last executing test programs:

5.229471205s ago: executing program 3 (id=1425):
syz_mount_image$jfs(&(0x7f00000002c0), &(0x7f00000003c0)='./file0\x00', 0x4000, &(0x7f00000202c0)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9e, &(0x7f0000020bc0)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGxL8D2figG1OBhZ21ydwiMEkIX9KeqAkpE1Lahx7bZz4VO+ak1DZFNoSBalI7QW9aJpEaRSprUBVpKYSjZAaqb1rrhpxE7USF76AykFJ1VSBrd6Z53k8Mzs7sz6MPfM+n09k/7w77zvzzDvvzO53yXcWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLT+EzN/MlQURfmn9teaori4/PeqYmf54fy2C71CAAAA4Gy9V/v7by9Jn9i5jJ0atvmXa//tewsLCwvFF9898f6fLSykC9YVxcjKoqhdFv3rL36+0LhN8HwxPjTc8PFwl5sf6XL5aJfLx7pcvqLL5Su7XD7e5fJFB2CRVfWfx9Su7IbaP9fUD2lxWTFWu+yGNns9P7RyeDj+LKdmqLbPwti+4kBxsJgpphbtM1T7X1G8vr68rQeKeFvDDbe1tiiKkz99dk9cw1A4xjcUTTdW0/jYvXNfse7dnz675ztzb1/dbnY9DItWWhQbN5TrfKEoTv24qhgqVqZjEtc53LDOtW3WOdK0zqHafuW/W9d5cpnrjPd7PKzzRx3WuTZ87qnri6KYL5bcptXzxXCxuuVW0/Eer58R5XWUD+WHitHTOk/WL+M8Kfd56/rm86T1nIzHf304JqNLrKHx4XjnKysWHfczPU/Ke90P52p53Q+VNzo+3vij1aZztdzm2RuXPgfaPnZtzoF0LjecAxu6nQPDK0Zq58DwqTVvaDoHphftM1wM1W7rxI2dz4HJuUNHJ2effub2A4d275/ZP3N4emrbls1bt2zeunVy34GDM1P1v0/vkA6Q1cVwOgc3hNeaeA7e3LJt4ym58M1z9zwY75PnQXnfP3tTuaCLh4slzvFymxc2nv3zIH3db3gejDY8D9q+prZ5Howu43lQbnNy4/K+Zo42/Gm3hl69Fq5pOAcu5NfD8jYfvWXp18K1YV0v3nq6Xw9HFp0D8W4Nhede+Zn0/d74XeG4LD4vrikvuGhFcXx25tgdT+2emzs2XYRxXlza8Fi1ni+rG+5Tseh8GT7t82Xn3/zypmvafH5NOFbjt3V+rMpttkx0fqxqr+7tj2fTZzcVYZxj5/t4tvtqVh7PlCU6HM9ymxduP/vvBVMuaXj9G+v2+jcyNlp//RtJR2Os6fVv8UMzUltZUZy8fXmvf2Phz/l+/busT17/ymP16B2dz4FymxcnT/ccGO34+nd9mENhPbeExDDekPvfr10+Xz9NGx7LrufN6OhYOG9G4y02nzebF+1TXlt52xunzuy82Xh982PV9H1LBc+b8lj9+VTn86bc5o3ps3/tWBX/2fDasaLbOTA2sqJc71g6Ceqvdwur4jlwR7GnOFIcLPamfcpHubytiU3LOwdWhD/n+7Xjqj45B8pj9cqmzudAuc0PN5/b7502hs+kbRq+d2r9+cJSmf+a0VPX13rYznXmL9f5yS2dfzZUbvP2ltPNGZ2P023hMxe1OU6tz5+lzum9xfk5TleFdR7c2vlnU+U2l21b5vm0syiKN6ffrP28K/x89++P//v3mn7u2+5nym9Ov/ng5MM/Pp31AwBw5t6v/T2/ov69ZsN/sV7Of/8HAAAABkLM/cNhJvI/AAAAVEbM/SNhJvI/AAAAVEbM/aNhJpnk/8fv2v7qe88V6d0AF4J4eTwMD91T3y52vOfDx+sWTik///Fvj7361eeWd9vDRVH88sEPt93+8XviuuqOxnV+tPnzi1x13bJu/7FHTm3X+P4JJ7fXrz/en+WeBrGr/Prkptr1rnt6ujbfeLCozYfnX3y+fv31j+P2JzbXt//L8KYlO/cNNe2/MaznhjDXhfeUeWjnqeNQzrjfq2uv/edLP3fq9uJ+Qxs+WLubr/xB/Xrje0S9fGl9+3i/l1r/P33tu6+W2z91Y/v1Pzfcfv0nwvW+FeYvdtS3bzzmX21Y/x+F9cfbi/vd8a0ftF3/a1fWt38tnBffCLN1/ff96Ufea/d4xdvZeXd9v3j7U/+9pbZfvL54/a3rH39uuul4tF7/G+/Wr2fHEz8badw+fj7eTvTY3c3n91B4fJt65EVRfPePi6bjXHysvt8/tqw/Xt/Ru9uv/7aWdR4duq62/6n7s6bpfn39rze1vb9xPTv/bk3T/Xn5/nD83p38YXm9Jx4O52O4/H9/VL++1vcyfe3+5tebuP031tSft/H6JlvW/3LL+uevK49d9/U/8G59/a/du7Jp/Ts/Fc6nB+qz2/r3/9UlTft/8zv1x+PYkxOHj8weP7C34ag2Po9Xjq9afdHFH/jgJeG1tPXjXUfmHp85tm5q3VRRrBvAtwzs9fq/FeZ/1cf8ub+Fuh//rH7evfTp+tetm39e//jl8PnHwuMZvz5+/S/Gms7X1sd9/t76PNv13xrWsVxXfu0/r1vWhie+8Prxf/jDt1u/L4j35+jl47X798r6K2qXDb1Rv7z19aqb/7i8+Xn9k9Gp2vx+OK4L4Z2ZN1xRv73W64/vTfLSZ+rP3/idXNy/aHk/kTUjzffjbNf/k/B9zA+uan79i+fH959reTfnNcVQuYT58PpQzNcvj1vF4/3SySva3l58H55i/urTWeaSZp+enTx44PDxpybnZmbnJmeffmbXoSPHD8/tqr136a4vddv/1PN7de35vXdm25ai9mw/Uh89dqHXf/SRPXvvnLpp78y+3cf3zT1ydObY/j2zs3tm9s7etHvfvpknu+1/YO+O6U3bN9+5aWL/gb077tq+ffP2iQOHj5TLqC+qi21TX544fGxXbZfZHVu2T2/dumVq4tCRvTM77pyamjjebf/a16aJcu8nJo7NHNw9d+DQzMTsgWdmdkxv37ZtU9d3fzx0dN/susljxw9PHp+dOTZZvy/r5mqfLr/2ddufPMweCa93LYbCd+efv21ben/c0re/suRV1Tdp/va0eCe8F1T8+tbt45j7x8JMMsn/AAAAkIOY+8Mb/5+6QP4HAACAyoi5f2WYifwPAAAAlRFz/3iYSSb5P6P+/6rGD/T/6/T/9f8L/X/9/x7T/9f/70T/X/9/kNev/6//T3f91v+PuX9VUWSZ/wEAACAHMfevDjOR/wEAAKAyYu6/KMxE/gcAAIDKiLn/4jCTPPL/WOs/K9z/b6L/X6f/363/H7fV/y/0//X/z5D+v/5/J/r/+v+DvP4+7P+v0v+n3/Rb/z/m/g+EmeSR/wEAACALMfd/MMxE/gcAAIDKiLn/kjAT+R8AAAAqI+b+NWEmmeT/jH7/fxP9/zr9f7//v9D/1/8/95oOsf6//n8n+v/6/4O8/j7s//v9//Sdfuv/x9z//8JMMsn/AAAAkIOY+z8UZiL/AwAAQGXE3H9pmIn8DwAAAJURc/9lYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9E/1//f5DXr/+v/093/db/j7n/8jCTTPI/AAAA5CDm/ivCTOR/AAAAqIyY+68MM5H/AQAAoDJi7r8qzCST/K//r/+v/6//r/+v/99L+v/6/53o/+v/D/L69f/1/+mu3/r/MfdfHWaSSf4HAACAHMTcf02YifwPAAAAlRFz/4fDTOR/AAAAqIyY+9eGmWSS//X/9f/1//X/9f/1/3tpsPr/w0teov9fp//fTP9f/1//X/+fzvqt/x9z/0fCTDLJ/wAAAJCDmPuvDTOR/wEAAKAyYu6/LsxE/gcAAIDKiLl/XZhJJvlf/1//X/9f/1//X/+/lwar/780/f86/f9m+v/6//r/+v901m/9/5j714eZZJL/AQAAIAcx928IM5H/AQAAoDJi7r8+zET+BwAAgMqIuf+GMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1/9fXv9/RbcrotL6rf8fc/+NYSaZ5H8AAADIQcz9N4WZyP8AAABQGTH33xxmIv8DAABAZcTcvzHMJJP8r/+v/6//r/+v/6//30v6/4v6/2/9T6H/H+n/6/8P8vr1//3+f7rrt/5/zP23hJlkkv8BAAAgBzH33xpmIv8DAABAZcTcf1uYifwPAAAAlRFz/0SYSSb5X/9f/1//X/9f/1//v5eq2v9Pr6N+/7/+v/6//r/+v/4/S+q3/n/M/beHmWSS/wEAACAHMfffEWYi/wMAAEBlxNw/GWYi/wMAAEBlxNw/FWaSSf7X/9f/1//v7/7/eJvzTf9f/3+QVLX/fxa//1//v4H+v/7/IK9f/1//n+76rf8fc/90mEkm+R8AAAByEHP/pjAT+R8AAAAqI+b+zWEm8j8AAABURsz9W8JMMsn/+v/6//r//d3/9/v/9f/1/zvT/9f/L/T/z9iF7s8P+vr1//X/aTbc5nP91v+PuX9rmEkm+R8AAAByEHP/tjAT+R8AAAAGS+v/ubRBzP13hpnI/wAAAFAZMfffFWaSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7t4eZZJL/AQAAIAcx9380zET+BwAAgMqIuf/uMBP5HwAAAAZKu99DGMXc/7Ewk0zyv/5/1fv/Cyv1//X/9f87r1//v7f0//X/O9H/1/8f5PXr/+v/012/9f9j7t8RZpJJ/gcAAIAcxNx/T5iJ/A8AAACVEXP/vWEm8j8AAABURsz9O8NMMsn/+v9V7//7/f/6//r/3dav/99b+v/6/53o/w9m/z9826L/f376/+NL7d/Y/y/PIf1/+lG/9f9j7r8vzCST/A8AAAA5iLn/42Em8j8AAABURsz9nwgzkf8BAACgMmLu/2SYSSb5X/9f/1//X/9f/1//v5f0//X/O9H/H8z+f6T/7/f/6//TTb/1/2Puvz/MJJP8DwAAADmIuf9TYSbyPwAAAFRGzP3/P8xE/gcAAIDKiLn/gTCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fc/ythJpnkfwAAAMhBzP0PhpnI/wAAAFAZMfd/OsxE/gcAAIDKiLn/V8NMMsn/+v/np/8/nK5f/1//X/9f/1///1zS/9f/L/T/z9iF7s8P+vr1//X/6a7f+v8x9/9amEkm+R8AAAByEHP/r4eZyP8AAABQGTH3/0aYifwPAAAAlRFz/0NhJpnkf/1/v/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9Ndv/X/Y+7/zTCTTPI/AAAA5CDm/ofDTOR/AAAAqIyY+z8TZiL/AwAAQGXE3P/ZMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9z/SJhJJvkfAAAAchBz/+fCTOR/AAAAqIyY+38rzET+BwAAgMqIuf+3w0wyyf/6//r/+v/6//r/+v+9pP+/uP9fvoZdyP7/iuVsqP+/LPr/+v/6//r/dNZv/f+Y+z8fZpJJ/gcAAIAcxNz/O2Em8j8AAABURsz9vxtmIv8DAABAZcTc/2iYSSb5X/9f/1//X/9f/1//v5f0//3+/070//X/B3n9+v/6/3TXb/3/mPu/EGaSSf4HAACAHMTc/3thJvI/AAAAVEbM/bvCTOR/AAAAqIyY+x8LM8kk/+v/6//r/+v/6//r//eS/r/+fyf6//r/g7x+/X/9f7rrt/5/zP27w0wyyf8AAACQg5j7vxhmIv8DAABAZcTcvyfMRP4HAACAyoi5f2+YSSb5X/9f/1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7p8JM8kk/wMAAEAOYu7fF2Yi/wMAAEBlxNy/P8xE/gcAAIDKiLn/8TCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fcfyDMJJP8DwAAADmIuf9LYSbyPwAAAFRGzP1fDjOR/wEAAKAyYu4/GGaSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7D4WZZJL/AQAAIAcx9x8OM5H/AQAAoDJi7j8SZiL/AwAAQGXE3H80zCST/K//r/+v/6//r/+v/99L+v/6/53o/+v/D/L69f/1/+mu3/r/Mff/fphJJvkfAAAAchBz/7EwE/kfAAAAKiPm/tkwE/kfAAAAKiPm/rkwk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOvX/9f/p7t+6//H3H88zCST/A8AAAA5iLn/iTAT+R8AAAAqI+b+J8NM5H8AAAD4P/buM9eus4rj8AnGgIQQY2EEDIEx8Ikp0HsLvfcSeu+919B7771DIPQqBcFda124iff2Pfbxefe7nufLErZlXrBA+cv6aU8jd/+945Ym+1//r//X/5/2/zfc6+THj9T/n3R++n/9v/7/XPT/+v+d/n9vx+7nt/5+/b/+n3Wj9f+5++8TtzTZ/wAAANBB7v77xi32PwAAAEwjd//94hb7HwAAAKaRu//+cUuT/a//1//r/33/X/+v/z8k/b/+f4n+X/+/5ffr//X/rBut/8/d/4C4pcn+BwAAgA5y9z8wbrH/AQAAYBq5+x8Ut9j/AAAAMI3c/Q+OW5rsf/2//l//r//X/+v/D0n/r/9fov/X/2/5/fp//T/rRuv/c/c/JG5psv8BAACgg9z9D41b7H8AAACYRu7+h8Ut9j8AAABMI3f/w+OWJvtf/6//1//r//X/+v9D0v/r/5fo//X/W36//l//z7rR+v/c/Y+IW5rsfwAAAOggd/8j4xb7HwAAAKaRu/9RcYv9DwAAANPI3f/ouKXJ/tf/6//1//p//b/+/5D0//r/Jfp//f+W36//1/+z7uD9/z2u/++93P4/d//1cUuT/Q8AAAAd5O5/TNxi/wMAAMA0cvc/Nm6x/wEAAGAaufsfF7c02f/6f/3/af9/y3X6f/2//v/0x/X/V4f+X/+/RP8/av9/ef9N6P/1//p/1hy8/1/p/c/+69z9j49bmux/AAAA6CB3/xPiFvsfAAAAppG7/4lxi/0PAAAA08jd/6S4pcn+1//r/33//8bKz/X/+n/9/9Wn/9f/L9H/j9r/+/7/lfb/d7+M95/2///553D9P3Marf/P3f/kuKXJ/gcAAIAOcvc/JW6x/wEAAGAaufufGrfY/wAAADCN3P1Pi1ua7H/9v/5f/+/7//p//f8h6f/1/0v0//r/Lb/f9//1/6wbrf/P3f/0uKXJ/gcAAIAOcvc/I26x/wEAAGAaufufGbfY/wAAADCN3P3Pilua7H/9v/5f/6//v6L+/4L+X/+/TP+v/1+i/9f/b/n9+n/9P+tG6/9z9z87bmmy/wEAAKCD3P3PiVvsfwAAAJhG7v7nxi32PwAAAEwjd//z4pYm+1//r//X/+v/ff9f/39I+v/p+v/r9P+n9P/6f/2//p9lo/X/ufufH7c02f8AAADQQe7+F8Qt9j8AAABMI3f/C+MW+x8AAACmkbv/hrilyf7X/+v/9f/6f/2//v+Q9P/T9f++//8/9P/6f/2//p9lo/X/uftfFLesDb+LKz8PAAAADCN3/4vjliZ//w8AAAAd5O5/Sdxi/wMAAMA0cve/NG5psv/1//p//b/+X/+v/z8k/b/+f4n+/7b7/ztd4t9P/z/W+/X/+n/Wjdb/5+5/WdzSZP8DAABAB7n7Xx632P8AAAAwjdz9r4hb7H8AAACYRu7+V8YtTfb/pfr/m+988vPn7P9vr//X/+v/9f9J/6//3+n/9f8r9P++/7/l9+v/9f+sG63/z93/qrilyf4HAACADnL3vzpusf8BAABgGrn7XxO32P8AAAAwjdz9r41bmux/3//X/+v/9f/6f/3/Ien/9f9L9P/6/y2/X/+v/2fdaP1/7v7XxS1N9j8AAAB0kLv/9XGL/Q8AAADTyN3/hrjF/gcAAIBp5O5/Y9zSZP/r//X/R+//b6f/T/r/+HPV/+v/z0H/r//f6f/3dux+fuvv1//r/1k3Wv+fu/9NcUuT/Q8AAAAd5O5/c9xi/wMAAMA0cve/JW6x/wEAAGAaufvfGrc02f/6f/3/0ft/3/8v+v/4c9X/6//PQf+v/9/p//d27H5+6+/X/+v/WTda/5+7/21xS5P9DwAAAB3k7n973GL/AwAAwDRy978jbrH/AQAAYBq5+98ZtzTZ//p//b/+X/+v/9f/H5L+X/+/RP+v/9/y+/X/+n/Wjdb/5+5/V9zSZP8DAABAB7n73x232P8AAAAwjdz974lb7H8AAACYRu7+98YtTfa//n/r/f89b4oX6P/1//p//f+Q9P/6/yX6f/3/lt+v/9f/s260/j93//vilib7HwAAADrI3f/+uMX+BwAAgGnk7v9A3GL/AwAAwDRy938wbmmy/3v0/xdv9cvm6f99/1//r//X/49N/6//X6L/1/9v+f36f/0/60br/3P3fyhuabL/AQAAoIPc/R+OW+x/AAAAmEbu/o/ELfY/AAAATCN3/0fjlib7v0f/f2sN+v/8j3Vt+/9b7qr/1/8X/b/+f6f/1/+v0P/r/7f8fv2//p91o/X/uftvjFua7H8AAADoIHf/x+IW+x8AAACmkbv/43GL/Q8AAADTyN3/ibjhbnc53pOuKf3/tP2/7//r//X/+v8h6P/1/0v0//r/Lb9f/6//Z91o/X/u/k/GLf7+HwAAAKaRu/9TcYv9DwAAANPI3f/puMX+BwAAgGnk7v9M3NJk/+v/9f/6f/3/dP1//O9J/z8G/b/+f4n+X/+/5ffr//X/rBut/8/d/9m4pcn+BwAAgA5y938ubrH/AQAAYBq5+z8ft9j/AAAAMI3c/V+IW5rsf/2//l//f9X6/4tnf3/9v+//6//1//r/Zfp//f+W36//1/+zbrT+P3f/F+OWJvsfAAAAOsjd/6W4xf4HAACAaeTu/3LcYv8DAADANHL3fyVuabL/9f/6f/2/7//r//X/h6T/1/8v0f/r/7f8fv2//p91o/X/ufu/Grc02f8AAADQQe7+r8Ut9j8AAABMI3f/1+MW+x8AAACmkbv/G3FLk/0/c/+/9Mv0/yf0//r/nf5f/39g+n/9/xL9v/5/y+/X/+v/WTda/5+7/5txS5P9DwAAAB3k7v9W3GL/AwAAwDRy9387brH/AQAAYBq5+78TtzTZ/zP3/0v0/yf0//r/nf5f/39g+n/9/xL9v/5/y+/X/+v/WTda/5+7/7txS5P9DwAAAB3k7v9e3GL/AwAAwDRy938/brH/AQAAYBq5+38QtzTZ//p//b/+X/+v/9f/H5L+X/+/RP+v/9/y+/X/+n/Wjdb/5+7/YdzSZP8DAABAB7n7fxS32P8AAAAwjdz9P45b7H8AAACYRu7+n8QtTfa//l//r/8fqv+/w9nfR/+v/9f/L9P/6/93+v+9Hbuf3/r79f/6f9aN1v/n7v9p3NJk/wMAAEAHuft/FrfY/wAAADCN3P0/j1vsfwAAAJhG7v5fxC1N9r/+X/+v/9+7/7+w8/3//3uP/l//f1v0//r/Jfp//f+W36//1/+zbrT+P3f/L+OWJvsfAAAAOsjd/6u4xf4HAACAaeTu/3XcYv8DAADANHL3/yZuabL/9f/6f/3/UN//1//r//X/56T/1//v9P97O3Y/v/X36//1/6wbrf/P3X9T3NJk/wMAAEAHuft/G7fY/wAAADCN3P2/i1vsfwAAAJhG7v6b45Ym+1//r/+fsv+/o/5f/6//H4X+X/+/RP+v/9/y+/X/+n/Wjdb/5+7/fdzSZP8DAABAB7n7/xC32P8AAAAwjdz9f4xb7H8AAACYRu7+P8UtTfa//l//P2X/7/v/+v+t9f8XTv8PWP9/Pvp//f9O/7+3Y/fzW3+//l//z7rR+v/c/X+OW5rsfwAAAOggd/9f4hb7HwAAAKaRu/+vcYv9DwAAANPI3f+3uKXJ/u/S/5/NSPT/J/T/+v+d/n+M/r/R9//P/nlfKf2//n+n/9/bsfv5rb9f/6//Z91o/X/u/r/HLU32PwAAAHSQu/8fcYv9DwAAANPI3f/PuMX+BwAAgGnk7v9X3NJk/3fp/8/S/5/Q/+v/d/p//f+B+f6//n+J/l//v+X36//1/6wbrf/P3f/vAAAA//+KYySt")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002640)='./bus\x00', 0x4d)
rename(&(0x7f0000002680)='./bus\x00', &(0x7f00000026c0)='./file0\x00')

