2-1: selecting invalid altsetting 0
[  174.122226][ T5904] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  174.135108][ T5904] usb 2-1: USB disconnect, device number 19
[  174.220899][ T8554] loop0: detected capacity change from 0 to 16
[  174.234106][ T8554] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  174.277589][ T2258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.281823][ T2258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.295282][ T2258] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  174.301546][ T2258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.312204][ T2258] usb 6-1: config 0 descriptor??
[  174.647183][ T5904] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  174.742284][ T2258] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  174.749212][ T8570] syzkaller0: entered promiscuous mode
[  174.751043][ T8570] syzkaller0: entered allmulticast mode
[  174.766842][ T2258] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  174.800207][ T5904] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[  174.803684][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.843875][ T5904] pwc: Logitech/Cisco VT Camera webcam detected.
[  174.949391][ T2258] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE
[  175.267874][ T5904] pwc: send_video_command error -71
[  175.269857][ T5904] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  175.273339][ T5904] Philips webcam 1-1:127.0: probe with driver Philips webcam failed with error -71
[  175.318053][ T5904] usb 1-1: USB disconnect, device number 15
[  175.618413][ T2258] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71
[  175.657413][ T2258] usb 6-1: USB disconnect, device number 3
[  175.897200][ T8587] loop0: detected capacity change from 0 to 128
[  175.900651][ T8587] EXT4-fs: Ignoring removed nobh option
[  175.938751][ T8587] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  175.943356][ T8587] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  176.003443][ T5852] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  176.337924][ T8595] loop5: detected capacity change from 0 to 4096
[  176.354832][ T8595] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  176.391148][ T8595] ntfs3(loop5): ino=1a, mi_enum_attr
[  176.393623][ T8595] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  176.957887][  T792] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  177.149011][  T792] usb 1-1: unable to read config index 0 descriptor/start: -71
[  177.152076][  T792] usb 1-1: can't read configurations, error -71
[  178.032745][ T8607] loop0: detected capacity change from 0 to 32768
[  178.349240][ T8620] netlink: 'syz.0.853': attribute type 5 has an invalid length.
[  180.173488][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.869'.
[  180.177594][  T792] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  180.214970][ T8659] 8021q: adding VLAN 0 to HW filter on device bond1
[  180.218503][ T8656] loop0: detected capacity change from 0 to 4096
[  180.240774][ T8656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.313767][ T8659] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  180.347126][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.352838][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.357460][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.379128][  T792] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  180.381932][  T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.399369][ T8659] vlan2: entered allmulticast mode
[  180.401072][ T8659] bond1: entered allmulticast mode
[  180.411297][  T792] usb 2-1: config 0 descriptor??
[  180.414883][ T8659] gretap1: entered allmulticast mode
[  180.841517][  T792] arvo 0003:1E7D:30D4.0007: bogus close delimiter
[  180.855994][  T792] arvo 0003:1E7D:30D4.0007: item 0 0 2 10 parsing failed
[  180.862378][  T792] arvo 0003:1E7D:30D4.0007: parse failed
[  180.864451][  T792] arvo 0003:1E7D:30D4.0007: probe with driver arvo failed with error -22
[  181.066812][  T792] usb 2-1: USB disconnect, device number 20
[  181.727147][  T792] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  181.899560][  T792] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  181.902441][  T792] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  181.920961][  T792] usb 6-1: config 220 has no interface number 2
[  181.923073][  T792] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  181.945657][  T792] usb 6-1: config 220 interface 0 has no altsetting 0
[  181.963284][  T792] usb 6-1: config 220 interface 76 has no altsetting 0
[  181.972332][  T792] usb 6-1: config 220 interface 1 has no altsetting 0
[  181.984201][  T792] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  181.990009][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.013605][  T792] usb 6-1: Product: syz
[  182.021485][  T792] usb 6-1: Manufacturer: syz
[  182.023389][  T792] usb 6-1: SerialNumber: syz
[  182.294798][  T792] usb 6-1: selecting invalid altsetting 0
[  182.297291][  T792] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  182.303995][  T792] usb 6-1: No valid video chain found.
[  182.336558][  T792] usb 6-1: selecting invalid altsetting 0
[  182.338482][  T792] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  182.372581][  T792] usb 6-1: USB disconnect, device number 4
[  182.390152][ T8701] loop0: detected capacity change from 0 to 131072
[  182.399579][ T8701] F2FS-fs (loop0): invalid crc value
[  182.443841][ T8701] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  182.451975][ T8701] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  182.722208][ T8714] tipc: Started in network mode
[  182.723824][ T8714] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  182.732323][ T8714] tipc: Enabled bearer <eth:team0>, priority 0
[  183.243590][ T8742] loop5: detected capacity change from 0 to 1764
[  183.263185][ T8742] iso9660: Corrupted directory entry in block 2 of inode 1920
[  183.429798][ T8749] loop5: detected capacity change from 0 to 512
[  183.441057][ T8749] EXT4-fs: Ignoring removed bh option
[  183.455299][ T8749] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  183.481410][ T8749] EXT4-fs (loop5): 1 truncate cleaned up
[  183.491108][ T8749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.003350][   T33] audit: type=1800 audit(1755447940.704:17): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.888" name="bus" dev="loop5" ino=18 res=0 errno=0
[  184.024000][ T2258] tipc: Node number set to 11578026
[  184.380715][ T5854] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1
[  184.408397][ T8068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.074335][ T8799] netlink: 60 bytes leftover after parsing attributes in process `syz.1.897'.
[  185.079011][ T8799] unsupported nlmsg_type 40
[  186.384245][ T2258] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  186.551888][ T2258] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  186.561073][ T2258] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  186.565496][ T2258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.574400][ T2258] usb 1-1: config 0 descriptor??
[  186.786706][ T2258] ath6kl: Failed to submit usb control message: -71
[  186.789493][ T2258] ath6kl: unable to send the bmi data to the device: -71
[  186.792060][ T2258] ath6kl: Unable to send get target info: -71
[  186.795705][ T2258] ath6kl: Failed to init ath6kl core: -71
[  186.798378][ T2258] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  186.813160][ T2258] usb 1-1: USB disconnect, device number 18
[  186.913965][   T52] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  187.069366][   T52] usb 2-1: Using ep0 maxpacket: 8
[  187.073303][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.910'.
[  187.077567][   T52] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.081762][   T52] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  187.085560][   T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.095501][   T52] usb 2-1: config 0 descriptor??
[  187.101180][   T52] gspca_main: vc032x-2.14.0 probing 046d:0892
[  187.307332][   T52] gspca_vc032x: reg_r err -71
[  187.309077][   T52] vc032x 2-1:0.0: probe with driver vc032x failed with error -71
[  187.336421][   T52] usb 2-1: USB disconnect, device number 21
[  187.513201][ T8870] loop5: detected capacity change from 0 to 32768
[  187.524354][ T8870] XFS: attr2 mount option is deprecated.
[  187.536524][ T8870] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.560286][ T8870] XFS (loop5): Ending clean mount
[  187.566725][ T8870] XFS (loop5): Quotacheck needed: Please wait.
[  187.609726][ T8870] XFS (loop5): Quotacheck: Done.
[  187.662340][ T8068] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.692226][  T792] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  187.867141][  T792] usb 1-1: Using ep0 maxpacket: 8
[  187.886886][  T792] usb 1-1: config 0 has an invalid interface number: 186 but max is 0
[  187.890241][  T792] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.906570][  T792] usb 1-1: config 0 has no interface number 0
[  187.909067][  T792] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  187.913190][  T792] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  187.938061][  T792] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  187.941697][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.953955][  T792] usb 1-1: Product: syz
[  187.955699][  T792] usb 1-1: Manufacturer: syz
[  187.957581][  T792] usb 1-1: SerialNumber: syz
[  187.976989][  T792] usb 1-1: config 0 descriptor??
[  187.988653][  T792] iowarrior 1-1:0.186: no interrupt-in endpoint found
[  188.097557][ T8892] tmpfs: Bad value for 'mpol'
[  188.192137][ T5904] usb 1-1: USB disconnect, device number 19
[  188.404288][  T792] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  188.423936][ T5854] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  188.427010][ T5854] Bluetooth: hci0: Injecting HCI hardware error event
[  188.431296][ T5854] Bluetooth: hci0: hardware error 0x00
[  188.584682][  T792] usb 2-1: Using ep0 maxpacket: 16
[  188.588789][  T792] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  188.592488][  T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.598311][  T792] usb 2-1: config 0 descriptor??
[  188.606075][  T792] gspca_main: sonixj-2.14.0 probing 0471:0327
[  189.030422][  T792] gspca_sonixj: reg_r err -71
[  189.038759][  T792] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  189.056185][  T792] usb 2-1: USB disconnect, device number 22
[  189.411365][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.934'.
[  189.719355][ T8924] loop5: detected capacity change from 0 to 128
[  189.771290][ T8924] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  189.791317][ T8924] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  189.865416][ T8924] fscrypt (loop5, inode 12): Unsupported encryption flags (0xff)
[  189.935684][ T8068] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  190.347476][ T8945] loop1: detected capacity change from 0 to 512
[  190.352191][ T8943] netlink: 104 bytes leftover after parsing attributes in process `syz.5.944'.
[  190.365709][ T8945] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  190.376573][ T8945] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #17: comm syz.1.945: iget: bad extra_isize 1568 (inode size 256)
[  190.381133][ T8945] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.945: couldn't read orphan inode 17 (err -117)
[  190.387644][ T8945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.405879][   T33] audit: type=1326 audit(1755447947.215:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.1.945" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd3ab8ebe9 code=0x7ffc0000
[  190.418834][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.425477][   T33] audit: type=1326 audit(1755447947.215:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.1.945" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcd3ab8ebe9 code=0x7ffc0000
[  190.433852][   T33] audit: type=1326 audit(1755447947.215:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.1.945" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd3ab8ebe9 code=0x7ffc0000
[  190.450050][   T33] audit: type=1326 audit(1755447947.215:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.1.945" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd3ab8ebe9 code=0x7ffc0000
[  190.457450][   T33] audit: type=1326 audit(1755447947.215:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.1.945" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd3ab8ebe9 code=0x7ffc0000
[  190.469269][ T8948] tipc: Failed to remove unknown binding: 66,1,1/0:1840528442/1840528444
[  190.503735][ T5854] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  190.564093][  T792] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  190.567837][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.950'.
[  190.606990][ T8958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'.
