last executing test programs:

53.915594754s ago: executing program 0 (id=317):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})

53.70179589s ago: executing program 0 (id=319):
r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000000100)})
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f0000000240)=""/69, 0x45, 0x0)

53.561064027s ago: executing program 0 (id=321):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2b20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

53.337902711s ago: executing program 0 (id=323):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]})

50.8252s ago: executing program 0 (id=332):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[<r1=>0x0]})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000400)=[r1], 0x0, 0x0, 0x0, 0x0, 0x2fd})

48.405978813s ago: executing program 0 (id=349):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000)

47.871291897s ago: executing program 32 (id=349):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000)

7.123012915s ago: executing program 5 (id=608):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000240)={r2, 0x3, 0x982, 0x1, &(0x7f00000002c0)=[{0x9, 0x7, 0x4, 0x1}]})

6.870066067s ago: executing program 5 (id=610):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x35, "3eccd8000000000000000010000000040100"})

6.593261874s ago: executing program 1 (id=613):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x0, 0x87, 0xffffffff, 0x2})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, r1, 0x1, 0x0, 0x30000, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

6.590765086s ago: executing program 5 (id=614):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0)

6.301844138s ago: executing program 1 (id=616):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0xf9, 0x3, &(0x7f0000000040)={0x19, "78b8142115db2c054906d8cf007efb564aaae98e0100000014000c00"}})

6.269448404s ago: executing program 5 (id=617):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@gquota}, {@nolargeio}, {@prjquota}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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")
capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x0, 0x7, 0x9})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xd296895ede2f911a)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffd})

5.049086281s ago: executing program 3 (id=625):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.601843907s ago: executing program 3 (id=628):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x6, &(0x7f0000000680)=<r1=>0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, r0, 0x0}])

4.314892019s ago: executing program 3 (id=630):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x450, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRES64], 0x2, 0x5582, &(0x7f0000004700)="$eJzs3EtvG1UUAOBrO30/iBALdh2pQiRSbdVpUsEuQCseIlXEY8GqOLZjubU9Uew4ISsELBEL/gkCiRUSG34DC9bsEAsQO6SgeaQQ0hYiO3HSfp80PjN3rs/cM7JaHU/kADy1pqM/fiuEy+FcCKEUQrhYCOl+Id9Si1l4PoRwJYRQ/MdWyMcfDJwOIZwPIVxOkofwfT+bk5z68trw6sKvb/3+3Y9npi589e1Pk6samLQXQgjdtWx/s5vFuJXFe/l4bdhOY3d+mMfsRPd+fhxncbO5kmbYrO3Oq6XxRiubH69t9JO42qnVk9hqr6bja73sgv1hazdP+oZ7tfX0uNFcSWO7H6extZ2ta2s7+/dyuz/I8jTyfB+l6cNgsBuz8eZWM6tn7X4a671BPp7ljRvNrSQO85hfLtTjTiNdx8ood/p4e7vd29iKhs31fjvuRQuV6kuV6s1ydT1uNAfN+XKt27g5H820Osm08ot3a93FVhy3Os1KPe7ORjOter1crUYzt5or7VovqlYrNyrXywuz+d616PU770edRjSTxFfbvY3T7U4/Wo3Xo+wds9Fc5cbLs9HVavTu0nK0/M7t20vL79299cGdV5befC2ftG9Z0czc9bm5cvV6ea46e4T1D5oPrz/5f/d/1j8Ypf7P8kUfoP7CaLcHHs8HDODA9vX/Ybz9fyno/4H9Tmz/v7Ozs5PXMLb+P2mpHtv/nx3lVh9rB+p/i4/ofw/Q/4/U/x7X/v8E1w8j0f8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy1fj719RvpznR2fCEfv5QPPZsfF0IIxRDCzkOUwuk9OUt5nlOPmH/qX2v4oRDSDMk1zuTb+RDCYr79+cxh3wUAAAB4cn3z8ZUvsm49e5me9II4StnXMMWLH44pXyHJOf3LmLIVk5fnxpQs/XxPha0xZUvv3NkxJcu+cpsKIXxyZlwp/0tpN3x66e/BtKBCFopHtRIAAODolPaEqYmuBQAAgMP0+aQXwGQUwoOHwLt/wJ8/gMwfbZ7bcw4AAAA4gQqTXgAAAABw6NL+3+//AQAAwJMt+/0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Yud+btQGojgAPxsM5J+CotzTSm5QRkrIMUeggDRBCaSFNEAN5JZ7LhGssEdI3gVptYzXAn2fZJux0W9mgMsbCwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB06U+1mf9afPkZi+ty9ofr5JoPAAAA8NSu2szrF9Om/S6d/5BOfUrtIiLKiDhXuw9i1MocpJzqwvurR2P4HVEnHPsYp+1tRHxN2/+PXX8KAAAAcL+2q/Wsqdab3bTvAfGamkWb8v23THlFRFTTv5nSyuPuc6aw+vc9jB+Z0uoFrEmmsGbJbXj+2ihXJ22D1iHNZLKsv8S6VXbTLwAA0Kd2JXChCgEAAOAOfO97APSjOO1O9xnHzSHdEHzTagEAAAA3qOh7AAAAAEDn6vr/Fp7/98/fEgAAAODFmuf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KVdtZlvV+vZpevLZ+bsD9fJNyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAf25x4FQBiMAein+LtJ739TByWiY1en96AQEkopAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQM/wnhq/8DRHVU1pE+bUraqWTAlrpoQtc8KeC63zyHn9+SUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICb/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GN+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnfvnbaMMAwD++Oxz/wAiBJQhgIrEAAtN3NLSEQZQxMBHQIpSp4S6FNoMNIpAWWBCmbsgGBFCAoWt36FzI3UpW4cMQWIG3fkuubYuNYXcueT3k16/j32Xe5/3fIny5D0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDSzjvxUlLE7exhahiXr93aXV/K+u37+syNzduzWcvi1qMG+vrt/z75yfZy9cmJmcqTL+tPBgAAgMOhXdb3EXEn3VrI+mQqr//Tcp+s5v/umWFc1vP31/3bu+tHi02zZf3/6y93X9gbaGo4TnbQ5ZVBf/7BVDoHNMWJ9+wj9+jkZz7/20s7f0OS9zee30nz89n65ubNd7t5eKSObAGAx3Gy7LPg6P7vQ1nfazg3AA6HTqXwLuv/9lSzOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUYWcjnirjVkTMdvbjzPbu+tKo/sbm7dmynb1+fbN6zOwQaUQsrwz6aY1zmXRXr61dXBwM+ldGBhEP3fTvgxMRcTBHfkgQIzZ9OMaXR/z9PsXlGfXMYu3iYmf8nVv1nd6JDZLi/Sle6dZ71R1skF17x8b6Xv6nQUM/kAAA+N9Ki5bV9XfSrYXstdZ0xJ/f31v/v1aJY8z6/+5HZ29Vx6rW/73aZjj55lYvfTp39draGyuXFi/0L/Q/efNU763e6XNnzpyby87V/NxyJP35ptMEAADgCdYtWrX+T6YfXP8/XoljzPr/s297X1THaqv/R9pf9Gs6EwAAgMOouxc998ofv7dG7NHqduPzxdXVK73h497zU8PHWtN9TEeKVq3/29NNZwUAAADUYWejdc/6//lKHGOu/z/9w4s/VY/ZHn5O9nJE9E8uXR6cr286E62ODyrnA3WbnikAAABNOVa06vp/mt//n+zd8pBExOuvDuPy/6yNU/+33/vqx+pY1fv/T9c3xYmUzAzPR97PRHRmms4IAACAJ9G4S71Hi5YV+7+lWwsf/3z8g677/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq9lcAAAD//+NqOL0=")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x2)

4.185850755s ago: executing program 5 (id=631):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5513, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
fallocate(r0, 0x20, 0x4000, 0x1004000)

3.160927278s ago: executing program 1 (id=636):
r0 = socket(0x10, 0x803, 0x0)
bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)

2.879892459s ago: executing program 1 (id=638):
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000100)={0x120, @tick, 0x0, {}, 0x3f})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x80100, 0x9, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000680), 0xf6df, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f0000000540)="9c", &(0x7f0000000080)=""/64}, 0x20)

2.343808452s ago: executing program 3 (id=643):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x24, &(0x7f0000001a00), &(0x7f0000001a40)=0x4)

2.251357348s ago: executing program 1 (id=645):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x8002)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

1.99161012s ago: executing program 1 (id=648):
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000)

1.766008034s ago: executing program 2 (id=649):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000007640), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x40084149, &(0x7f0000000000))

1.688455351s ago: executing program 4 (id=650):
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x139, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})

1.681344647s ago: executing program 5 (id=651):
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})

1.618667665s ago: executing program 2 (id=652):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0xd, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000740)=r0}, 0x22)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f0000000180), 0x0}, 0x20)

1.071033782s ago: executing program 2 (id=653):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120)
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)
write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4)

975.620999ms ago: executing program 4 (id=654):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})

790.745743ms ago: executing program 4 (id=655):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d04, 0xec000000, 0x8001}]})

594.165353ms ago: executing program 3 (id=656):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

473.700756ms ago: executing program 4 (id=657):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0xff, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

459.735838ms ago: executing program 3 (id=658):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={r1, @in={{0x2, 0x4e20, @empty}}, 0xff, 0xffff}, 0x90)

455.987877ms ago: executing program 2 (id=659):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000002c0)="e4", 0x1, 0x40, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @private1, 0x2}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x10, 0x20, 0x10000000000000}, &(0x7f0000000c40)=0x18)

284.836948ms ago: executing program 2 (id=660):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setown(r0, 0x8, r1)
fcntl$getownex(r0, 0x10, 0x0)

275.38163ms ago: executing program 4 (id=661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000)

82.418612ms ago: executing program 4 (id=662):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000280)={@multicast, @empty, @val={@val={0x88a8, 0x6, 0x1, 0x2}, {0x8100, 0x0, 0x0, 0x2}}, {@mpls_uc={0x8847, {[], @ipv4=@generic={{0x5, 0x4, 0x1, 0x36, 0x14, 0x68, 0x0, 0xff, 0x67, 0x0, @local, @private=0xa010100}}}}}}, 0x0)

