last executing test programs:

1m31.6057002s ago: executing program 2 (id=1768):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x8, 0x1, 0x3}})
close(r0)

1m31.396503145s ago: executing program 2 (id=1774):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
mount$nfs(&(0x7f00000000c0)='@\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x28, 0x0)

1m31.208164837s ago: executing program 2 (id=1776):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000000000000020000000900010073797a300000e8000900020073797a32000000003c000480380001800b00010064796e7365740000280002800900010073797a320000000008000940000000030800034000000001080004"], 0x90}, 0x1, 0x0, 0x0, 0x20040815}, 0x0)

1m30.774106589s ago: executing program 2 (id=1779):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1, 0xc2d, &(0x7f00000001c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m29.937139028s ago: executing program 2 (id=1786):
syz_mount_image$minix(&(0x7f0000000540), &(0x7f0000000080)='./file1\x00', 0x8040, &(0x7f0000000c00)=ANY=[@ANYRES16=0x0], 0xfd, 0x1d0, &(0x7f0000000580)="$eJzs3O9uk1AYx/EftIXNP/H/G99qom8cdiYSXxi3O3Hp2Fxkaqxv2jSxxivxRrwVb6BN7A2IAVoKqBVRoK3fT7LsPPQczvM0oZzThArAf+uqJEOGOpKCIHj/4m5wpemcANQj0LegqKeLMQC2ROvrH3U3pHFluQCo0/SwZUY39bH0ZTbqTeZ/ndw6YTcTtZPW9DAefiBpkhpvFVx/TD8Y0f/b7ex4W9JOkfXLp3j8vcX8YWqzUS+Tb76Y/Pze5zhIzX+hcP5x/ffvZPO/KOmSpMthIfay/zVJ139S/3H2/bNvFZwf+BuG9vJx5oCpkzPfe5jEHZ1Y8rpJbEWv7+fiR0lsR/Fe77V/XFUJAEoyf7j+n5vpuKVwwb+8/tvR9dytL0EAlekPhi+PfN97W6ZhjIt1NspPQaOehrUeaZRohJu7NUgj1/ho/oPz7NSac7hzTh3JfVAU3dAD2BjOu/M3Tn8wfHB2fnTqnXqv9t0nrit1H7tOtPN3svv/2Iov1ABsjMXdf7fpRAAAAAAAAAAAAAAAQGk3JN1chgdN5gIAAACgWr97MEjzn/tZ+fDQs/nJftGn4RIBAAAAAAAAAAAAAAAAAACArfE9AAD//zpGOPg=")
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

1m29.080030082s ago: executing program 2 (id=1793):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004380)={0x50, 0x12, 0x101, 0xfffffffd, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, 0x400}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0)

1m28.686788153s ago: executing program 32 (id=1793):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004380)={0x50, 0x12, 0x101, 0xfffffffd, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, 0x400}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0)

1m8.310784312s ago: executing program 6 (id=2035):
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

1m8.043451458s ago: executing program 6 (id=2039):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1236, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="001027"], 0x0, 0x0, 0x0, 0x0}, 0x0)

1m6.233542026s ago: executing program 6 (id=2049):
r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r0, &(0x7f00000000c0)=""/4096, 0x1000)
keyctl$read(0xb, r0, &(0x7f00000010c0)=""/4096, 0x5c0)

1m6.132101451s ago: executing program 6 (id=2050):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000000280), 0x3, 0x45b, &(0x7f0000000400)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})

1m5.779950061s ago: executing program 6 (id=2063):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x900}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x4, 0x9, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000680)='GPL\x00', 0xd, 0x1009, &(0x7f0000001cc0)=""/4105, 0x41100}, 0x94)

1m5.215981566s ago: executing program 6 (id=2058):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf, 0x1}, 0x1, 0x5, 0x2, {0x0, 0xc}})

1m4.722831188s ago: executing program 33 (id=2058):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xf, 0x1}, 0x1, 0x5, 0x2, {0x0, 0xc}})

3.793385232s ago: executing program 1 (id=2764):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440), 0x1, 0x30c, &(0x7f0000000100)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

3.452045208s ago: executing program 1 (id=2767):
r0 = socket$kcm(0x11, 0x3, 0x0)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x8})
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'pimreg0\x00', {0x2, 0x4e22, @remote}})

3.231830928s ago: executing program 1 (id=2770):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1500, &(0x7f0000001900)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90)

2.975546462s ago: executing program 1 (id=2776):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000000)='./file0\x00', 0x200800, &(0x7f00000001c0)={[{@ikeep}, {@ikeep}, {@noikeep}, {@nolargeio}, {@nolargeio}]}, 0x1, 0x9657, &(0x7f0000012cc0)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r0, 0x41, 0x0, 0x1001f0)

1.395902403s ago: executing program 0 (id=2795):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
rt_sigpending(0xffffffffffffffff, 0x0)

1.375328621s ago: executing program 4 (id=2796):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000006540)='./file1\x00', 0x2a08848, &(0x7f0000000040)=ANY=[], 0x6, 0x69f, &(0x7f0000000580)="$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")
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x1100, 0x400000})

1.29599497s ago: executing program 5 (id=2797):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xe276, 0x1, 0x9, 0x4c}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)

1.265057985s ago: executing program 1 (id=2799):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x2003a, 0x1000, 0x3a, 0x0, 0x2, 0xffffffff}, 0x1c)

1.210065189s ago: executing program 0 (id=2800):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)

1.083100598s ago: executing program 4 (id=2802):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xfc)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x12)

1.048775596s ago: executing program 7 (id=2803):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x2d, 0x0, 0x0, 0x1c}, {0x6, 0x7, 0x1, 0xd060}]}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68)

1.047985322s ago: executing program 5 (id=2805):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$tun(r1, 0x0, 0xa2)

1.003436303s ago: executing program 3 (id=2806):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x1})
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0)

1.003142576s ago: executing program 0 (id=2807):
r0 = eventfd2(0x0, 0x0)
io_setup(0x6, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f00000000c0)={0x300000000000000, 0x0, 0x300, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}])

860.757764ms ago: executing program 7 (id=2808):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28, 0x7ffffff7}}], 0x1, 0x0)

831.068029ms ago: executing program 3 (id=2809):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)

810.353063ms ago: executing program 5 (id=2810):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x503c, @dev={0xfe, 0x80, '\x00', 0x35}, 0x6}, 0x1c)

799.862513ms ago: executing program 4 (id=2811):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x1c}}, 0x0)

723.933184ms ago: executing program 7 (id=2812):
r0 = userfaultfd(0x80001)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

655.680976ms ago: executing program 5 (id=2813):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2000c0, &(0x7f00000033c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6e4, &(0x7f0000000240)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREQQj5UKBKXXk3iNFbWbmRvkRMhsgUKRzihHHooQubQE+oBqYgDIpyRkLii3CNxjziwaGZn1rtre72b+CcJzyON55uZ7+ed1zOfd2cTbQD/txbficlWJLF47u3NdPvBVr3xYKu+WpQjYioiShHlziqStYjkfsTl6CzxuXRn3l2y1zhvPfzso7P3Pql3tsr5ktUvDWu3rT1khFa+xGxETOTrMZX36u/qLv3dHavrpBt3mrAzReLguLV3aI3TfIT7Fnja3Y2YmNxlfy3iRERM568DIp8dSkcc3oEba5YDAACAp9PEfhVefBSPYjNmjiYcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeD4kne8MTPKlVJRnIym+/7+S70tVKscc73Bf2ef4h9ePKBAAAAAAAAAAOBSf5h/cn34Uj2IzZor97ST7zP+NbONk9vOFeD82YjnW43xsxlI0oxnrMR8xOdPTYWVzqdlcn9/Z8jeRtmy323fzlgsRUdvRcuEIThoAAAAAAAAAnl8/jcWYOe4gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgVxIx0Vlly8miXItSOSKmI6KS1mtF/LkoP8v+ctwBAAAAwOGr5uuZ5L+dQjvJ3vO/mr3vn473Yy2asRLNaMRyXMueBXTe9Zf+0ao3HmzVV9NlZ8ff/vdYcWQ9RsREfLDHyHNZjVPdFovxvfhBnIvZuBLrsRI/iqVoxnLMRjU9iViKJGrVztOLWhHn7vFe7tu6Mhjb6YHt17NIqnE9VrLYzsfVSnQem2TnkI75es9of6xEDIz4QZqd5Fu5EXN0ref39ev8uUyu/eKIfRyOWnbmk92MzKW5z7Px0vDcj3mdDI40H6XuM6iT26Okm4MjFTn/4Tg5P5Gv01z/oj/nB23MR2mDmViIUn71Rbzan/NbX7z3cn/jL//zr1dulNZu3ri+ce4QT+lQTRaFwUzUezLx2vCrL89EI81Ea/RMTA7umH6C8zhAlTwb2VQ04mz53ay0FG/0XILvxbVYjosxF/NxKebiG7EQ9b4r7FRfXsv11f6cZPdaaef8Vh0S/Jkv9VT65T6Vj1aal5d68to709WyY/mey7+KuZ4svTz86hv7r0A6/ufzcjrGz7p/cZ4GfZnI5+YiuleGZ+K37fTnRmPt5vqNpVsjjnc2X6e37Yf9c/PvDuJ8Hl96vaQzbjnbynJSLa6X9Ngr3Wj781XJP3HptCvtOHaqe6wWM7ES39/zTq3kr+F29tQ59lrvsX9tz5yV/PVNcazvVU68F43sVciA2aPJKgAjO/HmiUr1YfXv1Y+rP6/eqL49/Z2pS1NfqMTk38p/mvhD6felbyZvxsfxk5g57kgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5sHH7zs2lRmN5vVuI6cE9T1qo7DnW8EKU9q2z9cJoHUYtYvhYSV6oHOy5P4uFahxSz59GxJA6lSceIhn7Ghu7kF7IB9Jh8cVp2Z72xBjNy0Wr3euUY2N6r9/g1PZdELWbS43/tPvqVKPnlgGecxeaq7cubNy+89WV1aV3l99dXlu4dPHSxfrX57924fpKY3mu8/O4owQOw8btOxPHHQMAAAAAAAAAAAAwnvxf/zcf+z8zlPepU1nf2H3k00d9qgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAzavGdmGxFEvNz5+fS7Qdb9Ua6FOXtmuWIKEVE8uOI5H7E5egsUevpLtlrnLcefvbR2Xuf1Lf7Khf1S8PajaaVLzEbERP5en9Tu3Szs7+rPf21Hiu8pHuGacLOFImD4/a/AAAA//+vgfmP")
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000580)={0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x98f90a, 0x8000, '\x00', @p_u8=&(0x7f00000005c0)=0xe9}})

654.836811ms ago: executing program 0 (id=2814):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x7)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x4)

629.049649ms ago: executing program 3 (id=2815):
capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0)

580.041599ms ago: executing program 4 (id=2816):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xff, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)

577.93337ms ago: executing program 1 (id=2817):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x183f41, 0x8a)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0xc010f508, &(0x7f0000000180))

528.886376ms ago: executing program 7 (id=2818):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c)
getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500))

425.287096ms ago: executing program 4 (id=2819):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300000000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0)

404.08297ms ago: executing program 3 (id=2820):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x0, 0x0, @private1}, @in6={0xa, 0x0, 0x0, @remote}], 0x58)

264.229589ms ago: executing program 4 (id=2821):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

263.482469ms ago: executing program 0 (id=2822):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x2, 0x4)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x8, 0x0, &(0x7f0000001040))

259.645434ms ago: executing program 7 (id=2823):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)

233.612551ms ago: executing program 5 (id=2824):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')
getdents(r0, &(0x7f0000000100)=""/49, 0x31)
getdents64(r0, 0x0, 0x43)

155.932412ms ago: executing program 3 (id=2825):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000440)=ANY=[], 0xfd85)

69.376325ms ago: executing program 3 (id=2826):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00')
setns(r0, 0x0)

66.976991ms ago: executing program 0 (id=2827):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="000000001000000008"])
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)

54.098217ms ago: executing program 5 (id=2828):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80a, &(0x7f00000003c0), 0x1, 0x796, &(0x7f0000000c40)="$eJzs3c9rHFUcAPDvbJImTauNINh6aU5aKN20NbYKghEPIlgo6Nk2bLYhZpMt2U1pQg4WEQQRtHgQ9OLZH/XmVfTs3+BFRFqqpsWKB1mZ/ZFs82OTtNls23w+MMn7zr7Je9+dnTdvM8NuALvWYPojE3EoIj5OIg7U1ycR0VMtdUeM1OrdWVzIpUsSlcqbfybVOrcXF3LRtE1qXz04GBE/vh9xNLO63dLc/ORooZCfqcdD5amLQ6W5+WMTU6Pj+fH89KkTw8MnTz9/+tT25fr3z/P7b3zy2rPfjvz73lPXPvopiZHYX3+sOY/tMhiD9eekJ30K7/LqdjfWYUmnO8A9SQ/NrtpRHofiQHRVSwDAoyw9/1cAgF0mcf4HgF2m8X+A24sLucbS2f9I7Kybr0REXy3/xvXN2iPd9Wt2fdXroP23k+iuXxGNbbzeNRgRX3z/9tfpEm26DgmwlnevRMT5gcHV43+y6p6FrTq+iTqDK2LjH+ycH9L5zwtrzf8yS/OfWJr/LOtd49i9F4MRe5rj1cd/5vqaG768DY3X538v1e5tSxNtmv8t3bQ20FWPHkuDwxExUcinY9vjEXEkenovTBTyJ1q0ceTWf7fWe6x5/vfX1Xe+SttPfy/XyFzv7r17m7HR8uj95Nzs5pWIp7uX7+27s2r876vOdVfu/3Td2VZ/+PBy8fUXP/h8vWpp/mm+jWV1/u1V+TLimVg7/4ak5f2JQ+nuP177uXYb3/36Wf967Tfv/3RJ22+8F9gJ6f7vb53/QNJ8v2Zpe9vfOP+1X/97kreq5cbgcXm0XJ45EbEneWP1+pPL2zbiRv00/1qmK/PPtHz9p+8Ez28yx+4bf3xz7/m3V5r/2Jb2/9YL1+5Mdq3X/ub2/3C1dKS+ZjPj32Y7eD/PHQAAAAAAAAAAAAAAAAAAAAAAAABsViYi9keSyS6VM5lstvYd3k9Gf6ZQLJWPXijOTo9F9buyB6In0/ioywO1OGl8/ulAU3xyRfxcRDwREZ/27q3G2VyxMNbp5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgbt863/+f+r23070DANqmb8Mat/J3hZVKpdLG/gAA7bfx+R8AeNS0OP/v3cl+AAA7x/t/ANh9nP8BYPdx/gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDNzp45ky6VfxYXcmk8dmludrJ46dhYvjSZnZrNZXPFmYvZ8WJxvJDP5opTG/29QrF4cTimZy8PlfOl8lBpbv7cVHF2unxuYmp0PH8u37MjWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA1pTm5idHC4X8zCNR+DAiHoButKOQxAPRjY4Ufjv2y8FWda5u8DIeeSCyeMgKnR6ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4O/wcAAP//PiglpQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x7ff, 0x5, 0x2, 0x3})