[  190.777021][  T792] usb 1-1: config 1 has an invalid descriptor of length 126, skipping remainder of the config
[  190.783620][  T792] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  190.821441][  T792] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  190.833545][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  190.836956][  T792] usb 1-1: SerialNumber: syz
[  191.059405][  T792] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  191.080569][  T792] usb 1-1: USB disconnect, device number 20
[  191.604013][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  191.935407][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.941720][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  191.946125][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.948805][    T9] usb 6-1: Product: syz
[  191.950318][    T9] usb 6-1: Manufacturer: syz
[  191.951803][    T9] usb 6-1: SerialNumber: syz
[  192.564217][ T8982] loop1: detected capacity change from 0 to 262144
[  192.570348][ T8982] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.962 (8982)
[  192.580867][ T8982] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  192.585373][ T8982] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  192.589048][ T8982] BTRFS info (device loop1): using free-space-tree
[  192.630390][ T8997] loop0: detected capacity change from 0 to 512
[  192.669444][ T8997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.690639][ T8997] ext4 filesystem being mounted at /303/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.726344][  T988] BTRFS warning (device loop1): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x09049c5cc74d15fb level 0
[  192.741869][ T8982] BTRFS info (device loop1): read error corrected: ino 0 off 22036480 (dev /dev/loop1 sector 43040)
[  192.746869][ T8982] BTRFS info (device loop1): read error corrected: ino 0 off 22040576 (dev /dev/loop1 sector 43048)
[  192.751183][ T8982] BTRFS info (device loop1): read error corrected: ino 0 off 22044672 (dev /dev/loop1 sector 43056)
[  192.755922][ T8982] BTRFS info (device loop1): read error corrected: ino 0 off 22048768 (dev /dev/loop1 sector 43064)
[  192.777674][ T1209] BTRFS warning (device loop1): checksum verify failed on logical 30457856 mirror 1 wanted 0x402e75f1de9ccfe6 found 0x42450c21b86dd7c2 level 0
[  192.786031][ T8982] BTRFS info (device loop1): read error corrected: ino 0 off 30457856 (dev /dev/loop1 sector 75872)
[  192.790328][ T8982] BTRFS info (device loop1): read error corrected: ino 0 off 30461952 (dev /dev/loop1 sector 75880)
[  192.795143][ T8982] BTRFS info (device loop1): read error corrected: ino 0 off 30466048 (dev /dev/loop1 sector 75888)
[  192.800383][ T8982] BTRFS info (device loop1): read error corrected: ino 0 off 30470144 (dev /dev/loop1 sector 75896)
[  192.831237][ T8997] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  192.898056][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.955458][ T5856] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  192.978832][    T9] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed
[  193.011707][    T9] cdc_ncm 6-1:1.0: bind() failure
[  193.018210][    T9] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  193.020625][    T9] cdc_ncm 6-1:1.1: bind() failure
[  193.059040][    T9] usb 6-1: USB disconnect, device number 5
[  193.137653][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'.
[  193.453503][   T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  193.595636][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.978'.
[  193.625436][   T10] usb 2-1: Using ep0 maxpacket: 32
[  193.637946][   T10] usb 2-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config
[  193.650245][   T10] usb 2-1: New USB device found, idVendor=04e2, idProduct=1410, bcdDevice=81.85
[  193.669022][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.674787][   T10] usb 2-1: Product: syz
[  193.676656][   T10] usb 2-1: Manufacturer: syz
[  193.678508][   T10] usb 2-1: SerialNumber: syz
[  193.694010][   T10] xr_serial 2-1:253.0: failed to claim sibling interface: -16
[  193.697147][   T10] xr_serial 2-1:253.0: probe with driver xr_serial failed with error -16
[  193.870993][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.879494][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  193.911514][   T10] usb 2-1: USB disconnect, device number 23
[  194.151561][ T9056] loop5: detected capacity change from 0 to 128
[  194.190872][ T9056] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.196613][ T9056] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  194.219755][ T8068] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.273728][ T2258] usb 1-1: new low-speed USB device number 21 using dummy_hcd
[  194.425179][ T2258] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  194.428795][ T2258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.444096][ T2258] usb 1-1: config 0 descriptor??
[  194.474874][ T9062] netlink: 'syz.1.990': attribute type 12 has an invalid length.
[  194.478024][ T9062] netlink: 120 bytes leftover after parsing attributes in process `syz.1.990'.
[  194.493664][   T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  194.539098][ T9064] loop1: detected capacity change from 0 to 256
[  194.574872][ T9064] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  194.594795][ T9064] exFAT-fs (loop1): start_clu is invalid cluster(0x0)
[  194.671866][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  194.681590][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.688429][   T10] usb 6-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00
[  194.692843][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.700820][   T10] usb 6-1: config 0 descriptor??
[  194.755300][ T9068] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.171616][   T10] hid-generic 0003:04F3:0754.0008: failed to start in urb: -90
[  195.365637][   T10] hid-generic 0003:04F3:0754.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.5-1/input0
[  195.535328][   T10] usb 6-1: USB disconnect, device number 6
[  195.750062][ T2258] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  195.754011][ T2258] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  195.765945][ T2258] asix 1-1:0.0: probe with driver asix failed with error -71
[  195.791792][ T2258] usb 1-1: USB disconnect, device number 21
[  196.378566][ T9080] netlink: 92 bytes leftover after parsing attributes in process `syz.1.998'.
[  196.381871][ T9080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.998'.
[  196.435344][ T9087] binder: 9086:9087 ioctl c0306201 2000000003c0 returned -22
[  196.460440][ T9085] loop0: detected capacity change from 0 to 4096
[  196.479189][ T9085] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  197.164234][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'.
[  197.167962][ T9076] ceph: No mds server is up or the cluster is laggy
[  197.748852][ T9125] loop0: detected capacity change from 0 to 256
[  197.942656][ T5917] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  198.114944][ T5917] usb 2-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  198.128098][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.136655][ T5917] usb 2-1: Product: syz
[  198.140867][ T5917] usb 2-1: Manufacturer: syz
[  198.146782][ T5917] usb 2-1: SerialNumber: syz
[  198.178912][ T9127] loop5: detected capacity change from 0 to 32768
[  198.201179][ T5917] usb 2-1: config 0 descriptor??
[  198.220506][ T5917] rndis_host 2-1:0.0: skipping garbage
[  198.240864][ T5917] rndis_host 2-1:0.0: More than one union descriptor, skipping ...
[  198.256913][ T5917] usb 2-1: bad CDC descriptors
[  198.261437][ T5917] cdc_acm 2-1:0.0: skipping garbage
[  198.265627][ T5917] cdc_acm 2-1:0.0: More than one union descriptor, skipping ...
[  198.391890][ T9127] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow
[  198.391917][ T9127]   allowing incompatible features above 0.0: (unknown version)
[  198.391927][ T9127]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  198.415083][ T9127] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  198.417617][    T9] usb 2-1: USB disconnect, device number 24
[  198.418360][ T9127] bcachefs (loop5): initializing new filesystem
[  198.439690][ T9127] bcachefs (loop5): going read-write
[  198.451531][ T9127] bcachefs (loop5): marking superblocks
[  198.497300][ T9127] bcachefs (loop5): initializing freespace
[  198.516736][ T9127] bcachefs (loop5): done initializing freespace
[  198.531008][ T9127] bcachefs (loop5): reading snapshots table
[  198.538044][ T9127] bcachefs (loop5): reading snapshots done
[  198.593966][ T9127] bcachefs (loop5):  loop5: Superblock write was silently dropped! (seq 0 expected 42)
[  198.606334][ T9127] bcachefs (loop5): done starting filesystem
[  198.878240][ T8068] bcachefs (loop5): shutting down
[  198.880305][ T8068] bcachefs (loop5): going read-only
[  198.883278][ T8068] bcachefs (loop5): finished waiting for writes to stop
[  198.887324][ T8068] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  198.915354][ T8068] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  198.921386][ T8068] bcachefs (loop5): clean shutdown complete, journal seq 4
[  198.924142][ T8068] bcachefs (loop5): marking filesystem clean
[  198.944325][ T8068] bcachefs (loop5): shutdown complete
[  199.068032][   T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  199.088100][ T9149] loop1: detected capacity change from 0 to 1024
[  199.127323][  T988] hfsplus: b-tree write err: -5, ino 4
[  199.215815][ T9153] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  199.222485][   T10] usb 1-1: Using ep0 maxpacket: 16
[  199.230792][   T10] usb 1-1: config 8 has an invalid interface number: 206 but max is 0
[  199.234069][   T10] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  199.237700][   T10] usb 1-1: config 8 has no interface number 0
[  199.239819][   T10] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  199.245467][   T10] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  199.254651][   T10] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid wMaxPacketSize 0
[  199.257783][   T10] usb 1-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  199.261663][   T10] usb 1-1: config 8 interface 206 has no altsetting 0
[  199.265992][   T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  199.268687][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.271776][   T10] usb 1-1: Product: syz
[  199.276246][   T10] usb 1-1: Manufacturer: syz
[  199.277945][   T10] usb 1-1: SerialNumber: syz
[  199.420549][ T9161] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1030'.
[  199.491762][   T10] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected
[  199.495369][   T10] garmin_gps ttyUSB0: failed to submit interrupt urb: -90
[  199.498101][   T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90
[  199.504506][   T10] usb 1-1: USB disconnect, device number 22
[  199.507606][   T10] garmin_gps 1-1:8.206: device disconnected
[  199.537666][ T9167] loop1: detected capacity change from 0 to 64
[  199.576467][ T9167] overlayfs: upper fs needs to support d_type.
[  199.590349][ T9167] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  199.601145][ T9167] overlayfs: failed to set xattr on upper
[  199.603854][ T9167] overlayfs: ...falling back to redirect_dir=nofollow.
[  199.606810][ T9167] overlayfs: ...falling back to index=off.
[  199.609466][ T9167] overlayfs: ...falling back to uuid=null.