0s ago: executing program 2 (id=663):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syzkaller1\x00', &(0x7f0000000500)=@ethtool_drvinfo={0x3, "92cab384a2fb8aed90b5456a9db0ba0d91e38e3e2306438e12c748c556c89fc6", "6683ca6bc78cb9e193e2dc66775b88757df627508cc55dd633647ed455d2c8c9", "9068d86269f6c89ca8015fe185f6fa8cc7230dde9537677a72c987c5e707b03f", "f10ffdc284b3ac6399ca3c1c857011c6ebc17a9d43c46a45554ac608a7ee6870", "e6c9c7193ce5aa2f7dfce3fd5037dd5f18314f818b24eb4ab2a7b1b5b8ddd2b2", "e95c11e5a9f94e95051d9573", 0x3, 0x9, 0x8, 0x3, 0x433}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

kernel console output (not intermixed with test programs):

s=4294967295 subj=unconfined pid=6213 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fcfe1b9c819 code=0x7ffc0000
[  102.672355][   T30] audit: type=1326 audit(1774887186.555:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe1b9c819 code=0x7ffc0000
[  102.733502][ T6198] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  102.740913][   T30] audit: type=1326 audit(1774887186.555:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe1b9c819 code=0x7ffc0000
[  102.842002][   T30] audit: type=1326 audit(1774887186.555:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fcfe1b9c819 code=0x7ffc0000
[  102.885858][   T30] audit: type=1326 audit(1774887186.555:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe1b9c819 code=0x7ffc0000
[  103.399884][ T5842] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  103.428968][ T5842] asix 2-1:0.188: probe with driver asix failed with error -71
[  103.495552][ T5842] usb 2-1: USB disconnect, device number 2
[  103.790753][ T6251] loop3: detected capacity change from 0 to 512
[  103.796499][ T6254] tipc: Started in network mode
[  103.803523][ T6254] tipc: Node identity ac14140f, cluster identity 4711
[  103.811606][ T6251] =======================================================
[  103.811606][ T6251] WARNING: The mand mount option has been deprecated and
[  103.811606][ T6251]          and is ignored by this kernel. Remove the mand
[  103.811606][ T6251]          option from the mount to silence this warning.
[  103.811606][ T6251] =======================================================
[  103.819310][ T6254] tipc: New replicast peer: 255.255.255.255
[  103.890968][ T6254] tipc: Enabled bearer <udp:syz2>, priority 10
[  103.897571][ T6251] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  104.248193][ T6262] loop2: detected capacity change from 0 to 2048
[  104.323660][ T6262] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  104.362752][ T6262] UDF-fs: Scanning with blocksize 512 failed
[  104.458780][ T6262] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.002346][ T5842] tipc: Node number set to 2886997007
[  105.239021][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.133'.
[  105.271406][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.133'.
[  105.320558][ T6288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.133'.
[  105.350021][ T6288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.133'.
[  105.382565][ T6292] loop0: detected capacity change from 0 to 256
[  105.471557][ T6295] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  105.793809][ T6306] loop0: detected capacity change from 0 to 512
[  105.803110][ T6306] EXT4-fs: Ignoring removed nomblk_io_submit option
[  105.821857][ T6306] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  105.920332][ T6306] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #11: comm syz.0.141: iget: bad extended attribute block 3153
[  106.022086][ T6310] loop3: detected capacity change from 0 to 2048
[  106.033421][ T6306] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  106.037182][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  106.054488][    C1] EXT4-fs (loop0): initial error at time 1774887190: ext4_orphan_get:1397: inode 11
[  106.063976][    C1] EXT4-fs (loop0): last error at time 1774887190: ext4_orphan_get:1397: inode 11
[  106.079902][ T6306] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.141: couldn't read orphan inode 11 (err -117)
[  106.111844][ T6306] loop0: lost filesystem error report for type 5 error -117
[  106.118869][ T6310] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  106.150131][ T6306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.356720][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.395625][ T6319] loop4: detected capacity change from 0 to 512
[  106.396781][ T5863] udevd[5863]: incorrect nilfs2 checksum on /dev/loop3
[  106.415850][ T6320] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  106.458834][ T6319] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.148: invalid indirect mapped block 4294967295 (level 0)
[  106.492168][ T6319] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  106.497177][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  106.512887][    C0] EXT4-fs (loop4): initial error at time 1774887190: ext4_free_branches:1023: inode 16
[  106.522627][    C0] EXT4-fs (loop4): last error at time 1774887190: ext4_free_branches:1023: inode 16
[  106.534592][ T6319] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.148: invalid indirect mapped block 4294967295 (level 1)
[  106.548802][ T6319] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  106.556303][ T6319] EXT4-fs (loop4): 1 orphan inode deleted
[  106.574768][ T6319] EXT4-fs (loop4): 1 truncate cleaned up
[  106.582649][ T6319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.773285][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.751124][ T6346] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.859105][ T6354] netlink: 44 bytes leftover after parsing attributes in process `syz.1.162'.
[  107.990708][ T6346] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.205599][ T6346] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.370986][ T6371] loop1: detected capacity change from 0 to 64
[  108.436213][ T6369] loop4: detected capacity change from 0 to 4096
[  108.453767][ T6346] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.503054][ T6369] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  108.551284][ T6369] ntfs3(loop4): ino=b, mi_enum_attr
[  108.575490][ T6369] ntfs3(loop4): Failed to load $Extend (-22).
[  108.597981][ T6369] ntfs3(loop4): Failed to initialize $Extend.
[  108.784283][ T6378] kvm: kvm [6377]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff
[  108.976796][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.033940][   T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.080446][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.188482][   T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.681709][ T6396] loop3: detected capacity change from 0 to 4096
[  109.732970][ T6396] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  109.910254][ T6396] ntfs3(loop3): Failed to load $Extend (-22).
[  109.945732][ T6396] ntfs3(loop3): Failed to initialize $Extend.
[  110.179977][ T6382] loop1: detected capacity change from 0 to 40427
[  110.236930][ T6390] loop2: detected capacity change from 0 to 40427
[  110.283107][ T6390] F2FS-fs (loop2): build fault injection rate: 771
[  110.284589][ T6382] F2FS-fs (loop1): build fault injection rate: 174
[  110.321681][ T6390] F2FS-fs (loop2): invalid crc value
[  110.341391][ T6382] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  110.372488][ T6382] F2FS-fs (loop1): invalid crc value
[  110.555510][ T6398] loop4: detected capacity change from 0 to 32768
[  110.765669][ T6398] JBD2: Ignoring recovery information on journal
[  110.780584][ T6390] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  110.797405][ T6382] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  110.807754][ T6390] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  110.858635][ T6382] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  110.921510][ T6398] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  110.941314][ T5844] syz-executor: attempt to access beyond end of device
[  110.941314][ T5844] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  110.994830][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  110.994864][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  110.994877][ T5844] Call Trace:
[  110.994886][ T5844]  <TASK>
[  110.994895][ T5844]  dump_stack_lvl+0xe8/0x150
[  110.994938][ T5844]  f2fs_stop_checkpoint+0x3c7/0x590
[  110.994977][ T5844]  f2fs_write_end_io+0x12e5/0x17a0
[  110.995029][ T5844]  __submit_merged_bio+0x256/0x6a0
[  110.995069][ T5844]  __submit_merged_write_cond+0x3c9/0x4e0
[  110.995121][ T5844]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  110.995179][ T5844]  f2fs_write_data_pages+0x287e/0x34f0
[  110.995199][ T5844]  ? unwind_next_frame+0xa6/0x2550
[  110.995263][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  110.995283][ T5844]  ? is_bpf_text_address+0x26/0x2b0
[  110.995328][ T5844]  ? arch_stack_walk+0xfb/0x150
[  110.995389][ T5844]  ? add_lock_to_list+0xc7/0x100
[  110.995415][ T5844]  ? lockdep_unlock+0x5d/0xd0
[  110.995441][ T5844]  ? __lock_acquire+0x146e/0x2cf0
[  110.995509][ T5844]  ? do_raw_spin_lock+0x12b/0x2f0
[  110.995550][ T5844]  ? do_raw_spin_unlock+0xf5/0x210
[  110.995575][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  110.995598][ T5844]  do_writepages+0x32e/0x550
[  110.995639][ T5844]  ? do_raw_spin_unlock+0xf5/0x210
[  110.995669][ T5844]  filemap_fdatawrite+0x1e9/0x2f0
[  110.995699][ T5844]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  110.995785][ T5844]  ? do_raw_spin_unlock+0xf5/0x210
[  110.995817][ T5844]  f2fs_sync_dirty_inodes+0x30e/0x830
[  110.995862][ T5844]  f2fs_write_checkpoint+0x9df/0x26a0
[  110.995883][ T5844]  ? lockdep_hardirqs_on+0x7a/0x110
[  110.995959][ T5844]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  110.996036][ T5844]  ? kfree+0x1c5/0x640
[  110.996064][ T5844]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  110.996109][ T5844]  kill_f2fs_super+0x314/0x730
[  110.996138][ T5844]  ? __pfx_kill_f2fs_super+0x10/0x10
[  110.996173][ T5844]  ? lockdep_hardirqs_on+0x7a/0x110
[  110.996214][ T5844]  deactivate_locked_super+0xbc/0x130
[  110.996247][ T5844]  cleanup_mnt+0x437/0x4d0
[  110.996266][ T5844]  ? _raw_spin_unlock_irq+0x23/0x50
[  110.996293][ T5844]  task_work_run+0x1d9/0x270
[  110.996323][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  110.996357][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.996375][ T5844]  exit_to_user_mode_loop+0xed/0x480