3.591017961s ago: executing program 2 (id=1437):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/vendor\x00', 0x0, 0x0)
read(r0, &(0x7f00000001c0)=""/32, 0x20)

3.546983268s ago: executing program 3 (id=1438):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)

3.305388574s ago: executing program 2 (id=1441):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
syz_emit_ethernet(0xfded, &(0x7f0000000580)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888}]}}, {"589bd78d2b71fe4b714665685135bf21072faafe96ec294d6c6539d4a740dea160dc1ee679706182018004878d22ec3cb6480fb088206fd0f5ffbd92e72bad8d1bcb2b9b613a84ad03c81acb638d608181625bd00c12cfe1514eebec0d2d3cdadca2e3c308e8595d5269701e0491674a51e87405fd955e7e46116c8b97da1fc719a824a9fc394b98445011cdecca5b715a3eeb84bd168efd80ab8dd7a308"}}}}}}, 0x0)

3.036300875s ago: executing program 2 (id=1444):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00')
fcntl$notify(r0, 0x402, 0x11)
exit(0x100000000000035)
getdents64(r0, 0x0, 0x0)

2.757099194s ago: executing program 3 (id=1446):
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, <r0=>0x0}, 0x8)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440)=r0, 0x4)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8)
read(r2, &(0x7f00000004c0)=""/185, 0xb9)

2.600882732s ago: executing program 3 (id=1449):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r0 = syz_create_resource$binfmt(&(0x7f0000000600)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
truncate(&(0x7f0000000800)='./file0\x00', 0x8fff5)

2.41771918s ago: executing program 3 (id=1452):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000100)={[{@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x402)

1.977480666s ago: executing program 2 (id=1456):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000005c0)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000840)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000027c0)="d8000000100081044e81f782db44b904021d006a0f000000dafe55a1290015000600142603600e120900040004ed0000a80016470a000a40020000000006ffc3b94dcf5c0461c1d67f6f94007134cf6ee08000a0e6475acc136f33cdd3f154bed8ef52a98516277ce06bbace802e8bec4c2ee5a7cef4090000001fb7914df9255ece1b019d9514d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040e3d95667e006dcdf63951f215ce3bb9ad809d5e1cace81508ff60d7fed0bffece0b42a9ecbee90421a91", 0xd8}], 0x1}, 0x60010)

1.896529619s ago: executing program 0 (id=1457):
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0)
close(r0)

1.728629466s ago: executing program 2 (id=1460):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000007000/0x3000)=nil)

1.607221622s ago: executing program 0 (id=1462):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x80, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "05d77196b311112fc19187f7a6bc60145a141eb3ff8f2a1764a4d23ce8ded162538362d9dcd8c84c8a10fdee225a6423222cbdfe89e4b482f762285d6c065bb47e"}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000805}, 0x0)

1.578674646s ago: executing program 2 (id=1463):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001640)={0x44, &(0x7f0000001380)=ANY=[@ANYBLOB='@\vH'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.401380408s ago: executing program 1 (id=1465):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0)
write(r0, &(0x7f0000000120)='0-CONFIG=disabled\n', 0x12)

1.356972583s ago: executing program 0 (id=1466):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040), 0x6ea3a203febe6f1d}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')

1.31736693s ago: executing program 4 (id=1467):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_open(&(0x7f0000000740)=']]\x00', 0x40, 0x95, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x1, 0xfffffffffffffff7, 0x1, 0x1, 0x5, 0x7ffffffffffbffff, 0x10000, 0x2}, 0x0, &(0x7f0000000240)={0x8, 0x5, 0x2, 0x311ba34d, 0x8, 0x300000000, 0x8, 0xf6c7}, &(0x7f0000000280), 0x0)

1.197030976s ago: executing program 1 (id=1468):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480), 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffff52c2e8839882fa5e5b708fc336ffff000000000000001485000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRES32=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38)

1.164630697s ago: executing program 3 (id=1469):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x48980, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000580)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x33)

1.11026137s ago: executing program 0 (id=1470):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x1615, 0x4)

1.057989687s ago: executing program 4 (id=1471):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xffff, 0xf}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "e711f592e2765d06afabc373f952ed23"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

860.710322ms ago: executing program 1 (id=1472):
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0xf18, &(0x7f0000000980)={0x0, 0xfefffffe, 0x800, 0x3, 0x800000c5}, &(0x7f0000000a00)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000a80)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000ac0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)

756.75339ms ago: executing program 4 (id=1473):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="32000300070000000000000000", 0xd)
close_range(r0, r0, 0x0)

654.852037ms ago: executing program 0 (id=1474):
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000005c0)={0xa, {0x9, 0x5, 0x4}}, 0xa)

638.132483ms ago: executing program 1 (id=1475):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x1, 0x0)
write(r0, &(0x7f0000000540)='1', 0x1)

451.337593ms ago: executing program 4 (id=1476):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
umount2(&(0x7f0000000680)='./file0\x00', 0x1)

429.681854ms ago: executing program 0 (id=1477):
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_usbip_server_init(0x4)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0)
write$usbip_server(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="000000030000000100000001000000040000"], 0x60)

408.932278ms ago: executing program 1 (id=1478):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000000e40)="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", 0x2000, &(0x7f000000cf80)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)={0x28, 0xfffffffffffffffe, 0x3, {{0x10001, 0x5, 0x1}}}, 0x0, 0x0, &(0x7f0000003100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

200.327618ms ago: executing program 4 (id=1479):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./gadget\x00', &(0x7f0000000340)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r0, &(0x7f0000000200)="0000000009020900010100803212010002000000402505a0a4000100000001d2", 0x20)

145.649172ms ago: executing program 1 (id=1480):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
fsopen(0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000cc0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0xfe, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

0s ago: executing program 4 (id=1481):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x9, 0x8000000000000, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0x5, 0xc}, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

