last executing test programs:

4.957010118s ago: executing program 1 (id=502):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x40040)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)

4.442513365s ago: executing program 1 (id=512):
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f00000002c0)={'stack ', ':\x00\b\xc4\x99\x10\tI\xc22b\xe8\r\xfa\xc1\xd6-\b\xd4-\xce\xeapE\xb53&\v\xa0\xd3\v#E\xc4I\x97\xfd\x10\xd5m\x0e,B{<\xa7:\xc2\njN\f\xf5}\xdes\xab\xc9\xd5\x9b\x80I\x83\x8b\x1c\x00\x9ci\x9a\x03\xdd\xd6t\xe5we\n\xb0(L\x95\xf7P\x1f\x95\x06\x01\xb8\xa3\"\xc7M\x9e\xdfk\xc0j\xea\x1f\xf1\xa4&\x95)\xff\xa5\xe9\b\x80\xf10t\xc5B\xe5an\xb8+;\x86\v_\x18tX\xe5\f\xef\x0fO\x10Y!\a\xad\xe7\x94\x96gPs\'Y!7\xc2\v^wt\xe5\x1a\xdc`\xeeQo\xd2|<\xd9\x84\v\x1c%V8\"\x14\xea(tm\xf6\xa5\xd6\xd7\xd5\xec\x9b\x12\xa6\xd5\x1c\x19\x99\xe7\xa0\t\x1b\xfd\nZ%\xfeC\x06^\'^K\x8c\x95\x13\x9e\x8a\f+\x83c\xc0\xfd}tC\xd5\xca\xfe\xbb^K'}, 0xe4)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

4.157047814s ago: executing program 1 (id=516):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xa}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000022c0)='p', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0xffff, @local, 0x8}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000b80)='D', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000880)={0x0, 0x6, 0x5, 0x7, 0x0, 0x2, 0x5, 0x6, {0x0, @in6={{0xa, 0x8e5, 0xd, @mcast2, 0x100}}, 0x3, 0x7, 0xfffffffb, 0x19, 0x2}}, &(0x7f0000000180)=0xb0)

4.079222756s ago: executing program 2 (id=518):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000400), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10)

3.933657341s ago: executing program 1 (id=519):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x30000001})
epoll_pwait2(r1, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0)

3.797984457s ago: executing program 2 (id=522):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

3.668229854s ago: executing program 1 (id=524):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e94b00", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50)

3.585850569s ago: executing program 3 (id=525):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x3, 0x9, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b32, &(0x7f0000000040))

3.340977796s ago: executing program 3 (id=526):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x6ad01, 0x0)
r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000440)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x521c, 0x1, 0x61, 0x0, 0x18)

3.33166987s ago: executing program 0 (id=527):
r0 = socket$netlink(0x10, 0x3, 0x0)
fsetxattr(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="757365722e05b5e43e412e99ab075a01996f303f61840e93ce80b824406183fefa59e771bf525d7b54911b12692b93827620972d9b0fbe64e39057b59872df3d"], 0x0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000008c0)={0x1, &(0x7f0000000900)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

3.183157448s ago: executing program 3 (id=528):
r0 = socket$inet6(0xa, 0x1, 0x100)
r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x58bb, 0x10000, 0x10001, 0xa4}, &(0x7f0000000740)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000000)=@caif=@dbg={0x25, 0x3d, 0x4}, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

3.120888733s ago: executing program 0 (id=529):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0)
write$cgroup_pid(r0, &(0x7f00000003c0), 0x12)

2.999347941s ago: executing program 0 (id=530):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x62981)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue1\x00', 0x20e4})
writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="238292", 0xfff6}], 0x2)

2.991477442s ago: executing program 3 (id=531):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
timer_settime(0x0, 0x1, 0x0, 0x0)

2.518132158s ago: executing program 2 (id=533):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000280)={[0x50000, 0x4000, 0xffffffff, 0xc000], 0x8, 0x92, 0x10})

2.500023012s ago: executing program 1 (id=534):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000000080)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="e2", 0x1}], 0x1)

2.333013388s ago: executing program 0 (id=535):
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000100)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
pidfd_getfd(r0, r0, 0x0)

2.332616789s ago: executing program 4 (id=536):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd})
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f00000000c0))

2.211612607s ago: executing program 2 (id=537):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)})
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001a80)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5", @ANYRES64], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x3f, &(0x7f0000003c00)="900100"/63)

2.140208133s ago: executing program 0 (id=538):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xc4042, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

1.947603007s ago: executing program 4 (id=539):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/class/tty/ttyS0/console\x00', 0x42002, 0x0)
write$P9_RSTAT(r0, &(0x7f0000000700)={0x49, 0x7d, 0x2, {0x0, 0x42, 0x9, 0x7, {0x10, 0x3, 0x6}, 0x40800000, 0x2, 0x6, 0x9, 0x1, '\xcb', 0x7, '\\[:]-^}', 0x5, 'meta\x00', 0x2, ',:'}}, 0x49)

1.786453974s ago: executing program 4 (id=540):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x3, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0x4b564d07, 0x0, 0x4}]})

1.759716147s ago: executing program 3 (id=541):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000340)='./file0\x00', 0x300401a, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c007bd598141a550df33dd47ded539aef131d50bbd580000000000000000b9b0fa44661887a1633f523184b4e52fbab2783d4a8e4c913491c6800c959a6cba88690ccbce67e3919"], 0x1, 0x60f6, &(0x7f0000002580)="$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")
chdir(&(0x7f0000008680)='./file0\x00')
creat(&(0x7f00000086c0)='./file0\x00', 0x104)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000008740)='memory.events\x00', 0x275a, 0x0)

1.479223306s ago: executing program 4 (id=542):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
close(0x3)

901.629681ms ago: executing program 4 (id=543):
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x48e, &(0x7f0000000d00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x141104, 0x80)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000)

491.813143ms ago: executing program 2 (id=544):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x694a312b6c043b5d)
syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aa"], 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffff7})
ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0x60, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0})

288.895561ms ago: executing program 0 (id=545):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f00000002c0)={0x20, r2, 0x0})

170.391891ms ago: executing program 4 (id=546):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x888, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x85c, 0x2, [@TCA_BPF_ACT={0x858, 0x1, [@m_mirred={0x634, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1, 0x3, 0x100, 0x100}, 0x1}}]}, {0x5a5, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x1bc, 0x12, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xf5, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7540b4a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x64, 0xe, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x2f, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8b7910df14f457f0b939aa1f7843f8d23ac707b39fbf4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

74.309327ms ago: executing program 2 (id=547):
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x14e1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)

0s ago: executing program 3 (id=548):
mkdir(&(0x7f0000000340)='./myproc\x00', 0x103)
mount(0x0, &(0x7f0000000380)='./myproc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myproc/scsi/device_info\x00', 0x40000, 0x0)
preadv(r0, &(0x7f0000002a80)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x2, 0x3, 0x24)

kernel console output (not intermixed with test programs):

 batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.261347][ T5646] Bluetooth: hci4: command tx timeout
[   92.261431][ T5646] Bluetooth: hci2: command tx timeout
[   92.263103][ T5637] hsr_slave_0: entered promiscuous mode
[   92.266197][ T5637] hsr_slave_1: entered promiscuous mode
[   92.268613][ T5637] debugfs: 'hsr0' already exists in 'hsr'
[   92.268656][ T5637] Cannot create hsr debugfs directory
[   92.286750][ T5639] Bluetooth: hci0: command tx timeout
[   92.296776][ T5648] hsr_slave_0: entered promiscuous mode
[   92.299522][ T5648] hsr_slave_1: entered promiscuous mode
[   92.303373][ T5648] debugfs: 'hsr0' already exists in 'hsr'
[   92.303415][ T5648] Cannot create hsr debugfs directory
[   92.341422][ T5639] Bluetooth: hci3: command tx timeout
[   92.527022][ T5638] hsr_slave_0: entered promiscuous mode
[   92.527986][ T5638] hsr_slave_1: entered promiscuous mode
[   92.528551][ T5638] debugfs: 'hsr0' already exists in 'hsr'
[   92.528566][ T5638] Cannot create hsr debugfs directory
[   93.015297][ T5637] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   93.036501][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   93.038251][ T5637] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.056537][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   93.073839][ T5637] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.077868][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   93.110733][ T5637] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.120791][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.209823][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.210037][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.210396][ T5636] bridge_slave_0: entered allmulticast mode
[   93.215203][ T5636] bridge_slave_0: entered promiscuous mode
[   93.247801][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.247907][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.248304][ T5636] bridge_slave_1: entered allmulticast mode
[   93.249685][ T5636] bridge_slave_1: entered promiscuous mode
[   93.294086][ T5635] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.298072][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   93.298947][ T5635] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.321764][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   93.346487][ T5635] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.350818][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   93.367732][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.388369][ T5635] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   93.398693][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.405102][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.450456][ T5636] team0: Port device team_slave_0 added
[   93.471010][ T5636] team0: Port device team_slave_1 added
[   93.527223][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.527242][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.527266][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.527755][ T5648] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   93.544794][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   93.552278][ T5648] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   93.583823][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   93.597102][ T5648] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   93.613002][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   93.614095][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.614106][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.614126][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.676786][ T5648] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   93.685005][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.774849][ T5636] hsr_slave_0: entered promiscuous mode
[   93.775662][ T5636] hsr_slave_1: entered promiscuous mode
[   93.776239][ T5636] debugfs: 'hsr0' already exists in 'hsr'
[   93.776255][ T5636] Cannot create hsr debugfs directory
[   93.858081][ T5638] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   93.869967][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   93.892506][ T5638] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   93.896147][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   93.927097][ T5638] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   93.930456][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   93.955511][ T5638] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.959219][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   94.086530][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.167377][ T5637] 8021q: adding VLAN 0 to HW filter on device team0
[   94.212463][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.216881][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.217002][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.261313][ T5639] Bluetooth: hci1: command tx timeout
[   94.262761][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   94.266125][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   94.294828][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.294939][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.295737][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   94.299553][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   94.330557][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   94.342093][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   94.342679][ T5639] Bluetooth: hci0: command tx timeout
[   94.342714][ T5639] Bluetooth: hci2: command tx timeout
[   94.342739][ T5639] Bluetooth: hci4: command tx timeout
[   94.342994][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.346383][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   94.406535][ T5635] 8021q: adding VLAN 0 to HW filter on device team0
[   94.421879][ T5646] Bluetooth: hci3: command tx timeout
[   94.423129][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.465081][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.465172][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.466786][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.466857][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.543274][ T5648] 8021q: adding VLAN 0 to HW filter on device team0
[   94.579802][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.579913][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.620213][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.620311][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.728937][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.879441][ T5648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.896599][ T5638] 8021q: adding VLAN 0 to HW filter on device team0
[   94.946828][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.947000][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.004755][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.009150][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.009286][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.120734][ T5636] 8021q: adding VLAN 0 to HW filter on device team0
[   95.169532][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.169665][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.220529][  T150] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.220639][  T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.790393][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.018231][ T5637] veth0_vlan: entered promiscuous mode
[   96.058023][ T5637] veth1_vlan: entered promiscuous mode
[   96.214061][ T5637] veth0_macvtap: entered promiscuous mode
[   96.243053][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.249759][ T5637] veth1_macvtap: entered promiscuous mode
[   96.322093][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.342511][ T5646] Bluetooth: hci1: command tx timeout
[   96.373592][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.413105][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.431714][ T4953] Bluetooth: hci0: command tx timeout
[   96.431765][ T5639] Bluetooth: hci2: command tx timeout
[   96.431823][ T5646] Bluetooth: hci4: command tx timeout
[   96.482524][  T104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.482678][  T104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.482721][  T104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.482759][  T104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.514180][ T5646] Bluetooth: hci3: command tx timeout
[   96.646071][ T5648] veth0_vlan: entered promiscuous mode
[   96.685896][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.753294][ T5648] veth1_vlan: entered promiscuous mode
[   96.760009][ T5635] veth0_vlan: entered promiscuous mode
[   96.796701][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.859495][ T5635] veth1_vlan: entered promiscuous mode
[   96.860632][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.860658][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.978952][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.978974][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.072706][ T5648] veth0_macvtap: entered promiscuous mode
[   97.108256][ T5636] veth0_vlan: entered promiscuous mode
[   97.129107][ T5648] veth1_macvtap: entered promiscuous mode
[   97.185157][ T5635] veth0_macvtap: entered promiscuous mode
[   97.199527][ T5636] veth1_vlan: entered promiscuous mode
[   97.219612][ T5635] veth1_macvtap: entered promiscuous mode
[   97.247725][ T5637] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   97.256399][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.304738][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.320611][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.361630][  T104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.361682][  T104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.361723][  T104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.361763][  T104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.364621][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.444843][ T5636] veth0_macvtap: entered promiscuous mode
[   97.497193][ T5636] veth1_macvtap: entered promiscuous mode
[   97.500513][ T5638] veth0_vlan: entered promiscuous mode
[   97.583739][   T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.583800][   T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.583839][   T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.583878][   T34] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.588989][ T5638] veth1_vlan: entered promiscuous mode
[   97.668853][  T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.668877][  T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.679302][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.757214][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.833972][  T104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.834061][  T104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.834103][  T104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.834143][  T104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.836771][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.836791][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.960689][  T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.960712][  T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.009539][ T5638] veth0_macvtap: entered promiscuous mode
[   98.088816][ T5638] veth1_macvtap: entered promiscuous mode
[   98.149491][ T5868] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   98.173539][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.173561][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.283996][  T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.284020][  T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.335640][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.417667][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.439004][  T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.439027][  T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.563485][  T150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.563838][  T150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.602866][  T150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.681598][  T104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.794486][  T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.794509][  T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.913573][  T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.913596][  T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.234679][ T5872] loop0: detected capacity change from 0 to 32768
[   99.286172][ T5872] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.12 (5872)
[   99.417725][ T5872] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   99.417778][ T5872] BTRFS info (device loop0): using sha256 checksum algorithm
[   99.730065][ T5872] BTRFS info (device loop0): enabling ssd optimizations
[   99.730097][ T5872] BTRFS info (device loop0): turning on async discard
[   99.730116][ T5872] BTRFS info (device loop0): enabling free space tree
[   99.812893][ T5905] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   99.842913][ T5907] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size.
[  100.028334][ T5912] netlink: 284 bytes leftover after parsing attributes in process `syz.3.17'.
[  100.119226][ T5637] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  100.705798][ T5931] loop2: detected capacity change from 0 to 512
[  100.720138][ T5931] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  100.720156][ T5931] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  100.790155][ T5931] EXT4-fs (loop2): 1 orphan inode deleted
[  100.804188][   T64] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  100.804337][   T64] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:4: Failed to release dquot type 1
[  100.804440][   T64] loop2: lost filesystem error report for type 5 error -117
[  100.810545][ T5931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.834476][ T5931] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.902711][ T5938] loop1: detected capacity change from 0 to 128
[  100.952091][ T5762] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  100.975520][ T5940] warning: `syz.3.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  101.043634][ T5938] =======================================================
[  101.043634][ T5938] WARNING: The mand mount option has been deprecated and
[  101.043634][ T5938]          and is ignored by this kernel. Remove the mand
[  101.043634][ T5938]          option from the mount to silence this warning.
[  101.043634][ T5938] =======================================================
[  101.119410][ T5762] usb 1-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  101.146512][ T5762] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  101.146542][ T5762] usb 1-1: config 0 has no interface number 0
[  101.169318][ T5877] rxe_eth0 speed is unknown, defaulting to 1000
[  101.183617][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.183646][ T5762] usb 1-1: Product: syz
[  101.183662][ T5762] usb 1-1: Manufacturer: syz
[  101.183678][ T5762] usb 1-1: SerialNumber: syz
[  101.187710][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.276930][ T5762] usb 1-1: config 0 descriptor??
[  101.303299][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  101.452199][   T10] usb 4-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  101.453570][   T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  101.453599][   T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  101.453619][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  101.453667][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  101.453696][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  101.457663][   T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  101.457690][   T10] usb 4-1: Product: syz
[  101.457706][   T10] usb 4-1: Manufacturer: syz
[  101.554307][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  101.554331][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  101.574165][   T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  101.574202][   T10] cdc_wdm 4-1:1.0: Unknown control protocol