[  110.996397][ T5844]  ? rcu_is_watching+0x15/0xb0
[  110.996419][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.996441][ T5844]  do_syscall_64+0x33e/0xf80
[  110.996465][ T5844]  ? trace_irq_disable+0x3b/0x140
[  110.996489][ T5844]  ? clear_bhb_loop+0x40/0x90
[  110.996512][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.996531][ T5844] RIP: 0033:0x7f5ac199da57
[  110.996551][ T5844] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  110.996567][ T5844] RSP: 002b:00007ffe32ebac18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  110.996589][ T5844] RAX: 0000000000000000 RBX: 00007f5ac1a32048 RCX: 00007f5ac199da57
[  110.996601][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe32ebacd0
[  110.996613][ T5844] RBP: 00007ffe32ebacd0 R08: 00007ffe32ebbcd0 R09: 00000000ffffffff
[  110.996625][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe32ebbd60
[  110.996637][ T5844] R13: 00007f5ac1a32048 R14: 000000000001b0eb R15: 00007ffe32ebbda0
[  110.996674][ T5844]  </TASK>
[  111.335389][ T5844] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  111.342595][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  111.342623][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  111.342635][ T5844] Call Trace:
[  111.342643][ T5844]  <TASK>
[  111.342652][ T5844]  dump_stack_lvl+0xe8/0x150
[  111.342691][ T5844]  f2fs_stop_checkpoint+0x3c7/0x590
[  111.342730][ T5844]  f2fs_write_end_io+0x12e5/0x17a0
[  111.342778][ T5844]  __submit_merged_bio+0x256/0x6a0
[  111.342817][ T5844]  __submit_merged_write_cond+0x3c9/0x4e0
[  111.342857][ T5844]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  111.342915][ T5844]  f2fs_write_data_pages+0x287e/0x34f0
[  111.342936][ T5844]  ? unwind_next_frame+0xa6/0x2550
[  111.343000][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  111.343018][ T5844]  ? is_bpf_text_address+0x26/0x2b0
[  111.343059][ T5844]  ? arch_stack_walk+0xfb/0x150
[  111.343123][ T5844]  ? add_lock_to_list+0xc7/0x100
[  111.343147][ T5844]  ? lockdep_unlock+0x5d/0xd0
[  111.343171][ T5844]  ? __lock_acquire+0x146e/0x2cf0
[  111.343232][ T5844]  ? do_raw_spin_lock+0x12b/0x2f0
[  111.343270][ T5844]  ? do_raw_spin_unlock+0xf5/0x210
[  111.343296][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  111.343319][ T5844]  do_writepages+0x32e/0x550
[  111.343355][ T5844]  ? do_raw_spin_unlock+0xf5/0x210
[  111.343384][ T5844]  filemap_fdatawrite+0x1e9/0x2f0
[  111.343414][ T5844]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  111.343492][ T5844]  ? do_raw_spin_unlock+0xf5/0x210
[  111.343522][ T5844]  f2fs_sync_dirty_inodes+0x30e/0x830
[  111.343563][ T5844]  f2fs_write_checkpoint+0x9df/0x26a0
[  111.343584][ T5844]  ? lockdep_hardirqs_on+0x7a/0x110
[  111.343649][ T5844]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  111.343720][ T5844]  ? kfree+0x1c5/0x640
[  111.343749][ T5844]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  111.343784][ T5844]  kill_f2fs_super+0x314/0x730
[  111.343815][ T5844]  ? __pfx_kill_f2fs_super+0x10/0x10
[  111.343853][ T5844]  ? lockdep_hardirqs_on+0x7a/0x110
[  111.343896][ T5844]  deactivate_locked_super+0xbc/0x130
[  111.343930][ T5844]  cleanup_mnt+0x437/0x4d0
[  111.343949][ T5844]  ? _raw_spin_unlock_irq+0x23/0x50
[  111.343978][ T5844]  task_work_run+0x1d9/0x270
[  111.344009][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  111.344044][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.344067][ T5844]  exit_to_user_mode_loop+0xed/0x480
[  111.344102][ T5844]  ? rcu_is_watching+0x15/0xb0
[  111.344125][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.344148][ T5844]  do_syscall_64+0x33e/0xf80
[  111.344173][ T5844]  ? trace_irq_disable+0x3b/0x140
[  111.344199][ T5844]  ? clear_bhb_loop+0x40/0x90
[  111.344226][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.344247][ T5844] RIP: 0033:0x7f5ac199da57
[  111.344268][ T5844] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  111.344284][ T5844] RSP: 002b:00007ffe32ebac18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  111.344307][ T5844] RAX: 0000000000000000 RBX: 00007f5ac1a32048 RCX: 00007f5ac199da57
[  111.344321][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe32ebacd0
[  111.344333][ T5844] RBP: 00007ffe32ebacd0 R08: 00007ffe32ebbcd0 R09: 00000000ffffffff
[  111.344353][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe32ebbd60
[  111.344365][ T5844] R13: 00007f5ac1a32048 R14: 000000000001b0eb R15: 00007ffe32ebbda0
[  111.344402][ T5844]  </TASK>
[  111.344410][ T5844] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  111.751955][ T5848] syz-executor: attempt to access beyond end of device
[  111.751955][ T5848] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  111.805382][ T5921] loop2: lost filesystem error report for type 5 error -108
[  111.817832][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  111.817863][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  111.817875][ T5848] Call Trace:
[  111.817883][ T5848]  <TASK>
[  111.817892][ T5848]  dump_stack_lvl+0xe8/0x150
[  111.817932][ T5848]  f2fs_stop_checkpoint+0x3c7/0x590
[  111.817972][ T5848]  f2fs_write_end_io+0x12e5/0x17a0
[  111.818040][ T5848]  __submit_merged_bio+0x256/0x6a0
[  111.818081][ T5848]  __submit_merged_write_cond+0x3c9/0x4e0
[  111.818124][ T5848]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  111.818186][ T5848]  f2fs_write_data_pages+0x287e/0x34f0
[  111.818208][ T5848]  ? unwind_next_frame+0xa6/0x2550
[  111.818274][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  111.818293][ T5848]  ? is_bpf_text_address+0x26/0x2b0
[  111.818337][ T5848]  ? arch_stack_walk+0xfb/0x150
[  111.818398][ T5848]  ? add_lock_to_list+0xc7/0x100
[  111.818425][ T5848]  ? lockdep_unlock+0x5d/0xd0
[  111.818450][ T5848]  ? __lock_acquire+0x146e/0x2cf0
[  111.818516][ T5848]  ? do_raw_spin_lock+0x12b/0x2f0
[  111.818556][ T5848]  ? do_raw_spin_unlock+0xf5/0x210
[  111.818582][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  111.818605][ T5848]  do_writepages+0x32e/0x550
[  111.818642][ T5848]  ? do_raw_spin_unlock+0xf5/0x210
[  111.818673][ T5848]  filemap_fdatawrite+0x1e9/0x2f0
[  111.818704][ T5848]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  111.818791][ T5848]  ? do_raw_spin_unlock+0xf5/0x210
[  111.818823][ T5848]  f2fs_sync_dirty_inodes+0x30e/0x830
[  111.818866][ T5848]  f2fs_write_checkpoint+0x9df/0x26a0
[  111.818886][ T5848]  ? __lock_acquire+0x6b5/0x2cf0
[  111.818957][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  111.819061][ T5848]  kill_f2fs_super+0x314/0x730
[  111.819093][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[  111.819134][ T5848]  ? lockdep_hardirqs_on+0x7a/0x110
[  111.819179][ T5848]  deactivate_locked_super+0xbc/0x130
[  111.819211][ T5848]  cleanup_mnt+0x437/0x4d0
[  111.819231][ T5848]  ? _raw_spin_unlock_irq+0x23/0x50
[  111.819259][ T5848]  task_work_run+0x1d9/0x270
[  111.819291][ T5848]  ? __pfx_task_work_run+0x10/0x10
[  111.819328][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.819351][ T5848]  exit_to_user_mode_loop+0xed/0x480
[  111.819379][ T5848]  ? rcu_is_watching+0x15/0xb0
[  111.819401][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.819424][ T5848]  do_syscall_64+0x33e/0xf80
[  111.819451][ T5848]  ? trace_irq_disable+0x3b/0x140
[  111.819476][ T5848]  ? clear_bhb_loop+0x40/0x90
[  111.819504][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.819525][ T5848] RIP: 0033:0x7f827c79da57
[  111.819547][ T5848] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  111.819564][ T5848] RSP: 002b:00007ffdfeb07378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  111.819587][ T5848] RAX: 0000000000000000 RBX: 00007f827c832048 RCX: 00007f827c79da57
[  111.819601][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfeb07430
[  111.819613][ T5848] RBP: 00007ffdfeb07430 R08: 00007ffdfeb08430 R09: 00000000ffffffff
[  111.819627][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdfeb084c0
[  111.819639][ T5848] R13: 00007f827c832048 R14: 000000000001b2d8 R15: 00007ffdfeb08500
[  111.819678][ T5848]  </TASK>
[  111.820190][ T5848] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  112.177736][ T5839] ocfs2: Unmounting device (7,4) on (node local)
[  112.185540][ T5842] loop1: lost filesystem error report for type 5 error -108
[  113.319447][ T6461] loop3: detected capacity change from 0 to 1024
[  113.406297][ T6461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.459684][ T6467] loop4: detected capacity change from 0 to 128
[  113.500989][ T6467] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  113.633371][ T6467] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512)
[  113.660381][ T6467] FAT-fs (loop4): Filesystem has been set read-only
[  113.683222][ T6467] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512)
[  113.726695][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.740822][ T6453] loop1: detected capacity change from 0 to 32768
[  113.798411][ T6453] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  113.951859][ T6453] XFS (loop1): Ending clean mount
[  114.160448][ T5848] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.780751][ T5842] kernel read not supported for file /vcs (pid: 5842 comm: kworker/1:3)
[  115.220257][ T6520] process 'syz.0.230' launched './file1' with NULL argv: empty string added
[  115.676505][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'.
[  115.880240][ T6532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.886657][ T6568] loop0: detected capacity change from 0 to 4096
[  116.922039][ T6568] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  116.966974][ T6568] ntfs3(loop0): ino=3, mi_enum_attr
[  117.070038][ T6568] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  117.181526][ T6543] loop1: detected capacity change from 0 to 40427
[  117.212872][ T6543] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  117.238755][ T6568] ntfs3(loop0): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  117.254119][ T6543] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  117.565676][ T6561] loop3: detected capacity change from 0 to 32768
[  117.582344][ T6565] loop4: detected capacity change from 0 to 32768
[  117.653515][ T6565] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  117.736241][ T6543] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  117.762742][ T6569] loop2: detected capacity change from 0 to 32768