0000-000000000000 r/w without journal. Quota mode: none.
[  141.620983][ T7563] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.660774][   T33] audit: type=1800 audit(1793724068.373:22): pid=7563 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.634" name="file1" dev="loop3" ino=15 res=0 errno=-22
[  141.788577][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  142.007426][ T7582] loop4: detected capacity change from 0 to 512
[  142.091782][ T7584] cpuidle: using governor haltpoll
[  142.351216][ T7595] loop4: detected capacity change from 0 to 128
[  142.381602][ T2256] hid-generic 0003:0001:0001.0004: hidraw0: USB HID v0.01 Mouse [syz1] on syz0
[  142.397381][ T7598] loop3: detected capacity change from 0 to 256
[  142.453566][ T7599] profile_transition: unconfined exec no attachment
[  142.497967][ T7601] loop2: detected capacity change from 0 to 512
[  142.502141][ T7601] EXT4-fs: Ignoring removed oldalloc option
[  142.510522][ T7601] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  142.510541][ T7601] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  142.571071][ T7601] EXT4-fs (loop2): 1 truncate cleaned up
[  142.603659][ T7601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.685730][ T7601] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 2. Delete some EAs or run e2fsck.
[  142.718060][ T7599] fido_id[7599]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  142.847560][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.493822][ T1226] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  143.649910][ T1226] usb 2-1: not running at top speed; connect to a high speed hub
[  143.649946][ T1226] usb 2-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00
[  143.671308][ T1226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.671334][ T1226] usb 2-1: Product: syz
[  143.671348][ T1226] usb 2-1: Manufacturer: syz
[  143.671362][ T1226] usb 2-1: SerialNumber: syz
[  143.695930][ T1226] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected
[  143.747792][ T1226] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  143.767978][ T1226] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  143.796581][ T1226] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  143.831832][ T1226] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  143.851324][ T7617] JBD2: Ignoring recovery information on journal
[  144.009797][ T7640] tipc: Started in network mode
[  144.009820][ T7640] tipc: Node identity 1000001, cluster identity 4369
[  144.009833][ T7640] tipc: Node number set to 16777217
[  144.011164][ T7640] tipc: Cannot configure node identity twice
[  144.012325][ T7617] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  144.031170][ T7640] tipc: Enabled bearer <ib:wg0>, priority 10
[  144.151536][    C1] usb 2-1: malformed indat packet
[  144.151811][    C1] usb 2-1: malformed indat packet
[  144.152060][    C1] usb 2-1: malformed indat packet
[  144.152313][    C1] usb 2-1: malformed indat packet
[  144.152562][    C1] usb 2-1: malformed indat packet
[  144.152805][    C1] usb 2-1: malformed indat packet
[  144.153051][    C1] usb 2-1: malformed indat packet
[  144.153308][    C1] usb 2-1: malformed indat packet
[  144.165518][ T7632] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.663 (7632)
[  144.247969][ T7632] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.248003][ T7632] BTRFS info (device loop3): using sha256 checksum algorithm
[  144.459548][ T5634] ocfs2: Unmounting device (7,2) on (node local)
[  144.460429][ T7632] BTRFS info (device loop3): enabling ssd optimizations
[  144.460452][ T7632] BTRFS info (device loop3): turning on async discard
[  144.460468][ T7632] BTRFS info (device loop3): enabling free space tree
[  144.460485][ T7632] BTRFS info (device loop3): use zlib compression, level 3
[  144.684233][ T1226] usb 2-1: USB disconnect, device number 5
[  144.725695][ T1226] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  144.732784][ T7666] profile_transition: unconfined exec no attachment
[  144.746803][ T1226] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  144.778550][ T1226] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  144.789986][ T5635] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.821336][ T1226] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  144.845849][ T1226] keyspan 2-1:1.0: device disconnected
[  144.994881][ T7675] set_capacity_and_notify: 2 callbacks suppressed
[  144.994940][ T7675] loop2: detected capacity change from 0 to 2048
[  145.039095][ T7675] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  145.068229][ T7675] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.150836][ T2256] kernel write not supported for file /snd/seq (pid: 2256 comm: kworker/0:3)
[  145.166028][   T33] audit: type=1800 audit(1793724071.883:23): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.2.677" name="file1" dev="loop2" ino=1367 res=0 errno=-22
[  145.513588][ T7691] profile_transition: unconfined exec no attachment
[  146.042017][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.691'.
[  146.449651][ T7702] loop0: detected capacity change from 0 to 40427
[  146.481609][ T7702] F2FS-fs (loop0): invalid crc value
[  146.655632][ T7721] Bluetooth: MGMT ver 1.23
[  146.699166][ T7702] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  146.730193][ T7702] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[  146.730223][ T7702] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  146.730568][ T7702] F2FS-fs (loop0): Start checkpoint disabled!
[  146.799995][ T7702] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[  146.814628][ T7702] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  147.051706][ T7702] syz.0.687: attempt to access beyond end of device
[  147.051706][ T7702] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  147.158380][ T7747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.706'.
[  147.265265][   T53] kworker/u8:3: attempt to access beyond end of device
[  147.265265][   T53] loop0: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[  147.289644][   T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  147.289679][   T53] Tainted: [L]=SOFTLOCKUP
[  147.289686][   T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  147.289698][   T53] Workqueue: writeback wb_workfn (flush-7:0)
[  147.289729][   T53] Call Trace:
[  147.289737][   T53]  <TASK>
[  147.289745][   T53]  dump_stack_lvl+0xe8/0x150
[  147.289777][   T53]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  147.289811][   T53]  f2fs_write_end_bio+0x118e/0x15d0
[  147.289856][   T53]  __submit_merged_bio+0x258/0x6a0
[  147.289877][   T53]  ? rcu_is_watching+0x16/0xb0
[  147.289910][   T53]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  147.289935][   T53]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  147.289981][   T53]  f2fs_write_data_pages+0x2a13/0x36e0
[  147.290042][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.290084][   T53]  ? stack_trace_save+0xa9/0x100
[  147.290161][   T53]  ? __lock_acquire+0x747/0x2de0
[  147.290208][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.290231][   T53]  do_writepages+0x338/0x560
[  147.290261][   T53]  ? reacquire_held_locks+0x117/0x1a0
[  147.290288][   T53]  ? writeback_sb_inodes+0x450/0x1af0
[  147.290320][   T53]  __writeback_single_inode+0x136/0x1220
[  147.290349][   T53]  ? do_raw_spin_unlock+0xf5/0x200
[  147.290375][   T53]  writeback_sb_inodes+0x9de/0x1af0
[  147.290399][   T53]  ? __lock_acquire+0x747/0x2de0
[  147.290440][   T53]  ? lock_acquire+0x115/0x350
[  147.290471][   T53]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  147.290551][   T53]  ? rcu_is_watching+0x16/0xb0
[  147.290580][   T53]  ? queue_io+0x2d3/0x470
[  147.290607][   T53]  wb_writeback+0x41c/0xad0
[  147.290634][   T53]  ? queue_io+0x241/0x470
[  147.290664][   T53]  ? __pfx_wb_writeback+0x10/0x10
[  147.290686][   T53]  ? do_raw_spin_lock+0x12b/0x2f0
[  147.290725][   T53]  wb_workfn+0x431/0x10f0
[  147.290767][   T53]  ? __pfx_wb_workfn+0x10/0x10
[  147.290794][   T53]  ? trace_hrtimer_start+0x82/0x200
[  147.290824][   T53]  ? do_raw_spin_lock+0x12b/0x2f0
[  147.290855][   T53]  ? lock_acquire+0x115/0x350
[  147.290890][   T53]  ? rcu_is_watching+0x16/0xb0
[  147.290920][   T53]  ? process_scheduled_works+0x97a/0x1630
[  147.290951][   T53]  process_scheduled_works+0xc3d/0x1630
[  147.291015][   T53]  ? __pfx_process_scheduled_works+0x10/0x10
[  147.291051][   T53]  ? assign_work+0x3cf/0x5d0
[  147.291085][   T53]  worker_thread+0xa47/0xfb0
[  147.291121][   T53]  ? __kthread_parkme+0x71/0x1f0
[  147.291152][   T53]  kthread+0x38b/0x480
[  147.291176][   T53]  ? __pfx_worker_thread+0x10/0x10
[  147.291193][   T53]  ? __pfx_kthread+0x10/0x10
[  147.291217][   T53]  ret_from_fork+0x514/0xb70
[  147.291244][   T53]  ? __pfx_ret_from_fork+0x10/0x10
[  147.291266][   T53]  ? __switch_to+0xc78/0x1410
[  147.291289][   T53]  ? __pfx_kthread+0x10/0x10
[  147.291313][   T53]  ret_from_fork_asm+0x1a/0x30
[  147.291354][   T53]  </TASK>
[  147.302721][   T53] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  147.302842][   T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  147.302867][   T53] Tainted: [L]=SOFTLOCKUP
[  147.302874][   T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  147.302887][   T53] Workqueue: writeback wb_workfn (flush-7:0)
[  147.302917][   T53] Call Trace:
[  147.302924][   T53]  <TASK>
[  147.302932][   T53]  dump_stack_lvl+0xe8/0x150
[  147.302963][   T53]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  147.302990][   T53]  f2fs_write_end_bio+0x118e/0x15d0
[  147.303032][   T53]  __submit_merged_bio+0x258/0x6a0
[  147.303049][   T53]  ? rcu_is_watching+0x16/0xb0
[  147.303079][   T53]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  147.303099][   T53]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  147.303141][   T53]  f2fs_write_data_pages+0x2a13/0x36e0
[  147.303198][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.303235][   T53]  ? stack_trace_save+0xa9/0x100
[  147.303312][   T53]  ? __lock_acquire+0x747/0x2de0
[  147.303360][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.303386][   T53]  do_writepages+0x338/0x560
[  147.303416][   T53]  ? reacquire_held_locks+0x117/0x1a0
[  147.303442][   T53]  ? writeback_sb_inodes+0x450/0x1af0
[  147.303474][   T53]  __writeback_single_inode+0x136/0x1220
[  147.303502][   T53]  ? do_raw_spin_unlock+0xf5/0x200
[  147.303535][   T53]  writeback_sb_inodes+0x9de/0x1af0
[  147.303558][   T53]  ? __lock_acquire+0x747/0x2de0
[  147.303598][   T53]  ? lock_acquire+0x115/0x350
[  147.303626][   T53]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  147.303695][   T53]  ? rcu_is_watching+0x16/0xb0
[  147.303724][   T53]  ? queue_io+0x2d3/0x470
[  147.303751][   T53]  wb_writeback+0x41c/0xad0
[  147.303776][   T53]  ? queue_io+0x241/0x470
[  147.303804][   T53]  ? __pfx_wb_writeback+0x10/0x10
[  147.303825][   T53]  ? do_raw_spin_lock+0x12b/0x2f0
[  147.303862][   T53]  wb_workfn+0x431/0x10f0
[  147.303902][   T53]  ? __pfx_wb_workfn+0x10/0x10
[  147.303927][   T53]  ? trace_hrtimer_start+0x82/0x200
[  147.303953][   T53]  ? do_raw_spin_lock+0x12b/0x2f0
[  147.303978][   T53]  ? lock_acquire+0x115/0x350
[  147.304011][   T53]  ? rcu_is_watching+0x16/0xb0
[  147.304040][   T53]  ? process_scheduled_works+0x97a/0x1630
[  147.304068][   T53]  process_scheduled_works+0xc3d/0x1630
[  147.304125][   T53]  ? __pfx_process_scheduled_works+0x10/0x10
[  147.304159][   T53]  ? assign_work+0x3cf/0x5d0
[  147.304192][   T53]  worker_thread+0xa47/0xfb0
[  147.304225][   T53]  ? __kthread_parkme+0x71/0x1f0
[  147.304255][   T53]  kthread+0x38b/0x480
[  147.304277][   T53]  ? __pfx_worker_thread+0x10/0x10
[  147.304292][   T53]  ? __pfx_kthread+0x10/0x10
[  147.304315][   T53]  ret_from_fork+0x514/0xb70
[  147.304341][   T53]  ? __pfx_ret_from_fork+0x10/0x10
[  147.304362][   T53]  ? __switch_to+0xc78/0x1410
[  147.304384][   T53]  ? __pfx_kthread+0x10/0x10
[  147.304407][   T53]  ret_from_fork_asm+0x1a/0x30
[  147.304445][   T53]  </TASK>
[  147.312814][   T53] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  147.327014][ T2256] loop0: lost filesystem error report for type 5 error -108
[  148.086203][ T7771] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  148.656804][ T7791] loop4: detected capacity change from 0 to 8192
[  149.777579][ T7805] sd 0:0:1:0: PR command failed: 1026
[  149.777642][ T7805] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  149.777684][ T7805] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  149.874496][ T7808] profile_transition: unconfined exec no attachment
[  150.376005][ T7812] netlink: 2 bytes leftover after parsing attributes in process `syz.4.736'.
[  150.411938][   T55] block nbd2: Receive control failed (result -32)
[  151.257061][ T7841] IPv6: NLM_F_CREATE should be specified when creating new route
[  151.257460][ T7841] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  151.257473][ T7841] IPv6: NLM_F_CREATE should be set when creating new route
[  151.257573][ T7841] IPv6: NLM_F_CREATE should be set when creating new route
[  151.257597][ T7841] IPv6: NLM_F_CREATE should be set when creating new route
[  151.262284][ T7841] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.747'.
[  151.581315][ T7831] loop3: detected capacity change from 0 to 32768
[  151.590838][ T7831] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.744 (7831)
[  151.628866][ T7831] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  151.628892][ T7831] BTRFS info (device loop3): using crc32c checksum algorithm
[  151.759981][ T7831] BTRFS info (device loop3): setting nodatasum
[  151.760007][ T7831] BTRFS info (device loop3): setting nodatacow
[  151.760023][ T7831] BTRFS info (device loop3): turning on async discard
[  151.760039][ T7831] BTRFS info (device loop3): enabling free space tree
[  151.760054][ T7831] BTRFS info (device loop3): enabling auto defrag
[  151.760070][ T7831] BTRFS info (device loop3): max_inline set to 0
[  151.845327][ T7871] loop4: detected capacity change from 0 to 64
[  151.975666][ T7875] profile_transition: unconfined exec no attachment
[  152.259916][ T5635] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  152.283142][ T7883] loop1: detected capacity change from 0 to 64
[  152.322846][ T7886] profile_transition: unconfined exec no attachment
[  152.624748][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.729453][ T7894] loop1: detected capacity change from 0 to 4096
[  152.751226][ T7894] ntfs3(loop1): ino=0, mi_enum_attr
[  152.824094][ T7897] loop0: detected capacity change from 0 to 512
[  152.828446][ T7897] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  152.828464][ T7897] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  152.889795][ T7897] EXT4-fs (loop0): 1 truncate cleaned up
[  152.893052][ T7897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.914191][ T7894] ntfs3(loop1): ino=0, mi_enum_attr
[  152.914223][ T7894] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  152.934982][ T7894] ntfs3(loop1): ino=0, mi_enum_attr
[  153.041743][ T7901] xt_hashlimit: size too large, truncated to 1048576
[  153.080347][ T7903] profile_transition: unconfined exec no attachment
[  153.088160][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.135760][ T7902] xt_connbytes: Forcing CT accounting to be enabled
[  153.136037][ T7902] ip6t_hbh: Not strict - not implemented
[  153.599482][ T7891] loop4: detected capacity change from 0 to 32768
[  153.685158][ T7919] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  153.736106][   T33] audit: type=1800 audit(1793724080.453:24): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.764" name="file1" dev="loop4" ino=4 res=0 errno=-22
[  153.836752][ T7924] netlink: 84 bytes leftover after parsing attributes in process `syz.0.776'.
[  153.836836][ T7924] ip6tnl0: Caught tx_queue_len zero misconfig
[  153.836869][ T7924] netlink: 173 bytes leftover after parsing attributes in process `syz.0.776'.
[  154.301167][ T7941] loop3: detected capacity change from 0 to 64
[  154.376627][ T7941] MINIX-fs: mounting file system with errors, running fsck is recommended
[  154.389160][ T7941] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  154.408768][ T7916] loop2: detected capacity change from 0 to 32768
[  154.461202][ T7944] bonding: b is being created...
[  154.470785][ T7941] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  154.504508][ T7916] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  154.809281][ T7938] loop1: detected capacity change from 0 to 40427
[  154.833076][ T7938] F2FS-fs (loop1): invalid crc value
[  154.978228][ T5634] ocfs2: Unmounting device (7,2) on (node local)
[  155.130941][ T7938] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  155.149535][ T7938] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  155.263055][ T5637] syz-executor: attempt to access beyond end of device
[  155.263055][ T5637] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  155.289695][ T5637] CPU: 0 UID: 0 PID: 5637 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  155.289727][ T5637] Tainted: [L]=SOFTLOCKUP
[  155.289733][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  155.289744][ T5637] Call Trace:
[  155.289751][ T5637]  <TASK>
[  155.289759][ T5637]  dump_stack_lvl+0xe8/0x150
[  155.289794][ T5637]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  155.289829][ T5637]  f2fs_write_end_bio+0x118e/0x15d0
[  155.289872][ T5637]  __submit_merged_bio+0x258/0x6a0
[  155.289892][ T5637]  ? rcu_is_watching+0x16/0xb0
[  155.289924][ T5637]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  155.289945][ T5637]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  155.289989][ T5637]  f2fs_write_data_pages+0x2a13/0x36e0
[  155.290045][ T5637]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.290066][ T5637]  ? is_bpf_text_address+0x26/0x2b0
[  155.290099][ T5637]  ? arch_stack_walk+0xfb/0x150
[  155.290153][ T5637]  ? add_lock_to_list+0xc7/0x100
[  155.290180][ T5637]  ? lockdep_unlock+0x5c/0xd0
[  155.290197][ T5637]  ? __lock_acquire+0x1511/0x2de0
[  155.290248][ T5637]  ? do_raw_spin_lock+0x12b/0x2f0
[  155.290279][ T5637]  ? do_raw_spin_unlock+0xf5/0x200
[  155.290301][ T5637]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.290324][ T5637]  do_writepages+0x338/0x560
[  155.290356][ T5637]  ? do_raw_spin_unlock+0xf5/0x200
[  155.290381][ T5637]  filemap_fdatawrite+0x1e9/0x2f0
[  155.290406][ T5637]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  155.290472][ T5637]  ? do_raw_spin_unlock+0xf5/0x200
[  155.290496][ T5637]  f2fs_sync_dirty_inodes+0x471/0x970
[  155.290538][ T5637]  f2fs_write_checkpoint+0x867/0x24d0
[  155.290603][ T5637]  kill_f2fs_super+0x2df/0x700
[  155.290634][ T5637]  ? rcu_do_enqueue+0x616/0x870
[  155.290657][ T5637]  ? lockdep_hardirqs_on+0x7b/0x110
[  155.290679][ T5637]  ? __pfx_kill_f2fs_super+0x10/0x10
[  155.290721][ T5637]  ? __pfx_call_rcu+0x10/0x10
[  155.290746][ T5637]  ? shrinker_free+0x2a7/0x3b0
[  155.290771][ T5637]  deactivate_locked_super+0xbe/0x110
[  155.290808][ T5637]  cleanup_mnt+0x204/0x2a0
[  155.290833][ T5637]  task_work_run+0x1d9/0x260
[  155.290861][ T5637]  ? __pfx_task_work_run+0x10/0x10
[  155.290896][ T5637]  exit_to_user_mode_loop+0x204/0x770
[  155.290923][ T5637]  ? rcu_is_watching+0x16/0xb0
[  155.290954][ T5637]  do_syscall_64+0x328/0x520
[  155.290974][ T5637]  ? trace_irq_disable+0x3b/0x140
[  155.291000][ T5637]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.291020][ T5637]  ? clear_bhb_loop+0x70/0xc0
[  155.291045][ T5637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.291064][ T5637] RIP: 0033:0x7fbf13da0d57
[  155.291084][ T5637] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  155.291100][ T5637] RSP: 002b:00007ffdf9fcd508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  155.291122][ T5637] RAX: 0000000000000000 RBX: 00007fbf13e36fb3 RCX: 00007fbf13da0d57
[  155.291135][ T5637] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf9fcd5c0
[  155.291147][ T5637] RBP: 00007ffdf9fcd5c0 R08: 00007ffdf9fce5c0 R09: 00000000ffffffff
[  155.291160][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf9fce650
[  155.291172][ T5637] R13: 00007fbf13e36fb3 R14: 0000000000025e1e R15: 00007ffdf9fce690
[  155.291206][ T5637]  </TASK>
[  155.406910][ T5637] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  155.957987][ T7994] loop0: detected capacity change from 0 to 8
[  156.136685][ T7994] SQUASHFS error: Unable to read directory block [629:fe]
[  156.437113][ T8014] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  156.518312][ T8013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.518423][ T8013] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.569888][ T8013] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  156.614862][ T8023] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  156.639722][ T8014] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  156.639752][ T8014] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  156.640069][ T8023] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  156.674650][ T8014] Remounting filesystem read-only
[  156.693627][   T53] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[  156.693659][   T53] EXT4-fs (loop3): This should not happen!! Data will be lost
[  156.693659][   T53] 
[  156.693690][   T53] EXT4-fs (loop3): Total free blocks count 0
[  156.693703][   T53] EXT4-fs (loop3): Free/Dirty block details
[  156.705135][   T53] EXT4-fs (loop3): free_blocks=65281
[  156.705180][   T53] EXT4-fs (loop3): dirty_blocks=4
[  156.705192][   T53] EXT4-fs (loop3): Block reservation details
[  156.705204][   T53] EXT4-fs (loop3): i_reserved_data_blocks=4
[  156.735210][ T5370] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  156.737575][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.894163][ T5370] usb 3-1: Using ep0 maxpacket: 8
[  156.896593][ T5370] usb 3-1: unable to get BOS descriptor or descriptor too short
[  156.896641][ T5370] usb 3-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05
[  156.898040][ T5370] usb 3-1: config 4 interface 0 has no altsetting 0
[  156.907612][ T5370] usb 3-1: string descriptor 0 read error: -22
[  156.907704][ T5370] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  156.930398][ T5370] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  156.952467][ T5370] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  156.952905][ T5370] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  156.958369][ T5370] usb 3-1: media controller created