[  101.798094][ T5762] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  101.826695][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  101.826780][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  101.827980][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  101.828005][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  101.828260][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  101.828279][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  101.828878][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  101.828910][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  101.829153][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  101.829171][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  101.829381][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  101.829400][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  101.829488][ T5762] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  101.829762][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  101.829784][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  101.829911][ T5762] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  101.829964][ T5762] usb 1-1: media controller created
[  101.830142][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  101.830167][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  101.830184][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  101.844165][   T10] usb 4-1: USB disconnect, device number 2
[  102.076818][ T5762] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  102.408692][ T5948] loop4: detected capacity change from 0 to 32768
[  102.461066][ T5948] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  102.537776][ T5948] XFS (loop4): Ending clean mount
[  102.572361][ T5948] XFS (loop4): Quotacheck needed: Please wait.
[  102.682458][ T5948] XFS (loop4): Quotacheck: Done.
[  102.731605][ T5977] loop1: detected capacity change from 0 to 8192
[  102.767471][   T33] audit: type=1800 audit(1793445375.639:2): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.30" name="file1" dev="loop4" ino=6150 res=0 errno=-22
[  102.942138][ T5982] loop3: detected capacity change from 0 to 512
[  103.024105][ T5982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.024233][ T5982] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.083945][ T5762] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  103.135740][ T5982] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  103.142839][ T5877] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  103.168658][ T5638] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  103.240505][ T5762] usb 1-1: USB disconnect, device number 2
[  103.283128][ T5877] usb 3-1: Using ep0 maxpacket: 8
[  103.284372][ T5877] usb 3-1: New USB device found: idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  103.312197][ T5982] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 5 with max blocks 29 with error 28
[  103.312233][ T5982] EXT4-fs (loop3): This should not happen!! Data will be lost
[  103.312233][ T5982] 
[  103.312253][ T5982] EXT4-fs (loop3): Total free blocks count 0
[  103.312267][ T5982] EXT4-fs (loop3): Free/Dirty block details
[  103.312297][ T5982] EXT4-fs (loop3): free_blocks=65281
[  103.312337][ T5982] EXT4-fs (loop3): dirty_blocks=29
[  103.312352][ T5982] EXT4-fs (loop3): Block reservation details
[  103.312365][ T5982] EXT4-fs (loop3): i_reserved_data_blocks=29
[  103.334910][ T5877] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  103.334987][ T5877] usb 3-1: Product: syz
[  103.335038][ T5877] usb 3-1: Manufacturer: syz
[  103.335110][ T5877] usb 3-1: SerialNumber: syz
[  103.477785][ T5877] usb 3-1: config 0 descriptor??
[  103.492823][ T5986] rxe_eth0 speed is unknown, defaulting to 1000
[  103.543729][ T5648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.578175][ T5877] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  103.934701][ T5639] block nbd0: Receive control failed (result -32)
[  103.936473][ T5646] block nbd0: Receive control failed (result -32)
[  104.011645][  T987] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  104.128803][ T5877] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5
[  104.161933][  T987] usb 4-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[  104.165690][  T987] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.193158][  T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  104.193186][  T987] usb 4-1: Product: syz
[  104.193202][  T987] usb 4-1: Manufacturer: syz
[  104.350136][  T987] usb 4-1: selecting invalid altsetting 1
[  104.360589][  T987] dvb_ttusb_budget: ttusb_init_controller: error
[  104.360610][  T987] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  104.394504][   T10] usb 3-1: USB disconnect, device number 2
[  104.719099][  T987] DVB: Unable to find symbol cx22700_attach()
[  104.858472][ T6017] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[  104.935599][  T987] DVB: Unable to find symbol tda10046_attach()
[  104.935617][  T987] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  105.521734][ T6009] loop4: detected capacity change from 0 to 40427
[  105.555703][ T6009] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  105.555731][ T6009] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  105.628751][ T6009] F2FS-fs (loop4): invalid crc value
[  105.822505][ T6025] loop1: detected capacity change from 0 to 4096
[  106.001680][ T6026] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  106.085897][ T6009] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  106.139268][ T6009] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  106.139478][ T6009] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  106.301933][ T6021] loop0: detected capacity change from 0 to 40427
[  106.320353][ T6021] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  106.320379][ T6021] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  106.365812][ T6021] F2FS-fs (loop0): invalid crc value
[  106.404351][ T5638] syz-executor: attempt to access beyond end of device
[  106.404351][ T5638] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  106.413208][ T5638] CPU: 1 UID: 0 PID: 5638 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  106.413283][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  106.413343][ T5638] Call Trace:
[  106.413364][ T5638]  <TASK>
[  106.413385][ T5638]  dump_stack_lvl+0xe8/0x150
[  106.413495][ T5638]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  106.413611][ T5638]  f2fs_write_end_bio+0x118e/0x15d0
[  106.413723][ T5638]  __submit_merged_bio+0x258/0x6a0
[  106.413816][ T5638]  ? rcu_is_watching+0x16/0xb0
[  106.413934][ T5638]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  106.414046][ T5638]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  106.414211][ T5638]  f2fs_write_data_pages+0x2a13/0x36e0
[  106.414379][ T5638]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  106.414476][ T5638]  ? is_bpf_text_address+0x292/0x2b0
[  106.414532][ T5638]  ? is_bpf_text_address+0x26/0x2b0
[  106.414668][ T5638]  ? stack_trace_save+0xa9/0x100
[  106.414735][ T5638]  ? __pfx_stack_trace_save+0x10/0x10
[  106.414878][ T5638]  ? lockdep_unlock+0x5c/0xd0
[  106.414935][ T5638]  ? __lock_acquire+0x1511/0x2de0
[  106.415068][ T5638]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  106.415141][ T5638]  do_writepages+0x338/0x560
[  106.415236][ T5638]  ? do_raw_spin_unlock+0xf5/0x200
[  106.415326][ T5638]  filemap_fdatawrite+0x1e9/0x2f0
[  106.415414][ T5638]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  106.415600][ T5638]  ? do_raw_spin_unlock+0xf5/0x200
[  106.415666][ T5638]  f2fs_sync_dirty_inodes+0x471/0x970
[  106.415786][ T5638]  f2fs_write_checkpoint+0x867/0x24d0
[  106.415956][ T5638]  kill_f2fs_super+0x2df/0x700
[  106.416032][ T5638]  ? rcu_do_enqueue+0x616/0x870
[  106.416107][ T5638]  ? lockdep_hardirqs_on+0x7b/0x110
[  106.416202][ T5638]  ? __pfx_kill_f2fs_super+0x10/0x10
[  106.416318][ T5638]  ? __pfx_call_rcu+0x10/0x10
[  106.416393][ T5638]  ? shrinker_free+0x2a7/0x3b0
[  106.416459][ T5638]  deactivate_locked_super+0xbe/0x110
[  106.416543][ T5638]  cleanup_mnt+0x204/0x2a0
[  106.416647][ T5638]  task_work_run+0x1d9/0x260
[  106.416744][ T5638]  ? __pfx_task_work_run+0x10/0x10
[  106.416855][ T5638]  exit_to_user_mode_loop+0x204/0x770
[  106.416932][ T5638]  ? rcu_is_watching+0x16/0xb0
[  106.417028][ T5638]  do_syscall_64+0x328/0x520
[  106.417105][ T5638]  ? trace_irq_disable+0x3b/0x140
[  106.417181][ T5638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.417246][ T5638]  ? clear_bhb_loop+0x70/0xc0
[  106.417319][ T5638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.417382][ T5638] RIP: 0033:0x7f68cc1a0797
[  106.417445][ T5638] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  106.417489][ T5638] RSP: 002b:00007ffc3ddfea08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  106.417551][ T5638] RAX: 0000000000000000 RBX: 00007f68cc235f93 RCX: 00007f68cc1a0797
[  106.417591][ T5638] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3ddfeac0
[  106.417624][ T5638] RBP: 00007ffc3ddfeac0 R08: 00007ffc3ddffac0 R09: 00000000ffffffff
[  106.417667][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3ddffb50
[  106.417694][ T5638] R13: 00007f68cc235f93 R14: 0000000000019ef6 R15: 00007ffc3ddffb90
[  106.417788][ T5638]  </TASK>
[  106.476440][ T5638] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  106.940780][ T5783] usb 4-1: USB disconnect, device number 3
[  107.052497][ T6036] ieee802154 phy0 wpan0: encryption failed: -22
[  107.098147][ T6021] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  107.134631][ T6021] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  107.134661][ T6021] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  107.169364][ T6040] netlink: 220 bytes leftover after parsing attributes in process `syz.3.52'.
[  107.570686][ T6046] loop1: detected capacity change from 0 to 4096
[  108.030546][ T6055] loop4: detected capacity change from 0 to 1024
[  108.124108][ T6055] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5
[  108.126317][ T6055] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  108.126345][ T6055] EXT4-fs error (device loop4): ext4_acquire_dquot:7120: comm syz.4.51: Failed to acquire dquot type 0
[  108.126372][ T6055] loop4: lost filesystem error report for type 5 error -117
[  108.141712][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  108.141784][    C1] EXT4-fs (loop4): initial error at time 1793445380: ext4_acquire_dquot:7120
[  108.141863][    C1] EXT4-fs (loop4): last error at time 1793445380: ext4_acquire_dquot:7120
[  108.204514][ T6055] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  108.237732][ T6055] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #13: comm syz.4.51: corrupted inode contents
[  108.237907][ T6055] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  108.254488][ T6055] EXT4-fs error (device loop4): ext4_dirty_inode:7679: inode #13: comm syz.4.51: mark_inode_dirty error
[  108.254524][ T6055] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  108.295911][ T6055] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #13: comm syz.4.51: corrupted inode contents
[  108.295952][ T6055] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  108.313918][ T6055] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.51: mark_inode_dirty error
[  108.314023][ T6055] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  108.321941][ T6055] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #13: comm syz.4.51: corrupted inode contents
[  108.322019][ T6055] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  108.327849][ T6055] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem
[  108.327898][ T6055] loop4: lost filesystem error report for type 5 error -117
[  108.331310][ T6055] EXT4-fs error (device loop4): ext4_do_update_inode:6707: inode #13: comm syz.4.51: corrupted inode contents
[  108.331396][ T6055] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  108.341002][ T6055] EXT4-fs error (device loop4): ext4_truncate:5538: inode #13: comm syz.4.51: mark_inode_dirty error
[  108.341096][ T6055] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  108.348671][ T6055] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem
[  108.348743][ T6055] loop4: lost filesystem error report for type 5 error -117
[  108.441747][ T6055] EXT4-fs (loop4): 1 truncate cleaned up
[  108.469113][ T6055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.635848][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.713814][ T6069] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers
[  108.805358][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.806464][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.969566][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.989924][   T32] kernel write not supported for file /sequencer (pid: 32 comm: kworker/1:1)
[  108.990381][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.198189][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.66'.
[  109.222754][  T998] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.223579][   T34] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.223623][   T34] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.223659][   T34] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.285527][ T6068] Zero length message leads to an empty skb
[  109.368179][ T6087] program syz.4.71 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  110.025927][ T5776] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  110.182667][ T5776] usb 3-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  110.188818][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.188847][ T5776] usb 3-1: Product: syz
[  110.188864][ T5776] usb 3-1: Manufacturer: syz
[  110.188880][ T5776] usb 3-1: SerialNumber: syz
[  110.223064][ T5776] usb 3-1: config 0 descriptor??
[  110.378028][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'.
[  110.403594][ T6118] loop1: detected capacity change from 0 to 512
[  110.417330][ T6118] EXT4-fs: Ignoring removed nobh option
[  110.456837][ T6118] EXT4-fs error (device loop1): ext4_quota_enable:7311: comm syz.1.86: inode #255: comm syz.1.86: iget: illegal inode #
[  110.456911][ T6118] loop1: lost filesystem error report for type 5 error -117
[  110.460166][ T6118] EXT4-fs (loop1): Remounting filesystem read-only
[  110.460192][ T6118] EXT4-fs warning (device loop1): ext4_enable_quotas:7355: Failed to enable quota tracking (type=2, err=-117, ino=255). Please run e2fsck to fix.
[  110.460987][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  110.461009][    C0] EXT4-fs (loop1): initial error at time 1793445383: ext4_quota_enable:7311
[  110.461035][    C0] EXT4-fs (loop1): last error at time 1793445383: ext4_quota_enable:7311
[  110.461481][ T6118] EXT4-fs (loop1): mount failed
[  110.562437][ T6106] loop4: detected capacity change from 0 to 40427
[  110.581404][ T6106] F2FS-fs (loop4): invalid crc value
[  110.699004][ T6106] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  110.707639][ T5776] usb 3-1: Firmware: major: 113, minor: 74, hardware type: UNKNOWN (165)
[  110.723318][ T6106] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  110.758163][ T6106] syz.4.80: attempt to access beyond end of device
[  110.758163][ T6106] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  110.759899][ T6106] CPU: 1 UID: 0 PID: 6106 Comm: syz.4.80 Not tainted syzkaller #0 PREEMPT(full) 
[  110.759928][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  110.759941][ T6106] Call Trace:
[  110.759950][ T6106]  <TASK>
[  110.759960][ T6106]  dump_stack_lvl+0xe8/0x150
[  110.760004][ T6106]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  110.760048][ T6106]  f2fs_write_end_bio+0x118e/0x15d0
[  110.760097][ T6106]  __submit_merged_bio+0x258/0x6a0
[  110.760134][ T6106]  ? rcu_is_watching+0x16/0xb0
[  110.760176][ T6106]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  110.760216][ T6106]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  110.760280][ T6106]  f2fs_write_data_pages+0x2a13/0x36e0
[  110.760350][ T6106]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  110.760374][ T6106]  ? is_bpf_text_address+0x26/0x2b0
[  110.760413][ T6106]  ? arch_stack_walk+0xfb/0x150
[  110.760474][ T6106]  ? add_lock_to_list+0xc7/0x100
[  110.760510][ T6106]  ? lockdep_unlock+0x5c/0xd0
[  110.760535][ T6106]  ? __lock_acquire+0x1511/0x2de0
[  110.760600][ T6106]  ? do_raw_spin_lock+0x12b/0x2f0
[  110.760636][ T6106]  ? do_raw_spin_unlock+0xf5/0x200
[  110.760662][ T6106]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  110.760691][ T6106]  do_writepages+0x338/0x560
[  110.760729][ T6106]  ? do_raw_spin_unlock+0xf5/0x200
[  110.760759][ T6106]  filemap_fdatawrite+0x1e9/0x2f0
[  110.760797][ T6106]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  110.760873][ T6106]  ? do_raw_spin_unlock+0xf5/0x200
[  110.760902][ T6106]  f2fs_sync_dirty_inodes+0x471/0x970
[  110.760947][ T6106]  f2fs_write_checkpoint+0x867/0x24d0
[  110.761016][ T6106]  f2fs_issue_checkpoint+0x424/0x6f0
[  110.761058][ T6106]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  110.761089][ T6106]  ? stack_trace_save+0xa9/0x100