[  117.859615][ T6565] XFS (loop4): Ending clean mount
[  117.926820][ T6543] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  117.964655][ T6592] loop0: detected capacity change from 0 to 256
[  117.964817][ T6569] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  117.964817][ T6569] 
[  117.984518][ T6543] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  118.033138][ T6569] ERROR: (device loop2): remounting filesystem as read-only
[  118.077821][ T6569] xtLookup: xtSearch returned -5
[  118.112322][ T6569] free_index: error reading directory table
[  118.141383][ T6569] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  118.141383][ T6569] 
[  118.206907][ T6569] xtLookup: xtSearch returned -5
[  118.227380][ T6569] free_index: error reading directory table
[  118.245892][ T6569] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  118.245892][ T6569] 
[  118.274306][ T6569] xtLookup: xtSearch returned -5
[  118.289776][ T6569] free_index: error reading directory table
[  118.322172][ T6569] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  118.322172][ T6569] 
[  118.352719][ T6569] xtLookup: xtSearch returned -5
[  118.378204][ T6569] free_index: error reading directory table
[  118.385176][ T6569] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  118.385176][ T6569] 
[  118.408683][ T6569] xtLookup: xtSearch returned -5
[  118.440466][ T6569] free_index: error reading directory table
[  118.446524][ T6569] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  118.446524][ T6569] 
[  118.457768][ T6569] xtLookup: xtSearch returned -5
[  118.463176][ T6569] add_index: get/read_metapage failed!
[  118.500821][ T6569] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  118.500821][ T6569] 
[  118.545397][ T6569] xtLookup: xtSearch returned -5
[  118.576693][ T6569] free_index: error reading directory table
[  118.620232][ T6569] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  118.620232][ T6569] 
[  118.632353][ T5839] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  118.658292][ T6569] xtLookup: xtSearch returned -5
[  118.671919][ T6569] free_index: error reading directory table
[  118.685952][ T6569] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  118.685952][ T6569] 
[  118.708015][ T6569] xtLookup: xtSearch returned -5
[  118.726762][ T6569] free_index: error reading directory table
[  119.004064][ T6569] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  119.004064][ T6569] 
[  119.089327][ T6569] xtLookup: xtSearch returned -5
[  119.124469][ T6569] add_index: get/read_metapage failed!
[  119.314702][ T6612] erspan0: entered promiscuous mode
[  119.828015][ T6629] loop3: detected capacity change from 0 to 1024
[  119.918394][ T6629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.067697][ T6640] netlink: 64 bytes leftover after parsing attributes in process `syz.1.276'.
[  120.265432][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.321556][ T6648] netlink: 'syz.1.279': attribute type 9 has an invalid length.
[  120.337436][ T6648] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.279'.
[  120.677292][ T6652] loop2: detected capacity change from 0 to 4096
[  120.690988][ T6660] loop3: detected capacity change from 0 to 64
[  121.174071][ T6669] loop4: detected capacity change from 0 to 1024
[  121.199457][ T6669] EXT4-fs: inline encryption not supported
[  121.297723][ T6669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.316747][ T6681] dummy0: entered allmulticast mode
[  121.324529][ T6681] dummy0: left allmulticast mode
[  121.448333][ T6669] EXT4-fs (loop4): can't enable nombcache during remount
[  121.632164][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.070337][ T5921] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  122.273104][ T5921] usb 5-1: unable to get BOS descriptor or descriptor too short
[  122.296087][ T6710] tap0: tun_chr_ioctl cmd 1074025677
[  122.308201][ T5921] usb 5-1: config 4 has an invalid interface number: 138 but max is 0
[  122.329787][ T5921] usb 5-1: config 4 has no interface number 0
[  122.334693][ T6710] tap0: linktype set to 6
[  122.349355][ T5921] usb 5-1: config 4 interface 138 has no altsetting 0
[  122.365286][ T5921] usb 5-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8
[  122.386049][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.410250][ T5921] usb 5-1: Product: syz
[  122.416369][ T5921] usb 5-1: Manufacturer: syz
[  122.427216][ T5921] usb 5-1: SerialNumber: syz
[  122.760407][ T6697] loop2: detected capacity change from 0 to 32768
[  122.853079][ T6697] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  122.914108][ T6697] XFS (loop2): Ending clean mount
[  122.965092][ T6697] XFS (loop2): Quotacheck needed: Please wait.
[  123.070144][ T5921] catc 5-1:4.138: Missing or invalid endpoints
[  123.110770][ T6724] loop3: detected capacity change from 0 to 1024
[  123.144949][ T6697] XFS (loop2): Quotacheck: Done.
[  123.200816][ T6724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.312269][ T5844] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  123.361084][ T5920] usb 5-1: USB disconnect, device number 2
[  123.363745][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.755833][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'.
[  123.958636][ T6747] C: renamed from team_slave_0 (while UP)
[  123.982074][ T6747] netlink: 'syz.2.313': attribute type 8 has an invalid length.
[  123.998343][ T6747] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  124.248399][ T6754] netlink: 'syz.2.322': attribute type 4 has an invalid length.
[  124.591519][ T6736] loop3: detected capacity change from 0 to 32768
[  124.631289][ T6736] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.314 (6736)
[  124.685728][ T6736] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  124.726997][ T6736] BTRFS info (device loop3): using crc32c checksum algorithm
[  124.748124][ T6736] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  124.847195][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  124.941770][ T6736] BTRFS info (device loop3): rebuilding free space tree
[  125.029229][    T9] usb 3-1: Using ep0 maxpacket: 16
[  125.040243][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  125.057167][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  125.069199][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  125.087183][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.095504][    T9] usb 3-1: Product: syz
[  125.100261][    T9] usb 3-1: Manufacturer: syz
[  125.104916][    T9] usb 3-1: SerialNumber: syz
[  125.147645][    T9] usb 3-1: 0:2 : does not exist
[  125.147939][ T6736] BTRFS info (device loop3): disabling free space tree
[  125.167689][ T6736] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  125.168873][ T6744] loop1: detected capacity change from 0 to 40427
[  125.189298][ T6736] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  125.214298][ T6744] F2FS-fs (loop1): build fault injection rate: 174
[  125.254963][ T6744] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  125.273277][ T6736] BTRFS info (device loop3): enabling ssd optimizations
[  125.290651][ T6736] BTRFS info (device loop3): turning on async discard
[  125.295800][ T6744] F2FS-fs (loop1): invalid crc value
[  125.307228][ T6736] BTRFS info (device loop3): enabling disk space caching
[  125.338312][ T6736] BTRFS info (device loop3): force clearing of disk cache
[  125.348701][    T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  125.370354][ T6736] BTRFS info (device loop3): use zstd compression, level 3
[  125.497711][   T30] audit: type=1800 audit(1774887209.625:12): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.314" name="file1" dev="loop3" ino=260 res=0 errno=0
[  125.605694][ T6756] loop0: detected capacity change from 0 to 40427
[  125.615140][ T6744] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  125.640262][ T6756] F2FS-fs (loop0): build fault injection rate: 771
[  125.683734][ T6756] F2FS-fs (loop0): invalid crc value
[  125.704282][ T6744] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  125.750354][    T9] usb 3-1: USB disconnect, device number 3
[  126.070687][ T6756] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  126.106574][ T5848] syz-executor: attempt to access beyond end of device
[  126.106574][ T5848] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  126.120077][ T5847] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  126.170183][ T6756] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  126.173742][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  126.173779][ T5848] Tainted: [L]=SOFTLOCKUP
[  126.173787][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  126.173797][ T5848] Call Trace:
[  126.173805][ T5848]  <TASK>
[  126.173813][ T5848]  dump_stack_lvl+0xe8/0x150
[  126.173848][ T5848]  f2fs_stop_checkpoint+0x3c7/0x590
[  126.173882][ T5848]  f2fs_write_end_io+0x12e5/0x17a0
[  126.173924][ T5848]  __submit_merged_bio+0x256/0x6a0
[  126.173957][ T5848]  __submit_merged_write_cond+0x3c9/0x4e0
[  126.174001][ T5848]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  126.174051][ T5848]  f2fs_write_data_pages+0x287e/0x34f0
[  126.174069][ T5848]  ? unwind_next_frame+0xa6/0x2550
[  126.174125][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  126.174142][ T5848]  ? is_bpf_text_address+0x26/0x2b0
[  126.174179][ T5848]  ? arch_stack_walk+0xfb/0x150
[  126.174229][ T5848]  ? add_lock_to_list+0xc7/0x100
[  126.174251][ T5848]  ? lockdep_unlock+0x5d/0xd0
[  126.174273][ T5848]  ? __lock_acquire+0x146e/0x2cf0
[  126.174327][ T5848]  ? do_raw_spin_lock+0x12b/0x2f0
[  126.174361][ T5848]  ? do_raw_spin_unlock+0xf5/0x210
[  126.174383][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  126.174403][ T5848]  do_writepages+0x32e/0x550
[  126.174435][ T5848]  ? do_raw_spin_unlock+0xf5/0x210
[  126.174462][ T5848]  filemap_fdatawrite+0x1e9/0x2f0
[  126.174488][ T5848]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  126.174557][ T5848]  ? do_raw_spin_unlock+0xf5/0x210
[  126.174583][ T5848]  f2fs_sync_dirty_inodes+0x30e/0x830
[  126.174619][ T5848]  f2fs_write_checkpoint+0x9df/0x26a0
[  126.174637][ T5848]  ? __lock_acquire+0x6b5/0x2cf0
[  126.174696][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  126.174771][ T5848]  kill_f2fs_super+0x314/0x730