[  199.751549][ T5856] Trying to free block not in datazone
[  199.761185][ T5856] Trying to free block not in datazone
[  199.771976][ T5856] Trying to free block not in datazone
[  200.314109][ T9171] loop1: detected capacity change from 0 to 32768
[  200.531091][ T9171] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=yes,norecovery,nojournal_transaction_names,read_only
[  200.531107][ T9171]   allowing incompatible features above 0.0: (unknown version)
[  200.531114][ T9171]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  200.551104][ T9171] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  200.556936][ T9171] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  200.559970][ T9171] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  200.559970][ T9171]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  200.639143][ T9171] bcachefs (loop1): btree node read error at btree alloc level 0/0
[  200.639359][ T9171]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  200.639373][ T9171]   loop1 node offset 0/24: got wrong btree node: got
[  200.639382][ T9171]   btree=alloc level=0 seq 98dc7e261 1
[  200.639391][ T9171]   min: POS_MIN
[  200.641118][ T9171]   max: SPOS_MAX
[  200.641133][ T9171]   loop1 btree validate error
[  200.641139][ T9171]   flagging btree alloc lost data
[  200.641144][ T9171]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  200.641220][ T9171]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[  200.641231][ T9171]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[  200.641241][ T9171]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[  200.641299][ T9171]   ret btree_node_read_err_bad_node
[  200.726829][ T9171] bcachefs (loop1): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[  200.753637][ T9171] bcachefs (loop1): btree node read error at btree lru level 0/0
[  200.753656][ T9171]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key 0:196608:0 durability: 1 ptr: 0:28:0 gen 0
[  200.753664][ T9171]   loop1 node offset 0/16: incorrect min_key: got POS_MIN should be 0:196608:0
[  200.753740][ T9171]   loop1 btree validate error
[  200.753746][ T9171]   flagging btree lru lost data
[  200.753750][ T9171]   ret btree_node_read_err_bad_node
[  200.776054][ T9171] bcachefs (loop1): error reading btree root btree=lru level=0: btree_node_read_error, fixing
[  200.783994][ T9171] bcachefs (loop1): btree node read error at btree freespace level 0/0
[  200.784006][ T9171]   u64s 11 type btree_ptr_v2 36591746972385279:U64_MAX:U32_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[  200.784014][ T9171]   loop1 node offset 0/32 bset u64s 0: incorrect max key SPOS_MAX
[  200.784020][ T9171]   loop1 btree validate error
[  200.784076][ T9171]   flagging btree freespace lost data
[  200.784081][ T9171]   ret btree_node_read_err_bad_node
[  200.806844][ T9171] bcachefs (loop1): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[  200.826675][ T9171] bcachefs (loop1): check_topology... done
[  200.834988][ T9171] bcachefs (loop1): accounting_read... done
[  200.843320][ T9171] bcachefs (loop1): alloc_read... done
[  200.846292][ T9171] bcachefs (loop1): snapshots_read... done
[  200.849029][ T9171] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[  200.854382][ T9171] bcachefs (loop1): done starting filesystem
[  200.983394][ T5856] bcachefs (loop1): shutting down
[  201.091891][ T5856] bcachefs (loop1): shutdown complete
[  201.240932][ T9185] loop0: detected capacity change from 0 to 32768
[  201.285423][ T9185] (syz.0.1040,9185,0):ocfs2_verify_heartbeat:830 ERROR: Mismatching o2cb heartbeat modes
[  201.315700][ T9185] (syz.0.1040,9185,0):ocfs2_fill_super:1177 ERROR: status = -22
[  201.685834][ T9190] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  201.941553][ T9204] loop0: detected capacity change from 0 to 1024
[  201.973409][ T9204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.977384][ T9204] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.047790][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.835042][ T9234] netlink: 'syz.5.1060': attribute type 3 has an invalid length.
[  202.837902][ T9234] netlink: 'syz.5.1060': attribute type 1 has an invalid length.
[  202.840495][ T9234] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1060'.
[  202.858221][ T9234] NCSI netlink: No device for ifindex 33022
[  202.998210][ T9236] netlink: 'syz.0.1061': attribute type 5 has an invalid length.
[  203.300023][ T9239] loop5: detected capacity change from 0 to 32768
[  203.341328][ T9239] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  203.410045][ T9239] XFS (loop5): Ending clean mount
[  203.438671][ T9267] batman_adv: batadv0: Adding interface: gretap1
[  203.438748][ T9239] XFS (loop5): Quotacheck needed: Please wait.
[  203.440809][ T9267] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.456305][ T9267] batman_adv: batadv0: Interface activated: gretap1
[  203.540654][ T9239] XFS (loop5): Quotacheck: Done.
[  203.721337][ T9239] XFS (loop5): User initiated shutdown received.
[  203.725789][ T9239] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  203.730718][ T9239] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  203.777492][ T8068] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  204.514885][ T9271] loop0: detected capacity change from 0 to 4096
[  204.554797][ T9271] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  204.593507][ T9271] ntfs3(loop0): Failed to load $Bitmap (-22).
[  204.870187][ T9280] loop9: detected capacity change from 0 to 3
[  204.892505][ T9281] loop5: detected capacity change from 0 to 256
[  204.938527][ T9281] FAT-fs (loop5): Directory bread(block 64) failed
[  204.954070][ T9281] FAT-fs (loop5): Directory bread(block 65) failed
[  204.956217][ T9281] FAT-fs (loop5): Directory bread(block 66) failed
[  204.975006][ T9281] FAT-fs (loop5): Directory bread(block 67) failed
[  204.979114][ T9281] FAT-fs (loop5): Directory bread(block 68) failed
[  205.000694][ T9281] FAT-fs (loop5): Directory bread(block 69) failed
[  205.007479][ T9281] FAT-fs (loop5): Directory bread(block 70) failed
[  205.007754][ T9287] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  205.009699][ T9281] FAT-fs (loop5): Directory bread(block 71) failed
[  205.017009][ T9281] FAT-fs (loop5): Directory bread(block 72) failed
[  205.019383][ T9281] FAT-fs (loop5): Directory bread(block 73) failed
[  205.126066][ T9293] trusted_key: syz.5.1083 sent an empty control message without MSG_MORE.
[  205.197960][ T9297] kernel read not supported for file /eth0 (pid: 9297 comm: syz.5.1085)
[  205.252615][   T33] audit: type=1800 audit(1755447962.047:23): pid=9297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1085" name="eth0" dev="mqueue" ino=19562 res=0 errno=0
[  205.660983][ T9299] loop5: detected capacity change from 0 to 32768
[  205.676510][ T9299] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  205.726164][ T8068] ocfs2: Unmounting device (7,5) on (node local)
[  206.425225][ T9337] hfs: can't find a HFS filesystem on dev nullb0
[  206.561685][   T10] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  206.680441][ T9341] loop5: detected capacity change from 0 to 32768
[  206.683727][ T9341] jfs_mount: Mount Failure: File System Dirty.
[  206.686044][ T9341] Mount JFS Failure: -22
[  206.713377][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  206.716634][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.724126][   T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  206.726877][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.731255][   T10] usb 1-1: config 0 descriptor??
[  206.979606][ T9344] loop1: detected capacity change from 0 to 32768
[  207.282958][   T10] konepure 0003:1E7D:2DBE.0009: unbalanced collection at end of report description
[  207.286596][   T10] konepure 0003:1E7D:2DBE.0009: parse failed
[  207.292161][   T10] konepure 0003:1E7D:2DBE.0009: probe with driver konepure failed with error -22
[  207.317431][ T9344] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow
[  207.317455][ T9344]   allowing incompatible features above 0.0: (unknown version)
[  207.317465][ T9344]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  207.335018][ T9344] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  207.339306][ T9344] bcachefs (loop1): initializing new filesystem
[  207.348871][ T9344] bcachefs (loop1): going read-write
[  207.356931][ T9344] bcachefs (loop1): marking superblocks
[  207.375100][ T9344] bcachefs (loop1): initializing freespace
[  207.387302][ T9344] bcachefs (loop1): done initializing freespace
[  207.393236][ T9344] bcachefs (loop1): reading snapshots table
[  207.395637][ T9344] bcachefs (loop1): reading snapshots done
[  207.412782][ T5904] usb 1-1: USB disconnect, device number 23
[  207.420594][ T9344] bcachefs (loop1):  loop1: Superblock write was silently dropped! (seq 0 expected 42)
[  207.426211][ T9344] bcachefs (loop1): done starting filesystem
[  207.528380][ T5856] bcachefs (loop1): shutting down
[  207.530993][ T5856] bcachefs (loop1): going read-only
[  207.535373][ T5856] bcachefs (loop1): finished waiting for writes to stop
[  207.544200][ T5856] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  207.575778][ T5856] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  207.579987][ T5856] bcachefs (loop1): clean shutdown complete, journal seq 4
[  207.583359][ T5856] bcachefs (loop1): marking filesystem clean
[  207.600047][ T5856] bcachefs (loop1): shutdown complete
[  207.934291][ T9361] loop5: detected capacity change from 0 to 32768
[  207.937522][ T9361] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1110 (9361)
[  207.949279][ T9361] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  207.953217][ T9361] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  207.956457][ T9361] BTRFS info (device loop5): using free-space-tree
[  208.736321][ T9387] gtp0: entered promiscuous mode
[  208.746561][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'.
[  209.146493][ T8068] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  209.331859][ T5904] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  209.488030][ T5904] usb 1-1: config 0 has an invalid interface number: 113 but max is 0
[  209.495723][ T5904] usb 1-1: config 0 has no interface number 0
[  209.500678][ T5904] usb 1-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a
[  209.505970][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.509442][ T5904] usb 1-1: Product: syz
[  209.513344][ T5904] usb 1-1: Manufacturer: syz
[  209.515373][ T5904] usb 1-1: SerialNumber: syz
[  209.548427][ T5904] usb 1-1: config 0 descriptor??
[  210.751455][    T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  210.911622][    T9] usb 2-1: Using ep0 maxpacket: 8
[  210.911918][ T9411] loop5: detected capacity change from 0 to 256
[  210.919262][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  210.920709][ T9411] exfat: Deprecated parameter 'namecase'
[  210.930389][ T9411] exfat: Deprecated parameter 'namecase'
[  210.931502][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.945913][ T9411] exfat: Deprecated parameter 'utf8'
[  210.948103][    T9] usb 2-1: Product: syz
[  210.948122][    T9] usb 2-1: Manufacturer: syz
[  210.948134][    T9] usb 2-1: SerialNumber: syz
[  210.969580][    T9] usb 2-1: config 0 descriptor??