0s ago: executing program 7 (id=2829):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0)
readv(r0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/207, 0xcf}], 0x1)

kernel console output (not intermixed with test programs):

imeout
[  235.192394][ T3483] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.310407][ T5872] Bluetooth: hci4: command tx timeout
[  235.464428][T11582] loop0: detected capacity change from 0 to 22
[  235.483773][   T24] kernel write not supported for file /vcsa (pid: 24 comm: kworker/1:0)
[  235.491578][T11582] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  235.512064][T11582] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  235.642249][ T3483] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.696207][T11451] team0: Port device team_slave_0 added
[  235.715406][T11511] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.732097][T11511] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.749035][T11596] loop1: detected capacity change from 0 to 1024
[  235.755725][T11511] bridge_slave_0: entered allmulticast mode
[  235.763296][T11511] bridge_slave_0: entered promiscuous mode
[  235.777076][T11596] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  235.802436][T11596] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  235.802576][T11451] team0: Port device team_slave_1 added
[  235.841473][T11596] EXT4-fs error (device loop1): ext4_get_journal_inode:5800: inode #32: comm syz.1.2092: iget: special inode unallocated
[  235.852357][T11600] loop5: detected capacity change from 0 to 256
[  235.874600][T11596] EXT4-fs (loop1): Remounting filesystem read-only
[  235.889199][T11596] EXT4-fs (loop1): no journal found
[  235.919318][T11596] EXT4-fs (loop1): can't get journal size
[  235.942008][T11596] EXT4-fs (loop1): filesystem is read-only
[  235.955921][T11596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  235.956516][T11600] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x08fbab18, utbl_chksum : 0xe619d30d)
[  235.978755][T11511] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.987703][T11511] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.996659][T11511] bridge_slave_1: entered allmulticast mode
[  236.003859][T11511] bridge_slave_1: entered promiscuous mode
[  236.014381][T11451] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.027613][T11451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.086172][T11451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.111637][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.201091][T11451] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.219281][T11451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.248214][T11451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.268259][T11511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.341021][T11511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.473469][T11511] team0: Port device team_slave_0 added
[  236.496256][T11511] team0: Port device team_slave_1 added
[  236.728631][T11451] hsr_slave_0: entered promiscuous mode
[  236.740814][T11451] hsr_slave_1: entered promiscuous mode
[  236.747715][T11451] debugfs: 'hsr0' already exists in 'hsr'
[  236.771503][T11451] Cannot create hsr debugfs directory
[  236.817341][T11511] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.850740][T11511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.929054][T11511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.016166][ T3483] bridge_slave_1: left allmulticast mode
[  237.046790][ T3483] bridge_slave_1: left promiscuous mode
[  237.069745][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.090060][T11637] loop3: detected capacity change from 0 to 256
[  237.102351][ T3483] bridge_slave_0: left allmulticast mode
[  237.123460][T11637] exfat: Deprecated parameter 'namecase'
[  237.128546][ T3483] bridge_slave_0: left promiscuous mode
[  237.135987][T11637] exfat: Deprecated parameter 'utf8'
[  237.175512][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.208410][T11637] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  237.231994][ T5872] Bluetooth: hci2: command tx timeout
[  237.390753][ T5872] Bluetooth: hci4: command tx timeout
[  237.422036][T11622] loop0: detected capacity change from 0 to 40427
[  237.450762][T11622] F2FS-fs (loop0): invalid crc value
[  237.486028][T11631] loop1: detected capacity change from 0 to 32768
[  237.686233][T11631] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  237.686271][T11631]   allowing incompatible features above 0.0: (unknown version)
[  237.686286][T11631]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  237.735190][T11631] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  237.743433][T11631] bcachefs (loop1): initializing new filesystem
[  237.763072][T11631] bcachefs (loop1): going read-write
[  237.783810][T11622] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  237.825473][T11629] loop5: detected capacity change from 0 to 32768
[  237.830941][T11622] F2FS-fs (loop0): Start checkpoint disabled!
[  237.838110][T11631] bcachefs (loop1): marking superblocks
[  237.869607][T11622] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  237.909434][T11631] bcachefs (loop1): initializing freespace
[  237.946886][ T3483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.961337][T11631] bcachefs (loop1): done initializing freespace
[  237.964446][T11629] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,wide_macs,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,noexcl,read_only
[  237.990388][T11629]   allowing incompatible features above 0.0: (unknown version)
[  237.998134][T11629]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  238.012542][T11629] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  238.020957][T11629] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  238.029793][T11629] bcachefs (loop5): Version upgrade required:
[  238.029793][T11629] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  238.029793][T11629] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  238.029793][T11629]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  238.106368][T11631] bcachefs (loop1): reading snapshots table
[  238.130306][T11631] bcachefs (loop1): reading snapshots done
[  238.136652][ T3483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.156742][   T12] kworker/u8:0: attempt to access beyond end of device
[  238.156742][   T12] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  238.159411][ T3483] bond0 (unregistering): Released all slaves
[  238.206565][T11629] bcachefs (loop5): accounting_read... done
[  238.212211][   T12] kworker/u8:0: attempt to access beyond end of device
[  238.212211][   T12] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  238.223697][T11629] bcachefs (loop5): alloc_read... done
[  238.239834][T11629] bcachefs (loop5): done starting filesystem
[  238.247208][T11511] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.254363][T11631] bcachefs (loop1): done starting filesystem
[  238.271421][T11511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.310422][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  238.310461][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  238.310483][   T12] Workqueue: writeback wb_workfn (flush-7:0)
[  238.310526][   T12] Call Trace:
[  238.310542][   T12]  <TASK>
[  238.310553][   T12]  dump_stack_lvl+0x189/0x250
[  238.310590][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.310624][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.310661][   T12]  ? __pfx_queue_work_on+0x10/0x10
[  238.310688][   T12]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  238.310727][   T12]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  238.310771][   T12]  f2fs_handle_critical_error+0x37c/0x540
[  238.310818][   T12]  f2fs_write_end_io+0x886/0xb60
[  238.310860][   T12]  __submit_merged_bio+0x27a/0x6a0
[  238.310898][   T12]  ? up_write+0x1c4/0x420
[  238.310935][   T12]  __submit_merged_write_cond+0x44c/0x530
[  238.310978][   T12]  f2fs_sync_node_pages+0x1479/0x15e0
[  238.311029][   T12]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  238.311068][   T12]  ? __percpu_counter_sum+0x1c2/0x1e0
[  238.311122][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.311156][   T12]  ? do_raw_spin_lock+0x121/0x290
[  238.311208][   T12]  ? rcu_is_watching+0x15/0xb0
[  238.311235][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.311268][   T12]  ? blk_start_plug+0x52/0x1b0
[  238.311313][   T12]  f2fs_write_node_pages+0x303/0x6e0
[  238.311348][   T12]  ? xa_load+0x60/0x210
[  238.311395][   T12]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  238.311430][   T12]  ? do_raw_spin_lock+0x121/0x290
[  238.311470][   T12]  ? rcu_is_watching+0x15/0xb0
[  238.311496][   T12]  ? set_shrinker_bit+0x7c/0x350
[  238.311528][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.311567][   T12]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  238.311605][   T12]  do_writepages+0x32e/0x550
[  238.311644][   T12]  ? unwind_next_frame+0xa5/0x2390
[  238.311679][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.311719][   T12]  __writeback_single_inode+0x145/0xff0
[  238.311756][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.311789][   T12]  ? do_raw_spin_unlock+0x122/0x240
[  238.311827][   T12]  writeback_sb_inodes+0x6c7/0x1010
[  238.311872][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.311907][   T12]  ? fprop_reflect_period_percpu+0x6b/0x330
[  238.311951][   T12]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  238.312016][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.312048][   T12]  ? rcu_is_watching+0x15/0xb0
[  238.312075][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.312116][   T12]  wb_writeback+0x43b/0xaf0
[  238.312157][   T12]  ? queue_io+0x341/0x590
[  238.312196][   T12]  ? __pfx_wb_writeback+0x10/0x10
[  238.312238][   T12]  ? rcu_is_watching+0x15/0xb0
[  238.312268][   T12]  wb_workfn+0x409/0xef0
[  238.312306][   T12]  ? __pfx_wb_workfn+0x10/0x10
[  238.312333][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.312366][   T12]  ? rcu_is_watching+0x15/0xb0
[  238.312395][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.312427][   T12]  ? rcu_is_watching+0x15/0xb0
[  238.312454][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.312491][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.312524][   T12]  ? rcu_is_watching+0x15/0xb0
[  238.312554][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.312586][   T12]  ? lock_acquire+0x5f/0x360
[  238.312628][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.312663][   T12]  ? rcu_is_watching+0x15/0xb0
[  238.312689][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  238.312716][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  238.312744][   T12]  process_scheduled_works+0xae1/0x17b0
[  238.312794][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  238.312827][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.312865][   T12]  worker_thread+0x8a0/0xda0
[  238.312911][   T12]  kthread+0x711/0x8a0
[  238.312949][   T12]  ? __pfx_worker_thread+0x10/0x10
[  238.312977][   T12]  ? __pfx_kthread+0x10/0x10
[  238.313009][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.313045][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  238.313080][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.313112][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.313150][   T12]  ? __pfx_kthread+0x10/0x10
[  238.313185][   T12]  ret_from_fork+0x3fc/0x770
[  238.313216][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  238.313248][   T12]  ? __switch_to_asm+0x39/0x70
[  238.313285][   T12]  ? __switch_to_asm+0x33/0x70
[  238.313323][   T12]  ? __pfx_kthread+0x10/0x10
[  238.313358][   T12]  ret_from_fork_asm+0x1a/0x30
[  238.313408][   T12]  </TASK>
[  238.313419][   T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  238.337373][T11511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.734955][T11656] loop3: detected capacity change from 0 to 32768
[  238.794965][ T5852] bcachefs (loop5): shutting down
[  238.810681][ T5857] bcachefs (loop1): shutting down
[  238.815704][ T5857] bcachefs (loop1): going read-only
[  238.856798][ T5852] bcachefs (loop5): shutdown complete
[  238.857429][ T5857] bcachefs (loop1): finished waiting for writes to stop
[  238.925444][ T5857] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  239.026096][ T5857] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  239.063388][ T5857] bcachefs (loop1): clean shutdown complete, journal seq 4
[  239.083655][ T5857] bcachefs (loop1): marking filesystem clean
[  239.146044][ T5857] bcachefs (loop1): shutdown complete
[  239.166208][T11668] loop3: detected capacity change from 0 to 512
[  239.210981][T11668] EXT4-fs: Ignoring removed nobh option
[  239.220994][T11668] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  239.263982][T11511] hsr_slave_0: entered promiscuous mode
[  239.276799][T11668] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2115: iget: bad i_size value: 38620345925642
[  239.280927][T11511] hsr_slave_1: entered promiscuous mode
[  239.295507][T11511] debugfs: 'hsr0' already exists in 'hsr'
[  239.301248][T11511] Cannot create hsr debugfs directory
[  239.312619][ T5855] Bluetooth: hci2: command tx timeout
[  239.342740][T11668] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2115: couldn't read orphan inode 15 (err -117)
[  239.393372][T11674] loop5: detected capacity change from 0 to 16
[  239.404156][T11674] erofs (device loop5): mounted with root inode @ nid 36.
[  239.414861][T11668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.433745][T11670] loop0: detected capacity change from 0 to 4096
[  239.470262][ T5855] Bluetooth: hci4: command tx timeout
[  239.548320][T11668] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2115: bg 0: block 5: invalid block bitmap
[  239.564034][T11668] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  239.567600][T11670] ntfs3(loop0): ino=0, "file0" failed to extend initialized size to 8fecc.
[  239.650276][T11668] EXT4-fs (loop3): This should not happen!! Data will be lost
[  239.650276][T11668] 
[  239.689519][T11668] EXT4-fs (loop3): Total free blocks count 0
[  239.740612][T11668] EXT4-fs (loop3): Free/Dirty block details
[  239.746711][T11668] EXT4-fs (loop3): free_blocks=0
[  239.757866][ T3483] hsr_slave_0: left promiscuous mode
[  239.799580][T11668] EXT4-fs (loop3): dirty_blocks=1
[  239.806841][ T3483] hsr_slave_1: left promiscuous mode
[  239.813444][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.823822][T11668] EXT4-fs (loop3): Block reservation details
[  239.843407][T11668] EXT4-fs (loop3): i_reserved_data_blocks=1
[  239.858612][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.878852][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.887787][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.930754][ T3483] veth1_macvtap: left promiscuous mode
[  239.936322][ T3483] veth0_macvtap: left promiscuous mode
[  239.949630][ T5866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.971998][ T3483] veth1_vlan: left promiscuous mode
[  239.977343][ T3483] veth0_vlan: left promiscuous mode
[  240.492143][T11706] loop0: detected capacity change from 0 to 64
[  240.519217][T11708] xt_time: invalid argument - start or stop time greater than 23:59:59
[  240.548679][T11706] Trying to free block not in datazone
[  240.635091][ T3483] team0 (unregistering): Port device team_slave_1 removed
[  240.658416][ T3483] team0 (unregistering): Port device team_slave_0 removed
[  241.097404][T11719] loop0: detected capacity change from 0 to 2048
[  241.146661][T11711] loop3: detected capacity change from 0 to 32768
[  241.168408][T11722] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  241.465439][   T30] audit: type=1326 audit(1755692448.864:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729d18ebe9 code=0x7ffc0000
[  241.539328][   T30] audit: type=1326 audit(1755692448.864:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729d18ebe9 code=0x7ffc0000
[  241.539386][   T30] audit: type=1326 audit(1755692448.864:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f729d18ebe9 code=0x7ffc0000
[  241.539433][   T30] audit: type=1326 audit(1755692448.864:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729d18ebe9 code=0x7ffc0000
[  241.539478][   T30] audit: type=1326 audit(1755692448.864:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729d18ebe9 code=0x7ffc0000