[  126.174797][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[  126.174830][ T5848]  ? lockdep_hardirqs_on+0x7a/0x110
[  126.174868][ T5848]  deactivate_locked_super+0xbc/0x130
[  126.174897][ T5848]  cleanup_mnt+0x437/0x4d0
[  126.174914][ T5848]  ? _raw_spin_unlock_irq+0x23/0x50
[  126.174940][ T5848]  task_work_run+0x1d9/0x270
[  126.174966][ T5848]  ? __pfx_task_work_run+0x10/0x10
[  126.175003][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.175024][ T5848]  exit_to_user_mode_loop+0xed/0x480
[  126.175047][ T5848]  ? rcu_is_watching+0x15/0xb0
[  126.175066][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.175086][ T5848]  do_syscall_64+0x33e/0xf80
[  126.175108][ T5848]  ? trace_irq_disable+0x3b/0x140
[  126.175130][ T5848]  ? clear_bhb_loop+0x40/0x90
[  126.175153][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.175172][ T5848] RIP: 0033:0x7f827c79da57
[  126.175190][ T5848] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  126.175204][ T5848] RSP: 002b:00007ffdfeb07378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  126.175224][ T5848] RAX: 0000000000000000 RBX: 00007f827c832048 RCX: 00007f827c79da57
[  126.175237][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfeb07430
[  126.175247][ T5848] RBP: 00007ffdfeb07430 R08: 00007ffdfeb08430 R09: 00000000ffffffff
[  126.175259][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdfeb084c0
[  126.175270][ T5848] R13: 00007f827c832048 R14: 000000000001ebe3 R15: 00007ffdfeb08500
[  126.175301][ T5848]  </TASK>
[  126.178397][ T5848] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  126.789579][ T6791] netlink: 136 bytes leftover after parsing attributes in process `syz.2.331'.
[  126.856500][ T5840] F2FS-fs (loop0): access invalid blkaddr:2816
[  126.884774][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  126.884806][ T5840] Tainted: [L]=SOFTLOCKUP
[  126.884813][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  126.884824][ T5840] Call Trace:
[  126.884833][ T5840]  <TASK>
[  126.884841][ T5840]  dump_stack_lvl+0xe8/0x150
[  126.884880][ T5840]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  126.884924][ T5840]  f2fs_map_blocks+0xed6/0x4580
[  126.884955][ T5840]  ? f2fs_map_blocks+0x1211/0x4580
[  126.885034][ T5840]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  126.885073][ T5840]  ? xa_load+0x60/0x210
[  126.885110][ T5840]  ? xa_load+0x60/0x210
[  126.885142][ T5840]  ? xa_load+0x1db/0x210
[  126.885178][ T5840]  ? readahead_folio+0x2da/0x430
[  126.885207][ T5840]  f2fs_mpage_readpages+0x185b/0x2b70
[  126.885256][ T5840]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[  126.885337][ T5840]  read_pages+0x193/0x5a0
[  126.885373][ T5840]  ? __pfx_read_pages+0x10/0x10
[  126.885408][ T5840]  ? filemap_add_folio+0x356/0x530
[  126.885442][ T5840]  page_cache_ra_unbounded+0x794/0xa10
[  126.885495][ T5840]  page_cache_ra_order+0xae4/0xe80
[  126.885534][ T5840]  ? blk_cgroup_congested+0x1f4/0x210
[  126.885559][ T5840]  ? inode_to_bdi+0x69/0xf0
[  126.885599][ T5840]  f2fs_readdir+0x4c0/0xac0
[  126.885656][ T5840]  ? __pfx_f2fs_readdir+0x10/0x10
[  126.885692][ T5840]  ? lock_acquire+0x221/0x350
[  126.885727][ T5840]  ? iterate_dir+0x292/0x570
[  126.885747][ T5840]  ? down_read_killable+0x1bb/0x340
[  126.885784][ T5840]  iterate_dir+0x399/0x570
[  126.885812][ T5840]  __se_sys_getdents64+0xf1/0x280
[  126.885838][ T5840]  ? __pfx___se_sys_getdents64+0x10/0x10
[  126.885857][ T5840]  ? exc_page_fault+0x6a/0xc0
[  126.885879][ T5840]  ? __pfx_filldir64+0x10/0x10
[  126.885904][ T5840]  ? do_user_addr_fault+0xc6f/0x1340
[  126.885943][ T5840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.885965][ T5840]  do_syscall_64+0x15f/0xf80
[  126.885997][ T5840]  ? trace_irq_disable+0x3b/0x140
[  126.886022][ T5840]  ? clear_bhb_loop+0x40/0x90
[  126.886047][ T5840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.886067][ T5840] RIP: 0033:0x7f56ce7c51b3
[  126.886087][ T5840] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[  126.886103][ T5840] RSP: 002b:00007ffe6803f4b8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  126.886126][ T5840] RAX: ffffffffffffffda RBX: 0000555566cbda30 RCX: 00007f56ce7c51b3
[  126.886139][ T5840] RDX: 0000000000008000 RSI: 0000555566cbda60 RDI: 0000000000000005
[  126.886151][ T5840] RBP: 0000555566cbda60 R08: 00007f56ce9ece20 R09: 0000000000000001
[  126.886164][ T5840] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555566cbda34
[  126.886176][ T5840] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffe68041760
[  126.886212][ T5840]  </TASK>
[  127.173446][ T5840] F2FS-fs (loop0): access invalid blkaddr:2816
[  127.179840][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  127.179872][ T5840] Tainted: [L]=SOFTLOCKUP
[  127.179879][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  127.179891][ T5840] Call Trace:
[  127.179899][ T5840]  <TASK>
[  127.179908][ T5840]  dump_stack_lvl+0xe8/0x150
[  127.179947][ T5840]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  127.179999][ T5840]  f2fs_map_blocks+0xed6/0x4580
[  127.180033][ T5840]  ? f2fs_map_blocks+0x2f11/0x4580
[  127.180108][ T5840]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  127.180147][ T5840]  ? xa_load+0x60/0x210
[  127.180183][ T5840]  ? xa_load+0x60/0x210
[  127.180216][ T5840]  ? xa_load+0x1db/0x210
[  127.180250][ T5840]  ? readahead_folio+0x2da/0x430
[  127.180275][ T5840]  f2fs_mpage_readpages+0x185b/0x2b70
[  127.180319][ T5840]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[  127.180399][ T5840]  read_pages+0x193/0x5a0
[  127.180434][ T5840]  ? __pfx_read_pages+0x10/0x10
[  127.180467][ T5840]  ? filemap_add_folio+0x356/0x530
[  127.180502][ T5840]  page_cache_ra_unbounded+0x794/0xa10
[  127.180551][ T5840]  page_cache_ra_order+0xae4/0xe80
[  127.180581][ T5840]  ? blk_cgroup_congested+0x1f4/0x210
[  127.180603][ T5840]  ? inode_to_bdi+0x69/0xf0
[  127.180639][ T5840]  f2fs_readdir+0x4c0/0xac0
[  127.180690][ T5840]  ? __pfx_f2fs_readdir+0x10/0x10
[  127.180725][ T5840]  ? lock_acquire+0x221/0x350
[  127.180756][ T5840]  ? iterate_dir+0x292/0x570
[  127.180777][ T5840]  ? down_read_killable+0x1bb/0x340
[  127.180812][ T5840]  iterate_dir+0x399/0x570
[  127.180840][ T5840]  __se_sys_getdents64+0xf1/0x280
[  127.180866][ T5840]  ? __pfx___se_sys_getdents64+0x10/0x10
[  127.180887][ T5840]  ? exc_page_fault+0x6a/0xc0
[  127.180909][ T5840]  ? __pfx_filldir64+0x10/0x10
[  127.180933][ T5840]  ? do_user_addr_fault+0xc6f/0x1340
[  127.180970][ T5840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.181002][ T5840]  do_syscall_64+0x15f/0xf80
[  127.181025][ T5840]  ? trace_irq_disable+0x3b/0x140
[  127.181049][ T5840]  ? clear_bhb_loop+0x40/0x90
[  127.181072][ T5840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.181092][ T5840] RIP: 0033:0x7f56ce7c51b3
[  127.181112][ T5840] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[  127.181126][ T5840] RSP: 002b:00007ffe6803f4b8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  127.181148][ T5840] RAX: ffffffffffffffda RBX: 0000555566cbda30 RCX: 00007f56ce7c51b3
[  127.181162][ T5840] RDX: 0000000000008000 RSI: 0000555566cbda60 RDI: 0000000000000005
[  127.181174][ T5840] RBP: 0000555566cbda60 R08: 00007f56ce9ece20 R09: 0000000000000001
[  127.181185][ T5840] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555566cbda34
[  127.181197][ T5840] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffe68041760
[  127.181232][ T5840]  </TASK>
[  127.181507][ T5840] syz-executor: attempt to access beyond end of device
[  127.181507][ T5840] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  127.527230][ T6795] loop2: detected capacity change from 0 to 256
[  127.533132][   T58] kworker/u8:4: attempt to access beyond end of device
[  127.533132][   T58] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  127.564032][   T58] CPU: 0 UID: 0 PID: 58 Comm: kworker/u8:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  127.564067][   T58] Tainted: [L]=SOFTLOCKUP
[  127.564076][   T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  127.564088][   T58] Workqueue: writeback wb_workfn (flush-7:0)
[  127.564121][   T58] Call Trace:
[  127.564129][   T58]  <TASK>
[  127.564138][   T58]  dump_stack_lvl+0xe8/0x150
[  127.564173][   T58]  f2fs_stop_checkpoint+0x3c7/0x590
[  127.564208][   T58]  f2fs_write_end_io+0x12e5/0x17a0
[  127.564256][   T58]  __submit_merged_bio+0x256/0x6a0
[  127.564293][   T58]  __submit_merged_write_cond+0x3c9/0x4e0
[  127.564334][   T58]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  127.564399][   T58]  f2fs_write_data_pages+0x287e/0x34f0
[  127.564469][   T58]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  127.564555][   T58]  ? __lock_acquire+0x6b5/0x2cf0
[  127.564606][   T58]  ? unwind_next_frame+0xa6/0x2550
[  127.564649][   T58]  ? unwind_next_frame+0xa6/0x2550
[  127.564675][   T58]  ? unwind_next_frame+0xa6/0x2550
[  127.564696][   T58]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  127.564719][   T58]  do_writepages+0x32e/0x550
[  127.564754][   T58]  ? reacquire_held_locks+0x104/0x190
[  127.564773][   T58]  ? writeback_sb_inodes+0x463/0x19d0
[  127.564807][   T58]  __writeback_single_inode+0x133/0x10e0
[  127.564835][   T58]  ? do_raw_spin_unlock+0xf5/0x210
[  127.564866][   T58]  writeback_sb_inodes+0x979/0x19d0
[  127.564889][   T58]  ? __lock_acquire+0x6b5/0x2cf0
[  127.564951][   T58]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  127.564975][   T58]  ? do_raw_spin_lock+0x12b/0x2f0
[  127.565059][   T58]  ? rcu_is_watching+0x15/0xb0
[  127.565094][   T58]  wb_writeback+0x445/0xb00
[  127.565125][   T58]  ? queue_io+0x211/0x470
[  127.565161][   T58]  ? __pfx_wb_writeback+0x10/0x10
[  127.565182][   T58]  ? do_raw_spin_lock+0x12b/0x2f0
[  127.565228][   T58]  wb_workfn+0x3f8/0xf10
[  127.565246][   T58]  ? __lock_acquire+0x6b5/0x2cf0
[  127.565271][   T58]  ? look_up_lock_class+0x57/0x110
[  127.565321][   T58]  ? __pfx_wb_workfn+0x10/0x10
[  127.565349][   T58]  ? do_raw_spin_lock+0x12b/0x2f0
[  127.565371][   T58]  ? lock_acquire+0x106/0x350
[  127.565403][   T58]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  127.565430][   T58]  ? process_scheduled_works+0xa70/0x1860
[  127.565464][   T58]  ? process_scheduled_works+0xa70/0x1860
[  127.565503][   T58]  ? process_scheduled_works+0xa70/0x1860