[  210.990083][ T9411] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  210.993754][    T9] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  211.215655][ T5904] snd_usb_variax 1-1:0.113: Line 6 Variax Workbench found
[  211.218140][ T5904] usb 1-1: selecting invalid altsetting 1
[  211.219934][ T5904] snd_usb_variax 1-1:0.113: set_interface failed
[  211.256633][ T5904] snd_usb_variax 1-1:0.113: Line 6 Variax Workbench now disconnected
[  211.259710][ T5904] snd_usb_variax 1-1:0.113: probe with driver snd_usb_variax failed with error -22
[  211.283149][ T5904] usb 1-1: USB disconnect, device number 24
[  211.462636][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'.
[  211.546097][ T9427] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0
[  211.559043][ T9429] mmap: syz.0.1129 (9429) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  211.680400][ T9435] netlink: 'syz.0.1132': attribute type 10 has an invalid length.
[  211.689562][ T9435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1132'.
[  211.694305][ T9435] batadv0: entered promiscuous mode
[  211.696359][ T9435] batadv0: entered allmulticast mode
[  211.699034][ T9435] bridge0: port 3(batadv0) entered blocking state
[  211.721545][ T9435] bridge0: port 3(batadv0) entered disabled state
[  211.743427][ T5918] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  211.747553][ T5918] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  212.464879][    T9] gspca_sonixj: reg_w1 err -71
[  212.467098][    T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  212.473770][    T9] usb 2-1: USB disconnect, device number 25
[  212.816055][ T9451] loop5: detected capacity change from 0 to 32768
[  212.941014][ T9451] bcachefs (loop5): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,compression=lz4
[  212.941031][ T9451]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  212.950052][ T9451] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  212.953955][ T9451] bcachefs (loop5): recovering from clean shutdown, journal seq 8
[  212.957050][ T9451] bcachefs (loop5): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[  212.957050][ T9451]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  212.995421][ T9451] bcachefs (loop5): error reading btree root btree=accounting level=0: btree_node_read_error, fixing
[  213.004214][ T9451] bcachefs (loop5): check_topology... done
[  213.007186][ T9451] bcachefs (loop5): accounting_read... done
[  213.027383][ T9451] bcachefs (loop5): alloc_read... done
[  213.030323][ T9451] bcachefs (loop5): snapshots_read... done
[  213.036502][ T9451] bcachefs (loop5): check_allocations...
[  213.044061][ T9451] bcachefs (loop5): bucket 0:79 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[  213.052666][ T9451] bcachefs (loop5): bucket 0:79 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing
[  213.067513][ T9451]  done
[  213.078196][ T9451] bcachefs (loop5): going read-write
[  213.108795][ T9451] bcachefs (loop5): journal_replay... done
[  213.239303][ T9451] bcachefs (loop5): check_lrus... done
[  213.243254][ T9451] bcachefs (loop5): check_backpointers_to_extents... done
[  213.253618][ T9451] bcachefs (loop5): check_extents_to_backpointers... done
[  213.271552][ T9451] bcachefs (loop5): check_inodes... done
[  213.281217][ T9451] bcachefs (loop5): resume_logged_ops... done
[  213.288130][ T9451] bcachefs (loop5): delete_dead_inodes... done
[  213.306613][ T9451] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean
[  213.310215][ T9451] bcachefs (loop5): check_extents_to_backpointers...
[  213.312990][ T9451] bcachefs (loop5): scanning for missing backpointers in 1/512 buckets
[  213.321505][ T9451]  done
[  213.324269][ T9451] bcachefs (loop5): check_inodes... done
[  213.327503][ T9451] bcachefs (loop5): resume_logged_ops... done
[  213.330591][ T9451] bcachefs (loop5): delete_dead_inodes... done
[  213.336706][ T9451] bcachefs (loop5): done starting filesystem
[  213.413741][ T9481] netlink: 'syz.1.1149': attribute type 21 has an invalid length.
[  213.416588][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'.
[  213.448114][   T33] audit: type=1800 audit(1755447976.260:24): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1139" name="file1" dev="loop5" ino=4101 res=0 errno=0
[  214.046969][   T33] audit: type=1800 audit(1755447976.860:25): pid=9485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1139" name="file1" dev="loop5" ino=4101 res=0 errno=0
[  214.114204][ T9451] syz.5.1139 (9451) used greatest stack depth: 15112 bytes left
[  214.136623][ T8068] bcachefs (loop5): shutting down
[  214.138732][ T8068] bcachefs (loop5): going read-only
[  214.140822][ T8068] bcachefs (loop5): finished waiting for writes to stop
[  214.230048][ T8068] bcachefs (loop5): flushing journal and stopping allocators, journal seq 21
[  214.259756][ T8068] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 21
[  214.267062][ T8068] bcachefs (loop5): clean shutdown complete, journal seq 22
[  214.270760][ T8068] bcachefs (loop5): marking filesystem clean
[  214.313649][ T8068] bcachefs (loop5): shutdown complete
[  214.347515][ T9500] loop1: detected capacity change from 0 to 512
[  214.362142][ T9500] EXT4-fs: Ignoring removed nobh option
[  214.382375][ T9500] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  214.385586][ T9500] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  214.389634][ T9500] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #13: comm syz.1.1156: casefold flag without casefold feature
[  214.398283][ T9500] EXT4-fs (loop1): Remounting filesystem read-only
[  214.404343][ T9500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.416295][ T9500] EXT4-fs (loop1): shut down requested (1)
[  214.442791][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.493119][   T10] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  214.645249][   T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  214.651923][   T10] usb 1-1: config 0 has no interface number 0
[  214.661417][   T10] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  214.665059][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.681295][   T10] usb 1-1: Product: syz
[  214.683062][   T10] usb 1-1: Manufacturer: syz
[  214.684908][   T10] usb 1-1: SerialNumber: syz
[  214.692397][   T10] usb 1-1: config 0 descriptor??
[  214.702750][   T10] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  214.706131][   T10] usb 1-1: selecting invalid altsetting 1
[  214.708334][   T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  214.720808][   T10] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  214.743703][ T9504] loop1: detected capacity change from 0 to 32768
[  214.767616][ T9504] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  214.859039][ T5856] ocfs2: Unmounting device (7,1) on (node local)
[  215.142714][   T10] usb 1-1: USB disconnect, device number 25
[  215.354452][ T9516] loop1: detected capacity change from 0 to 32768
[  215.374162][ T9516] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  215.399711][ T9516] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 3298534883360
[  215.408887][ T9516] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  215.413359][ T9516] OCFS2: File system is now read-only.
[  215.415476][ T9516] (syz.1.1162,9516,1):ocfs2_trim_mainbm:7630 ERROR: status = -30
[  215.495909][ T5856] ocfs2: Unmounting device (7,1) on (node local)
[  215.659175][ T9520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.888155][ T9537] loop5: detected capacity change from 0 to 2048
[  215.895162][ T9537] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  215.909512][ T6084] udevd[6084]: incorrect nilfs2 checksum on /dev/loop5
[  215.912749][ T9539] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  215.916664][ T9537] syz.5.1169: attempt to access beyond end of device
[  215.916664][ T9537] loop5: rw=524288, sector=65534, nr_sectors = 2 limit=2048
[  215.966814][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1171'.
[  215.969818][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1171'.
[  215.974667][ T9542] netlink: 'syz.5.1171': attribute type 18 has an invalid length.
[  216.095372][   T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  216.277043][   T10] usb 2-1: Using ep0 maxpacket: 8
[  216.326340][   T10] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48
[  216.330030][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.357329][   T10] usb 2-1: config 0 descriptor??
[  216.629116][ T5904] usb 2-1: USB disconnect, device number 26
[  216.678324][ T9552] loop5: detected capacity change from 0 to 1024
[  216.688230][ T9552] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  216.766857][ T9552] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5
[  216.774617][ T9552] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  216.779977][ T9552] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1175: Failed to acquire dquot type 0
[  216.794456][ T9552] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  216.810431][ T9552] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.1175: corrupted inode contents
[  216.821755][ T9552] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.1175: mark_inode_dirty error
[  216.830650][ T9552] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.1175: corrupted inode contents
[  216.842450][ T9552] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.1175: mark_inode_dirty error
[  216.848064][ T9552] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.1175: corrupted inode contents
[  216.856986][ T9552] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  216.860351][ T9552] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.1175: corrupted inode contents
[  216.867957][ T9552] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.1175: mark_inode_dirty error
[  216.875957][ T9552] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  216.889267][ T9552] EXT4-fs (loop5): 1 truncate cleaned up
[  216.895556][ T9552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.968927][ T8068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.366508][ T9557] policy can only be matched on NF_INET_PRE_ROUTING
[  217.366531][ T9557] unable to load match
[  217.455493][ T9565] tmpfs: Bad value for 'mpol'
[  217.612803][ T9575] GUP no longer grows the stack in syz.1.1186 (9575): 200000004000-200000005000 (200000002000)
[  217.618814][ T9575] CPU: 1 UID: 0 PID: 9575 Comm: syz.1.1186 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  217.618841][ T9575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.618851][ T9575] Call Trace:
[  217.618858][ T9575]  <TASK>
[  217.618865][ T9575]  dump_stack_lvl+0x189/0x250
[  217.618895][ T9575]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.618913][ T9575]  ? __pfx__printk+0x10/0x10
[  217.618934][ T9575]  ? find_vma+0xe7/0x160
[  217.618961][ T9575]  __get_user_pages+0x24d0/0x2ce0
[  217.619005][ T9575]  ? mtree_load+0x100/0x700
[  217.619034][ T9575]  get_user_pages_remote+0x2f1/0xad0
[  217.619050][ T9575]  ? __pfx_mtree_load+0x10/0x10
[  217.619073][ T9575]  ? __pfx_get_user_pages_remote+0x10/0x10
[  217.619088][ T9575]  ? __access_remote_vm+0x367/0x7d0
[  217.619105][ T9575]  __access_remote_vm+0x211/0x7d0
[  217.619129][ T9575]  ? __pfx___access_remote_vm+0x10/0x10
[  217.619147][ T9575]  ? alloc_pages_noprof+0xbe/0x190
[  217.619199][ T9575]  proc_pid_cmdline_read+0x430/0x810
[  217.619222][ T9575]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  217.619237][ T9575]  ? rw_verify_area+0x2a6/0x4d0
[  217.619258][ T9575]  vfs_readv+0x5aa/0x850
[  217.619272][ T9575]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  217.619288][ T9575]  ? __pfx_vfs_readv+0x10/0x10
[  217.619308][ T9575]  ? __fget_files+0x2a/0x420
[  217.619323][ T9575]  ? __fget_files+0x3a0/0x420
[  217.619333][ T9575]  ? __fget_files+0x2a/0x420
[  217.619351][ T9575]  __x64_sys_preadv+0x197/0x2a0
[  217.619378][ T9575]  ? __pfx___x64_sys_preadv+0x10/0x10
[  217.619395][ T9575]  ? rcu_is_watching+0x15/0xb0
[  217.619411][ T9575]  ? do_syscall_64+0xbe/0x3b0
[  217.619434][ T9575]  do_syscall_64+0xfa/0x3b0
[  217.619452][ T9575]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.619472][ T9575]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.619486][ T9575]  ? exc_page_fault+0x9f/0xf0
[  217.619508][ T9575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.619523][ T9575] RIP: 0033:0x7fcd3ab8ebe9
[  217.619538][ T9575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.619551][ T9575] RSP: 002b:00007fcd38df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  217.619569][ T9575] RAX: ffffffffffffffda RBX: 00007fcd3adb5fa0 RCX: 00007fcd3ab8ebe9
[  217.619581][ T9575] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003
[  217.619591][ T9575] RBP: 00007fcd3ac11e19 R08: 00000000fffffff9 R09: 0000000000000000
[  217.619601][ T9575] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  217.619610][ T9575] R13: 00007fcd3adb6038 R14: 00007fcd3adb5fa0 R15: 00007fffa4d6b4a8
[  217.619635][ T9575]  </TASK>
[  217.787633][ T9573] loop0: detected capacity change from 0 to 32768
[  217.806398][ T9573] 
[  217.806398][ T9573]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.806398][ T9573] 
[  217.824111][ T9573] read_mapping_page failed!