[  110.761118][ T6106]  ? __pfx_stack_trace_save+0x10/0x10
[  110.761158][ T6106]  ? __lock_acquire+0x747/0x2de0
[  110.761244][ T6106]  ? f2fs_sync_fs+0x1f2/0x3c0
[  110.761281][ T6106]  __f2fs_ioctl+0x4981/0xde00
[  110.761316][ T6106]  ? lock_acquire+0x115/0x350
[  110.761356][ T6106]  ? is_bpf_text_address+0x26/0x2b0
[  110.761387][ T6106]  ? is_bpf_text_address+0x292/0x2b0
[  110.761411][ T6106]  ? is_bpf_text_address+0x26/0x2b0
[  110.761436][ T6106]  ? __pfx___f2fs_ioctl+0x10/0x10
[  110.761459][ T6106]  ? kernel_text_address+0xa5/0xe0
[  110.761491][ T6106]  ? __kernel_text_address+0xd/0x30
[  110.761519][ T6106]  ? unwind_get_return_address+0x4d/0x90
[  110.761553][ T6106]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  110.761583][ T6106]  ? arch_stack_walk+0xfb/0x150
[  110.761628][ T6106]  ? stack_trace_save+0xa9/0x100
[  110.761657][ T6106]  ? __pfx_stack_trace_save+0x10/0x10
[  110.761684][ T6106]  ? kasan_save_track+0x4f/0x80
[  110.761721][ T6106]  ? stack_depot_save_flags+0x33/0x810
[  110.761751][ T6106]  ? __lock_acquire+0x747/0x2de0
[  110.761793][ T6106]  ? kasan_save_track+0x4f/0x80
[  110.761823][ T6106]  ? kasan_save_track+0x3e/0x80
[  110.761853][ T6106]  ? kasan_save_free_info+0x40/0x50
[  110.761878][ T6106]  ? __kasan_slab_free+0x5c/0x80
[  110.761909][ T6106]  ? kfree+0x1c5/0x650
[  110.761931][ T6106]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  110.761962][ T6106]  ? security_file_ioctl+0xc3/0x2a0
[  110.761991][ T6106]  ? __se_sys_ioctl+0x47/0x170
[  110.762023][ T6106]  ? do_syscall_64+0x166/0x520
[  110.762052][ T6106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.762102][ T6106]  ? file_ioctl+0x253/0x7d0
[  110.762141][ T6106]  ? __pfx_file_ioctl+0x10/0x10
[  110.762193][ T6106]  ? kasan_quarantine_put+0xbb/0x1f0
[  110.762235][ T6106]  ? tomoyo_path_number_perm+0x219/0x5f0
[  110.762270][ T6106]  ? tomoyo_path_number_perm+0x219/0x5f0
[  110.762307][ T6106]  ? do_vfs_ioctl+0x116f/0x1530
[  110.762345][ T6106]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  110.762397][ T6106]  ? do_futex+0x3e7/0x4e0
[  110.762445][ T6106]  ? __fget_files+0x2a/0x420
[  110.762478][ T6106]  ? __fget_files+0x2a/0x420
[  110.762508][ T6106]  ? __fget_files+0x2a/0x420
[  110.762541][ T6106]  ? f2fs_ioctl+0x135/0x250
[  110.762565][ T6106]  ? __pfx_f2fs_ioctl+0x10/0x10
[  110.762589][ T6106]  __se_sys_ioctl+0xfc/0x170
[  110.762627][ T6106]  do_syscall_64+0x166/0x520
[  110.762656][ T6106]  ? trace_irq_disable+0x3b/0x140
[  110.762689][ T6106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.762712][ T6106]  ? clear_bhb_loop+0x70/0xc0
[  110.762740][ T6106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.762761][ T6106] RIP: 0033:0x7f68cc19f559
[  110.762791][ T6106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.762810][ T6106] RSP: 002b:00007f68cd0d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  110.762834][ T6106] RAX: ffffffffffffffda RBX: 00007f68cc425fa0 RCX: 00007f68cc19f559
[  110.762851][ T6106] RDX: 0000000000000000 RSI: 000000000000f507 RDI: 0000000000000004
[  110.762865][ T6106] RBP: 00007f68cc236b50 R08: 0000000000000000 R09: 0000000000000000
[  110.762879][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.762893][ T6106] R13: 00007f68cc426038 R14: 00007f68cc425fa0 R15: 00007ffc3ddff798
[  110.762931][ T6106]  </TASK>
[  110.929976][ T5776] usb 3-1: failed to fetch extended address, random address set
[  110.930135][ T5776] usb 3-1: atusb_probe: initialization failed, error = -524
[  110.948489][ T5776] atusb 3-1:0.0: probe with driver atusb failed with error -524
[  110.982840][ T6106] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  111.158156][ T5776] usb 3-1: USB disconnect, device number 3
[  111.618596][ T6137] loop3: detected capacity change from 0 to 512
[  111.633469][ T6137] EXT4-fs: Ignoring removed oldalloc option
[  111.697293][ T6137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.846516][ T5648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.936436][ T6141] loop4: detected capacity change from 0 to 256
[  112.079227][ T6141] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  112.151395][   T33] audit: type=1800 audit(1793445385.019:3): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.93" name="file2" dev="loop4" ino=5 res=0 errno=-22
[  112.344722][ T6141] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff)
[  112.344750][ T6141] exFAT-fs (loop4): Filesystem has been set read-only
[  112.622777][ T6149] loop4: detected capacity change from 0 to 512
[  112.630010][ T6149] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687)
[  112.630043][ T6149] EXT4-fs (loop4): group descriptors corrupted!
[  112.872885][ T6135] loop0: detected capacity change from 0 to 32768
[  112.927598][ T6135] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  112.944957][ T6151] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  113.039985][ T6135] XFS (loop0): Ending clean mount
[  113.058821][ T6143] loop2: detected capacity change from 0 to 40427
[  113.070490][ T6135] XFS (loop0): Quotacheck needed: Please wait.
[  113.100447][ T6143] F2FS-fs (loop2): build fault injection rate: 174
[  113.100475][ T6143] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  113.116630][ T6143] F2FS-fs (loop2): invalid crc value
[  113.207292][ T6135] XFS (loop0): Quotacheck: Done.
[  113.238396][   T33] audit: type=1800 audit(1793445386.109:4): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.89" name="file1" dev="loop0" ino=6150 res=0 errno=-22
[  113.493862][ T5637] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  113.525900][ T6165] loop3: detected capacity change from 0 to 1764
[  113.643110][ T6143] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  113.678969][ T6143] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  113.880457][ T6143] syz.2.94: attempt to access beyond end of device
[  113.880457][ T6143] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  114.026366][ T5636] syz-executor: attempt to access beyond end of device
[  114.026366][ T5636] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  114.048887][ T5636] CPU: 1 UID: 0 PID: 5636 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  114.048918][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  114.048931][ T5636] Call Trace:
[  114.048940][ T5636]  <TASK>
[  114.048950][ T5636]  dump_stack_lvl+0xe8/0x150
[  114.048992][ T5636]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  114.049035][ T5636]  f2fs_write_end_bio+0x118e/0x15d0
[  114.049083][ T5636]  __submit_merged_bio+0x258/0x6a0
[  114.049118][ T5636]  ? rcu_is_watching+0x16/0xb0
[  114.049168][ T5636]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  114.049208][ T5636]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  114.049270][ T5636]  f2fs_write_data_pages+0x2a13/0x36e0
[  114.049338][ T5636]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  114.049379][ T5636]  ? is_bpf_text_address+0x292/0x2b0
[  114.049403][ T5636]  ? is_bpf_text_address+0x26/0x2b0
[  114.049456][ T5636]  ? stack_trace_save+0xa9/0x100
[  114.049488][ T5636]  ? __pfx_stack_trace_save+0x10/0x10
[  114.049537][ T5636]  ? lockdep_unlock+0x5c/0xd0
[  114.049561][ T5636]  ? __lock_acquire+0x1511/0x2de0
[  114.049620][ T5636]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  114.049648][ T5636]  do_writepages+0x338/0x560
[  114.049685][ T5636]  ? do_raw_spin_unlock+0xf5/0x200
[  114.049714][ T5636]  filemap_fdatawrite+0x1e9/0x2f0
[  114.049744][ T5636]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  114.049820][ T5636]  ? do_raw_spin_unlock+0xf5/0x200
[  114.049850][ T5636]  f2fs_sync_dirty_inodes+0x471/0x970
[  114.049897][ T5636]  f2fs_write_checkpoint+0x867/0x24d0
[  114.049966][ T5636]  kill_f2fs_super+0x2df/0x700
[  114.049999][ T5636]  ? rcu_do_enqueue+0x616/0x870
[  114.050027][ T5636]  ? lockdep_hardirqs_on+0x7b/0x110
[  114.050057][ T5636]  ? __pfx_kill_f2fs_super+0x10/0x10
[  114.050102][ T5636]  ? __pfx_call_rcu+0x10/0x10
[  114.050131][ T5636]  ? shrinker_free+0x2a7/0x3b0
[  114.050167][ T5636]  deactivate_locked_super+0xbe/0x110
[  114.050200][ T5636]  cleanup_mnt+0x204/0x2a0
[  114.050239][ T5636]  task_work_run+0x1d9/0x260
[  114.050272][ T5636]  ? __pfx_task_work_run+0x10/0x10
[  114.050318][ T5636]  exit_to_user_mode_loop+0x204/0x770
[  114.050349][ T5636]  ? rcu_is_watching+0x16/0xb0
[  114.050394][ T5636]  do_syscall_64+0x328/0x520
[  114.050422][ T5636]  ? trace_irq_disable+0x3b/0x140
[  114.050453][ T5636]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.050476][ T5636]  ? clear_bhb_loop+0x70/0xc0
[  114.050504][ T5636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.050532][ T5636] RIP: 0033:0x7fc9a17a0797
[  114.050560][ T5636] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  114.050578][ T5636] RSP: 002b:00007fffc1d00ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  114.050602][ T5636] RAX: 0000000000000000 RBX: 00007fc9a1835f93 RCX: 00007fc9a17a0797
[  114.050617][ T5636] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc1d010b0
[  114.050631][ T5636] RBP: 00007fffc1d010b0 R08: 00007fffc1d020b0 R09: 00000000ffffffff
[  114.050646][ T5636] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc1d02140
[  114.050664][ T5636] R13: 00007fc9a1835f93 R14: 000000000001bcd0 R15: 00007fffc1d02180
[  114.050701][ T5636]  </TASK>
[  114.051337][ T6177] phram: illegal start address
[  114.098797][ T5636] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  114.749119][ T6183] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  115.076648][ T6176] mmap: syz.3.104 (6176) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  115.267165][ T6200] loop2: detected capacity change from 0 to 512
[  115.283328][ T6200] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  115.283347][ T6200] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  115.343176][ T6200] EXT4-fs (loop2): 1 truncate cleaned up
[  115.359042][ T6200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.407527][   T33] audit: type=1800 audit(1793445388.279:5): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.114" name="file1" dev="loop2" ino=15 res=0 errno=-22
[  115.632300][ T6171] loop0: detected capacity change from 0 to 32768
[  115.704733][ T6171] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  115.704772][ T6171] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  115.842347][ T6171] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 18, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[  115.842393][ T6171] gfs2: fsid=syz:syz.0: G:  s:SH n:2/12 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:2
[  115.842426][ T6171] gfs2: fsid=syz:syz.0:  H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[  115.842483][ T6171] gfs2: fsid=syz:syz.0:  I: n:1/18 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[  115.842519][ T6171] CPU: 0 UID: 0 PID: 6171 Comm: syz.0.101 Not tainted syzkaller #0 PREEMPT(full) 
[  115.842544][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  115.842558][ T6171] Call Trace:
[  115.842567][ T6171]  <TASK>
[  115.842577][ T6171]  dump_stack_lvl+0xe8/0x150
[  115.842617][ T6171]  gfs2_withdraw+0xc3/0x1b0
[  115.842648][ T6171]  gfs2_jdesc_check+0x17d/0x2f0
[  115.842687][ T6171]  init_journal+0xcc8/0x2390
[  115.842730][ T6171]  ? init_inodes+0xdb/0x320
[  115.842764][ T6171]  ? __pfx_init_journal+0x10/0x10
[  115.842793][ T6171]  ? vsnprintf+0xe42/0xef0
[  115.842831][ T6171]  ? snprintf+0xe8/0x140
[  115.842858][ T6171]  ? init_inodes+0xdb/0x320
[  115.842886][ T6171]  ? __pfx_snprintf+0x10/0x10
[  115.842911][ T6171]  ? gfs2_glock_nq_num+0x15f/0x1a0
[  115.842948][ T6171]  init_inodes+0xdb/0x320
[  115.842980][ T6171]  gfs2_fill_super+0x1948/0x20b0
[  115.843033][ T6171]  ? __pfx_gfs2_fill_super+0x10/0x10
[  115.843067][ T6171]  ? init_locking+0xb8/0x210
[  115.843095][ T6171]  ? sb_set_blocksize+0x155/0x240
[  115.843132][ T6171]  ? setup_bdev_super+0x58b/0x680
[  115.843169][ T6171]  get_tree_bdev_flags+0x436/0x500
[  115.843204][ T6171]  ? __pfx_gfs2_fill_super+0x10/0x10
[  115.843233][ T6171]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  115.843280][ T6171]  gfs2_get_tree+0x51/0x1e0
[  115.843313][ T6171]  vfs_get_tree+0x92/0x2a0
[  115.843349][ T6171]  do_new_mount+0x325/0xb00
[  115.843384][ T6171]  ? __pfx_do_new_mount+0x10/0x10
[  115.843415][ T6171]  ? ns_capable+0x84/0xe0
[  115.843449][ T6171]  ? path_mount+0x647/0x1050
[  115.843480][ T6171]  ? user_path_at+0xd4/0x160
[  115.843514][ T6171]  __se_sys_mount+0x31d/0x420
[  115.843550][ T6171]  ? __pfx___se_sys_mount+0x10/0x10
[  115.843586][ T6171]  ? __x64_sys_mount+0x20/0xc0
[  115.843618][ T6171]  do_syscall_64+0x166/0x520
[  115.843646][ T6171]  ? trace_irq_disable+0x3b/0x140
[  115.843682][ T6171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.843706][ T6171]  ? clear_bhb_loop+0x70/0xc0
[  115.843735][ T6171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.843758][ T6171] RIP: 0033:0x7f6b94fa07ca
[  115.843793][ T6171] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.843811][ T6171] RSP: 002b:00007f6b95dd8e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  115.843839][ T6171] RAX: ffffffffffffffda RBX: 00007f6b95dd8ee0 RCX: 00007f6b94fa07ca
[  115.843856][ T6171] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f6b95dd8ea0
[  115.843873][ T6171] RBP: 00002000000124c0 R08: 00007f6b95dd8ee0 R09: 0000000000000000
[  115.843888][ T6171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500
[  115.843903][ T6171] R13: 00007f6b95dd8ea0 R14: 00000000000125f4 R15: 00002000000000c0
[  115.843939][ T6171]  </TASK>
[  115.850202][ T6171] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[  116.379915][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.523422][ T6213] loop1: detected capacity change from 0 to 32768
[  116.567146][ T6213] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  116.593309][ T6230] ieee802154 phy0 wpan0: encryption failed: -22
[  116.660991][ T6213] XFS (loop1): Ending clean mount
[  116.724812][ T6213] XFS (loop1): syz.1.118 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  116.817454][ T5635] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  116.856368][ T6238] netlink: 424 bytes leftover after parsing attributes in process `syz.2.126'.
[  116.856498][ T6238] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  116.954787][ T6237] smpboot: CPU 1 is now offline
[  117.196089][ T6242] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  117.196107][ T6242] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  117.507168][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'.
[  117.507195][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'.
[  117.661260][   T53] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.663046][  T150] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.663080][  T150] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.663107][  T150] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.929055][ T6264] loop2: detected capacity change from 0 to 512
[  117.972238][ T6265] device-mapper: table: 248:1: crypt: Error decoding and setting key (-EINVAL)
[  117.972263][ T6265] device-mapper: ioctl: error adding target to table
[  117.980462][ T6264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.019561][ T6264] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  118.102449][   T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  118.252098][   T10] usb 4-1: New USB device found: idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  118.253152][   T10] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  118.253170][   T10] usb 4-1: config 0 has no interface number 0
[  118.281423][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.281443][   T10] usb 4-1: Product: syz
[  118.281454][   T10] usb 4-1: Manufacturer: syz
[  118.281465][   T10] usb 4-1: SerialNumber: syz
[  118.315973][   T10] usb 4-1: config 0 descriptor??
[  118.417623][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.841178][ T6258] loop0: detected capacity change from 0 to 32768
[  118.861258][ T6258] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.136 (6258)
[  118.905090][ T6258] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  118.905117][ T6258] BTRFS info (device loop0): using blake2b checksum algorithm
[  119.087109][ T6258] BTRFS info (device loop0): enabling ssd optimizations
[  119.087149][ T6258] BTRFS info (device loop0): turning on async discard
[  119.087162][ T6258] BTRFS info (device loop0): enabling free space tree
[  119.181772][   T10] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.181798][   T10] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  119.182166][   T10] asix 4-1:0.251: probe with driver asix failed with error -71