[  156.985339][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.818'.
[  157.035313][ T8031] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  157.039605][ T5370] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  157.107721][ T8034] set_capacity_and_notify: 2 callbacks suppressed
[  157.107740][ T8034] loop0: detected capacity change from 0 to 1024
[  157.110785][ T8034] EXT4-fs: Ignoring removed nomblk_io_submit option
[  157.156786][ T8034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.195590][ T5370] zl10353_read_register: readreg error (reg=127, ret==0)
[  157.279666][ T5370] usb 3-1: USB disconnect, device number 7
[  157.493862][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.792944][ T8046] loop3: detected capacity change from 0 to 32768
[  157.987776][ T8060] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  158.158510][ T8064] loop4: detected capacity change from 0 to 512
[  158.175770][ T8064] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  158.175789][ T8064] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  158.213147][ T8064] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[  158.213265][ T8064] System zones: 1-12
[  158.227771][ T8064] EXT4-fs (loop4): 1 truncate cleaned up
[  158.234430][ T8064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.308588][ T8068] xfrm0: Caught tx_queue_len zero misconfig
[  158.401361][ T5645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.666931][ T8076] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input12
[  159.244239][ T8073] loop1: detected capacity change from 0 to 40427
[  159.252899][ T8073] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  159.252927][ T8073] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  159.585440][ T8073] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  159.616862][ T8073] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  159.616893][ T8073] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  159.718620][   T33] audit: type=1800 audit(1793724086.433:25): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.1.838" name="bus" dev="loop1" ino=10 res=0 errno=-22
[  159.878888][ T5637] syz-executor: attempt to access beyond end of device
[  159.878888][ T5637] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  159.919699][ T5637] CPU: 0 UID: 0 PID: 5637 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  159.919733][ T5637] Tainted: [L]=SOFTLOCKUP
[  159.919740][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  159.919752][ T5637] Call Trace:
[  159.919760][ T5637]  <TASK>
[  159.919768][ T5637]  dump_stack_lvl+0xe8/0x150
[  159.919804][ T5637]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  159.919833][ T5637]  f2fs_write_end_bio+0x118e/0x15d0
[  159.919877][ T5637]  __submit_merged_bio+0x258/0x6a0
[  159.919898][ T5637]  ? rcu_is_watching+0x16/0xb0
[  159.919932][ T5637]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  159.919957][ T5637]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  159.920003][ T5637]  f2fs_write_data_pages+0x2a13/0x36e0
[  159.920067][ T5637]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  159.920105][ T5637]  ? is_bpf_text_address+0x292/0x2b0
[  159.920126][ T5637]  ? is_bpf_text_address+0x26/0x2b0
[  159.920175][ T5637]  ? stack_trace_save+0xa9/0x100
[  159.920200][ T5637]  ? __pfx_stack_trace_save+0x10/0x10
[  159.920243][ T5637]  ? lockdep_unlock+0x5c/0xd0
[  159.920263][ T5637]  ? __lock_acquire+0x1511/0x2de0
[  159.920317][ T5637]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  159.920343][ T5637]  do_writepages+0x338/0x560
[  159.920384][ T5637]  ? do_raw_spin_unlock+0xf5/0x200
[  159.920409][ T5637]  filemap_fdatawrite+0x1e9/0x2f0
[  159.920436][ T5637]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  159.920513][ T5637]  ? do_raw_spin_unlock+0xf5/0x200
[  159.920538][ T5637]  f2fs_sync_dirty_inodes+0x471/0x970
[  159.920582][ T5637]  f2fs_write_checkpoint+0x867/0x24d0
[  159.920648][ T5637]  kill_f2fs_super+0x2df/0x700
[  159.920678][ T5637]  ? rcu_do_enqueue+0x616/0x870
[  159.920701][ T5637]  ? lockdep_hardirqs_on+0x7b/0x110
[  159.920721][ T5637]  ? __pfx_kill_f2fs_super+0x10/0x10
[  159.920765][ T5637]  ? __pfx_call_rcu+0x10/0x10
[  159.920790][ T5637]  ? shrinker_free+0x2a7/0x3b0
[  159.920815][ T5637]  deactivate_locked_super+0xbe/0x110
[  159.920844][ T5637]  cleanup_mnt+0x204/0x2a0
[  159.920870][ T5637]  task_work_run+0x1d9/0x260
[  159.920899][ T5637]  ? __pfx_task_work_run+0x10/0x10
[  159.920935][ T5637]  exit_to_user_mode_loop+0x204/0x770
[  159.920961][ T5637]  ? rcu_is_watching+0x16/0xb0
[  159.920990][ T5637]  do_syscall_64+0x328/0x520
[  159.921007][ T5637]  ? trace_irq_disable+0x3b/0x140
[  159.921030][ T5637]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.921049][ T5637]  ? clear_bhb_loop+0x70/0xc0
[  159.921072][ T5637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.921094][ T5637] RIP: 0033:0x7fbf13da0d57
[  159.921111][ T5637] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  159.921126][ T5637] RSP: 002b:00007ffdf9fcd508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  159.921146][ T5637] RAX: 0000000000000000 RBX: 00007fbf13e36fb3 RCX: 00007fbf13da0d57
[  159.921159][ T5637] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf9fcd5c0
[  159.921170][ T5637] RBP: 00007ffdf9fcd5c0 R08: 00007ffdf9fce5c0 R09: 00000000ffffffff
[  159.921182][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf9fce650
[  159.921193][ T5637] R13: 00007fbf13e36fb3 R14: 0000000000026fdc R15: 00007ffdf9fce690
[  159.921223][ T5637]  </TASK>
[  159.932243][ T5637] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  160.292074][ T8096] loop2: detected capacity change from 0 to 32768
[  160.342139][ T8118] profile_transition: unconfined exec no attachment
[  160.385270][ T8096] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  160.482996][ T8096] XFS (loop2): Ending clean mount
[  160.555146][ T8101] loop0: detected capacity change from 0 to 32768
[  160.572254][ T8125] profile_transition: unconfined exec no attachment
[  160.622819][ T8101] ea_get: extended attribute size too large: 2617245744 > INT_MAX
[  160.623435][   T33] audit: type=1800 audit(1793724087.333:26): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.0.850" name="file1" dev="loop0" ino=4 res=0 errno=-22
[  160.632726][ T5634] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  160.765574][ T8101] ea_get: extended attribute size too large: 2617245744 > INT_MAX
[  161.191760][ T8145] loop1: detected capacity change from 0 to 512
[  161.201128][ T8145] EXT4-fs: Ignoring removed nobh option
[  161.211819][ T8145] EXT4-fs (loop1): Test dummy encryption mode enabled
[  161.211840][ T8145] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  161.211850][ T8145] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  161.257314][ T8145] EXT4-fs (loop1): 1 truncate cleaned up
[  161.263690][ T8145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.286058][ T5754] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  161.364233][ T5370] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  161.386088][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.434494][ T5754] usb 5-1: New USB device found: idVendor=28de, idProduct=1142, bcdDevice=0.00
[  161.435534][ T5754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.435565][ T5754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.435602][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.441625][ T5754] usb 5-1: config 0 descriptor??
[  161.514668][ T5370] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  161.514709][ T5370] usb 1-1: too many configurations: 102, using maximum allowed: 8
[  161.518893][ T5370] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  161.518931][ T5370] usb 1-1: config 1 has no interface number 0
[  161.522545][ T5370] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  161.522562][ T5370] usb 1-1: config 1 has no interface number 0
[  161.550800][ T5370] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  161.550832][ T5370] usb 1-1: config 1 has no interface number 0
[  161.566407][ T5370] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  161.566434][ T5370] usb 1-1: config 1 has no interface number 0
[  161.588130][ T5370] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  161.588157][ T5370] usb 1-1: config 1 has no interface number 0
[  161.612362][ T5370] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  161.612388][ T5370] usb 1-1: config 1 has no interface number 0
[  161.634986][ T5370] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  161.635014][ T5370] usb 1-1: config 1 has no interface number 0
[  161.651357][ T5370] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  161.651384][ T5370] usb 1-1: config 1 has no interface number 0
[  161.662200][ T5370] usb 1-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211
[  161.662229][ T5370] usb 1-1: Product: syz
[  161.662242][ T5370] usb 1-1: Manufacturer: syz
[  161.662258][ T5370] usb 1-1: SerialNumber: syz
[  161.700669][ T5370] usb 1-1: 3:0 : does not exist
[  161.700693][ T5370] usb 1-1: 3:0 : does not exist
[  161.930030][ T5370] usb 1-1: USB disconnect, device number 7
[  161.945486][ T5754] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x1
[  161.945535][ T5754] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[  161.945562][ T5754] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[  161.945587][ T5754] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[  161.989160][ T5754] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  161.997438][ T8163] jffs2: notice: (8163) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  162.039356][ T8167] profile_transition: unconfined exec no attachment
[  162.177723][ T5754] usb 5-1: USB disconnect, device number 9
[  162.412329][ T8176] smpboot: CPU 1 is now offline
[  162.832727][ T8172] loop1: detected capacity change from 0 to 32768
[  162.890796][ T8172] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  162.906678][ T8192] loop4: detected capacity change from 0 to 64
[  162.969775][ T8172] XFS (loop1): Ending clean mount
[  163.173143][ T5637] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  163.454269][ T5754] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  163.558210][ T8216] netlink: 'syz.3.891': attribute type 39 has an invalid length.
[  163.574794][ T8217] loop1: detected capacity change from 0 to 256
[  163.605431][ T5754] usb 3-1: not running at top speed; connect to a high speed hub
[  163.605454][ T5754] usb 3-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00
[  163.608201][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.608218][ T5754] usb 3-1: Product: syz
[  163.608225][ T5754] usb 3-1: Manufacturer: syz
[  163.608232][ T5754] usb 3-1: SerialNumber: syz
[  163.686835][ T5754] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected
[  163.730013][ T5754] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  163.744354][ T2256] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  163.760262][ T5754] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  163.777008][ T5754] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  163.797881][ T5754] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  163.898195][ T2256] usb 5-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  163.899298][ T2256] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  163.899314][ T2256] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  163.899324][ T2256] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  163.899348][ T2256] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  163.899361][ T2256] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  163.914005][ T2256] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  163.914021][ T2256] usb 5-1: Product: syz
[  163.914029][ T2256] usb 5-1: Manufacturer: syz
[  164.026661][ T2256] cdc_wdm 5-1:1.0: skipping garbage
[  164.026674][ T2256] cdc_wdm 5-1:1.0: skipping garbage
[  164.070589][ T2256] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  164.070605][ T2256] cdc_wdm 5-1:1.0: Unknown control protocol
[  164.203213][    C0] usb 3-1: malformed indat packet
[  164.203433][    C0] usb 3-1: malformed indat packet
[  164.203632][    C0] usb 3-1: malformed indat packet
[  164.204045][    C0] usb 3-1: malformed indat packet
[  164.204350][    C0] usb 3-1: malformed indat packet
[  164.204648][    C0] usb 3-1: malformed indat packet
[  164.210976][    C0] usb 3-1: malformed indat packet
[  164.216487][    C0] usb 3-1: malformed indat packet
[  164.378083][ T8224] aa_policy_admin_capable: cap_mac_admin? 1
[  164.378116][ T8224] aa_policy_admin_capable: policy locked? 0
[  164.378190][ T8224] unpack_pdb: unpacking tags
[  164.378197][ T8224] unpack_pdb: done unpacking tags
[  164.378342][   T33] audit: type=1400 audit(1793724091.093:27): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=8222 comm="syz.0.894" name="foo" offset=76
[  164.378388][ T8224] aa_free_profile: aa_free_profile(ffff8880557c0c00)
[  164.570883][ T2256] usb 5-1: USB disconnect, device number 10
[  164.611127][ T5832] usb 3-1: USB disconnect, device number 8
[  164.676389][ T5832] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  164.696719][ T5832] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  164.723307][ T5832] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  164.753603][ T5832] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  164.789981][ T5832] keyspan 3-1:1.0: device disconnected
[  164.829043][ T8236] loop0: detected capacity change from 0 to 2048
[  164.853542][ T8236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.892919][   T33] audit: type=1800 audit(1793724091.603:28): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.0.899" name=BEBEBEAEBEBEBEBEBEBEBEBEAEAEBEAEAEBEAEAEAEBEAEAEAEAEBEAEBEAEBEBEBEBEBEAEAEAEBEBEBEAEAEAEAEBEBEBEBEAEBEAEBEBEBEBEAEBEBEAEAEAEAEBEBEAEBEAEBEBEAEAEBEBE dev="loop0" ino=1368 res=0 errno=-22
[  165.080108][ T8239] aa_policy_admin_capable: cap_mac_admin? 1
[  165.080122][ T8239] aa_policy_admin_capable: policy locked? 0
[  165.080821][ T8239] unpack_pdb: unpacking tags
[  165.080828][ T8239] unpack_pdb: done unpacking tags
[  165.080900][ T8239] aa_free_profile: aa_free_profile(ffff888055416800)
[  165.081027][   T33] audit: type=1400 audit(1793724091.793:29): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="f/o" pid=8238 comm="syz.1.900" name="f/o" offset=66
[  165.265859][ T8243] loop3: detected capacity change from 0 to 512
[  165.590974][ T8259] loop3: detected capacity change from 0 to 2048
[  165.636747][ T8259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.718620][ T8258] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  165.764805][ T2256] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  165.768786][ T8258] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  165.768804][ T8258] EXT4-fs (loop3): This should not happen!! Data will be lost
[  165.768804][ T8258] 
[  165.768812][ T8258] EXT4-fs (loop3): Total free blocks count 0
[  165.768819][ T8258] EXT4-fs (loop3): Free/Dirty block details
[  165.768853][ T8258] EXT4-fs (loop3): free_blocks=4096
[  165.768874][ T8258] EXT4-fs (loop3): dirty_blocks=64
[  165.768880][ T8258] EXT4-fs (loop3): Block reservation details
[  165.768886][ T8258] EXT4-fs (loop3): i_reserved_data_blocks=4
[  165.836189][ T5832] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  165.872718][  T248] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  165.924524][ T2256] usb 1-1: Using ep0 maxpacket: 32
[  165.925623][ T2256] usb 1-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  165.962580][ T2256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.962598][ T2256] usb 1-1: Product: syz
[  165.962605][ T2256] usb 1-1: Manufacturer: syz
[  165.962613][ T2256] usb 1-1: SerialNumber: syz
[  165.998553][ T2256] usb 1-1: config 0 descriptor??
[  166.017923][ T5832] usb 2-1: New USB device found: idVendor=047e, idProduct=ffff, bcdDevice=0.00
[  166.019920][ T5832] usb 2-1: config 0 has no interfaces?
[  166.019943][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.052400][ T5832] usb 2-1: config 0 descriptor??
[  166.134293][ T8274] profile_transition: unconfined exec no attachment
[  166.139425][ T8272] loop4: detected capacity change from 0 to 256
[  166.172031][ T8272] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d)
[  166.295376][ T5757] usb 2-1: USB disconnect, device number 6
[  166.374442][ T5832] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  166.512205][ T2256] airspy 1-1:0.0: Board ID: 00
[  166.512220][ T2256] airspy 1-1:0.0: Firmware version: 
[  166.543906][ T5832] usb 4-1: Using ep0 maxpacket: 8
[  166.545067][ T5832] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  166.545914][ T5832] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  166.545942][ T5832] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  166.545954][ T5832] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  166.545967][ T5832] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  166.546008][ T5832] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.546046][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.683989][ T5754] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  166.743335][ T8284] loop2: detected capacity change from 0 to 32768
[  166.760799][ T8284] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.919 (8284)
[  166.779611][ T8284] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.779633][ T8284] BTRFS info (device loop2): using crc32c checksum algorithm
[  166.839849][ T5754] usb 5-1: New USB device found: idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  166.867639][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.867674][ T5754] usb 5-1: Product: syz
[  166.867683][ T5754] usb 5-1: Manufacturer: syz
[  166.867690][ T5754] usb 5-1: SerialNumber: syz
[  166.870919][ T8284] BTRFS info (device loop2): turning on async discard
[  166.870935][ T8284] BTRFS info (device loop2): enabling free space tree
[  166.870943][ T8284] BTRFS info (device loop2): enabling auto defrag
[  166.870953][ T8284] BTRFS info (device loop2): force zlib compression, level 3
[  166.870981][ T8284] BTRFS info (device loop2): max_inline set to 0
[  166.929207][ T5832] usb 4-1: GET_CAPABILITIES returned 0
[  166.929236][ T5832] usbtmc 4-1:16.0: can't read capabilities
[  166.930222][ T5754] usb 5-1: config 0 descriptor??
[  166.945664][ T5754] hub 5-1:0.0: bad descriptor, ignoring hub
[  166.945679][ T5754] hub 5-1:0.0: probe with driver hub failed with error -5
[  166.993013][ T2256] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e
[  167.043253][   T33] audit: type=1800 audit(1793724093.753:30): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.2.919" name="file1" dev="loop2" ino=260 res=0 errno=-22
[  167.108206][ T2256] airspy 1-1:0.0: Registered as swradio24
[  167.108223][ T2256] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  167.145289][ T2256] usb 1-1: USB disconnect, device number 8
[  167.196869][  T196] usb 4-1: USB disconnect, device number 8
[  167.227395][ T8301] profile_transition: unconfined exec no attachment
[  167.229931][ T5754] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  167.254779][ T8302] profile_transition: unconfined exec no attachment
[  167.310706][ T5754] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  167.311825][ T5754] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  167.311868][ T5754] usb 5-1: media controller created
[  167.407121][ T5754] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  167.508683][ T8305] profile_transition: unconfined exec no attachment
[  167.628560][ T5754] DVB: Unable to find symbol dib7000p_attach()
[  167.628572][ T5754] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  167.632088][ T8306] profile_transition: unconfined exec no attachment
[  167.689330][   T33] audit: type=1326 audit(1793724094.403:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8307 comm="syz.1.922" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf13d9fb19 code=0x7ffc0000
[  167.692355][   T33] audit: type=1326 audit(1793724094.403:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8307 comm="syz.1.922" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf13d9fb19 code=0x7ffc0000
[  167.762607][   T33] audit: type=1326 audit(1793724094.473:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8307 comm="syz.1.922" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf13d9fb19 code=0x7ffc0000
[  167.798453][   T33] audit: type=1326 audit(1793724094.513:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8307 comm="syz.1.922" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf13d9fb19 code=0x7ffc0000
[  167.802598][   T33] audit: type=1326 audit(1793724094.513:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8307 comm="syz.1.922" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbf13d9fb19 code=0x7ffc0000
[  167.802629][   T33] audit: type=1326 audit(1793724094.513:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8307 comm="syz.1.922" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbf13d9f882 code=0x7ffc0000
[  167.802652][   T33] audit: type=1326 audit(1793724094.513:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8307 comm="syz.1.922" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbf13d6034e code=0x7ffc0000
[  167.918752][ T8308] loop1: detected capacity change from 0 to 256
[  168.005451][ T5634] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  168.024037][ T5754] rc_core: IR keymap rc-dib0700-rc5 not found
[  168.024049][ T5754] Registered IR keymap rc-empty
[  168.024236][ T5754] dvb-usb: could not initialize remote control.
[  168.024241][ T5754] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  168.064240][ T5754] usb 5-1: USB disconnect, device number 11
[  168.320380][ T5754] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  168.432902][ T8318] loop2: detected capacity change from 0 to 512
[  168.448808][ T8318] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  168.448820][ T8318] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  168.524830][ T8318] EXT4-fs (loop2): 1 truncate cleaned up
[  168.525731][ T8318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.610751][ T8318] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #2: comm syz.2.924: invalid size
[  168.626618][ T8318] EXT4-fs (loop2): Remounting filesystem read-only
[  168.690953][ T8324] loop3: detected capacity change from 0 to 2048