[  217.826206][ T9573] ERROR: (device loop0): txCommit: 
[  217.826206][ T9573] 
[  217.835980][ T9573] jfs_rmdir: dtDelete returned -2
[  217.886273][ T4779] ERROR: (device loop0): diWrite: ixpxd invalid
[  217.886273][ T4779] 
[  217.890287][ T4779] ERROR: (device loop0): txCommit: 
[  217.890287][ T4779] 
[  217.908278][ T4779] jfs_write_inode: jfs_commit_inode failed!
[  217.912429][ T5852] 
[  217.912429][ T5852]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.912429][ T5852] 
[  217.929808][ T5852] 
[  217.929808][ T5852]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.929808][ T5852] 
[  217.997574][ T9583] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1191'.
[  218.007600][ T9583] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1191'.
[  218.061992][ T9579] loop1: detected capacity change from 0 to 32768
[  218.083583][ T9579] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1188 (9579)
[  218.109670][ T9579] BTRFS info (device loop1 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  218.127585][ T9579] BTRFS info (device loop1 state S): using crc32c (crc32c-lib) checksum algorithm
[  218.172954][  T988] BTRFS warning (device loop1 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  218.187004][   T46] BTRFS warning (device loop1 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  218.198793][  T988] BTRFS warning (device loop1 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  218.208255][   T46] BTRFS warning (device loop1 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored
[  218.222481][ T9579] BTRFS error (device loop1 state S): logical 6881280 len 1638400 found bg but no related chunk
[  218.401277][ T5856] BTRFS info (device loop1 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  218.914595][ T9628] loop0: detected capacity change from 0 to 512
[  218.917442][ T9628] EXT4-fs: Ignoring removed bh option
[  218.943158][ T9628] EXT4-fs error (device loop0): __ext4_iget:5464: inode #15: block 1803188595: comm syz.0.1202: invalid block
[  218.962716][ T9628] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1202: couldn't read orphan inode 15 (err -117)
[  218.980330][ T9628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.065914][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.146162][ T9638] loop0: detected capacity change from 0 to 128
[  219.351650][ T9636] loop5: detected capacity change from 0 to 32768
[  219.364563][ T9636] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1206 (9636)
[  219.390949][ T9636] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  219.394922][ T9636] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  219.398251][ T9636] BTRFS info (device loop5): using free-space-tree
[  219.499257][ T9651] loop1: detected capacity change from 0 to 2048
[  219.525383][ T9651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.547839][   T33] audit: type=1800 audit(1755447982.360:26): pid=9636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1206" name="file1" dev="loop5" ino=260 res=0 errno=0
[  219.548431][ T9651] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1208: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  219.616524][ T8068] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  219.679110][ T9640] loop0: detected capacity change from 0 to 32768
[  219.679692][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.705494][ T9640] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  219.717886][ T9640] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  219.736808][ T9640] XFS (loop0): Ending clean mount
[  219.763585][ T9640] XFS (loop0): Quotacheck needed: Please wait.
[  219.792397][ T9640] XFS (loop0): Quotacheck: Done.
[  219.866956][ T5852] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  220.545962][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1215'.
[  220.550027][ T9686] netlink: 336 bytes leftover after parsing attributes in process `syz.5.1215'.
[  220.944657][    T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  221.120024][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.137266][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  221.144119][    T9] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  221.147147][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.162229][    T9] usb 6-1: config 0 descriptor??
[  221.177073][    T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  221.179798][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  221.212033][    T9] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  221.219178][    T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  221.226260][    T9] usb 6-1: media controller created
[  221.248171][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  221.310791][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  221.319373][    T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  221.362148][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11
[  221.401241][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[  221.411742][    T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  221.579926][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  221.602765][    T9] dvb-usb: error while querying for an remote control event.
[  221.706741][    T9] usb 6-1: USB disconnect, device number 7
[  221.763287][    T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  222.217547][ T9710] loop0: detected capacity change from 0 to 32768
[  222.419813][ T9712] loop5: detected capacity change from 0 to 512
[  222.447219][ T9712] EXT4-fs (loop5): orphan cleanup on readonly fs
[  222.457619][ T9712] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1228: bad orphan inode 13
[  222.470805][ T9712] ext4_test_bit(bit=12, block=18) = 1
[  222.476107][ T9712] is_bad_inode(inode)=0
[  222.477779][ T9712] NEXT_ORPHAN(inode)=2130706432
[  222.479640][ T9712] max_ino=32
[  222.491222][ T9712] i_nlink=1
[  222.495322][ T9712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  222.514052][ T9712] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  222.550979][ T9712] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  222.577507][ T8068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.781146][ T5904] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  222.934359][ T5904] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  222.938386][ T5904] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  222.945111][ T5904] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  222.948825][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.963961][ T9715] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  222.976431][ T5904] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  223.189650][ T5904] usb 1-1: USB disconnect, device number 26
[  223.294575][ T9730] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  224.140291][ T9749] loop0: detected capacity change from 0 to 764
[  224.178619][ T9749] Symlink component flag not implemented
[  224.185434][ T9749] Symlink component flag not implemented
[  224.190103][ T9749] Symlink component flag not implemented (129)
[  224.192872][ T9749] Symlink component flag not implemented (6)
[  224.371161][ T5904] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  224.427862][ T9752] loop0: detected capacity change from 0 to 32768
[  224.445931][ T9752] (syz.0.1243,9752,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  224.451598][ T9752] (syz.0.1243,9752,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  224.512676][ T9752] JBD2: Ignoring recovery information on journal
[  224.538787][ T9752] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  224.553040][ T9752] (syz.0.1243,9752,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  224.575603][ T5904] usb 2-1: Using ep0 maxpacket: 32
[  224.590664][ T5904] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  224.594224][ T5904] usb 2-1: config 0 has no interface number 0
[  224.596426][ T5904] usb 2-1: config 0 interface 12 has no altsetting 0
[  224.602767][ T5904] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  224.605989][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.608936][ T5904] usb 2-1: Product: syz
[  224.610412][ T5904] usb 2-1: Manufacturer: syz
[  224.612911][ T5904] usb 2-1: SerialNumber: syz
[  224.617484][ T5904] usb 2-1: config 0 descriptor??
[  224.631889][ T9752] (syz.0.1243,9752,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC.
[  224.636306][ T9752] (syz.0.1243,9752,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c
[  224.640007][ T9752] (syz.0.1243,9752,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  224.643780][ T9752] (syz.0.1243,9752,0):ocfs2_quota_read:201 ERROR: status = -5
[  224.646638][ T9752] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota
[  224.650102][ T9752] (syz.0.1243,9752,0):ocfs2_acquire_dquot:890 ERROR: status = -5
[  224.734876][ T5852] ocfs2: Unmounting device (7,0) on (node local)
[  224.991631][ T9764] nbd0: detected capacity change from 0 to 127
[  224.999750][ T6133] block nbd0: Receive control failed (result -32)
[  225.017133][ T8747] block nbd0: Dead connection, failed to find a fallback
[  225.020482][ T8747] block nbd0: shutting down sockets
[  225.030621][ T8747] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.036935][ T8747] Buffer I/O error on dev nbd0, logical block 0, async page read
[  225.040229][ T8747] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.058573][ T8747] Buffer I/O error on dev nbd0, logical block 1, async page read
[  225.071198][ T8747] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.074634][ T8747] Buffer I/O error on dev nbd0, logical block 2, async page read
[  225.077677][ T8747] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.084456][ T8747] Buffer I/O error on dev nbd0, logical block 3, async page read
[  225.087726][ T8747] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.095961][ T8747] Buffer I/O error on dev nbd0, logical block 0, async page read
[  225.099190][ T8747] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.104953][ T8747] Buffer I/O error on dev nbd0, logical block 1, async page read
[  225.108171][ T8747] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.114753][ T8747] Buffer I/O error on dev nbd0, logical block 2, async page read
[  225.118112][ T8747] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.124065][ T8747] Buffer I/O error on dev nbd0, logical block 3, async page read
[  225.127330][ T8747] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.131243][ T8747] Buffer I/O error on dev nbd0, logical block 0, async page read
[  225.134800][ T8747] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.138697][ T8747] Buffer I/O error on dev nbd0, logical block 1, async page read
[  225.147932][ T8747] ldm_validate_partition_table(): Disk read failed.
[  225.159069][ T8747] Dev nbd0: unable to read RDB block 0
[  225.167195][ T8747]  nbd0: unable to read partition table
[  225.197785][ T8747] ldm_validate_partition_table(): Disk read failed.