[  119.230766][   T10] usb 4-1: USB disconnect, device number 4
[  119.656275][ T5637] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  120.113548][ T6281] loop2: detected capacity change from 0 to 32768
[  120.152542][ T6266] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  120.154683][ T6281] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.144 (6281)
[  120.205079][ T6281] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.205105][ T6281] BTRFS info (device loop2): using sha256 checksum algorithm
[  120.374825][ T6281] BTRFS info (device loop2): allowing degraded mounts
[  120.374846][ T6281] BTRFS info (device loop2): enabling ssd optimizations
[  120.374859][ T6281] BTRFS info (device loop2): disabling tree log
[  120.374870][ T6281] BTRFS info (device loop2): turning on sync discard
[  120.374882][ T6281] BTRFS info (device loop2): enabling free space tree
[  120.536584][ T6323] loop1: detected capacity change from 0 to 512
[  120.612463][ T6323] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.151: Directory hole found for htree index block 0
[  120.612491][ T6323] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  120.620932][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  120.620963][    C0] EXT4-fs (loop1): last error at time 1793445393: dx_probe:791: inode 2
[  120.694563][ T6323] EXT4-fs (loop1): Remounting filesystem read-only
[  120.714405][ T5636] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.752540][ T6323] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117
[  120.752634][ T6323] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  120.789976][ T6323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.928467][ T6323] EXT4-fs (loop1): shut down requested (0)
[  121.134248][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.623877][ T6344] loop4: detected capacity change from 0 to 256
[  121.849648][ T6344] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  121.849671][ T6344] FAT-fs (loop4): Filesystem has been set read-only
[  121.962087][ T6306] loop3: detected capacity change from 0 to 40427
[  121.989031][ T6306] F2FS-fs (loop3): build fault injection rate: 690
[  122.006654][ T6306] F2FS-fs (loop3): invalid crc value
[  122.376935][ T6352] loop4: detected capacity change from 0 to 2048
[  122.448255][ T6306] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  122.462053][ T6352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.462140][ T6352] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.558568][ T6306] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  122.723597][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.774421][ T6306] syz.3.149: attempt to access beyond end of device
[  122.774421][ T6306] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  122.775028][ T6306] CPU: 0 UID: 0 PID: 6306 Comm: syz.3.149 Not tainted syzkaller #0 PREEMPT(full) 
[  122.775048][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  122.775058][ T6306] Call Trace:
[  122.775065][ T6306]  <TASK>
[  122.775072][ T6306]  dump_stack_lvl+0xe8/0x150
[  122.775105][ T6306]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  122.775138][ T6306]  f2fs_write_end_bio+0x2b5/0x15d0
[  122.775165][ T6306]  ? blkg_put+0x22/0x240
[  122.775186][ T6306]  ? blkg_put+0x18d/0x240
[  122.775206][ T6306]  ? bio_endio+0x984/0xac0
[  122.775226][ T6306]  ? f2fs_write_end_io+0x258/0x300
[  122.775249][ T6306]  __submit_merged_bio+0x258/0x6a0
[  122.775275][ T6306]  ? rcu_is_watching+0x16/0xb0
[  122.775307][ T6306]  f2fs_submit_merged_write+0x2cc/0x610
[  122.775339][ T6306]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  122.775377][ T6306]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  122.775398][ T6306]  ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0
[  122.775433][ T6306]  f2fs_writeback_node_caches+0xf8c/0x1160
[  122.775479][ T6306]  ? __pfx_f2fs_writeback_node_caches+0x10/0x10
[  122.775541][ T6306]  ? f2fs_write_checkpoint+0xe25/0x24d0
[  122.775575][ T6306]  ? up_write+0x19d/0x4a0
[  122.775596][ T6306]  f2fs_write_checkpoint+0xe5b/0x24d0
[  122.775653][ T6306]  f2fs_issue_checkpoint+0x424/0x6f0
[  122.775684][ T6306]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  122.775707][ T6306]  ? __pfx_from_kgid+0x10/0x10
[  122.775736][ T6306]  ? rcu_is_watching+0x16/0xb0
[  122.775763][ T6306]  ? __up_read+0x29c/0x930
[  122.775821][ T6306]  ? f2fs_sync_fs+0x1f2/0x3c0
[  122.775849][ T6306]  f2fs_unlink+0x225/0x600
[  122.775877][ T6306]  vfs_rmdir+0x3e6/0x6a0
[  122.775892][ T6306]  ? bpf_lsm_path_rmdir+0x9/0x20
[  122.775915][ T6306]  filename_rmdir+0x292/0x520
[  122.775938][ T6306]  ? __pfx_filename_rmdir+0x10/0x10
[  122.775961][ T6306]  ? do_getname+0x151/0x250
[  122.775983][ T6306]  __se_sys_rmdir+0x2e/0x140
[  122.776002][ T6306]  do_syscall_64+0x166/0x520
[  122.776024][ T6306]  ? trace_irq_disable+0x3b/0x140
[  122.776047][ T6306]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.776064][ T6306]  ? clear_bhb_loop+0x70/0xc0
[  122.776085][ T6306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.776101][ T6306] RIP: 0033:0x7fc94fb9f559
[  122.776117][ T6306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.776131][ T6306] RSP: 002b:00007fc950a8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  122.776148][ T6306] RAX: ffffffffffffffda RBX: 00007fc94fe25fa0 RCX: 00007fc94fb9f559
[  122.776160][ T6306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000020000000d400
[  122.776170][ T6306] RBP: 00007fc94fc36b50 R08: 0000000000000000 R09: 0000000000000000
[  122.776180][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  122.776189][ T6306] R13: 00007fc94fe26038 R14: 00007fc94fe25fa0 R15: 00007ffe7e9e22f8
[  122.776219][ T6306]  </TASK>
[  123.102463][ T6306] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  123.333442][ T6361] netlink: 'syz.4.162': attribute type 9 has an invalid length.
[  123.356073][ T6338] loop1: detected capacity change from 0 to 32768
[  123.417438][ T6338] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  123.533711][ T6338] XFS (loop1): Ending clean mount
[  123.554645][ T6338] XFS (loop1): Quotacheck needed: Please wait.
[  123.664068][ T6338] XFS (loop1): Quotacheck: Done.
[  123.747325][   T33] audit: type=1800 audit(1793445396.619:6): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.155" name="file1" dev="loop1" ino=6150 res=0 errno=-22
[  123.824582][   T53] IPVS: starting estimator thread 0...
[  123.920985][ T6377] IPVS: using max 37 ests per chain, 88800 per kthread
[  124.140689][ T5635] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  124.496240][ T6383] loop2: detected capacity change from 0 to 128
[  124.909714][ T6391] loop2: detected capacity change from 0 to 256
[  124.916230][ T6391] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  124.946344][ T6391] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  124.995057][ T6393] loop0: detected capacity change from 0 to 128
[  125.059088][ T6393] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  125.059287][ T6393] hpfs: filesystem error: improperly stopped
[  125.059300][ T6393] hpfs: You really don't want any checks? You are crazy...
[  125.059548][ T6393] hpfs: hpfs_map_sector(): read error
[  125.059556][ T6393] hpfs: code page support is disabled
[  125.079708][ T6393] hpfs: hpfs_map_4sectors(): unaligned read
[  125.079887][ T6393] hpfs: hpfs_map_4sectors(): unaligned read
[  125.079896][ T6393] hpfs: filesystem error: unable to find root dir
[  125.115972][ T5783] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  125.292330][ T5783] usb 2-1: unable to get BOS descriptor or descriptor too short
[  125.292778][ T5783] usb 2-1: not running at top speed; connect to a high speed hub
[  125.292801][ T5783] usb 2-1: New USB device found: idVendor=200c, idProduct=1018, bcdDevice=0.40
[  125.297971][ T5783] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  125.297988][ T5783] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  125.351185][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.351220][ T5783] usb 2-1: Product: syz
[  125.351237][ T5783] usb 2-1: Manufacturer: syz
[  125.351248][ T5783] usb 2-1: SerialNumber: syz
[  125.627629][ T5783] usb 2-1: 3:0: failed to get current value for ch 0 (-71)
[  125.657212][ T5783] usb 2-1: 3:0: cannot get RANGE values for control 2 (id 3)
[  125.657243][ T5783] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  125.657255][ T5783] usb 2-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1
[  125.659335][ T5783] usb 2-1: 3:0: cannot get RANGE values for control 3 (id 3)
[  125.705808][ T5783] usb 2-1: 3:0: cannot get RANGE values for control 4 (id 3)
[  125.707371][ T5783] usb 2-1: 3:0: cannot get RANGE values for control 5 (id 3)
[  125.727165][ T5783] usb 2-1: 3:0: failed to get current value for ch 0 (-71)
[  125.764283][ T5783] usb 2-1: 3:0: cannot get RANGE values for control 8 (id 3)
[  125.974033][ T5783] usb 2-1: 3:0: cannot get RANGE values for control 3 (id 3)
[  126.001161][ T5783] usb 2-1: 3:0: cannot get RANGE values for control 5 (id 3)
[  126.108763][ T6385] loop3: detected capacity change from 0 to 32768
[  126.180630][ T5783] usb 2-1: USB disconnect, device number 2
[  126.212800][ T6385] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  126.366554][ T6385] XFS (loop3): Ending clean mount
[  126.626077][ T5648] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  127.444680][ T6427] loop2: detected capacity change from 0 to 2048
[  127.540140][ T6430] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  127.783653][   T33] audit: type=1800 audit(1793445400.870:7): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.185" name="dev" dev="loop2" ino=19 res=0 errno=-22
[  127.898383][ T6430] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  127.898421][ T6430] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  127.935214][ T6436] loop4: detected capacity change from 0 to 512
[  127.950393][ T6430] Remounting filesystem read-only
[  127.964222][ T5636] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  128.014881][ T6436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.014968][ T6436] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.199823][   T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  128.229179][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.343404][   T10] usb 2-1: New USB device found: idVendor=0596, idProduct=0001, bcdDevice=5.f5
[  128.345556][   T10] usb 2-1: config 0 has no interfaces?
[  128.366085][   T10] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  128.366106][   T10] usb 2-1: Manufacturer: syz
[  128.366117][   T10] usb 2-1: SerialNumber: syz
[  128.373685][   T10] usb 2-1: config 0 descriptor??
[  128.556274][ T6443] rxe_eth0 speed is unknown, defaulting to 1000
[  128.619035][   T10] usb 2-1: USB disconnect, device number 3
[  128.746448][ T6453] loop3: detected capacity change from 0 to 512
[  128.750864][ T6453] EXT4-fs: Ignoring removed nobh option
[  128.778842][ T6453] EXT4-fs (loop3): orphan cleanup on readonly fs
[  128.778859][ T6453] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  128.807159][ T6453] EXT4-fs error (device loop3): ext4_clear_blocks:893: inode #13: comm syz.3.195: attempt to clear invalid blocks 2 len 1
[  128.807186][ T6453] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  128.813537][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  128.813554][    C0] EXT4-fs (loop3): initial error at time 1793445401: ext4_clear_blocks:893: inode 13
[  128.813577][    C0] EXT4-fs (loop3): last error at time 1793445401: ext4_clear_blocks:893: inode 13
[  128.875792][ T6453] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  128.875923][ T6453] EXT4-fs error (device loop3): ext4_free_branches:1040: inode #13: comm syz.3.195: invalid indirect mapped block 1819239214 (level 0)
[  128.875947][ T6453] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  128.909472][ T6453] EXT4-fs error (device loop3): ext4_free_branches:1040: inode #13: comm syz.3.195: invalid indirect mapped block 1819239214 (level 1)
[  128.909501][ T6453] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  128.942934][ T6453] EXT4-fs (loop3): 1 truncate cleaned up
[  128.971527][ T6453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  128.972693][ T5783] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  129.086867][ T5648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.139933][ T5783] usb 5-1: Using ep0 maxpacket: 8
[  129.146767][ T5783] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  129.167386][ T5783] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  129.167425][ T5783] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  129.167441][ T5783] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  129.167459][ T5783] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  129.167475][ T5783] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  129.167583][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.389184][ T6461] process 'syz.0.199' launched '/dev/fd/4' with NULL argv: empty string added
[  129.463432][ T5783] usb 5-1: GET_CAPABILITIES returned 0
[  129.463470][ T5783] usbtmc 5-1:16.0: can't read capabilities
[  129.646172][ T6466] ip6gre1: entered promiscuous mode
[  129.646189][ T6466] ip6gre1: entered allmulticast mode
[  129.687119][  T104] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  129.689079][  T104] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  129.709080][ T5783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  129.768247][ T5783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  129.770581][   T10] usb 5-1: USB disconnect, device number 2
[  129.972214][ T6472] loop3: detected capacity change from 0 to 1024
[  130.245338][  T987] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  130.379579][  T987] usb 2-1: Using ep0 maxpacket: 32
[  130.391392][  T987] usb 2-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00
[  130.403122][  T987] usb 2-1: config 0 has no interfaces?
[  130.403149][  T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.430838][  T987] usb 2-1: config 0 descriptor??
[  130.493517][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  130.615121][ T6486] loop3: detected capacity change from 0 to 128
[  131.053476][   T10] usb 2-1: USB disconnect, device number 4
[  131.150708][ T6498] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  131.150965][ T6498] overlayfs: overlapping lowerdir path
[  131.608390][ T6506] program syz.4.218 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  131.805550][    C0] sd 0:0:1:0: [sda] tag#8082 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  131.805609][    C0] sd 0:0:1:0: [sda] tag#8082 CDB: Read(10) 28 00 00 00 00 00 00 00 c0 09
[  132.199690][ T6500] loop0: detected capacity change from 0 to 32768
[  132.217646][ T6500] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.215 (6500)
[  132.254998][ T6500] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  132.255024][ T6500] BTRFS info (device loop0): using blake2b checksum algorithm
[  132.414025][ T6500] BTRFS info (device loop0): enabling ssd optimizations
[  132.414047][ T6500] BTRFS info (device loop0): using spread ssd allocation scheme
[  132.414060][ T6500] BTRFS info (device loop0): turning off barriers
[  132.414071][ T6500] BTRFS info (device loop0): enabling free space tree
[  132.414083][ T6500] BTRFS info (device loop0): enabling auto defrag
[  132.414105][ T6500] BTRFS info (device loop0): force zlib compression, level 3
[  132.507951][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  132.507996][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  132.574629][ T6515] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.761530][ T6531] netlink: 'syz.1.223': attribute type 1 has an invalid length.
[  132.888942][ T5637] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  133.038177][ T6515] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.068755][ T6535] loop2: detected capacity change from 0 to 512
[  133.083607][ T6535] EXT4-fs: Ignoring removed nobh option
[  133.124879][ T6535] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  133.124920][ T6535] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[  133.124988][ T6535] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #13: comm syz.2.225: inode has both inline data and extents flags
[  133.125006][ T6535] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  133.133184][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  133.133201][    C0] EXT4-fs (loop2): initial error at time 1793445406: ext4_orphan_get:1404: inode 13
[  133.133222][    C0] EXT4-fs (loop2): last error at time 1793445406: ext4_orphan_get:1404: inode 13