[  241.539526][   T30] audit: type=1326 audit(1755692448.884:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f729d18ebe9 code=0x7ffc0000
[  241.551374][   T30] audit: type=1326 audit(1755692448.944:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729d18ebe9 code=0x7ffc0000
[  241.577395][ T5855] Bluetooth: hci4: command tx timeout
[  241.595566][    C1] vkms_vblank_simulate: vblank timer overrun
[  241.702033][   T30] audit: type=1326 audit(1755692448.944:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729d18ebe9 code=0x7ffc0000
[  241.725182][    C1] vkms_vblank_simulate: vblank timer overrun
[  242.310083][T11451] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  242.353973][T11451] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  242.395871][T11751] loop1: detected capacity change from 0 to 512
[  242.405959][T11727] loop0: detected capacity change from 0 to 32768
[  242.420399][T11451] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  242.424081][T11751] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2136: bg 0: block 393: padding at end of block bitmap is not set
[  242.444722][T11451] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  242.468092][T11751] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  242.469607][T11727] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  242.488048][T11727] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  242.505047][T11751] EXT4-fs (loop1): 2 truncates cleaned up
[  242.513596][T11751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.539230][T11727] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  242.550657][T11511] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  242.555508][ T5930] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  242.565507][T11751] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.1.2136: path /384/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  242.570928][ T5930] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  242.622905][T11511] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  242.638145][ T5930] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 67ms
[  242.645739][ T5930] gfs2: fsid=syz:syz.0: jid=0: Done
[  242.651491][T11727] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  242.678888][T11511] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  242.700032][T11511] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  242.709030][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.771935][T11451] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.823781][T11451] 8021q: adding VLAN 0 to HW filter on device team0
[  242.862463][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.869562][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.905076][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.912199][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.064949][T11511] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.113512][T11782] loop1: detected capacity change from 0 to 256
[  243.157276][T11511] 8021q: adding VLAN 0 to HW filter on device team0
[  243.198023][T11782] exfat: Deprecated parameter 'namecase'
[  243.224466][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.231602][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.273851][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.280987][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.293619][T11782] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d)
[  243.358510][T11511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  243.378984][T11511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  243.421130][T11782] exFAT-fs (loop1): error, in sector 160, dentry 5 should be unused, but 0xc1
[  243.445456][T11782] exFAT-fs (loop1): error, in sector 160, dentry 5 should be unused, but 0xc1
[  243.697322][T11766] loop5: detected capacity change from 0 to 32768
[  243.763722][T11451] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.998092][T11766] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  243.998131][T11766]   allowing incompatible features above 0.0: (unknown version)
[  243.998145][T11766]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  244.216371][T11766] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  244.226452][T11766] bcachefs (loop5): initializing new filesystem
[  244.242923][T11766] bcachefs (loop5): going read-write
[  244.272497][T11511] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.329741][T11766] bcachefs (loop5): marking superblocks
[  244.368980][T11836] loop0: detected capacity change from 0 to 64
[  244.377162][T11766] bcachefs (loop5): initializing freespace
[  244.423511][T11766] bcachefs (loop5): done initializing freespace
[  244.431958][T11836] Trying to free block not in datazone
[  244.471319][T11766] bcachefs (loop5): reading snapshots table
[  244.487463][T11766] bcachefs (loop5): reading snapshots done
[  244.495057][T11840] loop3: detected capacity change from 0 to 1024
[  244.513160][ T5862] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  244.567381][T11766] bcachefs (loop5): done starting filesystem
[  244.694430][ T3483] hfsplus: b-tree write err: -5, ino 4
[  244.717621][ T5862] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  244.744366][ T5862] usb 2-1: config 0 has no interface number 0
[  244.783762][ T5862] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.838061][ T5862] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.868324][ T5862] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  244.880453][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.907152][ T5862] usb 2-1: config 0 descriptor??
[  244.953905][ T5852] bcachefs (loop5): shutting down
[  244.958973][ T5852] bcachefs (loop5): going read-only
[  244.963200][T11451] veth0_vlan: entered promiscuous mode
[  244.977959][ T5852] bcachefs (loop5): finished waiting for writes to stop
[  245.029821][ T5852] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3
[  245.042368][T11451] veth1_vlan: entered promiscuous mode
[  245.083660][ T5852] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  245.122727][ T5852] bcachefs (loop5): clean shutdown complete, journal seq 4
[  245.135167][ T5852] bcachefs (loop5): marking filesystem clean
[  245.207046][T11451] veth0_macvtap: entered promiscuous mode
[  245.237059][T11511] veth0_vlan: entered promiscuous mode
[  245.241987][ T5852] bcachefs (loop5): shutdown complete
[  245.252932][T11451] veth1_macvtap: entered promiscuous mode
[  245.282911][T11511] veth1_vlan: entered promiscuous mode
[  245.346789][T11451] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.402938][T11451] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.435583][ T5862] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0025/input/input16
[  245.456921][ T3483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.486195][ T3483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.506988][ T3483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.564509][ T3483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.595050][T11511] veth0_macvtap: entered promiscuous mode
[  245.603152][ T5862] holtek_kbd 0003:04D9:A055.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1
[  245.613560][T11869] loop3: detected capacity change from 0 to 128
[  245.650718][ T5862] usb 2-1: USB disconnect, device number 12
[  245.662141][T11511] veth1_macvtap: entered promiscuous mode
[  245.686261][T11848] loop0: detected capacity change from 0 to 32768
[  245.783685][T11511] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.845239][T11511] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.894233][T11870] fido_id[11870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  245.952101][   T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.994624][   T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.054749][ T3575] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.063852][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.075575][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.085914][ T3575] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.224336][ T3575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.260282][ T3575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.275904][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.311304][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.428629][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.461493][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.926954][T11896] loop1: detected capacity change from 0 to 40427
[  246.936889][T11896] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  246.938308][T11903] loop3: detected capacity change from 0 to 16
[  246.944674][T11896] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  246.976377][T11906] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2170'.
[  246.985447][T11896] F2FS-fs (loop1): invalid crc value
[  247.002416][T11903] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  247.047749][T11896] F2FS-fs (loop1): access invalid blkaddr:0
[  247.053738][T11896] CPU: 1 UID: 0 PID: 11896 Comm: syz.1.2166 Not tainted syzkaller #0 PREEMPT(full) 
[  247.053771][T11896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  247.053787][T11896] Call Trace:
[  247.053797][T11896]  <TASK>
[  247.053807][T11896]  dump_stack_lvl+0x189/0x250
[  247.053846][T11896]  ? __pfx_dump_stack_lvl+0x10/0x10
[  247.053878][T11896]  ? set_normalized_timespec64+0xf0/0x1a0
[  247.053919][T11896]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.053956][T11896]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  247.053998][T11896]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.054033][T11896]  sanity_check_extent_cache+0x1a3/0x620
[  247.054077][T11896]  f2fs_iget+0x3a7f/0x5550
[  247.054132][T11896]  f2fs_fill_super+0x494a/0x6ff0
[  247.054188][T11896]  get_tree_bdev_flags+0x40e/0x4d0
[  247.054226][T11896]  ? __pfx_f2fs_fill_super+0x10/0x10
[  247.054253][T11896]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  247.054291][T11896]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.054324][T11896]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.054357][T11896]  vfs_get_tree+0x92/0x2b0
[  247.054395][T11896]  do_new_mount+0x2a2/0x9e0
[  247.054436][T11896]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.054467][T11896]  ? ns_capable+0x8a/0xf0
[  247.054492][T11896]  ? __pfx_do_new_mount+0x10/0x10
[  247.054530][T11896]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.054565][T11896]  ? path_mount+0x61c/0xfe0
[  247.054602][T11896]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.054639][T11896]  __se_sys_mount+0x317/0x410
[  247.054683][T11896]  ? __pfx___se_sys_mount+0x10/0x10
[  247.054722][T11896]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.054753][T11896]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.054785][T11896]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.054813][T11896]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.054843][T11896]  ? __x64_sys_mount+0x20/0xc0
[  247.054884][T11896]  do_syscall_64+0xfa/0x3b0
[  247.054922][T11896]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.054953][T11896]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.054977][T11896]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.055007][T11896]  ? exc_page_fault+0x9f/0xf0
[  247.055043][T11896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.055069][T11896] RIP: 0033:0x7f729d19038a
[  247.055090][T11896] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.055112][T11896] RSP: 002b:00007f729e06be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  247.055138][T11896] RAX: ffffffffffffffda RBX: 00007f729e06bef0 RCX: 00007f729d19038a
[  247.055158][T11896] RDX: 0000200000000280 RSI: 0000200000000040 RDI: 00007f729e06beb0
[  247.055177][T11896] RBP: 0000200000000280 R08: 00007f729e06bef0 R09: 0000000000000000
[  247.055195][T11896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040
[  247.055211][T11896] R13: 00007f729e06beb0 R14: 000000000000559f R15: 0000200000000340
[  247.055240][T11896]  </TASK>
[  247.344030][    C1] vkms_vblank_simulate: vblank timer overrun
[  247.479189][T11896] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 1280] is incorrect, run fsck to fix
[  247.535783][T11896] F2FS-fs (loop1): Failed to read root inode
[  247.595264][T11915] loop7: detected capacity change from 0 to 1024
[  247.780949][T11915] hfsplus: bad catalog entry type
[  247.941673][   T59] hfsplus: b-tree write err: -5, ino 4
[  248.116931][T11936] usb usb8: usbfs: process 11936 (syz.7.2179) did not claim interface 0 before use
[  248.149428][T11938] binder: 11937:11938 ioctl c018620b 200000000000 returned -14
[  249.008884][T11961] loop7: detected capacity change from 0 to 40427
[  249.020895][T11961] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  249.028669][T11961] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  249.070778][T11961] F2FS-fs (loop7): invalid crc value
[  249.129054][T11961] F2FS-fs (loop7): access invalid blkaddr:0
[  249.135039][T11961] CPU: 1 UID: 0 PID: 11961 Comm: syz.7.2190 Not tainted syzkaller #0 PREEMPT(full) 
[  249.135071][T11961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  249.135087][T11961] Call Trace:
[  249.135097][T11961]  <TASK>
[  249.135107][T11961]  dump_stack_lvl+0x189/0x250
[  249.135146][T11961]  ? __pfx_dump_stack_lvl+0x10/0x10
[  249.135178][T11961]  ? set_normalized_timespec64+0xf0/0x1a0
[  249.135219][T11961]  ? srso_alias_return_thunk+0x5/0xfbef5
[  249.135256][T11961]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  249.135298][T11961]  ? srso_alias_return_thunk+0x5/0xfbef5
[  249.135340][T11961]  sanity_check_extent_cache+0x1a3/0x620
[  249.135384][T11961]  f2fs_iget+0x3a7f/0x5550
[  249.135440][T11961]  f2fs_fill_super+0x494a/0x6ff0
[  249.135496][T11961]  get_tree_bdev_flags+0x40e/0x4d0
[  249.135534][T11961]  ? __pfx_f2fs_fill_super+0x10/0x10
[  249.135560][T11961]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  249.135595][T11961]  ? srso_alias_return_thunk+0x5/0xfbef5
[  249.135625][T11961]  ? srso_alias_return_thunk+0x5/0xfbef5
[  249.135656][T11961]  vfs_get_tree+0x92/0x2b0
[  249.135690][T11961]  do_new_mount+0x2a2/0x9e0
[  249.135727][T11961]  ? srso_alias_return_thunk+0x5/0xfbef5
[  249.135754][T11961]  ? ns_capable+0x8a/0xf0
[  249.135777][T11961]  ? __pfx_do_new_mount+0x10/0x10
[  249.135813][T11961]  ? srso_alias_return_thunk+0x5/0xfbef5
[  249.135844][T11961]  ? path_mount+0x61c/0xfe0
[  249.135879][T11961]  ? srso_alias_return_thunk+0x5/0xfbef5
[  249.135916][T11961]  __se_sys_mount+0x317/0x410
[  249.135959][T11961]  ? __pfx___se_sys_mount+0x10/0x10
[  249.135997][T11961]  ? srso_alias_return_thunk+0x5/0xfbef5
[  249.136028][T11961]  ? srso_alias_return_thunk+0x5/0xfbef5
[  249.136060][T11961]  ? srso_alias_return_thunk+0x5/0xfbef5
[  249.136090][T11961]  ? srso_alias_return_thunk+0x5/0xfbef5
[  249.136120][T11961]  ? __x64_sys_mount+0x20/0xc0
[  249.136162][T11961]  do_syscall_64+0xfa/0x3b0
[  249.136203][T11961]  ? srso_alias_return_thunk+0x5/0xfbef5
[  249.136235][T11961]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.136260][T11961]  ? srso_alias_return_thunk+0x5/0xfbef5
[  249.136290][T11961]  ? exc_page_fault+0x9f/0xf0
[  249.136334][T11961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.136359][T11961] RIP: 0033:0x7f776619038a
[  249.136381][T11961] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  249.136404][T11961] RSP: 002b:00007f7766fb3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  249.136431][T11961] RAX: ffffffffffffffda RBX: 00007f7766fb3ef0 RCX: 00007f776619038a
[  249.136451][T11961] RDX: 0000200000000280 RSI: 0000200000000040 RDI: 00007f7766fb3eb0
[  249.136471][T11961] RBP: 0000200000000280 R08: 00007f7766fb3ef0 R09: 0000000000000000
[  249.136490][T11961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040
[  249.136507][T11961] R13: 00007f7766fb3eb0 R14: 000000000000559f R15: 0000200000000340
[  249.136537][T11961]  </TASK>
[  249.423446][    C1] vkms_vblank_simulate: vblank timer overrun
[  249.429855][T11961] F2FS-fs (loop7): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 1280] is incorrect, run fsck to fix
[  249.449136][T11933] loop4: detected capacity change from 0 to 32768
[  249.471051][T11933] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2180 (11933)
[  249.592348][T11961] F2FS-fs (loop7): Failed to read root inode