[  225.205047][ T8747] Dev nbd0: unable to read RDB block 0
[  225.208960][ T8747]  nbd0: unable to read partition table
[  225.246585][ T5904] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71
[  225.249784][ T5904] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  225.255198][ T5904] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  225.263354][ T5904] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  225.311781][ T5904] usb 2-1: USB disconnect, device number 27
[  225.323014][ T9776] loop5: detected capacity change from 0 to 1024
[  225.348956][ T9776] hfsplus: xattr searching failed
[  225.395106][ T1209] hfsplus: bad catalog file entry
[  225.397619][ T1209] hfsplus: b-tree write err: -5, ino 3
[  225.427527][ T9780] capability: warning: `syz.5.1256' uses 32-bit capabilities (legacy support in use)
[  227.014385][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'.
[  227.129376][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'.
[  227.157674][ T9813] batadv1: entered allmulticast mode
[  227.160684][ T9815] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1269'.
[  228.818916][ T9848] loop1: detected capacity change from 0 to 1024
[  228.938321][ T9852] loop0: detected capacity change from 0 to 2048
[  229.003261][ T9852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.018038][ T9852] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.467535][   T33] audit: type=1800 audit(1755447992.240:27): pid=9871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1283" name="file0" dev="loop0" ino=13 res=0 errno=0
[  229.600198][ T9870] loop5: detected capacity change from 0 to 32768
[  229.607109][ T9870] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1290 (9870)
[  229.641576][ T9870] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  229.645236][ T9870] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  229.648137][ T9870] BTRFS info (device loop5): using free-space-tree
[  229.781421][ T9868] loop1: detected capacity change from 0 to 40427
[  229.839131][ T9868] F2FS-fs (loop1): invalid crc value
[  229.870613][   T33] audit: type=1804 audit(1755447992.680:28): pid=9870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1290" name="/newroot/207/file0/file1" dev="loop5" ino=260 res=1 errno=0
[  229.879891][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.962633][ T9868] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  229.995149][ T9895] BTRFS error (device loop5): balance: mixed groups data and metadata options must be the same
[  230.011543][ T9868] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  230.098790][ T9868] syz.1.1288: attempt to access beyond end of device
[  230.098790][ T9868] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  230.149733][ T8068] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  230.178044][ T5856] syz-executor: attempt to access beyond end of device
[  230.178044][ T5856] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  230.191182][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  230.191205][ T5856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  230.191215][ T5856] Call Trace:
[  230.191221][ T5856]  <TASK>
[  230.191228][ T5856]  dump_stack_lvl+0x189/0x250
[  230.191253][ T5856]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.191270][ T5856]  ? __pfx_queue_work_on+0x10/0x10
[  230.191284][ T5856]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  230.191301][ T5856]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  230.191323][ T5856]  f2fs_handle_critical_error+0x37c/0x540
[  230.191346][ T5856]  f2fs_write_end_io+0x886/0xb60
[  230.191372][ T5856]  __submit_merged_bio+0x27a/0x6a0
[  230.191397][ T5856]  __submit_merged_write_cond+0x255/0x530
[  230.191421][ T5856]  f2fs_write_data_pages+0x261d/0x3000
[  230.191439][ T5856]  ? __lock_acquire+0xab9/0xd20
[  230.191482][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  230.191535][ T5856]  ? __mod_zone_page_state+0xd7/0x140
[  230.191562][ T5856]  ? folios_put_refs+0x560/0x640
[  230.191585][ T5856]  ? __pfx_folios_put_refs+0x10/0x10
[  230.191597][ T5856]  ? rcu_is_watching+0x15/0xb0
[  230.191618][ T5856]  ? __lock_acquire+0xab9/0xd20
[  230.191649][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  230.191669][ T5856]  do_writepages+0x32e/0x550
[  230.191702][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[  230.191723][ T5856]  filemap_fdatawrite+0x199/0x240
[  230.191745][ T5856]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  230.191805][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[  230.191824][ T5856]  f2fs_sync_dirty_inodes+0x31f/0x830
[  230.191851][ T5856]  f2fs_write_checkpoint+0x95a/0x1df0
[  230.191884][ T5856]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  230.191935][ T5856]  ? kill_f2fs_super+0x298/0x6c0
[  230.191954][ T5856]  kill_f2fs_super+0x2c3/0x6c0
[  230.191972][ T5856]  ? __pfx_kill_f2fs_super+0x10/0x10
[  230.191983][ T5856]  ? radix_tree_delete_item+0x2b6/0x400
[  230.192005][ T5856]  ? shrinker_free+0x2ce/0x3e0
[  230.192054][ T5856]  deactivate_locked_super+0xbc/0x130
[  230.192073][ T5856]  cleanup_mnt+0x425/0x4c0
[  230.192087][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.192107][ T5856]  task_work_run+0x1d4/0x260
[  230.192128][ T5856]  ? __pfx_task_work_run+0x10/0x10
[  230.192144][ T5856]  ? __x64_sys_umount+0x122/0x160
[  230.192166][ T5856]  ? exit_to_user_mode_loop+0x40/0x110
[  230.192187][ T5856]  exit_to_user_mode_loop+0xec/0x110
[  230.192204][ T5856]  do_syscall_64+0x2bd/0x3b0
[  230.192222][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.192239][ T5856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.192252][ T5856]  ? exc_page_fault+0x9f/0xf0
[  230.192271][ T5856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.192284][ T5856] RIP: 0033:0x7fcd3ab8ff17
[  230.192298][ T5856] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  230.192310][ T5856] RSP: 002b:00007fffa4d6a738 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  230.192326][ T5856] RAX: 0000000000000000 RBX: 00007fcd3ac11c05 RCX: 00007fcd3ab8ff17
[  230.192335][ T5856] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa4d6a7f0
[  230.192344][ T5856] RBP: 00007fffa4d6a7f0 R08: 0000000000000000 R09: 0000000000000000
[  230.192352][ T5856] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffa4d6b880
[  230.192361][ T5856] R13: 00007fcd3ac11c05 R14: 0000000000038293 R15: 00007fffa4d6b8c0
[  230.192385][ T5856]  </TASK>
[  230.192391][ T5856] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  230.552745][ T9894] loop0: detected capacity change from 0 to 32768
[  230.578266][ T9894] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1291 (9894)
[  230.647293][ T9894] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  230.663847][ T9894] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  230.667339][ T9894] BTRFS info (device loop0): using free-space-tree
[  230.708638][ T9901] bpf: Bad value for 'gid'
[  230.859229][ T9916] loop5: detected capacity change from 0 to 256
[  230.890794][ T9916] exfat: Deprecated parameter 'utf8'
[  230.899137][ T9916] exfat: Deprecated parameter 'namecase'
[  230.929664][ T9916] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  231.194216][ T5852] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  231.674492][ T9926] loop5: detected capacity change from 0 to 32768
[  231.684093][ T9926] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1296 (9926)
[  231.895379][ T9926] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  231.898802][ T9926] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  231.914140][ T9926] BTRFS info (device loop5): using free-space-tree
[  231.997471][ T9934] loop0: detected capacity change from 0 to 32768
[  232.129879][ T9929] syz.1.1297 (9929): drop_caches: 2
[  232.265519][ T8068] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  232.275219][ T9934] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  232.275235][ T9934]   allowing incompatible features above 0.0: (unknown version)
[  232.275241][ T9934]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  232.297029][ T9934] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  232.300468][ T9934] bcachefs (loop0): initializing new filesystem
[  232.309480][ T9934] bcachefs (loop0): going read-write
[  232.319653][ T9934] bcachefs (loop0): marking superblocks
[  232.378040][ T9934] bcachefs (loop0): initializing freespace
[  232.385982][ T9934] bcachefs (loop0): done initializing freespace
[  232.411713][ T9934] bcachefs (loop0): reading snapshots table
[  232.413699][ T9934] bcachefs (loop0): reading snapshots done
[  232.467172][ T9934] bcachefs (loop0): done starting filesystem
[  232.760286][ T5852] bcachefs (loop0): shutting down
[  232.764154][ T5852] bcachefs (loop0): going read-only
[  232.766005][ T5852] bcachefs (loop0): finished waiting for writes to stop
[  232.773675][ T5852] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  233.050216][ T5852] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  233.054462][ T5852] bcachefs (loop0): clean shutdown complete, journal seq 4
[  233.057399][ T5852] bcachefs (loop0): marking filesystem clean
[  233.075321][ T5852] bcachefs (loop0): shutdown complete
[  233.893772][ T9982] loop5: detected capacity change from 0 to 32768
[  234.268324][   T33] audit: type=1400 audit(1755447997.080:29): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=9987 comm="syz.0.1304"
[  234.765108][T10013] loop5: detected capacity change from 0 to 4096
[  234.981823][T10009] loop0: detected capacity change from 0 to 32768
[  234.998207][T10009] (syz.0.1319,10009,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  235.019092][T10009] (syz.0.1319,10009,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  235.064803][T10009] JBD2: Ignoring recovery information on journal
[  235.068401][T10025] Device name not specified.
[  235.068401][T10025] 
[  235.147076][T10009] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  235.225095][ T5852] ocfs2: Unmounting device (7,0) on (node local)
[  235.446727][T10044] loop0: detected capacity change from 0 to 1024
[  235.450402][T10044] EXT4-fs: Ignoring removed orlov option
[  235.454777][T10044] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  235.530779][T10044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.559774][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.870380][ T5854] Bluetooth: hci2: link tx timeout
[  235.875013][ T5854] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  236.218864][T10052] loop0: detected capacity change from 0 to 32768
[  236.249397][T10052] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  236.281111][ T5854] Bluetooth: hci2: link tx timeout
[  236.283227][ T5854] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  236.356386][T10052] XFS (loop0): Ending clean mount
[  236.396676][ T5852] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  236.401323][T10068] bridge0: port 3(syz_tun) entered blocking state
[  236.407332][T10068] bridge0: port 3(syz_tun) entered disabled state
[  236.410089][T10068] syz_tun: entered allmulticast mode
[  236.422074][T10068] syz_tun: entered promiscuous mode
[  236.424555][T10068] bridge0: port 3(syz_tun) entered blocking state
[  236.443679][T10068] bridge0: port 3(syz_tun) entered forwarding state
[  236.754581][T10058] loop5: detected capacity change from 0 to 40427
[  236.775079][T10058] F2FS-fs (loop5): Image doesn't support compression
[  236.777832][T10058] F2FS-fs (loop5): build fault injection rate: 690
[  236.790958][T10058] F2FS-fs (loop5): invalid crc value
[  236.964150][T10077] netlink: 'syz.0.1341': attribute type 29 has an invalid length.