[  133.168603][ T6535] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.225: couldn't read orphan inode 13 (err -117)
[  133.168629][ T6535] loop2: lost filesystem error report for type 5 error -117
[  133.200942][ T6535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.299265][ T6535] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  133.444801][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.498870][ T6515] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.548835][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  133.691655][ T6515] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.940566][ T6510] loop3: detected capacity change from 0 to 32768
[  133.976945][ T6510] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  133.979158][ T6510] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  134.032094][ T6510] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 18, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[  134.032135][ T6510] gfs2: fsid=syz:syz.0: G:  s:SH n:2/12 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:2
[  134.032158][ T6510] gfs2: fsid=syz:syz.0:  H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[  134.032190][ T6510] gfs2: fsid=syz:syz.0:  I: n:1/18 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[  134.032213][ T6510] CPU: 0 UID: 0 PID: 6510 Comm: syz.3.220 Not tainted syzkaller #0 PREEMPT(full) 
[  134.032230][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  134.032239][ T6510] Call Trace:
[  134.032246][ T6510]  <TASK>
[  134.032253][ T6510]  dump_stack_lvl+0xe8/0x150
[  134.032281][ T6510]  gfs2_withdraw+0xc3/0x1b0
[  134.032305][ T6510]  gfs2_jdesc_check+0x17d/0x2f0
[  134.032335][ T6510]  init_journal+0xcc8/0x2390
[  134.032365][ T6510]  ? init_inodes+0xdb/0x320
[  134.032389][ T6510]  ? __pfx_init_journal+0x10/0x10
[  134.032409][ T6510]  ? vsnprintf+0xe42/0xef0
[  134.032435][ T6510]  ? snprintf+0xe8/0x140
[  134.032454][ T6510]  ? init_inodes+0xdb/0x320
[  134.032474][ T6510]  ? __pfx_snprintf+0x10/0x10
[  134.032492][ T6510]  ? gfs2_glock_nq_num+0x15f/0x1a0
[  134.032519][ T6510]  init_inodes+0xdb/0x320
[  134.032542][ T6510]  gfs2_fill_super+0x1948/0x20b0
[  134.032578][ T6510]  ? __pfx_gfs2_fill_super+0x10/0x10
[  134.032602][ T6510]  ? init_locking+0xb8/0x210
[  134.032627][ T6510]  ? sb_set_blocksize+0x155/0x240
[  134.032653][ T6510]  ? setup_bdev_super+0x58b/0x680
[  134.032680][ T6510]  get_tree_bdev_flags+0x436/0x500
[  134.032705][ T6510]  ? __pfx_gfs2_fill_super+0x10/0x10
[  134.032726][ T6510]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  134.032759][ T6510]  gfs2_get_tree+0x51/0x1e0
[  134.032785][ T6510]  vfs_get_tree+0x92/0x2a0
[  134.032822][ T6510]  do_new_mount+0x325/0xb00
[  134.032847][ T6510]  ? __pfx_do_new_mount+0x10/0x10
[  134.032874][ T6510]  ? ns_capable+0x84/0xe0
[  134.032898][ T6510]  ? path_mount+0x647/0x1050
[  134.032921][ T6510]  ? user_path_at+0xd4/0x160
[  134.032945][ T6510]  __se_sys_mount+0x31d/0x420
[  134.032970][ T6510]  ? __pfx___se_sys_mount+0x10/0x10
[  134.032996][ T6510]  ? __x64_sys_mount+0x20/0xc0
[  134.033018][ T6510]  do_syscall_64+0x166/0x520
[  134.033040][ T6510]  ? trace_irq_disable+0x3b/0x140
[  134.033064][ T6510]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.033080][ T6510]  ? clear_bhb_loop+0x70/0xc0
[  134.033100][ T6510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.033116][ T6510] RIP: 0033:0x7fc94fba07ca
[  134.033131][ T6510] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.033145][ T6510] RSP: 002b:00007fc950a8ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  134.033161][ T6510] RAX: ffffffffffffffda RBX: 00007fc950a8cee0 RCX: 00007fc94fba07ca
[  134.033173][ T6510] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007fc950a8cea0
[  134.033184][ T6510] RBP: 00002000000124c0 R08: 00007fc950a8cee0 R09: 0000000000000000
[  134.033194][ T6510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500
[  134.033204][ T6510] R13: 00007fc950a8cea0 R14: 00000000000125f4 R15: 00002000000000c0
[  134.033235][ T6510]  </TASK>
[  134.103703][ T6510] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[  135.059475][  T104] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.059518][  T104] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.204982][  T150] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.215687][  T150] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.298547][   T33] audit: type=1326 audit(1793445408.928:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.2.234" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a179f559 code=0x7ffc0000
[  135.328660][   T33] audit: type=1326 audit(1793445408.971:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.2.234" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a179f559 code=0x7ffc0000
[  135.356769][   T33] audit: type=1326 audit(1793445408.971:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.2.234" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a179f559 code=0x7ffc0000
[  135.356811][   T33] audit: type=1326 audit(1793445408.971:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.2.234" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a179f559 code=0x7ffc0000
[  135.426375][   T33] audit: type=1326 audit(1793445408.992:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.2.234" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fc9a179f559 code=0x7ffc0000
[  135.426416][   T33] audit: type=1326 audit(1793445409.067:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.2.234" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a179f559 code=0x7ffc0000
[  135.426448][   T33] audit: type=1326 audit(1793445409.067:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.2.234" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a179f559 code=0x7ffc0000
[  135.428335][   T33] audit: type=1326 audit(1793445409.067:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.2.234" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a179f559 code=0x7ffc0000
[  135.428379][   T33] audit: type=1326 audit(1793445409.067:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.2.234" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a179f559 code=0x7ffc0000
[  135.428536][   T33] audit: type=1326 audit(1793445409.067:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.2.234" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc9a179f559 code=0x7ffc0000
[  135.699012][ T6566] loop0: detected capacity change from 0 to 2048
[  135.809806][ T6566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.180802][ T6572] loop3: detected capacity change from 0 to 4096
[  136.293522][ T6572] ntfs3(loop3): ino=9, mi_enum_attr
[  136.293566][ T6572] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  136.356194][ T6572] ntfs3(loop3): ino=9, mi_enum_attr
[  136.356279][ T6572] ntfs3(loop3): ino=b, mi_enum_attr
[  136.356338][ T6572] ntfs3(loop3): Failed to load $Extend (-22).
[  136.356351][ T6572] ntfs3(loop3): Failed to initialize $Extend.
[  137.033857][ T6600] syz.3.252 uses obsolete (PF_INET,SOCK_PACKET)
[  137.170978][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.640113][ T6610] loop1: detected capacity change from 0 to 32768
[  137.641111][ T6610] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  137.665200][ T6610] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.254 (6610)
[  137.690340][ T6610] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  137.690371][ T6610] BTRFS info (device loop1): using sha256 checksum algorithm
[  137.854121][ T6610] BTRFS info (device loop1): rebuilding free space tree
[  137.888586][ T6610] BTRFS info (device loop1): disabling free space tree
[  137.888651][ T6610] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  137.888668][ T6610] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  137.924728][ T6610] BTRFS info (device loop1): enabling ssd optimizations
[  137.924747][ T6610] BTRFS info (device loop1): turning on async discard
[  137.924759][ T6610] BTRFS info (device loop1): force clearing of disk cache
[  138.110521][ T5635] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  138.461225][ T5368] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  138.613166][ T5368] usb 3-1: New USB device found: idVendor=0552, idProduct=5510, bcdDevice=0.00
[  138.626419][ T5368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  138.626439][ T5368] usb 3-1: Product: syz
[  138.626450][ T5368] usb 3-1: Manufacturer: syz
[  138.740266][ T6639] loop1: detected capacity change from 0 to 8
[  138.895028][ T6639] SQUASHFS error: zlib decompression failed, data probably corrupt
[  138.895060][ T6639] SQUASHFS error: Failed to read block 0x4de: -5
[  138.895197][ T6639] SQUASHFS error: zlib decompression failed, data probably corrupt
[  138.895224][ T6639] SQUASHFS error: Failed to read block 0x4df: -5
[  138.895358][ T6639] SQUASHFS error: zlib decompression failed, data probably corrupt
[  138.895379][ T6639] SQUASHFS error: Failed to read block 0x4e0: -5
[  138.952293][ T6639] SQUASHFS error: zlib decompression failed, data probably corrupt
[  138.952321][ T6639] SQUASHFS error: Failed to read block 0x4de: -5
[  139.009809][ T5368] scsi host1: uas
[  139.136285][ T6647] loop0: detected capacity change from 0 to 128
[  139.166917][ T6647] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  139.199496][ T6647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.428968][    C0] usb 3-1: stat urb: status -71
[  139.436200][   T10] usb 3-1: USB disconnect, device number 4
[  139.469022][   T10] scsi 1:0:0:0: tag#20 uas_zap_pending 0 uas-tag 1 inflight: CMD 
[  139.469079][   T10] scsi 1:0:0:0: tag#20 CDB: Inquiry 12 00 00 00 24 00
[  139.710742][ T6654] loop0: detected capacity change from 0 to 512
[  139.921879][ T6656] Driver unsupported XDP return value 0 on prog  (id 15) dev N/A, expect packet loss!
[  140.197222][ T6665] loop4: detected capacity change from 0 to 2048
[  140.224179][ T6665] NILFS (loop4): invalid segment: Magic number mismatch
[  140.224199][ T6665] NILFS (loop4): trying rollback from an earlier position
[  140.263957][ T6665] NILFS (loop4): recovery complete
[  140.291485][ T6667] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.377604][ T6665] syz.4.273: attempt to access beyond end of device
[  140.377604][ T6665] loop4: rw=8388608, sector=2388, nr_sectors = 4 limit=2048
[  140.379369][ T6665] NILFS (loop4): I/O error reading node block for GC (ino=7, vblocknr=2147483649)
[  140.379398][ T6665] NILFS (loop4): error -5 preparing GC: cannot read source blocks
[  140.528187][ T6669] loop0: detected capacity change from 0 to 8
[  140.683444][  T987] kernel read not supported for file /dsp1 (pid: 987 comm: kworker/0:2)
[  141.073146][ T6678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.278'.
[  141.135942][  T987] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  141.276115][  T987] usb 2-1: Using ep0 maxpacket: 16
[  141.276884][  T987] usb 2-1: New USB device found: idVendor=1038, idProduct=12c2, bcdDevice=0.00
[  141.278124][  T987] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.278147][  T987] usb 2-1: config 0 interface 0 has no altsetting 0
[  141.278171][  T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.329932][  T987] usb 2-1: config 0 descriptor??
[  141.452038][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  141.738130][ T6690] overlayfs: regular lower layers cannot follow data lower layers
[  141.791466][  T987] hid-steelseries-arctis 0003:1038:12C2.0001: unknown main item tag 0x0
[  141.791512][  T987] hid-steelseries-arctis 0003:1038:12C2.0001: unknown main item tag 0x0
[  141.791540][  T987] hid-steelseries-arctis 0003:1038:12C2.0001: unexpected long global item
[  141.807033][  T987] hid-steelseries-arctis 0003:1038:12C2.0001: probe with driver hid-steelseries-arctis failed with error -22
[  141.989838][  T987] usb 2-1: USB disconnect, device number 5
[  142.223607][ T6671] loop4: detected capacity change from 0 to 32768
[  142.276595][ T6671] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  142.276612][ T6671] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  142.314110][ T6671] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 18, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[  142.314138][ T6671] gfs2: fsid=syz:syz.0: G:  s:SH n:2/12 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:2
[  142.314162][ T6671] gfs2: fsid=syz:syz.0:  H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[  142.314194][ T6671] gfs2: fsid=syz:syz.0:  I: n:1/18 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[  142.314217][ T6671] CPU: 0 UID: 0 PID: 6671 Comm: syz.4.275 Not tainted syzkaller #0 PREEMPT(full) 
[  142.314234][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  142.314244][ T6671] Call Trace:
[  142.314250][ T6671]  <TASK>
[  142.314257][ T6671]  dump_stack_lvl+0xe8/0x150
[  142.314286][ T6671]  gfs2_withdraw+0xc3/0x1b0
[  142.314308][ T6671]  gfs2_jdesc_check+0x17d/0x2f0
[  142.314335][ T6671]  init_journal+0xcc8/0x2390
[  142.314365][ T6671]  ? init_inodes+0xdb/0x320
[  142.314389][ T6671]  ? __pfx_init_journal+0x10/0x10
[  142.314409][ T6671]  ? vsnprintf+0xe42/0xef0
[  142.314435][ T6671]  ? snprintf+0xe8/0x140
[  142.314454][ T6671]  ? init_inodes+0xdb/0x320
[  142.314474][ T6671]  ? __pfx_snprintf+0x10/0x10
[  142.314492][ T6671]  ? gfs2_glock_nq_num+0x15f/0x1a0
[  142.314525][ T6671]  init_inodes+0xdb/0x320
[  142.314547][ T6671]  gfs2_fill_super+0x1948/0x20b0
[  142.314578][ T6671]  ? __pfx_gfs2_fill_super+0x10/0x10
[  142.314602][ T6671]  ? init_locking+0xb8/0x210
[  142.314621][ T6671]  ? sb_set_blocksize+0x155/0x240
[  142.314647][ T6671]  ? setup_bdev_super+0x58b/0x680
[  142.314673][ T6671]  get_tree_bdev_flags+0x436/0x500
[  142.314697][ T6671]  ? __pfx_gfs2_fill_super+0x10/0x10
[  142.314717][ T6671]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  142.314753][ T6671]  gfs2_get_tree+0x51/0x1e0
[  142.314776][ T6671]  vfs_get_tree+0x92/0x2a0
[  142.314802][ T6671]  do_new_mount+0x325/0xb00
[  142.314827][ T6671]  ? __pfx_do_new_mount+0x10/0x10
[  142.314849][ T6671]  ? ns_capable+0x84/0xe0
[  142.314873][ T6671]  ? path_mount+0x647/0x1050
[  142.314895][ T6671]  ? user_path_at+0xd4/0x160
[  142.314920][ T6671]  __se_sys_mount+0x31d/0x420
[  142.314945][ T6671]  ? __pfx___se_sys_mount+0x10/0x10
[  142.314970][ T6671]  ? __x64_sys_mount+0x20/0xc0
[  142.314993][ T6671]  do_syscall_64+0x166/0x520
[  142.315014][ T6671]  ? trace_irq_disable+0x3b/0x140
[  142.315037][ T6671]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.315054][ T6671]  ? clear_bhb_loop+0x70/0xc0
[  142.315081][ T6671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.315097][ T6671] RIP: 0033:0x7f68cc1a07ca
[  142.315112][ T6671] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.315125][ T6671] RSP: 002b:00007f68cd0d5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  142.315142][ T6671] RAX: ffffffffffffffda RBX: 00007f68cd0d5ee0 RCX: 00007f68cc1a07ca
[  142.315154][ T6671] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f68cd0d5ea0
[  142.315165][ T6671] RBP: 00002000000124c0 R08: 00007f68cd0d5ee0 R09: 0000000000000000
[  142.315175][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500
[  142.315185][ T6671] R13: 00007f68cd0d5ea0 R14: 00000000000125f4 R15: 00002000000000c0
[  142.315210][ T6671]  </TASK>
[  142.343357][ T6671] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[  143.016005][ T6703] loop4: detected capacity change from 0 to 64
[  143.067327][ T6686] loop0: detected capacity change from 0 to 32768
[  143.240982][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  143.240996][   T33] audit: type=1800 audit(1793445417.447:23): pid=6703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.290" name="file1" dev="loop4" ino=21 res=0 errno=-22
[  143.499705][ T6703] syz.4.290: attempt to access beyond end of device
[  143.499705][ T6703] loop4: rw=8423425, sector=57, nr_sectors = 8 limit=64
[  143.628035][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.628530][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.830385][ T6692] loop3: detected capacity change from 0 to 40427
[  143.870560][ T6692] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  143.870599][ T6692] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  143.898545][ T6692] F2FS-fs (loop3): invalid crc value
[  144.191841][ T6692] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  144.249305][ T6692] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  144.249329][ T6692] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  144.317970][ T6707] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.375985][ T6707] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.456266][ T5648] syz-executor: attempt to access beyond end of device