[  249.606257][T11933] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  249.654616][T11933] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  249.663249][T11933] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  250.057361][T11933] BTRFS info (device loop4): rebuilding free space tree
[  250.123594][T11933] BTRFS info (device loop4): disabling free space tree
[  250.138274][T11933] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  250.148478][T12003] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  250.193201][T11933] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  250.212584][T11967] loop3: detected capacity change from 0 to 32768
[  250.245783][T11933] BTRFS info (device loop4): setting nodatasum
[  250.283469][T11967] JBD2: Ignoring recovery information on journal
[  250.300252][T11933] BTRFS info (device loop4): setting nodatacow
[  250.306430][T11933] BTRFS info (device loop4): enabling ssd optimizations
[  250.356079][T11933] BTRFS info (device loop4): turning off barriers
[  250.386775][T11933] BTRFS info (device loop4): turning on flush-on-commit
[  250.420940][T11967] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  250.433068][T11933] BTRFS info (device loop4): enabling disk space caching
[  250.461769][T11933] BTRFS info (device loop4): force clearing of disk cache
[  250.511424][T11933] BTRFS info (device loop4): doing ref verification
[  250.518062][T11933] BTRFS info (device loop4): max_inline set to 4096
[  250.650217][ T5930] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  250.725340][ T5866] ocfs2: Unmounting device (7,3) on (node local)
[  250.803818][T11451] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.820824][ T5930] usb 2-1: Using ep0 maxpacket: 8
[  250.852093][ T5930] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[  250.888641][ T5930] usb 2-1: config 2 has no interface number 0
[  250.906000][ T5930] usb 2-1: config 2 interface 31 has no altsetting 0
[  250.928636][ T5930] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  250.948511][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.968719][ T5930] usb 2-1: Product: syz
[  250.987528][ T5930] usb 2-1: Manufacturer: syz
[  250.999371][T11984] loop5: detected capacity change from 0 to 32768
[  251.020204][ T5930] usb 2-1: SerialNumber: syz
[  251.060397][T11984] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2193 (11984)
[  251.144765][T11999] loop0: detected capacity change from 0 to 32768
[  251.174871][T11984] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  251.217468][T11984] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  251.240124][ T5862] kernel write not supported for file /media6 (pid: 5862 comm: kworker/0:3)
[  251.439814][T11999] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  251.439857][T11999]   allowing incompatible features above 0.0: (unknown version)
[  251.439873][T11999]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  251.466857][T11984] BTRFS info (device loop5): rebuilding free space tree
[  251.488886][T11984] BTRFS info (device loop5): enabling ssd optimizations
[  251.488919][T11984] BTRFS info (device loop5): using spread ssd allocation scheme
[  251.488941][T11984] BTRFS info (device loop5): enabling free space tree
[  251.488960][T11984] BTRFS info (device loop5): force clearing of disk cache
[  251.513913][T12050] loop3: detected capacity change from 0 to 16
[  251.515736][T12050] erofs (device loop3): mounted with root inode @ nid 36.
[  251.645726][T12011] loop7: detected capacity change from 0 to 32768
[  251.649536][ T5930] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22
[  251.668532][ T5930] usb 2-1: USB disconnect, device number 13
[  251.756862][T12011] XFS (loop7): DAX unsupported by block device. Turning off DAX.
[  251.764781][T11999] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  251.847688][T11999] bcachefs (loop0): initializing new filesystem
[  251.854274][T12011] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  251.871035][   T59] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[  251.897367][T12011] XFS (loop7): Ending clean mount
[  251.908862][T11999] bcachefs (loop0): going read-write
[  251.917272][T12011] XFS (loop7): Quotacheck needed: Please wait.
[  251.933484][T12011] XFS (loop7): Quotacheck: Done.
[  251.939445][ T5852] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  251.987632][T11999] bcachefs (loop0): marking superblocks
[  252.020977][T11999] bcachefs (loop0): initializing freespace
[  252.047654][T11999] bcachefs (loop0): done initializing freespace
[  252.099562][T11999] bcachefs (loop0): reading snapshots table
[  252.116003][T11999] bcachefs (loop0): reading snapshots done
[  252.162739][T11999] bcachefs (loop0): done starting filesystem
[  252.222815][T11511] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  252.434850][ T5853] bcachefs (loop0): shutting down
[  252.449827][ T5853] bcachefs (loop0): going read-only
[  252.479561][ T5853] bcachefs (loop0): finished waiting for writes to stop
[  252.553628][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  252.622245][T12081] syz.1.2208 (12081): drop_caches: 4
[  252.631479][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  252.668067][ T5853] bcachefs (loop0): clean shutdown complete, journal seq 4
[  252.690887][ T5853] bcachefs (loop0): marking filesystem clean
[  252.778738][ T5853] bcachefs (loop0): shutdown complete
[  252.793708][T12086] loop1: detected capacity change from 0 to 256
[  252.823401][T12086] exfat: Deprecated parameter 'namecase'
[  252.884770][T12086] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  253.009235][   T30] audit: type=1800 audit(1755692460.394:180): pid=12086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2209" name="file1" dev="loop1" ino=1048802 res=0 errno=0
[  253.082416][T12094] loop7: detected capacity change from 0 to 8
[  253.137796][T12072] loop5: detected capacity change from 0 to 32768
[  253.152223][T12094] SQUASHFS error: zstd decompression error: 10
[  253.169750][T12095] loop4: detected capacity change from 0 to 1024
[  253.170029][T12094] SQUASHFS error: zstd decompression failed, data probably corrupt
[  253.195485][T12072] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2203 (12072)
[  253.250489][T12094] SQUASHFS error: Failed to read block 0x4ec: -5
[  253.256986][T12094] SQUASHFS error: Unable to read metadata cache entry [4ea]
[  253.317739][T12094] SQUASHFS error: Unable to read inode 0x2011f
[  253.330048][T12072] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  253.393939][T12072] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  253.433582][T12102] loop1: detected capacity change from 0 to 256
[  253.511019][T12102] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  253.551430][T12102] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  253.626699][T12102] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  253.652565][T12072] BTRFS info (device loop5): enabling ssd optimizations
[  253.659515][T12072] BTRFS info (device loop5): enabling free space tree
[  253.702197][T12124] loop7: detected capacity change from 0 to 512
[  253.710566][T12072] BTRFS info (device loop5): use zstd compression, level 3
[  253.773755][   T30] audit: type=1800 audit(1755692461.174:181): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2203" name="file1" dev="loop5" ino=260 res=0 errno=0
[  253.788530][T12124] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.851934][T12124] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.868238][T12124] Quota error (device loop7): do_check_range: Getting block 1702428675 out of range 1-5
[  253.878487][T12124] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  253.890228][T12124] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2216: Failed to acquire dquot type 1
[  253.923168][ T5852] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  254.022170][T11511] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.223670][T12140] loop1: detected capacity change from 0 to 16
[  254.293459][T12140] erofs (device loop1): mounted with root inode @ nid 36.
[  254.833782][T12050] erofs (device loop3): invalid de[0].nameoff 0 @ nid 36
[  254.995452][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  255.001861][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  255.067727][T12142] loop4: detected capacity change from 0 to 32768
[  255.088352][T12170] loop3: detected capacity change from 0 to 256
[  255.121417][T12170] FAT-fs (loop3): Directory bread(block 1285) failed
[  255.190799][T12170] FAT-fs (loop3): FAT read failed (blocknr 1281)
[  255.446709][T12142] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  255.446754][T12142]   allowing incompatible features above 0.0: (unknown version)
[  255.446770][T12142]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  255.600762][T12142] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  255.619345][T12142] bcachefs (loop4): initializing new filesystem
[  255.652322][T12142] bcachefs (loop4): going read-write
[  255.670077][T12142] bcachefs (loop4): marking superblocks
[  255.711168][T12142] bcachefs (loop4): initializing freespace
[  255.748249][T12142] bcachefs (loop4): done initializing freespace
[  255.797096][T12142] bcachefs (loop4): reading snapshots table
[  255.828163][T12142] bcachefs (loop4): reading snapshots done
[  255.889475][T12142] bcachefs (loop4): done starting filesystem
[  256.132889][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2238'.
[  256.215268][T11451] bcachefs (loop4): shutting down
[  256.222434][T11451] bcachefs (loop4): going read-only
[  256.227724][T11451] bcachefs (loop4): finished waiting for writes to stop
[  256.345177][T11451] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3
[  256.385671][T11451] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  256.406569][T11451] bcachefs (loop4): clean shutdown complete, journal seq 4
[  256.435499][T11451] bcachefs (loop4): marking filesystem clean
[  256.507532][T12225] loop3: detected capacity change from 0 to 64
[  256.574792][T11451] bcachefs (loop4): shutdown complete
[  256.753998][T12235] loop5: detected capacity change from 0 to 256
[  257.072162][T12248] loop5: detected capacity change from 0 to 64
[  257.273590][T12258] loop5: detected capacity change from 0 to 256
[  257.497296][T12267] loop0: detected capacity change from 0 to 64
[  257.544450][T12267] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  257.789233][T12283] hub 9-0:1.0: USB hub found
[  257.809718][T12283] hub 9-0:1.0: 1 port detected
[  257.884089][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  258.024391][T12294] tipc: Started in network mode
[  258.029443][T12294] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  258.037871][T12294] tipc: Enabled bearer <eth:vlan0>, priority 10
[  258.060284][   T10] usb 6-1: Using ep0 maxpacket: 8
[  258.076411][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.091110][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.105666][   T10] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  258.131637][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.171352][   T10] usb 6-1: config 0 descriptor??
[  258.303903][T12306] loop7: detected capacity change from 0 to 64
[  258.379692][T12305] loop1: detected capacity change from 0 to 2048
[  258.484318][T12305] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  258.590051][   T10] cherry 0003:046A:0027.0026: fixing up Cherry Cymotion report descriptor
[  258.619811][   T10] cherry 0003:046A:0027.0026: unknown main item tag 0x0
[  258.652146][   T10] cherry 0003:046A:0027.0026: unknown main item tag 0x0
[  258.659103][   T10] cherry 0003:046A:0027.0026: unknown main item tag 0x0
[  258.696164][   T10] cherry 0003:046A:0027.0026: unknown main item tag 0x6
[  258.720257][   T10] cherry 0003:046A:0027.0026: unknown main item tag 0x5
[  258.740573][   T10] cherry 0003:046A:0027.0026: unknown main item tag 0x4
[  258.768759][   T10] cherry 0003:046A:0027.0026: unknown main item tag 0x0
[  258.788027][   T10] cherry 0003:046A:0027.0026: unknown main item tag 0x0
[  258.810478][   T10] cherry 0003:046A:0027.0026: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.5-1/input0
[  258.855037][   T10] usb 6-1: USB disconnect, device number 10
[  259.006813][T12318] fido_id[12318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  259.156159][T12312] loop7: detected capacity change from 0 to 32768
[  259.166445][T12322] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  259.170364][ T5930] tipc: Node number set to 10005162
[  259.201985][T12312] ialloc: diAlloc returned -5!
[  259.335739][T12308] loop0: detected capacity change from 0 to 32768
[  259.453786][T12315] loop1: detected capacity change from 0 to 32768
[  259.501213][T12315] XFS: noikeep mount option is deprecated.
[  259.565283][T12315] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  259.636220][T12340] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2297'.
[  259.680246][T12340] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2297'.
[  259.700689][ T5862] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  259.763945][T12340] netlink: 'syz.3.2297': attribute type 10 has an invalid length.
[  259.783519][T12315] XFS (loop1): Ending clean mount
[  259.805923][T12315] XFS (loop1): Quotacheck needed: Please wait.
[  259.870308][T12315] XFS (loop1): Quotacheck: Done.
[  259.915262][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.943324][ T5862] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  259.970567][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.005279][ T5857] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.023096][ T5862] usb 6-1: config 0 descriptor??
[  260.157715][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2303'.
[  260.479695][ T5862] prodikeys 0003:041E:2801.0027: item fetching failed at offset 3/7
[  260.507271][ T5862] prodikeys 0003:041E:2801.0027: hid parse failed
[  260.530586][ T5862] prodikeys 0003:041E:2801.0027: probe with driver prodikeys failed with error -22
[  260.609819][T12367] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2308'.
[  260.687785][ T5930] usb 6-1: USB disconnect, device number 11
[  260.781851][T12344] loop4: detected capacity change from 0 to 40427
[  260.816791][T12344] F2FS-fs (loop4): build fault injection rate: 771
[  260.853839][T12344] F2FS-fs (loop4): invalid crc value
[  261.011942][T12357] loop7: detected capacity change from 0 to 32768
[  261.034062][T12344] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  261.052262][T12384] loop3: detected capacity change from 0 to 1024
[  261.090872][T12357] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  261.096400][T12344] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  261.210558][T12357] XFS (loop7): Metadata corruption detected at __xfs_buf_ioend+0x342/0x6f0, xfs_inode block 0x4880 xfs_inode_buf_verify
[  261.268331][T12357] XFS (loop7): Unmount and run xfs_repair
[  261.275599][T12357] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  261.283503][T12357] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00  IN..............
[  261.294247][T12357] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  261.303367][T12398] netlink: 'syz.1.2318': attribute type 8 has an invalid length.
[  261.304581][T12357] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  261.328539][T11451] syz-executor: attempt to access beyond end of device
[  261.328539][T11451] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  261.334733][T12357] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  261.384683][T12357] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  261.388107][T11451] CPU: 0 UID: 0 PID: 11451 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  261.388138][T11451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  261.388154][T11451] Call Trace:
[  261.388164][T11451]  <TASK>
[  261.388174][T11451]  dump_stack_lvl+0x189/0x250
[  261.388210][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.388243][T11451]  ? __pfx_dump_stack_lvl+0x10/0x10
[  261.388273][T11451]  ? __pfx_queue_work_on+0x10/0x10
[  261.388300][T11451]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  261.388335][T11451]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  261.388376][T11451]  f2fs_handle_critical_error+0x37c/0x540
[  261.388423][T11451]  f2fs_write_end_io+0x886/0xb60
[  261.388461][T11451]  __submit_merged_bio+0x27a/0x6a0
[  261.388501][T11451]  __submit_merged_write_cond+0x255/0x530