[  237.198738][T10082] loop0: detected capacity change from 0 to 512
[  237.210440][T10082] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  237.222171][T10082] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  237.230067][T10082] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  237.235499][T10082] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  237.239730][T10082] System zones: 0-2, 18-18, 34-35
[  237.246427][T10058] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  237.252563][T10082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.258291][T10058] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  237.299869][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.361583][ T8068] syz-executor: attempt to access beyond end of device
[  237.361583][ T8068] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  237.369699][ T8068] CPU: 1 UID: 0 PID: 8068 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  237.369727][ T8068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  237.369737][ T8068] Call Trace:
[  237.369745][ T8068]  <TASK>
[  237.369752][ T8068]  dump_stack_lvl+0x189/0x250
[  237.369781][ T8068]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.369799][ T8068]  ? __pfx_queue_work_on+0x10/0x10
[  237.369815][ T8068]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  237.369835][ T8068]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  237.369864][ T8068]  f2fs_handle_critical_error+0x37c/0x540
[  237.369893][ T8068]  f2fs_write_end_io+0x886/0xb60
[  237.369926][ T8068]  __submit_merged_bio+0x27a/0x6a0
[  237.369953][ T8068]  __submit_merged_write_cond+0x255/0x530
[  237.369980][ T8068]  f2fs_write_data_pages+0x261d/0x3000
[  237.370000][ T8068]  ? __lock_acquire+0xab9/0xd20
[  237.370054][ T8068]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  237.370140][ T8068]  ? __pfx_stack_trace_save+0x10/0x10
[  237.370183][ T8068]  ? __lock_acquire+0xab9/0xd20
[  237.370213][ T8068]  ? do_raw_spin_lock+0x121/0x290
[  237.370242][ T8068]  ? do_raw_spin_unlock+0x4d/0x240
[  237.370261][ T8068]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  237.370284][ T8068]  do_writepages+0x32e/0x550
[  237.370317][ T8068]  ? do_raw_spin_unlock+0x4d/0x240
[  237.370339][ T8068]  filemap_fdatawrite+0x199/0x240
[  237.370395][ T8068]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  237.370462][ T8068]  ? do_raw_spin_unlock+0x4d/0x240
[  237.370485][ T8068]  f2fs_sync_dirty_inodes+0x31f/0x830
[  237.370517][ T8068]  f2fs_write_checkpoint+0x95a/0x1df0
[  237.370574][ T8068]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  237.370639][ T8068]  ? kill_f2fs_super+0x298/0x6c0
[  237.370661][ T8068]  kill_f2fs_super+0x2c3/0x6c0
[  237.370684][ T8068]  ? __pfx_kill_f2fs_super+0x10/0x10
[  237.370697][ T8068]  ? radix_tree_delete_item+0x2b6/0x400
[  237.370727][ T8068]  ? shrinker_free+0x2ce/0x3e0
[  237.370747][ T8068]  deactivate_locked_super+0xbc/0x130
[  237.370770][ T8068]  cleanup_mnt+0x425/0x4c0
[  237.370788][ T8068]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.370811][ T8068]  task_work_run+0x1d4/0x260
[  237.370835][ T8068]  ? __pfx_task_work_run+0x10/0x10
[  237.370852][ T8068]  ? __x64_sys_umount+0x122/0x160
[  237.370877][ T8068]  ? exit_to_user_mode_loop+0x40/0x110
[  237.370902][ T8068]  exit_to_user_mode_loop+0xec/0x110
[  237.370924][ T8068]  do_syscall_64+0x2bd/0x3b0
[  237.370944][ T8068]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.370963][ T8068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.370978][ T8068]  ? exc_page_fault+0x9f/0xf0
[  237.370999][ T8068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.371014][ T8068] RIP: 0033:0x7f769e98ff17
[  237.371030][ T8068] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  237.371042][ T8068] RSP: 002b:00007ffc27390a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  237.371059][ T8068] RAX: 0000000000000000 RBX: 00007f769ea11c05 RCX: 00007f769e98ff17
[  237.371069][ T8068] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc27390b20
[  237.371077][ T8068] RBP: 00007ffc27390b20 R08: 0000000000000000 R09: 0000000000000000
[  237.371086][ T8068] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc27391bb0
[  237.371095][ T8068] R13: 00007f769ea11c05 R14: 0000000000039eb1 R15: 00007ffc27391bf0
[  237.371128][ T8068]  </TASK>
[  237.394058][T10087] loop0: detected capacity change from 0 to 256
[  237.412997][ T8068] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  237.442147][T10087] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  237.677722][T10091] loop0: detected capacity change from 0 to 256
[  237.685498][T10091] exfat: Deprecated parameter 'utf8'
[  237.706021][T10091] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  237.793731][T10096] loop0: detected capacity change from 0 to 512
[  237.862904][T10096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.867127][T10096] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  237.898050][T10096] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.945137][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[  239.201037][ T5904] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  239.361079][ T5904] usb 6-1: Using ep0 maxpacket: 8
[  239.368235][ T5904] usb 6-1: unable to get BOS descriptor or descriptor too short
[  239.373626][ T5904] usb 6-1: config 4 interface 0 has no altsetting 0
[  239.379897][ T5904] usb 6-1: string descriptor 0 read error: -22
[  239.385570][ T5904] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  239.390332][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.400657][T10115] loop1: detected capacity change from 0 to 131072
[  239.425604][ T5904] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  239.425913][T10115] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  239.452727][ T5904] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  239.457466][ T5904] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  239.460571][ T5904] usb 6-1: media controller created
[  239.474050][T10115] XFS (loop1): Starting recovery (logdev: internal)
[  239.488510][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  239.493581][T10115] XFS (loop1): Ending recovery (logdev: internal)
[  239.605468][ T5856] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  239.620327][ T5904] zl10353_read_register: readreg error (reg=127, ret==0)
[  239.686010][ T5904] usb 6-1: USB disconnect, device number 8
[  240.074344][T10139] fuse: Bad value for 'fd'
[  240.182851][    T9] usb 2-1: new low-speed USB device number 28 using dummy_hcd
[  240.245574][T10147] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1368'.
[  240.356933][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  240.361533][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  240.370754][    T9] usb 2-1: string descriptor 0 read error: -22
[  240.374100][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  240.389495][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.417161][    T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  240.424639][    T9] usb 2-1: MIDIStreaming interface descriptor not found
[  240.623656][ T5904] usb 2-1: USB disconnect, device number 28
[  240.825332][T10163] loop5: detected capacity change from 0 to 32768
[  241.370474][T10195] netlink: 'syz.1.1390': attribute type 1 has an invalid length.
[  241.374906][T10195] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1390'.
[  241.381277][ T5904] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  241.549779][ T5904] usb 6-1: unable to get BOS descriptor or descriptor too short
[  241.579105][ T5904] usb 6-1: config 84 has an invalid interface number: 111 but max is 0
[  241.584058][ T5904] usb 6-1: config 84 has no interface number 0
[  241.588479][ T5904] usb 6-1: config 84 interface 111 has no altsetting 0
[  241.596752][ T5904] usb 6-1: language id specifier not provided by device, defaulting to English
[  241.614076][ T5904] usb 6-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=33.f0
[  241.622485][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.631249][ T5904] usb 6-1: Product: Ъ
[  241.640422][ T5904] usb 6-1: SerialNumber: 麡珏גּ줺귮癲ꋧ⌗컹야髰蹏铏܎䖎鯫湼샘婜ꁤ齯Ἑᢱ벗/￭蠾쬯ꃯ▋뵻薱⾡䴢㒟瀪慠欗삅탯睌࢔קּ狴
[  241.848699][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'.
[  241.854865][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'.
[  241.858556][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'.
[  242.002770][ T5904] usb 6-1: bad CDC descriptors
[  242.032467][ T5904] usb 6-1: USB disconnect, device number 9
[  243.005980][T10237] netlink: 'syz.0.1409': attribute type 3 has an invalid length.
[  243.009103][T10237] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1409'.
[  243.124188][T10243] tipc: Failed to remove unknown binding: 66,1,1/0:2775898798/2775898800
[  243.128612][T10243] tipc: Failed to remove unknown binding: 66,1,1/0:2775898798/2775898800
[  243.226511][T10246] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1413'.
[  243.592617][    T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  243.741122][    T9] usb 2-1: Using ep0 maxpacket: 32
[  243.746621][    T9] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.749534][    T9] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  243.754507][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  243.756957][    T9] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  243.760483][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.768478][    T9] usb 2-1: config 0 descriptor??
[  243.795491][T10259] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  244.073424][T10264] loop5: detected capacity change from 0 to 4096
[  244.272173][    T9] betop 0003:20BC:5500.000A: unbalanced collection at end of report description
[  244.281486][T10264] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  244.284662][    T9] betop 0003:20BC:5500.000A: parse failed
[  244.292031][    T9] betop 0003:20BC:5500.000A: probe with driver betop failed with error -22
[  244.297804][T10264] ntfs3(loop5): Failed to load $Extend (-22).
[  244.303246][T10264] ntfs3(loop5): Failed to initialize $Extend.
[  244.383988][   T52] usb 2-1: USB disconnect, device number 29
[  244.892977][T10271] overlayfs: failed to clone upperpath
[  245.047689][T10279] IPVS: sh: TCP 172.20.20.170:0 - no destination available
[  245.137034][T10286] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1430'.
[  245.145257][T10286] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  246.640430][T10305] loop1: detected capacity change from 0 to 32768
[  246.655940][T10305] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry (unknown data_type 206): 1/13 [0 0 0 0 0 0 0 0 0 0 1 6 108]
[  246.655940][T10305] replicas_v0 (size 24):
[  246.655940][T10305] btree: 1 [0] journal: 1 [0] user: 1 [0] (unknown data_type 206): 13 [0 0 0 0 0 108 1 0 0 6 0 0 0]
[  246.655940][T10305] 
[  246.677093][T10305] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  247.793743][T10344] random: crng reseeded on system resumption
[  247.956310][T10349] geneve2: entered promiscuous mode
[  248.187456][T10354] netlink: 'syz.0.1461': attribute type 15 has an invalid length.
[  248.325888][T10361] loop5: detected capacity change from 0 to 512
[  248.358663][T10361] EXT4-fs (loop5): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  248.367847][T10361] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  248.379925][T10361] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (fffc1829)
[  248.385188][T10361] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  248.450684][T10352] loop1: detected capacity change from 0 to 32768
[  248.469316][T10352] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  248.518492][ T5856] ocfs2: Unmounting device (7,1) on (node local)
[  249.166635][T10384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1472'.