[  168.727903][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.789031][ T8324] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  168.839713][ T8331] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.090553][ T8337] 9pnet_fd: p9_fd_create_unix (8337): problem connecting socket: ./proc/file0: -2
[  169.419565][ T8350] profile_transition: unconfined exec no attachment
[  169.670299][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'.
[  169.680513][ T5754] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  169.835666][ T5754] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[  169.836566][ T5754] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64
[  169.836584][ T5754] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 50
[  169.836596][ T5754] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  169.838481][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  169.838495][ T5754] usb 3-1: Product: syz
[  169.838503][ T5754] usb 3-1: Manufacturer: syz
[  170.035719][ T8372] block2mtd: error: cannot open device /dev��oop0j�+��E[�j~�����0|�n�
[  170.035719][ T8372] F�
[  170.145559][ T8351] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  170.145634][ T8351] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  170.245994][ T5754] dvb_ttusb_budget: ttusb_init_controller: error
[  170.246009][ T5754] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  170.284838][ T8380] profile_transition: unconfined exec no attachment
[  170.387341][ T8351] dvb_ttusb_budget: failed urb submission (0: err = -8)!
[  170.420594][ T5754] DVB: Unable to find symbol cx22700_attach()
[  170.421209][ T8384] profile_transition: unconfined exec no attachment
[  170.497585][ T8360] loop0: detected capacity change from 0 to 32768
[  170.579601][ T5754] DVB: Unable to find symbol tda10046_attach()
[  170.579614][ T5754] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  170.608828][ T5754] usb 3-1: USB disconnect, device number 9
[  170.753337][ T8383] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  170.753411][ T8383] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  170.906917][ T8383] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  170.971124][ T8383] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  170.971219][ T8383] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  171.020003][ T8383] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  171.067944][ T8383] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  171.068063][ T8383] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  171.071233][ T8383] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  171.131983][ T8383] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  171.132052][ T8383] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  171.177864][ T8383] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  171.210408][ T8383] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  171.210498][ T8383] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  171.303299][ T8388] usb usb1: usbfs: process 8388 (syz.2.955) did not claim interface 0 before use
[  171.474851][ T8391] loop3: detected capacity change from 0 to 2048
[  171.507468][ T8391] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.833944][  T196] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  171.985858][  T196] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  171.987843][  T196] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  171.987861][  T196] usb 2-1: config 0 interface 0 has no altsetting 0
[  171.989509][  T196] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  171.989523][  T196] usb 2-1: Product: syz
[  171.989531][  T196] usb 2-1: Manufacturer: syz
[  171.989538][  T196] usb 2-1: SerialNumber: syz
[  172.045779][  T196] usb 2-1: config 0 descriptor??
[  172.064276][  T196] usb 2-1: selecting invalid altsetting 0
[  172.209057][ T8418] loop3: detected capacity change from 0 to 512
[  172.247853][ T8418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.247943][ T8418] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.323663][ T8419] loop0: detected capacity change from 0 to 2048
[  172.360166][ T8418] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  172.372215][ T8419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.372282][ T8419] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.496765][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.644745][  T196] usb 2-1: USB disconnect, device number 7
[  172.764415][   T55] Bluetooth: hci1: command 0x0c1a tx timeout
[  172.891393][ T8432] input: syz1 as /devices/virtual/input/input14
[  172.966374][ T8407] loop4: detected capacity change from 0 to 32768
[  172.977620][ T8407] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.962 (8407)
[  173.004919][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  173.064962][ T8407] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  173.064983][ T8407] BTRFS info (device loop4): using blake2b checksum algorithm
[  173.085276][   T55] Bluetooth: hci2: command 0x0c1a tx timeout
[  173.130736][ T8419] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.968: bg 0: block 345: padding at end of block bitmap is not set
[  173.164060][   T55] Bluetooth: hci3: command 0x0c1a tx timeout
[  173.167647][ T8419] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117
[  173.167667][ T8419] EXT4-fs (loop0): This should not happen!! Data will be lost
[  173.167667][ T8419] 
[  173.244299][   T55] Bluetooth: hci4: command 0x0406 tx timeout
[  173.322385][ T8407] BTRFS info (device loop4): enabling ssd optimizations
[  173.322404][ T8407] BTRFS info (device loop4): turning on async discard
[  173.322413][ T8407] BTRFS info (device loop4): enabling free space tree
[  173.322429][ T8407] BTRFS info (device loop4): use zlib compression, level 3
[  173.398974][  T248] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 307 with error 28
[  173.398995][  T248] EXT4-fs (loop0): This should not happen!! Data will be lost
[  173.398995][  T248] 
[  173.399003][  T248] EXT4-fs (loop0): Total free blocks count 0
[  173.399010][  T248] EXT4-fs (loop0): Free/Dirty block details
[  173.399017][  T248] EXT4-fs (loop0): free_blocks=0
[  173.399024][  T248] EXT4-fs (loop0): dirty_blocks=320
[  173.399030][  T248] EXT4-fs (loop0): Block reservation details
[  173.484299][ T8454] profile_transition: unconfined exec no attachment
[  173.486537][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'.
[  173.717949][ T8458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.977'.
[  173.735410][ T5645] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  173.837912][  T196] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  173.983812][  T196] usb 2-1: Using ep0 maxpacket: 16
[  173.983919][ T8467] FAULT_INJECTION: forcing a failure.
[  173.983919][ T8467] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  173.983936][ T8467] CPU: 0 UID: 0 PID: 8467 Comm: syz.4.979 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  173.983951][ T8467] Tainted: [L]=SOFTLOCKUP
[  173.983955][ T8467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  173.983962][ T8467] Call Trace:
[  173.983967][ T8467]  <TASK>
[  173.983972][ T8467]  dump_stack_lvl+0xe8/0x150
[  173.983994][ T8467]  should_fail_ex+0x3eb/0x540
[  173.984017][ T8467]  _copy_from_user+0x2d/0xb0
[  173.984034][ T8467]  kstrtouint_from_user+0xd6/0x180
[  173.984047][ T8467]  ? lock_acquire+0x115/0x350
[  173.984062][ T8467]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  173.984078][ T8467]  ? get_pid_task+0x20/0x1f0
[  173.984091][ T8467]  ? get_pid_task+0x20/0x1f0
[  173.984106][ T8467]  proc_fail_nth_write+0x8e/0x210
[  173.984119][ T8467]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  173.984131][ T8467]  ? iov_iter_iovec_advance+0x1e0/0x290
[  173.984150][ T8467]  vfs_writev+0x4bc/0x9a0
[  173.984163][ T8467]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  173.984179][ T8467]  ? __pfx_vfs_writev+0x10/0x10
[  173.984199][ T8467]  ? __fget_files+0x2a/0x420
[  173.984214][ T8467]  ? __fget_files+0x3a2/0x420
[  173.984231][ T8467]  ? fdget+0x1ac/0x250
[  173.984249][ T8467]  do_writev+0x154/0x2e0
[  173.984263][ T8467]  ? __pfx_do_writev+0x10/0x10
[  173.984282][ T8467]  do_syscall_64+0x166/0x520
[  173.984293][ T8467]  ? trace_irq_disable+0x3b/0x140
[  173.984308][ T8467]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.984319][ T8467]  ? clear_bhb_loop+0x70/0xc0
[  173.984332][ T8467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.984350][ T8467] RIP: 0033:0x7f1a1f59fb19
[  173.984361][ T8467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.984371][ T8467] RSP: 002b:00007f1a204bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  173.984385][ T8467] RAX: ffffffffffffffda RBX: 00007f1a1f825fa0 RCX: 00007f1a1f59fb19
[  173.984393][ T8467] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000003
[  173.984400][ T8467] RBP: 00007f1a1f637b70 R08: 0000000000000000 R09: 0000000000000000
[  173.984407][ T8467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.984413][ T8467] R13: 00007f1a1f826038 R14: 00007f1a1f825fa0 R15: 00007ffd08f04a38
[  173.984432][ T8467]  </TASK>
[  173.984712][  T196] usb 2-1: New USB device found: idVendor=0582, idProduct=0156, bcdDevice=0.40
[  173.985127][  T196] usb 2-1: config 0 has no interfaces?
[  173.991598][  T196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.991614][  T196] usb 2-1: Product: syz
[  173.991621][  T196] usb 2-1: Manufacturer: syz
[  173.991629][  T196] usb 2-1: SerialNumber: syz
[  174.028263][  T196] usb 2-1: config 0 descriptor??
[  174.361452][ T8470] profile_transition: unconfined exec no attachment
[  174.380365][ T2256] usb 2-1: USB disconnect, device number 8
[  174.572208][ T8477] loop4: detected capacity change from 0 to 256
[  174.645344][ T8477] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  174.645362][ T8477] FAT-fs (loop4): Filesystem has been set read-only
[  174.846801][   T55] Bluetooth: hci1: command 0x0c1a tx timeout
[  174.961520][ T8488] loop3: detected capacity change from 0 to 256
[  174.973074][ T8488] exfat: Deprecated parameter 'utf8'
[  174.973093][ T8488] exfat: Deprecated parameter 'namecase'
[  174.973130][ T8488] exfat: Deprecated parameter 'utf8'
[  175.020845][ T8488] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  175.084569][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  175.164028][   T55] Bluetooth: hci2: command 0x0c1a tx timeout
[  175.244564][   T55] Bluetooth: hci3: command 0x0c1a tx timeout
[  175.324177][   T55] Bluetooth: hci4: command 0x0406 tx timeout
[  175.386800][ T8501] loop2: detected capacity change from 0 to 256
[  175.584439][ T2256] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  175.675014][ T8514] capability: warning: `syz.1.1001' uses deprecated v2 capabilities in a way that may be insecure
[  175.683217][ T8514] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  175.683235][ T8514] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  175.734736][ T2256] usb 4-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40
[  175.735554][ T2256] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.735585][ T2256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.741329][ T2256] usb 4-1: config 0 descriptor??
[  175.790190][ T8516] loop0: detected capacity change from 0 to 8
[  175.865319][  T196] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  175.904266][ T8511] loop2: detected capacity change from 0 to 8192
[  175.973638][ T8511]  loop2: AHDI p1 p4
[  176.015652][ T5754] usb 4-1: USB disconnect, device number 9
[  176.032877][  T196] usb 5-1: Using ep0 maxpacket: 8
[  176.039538][  T196] usb 5-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  176.041717][  T196] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  176.041732][  T196] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  176.041769][  T196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  176.041783][  T196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  176.041797][  T196] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  176.117171][  T196] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3
[  176.117188][  T196] usb 5-1: Manufacturer: syz
[  176.117196][  T196] usb 5-1: SerialNumber: syz
[  176.158427][  T196] usb 5-1: config 0 descriptor??
[  176.160556][ T8512] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  176.253342][  T196] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15
[  176.455299][ T8528] sd 0:0:1:0: PR command failed: 1026
[  176.455328][ T8528] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  176.455385][ T8528] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  176.564595][ T5754] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  176.656087][    C0] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1
[  176.662999][ T8530] loop1: detected capacity change from 0 to 256
[  176.714521][ T5754] usb 4-1: Using ep0 maxpacket: 32
[  176.715698][ T5754] usb 4-1: New USB device found: idVendor=14aa, idProduct=0226, bcdDevice=0.40
[  176.721619][ T5754] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.721651][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.767795][ T5754] usb 4-1: config 0 descriptor??
[  176.767968][ T8530] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fcb6, chksum : 0xe31a9435, utbl_chksum : 0xe619d30d)
[  176.772290][ T8533] profile_transition: unconfined exec no attachment
[  176.799310][ T5754] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state.
[  176.799348][ T5754] dvb-usb: bulk message failed: -22 (2/0)
[  176.799358][ T5754] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  176.799891][ T5754] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom))
[  176.799926][ T5754] usb 4-1: media controller created
[  176.864988][ T5754] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  176.872121][ T5640] udevd[5640]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  176.928357][   T55] Bluetooth: hci1: command 0x0c1a tx timeout
[  176.955540][ T8535] jffs2: notice: (8535) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  176.960909][  T196] usb 5-1: USB disconnect, device number 12
[  176.992374][ T8530] exFAT-fs (loop1): valid_size(150994954) is greater than size(10)
[  177.017715][ T5754] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)...
[  177.017985][ T5754] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  177.165276][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  177.238523][ T8540] profile_transition: unconfined exec no attachment
[  177.245858][   T55] Bluetooth: hci2: command 0x0c1a tx timeout
[  177.323985][   T55] Bluetooth: hci3: command 0x0c1a tx timeout
[  177.414033][ T5754] rc_core: IR keymap rc-dtt200u not found
[  177.414046][ T5754] Registered IR keymap rc-empty
[  177.414798][ T5754] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  177.448346][ T5754] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input16
[  177.469627][ T5754] dvb-usb: schedule remote query interval to 300 msecs.
[  177.469642][ T5754] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected.
[  177.512250][ T5754] usb 4-1: USB disconnect, device number 10
[  177.522061][ T8543] loop0: detected capacity change from 0 to 128
[  177.544379][ T8543] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  177.549343][ T8543] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  177.780258][ T5633] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  178.036593][ T8558] syz.1.1018 (8558): /proc/8556/oom_adj is deprecated, please use /proc/8556/oom_score_adj instead.
[  178.073500][ T5754] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected.
[  178.252460][ T8560] Invalid ELF header magic: != ELF
[  178.360662][ T8573] program syz.3.1025 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  178.362401][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'.
[  178.554240][ T8584] loop1: detected capacity change from 0 to 256
[  178.554798][ T8584] exfat: Deprecated parameter 'utf8'
[  178.554826][ T8584] exfat: Deprecated parameter 'namecase'
[  178.554880][ T8584] exfat: Deprecated parameter 'namecase'
[  178.554892][ T8584] exfat: Deprecated parameter 'utf8'
[  178.627246][ T8584] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc89da420, utbl_chksum : 0xe619d30d)
[  178.627449][ T8584] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[  178.976231][ T8596] WARNING! power/level is deprecated; use power/control instead
[  179.118827][ T8602] ip_tables: iptables: counters copy to user failed while replacing table
[  179.746661][ T8604] loop1: detected capacity change from 0 to 32768
[  179.766642][ T8604] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1041 (8604)
[  179.791033][ T8604] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  179.791056][ T8604] BTRFS info (device loop1): using blake2b checksum algorithm
[  179.908596][ T8626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1045'.
[  179.931332][ T8604] BTRFS info (device loop1): enabling ssd optimizations
[  179.931350][ T8604] BTRFS info (device loop1): using spread ssd allocation scheme
[  179.931359][ T8604] BTRFS info (device loop1): turning off barriers
[  179.931368][ T8604] BTRFS info (device loop1): enabling free space tree
[  179.931376][ T8604] BTRFS info (device loop1): enabling auto defrag
[  179.931385][ T8604] BTRFS info (device loop1): force zlib compression, level 3
[  180.097090][ T8630] profile_transition: unconfined exec no attachment
[  180.119780][ T8609] loop2: detected capacity change from 0 to 40427
[  180.154004][ T8609] F2FS-fs (loop2): invalid crc value
[  180.409511][ T8609] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  180.461661][ T5637] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  180.606146][ T8609] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[  180.606165][ T8609] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  180.606180][ T8609] F2FS-fs (loop2): Start checkpoint disabled!
[  180.749672][ T8609] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[  180.768702][ T8609] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  181.333458][ T8657] ip_tables: iptables: counters copy to user failed while replacing table
[  181.334674][ T8655] ip_tables: iptables: counters copy to user failed while replacing table
[  181.396476][ T8659] loop3: detected capacity change from 0 to 256
[  181.397055][ T8659] exfat: Deprecated parameter 'utf8'
[  181.397083][ T8659] exfat: Deprecated parameter 'namecase'
[  181.397134][ T8659] exfat: Deprecated parameter 'namecase'
[  181.397147][ T8659] exfat: Deprecated parameter 'utf8'
[  181.446527][ T8659] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc89da420, utbl_chksum : 0xe619d30d)
[  181.446721][ T8659] exFAT-fs (loop3): failed to test first cluster bit of root dir(5)
[  181.625792][ T8661] loop4: detected capacity change from 0 to 4096
[  181.769326][ T8668] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  181.919985][ T8673] loop2: detected capacity change from 0 to 128
[  181.941777][ T8673] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  181.962503][ T8673] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  182.097022][ T8661] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean
[  182.116027][ T5634] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  182.298468][ T8686] profile_transition: unconfined exec no attachment
[  182.384125][ T2256] wiimote 0005:057E:0306.0006: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  182.405169][ T8687] netlink: 'syz.3.1068': attribute type 2 has an invalid length.
[  182.413381][ T2256] wiimote 0005:057E:0306.0006: New device registered (Wiimote 1)
[  182.470783][ T8690] profile_transition: unconfined exec no attachment
[  182.612084][ T8695] loop4: detected capacity change from 0 to 2048
[  182.631176][ T5754] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  182.680565][ T8695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.799511][ T8701] loop0: detected capacity change from 0 to 2048
[  182.816967][ T8681] wiimote 0005:057E:0306.0006: Device removed
[  182.820963][ T5754] usb 3-1: unable to get BOS descriptor or descriptor too short
[  182.823447][ T5754] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  182.840331][ T5754] usb 3-1: unable to read config index 0 descriptor/start: -71
[  182.840353][ T5754] usb 3-1: can't read configurations, error -71
[  182.883405][ T8701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.883476][ T8701] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.001413][ T8701] fs-verity (loop0, inode 13): Unknown hash algorithm number: 3
[  183.072236][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.202670][ T5645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.253458][   T33] kauditd_printk_skb: 26 callbacks suppressed
[  183.253470][   T33] audit: type=1326 audit(1793724109.963:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8706 comm="syz.0.1075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4f9fb19 code=0x7ffc0000
[  183.253496][   T33] audit: type=1326 audit(1793724109.963:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8706 comm="syz.0.1075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4f9fb19 code=0x7ffc0000
[  183.318506][   T33] audit: type=1326 audit(1793724110.033:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8706 comm="syz.0.1075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4f9fb19 code=0x7ffc0000
[  183.318536][   T33] audit: type=1326 audit(1793724110.033:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8706 comm="syz.0.1075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4f9fb19 code=0x7ffc0000
[  183.323149][   T33] audit: type=1326 audit(1793724110.033:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8706 comm="syz.0.1075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f92f4f9fb19 code=0x7ffc0000
[  183.323179][   T33] audit: type=1326 audit(1793724110.033:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8706 comm="syz.0.1075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4f9fb19 code=0x7ffc0000
[  183.323200][   T33] audit: type=1326 audit(1793724110.033:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8706 comm="syz.0.1075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4f9fb19 code=0x7ffc0000
[  183.469389][   T33] audit: type=1326 audit(1793724110.153:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8706 comm="syz.0.1075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4f9fb19 code=0x7ffc0000
[  183.469426][   T33] audit: type=1326 audit(1793724110.153:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8706 comm="syz.0.1075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f4f9fb19 code=0x7ffc0000