[  261.388541][T11451]  f2fs_write_data_pages+0x261d/0x3000
[  261.388614][T11451]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  261.388664][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.388714][T11451]  ? __mod_zone_page_state+0xd7/0x140
[  261.388757][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.388787][T11451]  ? folios_put_refs+0x560/0x640
[  261.388824][T11451]  ? __pfx_folios_put_refs+0x10/0x10
[  261.388851][T11451]  ? rcu_is_watching+0x15/0xb0
[  261.388878][T11451]  ? lru_add+0xa2f/0xd80
[  261.388904][T11451]  ? lru_add+0x198/0xd80
[  261.388931][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.388961][T11451]  ? do_raw_spin_lock+0x121/0x290
[  261.388997][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.389029][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.389059][T11451]  ? do_raw_spin_unlock+0x122/0x240
[  261.389091][T11451]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  261.389132][T11451]  do_writepages+0x32e/0x550
[  261.389168][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.389197][T11451]  ? rcu_is_watching+0x15/0xb0
[  261.389222][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.389254][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.389283][T11451]  ? do_raw_spin_unlock+0x122/0x240
[  261.389318][T11451]  filemap_fdatawrite+0x199/0x240
[  261.389355][T11451]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  261.389420][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.389449][T11451]  ? rcu_is_watching+0x15/0xb0
[  261.389474][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.389507][T11451]  ? do_raw_spin_unlock+0x122/0x240
[  261.389542][T11451]  f2fs_sync_dirty_inodes+0x31f/0x830
[  261.389583][T11451]  f2fs_write_checkpoint+0x95a/0x1df0
[  261.389627][T11451]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  261.389685][T11451]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  261.389711][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.389740][T11451]  ? kfree+0x18e/0x440
[  261.389773][T11451]  ? kill_f2fs_super+0x298/0x6c0
[  261.389802][T11451]  kill_f2fs_super+0x2c3/0x6c0
[  261.389832][T11451]  ? __pfx_kill_f2fs_super+0x10/0x10
[  261.389856][T11451]  ? radix_tree_delete_item+0x2b6/0x400
[  261.389896][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.389925][T11451]  ? shrinker_free+0x2ce/0x3e0
[  261.389956][T11451]  deactivate_locked_super+0xbc/0x130
[  261.389988][T11451]  cleanup_mnt+0x425/0x4c0
[  261.390020][T11451]  task_work_run+0x1d4/0x260
[  261.390058][T11451]  ? __pfx_task_work_run+0x10/0x10
[  261.390091][T11451]  ? __x64_sys_umount+0x122/0x160
[  261.390125][T11451]  ? __pfx___x64_sys_umount+0x10/0x10
[  261.390159][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.390191][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.390220][T11451]  ? rcu_is_watching+0x15/0xb0
[  261.390248][T11451]  exit_to_user_mode_loop+0xec/0x110
[  261.390286][T11451]  do_syscall_64+0x2bd/0x3b0
[  261.390323][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.390353][T11451]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.390378][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  261.390407][T11451]  ? exc_page_fault+0x9f/0xf0
[  261.390443][T11451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.390468][T11451] RIP: 0033:0x7f94eed8ff17
[  261.390490][T11451] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  261.390512][T11451] RSP: 002b:00007fffd60d4068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  261.390539][T11451] RAX: 0000000000000000 RBX: 00007f94eee11c05 RCX: 00007f94eed8ff17
[  261.390558][T11451] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd60d4120
[  261.390578][T11451] RBP: 00007fffd60d4120 R08: 0000000000000000 R09: 0000000000000000
[  261.390594][T11451] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd60d51b0
[  261.390612][T11451] R13: 00007f94eee11c05 R14: 000000000003fc3c R15: 00007fffd60d51f0
[  261.390644][T11451]  </TASK>
[  261.391433][T11451] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  261.433798][T12357] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  261.868567][T12357] 00000060: ff ff ff 80 28 9e 82 78 00 00 00 00 00 00 00 00  ....(..x........
[  261.877552][T12357] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  261.877579][T12357] XFS (loop7): metadata I/O error in "xfs_imap_to_bp+0x127/0x2f0" at daddr 0x4880 len 64 error 117
[  261.877724][T12357] XFS (loop7): Failed to read root inode 0x2440, error 117
[  261.915857][T12357] XFS (loop7): Uncorrected metadata errors detected; please run xfs_repair.
[  262.303086][   T30] audit: type=1326 audit(1755692469.704:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12422 comm="syz.1.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729d18ebe9 code=0x7ffc0000
[  262.315746][T12424] loop1: detected capacity change from 0 to 512
[  262.325450][    C0] vkms_vblank_simulate: vblank timer overrun
[  262.400735][   T30] audit: type=1326 audit(1755692469.704:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12422 comm="syz.1.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f729d18ebe9 code=0x7ffc0000
[  262.423116][    C0] vkms_vblank_simulate: vblank timer overrun
[  262.433410][T12424] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  262.515683][   T30] audit: type=1326 audit(1755692469.704:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12422 comm="syz.1.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f729d18ec23 code=0x7ffc0000
[  262.537879][    C0] vkms_vblank_simulate: vblank timer overrun
[  262.538742][T12424] EXT4-fs (loop1): 1 truncate cleaned up
[  262.544748][   T30] audit: type=1326 audit(1755692469.704:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12422 comm="syz.1.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f729d18d69f code=0x7ffc0000
[  262.572431][    C0] vkms_vblank_simulate: vblank timer overrun
[  262.583338][   T30] audit: type=1326 audit(1755692469.704:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12422 comm="syz.1.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f729d18ec77 code=0x7ffc0000
[  262.605591][    C0] vkms_vblank_simulate: vblank timer overrun
[  262.615637][   T30] audit: type=1326 audit(1755692469.704:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12422 comm="syz.1.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f729d18d550 code=0x7ffc0000
[  262.637979][    C0] vkms_vblank_simulate: vblank timer overrun
[  262.639148][T12424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.694656][   T30] audit: type=1326 audit(1755692469.704:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12422 comm="syz.1.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f729d18e7eb code=0x7ffc0000
[  262.770341][   T30] audit: type=1326 audit(1755692469.794:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12422 comm="syz.1.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f729d18d84a code=0x7ffc0000
[  262.845192][T12442] loop4: detected capacity change from 0 to 128
[  262.857917][   T30] audit: type=1326 audit(1755692469.794:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12422 comm="syz.1.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f729d18d84a code=0x7ffc0000
[  262.887033][T12442] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  262.970906][T12442] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  262.972553][   T30] audit: type=1326 audit(1755692469.794:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12422 comm="syz.1.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f729d18d457 code=0x7ffc0000
[  263.029357][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.190286][   T13] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  263.239068][T12421] loop5: detected capacity change from 0 to 32768
[  263.247351][T12455] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2342'.
[  263.301565][T12421] btrfs: Deprecated parameter 'usebackuproot'
[  263.328853][T12421] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  263.353115][T12421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2328 (12421)
[  263.401741][T12463] netlink: 'syz.1.2346': attribute type 17 has an invalid length.
[  263.446524][T12421] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  263.492343][T12421] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  263.597951][   T59] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  263.652333][T12487] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  263.692029][T12421] BTRFS error (device loop5): failed to load root extent
[  263.699081][T12421] BTRFS warning (device loop5): try to load backup roots slot 1
[  263.740728][T12489] loop4: detected capacity change from 0 to 512
[  263.747915][T12487] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  263.752040][T12489] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  263.778058][ T3483] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  263.827060][T12421] BTRFS warning (device loop5): couldn't read tree root
[  263.835006][T12421] BTRFS warning (device loop5): try to load backup roots slot 2
[  263.853821][ T3483] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  263.883944][T12421] BTRFS warning (device loop5): couldn't read tree root
[  263.939845][T12421] BTRFS warning (device loop5): try to load backup roots slot 3
[  264.076434][T12421] BTRFS info (device loop5): rebuilding free space tree
[  264.144578][T12421] BTRFS info (device loop5): checking UUID tree
[  264.181892][T12510] loop1: detected capacity change from 0 to 128
[  264.186263][T12421] BTRFS info (device loop5): enabling ssd optimizations
[  264.209147][T12513] loop3: detected capacity change from 0 to 64
[  264.228861][T12509] loop4: detected capacity change from 0 to 1024
[  264.248422][T12421] BTRFS info (device loop5): turning off barriers
[  264.264104][T12510] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  264.286960][T12421] BTRFS info (device loop5): turning on sync discard
[  264.304915][T12510] ext4 filesystem being mounted at /434/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  264.324688][T12421] BTRFS info (device loop5): enabling free space tree
[  264.332898][T12421] BTRFS info (device loop5): force clearing of disk cache
[  264.338432][T12509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.340025][T12421] BTRFS info (device loop5): enabling auto defrag
[  264.358772][T12421] BTRFS info (device loop5): trying to use backup root at mount time
[  264.366948][T12421] BTRFS info (device loop5): use zstd compression, level 3
[  264.380231][T12421] BTRFS info (device loop5): max_inline set to 0
[  264.513179][ T5857] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  264.572109][T11451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.678832][ T5852] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  264.779025][T12530] loop1: detected capacity change from 0 to 16
[  264.790666][ T5862] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  264.809342][T12530] erofs (device loop1): mounted with root inode @ nid 36.
[  264.838057][T12530] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[  264.850627][T12530] erofs (device loop1): read error -117 @ 43 of nid 36
[  264.970547][ T5862] usb 4-1: Using ep0 maxpacket: 16
[  264.985104][ T5862] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[  265.013787][ T5862] usb 4-1: config 0 has no interface number 0
[  265.036999][ T5862] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  265.073245][ T5862] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  265.094762][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.105206][ T5862] usb 4-1: Product: syz
[  265.109861][ T5862] usb 4-1: Manufacturer: syz
[  265.130453][ T5862] usb 4-1: SerialNumber: syz
[  265.138179][ T5862] usb 4-1: config 0 descriptor??
[  265.231258][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  265.670936][ T5960] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  265.756755][ T5862] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71
[  265.781524][ T5862] usb 4-1: USB disconnect, device number 12
[  265.790123][T12570] loop5: detected capacity change from 0 to 1024
[  265.825484][T12570] hfsplus: request for non-existent node 16777216 in B*Tree
[  265.850258][T12570] hfsplus: request for non-existent node 16777216 in B*Tree
[  265.860996][ T5960] usb 5-1: Using ep0 maxpacket: 32
[  265.867843][ T5960] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  265.900237][ T5960] usb 5-1: config 0 has no interface number 0
[  265.911591][ T5960] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  265.915788][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2388'.
[  265.926570][ T5960] usb 5-1: config 0 interface 196 has no altsetting 0
[  265.973971][ T5960] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  265.993344][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.026308][ T5960] usb 5-1: Product: syz
[  266.031171][ T5960] usb 5-1: Manufacturer: syz
[  266.036879][ T5960] usb 5-1: SerialNumber: syz
[  266.049991][ T5960] usb 5-1: config 0 descriptor??
[  266.063905][T12551] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  266.181140][T12584] loop1: detected capacity change from 0 to 16
[  266.215814][T12584] erofs (device loop1): mounted with root inode @ nid 36.
[  266.378733][ T5855] Bluetooth: hci3: unknown advertising packet type: 0x82
[  266.378777][ T5855] Bluetooth: hci3: Dropping invalid advertising data
[  266.392968][ T5855] Bluetooth: hci3: Malformed LE Event: 0x02
[  266.504487][ T5960] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  266.560445][ T5960] ipheth 5-1:0.196: probe with driver ipheth failed with error -22
[  266.646500][T12604] netlink: 264 bytes leftover after parsing attributes in process `syz.3.2398'.
[  266.766535][ T5862] usb 5-1: USB disconnect, device number 15
[  267.115203][T12596] loop7: detected capacity change from 0 to 32768
[  267.235719][T12621] loop1: detected capacity change from 0 to 1024
[  267.456921][T12596] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=nojournal_transaction_names
[  267.456947][T12596]   allowing incompatible features above 0.0: (unknown version)
[  267.456963][T12596]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  267.511147][T12609] loop3: detected capacity change from 0 to 40427
[  267.522177][T12609] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  267.522204][T12609] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  267.565518][ T3575] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  267.565788][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  267.565869][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  267.565911][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  267.619659][   T36] hfsplus: b-tree write err: -5, ino 4
[  267.792568][T12649] netlink: 'syz.5.2407': attribute type 5 has an invalid length.
[  267.800315][T12609] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  267.843134][T12596] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  267.864916][T12596] bcachefs (loop7): recovering from clean shutdown, journal seq 10
[  267.901079][T12609] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  267.912323][T12596] bcachefs (loop7): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  267.912323][T12596]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  267.941850][T12609] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  268.085913][T12596] bcachefs (loop7): accounting_read... done
[  268.131985][T12596] bcachefs (loop7): alloc_read... done
[  268.135358][T12596] bcachefs (loop7): snapshots_read... done
[  268.146453][T12596] bcachefs (loop7): check_allocations...
[  268.147972][T12596] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap
[  268.147993][T12596]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq cddfaeeca0a7d1e5 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[  268.157316][T12596] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap
[  268.157336][T12596]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 6f77d90a6678a8d9 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  268.178313][T12596] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap
[  268.178334][T12596]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1be24db0106cff76 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  268.209650][T12596] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap
[  268.209675][T12596]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 592c28c0a83be2c9 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  268.225505][T12596] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap
[  268.225527][T12596]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1a83a7e47ef9f6aa written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[  268.226730][T12596] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap
[  268.226749][T12596]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 11da0ed3864cee54 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[  268.231677][T12596]  done
[  268.378658][T12674] loop1: detected capacity change from 0 to 1024
[  268.403849][T12596] bcachefs (loop7): going read-write
[  268.445090][T12596] bcachefs (loop7): journal_replay... done
[  268.553686][T12596] bcachefs (loop7): check_extents_to_backpointers...
[  268.554960][T12596] bcachefs (loop7): scanning for missing backpointers in 6/128 buckets
[  268.572925][T12674] syz.1.2416: attempt to access beyond end of device
[  268.572925][T12674] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  268.625502][T12685] loop4: detected capacity change from 0 to 256
[  268.659220][T12683] syz.1.2416: attempt to access beyond end of device
[  268.659220][T12683] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  268.704617][T12596]  done
[  268.712414][T12596] bcachefs (loop7): check_inodes... done
[  268.718778][T12685] FAT-fs (loop4): Directory bread(block 64) failed
[  268.735500][T12596] bcachefs (loop7): resume_logged_ops... done
[  268.758964][T12596] bcachefs (loop7): delete_dead_inodes... done
[  268.830115][T12596] bcachefs (loop7): Fixed errors, running fsck a second time to verify fs is clean
[  268.834265][T12685] FAT-fs (loop4): Directory bread(block 65) failed
[  268.880199][T12596] bcachefs (loop7): check_extents_to_backpointers... done
[  268.922706][T12685] FAT-fs (loop4): Directory bread(block 66) failed
[  268.936773][T12596] bcachefs (loop7): check_inodes... done
[  268.946534][T12685] FAT-fs (loop4): Directory bread(block 67) failed
[  268.974362][T12596] bcachefs (loop7): resume_logged_ops...
[  268.986360][T12685] FAT-fs (loop4): Directory bread(block 68) failed
[  268.999128][T12596]  done
[  269.020460][T12596] bcachefs (loop7): delete_dead_inodes... done
[  269.043979][T12685] FAT-fs (loop4): Directory bread(block 69) failed
[  269.069494][T12685] FAT-fs (loop4): Directory bread(block 70) failed
[  269.089727][T12596] bcachefs (loop7): done starting filesystem
[  269.102321][T12685] FAT-fs (loop4): Directory bread(block 71) failed
[  269.110110][T12685] FAT-fs (loop4): Directory bread(block 72) failed
[  269.148925][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  269.148945][   T30] audit: type=1800 audit(1755692476.544:204): pid=12596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2397" name="file2" dev="loop7" ino=1073741828 res=0 errno=0
[  269.176729][T12685] FAT-fs (loop4): Directory bread(block 73) failed
[  269.365271][T11511] bcachefs (loop7): shutting down
[  269.386745][T11511] bcachefs (loop7): going read-only
[  269.409670][T11511] bcachefs (loop7): finished waiting for writes to stop
[  269.427692][T12685] syz.4.2418: attempt to access beyond end of device
[  269.427692][T12685] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256
[  269.441268][   T30] audit: type=1800 audit(1755692476.824:205): pid=12685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2418" name="file1" dev="loop4" ino=1048807 res=0 errno=0
[  269.505841][T11511] bcachefs (loop7): flushing journal and stopping allocators, journal seq 18
[  269.539687][T11511] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 18
[  269.598510][T11511] bcachefs (loop7): clean shutdown complete, journal seq 19
[  269.656028][T11511] bcachefs (loop7): marking filesystem clean
[  269.708569][T12722] mkiss: ax0: crc mode is auto.
[  269.747508][T11511] bcachefs (loop7): shutdown complete
[  269.840460][    T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  270.020421][    T9] usb 6-1: Using ep0 maxpacket: 16
[  270.036691][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.087770][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.118542][    T9] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  270.150308][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.191321][    T9] usb 6-1: config 0 descriptor??
[  270.466447][T12754] loop4: detected capacity change from 0 to 128
[  270.496173][T12754] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  270.572971][T12754] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  270.617132][    T9] hid-multitouch 0003:1FD2:6007.0028: unknown main item tag 0x6
[  270.678040][    T9] hid-multitouch 0003:1FD2:6007.0028: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0
[  270.783630][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2456'.
[  270.831158][ T5930] usb 6-1: USB disconnect, device number 12
[  270.869376][T12764] fido_id[12764]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  270.914909][T12770] loop1: detected capacity change from 0 to 2048
[  271.007620][T12770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.075871][T12770] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.091726][T12770] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2458'.
[  271.105052][T12783] loop0: detected capacity change from 0 to 64
[  271.213780][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.235466][T12788] loop3: detected capacity change from 0 to 16
[  271.252361][T12788] erofs (device loop3): mounted with root inode @ nid 36.
[  271.591102][T12802] sp0: Synchronizing with TNC
[  272.085513][T12829] loop0: detected capacity change from 0 to 1024
[  272.166431][T12829] hfsplus: bad catalog entry type
[  272.281302][ T3483] hfsplus: b-tree write err: -5, ino 4
[  272.810276][ T5862] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  272.854632][T12859] loop0: detected capacity change from 0 to 512
[  272.874638][T12840] loop1: detected capacity change from 0 to 32768
[  272.892112][T12859] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000)
[  272.938916][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2492'.
[  272.975141][T12861] netlink: 660 bytes leftover after parsing attributes in process `syz.4.2492'.
[  272.995889][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.019519][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.044698][ T5862] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  273.055695][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.079938][ T5862] usb 4-1: config 0 descriptor??
[  273.223565][   T30] audit: type=1326 audit(1755692480.624:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729d18ebe9 code=0x7ffc0000
[  273.269016][   T30] audit: type=1326 audit(1755692480.654:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729d18ebe9 code=0x7ffc0000
[  273.272890][T12855] loop7: detected capacity change from 0 to 40427
[  273.316006][T12855] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  273.344443][T12855] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  273.355489][   T30] audit: type=1326 audit(1755692480.654:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f729d18ebe9 code=0x7ffc0000
[  273.450253][   T30] audit: type=1326 audit(1755692480.654:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.1.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729d18ebe9 code=0x7ffc0000
[  273.515060][ T5862] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x1
[  273.532576][ T5862] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x2
[  273.562879][ T5862] pyra 0003:1E7D:2CF6.0029: unbalanced delimiter at end of report description
[  273.579422][ T5862] pyra 0003:1E7D:2CF6.0029: parse failed
[  273.587070][ T5862] pyra 0003:1E7D:2CF6.0029: probe with driver pyra failed with error -22
[  273.649025][T12855] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  273.689782][T12855] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  273.723530][ T5862] usb 4-1: USB disconnect, device number 13
[  273.735736][T12855] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  273.802240][T12885] loop5: detected capacity change from 0 to 64
[  274.684581][T12915] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2516'.
[  274.732221][T12914] loop5: detected capacity change from 0 to 4096
[  274.744360][T12891] loop0: detected capacity change from 0 to 32768
[  274.813279][T12914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.835898][T12889] loop4: detected capacity change from 0 to 40427
[  274.845485][T12889] F2FS-fs (loop4): build fault injection rate: 14
[  274.889521][T12889] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  274.908405][T12889] F2FS-fs (loop4): invalid crc value
[  274.928904][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  274.953795][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  274.976170][T12914] fs-verity (loop5, inode 16): fs-verity keyring is empty, rejecting signed file!
[  275.185190][ T5852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.221665][T12889] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  275.263852][T12889] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  275.306145][T12889] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  275.483751][T12889] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  275.550334][T12889] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_convert_inline_inode+0x6bd/0x880
[  275.710764][T11451] syz-executor: attempt to access beyond end of device
[  275.710764][T11451] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  275.732571][T11451] CPU: 1 UID: 0 PID: 11451 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  275.732609][T11451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  275.732625][T11451] Call Trace:
[  275.732635][T11451]  <TASK>
[  275.732644][T11451]  dump_stack_lvl+0x189/0x250
[  275.732681][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.732713][T11451]  ? __pfx_dump_stack_lvl+0x10/0x10
[  275.732743][T11451]  ? __pfx_queue_work_on+0x10/0x10
[  275.732768][T11451]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  275.732803][T11451]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  275.732842][T11451]  f2fs_handle_critical_error+0x37c/0x540
[  275.732885][T11451]  f2fs_write_end_io+0x886/0xb60
[  275.732920][T11451]  __submit_merged_bio+0x27a/0x6a0
[  275.732959][T11451]  __submit_merged_write_cond+0x255/0x530
[  275.732998][T11451]  f2fs_write_data_pages+0x261d/0x3000
[  275.733059][T11451]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  275.733097][T11451]  ? is_bpf_text_address+0x26/0x2b0
[  275.733143][T11451]  ? arch_stack_walk+0xfc/0x150
[  275.733194][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.733223][T11451]  ? rcu_is_watching+0x15/0xb0
[  275.733250][T11451]  ? unwind_next_frame+0xa5/0x2390
[  275.733279][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.733308][T11451]  ? css_rstat_updated+0x23a/0x4f0
[  275.733338][T11451]  ? __pfx_css_rstat_updated+0x10/0x10
[  275.733374][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.733406][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.733435][T11451]  ? do_raw_spin_lock+0x121/0x290
[  275.733470][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.733501][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.733530][T11451]  ? do_raw_spin_unlock+0x122/0x240
[  275.733561][T11451]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  275.733603][T11451]  do_writepages+0x32e/0x550
[  275.733640][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.733668][T11451]  ? rcu_is_watching+0x15/0xb0
[  275.733693][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.733724][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.733753][T11451]  ? do_raw_spin_unlock+0x122/0x240
[  275.733787][T11451]  filemap_fdatawrite+0x199/0x240
[  275.733823][T11451]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  275.733882][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.733911][T11451]  ? rcu_is_watching+0x15/0xb0
[  275.733935][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.733967][T11451]  ? do_raw_spin_unlock+0x122/0x240
[  275.734000][T11451]  f2fs_sync_dirty_inodes+0x31f/0x830
[  275.734035][T11451]  f2fs_write_checkpoint+0x95a/0x1df0
[  275.734075][T11451]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  275.734099][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.734157][T11451]  ? kill_f2fs_super+0x298/0x6c0
[  275.734184][T11451]  kill_f2fs_super+0x2c3/0x6c0
[  275.734212][T11451]  ? __pfx_kill_f2fs_super+0x10/0x10
[  275.734236][T11451]  ? radix_tree_delete_item+0x2b6/0x400
[  275.734274][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.734302][T11451]  ? shrinker_free+0x2ce/0x3e0
[  275.734332][T11451]  deactivate_locked_super+0xbc/0x130
[  275.734369][T11451]  cleanup_mnt+0x425/0x4c0
[  275.734400][T11451]  task_work_run+0x1d4/0x260
[  275.734437][T11451]  ? __pfx_task_work_run+0x10/0x10
[  275.734470][T11451]  ? __x64_sys_umount+0x122/0x160
[  275.734504][T11451]  ? __pfx___x64_sys_umount+0x10/0x10
[  275.734536][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.734567][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.734595][T11451]  ? rcu_is_watching+0x15/0xb0
[  275.734621][T11451]  exit_to_user_mode_loop+0xec/0x110
[  275.734659][T11451]  do_syscall_64+0x2bd/0x3b0
[  275.734697][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.734726][T11451]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.734750][T11451]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.734779][T11451]  ? exc_page_fault+0x9f/0xf0
[  275.734813][T11451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.734838][T11451] RIP: 0033:0x7f94eed8ff17
[  275.734860][T11451] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  275.734881][T11451] RSP: 002b:00007fffd60d4068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  275.734908][T11451] RAX: 0000000000000000 RBX: 00007f94eee11c05 RCX: 00007f94eed8ff17
[  275.734925][T11451] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd60d4120
[  275.734942][T11451] RBP: 00007fffd60d4120 R08: 0000000000000000 R09: 0000000000000000
[  275.734958][T11451] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd60d51b0
[  275.734976][T11451] R13: 00007f94eee11c05 R14: 000000000004347b R15: 00007fffd60d51f0
[  275.735004][T11451]  </TASK>
[  275.735015][T11451] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  276.326834][T12929] loop1: detected capacity change from 0 to 32768
[  276.348627][T12929] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  276.504977][T12929] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  276.537083][T12940] loop7: detected capacity change from 0 to 32768
[  276.632949][   T30] audit: type=1800 audit(1755692484.034:210): pid=12929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2521" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  276.743515][T12940] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  276.743552][T12940]   allowing incompatible features above 0.0: (unknown version)
[  276.743567][T12940]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  276.776134][T12956] loop5: detected capacity change from 0 to 32768
[  276.780757][T12956] XFS: ikeep mount option is deprecated.
[  276.780782][T12956] XFS: ikeep mount option is deprecated.
[  276.780801][T12956] XFS: noikeep mount option is deprecated.
[  276.800005][T12977] loop0: detected capacity change from 0 to 64
[  276.838303][ T5857] ocfs2: Unmounting device (7,1) on (node local)
[  276.855502][T12956] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.199634][T12956] XFS (loop5): Ending clean mount
[  277.341756][T12940] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  277.372555][T12940] bcachefs (loop7): recovering from clean shutdown, journal seq 10
[  277.398083][ T5852] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.404105][T12940] bcachefs (loop7): Version upgrade required:
[  277.404105][T12940] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  277.404105][T12940] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  277.404105][T12940]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  277.530903][T12940] bcachefs (loop7): dropping and reconstructing all alloc info
[  277.616828][T12940] bcachefs (loop7): accounting_read... done
[  277.667662][T12940] bcachefs (loop7): alloc_read... done
[  277.689551][T12940] bcachefs (loop7): snapshots_read... done