[  144.456266][ T5648] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  144.485493][ T5648] CPU: 0 UID: 0 PID: 5648 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  144.485516][ T5648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  144.485526][ T5648] Call Trace:
[  144.485533][ T5648]  <TASK>
[  144.485539][ T5648]  dump_stack_lvl+0xe8/0x150
[  144.485571][ T5648]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  144.485602][ T5648]  f2fs_write_end_bio+0x118e/0x15d0
[  144.485636][ T5648]  __submit_merged_bio+0x258/0x6a0
[  144.485661][ T5648]  ? rcu_is_watching+0x16/0xb0
[  144.485690][ T5648]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  144.485718][ T5648]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  144.485762][ T5648]  f2fs_write_data_pages+0x2a13/0x36e0
[  144.485809][ T5648]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.485837][ T5648]  ? is_bpf_text_address+0x292/0x2b0
[  144.485853][ T5648]  ? is_bpf_text_address+0x26/0x2b0
[  144.485891][ T5648]  ? stack_trace_save+0xa9/0x100
[  144.485911][ T5648]  ? __pfx_stack_trace_save+0x10/0x10
[  144.485952][ T5648]  ? lockdep_unlock+0x5c/0xd0
[  144.485969][ T5648]  ? __lock_acquire+0x1511/0x2de0
[  144.486010][ T5648]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.486029][ T5648]  do_writepages+0x338/0x560
[  144.486055][ T5648]  ? do_raw_spin_unlock+0xf5/0x200
[  144.486076][ T5648]  filemap_fdatawrite+0x1e9/0x2f0
[  144.486097][ T5648]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  144.486151][ T5648]  ? do_raw_spin_unlock+0xf5/0x200
[  144.486170][ T5648]  f2fs_sync_dirty_inodes+0x471/0x970
[  144.486203][ T5648]  f2fs_write_checkpoint+0x867/0x24d0
[  144.486251][ T5648]  kill_f2fs_super+0x2df/0x700
[  144.486274][ T5648]  ? rcu_do_enqueue+0x616/0x870
[  144.486294][ T5648]  ? lockdep_hardirqs_on+0x7b/0x110
[  144.486315][ T5648]  ? __pfx_kill_f2fs_super+0x10/0x10
[  144.486347][ T5648]  ? __pfx_call_rcu+0x10/0x10
[  144.486366][ T5648]  ? shrinker_free+0x2a7/0x3b0
[  144.486386][ T5648]  deactivate_locked_super+0xbe/0x110
[  144.486409][ T5648]  cleanup_mnt+0x204/0x2a0
[  144.486437][ T5648]  task_work_run+0x1d9/0x260
[  144.486460][ T5648]  ? __pfx_task_work_run+0x10/0x10
[  144.486489][ T5648]  exit_to_user_mode_loop+0x204/0x770
[  144.486511][ T5648]  ? rcu_is_watching+0x16/0xb0
[  144.486539][ T5648]  do_syscall_64+0x328/0x520
[  144.486562][ T5648]  ? trace_irq_disable+0x3b/0x140
[  144.486585][ T5648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.486604][ T5648]  ? clear_bhb_loop+0x70/0xc0
[  144.486625][ T5648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.486643][ T5648] RIP: 0033:0x7fc94fba0797
[  144.486658][ T5648] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  144.486671][ T5648] RSP: 002b:00007ffe7e9e1568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  144.486687][ T5648] RAX: 0000000000000000 RBX: 00007fc94fc35f93 RCX: 00007fc94fba0797
[  144.486698][ T5648] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7e9e1620
[  144.486708][ T5648] RBP: 00007ffe7e9e1620 R08: 00007ffe7e9e2620 R09: 00000000ffffffff
[  144.486719][ T5648] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7e9e26b0
[  144.486728][ T5648] R13: 00007fc94fc35f93 R14: 000000000002394b R15: 00007ffe7e9e26f0
[  144.486757][ T5648]  </TASK>
[  144.486773][ T5648] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  145.264408][   T34] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.264438][   T34] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.264465][   T34] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.264485][   T34] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.264510][   T34] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.264530][   T34] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.264554][   T34] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.264574][   T34] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.515172][ T6727] loop0: detected capacity change from 0 to 128
[  145.544073][ T6727] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  146.248687][ T6739] loop1: detected capacity change from 0 to 4096
[  146.339596][ T6739] ntfs3(loop1): ino=9, mi_enum_attr
[  146.339619][ T6739] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  146.365526][ T6739] ntfs3(loop1): ino=9, mi_enum_attr
[  146.365613][ T6739] ntfs3(loop1): ino=b, mi_enum_attr
[  146.365672][ T6739] ntfs3(loop1): Failed to load $Extend (-22).
[  146.365685][ T6739] ntfs3(loop1): Failed to initialize $Extend.
[  146.598433][ T6749] loop3: detected capacity change from 0 to 2048
[  146.651044][ T6749]  loop3: p1 < > p4 < >
[  146.669216][ T6752] netlink: 'syz.4.307': attribute type 83 has an invalid length.
[  146.751228][ T6726] loop2: detected capacity change from 0 to 32768
[  147.084808][ T6758] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  147.145407][   T33] audit: type=1800 audit(1793445421.631:24): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.298" name="file1" dev="loop2" ino=7 res=0 errno=-22
[  147.255402][ T6755] read_mapping_page failed!
[  147.255425][ T6755] jfs_create: dtInsert returned -EIO
[  147.255617][ T6755] ERROR: (device loop2): jfs_create: 
[  147.255617][ T6755] 
[  147.281032][ T6755] ERROR: (device loop2): remounting filesystem as read-only
[  147.396987][ T6761] 8021q: adding VLAN 0 to HW filter on device bond1
[  147.409036][ T6761] bridge0: port 3(bond1) entered blocking state
[  147.409125][ T6761] bridge0: port 3(bond1) entered disabled state
[  147.409265][ T6761] bond1: entered allmulticast mode
[  147.471551][ T6761] bond1: entered promiscuous mode
[  147.486456][ T6761] bridge0: port 3(bond1) entered blocking state
[  147.486622][ T6761] bridge0: port 3(bond1) entered forwarding state
[  147.631181][   T14] bridge0: port 3(bond1) entered disabled state
[  147.880828][ T6771] loop0: detected capacity change from 0 to 512
[  148.337337][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'.
[  148.376616][ T6784] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.431905][ T6788] capability: warning: `syz.2.315' uses 32-bit capabilities (legacy support in use)
[  148.472074][ T6788] program syz.2.315 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  148.509853][ T5783] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  148.590549][ T6790] loop0: detected capacity change from 0 to 256
[  148.639987][ T6790] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  148.662685][ T5783] usb 5-1: New USB device found: idVendor=046d, idProduct=c71f, bcdDevice=0.00
[  148.677036][ T5783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  148.677072][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.706633][ T5783] usb 5-1: config 0 descriptor??
[  148.707208][ T6782] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  148.808435][ T6794] loop2: detected capacity change from 0 to 64
[  148.920403][   T33] audit: type=1800 audit(1793445423.541:25): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.326" name="file1" dev="loop2" ino=21 res=0 errno=-22
[  149.006944][ T6794] syz.2.326: attempt to access beyond end of device
[  149.006944][ T6794] loop2: rw=8423425, sector=57, nr_sectors = 8 limit=64
[  149.192524][ T5783] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0
[  149.192553][ T5783] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0
[  149.192572][ T5783] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0
[  149.192591][ T5783] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0
[  149.192610][ T5783] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0
[  149.192635][ T5783] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0
[  149.192654][ T5783] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0
[  149.192674][ T5783] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0
[  149.192692][ T5783] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0
[  149.192711][ T5783] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0
[  149.378948][ T5783] usb 5-1: USB disconnect, device number 3
[  150.236081][   T33] audit: type=1400 audit(1793445424.957:26): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6823 comm="syz.3.339" name="p" offset=48
[  150.357486][   T33] audit: type=1400 audit(1793445425.086:27): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=6825 comm="syz.4.340" name="p" offset=79
[  150.529134][ T6832] batadv_slave_1: entered promiscuous mode
[  150.539580][ T6831] batadv_slave_1: left promiscuous mode
[  151.910780][ T5783] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  151.934992][ T6859] loop0: detected capacity change from 0 to 128
[  151.972572][ T6859] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  151.972610][ T6859] hpfs: filesystem error: improperly stopped
[  151.972621][ T6859] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  151.972631][ T6859] hpfs: You really don't want any checks? You are crazy...
[  151.972949][ T6859] hpfs: hpfs_map_sector(): read error
[  151.972957][ T6859] hpfs: code page support is disabled
[  151.973024][ T6859] hpfs: hpfs_map_4sectors(): unaligned read
[  151.973070][ T6859] hpfs: hpfs_map_4sectors(): unaligned read
[  151.973077][ T6859] hpfs: filesystem error: unable to find root dir
[  152.088105][ T5783] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  152.089469][ T5783] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.089502][ T5783] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  152.089518][ T5783] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  152.089534][ T5783] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  152.128753][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.128773][ T5783] usb 4-1: Product: syz
[  152.128785][ T5783] usb 4-1: Manufacturer: syz
[  152.128795][ T5783] usb 4-1: SerialNumber: syz
[  152.213317][ T6861] loop1: detected capacity change from 0 to 164
[  152.400050][ T6861] isofs: isofs_export_get_parent(): child directory not normalized!
[  152.419760][ T6855] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  152.543033][ T6849] loop4: detected capacity change from 0 to 32768
[  152.691974][ T6863] loop0: detected capacity change from 0 to 4096
[  152.880067][ T6849] JBD2: Ignoring recovery information on journal
[  152.881312][ T6849] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75
[  152.907193][ T6849] JBD2: bad block at offset 32
[  153.005032][ T6863] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  153.020115][ T6849] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  153.021976][ T5783] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed
[  153.055457][ T5783] cdc_ncm 4-1:1.0: bind() failure
[  153.104091][ T5783] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  153.104125][ T5783] cdc_ncm 4-1:1.1: bind() failure
[  153.156227][ T5783] usb 4-1: USB disconnect, device number 5
[  153.467153][ T6879] loop2: detected capacity change from 0 to 128
[  153.562060][ T6879] ufs: ufs_fill_super(): fragment size 3265016187 is not a power of 2
[  153.769106][ T5638] ocfs2: Unmounting device (7,4) on (node local)
[  154.002943][ T6885] program syz.2.368 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  154.587547][ T6881] loop3: detected capacity change from 0 to 32768
[  154.609033][ T6881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.366 (6881)
[  154.676413][ T6881] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.676441][ T6881] BTRFS info (device loop3): using crc32c checksum algorithm
[  154.756377][ T6903] loop2: detected capacity change from 0 to 512
[  154.826204][ T6903] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  154.863467][ T6881] BTRFS info (device loop3): enabling ssd optimizations
[  154.863490][ T6881] BTRFS info (device loop3): turning on flush-on-commit
[  154.863502][ T6881] BTRFS info (device loop3): enabling free space tree
[  154.863514][ T6881] BTRFS info (device loop3): enabling auto defrag
[  154.863527][ T6881] BTRFS info (device loop3): use lzo compression, level 1
[  154.863541][ T6881] BTRFS info (device loop3): max_inline set to 4096
[  154.984014][ T6903] EXT4-fs error (device loop2): ext4_quota_enable:7307: comm syz.2.374: Bad quota inum: 2, type: 1
[  155.001728][ T6903] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[  155.109972][ T6903] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  155.125694][ T6903] EXT4-fs error (device loop2): ext4_quota_enable:7307: comm syz.2.374: Bad quota inum: 2, type: 1
[  155.137206][ T6903] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[  155.298607][ T5648] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  155.364489][ T5636] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  155.689736][ T6937] jffs2: notice: (6937) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  156.497639][ T6929] loop1: detected capacity change from 0 to 32768
[  156.511699][ T6929] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.379 (6929)
[  156.541322][ T6929] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  156.541347][ T6929] BTRFS info (device loop1): using blake2b checksum algorithm
[  156.670083][ T6929] BTRFS info (device loop1): enabling ssd optimizations
[  156.670110][ T6929] BTRFS info (device loop1): turning on async discard
[  156.670136][ T6929] BTRFS info (device loop1): enabling free space tree
[  156.855694][ T5635] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  156.872609][ T6972] loop2: detected capacity change from 0 to 512
[  156.913976][ T6972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  156.914066][ T6972] System zones: 1-12
[  156.976521][ T6972] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.392: missing EA_INODE flag
[  156.976547][ T6972] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  156.979991][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  156.980009][    C0] EXT4-fs (loop2): initial error at time 1793445432: ext4_xattr_inode_iget:437: inode 12
[  156.980032][    C0] EXT4-fs (loop2): last error at time 1793445432: ext4_xattr_inode_iget:437: inode 12
[  157.045408][ T6972] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.392: error while reading EA inode 12 err=-117
[  157.045447][ T6972] loop2: lost filesystem error report for type 5 error -117
[  157.048062][ T6972] EXT4-fs (loop2): 1 orphan inode deleted
[  157.116215][ T6972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.234769][ T6972] fscrypt (loop2, inode 15): Unsupported encryption flags (0x10)
[  157.368374][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.557938][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  157.625617][ T6984] loop2: detected capacity change from 0 to 512
[  157.856314][ T5783] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  157.932102][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  157.999419][ T5783] usb 2-1: New USB device found: idVendor=044f, idProduct=b65d, bcdDevice=0.00
[  158.014246][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.014271][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.014299][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.049193][ T5783] usb 2-1: config 0 descriptor??
[  158.070543][   T10] usb 5-1: Using ep0 maxpacket: 16
[  158.082320][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  158.082356][   T10] usb 5-1: New USB device found: idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  158.088661][   T10] usb 5-1: config 9 has an invalid interface number: 57 but max is 0
[  158.088680][   T10] usb 5-1: config 9 has no interface number 0
[  158.088701][   T10] usb 5-1: config 9 interface 57 has no altsetting 0
[  158.141549][   T10] usb 5-1: string descriptor 0 read error: -22
[  158.141666][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.123526][ T6999] loop0: detected capacity change from 0 to 131072
[  159.135249][   T10]  (null): keene_cmd_main failed (-110)
[  159.143196][ T6999] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  159.143217][ T6999] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  159.175268][ T6999] F2FS-fs (loop0): invalid crc value
[  159.245065][ T6999] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  159.265173][ T6999] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  159.265196][ T6999] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  159.300572][   T10] video4linux radio48: keene_cmd_main failed (-32)
[  159.300592][   T10] radio-keene 5-1:9.57: V4L2 device registered as radio48
[  159.333353][ T6999] F2FS-fs (loop0): sanity_check_inode: inode (ino=6) has corrupted i_extra_isize: 0, max: 36
[  159.386153][ T5783] hid_parser_main: 457 callbacks suppressed
[  159.386173][ T5783] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0
[  159.386196][ T5783] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0