[  127.565530][   T58]  ? process_scheduled_works+0xa70/0x1860
[  127.565566][   T58]  process_scheduled_works+0xb5d/0x1860
[  127.565636][   T58]  ? __pfx_process_scheduled_works+0x10/0x10
[  127.565675][   T58]  ? assign_work+0x3d5/0x5e0
[  127.565712][   T58]  worker_thread+0xa53/0xfc0
[  127.565781][   T58]  kthread+0x388/0x470
[  127.565807][   T58]  ? __pfx_worker_thread+0x10/0x10
[  127.565834][   T58]  ? __pfx_kthread+0x10/0x10
[  127.565860][   T58]  ret_from_fork+0x514/0xb70
[  127.565895][   T58]  ? __pfx_ret_from_fork+0x10/0x10
[  127.565924][   T58]  ? __switch_to+0xc7d/0x1420
[  127.565958][   T58]  ? __pfx_kthread+0x10/0x10
[  127.565985][   T58]  ret_from_fork_asm+0x1a/0x30
[  127.566041][   T58]  </TASK>
[  127.614064][ T6795] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  127.625496][   T58] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  127.896663][   T58] CPU: 0 UID: 0 PID: 58 Comm: kworker/u8:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  127.896695][   T58] Tainted: [L]=SOFTLOCKUP
[  127.896702][   T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  127.896715][   T58] Workqueue: writeback wb_workfn (flush-7:0)
[  127.896749][   T58] Call Trace:
[  127.896758][   T58]  <TASK>
[  127.896767][   T58]  dump_stack_lvl+0xe8/0x150
[  127.896801][   T58]  f2fs_stop_checkpoint+0x3c7/0x590
[  127.896840][   T58]  f2fs_write_end_io+0x12e5/0x17a0
[  127.896889][   T58]  __submit_merged_bio+0x256/0x6a0
[  127.896942][   T58]  __submit_merged_write_cond+0x3c9/0x4e0
[  127.896983][   T58]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  127.897039][   T58]  f2fs_write_data_pages+0x287e/0x34f0
[  127.897107][   T58]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  127.897188][   T58]  ? __lock_acquire+0x6b5/0x2cf0
[  127.897236][   T58]  ? unwind_next_frame+0xa6/0x2550
[  127.897277][   T58]  ? unwind_next_frame+0xa6/0x2550
[  127.897301][   T58]  ? unwind_next_frame+0xa6/0x2550
[  127.897322][   T58]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  127.897343][   T58]  do_writepages+0x32e/0x550
[  127.897376][   T58]  ? reacquire_held_locks+0x104/0x190
[  127.897396][   T58]  ? writeback_sb_inodes+0x463/0x19d0
[  127.897430][   T58]  __writeback_single_inode+0x133/0x10e0
[  127.897457][   T58]  ? do_raw_spin_unlock+0xf5/0x210
[  127.897487][   T58]  writeback_sb_inodes+0x979/0x19d0
[  127.897510][   T58]  ? __lock_acquire+0x6b5/0x2cf0
[  127.897574][   T58]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  127.897597][   T58]  ? do_raw_spin_lock+0x12b/0x2f0
[  127.897668][   T58]  ? rcu_is_watching+0x15/0xb0
[  127.897696][   T58]  wb_writeback+0x445/0xb00
[  127.897723][   T58]  ? queue_io+0x211/0x470
[  127.897764][   T58]  ? __pfx_wb_writeback+0x10/0x10
[  127.897783][   T58]  ? do_raw_spin_lock+0x12b/0x2f0
[  127.897822][   T58]  wb_workfn+0x3f8/0xf10
[  127.897838][   T58]  ? __lock_acquire+0x6b5/0x2cf0
[  127.897860][   T58]  ? look_up_lock_class+0x57/0x110
[  127.897913][   T58]  ? __pfx_wb_workfn+0x10/0x10
[  127.897935][   T58]  ? do_raw_spin_lock+0x12b/0x2f0
[  127.897953][   T58]  ? lock_acquire+0x106/0x350
[  127.897979][   T58]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  127.898003][   T58]  ? process_scheduled_works+0xa70/0x1860
[  127.898031][   T58]  ? process_scheduled_works+0xa70/0x1860
[  127.898065][   T58]  ? process_scheduled_works+0xa70/0x1860
[  127.898088][   T58]  ? process_scheduled_works+0xa70/0x1860
[  127.898115][   T58]  process_scheduled_works+0xb5d/0x1860
[  127.898178][   T58]  ? __pfx_process_scheduled_works+0x10/0x10
[  127.898212][   T58]  ? assign_work+0x3d5/0x5e0
[  127.898244][   T58]  worker_thread+0xa53/0xfc0
[  127.898305][   T58]  kthread+0x388/0x470
[  127.898327][   T58]  ? __pfx_worker_thread+0x10/0x10
[  127.898351][   T58]  ? __pfx_kthread+0x10/0x10
[  127.898373][   T58]  ret_from_fork+0x514/0xb70
[  127.898402][   T58]  ? __pfx_ret_from_fork+0x10/0x10
[  127.898426][   T58]  ? __switch_to+0xc7d/0x1420
[  127.898454][   T58]  ? __pfx_kthread+0x10/0x10
[  127.898476][   T58]  ret_from_fork_asm+0x1a/0x30
[  127.898517][   T58]  </TASK>
[  127.898710][   T58] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  128.213439][ T6807] loop1: detected capacity change from 0 to 4096
[  128.591394][ T6807] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  128.603895][ T6807] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  128.699051][   T30] audit: type=1800 audit(1774887212.815:13): pid=6807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.337" name="file1" dev="loop1" ino=30 res=0 errno=0
[  128.703219][ T6807] ntfs3(loop1): ino=1e, "file1" attr_set_size_ex
[  128.891124][ T6805] ntfs3(loop1): ino=1e, "file1" attr_set_size_ex
[  128.972104][   T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.244153][ T6831] loop1: detected capacity change from 0 to 1024
[  129.361860][   T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.494452][   T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.521882][   T12] hfsplus: b-tree write err: -5, ino 25
[  129.552742][   T12] hfsplus: b-tree write err: -5, ino 4
[  129.561062][   T12] hfsplus: b-tree write err: -5, ino 2
[  129.617178][   T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.059244][   T13] bridge_slave_1: left allmulticast mode
[  130.074231][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.089223][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.104972][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.115055][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.123046][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  130.134673][   T13] bridge_slave_1: left promiscuous mode
[  130.190880][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.244143][   T13] bridge_slave_0: left allmulticast mode
[  130.268857][   T13] bridge_slave_0: left promiscuous mode
[  130.292092][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.564506][ T6854] loop3: detected capacity change from 0 to 4096
[  130.585787][ T6858] netlink: 56 bytes leftover after parsing attributes in process `syz.4.361'.
[  130.594957][ T6854] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  130.622092][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'.
[  130.635432][ T6854] ntfs3(loop3): ino=3, mi_enum_attr
[  130.759501][ T6854] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  131.031754][ T1122] ntfs3(loop3): ino=1f, failed to open parent directory r=5 to update
[  131.243279][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.269772][ T6875] netlink: 'syz.2.367': attribute type 33 has an invalid length.
[  131.286211][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.290697][ T6875] netlink: 152 bytes leftover after parsing attributes in process `syz.2.367'.
[  131.310313][   T13] bond0 (unregistering): Released all slaves
[  131.324159][ T6878] netlink: 14 bytes leftover after parsing attributes in process `syz.2.367'.
[  131.524929][ T6882] loop4: detected capacity change from 0 to 128
[  131.920560][ T5841] Bluetooth: hci3: command 0x2016 tx timeout
[  132.254216][ T5841] Bluetooth: hci1: command tx timeout
[  132.403360][ T6902] kvm: user requested TSC rate below hardware speed
[  132.482877][ T6898] loop2: detected capacity change from 0 to 8192
[  132.894940][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  132.913500][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  133.026218][   T13] hsr_slave_0: left promiscuous mode
[  133.087293][   T13] hsr_slave_1: left promiscuous mode
[  133.119188][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.150512][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.185472][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.193139][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.248744][   T13] veth1_macvtap: left promiscuous mode
[  133.254494][   T13] veth0_macvtap: left promiscuous mode
[  133.262299][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'.
[  133.288831][   T13] veth1_vlan: left promiscuous mode
[  133.310534][   T13] veth0_vlan: left promiscuous mode
[  133.727328][ T5957] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  133.898442][ T5957] usb 5-1: Using ep0 maxpacket: 16
[  133.928627][ T5957] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.946779][ T5957] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  133.956548][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.960527][   T13] team0 (unregistering): Port device team_slave_1 removed
[  133.969172][ T5957] usb 5-1: config 0 descriptor??
[  133.998532][ T5841] Bluetooth: hci3: command 0x2016 tx timeout
[  134.045965][   T13] team0 (unregistering): Port device team_slave_0 removed
[  134.054102][ T5957] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5
[  134.250318][ T5194] bcm5974 5-1:0.0: could not read from device
[  134.266422][ T5194] bcm5974 5-1:0.0: could not read from device
[  134.300160][ T6935] bcm5974 5-1:0.0: could not read from device
[  134.317385][ T5858] Bluetooth: hci1: command tx timeout
[  134.323029][ T5957] usb 5-1: USB disconnect, device number 3
[  134.362854][ T5857] bcm5974 5-1:0.0: could not read from device
[  134.381607][ T5194] bcm5974 5-1:0.0: could not read from device
[  134.396646][ T6926] vlan2: entered allmulticast mode
[  134.760751][ T6949] netlink: 'syz.2.391': attribute type 13 has an invalid length.
[  134.878078][ T6955] netlink: 'syz.2.391': attribute type 16 has an invalid length.
[  134.903145][ T6955] netlink: 'syz.2.391': attribute type 17 has an invalid length.
[  135.344078][ T6955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.453702][ T6962] vlan2: entered promiscuous mode
[  135.487366][ T6962] bond0: entered promiscuous mode
[  135.501642][ T6962] bond_slave_0: entered promiscuous mode
[  135.526900][ T6962] bond_slave_1: entered promiscuous mode
[  135.536356][ T6957] loop1: detected capacity change from 0 to 40427
[  135.582235][ T6957] F2FS-fs (loop1): Invalid log blocks per segment (1)
[  135.612474][ T6969] warning: `syz.4.398' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  135.613487][ T6957] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  135.669235][ T6843] chnl_net:caif_netlink_parms(): no params data found
[  135.678576][ T6957] F2FS-fs (loop1): Image doesn't support compression
[  135.699385][ T6957] F2FS-fs (loop1): build fault injection rate: 690
[  135.716708][ T6957] F2FS-fs (loop1): build fault injection type: 0x35f7