[  183.497405][ T2256] wiimote 0005:057E:0306.0006: detected device: Nintendo Wii Remote (Gen 1) (1)
[  183.528095][   T33] audit: type=1326 audit(1793724110.243:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8706 comm="syz.0.1075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f92f4f9fb19 code=0x7ffc0000
[  183.856371][ T2256] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0006/input/input18
[  183.962549][ T2256] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0006/input/input19
[  183.977340][ T8715] loop0: detected capacity change from 0 to 64
[  183.991849][ T2256] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0006/input/input17
[  184.059710][ T8700] loop3: detected capacity change from 0 to 32768
[  184.091643][ T8715] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.	Mounting read-only.
[  184.148810][ T8700] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  184.151344][ T8700] XFS (loop3): Mounting V5 filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a in no-recovery mode. Filesystem will be inconsistent.
[  184.219652][ T8705] loop1: detected capacity change from 0 to 32768
[  184.220367][ T8705] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  184.250660][ T8705] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1074 (8705)
[  184.283018][ T8700] XFS (loop3): ro->rw transition prohibited on norecovery mount
[  184.333114][ T8705] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  184.333138][ T8705] BTRFS info (device loop1): using sha256 checksum algorithm
[  184.404082][ T5635] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  184.492906][ T8705] BTRFS info (device loop1): rebuilding free space tree
[  184.591181][ T8705] BTRFS info (device loop1): disabling free space tree
[  184.591297][ T8705] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  184.591311][ T8705] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  184.636684][ T8740] loop0: detected capacity change from 0 to 256
[  184.675882][ T8705] BTRFS info (device loop1): enabling ssd optimizations
[  184.675901][ T8705] BTRFS info (device loop1): force clearing of disk cache
[  184.675910][ T8705] BTRFS info (device loop1): enabling auto defrag
[  184.675919][ T8705] BTRFS info (device loop1): max_inline set to 0
[  184.721670][ T8740] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  184.750352][ T8744] profile_transition: unconfined exec no attachment
[  185.478740][  T208] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  185.553436][ T8763] profile_transition: unconfined exec no attachment
[  185.555121][ T8762] aa_policy_admin_capable: cap_mac_admin? 1
[  185.555134][ T8762] aa_policy_admin_capable: policy locked? 0
[  185.555290][ T8762] aa_parse_debug_params: unknown debug type 'jʮ'
[  185.555298][ T8762] aa_parse_debug_params: unknown debug type '?'
[  185.927523][ T8771] loop3: detected capacity change from 0 to 512
[  185.949370][ T5637] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  186.004903][ T8771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.004974][ T8771] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.167533][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.482289][ T8785] loop4: detected capacity change from 0 to 1024
[  186.522998][ T8785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  186.523069][ T8785] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.596412][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'.
[  186.636455][ T5645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  186.728808][ T8795] loop1: detected capacity change from 0 to 256
[  186.756416][ T8795] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  186.921909][ T8799] 8021q: adding VLAN 0 to HW filter on device bond1
[  187.236339][ T8820] loop4: detected capacity change from 0 to 128
[  187.248400][ T8820] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  187.313701][   T91] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  187.462192][ T8829] netlink: 'syz.3.1116': attribute type 4 has an invalid length.
[  187.463162][ T8828] loop4: detected capacity change from 0 to 512
[  187.481745][ T8828] EXT4-fs: Ignoring removed nomblk_io_submit option
[  187.497665][ T8828] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  187.497677][ T8828] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  187.513262][ T8828] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.1115: bad orphan inode 131083
[  187.513281][ T8828] loop4: lost filesystem error report for type 5 error -117
[  187.523590][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  187.523607][    C0] EXT4-fs (loop4): initial error at time 1793724114: ext4_orphan_get:1430
[  187.523621][    C0] EXT4-fs (loop4): last error at time 1793724114: ext4_orphan_get:1430
[  187.575468][ T8828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.609751][ T8828] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.1115: Logical block already allocated
[  187.658060][ T8831] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.1115: Logical block already allocated
[  187.726596][ T5645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.745850][ T8833] loop3: detected capacity change from 0 to 1024
[  187.760843][ T8833] hfsplus: failed to load extents file
[  187.908453][ T8833] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  187.936872][ T8833] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  187.983201][ T8833] ntfs3(loop3): Failed to load $Extend (-2).
[  187.983226][ T8833] ntfs3(loop3): Failed to initialize $Extend.
[  188.094301][ T5832] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  188.245675][ T5832] usb 5-1: New USB device found: idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  188.246520][ T5832] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  188.246535][ T5832] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[  188.246546][ T5832] usb 5-1: config 0 has no interface number 0
[  188.246568][ T5832] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  188.246581][ T5832] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  188.246595][ T5832] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  188.246616][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.248197][ T5832] usb 5-1: config 0 descriptor??
[  188.248655][ T8835] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  188.499400][ T8849] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  188.499429][ T8849] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  188.535095][ T8849] EXT4-fs (loop3): 1 truncate cleaned up
[  188.536083][ T8849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.637815][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.777864][ T8857] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  188.859864][  T208] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  188.899742][ T5832] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input20
[  189.004452][   T11] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  189.132963][ T5832] usb 5-1: USB disconnect, device number 13
[  189.133087][    C0] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  189.154828][   T11] usb 4-1: Using ep0 maxpacket: 16
[  189.162502][   T11] usb 4-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00
[  189.162527][   T11] usb 4-1: too many configurations: 123, using maximum allowed: 8
[  189.196848][   T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.199754][   T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.202552][   T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.203797][   T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.255669][   T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.259957][   T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.263048][   T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.263911][   T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.276582][   T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  189.276597][   T11] usb 4-1: SerialNumber: syz
[  189.327752][   T11] usb 4-1: config 0 descriptor??
[  189.329104][ T8860] Trying to free block not in datazone
[  189.329170][ T8860] Trying to free block not in datazone
[  189.362358][ T8860] Trying to free block not in datazone
[  189.380048][   T11] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21
[  189.606761][ T5659] bcm5974 4-1:0.0: could not read from device
[  189.606883][ T5832] usb 4-1: USB disconnect, device number 11
[  189.762809][ T8874] set_capacity_and_notify: 4 callbacks suppressed
[  189.762822][ T8874] loop1: detected capacity change from 0 to 256
[  189.778280][ T8874] exfat: Deprecated parameter 'utf8'
[  189.778311][ T8874] exfat: Deprecated parameter 'namecase'
[  189.778363][ T8874] exfat: Deprecated parameter 'namecase'
[  189.778375][ T8874] exfat: Deprecated parameter 'utf8'
[  189.823063][ T8874] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc89da420, utbl_chksum : 0xe619d30d)
[  189.823275][ T8874] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[  190.254706][ T5832] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  190.421476][ T5832] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00
[  190.422153][ T5832] usb 5-1: unable to read config index 0 descriptor/start: -71
[  190.422174][ T5832] usb 5-1: can't read configurations, error -71
[  190.709168][ T8896] loop3: detected capacity change from 0 to 32768
[  190.770220][ T8896] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  190.800738][ T8896] XFS (loop3): Ending clean mount
[  190.862709][ T8896] XFS (loop3): Quotacheck needed: Please wait.
[  190.981476][ T8896] XFS (loop3): Quotacheck: Done.
[  191.081106][ T5635] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  191.604312][ T5832] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  191.765074][ T5832] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  191.768081][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.771497][ T5832] usb 5-1: config 0 descriptor??
[  192.011061][ T5832] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  192.106146][ T8931] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  192.129452][ T8932] ip_tables: iptables: counters copy to user failed while replacing table
[  192.338450][ T5832] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1
[  192.338467][ T5832] [drm] Initialized udl on minor 1
[  192.633406][ T5832] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  192.676117][ T5832] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  192.719927][ T8952] loop3: detected capacity change from 0 to 512
[  192.736254][ T8952] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  192.736272][ T8952] EXT4-fs (loop3): group descriptors corrupted!
[  192.748029][ T5832] usb 5-1: USB disconnect, device number 16
[  192.810548][ T8949] loop2: detected capacity change from 0 to 8192
[  193.084995][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  193.085030][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  193.711792][ T8955] loop1: detected capacity change from 0 to 40427
[  193.733509][ T8955] F2FS-fs (loop1): build fault injection rate: 174
[  193.733525][ T8955] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  193.753071][ T8955] F2FS-fs (loop1): invalid crc value
[  193.938099][ T8955] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  193.999211][ T8955] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  194.070355][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  194.070366][   T33] audit: type=1800 audit(1793724120.783:80): pid=8955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1169" name="file1" dev="loop1" ino=10 res=0 errno=-22
[  194.161661][ T8955] syz.1.1169: attempt to access beyond end of device
[  194.161661][ T8955] loop1: rw=8423425, sector=45096, nr_sectors = 8 limit=40427
[  194.260934][ T5637] syz-executor: attempt to access beyond end of device
[  194.260934][ T5637] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  194.300140][ T5637] CPU: 0 UID: 0 PID: 5637 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  194.300162][ T5637] Tainted: [L]=SOFTLOCKUP
[  194.300166][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  194.300187][ T5637] Call Trace:
[  194.300192][ T5637]  <TASK>
[  194.300197][ T5637]  dump_stack_lvl+0xe8/0x150
[  194.300219][ T5637]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  194.300235][ T5637]  f2fs_write_end_bio+0x118e/0x15d0
[  194.300259][ T5637]  __submit_merged_bio+0x258/0x6a0
[  194.300271][ T5637]  ? rcu_is_watching+0x16/0xb0
[  194.300289][ T5637]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  194.300303][ T5637]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  194.300327][ T5637]  f2fs_write_data_pages+0x2a13/0x36e0
[  194.300361][ T5637]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  194.300372][ T5637]  ? is_bpf_text_address+0x26/0x2b0
[  194.300390][ T5637]  ? arch_stack_walk+0xfb/0x150
[  194.300421][ T5637]  ? add_lock_to_list+0xc7/0x100
[  194.300437][ T5637]  ? lockdep_unlock+0x5c/0xd0
[  194.300448][ T5637]  ? __lock_acquire+0x1511/0x2de0
[  194.300477][ T5637]  ? do_raw_spin_lock+0x12b/0x2f0
[  194.300494][ T5637]  ? do_raw_spin_unlock+0xf5/0x200
[  194.300505][ T5637]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  194.300518][ T5637]  do_writepages+0x338/0x560
[  194.300537][ T5637]  ? do_raw_spin_unlock+0xf5/0x200
[  194.300550][ T5637]  filemap_fdatawrite+0x1e9/0x2f0
[  194.300565][ T5637]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  194.300602][ T5637]  ? do_raw_spin_unlock+0xf5/0x200
[  194.300615][ T5637]  f2fs_sync_dirty_inodes+0x471/0x970
[  194.300638][ T5637]  f2fs_write_checkpoint+0x867/0x24d0
[  194.300672][ T5637]  kill_f2fs_super+0x2df/0x700
[  194.300688][ T5637]  ? rcu_do_enqueue+0x616/0x870
[  194.300701][ T5637]  ? lockdep_hardirqs_on+0x7b/0x110
[  194.300712][ T5637]  ? __pfx_kill_f2fs_super+0x10/0x10
[  194.300734][ T5637]  ? __pfx_call_rcu+0x10/0x10
[  194.300747][ T5637]  ? shrinker_free+0x2a7/0x3b0
[  194.300761][ T5637]  deactivate_locked_super+0xbe/0x110
[  194.300777][ T5637]  cleanup_mnt+0x204/0x2a0
[  194.300790][ T5637]  task_work_run+0x1d9/0x260
[  194.300805][ T5637]  ? __pfx_task_work_run+0x10/0x10
[  194.300824][ T5637]  exit_to_user_mode_loop+0x204/0x770
[  194.300839][ T5637]  ? rcu_is_watching+0x16/0xb0
[  194.300856][ T5637]  do_syscall_64+0x328/0x520
[  194.300873][ T5637]  ? trace_irq_disable+0x3b/0x140
[  194.300888][ T5637]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.300898][ T5637]  ? clear_bhb_loop+0x70/0xc0
[  194.300912][ T5637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.300922][ T5637] RIP: 0033:0x7fbf13da0d57
[  194.300934][ T5637] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  194.300944][ T5637] RSP: 002b:00007ffdf9fcd508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  194.300955][ T5637] RAX: 0000000000000000 RBX: 00007fbf13e36fb3 RCX: 00007fbf13da0d57
[  194.300963][ T5637] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf9fcd5c0
[  194.300969][ T5637] RBP: 00007ffdf9fcd5c0 R08: 00007ffdf9fce5c0 R09: 00000000ffffffff
[  194.300976][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf9fce650
[  194.300983][ T5637] R13: 00007fbf13e36fb3 R14: 000000000002f680 R15: 00007ffdf9fce690
[  194.301000][ T5637]  </TASK>
[  194.301005][ T5637] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  194.772252][ T8995] netlink: 'syz.4.1188': attribute type 15 has an invalid length.
[  194.800257][ T8998] loop2: detected capacity change from 0 to 128
[  194.819675][ T8998] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  194.839030][ T8998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  195.172581][ T9001] sctp: [Deprecated]: syz.2.1190 (pid 9001) Use of int in max_burst socket option deprecated.
[  195.172581][ T9001] Use struct sctp_assoc_value instead
[  195.313978][ T9009] program syz.1.1187 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  195.334601][ T2256] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  195.493858][ T2256] usb 5-1: Using ep0 maxpacket: 32
[  195.495770][ T2256] usb 5-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40
[  195.498407][ T2256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.498426][ T2256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.498452][ T2256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.500369][ T2256] usb 5-1: config 0 descriptor??
[  195.561321][ T2256] hub 5-1:0.0: USB hub found
[  195.685660][ T9017] tap0: tun_chr_ioctl cmd 1074025677
[  195.685777][ T9017] tap0: linktype set to 0
[  195.722556][ T2256] hub 5-1:0.0: config failed, can't read hub descriptor (err -90)
[  195.865878][ T9007] loop2: detected capacity change from 0 to 32768
[  195.882863][ T9007] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1193 (9007)
[  195.911650][ T9007] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  195.911673][ T9007] BTRFS info (device loop2): using sha256 checksum algorithm
[  196.044018][ T9007] BTRFS info (device loop2): enabling ssd optimizations
[  196.044036][ T9007] BTRFS info (device loop2): turning on async discard
[  196.044061][ T9007] BTRFS info (device loop2): enabling free space tree
[  196.169293][ T2256] hid-generic 0003:046D:C31C.0007: item fetching failed at offset 0/1
[  196.185922][ T2256] hid-generic 0003:046D:C31C.0007: probe with driver hid-generic failed with error -22
[  196.280327][ T5634] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  196.514483][ T2256] usb 5-1: USB disconnect, device number 17
[  196.580158][ T9046] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1203'.
[  196.661795][ T9050] loop7: detected capacity change from 0 to 7
[  196.884594][ T9050] Dev loop7: unable to read RDB block 7
[  196.884624][ T9050]  loop7: unable to read partition table
[  196.884738][ T9050] loop7: partition table beyond EOD, truncated
[  196.884758][ T9050] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  197.051004][ T9059] batadv_slave_0: Caught tx_queue_len zero misconfig
[  197.079216][ T9058] tap0: tun_chr_ioctl cmd 1074025677
[  197.079313][ T9058] tap0: linktype set to 780
[  197.104193][ T2256] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  197.254375][ T2256] usb 2-1: Using ep0 maxpacket: 16
[  197.255371][ T2256] usb 2-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42
[  197.271169][ T2256] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.271201][ T2256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  197.271227][ T2256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  197.271238][ T2256] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  197.271250][ T2256] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.333341][ T2256] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  197.333357][ T2256] usb 2-1: Manufacturer: syz
[  197.343280][ T2256] usb 2-1: config 0 descriptor??
[  197.363878][ T9065] veth0: Caught tx_queue_len zero misconfig
[  197.550004][ T9071] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  197.716862][ T2256] rc_core: IR keymap rc-hauppauge not found
[  197.716875][ T2256] Registered IR keymap rc-empty
[  197.716961][ T2256] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  197.744143][ T2256] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  197.765521][ T2256] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  197.790333][ T2256] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input22
[  197.815735][ T2256] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  197.836597][ T2256] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  197.853896][ T2256] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  197.874858][ T2256] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  197.893918][ T2256] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  197.915606][ T2256] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  197.935028][ T2256] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  197.953814][ T2256] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  197.973846][ T2256] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  197.996641][ T2256] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  198.015130][ T2256] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  198.015145][ T2256] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  198.083839][ T2256] usb 2-1: USB disconnect, device number 9
[  198.167237][ T9087] loop0: detected capacity change from 0 to 1024
[  198.276290][ T9087] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  198.672475][ T9102] loop0: detected capacity change from 0 to 512
[  198.715232][ T9102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.715304][ T9102] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.878330][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.087842][ T9117] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  199.087956][ T9117] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  199.206874][ T9121] loop0: detected capacity change from 0 to 512
[  199.222447][ T9121] EXT4-fs (loop0): Test dummy encryption mode enabled
[  199.222462][ T9121] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  199.222468][ T9121] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  199.290833][ T9121] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.1235: bad orphan inode 131083
[  199.290854][ T9121] loop0: lost filesystem error report for type 5 error -117
[  199.302355][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  199.302371][    C0] EXT4-fs (loop0): initial error at time 1793724126: ext4_orphan_get:1430
[  199.302384][    C0] EXT4-fs (loop0): last error at time 1793724126: ext4_orphan_get:1430
[  199.348029][ T9121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.411008][ T9121] EXT4-fs (loop0): shut down requested (2)
[  199.507308][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.806067][ T9129] device-mapper: table: 248:2: mirror: Device lookup failure (-ENOENT)
[  199.806088][ T9129] device-mapper: ioctl: error adding target to table
[  199.851442][ T9138] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1242'.
[  200.744011][ T9157] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1250'.
[  201.336846][ T9173] loop3: detected capacity change from 0 to 1024
[  201.381430][ T9173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.543613][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.604631][ T5832] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  201.754390][ T5832] usb 5-1: New USB device found: idVendor=045a, idProduct=5210, bcdDevice=1.01