[  277.717550][T12940] bcachefs (loop7): done starting filesystem
[  278.001103][T11511] bcachefs (loop7): shutting down
[  278.087699][T11511] bcachefs (loop7): shutdown complete
[  278.280545][T13024] loop5: detected capacity change from 0 to 8192
[  278.434931][T13028] loop0: detected capacity change from 0 to 4096
[  278.545255][T13028] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  278.606508][T13024] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  278.712383][T13034] loop1: detected capacity change from 0 to 128
[  278.774121][T13034] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  278.812823][T13034] ext4 filesystem being mounted at /490/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  278.832936][T13020] loop3: detected capacity change from 0 to 32768
[  278.914697][T13020] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2556 (13020)
[  278.996836][T13020] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  279.031666][T13020] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  279.058736][ T5857] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  279.252926][T13020] BTRFS info (device loop3): enabling ssd optimizations
[  279.301469][T13020] BTRFS info (device loop3): enabling free space tree
[  279.499280][ T5866] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  279.783210][T13044] loop5: detected capacity change from 0 to 32768
[  279.814739][T13044] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2564 (13044)
[  279.865787][T13044] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  279.911686][T13044] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  280.070675][ T1204] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[  280.134031][T13044] BTRFS info (device loop5): setting nodatasum
[  280.155112][T13044] BTRFS info (device loop5): setting nodatacow
[  280.184410][T13044] BTRFS info (device loop5): enabling free space tree
[  280.226410][T13044] BTRFS info (device loop5): max_inline set to 0
[  280.266660][ T1204] usb 5-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config
[  280.326295][ T1204] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[  280.360724][ T1204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.455132][ T1204] usb 5-1: probing VID:PID(2201:012C)   
[  280.483244][ T1204] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs
[  280.532479][ T5852] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  280.546946][ T1204] vub300 5-1:64.0: probe with driver vub300 failed with error -22
[  280.602771][T13097] loop1: detected capacity change from 0 to 32768
[  280.643894][T13097] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2578 (13097)
[  280.706765][T13112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2584'.
[  280.709838][ T1204] usb 5-1: USB disconnect, device number 16
[  280.719088][T13112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2584'.
[  280.733721][T13097] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  280.748463][T13097] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  280.798135][T13097] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  281.022566][T13106] loop0: detected capacity change from 0 to 32768
[  281.082022][T13097] BTRFS info (device loop1): rebuilding free space tree
[  281.104596][T13134] loop5: detected capacity change from 0 to 512
[  281.116301][T13134] EXT4-fs: Ignoring removed orlov option
[  281.132736][T13134] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  281.140500][T13106] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  281.155097][T13097] BTRFS info (device loop1): disabling free space tree
[  281.184194][T13097] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  281.195626][T13097] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  281.220734][ T5862] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  281.230846][T13097] BTRFS info (device loop1): setting nodatasum
[  281.237023][T13097] BTRFS info (device loop1): turning off barriers
[  281.290608][T13097] BTRFS info (device loop1): enabling disk space caching
[  281.328081][T13097] BTRFS info (device loop1): force clearing of disk cache
[  281.360324][T13097] BTRFS info (device loop1): doing ref verification
[  281.404579][ T5853] ocfs2: Unmounting device (7,0) on (node local)
[  281.440446][ T5862] usb 4-1: Using ep0 maxpacket: 32
[  281.457195][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0
[  281.488909][ T5862] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  281.519390][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.546089][   T30] audit: type=1800 audit(1755692488.944:211): pid=13097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2578" name="bus" dev="loop1" ino=263 res=0 errno=0
[  281.580244][ T5862] usb 4-1: Product: syz
[  281.592734][ T5862] usb 4-1: Manufacturer: syz
[  281.608806][ T5862] usb 4-1: SerialNumber: syz
[  281.644266][ T5862] usb 4-1: config 0 descriptor??
[  281.731100][ T5857] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  281.861398][T13152] loop5: detected capacity change from 0 to 1024
[  281.945482][T13152] hfsplus: bad catalog entry type
[  282.089903][ T5862] gs_usb 4-1:0.0: Configuring for 2 interfaces
[  282.222187][T13167] loop7: detected capacity change from 0 to 512
[  282.264610][T13163] loop1: detected capacity change from 0 to 4096
[  282.284194][T13167] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  282.291377][ T5862] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  282.337567][ T5862] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[  282.376828][T13167] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  282.395105][ T5862] usb 4-1: USB disconnect, device number 14
[  282.410332][T13167] System zones: 0-2, 18-18, 34-34
[  282.416182][T13163] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  282.469022][T13167] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.488054][T13181] loop4: detected capacity change from 0 to 256
[  282.520410][T13167] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.572495][T13181] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  282.663553][T13179] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  282.693735][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.740305][T13181] FAT-fs (loop4): Filesystem has been set read-only
[  282.776083][   T36] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32896 with max blocks 1 with error 28
[  282.789288][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.827973][   T36] EXT4-fs (loop7): This should not happen!! Data will be lost
[  282.827973][   T36] 
[  282.850255][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.858784][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.858855][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.858883][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.858911][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.858963][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.858990][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859019][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859071][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859098][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859125][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859181][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859208][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859236][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859289][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859316][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859344][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859397][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859424][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859453][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859505][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859532][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859915][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.859974][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.860002][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.860032][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.860086][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.860113][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.865532][   T36] EXT4-fs (loop7): Total free blocks count 0
[  282.865554][   T36] EXT4-fs (loop7): Free/Dirty block details
[  282.865571][   T36] EXT4-fs (loop7): free_blocks=39626
[  282.865590][   T36] EXT4-fs (loop7): dirty_blocks=1
[  282.865607][   T36] EXT4-fs (loop7): Block reservation details
[  282.865622][   T36] EXT4-fs (loop7): i_reserved_data_blocks=1
[  282.876038][T11511] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.896494][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.896564][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.896593][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.896623][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.896686][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.896714][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.896744][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.896799][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.896826][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.896856][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.896913][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.896940][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.896969][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897026][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897055][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897085][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897140][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897169][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897198][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897255][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897283][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897311][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897371][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897398][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897428][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897486][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897515][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897545][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897601][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897629][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897666][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897722][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897751][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897779][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897835][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897863][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897892][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897950][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.897979][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.898007][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.898064][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.898091][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.898126][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.898154][T13181] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.898317][   T30] audit: type=1800 audit(1755692490.294:212): pid=13181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2605" name="file1" dev="loop4" ino=1048809 res=0 errno=0
[  282.898984][T13192] loop5: detected capacity change from 0 to 64
[  282.972818][T13196] loop7: detected capacity change from 0 to 64
[  283.909322][T13201] loop3: detected capacity change from 0 to 32768
[  284.024254][T13201] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.110261][ T5855] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  284.116459][ T5872] Bluetooth: hci0: command 0x0406 tx timeout
[  284.201137][T13201] XFS (loop3): Ending clean mount
[  284.229725][T13201] XFS (loop3): Quotacheck needed: Please wait.
[  284.298881][T13201] XFS (loop3): Quotacheck: Done.
[  284.356344][   T30] audit: type=1800 audit(1755692491.754:213): pid=13201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2616" name="bus" dev="loop3" ino=9291 res=0 errno=0
[  284.384194][T13205] loop0: detected capacity change from 0 to 32768
[  284.453923][T13235] loop7: detected capacity change from 0 to 256
[  284.476496][T13235] exfat: Deprecated parameter 'utf8'
[  284.485042][ T5866] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.536281][T13235] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xdf1ac56c, utbl_chksum : 0xe619d30d)
[  284.623299][T13207] loop4: detected capacity change from 0 to 32768
[  284.677870][T13207] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2617 (13207)
[  284.804253][T13207] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  284.860259][T13207] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  284.958652][T13252] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[  285.072935][T13207] BTRFS info (device loop4): enabling ssd optimizations
[  285.102781][T13207] BTRFS info (device loop4): enabling free space tree
[  285.127885][T13269] loop3: detected capacity change from 0 to 1024
[  285.219992][T13273] loop1: detected capacity change from 0 to 64
[  285.223508][   T30] audit: type=1800 audit(1755692492.614:214): pid=13207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2617" name="file1" dev="loop4" ino=260 res=0 errno=0
[  285.275375][T13269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.355827][T11451] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  285.924106][T13298] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2648'.
[  286.086546][T13302] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2650'.
[  286.152460][ T5866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.200032][T13271] loop7: detected capacity change from 0 to 32768
[  286.544613][T13291] loop4: detected capacity change from 0 to 32768
[  286.639407][T13291] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  286.849372][T13310] loop3: detected capacity change from 0 to 32768
[  286.870348][T11451] ocfs2: Unmounting device (7,4) on (node local)
[  286.899237][T13310] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2652 (13310)
[  287.009524][T13310] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  287.043093][T13310] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  287.178013][T13310] BTRFS info (device loop3): enabling ssd optimizations
[  287.226454][T13310] BTRFS info (device loop3): enabling free space tree
[  287.260742][ T5960] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  287.284167][T13310] BTRFS info (device loop3): use zstd compression, level 3
[  287.460935][ T5960] usb 5-1: Using ep0 maxpacket: 16
[  287.483054][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.514471][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.554055][ T5960] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  287.592095][ T5866] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  287.602549][ T5960] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  287.656868][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.698857][ T5960] usb 5-1: config 0 descriptor??
[  287.875161][T13324] loop7: detected capacity change from 0 to 40427
[  287.926239][T13324] F2FS-fs: heap/no_heap options were deprecated
[  287.969010][T13324] F2FS-fs (loop7): build fault injection rate: 19
[  287.997286][T13376] syz_tun: entered promiscuous mode
[  288.006654][T13324] F2FS-fs (loop7): build fault injection type: 0x3bfe8c
[  288.021216][T13376] vlan2: entered promiscuous mode
[  288.049358][T13324] F2FS-fs (loop7): invalid crc value
[  288.075195][T13324] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  288.135352][ T5960] microsoft 0003:045E:07DA.002A: ignoring exceeding usage max
[  288.185070][ T5960] microsoft 0003:045E:07DA.002A: unsupported Resolution Multiplier 0
[  288.222134][ T5960] microsoft 0003:045E:07DA.002A: implement() called with n (152) > 32! (kworker/1:6)
[  288.263588][T13324] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  288.324945][T13324] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  288.337833][T13388] loop3: detected capacity change from 0 to 512