[  159.386215][ T5783] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0
[  159.386234][ T5783] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0
[  159.386252][ T5783] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0
[  159.386272][ T5783] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0
[  159.386298][ T5783] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0
[  159.603643][ T5783] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0
[  159.603831][ T5783] hid-thrustmaster 0003:044F:B65D.0003: Wrong number of endpoints?
[  159.629214][    C0] hid-thrustmaster 0003:044F:B65D.0003: Unknown wheel's model id 0x0, unable to proceed further with wheel init
[  159.850665][ T5783] usb 2-1: USB disconnect, device number 6
[  159.930134][ T7007] fido_id[7007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  160.558862][ T6997] loop3: detected capacity change from 0 to 32768
[  160.621030][ T6997] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  160.734837][ T6997] XFS (loop3): Ending clean mount
[  160.806522][   T11] usb 5-1: USB disconnect, device number 4
[  161.162036][ T7034] loop4: detected capacity change from 0 to 2048
[  161.213398][ T5648] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  161.250289][ T7034] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  161.250313][ T7034] UDF-fs: Scanning with blocksize 512 failed
[  161.353789][ T7034] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  161.489249][ T7034] capability: warning: `syz.4.413' uses deprecated v2 capabilities in a way that may be insecure
[  162.169529][ T7049] loop2: detected capacity change from 0 to 1024
[  162.401003][ T7053] loop4: detected capacity change from 0 to 1024
[  162.449141][ T7019] loop0: detected capacity change from 0 to 40427
[  162.482049][ T7053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  162.482135][ T7053] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.501553][ T7019] F2FS-fs (loop0): invalid crc value
[  162.628777][ T7052] EXT4-fs error (device loop4): ext4_free_blocks:6717: comm syz.4.422: Freeing blocks not in datazone - block = 0, count = 16
[  162.702021][ T7052] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.422: bg 0: block 112: padding at end of block bitmap is not set
[  162.788864][ T7052] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6678: Corrupt filesystem
[  162.842991][ T5783] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  162.899810][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  162.987255][ T7019] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  163.004988][ T5783] usb 4-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00
[  163.007461][ T5783] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  163.007481][ T5783] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  163.051679][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.051701][ T5783] usb 4-1: Product: syz
[  163.051712][ T5783] usb 4-1: Manufacturer: syz
[  163.051724][ T5783] usb 4-1: SerialNumber: syz
[  163.136644][ T7019] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[  163.136686][ T7019] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  163.136746][ T7019] F2FS-fs (loop0): Start checkpoint disabled!
[  163.238097][ T7019] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[  163.252138][ T7019] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  163.320742][ T5783] usb 4-1: Limiting number of CPorts to U8_MAX
[  163.726827][    C0] usb 4-1: invalid arpc response id received: 18432
[  163.915649][ T5783] usb 4-1: failed to send ARPC request 1: -71
[  163.915848][ T5783] usb 4-1: failed to execute ARPC: -71
[  163.915978][ T5783] usb 4-1: failed to set connected state for cport 0: -71
[  163.915992][ T5783] greybus greybus1: 0/0:0: failed to set connected state: -71
[  163.973708][ T5783] usb 4-1: failed to send ARPC request 3: -71
[  163.973911][ T5783] usb 4-1: failed to execute ARPC: -71
[  163.973924][ T5783] usb 4-1: failed to clear cport 0: -71
[  163.973937][ T5783] greybus greybus1: 0/0:0: failed to clear host cport: -71
[  164.067342][ T5783] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -71
[  164.107017][ T5783] usb 4-1: USB disconnect, device number 6
[  164.877486][ T7087] ip_tables: iptables: counters copy to user failed while replacing table
[  164.969738][ T5783] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  165.108987][ T5783] usb 3-1: Using ep0 maxpacket: 32
[  165.111318][ T5783] usb 3-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  165.112588][ T5783] usb 3-1: config index 0 descriptor too short (expected 27632, got 27)
[  165.112615][ T5783] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  165.112631][ T5783] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  165.112646][ T5783] usb 3-1: config 1 has no interface number 0
[  165.112677][ T5783] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  165.112697][ T5783] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  165.112727][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.244370][ T5783] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  165.432158][ T5783] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  165.852270][  T987] usb 3-1: USB disconnect, device number 5
[  165.864936][  T987] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  166.124268][ T7092] loop3: detected capacity change from 0 to 32768
[  166.140501][ T7092] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.436 (7092)
[  166.179512][ T7092] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  166.179539][ T7092] BTRFS info (device loop3): using xxhash64 checksum algorithm
[  166.313191][ T7092] BTRFS info (device loop3): enabling ssd optimizations
[  166.313214][ T7092] BTRFS info (device loop3): turning on async discard
[  166.313227][ T7092] BTRFS info (device loop3): enabling free space tree
[  166.656357][ T5648] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  167.436266][ T7150] loop2: detected capacity change from 0 to 64
[  167.521284][ T7145] loop3: detected capacity change from 0 to 4096
[  167.630518][ T7152] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.766995][ T7150] syz.2.455: attempt to access beyond end of device
[  167.766995][ T7150] loop2: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[  167.767165][ T7150] Buffer I/O error on dev loop2, logical block 512, async page read
[  167.767333][ T7150] syz.2.455: attempt to access beyond end of device
[  167.767333][ T7150] loop2: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  167.767361][ T7150] Buffer I/O error on dev loop2, logical block 56576, async page read
[  167.901549][ T7154] NILFS (loop3): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  168.002748][ T7160] syz.2.455: attempt to access beyond end of device
[  168.002748][ T7160] loop2: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[  168.002775][ T7160] Buffer I/O error on dev loop2, logical block 512, async page read
[  168.002839][ T7160] syz.2.455: attempt to access beyond end of device
[  168.002839][ T7160] loop2: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  168.002856][ T7160] Buffer I/O error on dev loop2, logical block 56576, async page read
[  168.432657][ T7165] bond0: entered promiscuous mode
[  168.432675][ T7165] bond_slave_0: entered promiscuous mode
[  168.432831][ T7165] bond_slave_1: entered promiscuous mode
[  168.494818][ T7165] batadv0: entered promiscuous mode
[  168.564440][ T7165] 8021q: adding VLAN 0 to HW filter on device hsr1
[  168.589712][ T7165] bond0: left promiscuous mode
[  168.589732][ T7165] bond_slave_0: left promiscuous mode
[  168.589896][ T7165] bond_slave_1: left promiscuous mode
[  168.629778][ T7165] batadv0: left promiscuous mode
[  168.870858][ T7178] loop2: detected capacity change from 0 to 256
[  168.918436][ T7178] exFAT-fs (loop2): error, no upcase table entry. Please run fsck
[  168.918453][ T7178] exFAT-fs (loop2): Filesystem has been set read-only
[  169.666274][   T33] audit: type=1326 audit(1793445445.803:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7202 comm="syz.3.478" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc94fb9f559 code=0x0
[  170.304813][ T7214] loop4: detected capacity change from 0 to 512
[  170.367755][ T7214] EXT4-fs error (device loop4) in ext4_process_orphan:346: Out of memory
[  170.367779][ T7214] loop4: lost filesystem error report for type 5 error -12
[  170.373616][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  170.373636][    C0] EXT4-fs (loop4): initial error at time 1793445446: ext4_process_orphan:346
[  170.373653][    C0] EXT4-fs (loop4): last error at time 1793445446: ext4_process_orphan:346
[  170.445866][ T7214] EXT4-fs (loop4): 2 truncates cleaned up
[  170.460674][ T7214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.531116][ T7214] EXT4-fs (loop4): Online defrag not supported for non-extent files
[  170.643346][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.177095][ T7236] loop2: detected capacity change from 0 to 4096
[  171.381033][ T7236] ntfs3(loop2): ino=5, "/" indx_read_ra
[  171.381063][ T7236] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  171.463113][ T7247] netlink: 'syz.1.495': attribute type 32 has an invalid length.
[  171.463131][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'.
[  171.587277][ T7247] bond1: option coupled_control: invalid value (6)
[  171.592558][ T7247] bond1 (unregistering): Released all slaves
[  171.919408][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'.
[  172.046021][ T7260] netlink: 32 bytes leftover after parsing attributes in process `syz.2.501'.
[  172.570273][ T7281] netlink: 32 bytes leftover after parsing attributes in process `syz.3.511'.
[  175.006446][  T987] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  175.158972][  T987] usb 3-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[  175.161330][  T987] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  175.161373][  T987] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65509, setting to 64
[  175.161393][  T987] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  175.161423][  T987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.447942][  T987] cxacru 3-1:1.0: invalid response length to cm 0x90: 63
[  175.471564][ T7349] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[  175.559673][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'.
[  175.599643][ T7342] loop0: detected capacity change from 0 to 32768
[  175.612426][ T7342] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.538 (7342)
[  175.656408][ T7342] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.656435][ T7342] BTRFS info (device loop0): using crc32c checksum algorithm
[  175.685361][ T5783] usb 3-1: USB disconnect, device number 6
[  175.816499][ T7342] BTRFS info (device loop0): enabling ssd optimizations
[  175.816519][ T7342] BTRFS info (device loop0): turning on flush-on-commit
[  175.816532][ T7342] BTRFS info (device loop0): enabling free space tree
[  175.816543][ T7342] BTRFS info (device loop0): enabling auto defrag
[  175.816556][ T7342] BTRFS info (device loop0): use lzo compression, level 1
[  175.816570][ T7342] BTRFS info (device loop0): max_inline set to 4096
[  175.898983][   T33] audit: type=1800 audit(1793445708.488:29): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.538" name="file2" dev="loop0" ino=261 res=0 errno=-22
[  176.127580][ T7368] loop4: detected capacity change from 0 to 512
[  176.154617][ T7368] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  176.154632][ T7368] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  176.298313][ T7368] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.543: bg 0: block 104: invalid block bitmap
[  176.298341][ T7368] loop4: lost filesystem error report for type 5 error -117
[  176.302097][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  176.302114][    C0] EXT4-fs (loop4): initial error at time 1793445708: ext4_validate_block_bitmap:436
[  176.302133][    C0] EXT4-fs (loop4): last error at time 1793445708: ext4_validate_block_bitmap:436
[  176.364753][ T7368] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6678: Corrupt filesystem
[  176.364774][ T7368] loop4: lost filesystem error report for type 5 error -117
[  176.374237][ T7368] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #11: comm syz.4.543: invalid indirect mapped block 1 (level 1)
[  176.374266][ T7368] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  176.421306][ T7368] EXT4-fs (loop4): 1 truncate cleaned up
[  176.488572][ T7348] loop3: detected capacity change from 0 to 32768
[  176.510941][ T7368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.658689][ T7348] read_mapping_page failed!
[  176.658719][ T7348] ERROR: (device loop3): txCommit: 
[  176.658719][ T7348] 
[  176.714150][ T5637] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.744256][ T7348] ERROR: (device loop3): remounting filesystem as read-only
[  176.924590][  T126] BUG at fs/jfs/jfs_txnmgr.c:933 assert(mp->nohomeok > 0)
[  176.924974][  T126] ------------[ cut here ]------------
[  176.924981][  T126] kernel BUG at fs/jfs/jfs_txnmgr.c:933!
[  176.925016][  T126] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  176.949647][  T126] CPU: 0 UID: 0 PID: 126 Comm: jfsCommit Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  176.960355][  T126] Tainted: [L]=SOFTLOCKUP
[  176.964685][  T126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  176.974761][  T126] RIP: 0010:txUnlock+0xd95/0xde0
[  176.979723][  T126] Code: a6 fd 90 0f 0b e8 fb eb 47 fe 48 c7 c7 20 c7 6e 8c 48 c7 c6 19 c3 6e 8c ba a5 03 00 00 48 c7 c1 20 d4 6e 8c e8 ac 99 a6 fd 90 <0f> 0b e8 d4 eb 47 fe 48 c7 c7 20 c7 6e 8c 48 c7 c6 19 c3 6e 8c ba
[  176.999348][  T126] RSP: 0018:ffffc90002657c48 EFLAGS: 00010246
[  177.005439][  T126] RAX: 0000000000000037 RBX: ffff888022eba488 RCX: 2e64ec41a0162f00
[  177.013428][  T126] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000
[  177.021414][  T126] RBP: 1ffff110045d7491 R08: ffffc900026579c7 R09: 1ffff920004caf38
[  177.029401][  T126] R10: dffffc0000000000 R11: fffff520004caf39 R12: ffffc9000289a090
[  177.037387][  T126] R13: dffffc0000000000 R14: 0000000000000012 R15: 0000000000000000
[  177.045368][  T126] FS:  0000000000000000(0000) GS:ffff88812340b000(0000) knlGS:0000000000000000
[  177.054305][  T126] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.060897][  T126] CR2: 000055559552ca88 CR3: 0000000070140000 CR4: 00000000003526f0
[  177.068887][  T126] Call Trace:
[  177.072180][  T126]  <TASK>
[  177.075124][  T126]  ? _raw_spin_unlock_irq+0x23/0x50
[  177.080339][  T126]  jfs_lazycommit+0x59f/0xac0
[  177.085128][  T126]  ? __pfx_jfs_lazycommit+0x10/0x10
[  177.090362][  T126]  ? __pfx_default_wake_function+0x10/0x10
[  177.096270][  T126]  ? __kthread_parkme+0x71/0x1f0
[  177.101213][  T126]  ? __kthread_parkme+0x199/0x1f0
[  177.106243][  T126]  kthread+0x38b/0x480
[  177.110344][  T126]  ? __pfx_jfs_lazycommit+0x10/0x10
[  177.115579][  T126]  ? __pfx_kthread+0x10/0x10
[  177.120192][  T126]  ret_from_fork+0x514/0xb70
[  177.124968][  T126]  ? __pfx_ret_from_fork+0x10/0x10
[  177.130105][  T126]  ? __switch_to+0xc78/0x1410
[  177.134811][  T126]  ? __pfx_kthread+0x10/0x10
[  177.139407][  T126]  ret_from_fork_asm+0x1a/0x30
[  177.144181][  T126]  </TASK>
[  177.147198][  T126] Modules linked in:
[  177.152055][  T126] ---[ end trace 0000000000000000 ]---
[  177.166587][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.297892][ T7376] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  177.459896][  T126] RIP: 0010:txUnlock+0xd95/0xde0
[  177.459932][  T126] Code: a6 fd 90 0f 0b e8 fb eb 47 fe 48 c7 c7 20 c7 6e 8c 48 c7 c6 19 c3 6e 8c ba a5 03 00 00 48 c7 c1 20 d4 6e 8c e8 ac 99 a6 fd 90 <0f> 0b e8 d4 eb 47 fe 48 c7 c7 20 c7 6e 8c 48 c7 c6 19 c3 6e 8c ba
[  177.459946][  T126] RSP: 0018:ffffc90002657c48 EFLAGS: 00010246
[  177.459961][  T126] RAX: 0000000000000037 RBX: ffff888022eba488 RCX: 2e64ec41a0162f00
[  177.459973][  T126] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000
[  177.459984][  T126] RBP: 1ffff110045d7491 R08: ffffc900026579c7 R09: 1ffff920004caf38
[  177.459996][  T126] R10: dffffc0000000000 R11: fffff520004caf39 R12: ffffc9000289a090
[  177.460008][  T126] R13: dffffc0000000000 R14: 0000000000000012 R15: 0000000000000000
[  177.460018][  T126] FS:  0000000000000000(0000) GS:ffff88812340b000(0000) knlGS:0000000000000000
[  177.460031][  T126] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.460042][  T126] CR2: 00007f68cc3f4158 CR3: 000000001c7f4000 CR4: 00000000003526f0
[  177.460059][  T126] Kernel panic - not syncing: Fatal exception
[  177.560095][  T126] Kernel Offset: disabled
[  177.564454][  T126] Rebooting in 86400 seconds..