[  201.774476][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.774493][ T5832] usb 5-1: Product: syz
[  201.774501][ T5832] usb 5-1: Manufacturer: syz
[  201.774508][ T5832] usb 5-1: SerialNumber: syz
[  201.814092][ T5832] ums-karma 5-1:1.0: USB Mass Storage device detected
[  201.860170][ T5832] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  201.860170][ T5832]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  202.091492][ T5832] ums-karma 5-1:1.0: probe with driver ums-karma failed with error -5
[  202.113314][ T5832] usb 5-1: USB disconnect, device number 18
[  202.277665][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1267'.
[  202.366047][ T9204] loop3: detected capacity change from 0 to 1024
[  202.366679][ T9204] EXT4-fs: Ignoring removed orlov option
[  202.425723][ T9204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.494253][ T2256] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  202.612799][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.651546][ T2256] usb 2-1: unable to get BOS descriptor or descriptor too short
[  202.664803][ T2256] usb 2-1: not running at top speed; connect to a high speed hub
[  202.664826][ T2256] usb 2-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40
[  202.665860][ T2256] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  202.669308][ T2256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.669322][ T2256] usb 2-1: Product: syz
[  202.669330][ T2256] usb 2-1: Manufacturer: syz
[  202.669337][ T2256] usb 2-1: SerialNumber: syz
[  202.839462][   T11] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  202.852907][   T11] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  202.978518][ T2256] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  203.086035][ T9218] loop0: detected capacity change from 0 to 4096
[  203.102352][ T9218] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  203.102388][ T9218] NILFS (loop0): mounting unchecked fs
[  203.171864][ T2256] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  203.171883][ T2256] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  203.204123][ T9218] NILFS (loop0): recovery complete
[  203.210482][ T9222] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.584262][ T2256] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  203.737747][ T2256] usb 2-1: USB disconnect, device number 10
[  203.871038][ T5640] udevd[5640]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  204.354660][ T2256] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  204.432370][ T9229] syz.2.1281 (9229) used greatest stack depth: 17992 bytes left
[  204.506144][ T2256] usb 5-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00
[  204.507125][ T2256] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  204.507147][ T2256] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  204.513412][ T2256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.513427][ T2256] usb 5-1: Product: syz
[  204.513434][ T2256] usb 5-1: Manufacturer: syz
[  204.513442][ T2256] usb 5-1: SerialNumber: syz
[  204.590596][ T2256] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  204.708091][ T9244] loop3: detected capacity change from 0 to 1756
[  204.748514][ T2256] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  204.748514][ T2256]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  204.784253][ T9244] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  204.784268][ T9244] UDF-fs: Scanning with blocksize 512 failed
[  204.937089][ T9244] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  204.937106][ T9244] UDF-fs: Scanning with blocksize 1024 failed
[  204.979229][ T9244] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000)
[  205.109243][ T9251] TCP: TCP_TX_DELAY enabled
[  205.495511][ T2256] scsi host1: usb-storage 5-1:1.0
[  205.522989][ T2256] usb 5-1: USB disconnect, device number 19
[  205.555697][ T9265] loop1: detected capacity change from 0 to 256
[  205.556258][ T9265] exfat: Deprecated parameter 'namecase'
[  205.556297][ T9265] exfat: Deprecated parameter 'namecase'
[  205.556316][ T9265] exfat: Deprecated parameter 'namecase'
[  205.623814][ T9265] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d)
[  206.235219][ T9281] bond0: entered promiscuous mode
[  206.235235][ T9281] bond_slave_0: entered promiscuous mode
[  206.235397][ T9281] bond_slave_1: entered promiscuous mode
[  206.285608][ T9281] batadv0: entered promiscuous mode
[  206.309226][ T9281] 8021q: adding VLAN 0 to HW filter on device hsr1
[  206.365908][ T9281] bond0: left promiscuous mode
[  206.365931][ T9281] bond_slave_0: left promiscuous mode
[  206.366078][ T9281] bond_slave_1: left promiscuous mode
[  206.369361][ T9281] batadv0: left promiscuous mode
[  206.443575][ T9285] loop3: detected capacity change from 0 to 512
[  206.466728][ T9260] loop2: detected capacity change from 0 to 32768
[  206.548587][ T9260] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  206.674965][ T9260] XFS (loop2): Ending clean mount
[  206.845682][ T5634] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  207.966762][ T9323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1318'.
[  208.340535][ T9332] i2c i2c-0: new_device: Missing parameters
[  209.274532][ T9364] loop3: detected capacity change from 0 to 2048
[  209.317647][ T9364] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  209.317665][ T9364] UDF-fs: Scanning with blocksize 512 failed
[  209.377245][ T9364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  209.431306][ T9369] netlink: 'syz.2.1339': attribute type 3 has an invalid length.
[  209.431320][ T9369] netlink: 'syz.2.1339': attribute type 1 has an invalid length.
[  209.431328][ T9369] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1339'.
[  209.756150][ T9383] loop1: detected capacity change from 0 to 2048
[  209.789116][ T9387] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  209.864484][   T11] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  209.914419][ T2256] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  210.014537][   T11] usb 3-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00
[  210.015686][   T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  210.015715][   T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.065565][ T2256] usb 5-1: Using ep0 maxpacket: 8
[  210.072136][ T2256] usb 5-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  210.090700][ T2256] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  210.090717][ T2256] usb 5-1: config 179 has no interface number 0
[  210.090740][ T2256] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  210.090754][ T2256] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  210.090768][ T2256] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  210.090781][ T2256] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  210.090794][ T2256] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  210.090818][ T2256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.193052][ T9381] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  210.319479][   T11] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device
[  210.372218][ T9387] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  210.372239][ T9387] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  210.401754][ T9387] Remounting filesystem read-only
[  210.409116][ T5637] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  210.487920][   T11] wwan wwan0: port wwan0qmi0 attached
[  210.709621][   T11] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, ce:43:74:c7:13:aa
[  210.798209][ T2256] usb 3-1: USB disconnect, device number 12
[  210.814777][ T2256] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device
[  210.916821][   T11] usb 5-1: USB disconnect, device number 20
[  210.916869][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  210.916895][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  211.092369][ T2256] wwan wwan0: port wwan0qmi0 disconnected
[  211.258567][ T5757] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input23
[  211.698260][ T9392] loop3: detected capacity change from 0 to 32768
[  211.717236][ T9392] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1350 (9392)
[  211.741362][ T9392] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  211.741386][ T9392] BTRFS info (device loop3): using sha256 checksum algorithm
[  211.876075][ T9392] BTRFS info (device loop3): enabling ssd optimizations
[  211.876094][ T9392] BTRFS info (device loop3): turning on async discard
[  211.876102][ T9392] BTRFS info (device loop3): enabling free space tree
[  212.062280][ T9435] loop4: detected capacity change from 0 to 1024
[  212.062906][ T9435] EXT4-fs: Ignoring removed orlov option
[  212.097544][ T9435] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  212.120909][ T9435] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  212.121071][ T9435] EXT4-fs (loop4): orphan cleanup on readonly fs
[  212.226630][ T5635] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  212.311686][ T9435] EXT4-fs error (device loop4): __ext4_get_inode_loc:5733: comm syz.4.1359: Invalid inode table block 0 in block_group 0
[  212.311708][ T9435] loop4: lost filesystem error report for type 5 error -117
[  212.313770][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  212.313786][    C0] EXT4-fs (loop4): initial error at time 1793724139: __ext4_get_inode_loc:5733
[  212.313799][    C0] EXT4-fs (loop4): last error at time 1793724139: __ext4_get_inode_loc:5733
[  212.502291][ T9435] EXT4-fs error (device loop4) in ext4_reserve_inode_write:7459: Corrupt filesystem
[  212.502313][ T9435] loop4: lost filesystem error report for type 5 error -117
[  212.521906][ T9435] EXT4-fs error (device loop4): ext4_quota_write:7509: inode #3: comm syz.4.1359: mark_inode_dirty error
[  212.521928][ T9435] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  212.522135][ T9435] Quota error (device loop4): write_blk: dquota write failed
[  212.522190][ T9435] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  212.522212][ T9435] EXT4-fs error (device loop4): ext4_acquire_dquot:7120: comm syz.4.1359: Failed to acquire dquot type 0
[  212.522224][ T9435] loop4: lost filesystem error report for type 5 error -117
[  212.522520][ T9435] EXT4-fs error (device loop4): __ext4_get_inode_loc:5733: comm syz.4.1359: Invalid inode table block 0 in block_group 0
[  212.522535][ T9435] loop4: lost filesystem error report for type 5 error -117
[  212.712169][ T9435] EXT4-fs error (device loop4) in ext4_reserve_inode_write:7459: Corrupt filesystem
[  212.712191][ T9435] loop4: lost filesystem error report for type 5 error -117
[  212.712478][ T9435] EXT4-fs error (device loop4): ext4_ext_truncate:4565: inode #15: comm syz.4.1359: mark_inode_dirty error
[  212.712494][ T9435] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  212.712626][ T9435] EXT4-fs error (device loop4): __ext4_get_inode_loc:5733: comm syz.4.1359: Invalid inode table block 0 in block_group 0
[  212.712641][ T9435] loop4: lost filesystem error report for type 5 error -117
[  212.873545][ T9435] EXT4-fs error (device loop4) in ext4_reserve_inode_write:7459: Corrupt filesystem
[  212.873566][ T9435] loop4: lost filesystem error report for type 5 error -117
[  212.898007][ T9435] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem
[  212.898026][ T9435] loop4: lost filesystem error report for type 5 error -117
[  212.903032][ T9435] EXT4-fs error (device loop4): __ext4_get_inode_loc:5733: comm syz.4.1359: Invalid inode table block 0 in block_group 0
[  212.903055][ T9435] loop4: lost filesystem error report for type 5 error -117
[  212.903211][ T9435] EXT4-fs error (device loop4) in ext4_reserve_inode_write:7459: Corrupt filesystem
[  212.903223][ T9435] loop4: lost filesystem error report for type 5 error -117
[  212.923676][ T9435] EXT4-fs error (device loop4): ext4_truncate:5538: inode #15: comm syz.4.1359: mark_inode_dirty error
[  212.923697][ T9435] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  212.976719][ T9435] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem
[  213.013301][ T9435] EXT4-fs (loop4): 1 truncate cleaned up
[  213.014689][ T9435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  213.369596][ T5645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.528421][ T9431] loop0: detected capacity change from 0 to 32768
[  213.550537][ T9431] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1358 (9431)
[  213.578933][ T9431] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  213.578956][ T9431] BTRFS info (device loop0): using sha256 checksum algorithm
[  213.777672][ T9431] BTRFS info (device loop0): enabling ssd optimizations
[  213.777691][ T9431] BTRFS info (device loop0): turning on async discard
[  213.777699][ T9431] BTRFS info (device loop0): enabling free space tree
[  214.437143][ T5633] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  215.520325][ T9534] veth0: Caught tx_queue_len zero misconfig
[  215.581941][ T9527] loop0: detected capacity change from 0 to 4096
[  215.620119][ T9527] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  215.980038][ T9544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1390'.
[  216.207570][ T9551] loop4: detected capacity change from 0 to 2048
[  216.232976][ T9551] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  216.257477][ T9551] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  216.533150][ T9560] loop0: detected capacity change from 0 to 1024
[  216.577516][ T9560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  216.580055][ T9560] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.663346][ T9560] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.1398: bg 0: block 112: padding at end of block bitmap is not set
[  216.730925][ T9560] EXT4-fs (loop0): Remounting filesystem read-only
[  216.877418][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  217.071664][ T9576] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  217.086317][ T9577] loop2: detected capacity change from 0 to 512
[  217.109252][ T9577] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  217.109264][ T9577] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  217.150547][ T9577] EXT4-fs (loop2): 1 truncate cleaned up
[  217.151433][ T9577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.238021][ T9577] EXT4-fs error (device loop2): __ext4_expand_extra_isize:7479: inode #12: comm syz.2.1404: bad extra_isize 62 (inode size 256)
[  217.273261][ T9581] loop4: detected capacity change from 0 to 64
[  217.392530][ T9577] EXT4-fs (loop2): Remounting filesystem read-only
[  217.415677][ T9581] hfs: request for non-existent node 131072 in B*Tree
[  217.415691][ T9581] hfs: request for non-existent node 131072 in B*Tree
[  217.473446][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.556035][ T9557] loop1: detected capacity change from 0 to 32768
[  217.618201][ T9557] JBD2: Ignoring recovery information on journal
[  217.665223][ T9557] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75
[  217.665510][ T9557] JBD2: bad block at offset 32
[  217.713442][ T9557] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  217.801275][ T9557] (syz.1.1396,9557,0):ocfs2_check_dir_entry:357 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=3344, name_len=0
[  217.892273][ T5637] ocfs2: Unmounting device (7,1) on (node local)
[  217.912902][   T11] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  217.969036][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'.
[  218.029668][ T9599] loop1: detected capacity change from 0 to 1764
[  218.074131][   T11] usb 3-1: Using ep0 maxpacket: 16
[  218.081102][   T11] usb 3-1: New USB device found: idVendor=1038, idProduct=12c2, bcdDevice=0.00
[  218.082266][   T11] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.082284][   T11] usb 3-1: config 0 interface 0 has no altsetting 0
[  218.082302][   T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.123220][   T11] usb 3-1: config 0 descriptor??
[  218.533865][ T5757] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  218.558983][   T11] hid-steelseries-arctis 0003:1038:12C2.0009: unknown main item tag 0x0
[  218.559008][   T11] hid-steelseries-arctis 0003:1038:12C2.0009: unknown main item tag 0x0
[  218.559024][   T11] hid-steelseries-arctis 0003:1038:12C2.0009: unexpected long global item
[  218.559435][   T11] hid-steelseries-arctis 0003:1038:12C2.0009: probe with driver hid-steelseries-arctis failed with error -22
[  218.686436][ T5757] usb 5-1: New USB device found: idVendor=045e, idProduct=0775, bcdDevice=1.00
[  218.687309][ T5757] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  218.688592][ T5757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  218.688606][ T5757] usb 5-1: Product: syz
[  218.688613][ T5757] usb 5-1: Manufacturer: syz
[  218.744482][ T9608] loop3: detected capacity change from 0 to 32768
[  218.795135][   T11] usb 3-1: USB disconnect, device number 13
[  218.813254][ T9608] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  218.860224][ T9608] XFS (loop3): Ending clean mount
[  218.962573][ T5635] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  219.122842][ T9620] loop3: detected capacity change from 0 to 1024
[  219.511636][ T9628] program syz.3.1422 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  219.561674][ T5757] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input24
[  219.637877][ T5757] usb 5-1: USB disconnect, device number 21
[  220.000403][ T9641] loop1: detected capacity change from 0 to 512
[  220.735734][ T9649] loop4: detected capacity change from 0 to 131072
[  220.764589][ T9649] F2FS-fs (loop4): invalid crc value
[  220.814487][ T9649] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  220.831416][ T9649] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  221.075141][ T9634] loop3: detected capacity change from 0 to 32768
[  221.655008][ T9668] loop0: detected capacity change from 0 to 1024
[  222.107084][ T9682] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1445'.
[  222.107149][ T9682] veth0_macvtap: Caught tx_queue_len zero misconfig
[  222.486361][ T9692] loop0: detected capacity change from 0 to 4096
[  222.505277][ T9692] EXT4-fs (loop0): Test dummy encryption mode enabled
[  222.542300][ T9692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.682264][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.767790][ T9700] program syz.1.1453 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  222.862668][ T9702] lo: Caught tx_queue_len zero misconfig
[  223.013961][ T9708] netlink: 'syz.2.1456': attribute type 4 has an invalid length.
[  223.013976][ T9708] netlink: 'syz.2.1456': attribute type 10 has an invalid length.
[  223.013984][ T9708] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1456'.
[  223.014094][ T9708] bond_slave_0: mtu greater than device maximum
[  223.330861][ T9696] loop3: detected capacity change from 0 to 32768
[  223.344496][ T9696] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1452 (9696)
[  223.374929][ T9696] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  223.374951][ T9696] BTRFS info (device loop3): using blake2b checksum algorithm
[  223.546003][ T9696] BTRFS info (device loop3): enabling ssd optimizations
[  223.546023][ T9696] BTRFS info (device loop3): turning on async discard
[  223.546031][ T9696] BTRFS info (device loop3): enabling free space tree
[  223.546042][ T9696] BTRFS info (device loop3): use zlib compression, level 3
[  223.675215][ T5832] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  223.698140][ T5635] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  223.835651][ T5832] usb 3-1: Using ep0 maxpacket: 32
[  223.836109][ T5832] usb 3-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  223.841503][ T5832] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  223.841520][ T5832] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  223.841532][ T5832] usb 3-1: config 0 interface 0 has no altsetting 0
[  223.881422][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.881439][ T5832] usb 3-1: Product: syz
[  223.881447][ T5832] usb 3-1: Manufacturer: syz
[  223.881454][ T5832] usb 3-1: SerialNumber: syz
[  223.917774][ T5832] usb 3-1: config 0 descriptor??
[  224.231254][ T9761] Bluetooth: MGMT ver 1.23
[  224.347909][ T5832] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  224.364925][ T9765] block2mtd: error: cannot open device 
[  224.556710][ T5832] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  224.556975][ T5832] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22
[  224.708671][ T9773] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  224.708689][ T9773] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  224.749125][ T9773] vhci_hcd vhci_hcd.0: Device attached
[  224.780310][ T5754] usb 3-1: USB disconnect, device number 14
[  224.830770][ T9780] xt_hashlimit: size too large, truncated to 1048576
[  224.917155][ T5832] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  224.973848][ T5832] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  226.285400][   T55] Bluetooth: hci3: Opcode 0x1407 failed: -110
[  226.364525][   T55] Bluetooth: hci3: command 0x0c1a tx timeout
[  226.603940][   T55] Bluetooth: hci5: command 0x1003 tx timeout
[  226.604536][ T5636] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  227.552479][ T9774] vhci_hcd: connection reset by peer
[  227.577727][   T14] vhci_hcd vhci_hcd.0: stop threads
[  227.578413][   T14] vhci_hcd vhci_hcd.0: release socket
[  227.580719][   T14] vhci_hcd vhci_hcd.0: disconnect device
[  230.120019][ T5832] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  255.805105][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  255.805141][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  317.248158][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  317.248196][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  377.404607][   T35] INFO: task kworker/u8:5:91 blocked in I/O wait for more than 143 seconds.
[  377.404640][   T35]       Tainted: G             L      syzkaller #0
[  377.404647][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  377.404652][   T35] task:kworker/u8:5    state:D stack:22568 pid:91    tgid:91    ppid:2      task_flags:0x4248060 flags:0x00080000
[  377.404759][   T35] Workqueue: writeback wb_workfn (flush-8:0)
[  377.404891][   T35] Call Trace:
[  377.404895][   T35]  <TASK>
[  377.404903][   T35]  __schedule+0x17dd/0x5830
[  377.405000][   T35]  ? blk_mq_flush_plug_list+0x415/0x540