[  288.339953][ T5960] microsoft 0003:045E:07DA.002A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  288.396570][ T5960] microsoft 0003:045E:07DA.002A: no inputs found
[  288.410993][ T5960] microsoft 0003:045E:07DA.002A: could not initialize ff, continuing anyway
[  288.432734][T13388] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  288.433241][ T5960] usb 5-1: USB disconnect, device number 17
[  288.456797][T13324] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  288.506756][T13392] fido_id[13392]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  288.520220][T13388] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  288.590657][T13388] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2681: Corrupt directory, running e2fsck is recommended
[  288.626356][T13388] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  288.678435][T13388] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2681: corrupted in-inode xattr: invalid ea_ino
[  288.687318][T13399] loop1: detected capacity change from 0 to 4096
[  288.730930][T13388] EXT4-fs (loop3): Remounting filesystem read-only
[  288.738539][T13388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.777971][T13399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.861539][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2686'.
[  288.885539][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.974516][ T5866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.975098][T13405] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2688'.
[  289.176546][T13414] tipc: Started in network mode
[  289.187800][T13414] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  289.202144][T13414] tipc: Enabled bearer <udp:syz0>, priority 0
[  289.244869][T13415] sp0: Synchronizing with TNC
[  289.349049][T13409] loop1: detected capacity change from 0 to 4096
[  289.534670][T13426] loop0: detected capacity change from 0 to 64
[  289.782467][T13436] loop5: detected capacity change from 0 to 512
[  289.821698][T13436] EXT4-fs: Ignoring removed oldalloc option
[  289.879288][T13436] EXT4-fs (loop5): 1 truncate cleaned up
[  289.884176][T13436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.892800][   T30] audit: type=1800 audit(1755692497.294:215): pid=13436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2702" name="file1" dev="loop5" ino=15 res=0 errno=0
[  289.976096][ T5852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.012312][T13447] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2704'.
[  290.012565][T13444] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2704'.
[  290.062245][T13449] loop4: detected capacity change from 0 to 64
[  290.101645][T13412] loop3: detected capacity change from 0 to 32768
[  290.179351][T13412] diRead: diIAGRead returned -5
[  290.183675][T13453] loop7: detected capacity change from 0 to 8
[  290.248091][T13453] SQUASHFS error: zstd decompression error: 10
[  290.248109][T13453] SQUASHFS error: zstd decompression failed, data probably corrupt
[  290.248136][T13453] SQUASHFS error: Failed to read block 0x60: -5
[  290.248247][T13453] SQUASHFS error: zstd decompression error: 10
[  290.248262][T13453] SQUASHFS error: zstd decompression failed, data probably corrupt
[  290.248286][T13453] SQUASHFS error: Failed to read block 0x60: -5
[  290.321083][    T9] tipc: Node number set to 4269801488
[  290.719213][T13476] loop7: detected capacity change from 0 to 256
[  290.779170][T13476] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  290.779191][T13476] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  290.810732][ T5960] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  290.826454][T13476] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  290.889236][T13480] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.983564][ T5960] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  290.983597][ T5960] usb 6-1: config 0 has no interface number 0
[  290.983640][ T5960] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  290.983670][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.985394][ T5960] usb 6-1: config 0 descriptor??
[  290.988887][ T5960] usb 6-1: selecting invalid altsetting 1
[  290.989008][ T5960] dvb_ttusb_budget: ttusb_init_controller: error
[  290.989022][ T5960] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  291.120371][ T5960] DVB: Unable to find symbol cx22700_attach()
[  291.189545][ T5960] DVB: Unable to find symbol tda10046_attach()
[  291.189562][ T5960] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  291.234025][ T5862] usb 6-1: USB disconnect, device number 13
[  291.408031][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2728'.
[  291.439689][T13474] loop1: detected capacity change from 0 to 32768
[  291.795624][T13515] syz.3.2736 (13515) used obsolete PPPIOCDETACH ioctl
[  291.863596][T13517] loop4: detected capacity change from 0 to 2048
[  291.925723][T13517] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  291.944798][T13523] loop5: detected capacity change from 0 to 256
[  291.966454][T13523] exfat: Deprecated parameter 'utf8'
[  291.985960][T13523] exfat: Deprecated parameter 'namecase'
[  292.107462][T13523] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d)
[  292.476701][T13544] loop1: detected capacity change from 0 to 256
[  292.529428][T13544] FAT-fs (loop1): Directory bread(block 64) failed
[  292.552423][T13544] FAT-fs (loop1): Directory bread(block 65) failed
[  292.616739][T13544] FAT-fs (loop1): Directory bread(block 66) failed
[  292.645036][T13544] FAT-fs (loop1): Directory bread(block 67) failed
[  292.695003][T13513] loop0: detected capacity change from 0 to 32768
[  292.701787][    T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  292.705025][T13544] FAT-fs (loop1): Directory bread(block 68) failed
[  292.747029][T13513] XFS: ikeep mount option is deprecated.
[  292.757504][T13513] XFS: ikeep mount option is deprecated.
[  292.758379][T13544] FAT-fs (loop1): Directory bread(block 69) failed
[  292.765043][T13513] XFS: noikeep mount option is deprecated.
[  292.797395][T13544] FAT-fs (loop1): Directory bread(block 70) failed
[  292.825580][T13544] FAT-fs (loop1): Directory bread(block 71) failed
[  292.871523][T13544] FAT-fs (loop1): Directory bread(block 72) failed
[  292.882308][T13544] FAT-fs (loop1): Directory bread(block 73) failed
[  292.900238][    T9] usb 5-1: Using ep0 maxpacket: 16
[  292.910582][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.929819][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.943405][T13513] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  292.954238][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  292.988462][    T9] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  293.017841][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.080970][    T9] usb 5-1: config 0 descriptor??
[  293.103178][T13568] hub 8-0:1.0: USB hub found
[  293.108029][T13568] hub 8-0:1.0: 1 port detected
[  293.174778][T13513] XFS (loop0): Ending clean mount
[  293.223436][T13574] loop1: detected capacity change from 0 to 256
[  293.388449][ T5853] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  293.524110][T13580] loop1: detected capacity change from 0 to 64
[  293.536152][    T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input18
[  293.604075][T13580] hfs: small file entry
[  293.615967][    T9] shield 0003:0955:7214.002B: Registered Thunderstrike controller
[  293.665287][    T9] shield 0003:0955:7214.002B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[  293.762549][    T9] usb 5-1: USB disconnect, device number 18
[  293.770098][   T10] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  293.799436][   T10] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  293.846229][   T10] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  293.910852][   T10] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  294.087881][T13598] loop1: detected capacity change from 0 to 256
[  294.114323][T13598] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  294.144711][T13598] exFAT-fs (loop1): valid_size(150994954) is greater than size(10)
[  294.315996][T13603] syz_tun: entered promiscuous mode
[  294.316072][T13603] vlan3: entered promiscuous mode
[  294.414842][T13608] smc: net device bond0 applied user defined pnetid SYZ0
[  294.619346][T13610] loop3: detected capacity change from 0 to 8192
[  294.653470][ T6933]  loop3: p1[EZD] p2 p3 p4
[  294.667481][ T6933] loop3: p3 start 117772289 is beyond EOD, truncated
[  294.667511][ T6933] loop3: p4 size 262144 extends beyond EOD, truncated
[  294.683203][T13610]  loop3: p1[EZD] p2 p3 p4
[  294.692114][T13610] loop3: p3 start 117772289 is beyond EOD, truncated
[  294.692145][T13610] loop3: p4 size 262144 extends beyond EOD, truncated
[  295.097148][ T6933] udevd[6933]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  295.107784][ T8116] udevd[8116]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  295.121382][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  295.134593][T13606] loop1: detected capacity change from 0 to 32768
[  295.169268][T13606] XFS: ikeep mount option is deprecated.
[  295.211170][T13606] XFS: ikeep mount option is deprecated.
[  295.213541][T13623] vivid-000: disconnect
[  295.216856][T13606] XFS: noikeep mount option is deprecated.
[  295.232592][T13622] vivid-000: reconnect
[  295.274988][ T6229] udevd[6229]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  295.275781][ T8116] udevd[8116]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  295.300920][ T6933] udevd[6933]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  295.334275][T13606] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  295.705391][T13650] syz_tun: entered promiscuous mode
[  295.758843][T13606] XFS (loop1): Ending clean mount
[  295.760562][T13650] vlan2: entered promiscuous mode
[  295.926750][ T5857] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  295.926940][T13659] loop4: detected capacity change from 0 to 1024
[  296.614205][T13692] loop5: detected capacity change from 0 to 1024
[  296.657719][T13692] hfsplus: Unknown parameter '��{�
[  296.657719][T13692] OB���诗r4�|�K���!B���Z"E�k(��a��3.<8'
[  296.670881][T13693] sp0: Synchronizing with TNC
[  296.751014][ T5872] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  296.762571][ T5872] Bluetooth: hci5: Injecting HCI hardware error event
[  296.769463][ T5855] Bluetooth: hci5: hardware error 0x00
[  296.973559][   T30] audit: type=1326 audit(1755692504.374:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.4.2821" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94eed8ebe9 code=0x0
[  297.191827][T13720] program syz.0.2827 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  297.203475][T13722] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[  297.243239][T13725] program syz.0.2827 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  297.255164][    C0] Oops: divide error: 0000 [#1] SMP KASAN NOPTI
[  297.255298][T13722] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[  297.261411][    C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[  297.278779][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  297.282210][T13725] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  297.288830][    C0] Workqueue: rcu_gp process_srcu
[  297.302053][    C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0
[  297.308150][    C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 <f7> 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01
[  297.327762][    C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046
[  297.333843][    C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff888074ce3680
[  297.341813][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888075aa3000
[  297.349784][    C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 1ffff1100eb54600
[  297.357760][    C0] R10: dffffc0000000000 R11: ffffffff88ed5560 R12: dffffc0000000000
[  297.365730][    C0] R13: ffff888074ce3638 R14: 0000000000000000 R15: ffff888074ce3600
[  297.373707][    C0] FS:  0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
[  297.382638][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  297.389231][    C0] CR2: 00007f024dcf5000 CR3: 000000007ae06000 CR4: 0000000000350ef0
[  297.397211][    C0] Call Trace:
[  297.400491][    C0]  <IRQ>
[  297.403339][    C0]  ? __pfx_das16m1_ai_munge+0x10/0x10
[  297.408712][    C0]  comedi_buf_write_samples+0x369/0x5a0
[  297.414276][    C0]  das16m1_handler+0x213/0x4b0
[  297.419040][    C0]  das16m1_interrupt+0xaf/0x180
[  297.423877][    C0]  ? __pfx_das16m1_interrupt+0x10/0x10
[  297.429325][    C0]  __handle_irq_event_percpu+0x28c/0x980
[  297.434958][    C0]  ? __pfx___handle_irq_event_percpu+0x10/0x10
[  297.441108][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.446824][    C0]  ? rcu_is_watching+0x15/0xb0
[  297.451585][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.457215][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.462841][    C0]  ? do_raw_spin_unlock+0x122/0x240
[  297.468034][    C0]  handle_irq_event+0x8b/0x1e0
[  297.472792][    C0]  ? handle_edge_irq+0x229/0xa10
[  297.477724][    C0]  handle_edge_irq+0x23b/0xa10
[  297.482486][    C0]  __common_interrupt+0x141/0x1f0
[  297.487516][    C0]  common_interrupt+0xb6/0xe0
[  297.492184][    C0]  </IRQ>
[  297.495095][    C0]  <TASK>
[  297.498032][    C0]  asm_common_interrupt+0x26/0x40
[  297.503044][    C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50
[  297.508846][    C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ea 5c 21 f6 48 89 df e8 42 f4 21 f6 e8 0d 46 4b f6 fb bf 01 00 00 00 <e8> a2 ee 13 f6 65 8b 05 6b 41 24 07 85 c0 74 07 5b e9 3c 32 94 f5
[  297.528441][    C0] RSP: 0018:ffffc900000e7a70 EFLAGS: 00000282
[  297.534506][    C0] RAX: f821fafb85146200 RBX: ffff8880b8639700 RCX: f821fafb85146200
[  297.542468][    C0] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: 0000000000000001
[  297.550430][    C0] RBP: ffffc900000e7c70 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[  297.558433][    C0] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffff8880b8639700
[  297.566395][    C0] R13: ffff888140ef5ad0 R14: dffffc0000000000 R15: 0000000000800000
[  297.574378][    C0]  process_scheduled_works+0x8ce/0x17b0
[  297.579948][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  297.585926][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.591561][    C0]  worker_thread+0x8a0/0xda0
[  297.596157][    C0]  kthread+0x711/0x8a0
[  297.600226][    C0]  ? __pfx_worker_thread+0x10/0x10
[  297.605340][    C0]  ? __pfx_kthread+0x10/0x10
[  297.609927][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.615558][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.620787][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.626416][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  297.631610][    C0]  ? __pfx_kthread+0x10/0x10
[  297.636200][    C0]  ret_from_fork+0x3fc/0x770
[  297.640783][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  297.645891][    C0]  ? __switch_to_asm+0x39/0x70
[  297.650657][    C0]  ? __switch_to_asm+0x33/0x70
[  297.655440][    C0]  ? __pfx_kthread+0x10/0x10
[  297.660025][    C0]  ret_from_fork_asm+0x1a/0x30
[  297.664794][    C0]  </TASK>
[  297.667792][    C0] Modules linked in:
[  297.671676][    C0] ---[ end trace 0000000000000000 ]---
[  297.677114][    C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0
[  297.683202][    C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 <f7> 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01
[  297.702798][    C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046
[  297.708859][    C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff888074ce3680
[  297.716816][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888075aa3000
[  297.724773][    C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 1ffff1100eb54600
[  297.732726][    C0] R10: dffffc0000000000 R11: ffffffff88ed5560 R12: dffffc0000000000
[  297.740682][    C0] R13: ffff888074ce3638 R14: 0000000000000000 R15: ffff888074ce3600
[  297.748638][    C0] FS:  0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
[  297.757557][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  297.764157][    C0] CR2: 00007f024dcf5000 CR3: 000000007ae06000 CR4: 0000000000350ef0
[  297.772123][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[  297.779580][    C0] Kernel Offset: disabled
[  297.783890][    C0] Rebooting in 86400 seconds..