[  135.767421][ T6957] F2FS-fs (loop1): invalid crc value
[  136.078430][ T5858] Bluetooth: hci3: command 0x2016 tx timeout
[  136.205215][ T6957] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  136.270585][ T6957] F2FS-fs (loop1): Start checkpoint disabled!
[  136.282823][ T6988] netlink: 32 bytes leftover after parsing attributes in process `syz.4.403'.
[  136.309566][ T6987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.402'.
[  136.319669][ T6988] Zero length message leads to an empty skb
[  136.381712][ T6957] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  136.400305][ T5858] Bluetooth: hci1: command tx timeout
[  136.431777][ T6957] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  136.470075][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.497668][ T6957] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  136.526621][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.554275][ T6843] bridge_slave_0: entered allmulticast mode
[  136.586475][ T6843] bridge_slave_0: entered promiscuous mode
[  136.684900][ T6843] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.707633][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.727920][ T6843] bridge_slave_1: entered allmulticast mode
[  136.731956][ T6957] syz.1.394: attempt to access beyond end of device
[  136.731956][ T6957] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  136.750267][ T6843] bridge_slave_1: entered promiscuous mode
[  136.887585][   T49] kworker/u8:3: attempt to access beyond end of device
[  136.887585][   T49] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  136.920707][ T6976] loop2: detected capacity change from 0 to 32768
[  136.927797][ T6843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.939003][   T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  136.939033][   T49] Tainted: [L]=SOFTLOCKUP
[  136.939039][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  136.939051][   T49] Workqueue: writeback wb_workfn (flush-7:1)
[  136.939092][   T49] Call Trace:
[  136.939100][   T49]  <TASK>
[  136.939107][   T49]  dump_stack_lvl+0xe8/0x150
[  136.939141][   T49]  f2fs_stop_checkpoint+0x3c7/0x590
[  136.939176][   T49]  f2fs_write_end_io+0x12e5/0x17a0
[  136.939222][   T49]  __submit_merged_bio+0x256/0x6a0
[  136.939258][   T49]  __submit_merged_write_cond+0x3c9/0x4e0
[  136.939295][   T49]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  136.939349][   T49]  f2fs_write_data_pages+0x287e/0x34f0
[  136.939410][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  136.939446][   T49]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  136.939515][   T49]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  136.939587][   T49]  ? __lock_acquire+0x6b5/0x2cf0
[  136.939621][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  136.939640][   T49]  do_writepages+0x32e/0x550
[  136.939673][   T49]  ? reacquire_held_locks+0x104/0x190
[  136.939694][   T49]  ? writeback_sb_inodes+0x463/0x19d0
[  136.939727][   T49]  __writeback_single_inode+0x133/0x10e0
[  136.939755][   T49]  ? do_raw_spin_unlock+0xf5/0x210
[  136.939786][   T49]  writeback_sb_inodes+0x979/0x19d0
[  136.939809][   T49]  ? __lock_acquire+0x6b5/0x2cf0
[  136.939869][   T49]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  136.939893][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  136.939963][   T49]  ? rcu_is_watching+0x15/0xb0
[  136.939994][   T49]  wb_writeback+0x445/0xb00
[  136.940024][   T49]  ? queue_io+0x211/0x470
[  136.940067][   T49]  ? __pfx_wb_writeback+0x10/0x10
[  136.940098][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  136.940141][   T49]  wb_workfn+0x3f8/0xf10
[  136.940157][   T49]  ? __lock_acquire+0x6b5/0x2cf0
[  136.940178][   T49]  ? look_up_lock_class+0x57/0x110
[  136.940217][   T49]  ? __pfx_wb_workfn+0x10/0x10
[  136.940238][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  136.940255][   T49]  ? lock_acquire+0x106/0x350
[  136.940281][   T49]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  136.940304][   T49]  ? process_scheduled_works+0xa70/0x1860
[  136.940331][   T49]  ? process_scheduled_works+0xa70/0x1860
[  136.940363][   T49]  ? process_scheduled_works+0xa70/0x1860
[  136.940386][   T49]  ? process_scheduled_works+0xa70/0x1860
[  136.940417][   T49]  process_scheduled_works+0xb5d/0x1860
[  136.940487][   T49]  ? __pfx_process_scheduled_works+0x10/0x10
[  136.940526][   T49]  ? assign_work+0x3d5/0x5e0
[  136.940568][   T49]  worker_thread+0xa53/0xfc0
[  136.940627][   T49]  kthread+0x388/0x470
[  136.940650][   T49]  ? __pfx_worker_thread+0x10/0x10
[  136.940676][   T49]  ? __pfx_kthread+0x10/0x10
[  136.940701][   T49]  ret_from_fork+0x514/0xb70
[  136.940735][   T49]  ? __pfx_ret_from_fork+0x10/0x10
[  136.940762][   T49]  ? __switch_to+0xc7d/0x1420
[  136.940792][   T49]  ? __pfx_kthread+0x10/0x10
[  136.940817][   T49]  ret_from_fork_asm+0x1a/0x30
[  136.940854][   T49]  </TASK>
[  136.944530][   T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  137.025039][ T6976] JBD2: Ignoring recovery information on journal
[  137.079903][ T6843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.279942][ T6976] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  137.446503][ T6843] team0: Port device team_slave_0 added
[  137.460535][ T6843] team0: Port device team_slave_1 added
[  137.548670][ T5844] ocfs2: Unmounting device (7,2) on (node local)
[  137.632049][ T6843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.661738][ T6843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  137.769076][ T6843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.799496][ T6843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.806508][ T6843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  137.897621][ T6843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.122932][ T6843] hsr_slave_0: entered promiscuous mode
[  138.155494][ T6843] hsr_slave_1: entered promiscuous mode
[  138.282991][ T7035] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  138.477200][ T5858] Bluetooth: hci1: command tx timeout
[  138.612697][ T7046] loop3: detected capacity change from 0 to 256
[  138.691093][ T7050] loop4: detected capacity change from 0 to 64
[  139.703739][ T7067] loop4: detected capacity change from 0 to 32768
[  139.754884][ T7067] 
[  139.754884][ T7067]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.754884][ T7067] 
[  139.785366][ T7067] 
[  139.785366][ T7067]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.785366][ T7067] 
[  139.796162][ T7067] 
[  139.796162][ T7067]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.796162][ T7067] 
[  139.806891][ T7067] 
[  139.806891][ T7067]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.806891][ T7067] 
[  139.817544][ T7067] 
[  139.817544][ T7067]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.817544][ T7067] 
[  139.828959][ T7067] 
[  139.828959][ T7067]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.828959][ T7067] 
[  139.839568][ T7067] 
[  139.839568][ T7067]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.839568][ T7067] 
[  139.927069][  T118] 
[  139.927069][  T118]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.927069][  T118] 
[  140.002725][ T5839] 
[  140.002725][ T5839]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.002725][ T5839] 
[  140.009249][ T6843] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  140.051914][ T5839] 
[  140.051914][ T5839]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.051914][ T5839] 
[  140.066798][ T6843] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  140.162428][ T6843] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  140.277929][ T6843] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  141.536265][ T7086] loop4: detected capacity change from 0 to 131072
[  141.550556][ T7086] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name
[  141.567338][ T7086] F2FS-fs (loop4): invalid crc value
[  141.664443][ T7086] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  141.677656][ T7086] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955
[  141.722481][ T7120] loop3: detected capacity change from 0 to 128
[  141.904768][ T7120] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  142.019609][ T7120] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  142.193616][ T7122] loop1: detected capacity change from 0 to 4096
[  142.222438][ T7122] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  142.277467][ T6843] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.316942][ T7122] ntfs3(loop1): ino=18, mi_enum_attr
[  142.336821][ T7122] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  142.359334][   T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  142.374551][ T6843] 8021q: adding VLAN 0 to HW filter on device team0
[  142.404145][ T5847] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  142.434502][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.441793][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.496920][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.504221][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.617411][   T24] usb 5-1: Using ep0 maxpacket: 32
[  142.660671][   T24] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  142.700075][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.745444][   T24] usb 5-1: Product: syz
[  142.769274][   T24] usb 5-1: Manufacturer: syz
[  142.786910][   T24] usb 5-1: SerialNumber: syz
[  142.804738][   T24] usb 5-1: config 0 descriptor??
[  143.473030][   T24] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  143.511902][ T5842] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  143.522887][   T24] peak_usb 5-1:0.0 can0: sending command failure: -22
[  143.545763][   T24] peak_usb 5-1:0.0 can0: sending command failure: -22
[  143.549752][ T6843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.707210][ T5842] usb 4-1: Using ep0 maxpacket: 16
[  143.739786][ T5842] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  143.752279][   T24] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22
[  143.776108][ T5842] usb 4-1: config 0 has no interface number 0
[  143.808430][ T5842] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  143.826995][   T24] usb 5-1: USB disconnect, device number 4