[  377.405090][   T35]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  377.405107][   T35]  ? __blk_flush_plug+0x416/0x4d0
[  377.405151][   T35]  ? __pfx___schedule+0x10/0x10
[  377.405173][   T35]  ? schedule+0x90/0x2b0
[  377.405191][   T35]  schedule+0x164/0x2b0
[  377.405209][   T35]  io_schedule+0x7f/0xd0
[  377.405221][   T35]  rq_qos_wait+0x266/0x360
[  377.405281][   T35]  ? __pfx_wbt_inflight_cb+0x10/0x10
[  377.405323][   T35]  ? __pfx_wbt_cleanup_cb+0x10/0x10
[  377.405336][   T35]  ? __pfx_rq_qos_wait+0x10/0x10
[  377.405351][   T35]  ? __pfx_rq_qos_wake_function+0x10/0x10
[  377.405366][   T35]  ? __pfx_wbt_inflight_cb+0x10/0x10
[  377.405386][   T35]  wbt_wait+0x326/0x550
[  377.405400][   T35]  ? __pfx_wbt_wait+0x10/0x10
[  377.405412][   T35]  ? __pfx_dd_bio_merge+0x10/0x10
[  377.405472][   T35]  ? __pfx_wbt_wait+0x10/0x10
[  377.405483][   T35]  __rq_qos_throttle+0x6b/0xb0
[  377.405498][   T35]  blk_mq_submit_bio+0x1697/0x2c40
[  377.405513][   T35]  ? blk_mq_submit_bio+0x490/0x2c40
[  377.405529][   T35]  ? __pfx_blk_mq_submit_bio+0x10/0x10
[  377.405540][   T35]  ? blk_cgroup_bio_start+0x5d7/0x670
[  377.405558][   T35]  ? __pfx_blk_cgroup_bio_start+0x10/0x10
[  377.405574][   T35]  ? __submit_bio+0x7e/0x340
[  377.405588][   T35]  submit_bio_noacct_nocheck+0x2fe/0xb10
[  377.405604][   T35]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  377.405627][   T35]  ext4_bio_write_folio+0x101a/0x18c0
[  377.405712][   T35]  mpage_process_page_bufs+0x6bd/0x8a0
[  377.405755][   T35]  mpage_prepare_extent_to_map+0xf8d/0x1880
[  377.405769][   T35]  ? process_scheduled_works+0xc3d/0x1630
[  377.405822][   T35]  ? __pfx_mpage_prepare_extent_to_map+0x10/0x10
[  377.405850][   T35]  ? kmem_cache_alloc_noprof+0x31a/0x600
[  377.405874][   T35]  ? ext4_init_io_end+0x29/0x130
[  377.405885][   T35]  ? kmem_cache_alloc_noprof+0x151/0x600
[  377.405898][   T35]  ? ext4_init_io_end+0x29/0x130
[  377.405916][   T35]  ext4_do_writepages+0xc08/0x44a0
[  377.405968][   T35]  ? kfree+0x1c7/0x650
[  377.405979][   T35]  ? ieee80211_inform_bss+0xc59/0x1150
[  377.406385][   T35]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  377.406408][   T35]  ? __pfx_ext4_do_writepages+0x10/0x10
[  377.406425][   T35]  ? __lock_acquire+0x747/0x2de0
[  377.406458][   T35]  ? trace_cfg80211_return_bss+0x7c/0x1f0
[  377.406532][   T35]  ? __lock_acquire+0x747/0x2de0
[  377.406552][   T35]  ? lock_acquire+0x115/0x350
[  377.406577][   T35]  ext4_writepages+0x1fe/0x4e0
[  377.406594][   T35]  ? __pfx_ext4_writepages+0x10/0x10
[  377.406616][   T35]  ? do_raw_spin_unlock+0xf5/0x200
[  377.406629][   T35]  ? __pfx_ext4_writepages+0x10/0x10
[  377.406644][   T35]  do_writepages+0x338/0x560
[  377.406673][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  377.406687][   T35]  ? reacquire_held_locks+0x117/0x1a0
[  377.406702][   T35]  ? writeback_sb_inodes+0x450/0x1af0
[  377.406721][   T35]  __writeback_single_inode+0x136/0x1220
[  377.406737][   T35]  ? do_raw_spin_unlock+0xf5/0x200
[  377.406751][   T35]  writeback_sb_inodes+0x9de/0x1af0
[  377.406780][   T35]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  377.406822][   T35]  ? __pfx_down_read_trylock+0x10/0x10
[  377.406841][   T35]  __writeback_inodes_wb+0x114/0x250
[  377.406861][   T35]  wb_writeback+0x42f/0xad0
[  377.406876][   T35]  ? queue_io+0x241/0x470
[  377.406908][   T35]  ? __pfx_wb_writeback+0x10/0x10
[  377.406919][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  377.406939][   T35]  wb_workfn+0xc92/0x10f0
[  377.406960][   T35]  ? __pfx_wb_workfn+0x10/0x10
[  377.406974][   T35]  ? trace_hrtimer_start+0x82/0x200
[  377.406999][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  377.407015][   T35]  ? lock_acquire+0x115/0x350
[  377.407032][   T35]  ? rcu_is_watching+0x16/0xb0
[  377.407053][   T35]  ? process_scheduled_works+0x97a/0x1630
[  377.407070][   T35]  process_scheduled_works+0xc3d/0x1630
[  377.407103][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  377.407122][   T35]  ? assign_work+0x3cf/0x5d0
[  377.407140][   T35]  worker_thread+0xa47/0xfb0
[  377.407165][   T35]  kthread+0x38b/0x480
[  377.407182][   T35]  ? __pfx_worker_thread+0x10/0x10
[  377.407191][   T35]  ? __pfx_kthread+0x10/0x10
[  377.407204][   T35]  ret_from_fork+0x514/0xb70
[  377.407232][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  377.407244][   T35]  ? __switch_to+0xc78/0x1410
[  377.407257][   T35]  ? __pfx_kthread+0x10/0x10
[  377.407270][   T35]  ret_from_fork_asm+0x1a/0x30
[  377.407301][   T35]  </TASK>
[  377.407366][   T35] INFO: task jbd2/sda1-8:4967 blocked in I/O wait for more than 143 seconds.
[  377.407377][   T35]       Tainted: G             L      syzkaller #0
[  377.407383][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  377.407388][   T35] task:jbd2/sda1-8     state:D stack:26280 pid:4967  tgid:4967  ppid:2      task_flags:0x240040 flags:0x00080000
[  377.407420][   T35] Call Trace:
[  377.407424][   T35]  <TASK>
[  377.407430][   T35]  __schedule+0x17dd/0x5830
[  377.407455][   T35]  ? percpu_ref_put_many+0x18e/0x240
[  377.407472][   T35]  ? blk_mq_dispatch_list+0xd2c/0xe10
[  377.407487][   T35]  ? __pfx___schedule+0x10/0x10
[  377.407509][   T35]  ? schedule+0x90/0x2b0
[  377.407526][   T35]  schedule+0x164/0x2b0
[  377.407543][   T35]  io_schedule+0x7f/0xd0
[  377.407554][   T35]  bit_wait_io+0x13/0x110
[  377.407580][   T35]  __wait_on_bit+0xac/0x300
[  377.407592][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  377.407610][   T35]  out_of_line_wait_on_bit+0x13b/0x190
[  377.407622][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  377.407632][   T35]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  377.407645][   T35]  ? __pfx_wake_bit_function+0x10/0x10
[  377.407664][   T35]  ? __wait_on_buffer+0xe/0x80
[  377.407709][   T35]  jbd2_journal_commit_transaction+0x2f6e/0x5c80
[  377.407774][   T35]  ? __pfx_jbd2_journal_commit_transaction+0x10/0x10
[  377.407796][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  377.407822][   T35]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  377.407881][   T35]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  377.407898][   T35]  ? __timer_delete_sync+0x4a7/0x520
[  377.407915][   T35]  kjournald2+0x3bc/0x740
[  377.407979][   T35]  ? __pfx_kjournald2+0x10/0x10
[  377.407992][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[  377.408009][   T35]  ? __kthread_parkme+0x71/0x1f0
[  377.408021][   T35]  ? __kthread_parkme+0x199/0x1f0
[  377.408035][   T35]  kthread+0x38b/0x480
[  377.408047][   T35]  ? __pfx_kjournald2+0x10/0x10
[  377.408059][   T35]  ? __pfx_kthread+0x10/0x10
[  377.408072][   T35]  ret_from_fork+0x514/0xb70
[  377.408086][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  377.408098][   T35]  ? __switch_to+0xc78/0x1410
[  377.408110][   T35]  ? __pfx_kthread+0x10/0x10
[  377.408123][   T35]  ret_from_fork_asm+0x1a/0x30
[  377.408143][   T35]  </TASK>
[  377.408156][   T35] INFO: task syz-executor:5622 blocked in I/O wait for more than 143 seconds.
[  377.408166][   T35]       Tainted: G             L      syzkaller #0
[  377.408171][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  377.408176][   T35] task:syz-executor    state:D stack:21736 pid:5622  tgid:5622  ppid:5621   task_flags:0x440100 flags:0x00080000
[  377.408205][   T35] Call Trace:
[  377.408208][   T35]  <TASK>
[  377.408215][   T35]  __schedule+0x17dd/0x5830
[  377.408238][   T35]  ? lock_acquire+0x115/0x350
[  377.408258][   T35]  ? __pfx___schedule+0x10/0x10
[  377.408279][   T35]  ? schedule+0x90/0x2b0
[  377.408301][   T35]  schedule+0x164/0x2b0
[  377.408317][   T35]  io_schedule+0x7f/0xd0
[  377.408329][   T35]  bit_wait_io+0x13/0x110
[  377.408341][   T35]  __wait_on_bit+0xac/0x300
[  377.408352][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  377.408365][   T35]  out_of_line_wait_on_bit+0x13b/0x190
[  377.408376][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  377.408387][   T35]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  377.408401][   T35]  ? __pfx_wake_bit_function+0x10/0x10
[  377.408422][   T35]  do_get_write_access+0x658/0x10c0
[  377.408470][   T35]  jbd2_journal_get_write_access+0x1d7/0x230
[  377.408488][   T35]  __ext4_journal_get_write_access+0xec/0x620
[  377.408528][   T35]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  377.408539][   T35]  ? trace_kmem_cache_alloc+0x29/0xe0
[  377.408552][   T35]  ? jbd2__journal_start+0x145/0x5d0
[  377.408571][   T35]  ext4_reserve_inode_write+0x294/0x360
[  377.408591][   T35]  __ext4_mark_inode_dirty+0x141/0x7e0
[  377.408614][   T35]  ext4_dirty_inode+0xd0/0x110
[  377.408627][   T35]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  377.408638][   T35]  __mark_inode_dirty+0x3a8/0x13b0
[  377.408654][   T35]  file_update_time_flags+0x399/0x440
[  377.408697][   T35]  ext4_page_mkwrite+0x21f/0x1470
[  377.408719][   T35]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  377.408731][   T35]  ? __lock_acquire+0x747/0x2de0
[  377.408749][   T35]  do_page_mkwrite+0x147/0x310
[  377.408771][   T35]  do_wp_page+0x1a77/0x4c30
[  377.408797][   T35]  ? __pfx_do_wp_page+0x10/0x10
[  377.408806][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  377.408818][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  377.408836][   T35]  handle_mm_fault+0x19c9/0x2f80
[  377.408854][   T35]  ? handle_mm_fault+0xee/0x2f80
[  377.408870][   T35]  ? __pfx_handle_mm_fault+0x10/0x10
[  377.408879][   T35]  ? lock_vma_under_rcu+0x45a/0x500
[  377.408899][   T35]  ? __pfx_set_user_sigmask+0x10/0x10
[  377.408932][   T35]  do_user_addr_fault+0xb35/0x1480
[  377.408957][   T35]  ? trace_page_fault_user+0x84/0x1e0
[  377.408971][   T35]  exc_page_fault+0x6a/0xc0
[  377.408983][   T35]  asm_exc_page_fault+0x26/0x30
[  377.409009][   T35] RIP: 0033:0x7efe42c7df91
[  377.409020][   T35] RSP: 002b:00007ffe405b5150 EFLAGS: 00010202
[  377.409030][   T35] RAX: 0000000000000040 RBX: 0000000000000001 RCX: 0000000000000006
[  377.409037][   T35] RDX: 00007efe40d40000 RSI: 00000000000037be RDI: ffffffff813fffff
[  377.409044][   T35] RBP: 00007ffe405b5650 R08: 0000000000001000 R09: 0000555555cb6480
[  377.409051][   T35] R10: 00000000000000a3 R11: 0000555555cb6498 R12: 00007ffe405b5490
[  377.409059][   T35] R13: 00007ffe405b5280 R14: 585858582e7a7973 R15: 00007ffe405b51d0
[  377.409072][   T35]  ? kvm_vcpu_ioctl+0x5cf/0xfd0
[  377.409093][   T35]  </TASK>
[  377.409127][   T35] INFO: task syz.1.1480:9777 blocked in I/O wait for more than 143 seconds.
[  377.409136][   T35]       Tainted: G             L      syzkaller #0
[  377.409142][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  377.409147][   T35] task:syz.1.1480      state:D stack:24616 pid:9777  tgid:9777  ppid:5637   task_flags:0x440040 flags:0x00080002
[  377.409175][   T35] Call Trace:
[  377.409178][   T35]  <TASK>
[  377.409185][   T35]  __schedule+0x17dd/0x5830
[  377.409209][   T35]  ? lock_acquire+0x115/0x350
[  377.409228][   T35]  ? __pfx___schedule+0x10/0x10
[  377.409249][   T35]  ? schedule+0x90/0x2b0
[  377.409267][   T35]  schedule+0x164/0x2b0
[  377.409284][   T35]  io_schedule+0x7f/0xd0
[  377.409295][   T35]  bit_wait_io+0x13/0x110
[  377.409307][   T35]  __wait_on_bit+0xac/0x300
[  377.409317][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  377.409330][   T35]  out_of_line_wait_on_bit+0x13b/0x190
[  377.409342][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  377.409352][   T35]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  377.409365][   T35]  ? __pfx_wake_bit_function+0x10/0x10
[  377.409387][   T35]  do_get_write_access+0x658/0x10c0
[  377.409412][   T35]  jbd2_journal_get_write_access+0x1d7/0x230
[  377.409429][   T35]  __ext4_journal_get_write_access+0xec/0x620
[  377.409445][   T35]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  377.409456][   T35]  ? trace_kmem_cache_alloc+0x29/0xe0
[  377.409468][   T35]  ? jbd2__journal_start+0x145/0x5d0
[  377.409487][   T35]  ext4_reserve_inode_write+0x294/0x360
[  377.409504][   T35]  __ext4_mark_inode_dirty+0x141/0x7e0
[  377.409525][   T35]  ext4_dirty_inode+0xd0/0x110
[  377.409537][   T35]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  377.409548][   T35]  __mark_inode_dirty+0x3a8/0x13b0
[  377.409563][   T35]  file_update_time_flags+0x399/0x440
[  377.409576][   T35]  ext4_page_mkwrite+0x21f/0x1470
[  377.409594][   T35]  ? __pfx_filemap_fault+0x10/0x10
[  377.409609][   T35]  ? ktime_get+0x45/0x220
[  377.409624][   T35]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  377.409642][   T35]  do_page_mkwrite+0x147/0x310
[  377.409658][   T35]  do_pte_missing+0x70f/0x3570
[  377.409677][   T35]  ? handle_mm_fault+0xee/0x2f80
[  377.409690][   T35]  handle_mm_fault+0x1807/0x2f80
[  377.409707][   T35]  ? handle_mm_fault+0xee/0x2f80
[  377.409723][   T35]  ? __pfx_handle_mm_fault+0x10/0x10
[  377.409732][   T35]  ? lock_vma_under_rcu+0x45a/0x500
[  377.409757][   T35]  do_user_addr_fault+0xb35/0x1480
[  377.409776][   T35]  ? trace_page_fault_user+0x84/0x1e0
[  377.409795][   T35]  exc_page_fault+0x6a/0xc0
[  377.409807][   T35]  asm_exc_page_fault+0x26/0x30
[  377.409817][   T35] RIP: 0033:0x7fbf13c740b1
[  377.409826][   T35] RSP: 002b:00007ffdf9fce2e0 EFLAGS: 00010202
[  377.409834][   T35] RAX: 0000001b34f1d000 RBX: ffffffff8a3c7132 RCX: 0000001b34f1cff8
[  377.409842][   T35] RDX: 0000001b34924220 RSI: 0000000000000008 RDI: 00007fbf14b55720
[  377.409849][   T35] RBP: 00000000000000f2 R08: 00007fbf14010000 R09: 00007fbf14012000
[  377.409856][   T35] R10: 000000008a3c7136 R11: 0000000000000001 R12: 00007fbf14026038
[  377.409863][   T35] R13: 00000000000002a9 R14: ffffffff8a3c7a75 R15: 00007fbf14b55720
[  377.409870][   T35]  ? xt_percpu_counter_alloc+0x165/0x1e0
[  377.409960][   T35]  ? xt_unregister_template+0x112/0x230
[  377.409980][   T35]  </TASK>
[  377.409985][   T35] INFO: task syz.4.1481:9782 blocked in I/O wait for more than 143 seconds.
[  377.409994][   T35]       Tainted: G             L      syzkaller #0
[  377.410000][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  377.410004][   T35] task:syz.4.1481      state:D stack:26696 pid:9782  tgid:9782  ppid:5645   task_flags:0x440040 flags:0x00080002
[  377.410034][   T35] Call Trace:
[  377.410037][   T35]  <TASK>
[  377.410043][   T35]  __schedule+0x17dd/0x5830
[  377.410066][   T35]  ? __lock_acquire+0x747/0x2de0
[  377.410086][   T35]  ? __pfx___schedule+0x10/0x10
[  377.410107][   T35]  ? schedule+0x90/0x2b0
[  377.410125][   T35]  schedule+0x164/0x2b0
[  377.410142][   T35]  io_schedule+0x7f/0xd0
[  377.410153][   T35]  bit_wait_io+0x13/0x110
[  377.410165][   T35]  __wait_on_bit+0xac/0x300
[  377.410175][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  377.410188][   T35]  out_of_line_wait_on_bit+0x13b/0x190
[  377.410200][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  377.410210][   T35]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  377.410223][   T35]  ? __pfx_wake_bit_function+0x10/0x10
[  377.410244][   T35]  do_get_write_access+0x658/0x10c0
[  377.410269][   T35]  jbd2_journal_get_write_access+0x1d7/0x230
[  377.410287][   T35]  __ext4_journal_get_write_access+0xec/0x620
[  377.410303][   T35]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  377.410320][   T35]  ext4_reserve_inode_write+0x294/0x360
[  377.410337][   T35]  __ext4_mark_inode_dirty+0x141/0x7e0
[  377.410358][   T35]  ext4_dirty_inode+0xd0/0x110
[  377.410370][   T35]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  377.410382][   T35]  __mark_inode_dirty+0x3a8/0x13b0
[  377.410393][   T35]  ? mnt_get_write_access+0x216/0x280
[  377.410429][   T35]  ? ext4_file_mmap_prepare+0x277/0x450
[  377.410446][   T35]  touch_atime+0x568/0x670
[  377.410462][   T35]  ? ext4_file_mmap_prepare+0x277/0x450
[  377.410481][   T35]  ext4_file_mmap_prepare+0x277/0x450
[  377.410500][   T35]  mmap_region+0x1191/0x2820
[  377.410514][   T35]  ? lock_acquire+0x115/0x350
[  377.410535][   T35]  ? __pfx_mmap_region+0x10/0x10
[  377.410544][   T35]  ? __page_table_check_zero+0x6c/0x430
[  377.410582][   T35]  ? __page_table_check_zero+0x3c3/0x430
[  377.410592][   T35]  ? __page_table_check_zero+0x6c/0x430
[  377.410606][   T35]  ? post_alloc_hook+0x208/0x250
[  377.410675][   T35]  ? mt_find+0x186/0x630
[  377.410718][   T35]  ? mt_find+0x5ff/0x630
[  377.410732][   T35]  ? mt_find+0x186/0x630
[  377.410745][   T35]  ? __pfx_mt_find+0x10/0x10
[  377.410761][   T35]  ? bpf_lsm_mmap_addr+0x9/0x50
[  377.410777][   T35]  ? security_mmap_addr+0x71/0x240
[  377.410851][   T35]  ? memfd_check_seals_mmap+0x8e/0x1f0
[  377.410905][   T35]  do_mmap+0xe0a/0x1300
[  377.410922][   T35]  ? __pfx_do_mmap+0x10/0x10
[  377.410939][   T35]  ? vm_mmap_pgoff+0x1ed/0x520
[  377.410952][   T35]  ? down_write_killable+0x179/0x230
[  377.410965][   T35]  ? lock_acquire+0x115/0x350
[  377.410978][   T35]  ? __pfx_down_write_killable+0x10/0x10
[  377.410991][   T35]  ? apparmor_mmap_file+0x2e7/0x390
[  377.411032][   T35]  vm_mmap_pgoff+0x27a/0x520
[  377.411051][   T35]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  377.411065][   T35]  ? __fget_files+0x2a/0x420
[  377.411082][   T35]  ? __fget_files+0x3a2/0x420
[  377.411095][   T35]  ? __fget_files+0x2a/0x420
[  377.411111][   T35]  ksys_mmap_pgoff+0x4dc/0x760
[  377.411126][   T35]  do_syscall_64+0x166/0x520
[  377.411138][   T35]  ? trace_irq_disable+0x3b/0x140
[  377.411161][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.411172][   T35]  ? clear_bhb_loop+0x70/0xc0
[  377.411185][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.411196][   T35] RIP: 0033:0x7f1a1f59f882
[  377.411205][   T35] RSP: 002b:00007ffd08f04b58 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  377.411216][   T35] RAX: ffffffffffffffda RBX: 0000001b2cc64000 RCX: 00007f1a1f59f882
[  377.411224][   T35] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b2cc64000
[  377.411231][   T35] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  377.411237][   T35] R10: 0000000000100001 R11: 0000000000000206 R12: 000000000000012a
[  377.411244][   T35] R13: 00000000000927c0 R14: 0000000000036e21 R15: 00007ffd08f04e30
[  377.411261][   T35]  </TASK>
[  377.411272][   T35] 
[  377.411272][   T35] Showing all locks held in the system:
[  377.411280][   T35] locks held by khungtaskd/35: 1, last CPU#0:
[  377.411288][   T35]  #0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  377.411332][   T35] locks held by kworker/u8:5/91: 4, on CPU#0:
[  377.411339][   T35]  #0: ffff888021e95148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  377.411370][   T35]  #1: ffffc9000207fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  377.411399][   T35]  #2: ffff88803502e100 (&type->s_umount_key#35){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0
[  377.411453][   T35]  #3: ffff88803791ccd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0
[  377.411506][   T35] locks held by getty/5390: 2, on CPU#1:
[  377.411515][   T35]  #0: ffff8880357090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  377.411600][   T35]  #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  377.411627][   T35] locks held by syz-executor/5622: 3, on CPU#0:
[  377.411634][   T35]  #0: ffff88807b50b808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  377.411658][   T35]  #1: ffff88803502e570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  377.411684][   T35]  #2: ffff88803502c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  377.411720][   T35] locks held by syz.1.1480/9777: 3, on CPU#0:
[  377.411727][   T35]  #0: ffff88802d7b4e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  377.411751][   T35]  #1: ffff88803502e570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  377.411777][   T35]  #2: ffff88803502c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  377.411810][   T35] locks held by syz.4.1481/9782: 3, on CPU#0:
[  377.411817][   T35]  #0: ffff88807cb13440 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520
[  377.411843][   T35]  #1: ffff88803502e478 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  377.411891][   T35]  #2: ffff88803502c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  377.411919][   T35] 
[  377.411922][   T35] =============================================
[  377.411922][   T35] 
[  377.411933][   T35] NMI backtrace for cpu 0
[  377.411943][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  377.411957][   T35] Tainted: [L]=SOFTLOCKUP
[  377.411961][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  377.411967][   T35] Call Trace:
[  377.411971][   T35]  <TASK>
[  377.411975][   T35]  dump_stack_lvl+0xe8/0x150
[  377.411992][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  377.412008][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  377.412028][   T35]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  377.412044][   T35]  sys_info+0x135/0x170
[  377.412079][   T35]  watchdog+0x1073/0x10f0
[  377.412106][   T35]  ? watchdog+0x209/0x10f0
[  377.412123][   T35]  kthread+0x38b/0x480
[  377.412135][   T35]  ? __pfx_watchdog+0x10/0x10
[  377.412147][   T35]  ? __pfx_kthread+0x10/0x10
[  377.412160][   T35]  ret_from_fork+0x514/0xb70
[  377.412173][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  377.412185][   T35]  ? __switch_to+0xc78/0x1410
[  377.412196][   T35]  ? __pfx_kthread+0x10/0x10
[  377.412208][   T35]  ret_from_fork_asm+0x1a/0x30
[  377.412227][   T35]  </TASK>
[  377.412238][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  379.437869][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  379.448546][   T35] Tainted: [L]=SOFTLOCKUP
[  379.452865][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  379.462900][   T35] Call Trace:
[  379.466168][   T35]  <TASK>
[  379.469104][   T35]  vpanic+0x26f/0x710
[  379.473072][   T35]  panic+0xc5/0xd0
[  379.476792][   T35]  ? __pfx_panic+0x10/0x10
[  379.481231][   T35]  ? nmi_cpu_backtrace+0x2b0/0x2d0
[  379.486356][   T35]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  379.492536][   T35]  watchdog+0x10e7/0x10f0
[  379.496866][   T35]  ? watchdog+0x209/0x10f0
[  379.501279][   T35]  kthread+0x38b/0x480
[  379.505355][   T35]  ? __pfx_watchdog+0x10/0x10
[  379.510049][   T35]  ? __pfx_kthread+0x10/0x10
[  379.514681][   T35]  ret_from_fork+0x514/0xb70
[  379.519275][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  379.524461][   T35]  ? __switch_to+0xc78/0x1410
[  379.529121][   T35]  ? __pfx_kthread+0x10/0x10
[  379.533693][   T35]  ret_from_fork_asm+0x1a/0x30
[  379.538484][   T35]  </TASK>
[  379.541574][   T35] Kernel Offset: disabled
[  379.545916][   T35] Rebooting in 86400 seconds..