[  249.244707][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1475'.
[  249.310707][T10394] loop5: detected capacity change from 0 to 256
[  249.350803][T10394] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d)
[  249.405152][T10394] exFAT-fs (loop5): error, data size is invalid(17179870234)
[  249.419853][T10394] exFAT-fs (loop5): Filesystem has been set read-only
[  249.521654][T10402] netlink: 'syz.0.1481': attribute type 23 has an invalid length.
[  354.750868][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  354.753318][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=42733, q=138 ncpus=2)
[  354.756195][    C0] rcu: All QSes seen, last rcu_preempt kthread activity 10498 (4294972633-4294962135), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  354.762172][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10497 jiffies! g42733 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x200
[  354.767088][    C0] rcu: 	Possible timer handling issue on cpu=1 timer-softirq=15360
[  354.770347][    C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g42733 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x200 ->cpu=1
[  354.774629][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  354.778137][    C0] rcu: RCU grace-period kthread stack dump:
[  354.780386][    C0] task:rcu_preempt     state:R stack:27160 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  354.785034][    C0] Call Trace:
[  354.786379][    C0]  <TASK>
[  354.787557][    C0]  __schedule+0x1798/0x4cc0
[  354.789350][    C0]  ? irqentry_exit+0x74/0x90
[  354.791131][    C0]  ? __pfx___schedule+0x10/0x10
[  354.793003][    C0]  ? schedule+0x91/0x360
[  354.794289][    C0]  ? lock_acquire+0x175/0x360
[  354.795737][    C0]  ? schedule+0x91/0x360
[  354.797097][    C0]  schedule+0x165/0x360
[  354.798786][    C0]  schedule_timeout+0x12b/0x270
[  354.800726][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  354.802851][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  354.805149][    C0]  ? __pfx_process_timeout+0x10/0x10
[  354.807235][    C0]  ? prepare_to_swait_event+0x341/0x380
[  354.809423][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  354.811334][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  354.813762][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  354.815881][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  354.817976][    C0]  ? finish_swait+0xcd/0x1f0
[  354.819477][    C0]  rcu_gp_kthread+0x99/0x390
[  354.820933][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  354.822795][    C0]  ? __kthread_parkme+0x7b/0x200
[  354.824757][    C0]  ? __kthread_parkme+0x1a1/0x200
[  354.826780][    C0]  kthread+0x711/0x8a0
[  354.828417][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  354.830488][    C0]  ? __pfx_kthread+0x10/0x10
[  354.832361][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  354.834430][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  354.836548][    C0]  ? __pfx_kthread+0x10/0x10
[  354.838388][    C0]  ret_from_fork+0x3fc/0x770
[  354.840217][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  354.842271][    C0]  ? __switch_to_asm+0x39/0x70
[  354.844194][    C0]  ? __switch_to_asm+0x33/0x70
[  354.846089][    C0]  ? __pfx_kthread+0x10/0x10
[  354.847958][    C0]  ret_from_fork_asm+0x1a/0x30
[  354.849915][    C0]  </TASK>
[  354.851140][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  354.853629][    C0] Sending NMI from CPU 0 to CPUs 1:
[  354.855698][    C1] NMI backtrace for cpu 1
[  354.855716][    C1] CPU: 1 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  354.855727][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  354.855733][    C1] RIP: 0010:timerqueue_del+0xe5/0x100
[  354.855748][    C1] Code: bd ad f6 4d 89 36 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 29 bc ad f6 48 83 3b 00 0f 95 c0 5b 41 5c 41 5d 41 5e <41> 5f 5d e9 13 d3 06 00 cc e8 bd 52 4a f6 90 0f 0b 90 e9 5a ff ff
[  354.855756][    C1] RSP: 0018:ffffc900001e0d28 EFLAGS: 00000046
[  354.855764][    C1] RAX: 1ffff11026cc4f00 RBX: ffff888136627bc8 RCX: dffffc0000000000
[  354.855770][    C1] RDX: 0000000000010000 RSI: ffff888136627bd0 RDI: ffff888106702348
[  354.855775][    C1] RBP: 1ffff11020ce0468 R08: ffffffff8fa37f37 R09: 1ffffffff1f46fe6
[  354.855781][    C1] R10: dffffc0000000000 R11: fffffbfff1f46fe7 R12: ffff888106702340
[  354.855786][    C1] R13: dffffc0000000000 R14: ffff888136627a80 R15: 1ffff11026cc4f7b
[  354.855791][    C1] FS:  0000555582d51500(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  354.855798][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  354.855803][    C1] CR2: 0000000000000000 CR3: 0000000027242000 CR4: 00000000000006f0
[  354.855825][    C1] Call Trace:
[  354.855832][    C1]  <IRQ>
[  354.855838][    C1]  __hrtimer_run_queues+0x364/0xc60
[  354.855864][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  354.855884][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  354.855911][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  354.855931][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  354.855951][    C1]  </IRQ>
[  354.855956][    C1]  <TASK>
[  354.855962][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  354.855979][    C1] RIP: 0010:finish_task_switch+0x26b/0x950
[  354.855999][    C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 cf c7 ea 09 e8 3a 3f 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  354.856005][    C1] RSP: 0018:ffffc9000343eff8 EFLAGS: 00000282
[  354.856012][    C1] RAX: 8a0d9e2149973200 RBX: 0000000000000000 RCX: 8a0d9e2149973200
[  354.856017][    C1] RDX: 0000000000000006 RSI: ffffffff8d9b6e65 RDI: ffffffff8be33400
[  354.856022][    C1] RBP: ffffc9000343f050 R08: ffffffff8fa37f37 R09: 1ffffffff1f46fe6
[  354.856027][    C1] R10: dffffc0000000000 R11: fffffbfff1f46fe7 R12: ffff88801f539cc0
[  354.856032][    C1] R13: dffffc0000000000 R14: ffff88810841b980 R15: ffff88813663ab58
[  354.856041][    C1]  ? finish_task_switch+0x266/0x950
[  354.856052][    C1]  __schedule+0x17a0/0x4cc0
[  354.856066][    C1]  ? __lock_acquire+0xab9/0xd20
[  354.856077][    C1]  ? __pfx___schedule+0x10/0x10
[  354.856086][    C1]  ? do_raw_spin_lock+0x121/0x290
[  354.856097][    C1]  ? preempt_schedule+0xae/0xc0
[  354.856106][    C1]  preempt_schedule_common+0x83/0xd0
[  354.856115][    C1]  preempt_schedule+0xae/0xc0
[  354.856123][    C1]  ? __pfx_preempt_schedule+0x10/0x10
[  354.856134][    C1]  ? copy_pmd_range+0x6890/0x71d0
[  354.856144][    C1]  preempt_schedule_thunk+0x16/0x30
[  354.856158][    C1]  _raw_spin_unlock+0x3f/0x50
[  354.856167][    C1]  copy_pmd_range+0x68c6/0x71d0
[  354.856182][    C1]  ? stack_depot_save_flags+0x40/0x860
[  354.856194][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  354.856208][    C1]  copy_page_range+0xc14/0x1270
[  354.856215][    C1]  ? __lock_acquire+0xab9/0xd20
[  354.856230][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  354.856238][    C1]  ? up_write+0x1c4/0x420
[  354.856245][    C1]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  354.856254][    C1]  dup_mmap+0xf57/0x1ac0
[  354.856269][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  354.856280][    C1]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  354.856289][    C1]  ? mm_init+0xcc3/0xef0
[  354.856303][    C1]  copy_mm+0x13c/0x4b0
[  354.856312][    C1]  copy_process+0x1706/0x3c00
[  354.856323][    C1]  ? copy_process+0x97f/0x3c00
[  354.856332][    C1]  ? __pfx_copy_process+0x10/0x10
[  354.856341][    C1]  kernel_clone+0x21e/0x840
[  354.856350][    C1]  ? css_rstat_updated+0x3ea/0x4f0
[  354.856358][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  354.856370][    C1]  __x64_sys_clone+0x18b/0x1e0
[  354.856378][    C1]  ? count_memcg_event_mm+0x21/0x260
[  354.856387][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  354.856399][    C1]  ? do_user_addr_fault+0xc8a/0x1390
[  354.856412][    C1]  ? do_syscall_64+0xbe/0x3b0
[  354.856423][    C1]  do_syscall_64+0xfa/0x3b0
[  354.856433][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  354.856441][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.856449][    C1]  ? exc_page_fault+0x9f/0xf0
[  354.856457][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.856464][    C1] RIP: 0033:0x7f0678785453
[  354.856474][    C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  354.856479][    C1] RSP: 002b:00007ffedb0c64f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  354.856486][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0678785453
[  354.856491][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  354.856495][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  354.856499][    C1] R10: 0000555582d517d0 R11: 0000000000000246 R12: 0000000000000000
[  354.856504][    C1] R13: 00000000000927c0 R14: 000000000003cf09 R15: 00007ffedb0c6690
[  354.856512][    C1]  </TASK>
[  355.059567][    C0] hpet: Lost 19 RTC interrupts

VM DIAGNOSIS:
16:24:15  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005f RBX=000000000000005f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000007430
R8 =ffff888106970237 R9 =1ffff11020d2e046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af98f4 R14=ffffffff99dee3e0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffedb0c4d58 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f769eb87498 00007f769eb87470 XMM03=00007f769eb874a8 00007f769eb874a0
XMM04=00007f769f6ed100 00007f769eb87460 XMM05=00007f769eb87478 00007f769eb874c0
XMM06=00007f769eb874b8 00007f769eb874b0 XMM07=00007f769eb874a8 00007f769eb874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f769ea12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=8a0d9e2149973200 RDX=0000000000000000
RSI=ffffffff8dba60da RDI=ffffffff8be33400 RBP=ffffffff899a6104 RSP=ffffc900001e0bc0
R8 =0000000000000000 R9 =ffffffff899a6104 R10=dffffc0000000000 R11=ffffffff899a6040
R12=0000000000000000 R13=ffff888106702300 R14=0000000000000001 R15=0000000000000046
RIP=ffffffff819d5c14 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555582d51500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000027242000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f769eb87498 00007f769eb87470 XMM03=00007f769eb874a8 00007f769eb874a0
XMM04=00007f769f6ed100 00007f769eb87460 XMM05=00007f769eb87478 00007f769eb874c0
XMM06=00007f769eb874b8 00007f769eb874b0 XMM07=00007f769eb874a8 00007f769eb874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f769ea12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