[  143.849936][ T5842] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  143.881555][ T5842] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  143.894878][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  143.933025][ T5842] usb 4-1: Product: syz
[  143.943751][ T5842] usb 4-1: SerialNumber: syz
[  143.982652][ T5842] usb 4-1: config 0 descriptor??
[  144.014907][ T5842] cm109 4-1:0.8: invalid payload size 0, expected 4
[  144.071569][ T5842] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input6
[  144.131689][ T7169] loop2: detected capacity change from 0 to 256
[  144.234163][ T7169] FAT-fs (loop2): Directory bread(block 64) failed
[  144.261196][ T7169] FAT-fs (loop2): Directory bread(block 65) failed
[  144.261336][ T7169] FAT-fs (loop2): Directory bread(block 66) failed
[  144.261365][ T7169] FAT-fs (loop2): Directory bread(block 67) failed
[  144.261451][ T7169] FAT-fs (loop2): Directory bread(block 68) failed
[  144.261477][ T7169] FAT-fs (loop2): Directory bread(block 69) failed
[  144.261564][ T7169] FAT-fs (loop2): Directory bread(block 70) failed
[  144.261588][ T7169] FAT-fs (loop2): Directory bread(block 71) failed
[  144.263328][ T7169] FAT-fs (loop2): Directory bread(block 72) failed
[  144.263359][ T7169] FAT-fs (loop2): Directory bread(block 73) failed
[  144.292262][ T7172] loop1: detected capacity change from 0 to 128
[  144.293550][ T7172] EXT4-fs: Ignoring removed nobh option
[  144.418881][ T7172] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  144.439772][ T7172] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  144.474243][   T30] audit: type=1800 audit(1774887228.615:14): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.456" name="file1" dev="loop2" ino=1048612 res=0 errno=0
[  144.523294][ T7169] syz.2.456: attempt to access beyond end of device
[  144.523294][ T7169] loop2: rw=524288, sector=1192, nr_sectors = 4 limit=256
[  144.523688][ T7169] syz.2.456: attempt to access beyond end of device
[  144.523688][ T7169] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256
[  144.532092][ T7172] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes
[  144.559482][ T7169] syz.2.456: attempt to access beyond end of device
[  144.559482][ T7169] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256
[  144.626038][ T5848] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  144.651420][ T6843] veth0_vlan: entered promiscuous mode
[  144.673781][ T7179] loop4: detected capacity change from 0 to 512
[  144.700275][ T6843] veth1_vlan: entered promiscuous mode
[  144.748960][ T7179] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  144.761005][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  144.763008][ T5921] usb 4-1: USB disconnect, device number 2
[  144.768387][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  144.828306][ T5921] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  144.935175][ T7179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.970544][ T6843] veth0_macvtap: entered promiscuous mode
[  144.994006][ T6843] veth1_macvtap: entered promiscuous mode
[  145.050940][ T7179] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.458: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0
[  145.074128][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.142250][ T7193] EXT4-fs error (device loop4): ext4_map_blocks:789: inode #2: block 18: comm syz.4.458: lblock 23 mapped to illegal pblock 18 (length 1)
[  145.142916][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.181810][   T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.211564][   T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.221731][ T7179] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 12: comm syz.4.458: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0
[  145.249633][ T7179] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz.4.458: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0
[  145.285661][   T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.320712][   T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.426343][ T5839] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  145.546685][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.714877][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.740819][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.868683][ T7209] loop4: detected capacity change from 0 to 4096
[  145.914666][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.958946][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.264202][   T30] audit: type=1800 audit(1774887230.395:15): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.465" name="file1" dev="loop4" ino=33 res=0 errno=0
[  146.567411][ T5913] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  146.598328][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  146.705104][ T7207] loop2: detected capacity change from 0 to 40427
[  146.742384][ T7207] F2FS-fs (loop2): build fault injection rate: 771
[  146.752174][ T5913] usb 6-1: config 0 interface 0 has no altsetting 0
[  146.765008][ T5913] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  146.775203][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.783744][    T9] usb 4-1: Using ep0 maxpacket: 32
[  146.789294][ T7207] F2FS-fs (loop2): invalid crc value
[  146.793170][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.817680][    T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.834882][ T5913] usb 6-1: config 0 descriptor??
[  146.849586][    T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.872799][    T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  146.886916][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  146.894100][    T9] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  146.904335][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.925865][    T9] usb 4-1: config 0 descriptor??
[  147.077402][ T7207] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  147.109451][ T7230] loop4: detected capacity change from 0 to 2048
[  147.128862][ T7207] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  147.156644][ T7230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.293655][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.326530][ T5913] hid_mf 0003:0079:1846.0001: unknown main item tag 0x0
[  147.334401][ T5913] hid_mf 0003:0079:1846.0001: unknown main item tag 0x0
[  147.366327][ T5913] hid_mf 0003:0079:1846.0001: unknown main item tag 0x0
[  147.395322][ T5913] hid_mf 0003:0079:1846.0001: unknown main item tag 0x0
[  147.420350][ T5844] syz-executor: attempt to access beyond end of device
[  147.420350][ T5844] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  147.450105][    T9] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0
[  147.460900][ T5913] hid_mf 0003:0079:1846.0001: unknown main item tag 0x0
[  147.466039][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  147.466070][ T5844] Tainted: [L]=SOFTLOCKUP
[  147.466076][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  147.466086][ T5844] Call Trace:
[  147.466094][ T5844]  <TASK>
[  147.466102][ T5844]  dump_stack_lvl+0xe8/0x150
[  147.466137][ T5844]  f2fs_stop_checkpoint+0x3c7/0x590
[  147.466171][ T5844]  f2fs_write_end_io+0x12e5/0x17a0
[  147.466218][ T5844]  __submit_merged_bio+0x256/0x6a0
[  147.466253][ T5844]  f2fs_submit_merged_write+0x284/0x390
[  147.466286][ T5844]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  147.466334][ T5844]  f2fs_sync_node_pages+0x11fe/0x13c0
[  147.466384][ T5844]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  147.466463][ T5844]  f2fs_write_checkpoint+0xeb8/0x26a0
[  147.466524][ T5844]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  147.466594][ T5844]  ? kfree+0x1c5/0x640
[  147.466618][ T5844]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  147.466651][ T5844]  kill_f2fs_super+0x314/0x730
[  147.466679][ T5844]  ? __pfx_kill_f2fs_super+0x10/0x10
[  147.466714][ T5844]  ? lockdep_hardirqs_on+0x7a/0x110
[  147.466756][ T5844]  deactivate_locked_super+0xbc/0x130
[  147.466785][ T5844]  cleanup_mnt+0x437/0x4d0
[  147.466811][ T5844]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.466838][ T5844]  task_work_run+0x1d9/0x270
[  147.466866][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  147.466899][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.466920][ T5844]  exit_to_user_mode_loop+0xed/0x480
[  147.466944][ T5844]  ? rcu_is_watching+0x15/0xb0
[  147.466964][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.466984][ T5844]  do_syscall_64+0x33e/0xf80
[  147.467006][ T5844]  ? trace_irq_disable+0x3b/0x140
[  147.467030][ T5844]  ? clear_bhb_loop+0x40/0x90
[  147.467054][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.467072][ T5844] RIP: 0033:0x7f5ac199da57
[  147.467095][ T5844] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  147.467109][ T5844] RSP: 002b:00007ffe32ebac18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  147.467130][ T5844] RAX: 0000000000000000 RBX: 00007f5ac1a32048 RCX: 00007f5ac199da57
[  147.467142][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe32ebacd0
[  147.467153][ T5844] RBP: 00007ffe32ebacd0 R08: 00007ffe32ebbcd0 R09: 00000000ffffffff
[  147.467164][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe32ebbd60
[  147.467175][ T5844] R13: 00007f5ac1a32048 R14: 0000000000023f20 R15: 00007ffe32ebbda0
[  147.467211][ T5844]  </TASK>
[  147.503924][ T5844] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  147.522968][    T9] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0
[  147.617869][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  147.617899][ T5844] Tainted: [L]=SOFTLOCKUP
[  147.617906][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  147.617916][ T5844] Call Trace:
[  147.617922][ T5844]  <TASK>
[  147.617930][ T5844]  dump_stack_lvl+0xe8/0x150
[  147.617965][ T5844]  f2fs_stop_checkpoint+0x3c7/0x590
[  147.617998][ T5844]  f2fs_write_end_io+0x12e5/0x17a0
[  147.618062][ T5844]  __submit_merged_bio+0x256/0x6a0
[  147.618096][ T5844]  f2fs_submit_merged_write+0x284/0x390
[  147.618134][ T5844]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  147.618178][ T5844]  f2fs_sync_node_pages+0x11fe/0x13c0
[  147.618224][ T5844]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  147.618303][ T5844]  f2fs_write_checkpoint+0xeb8/0x26a0
[  147.618367][ T5844]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  147.618431][ T5844]  ? kfree+0x1c5/0x640
[  147.618462][ T5844]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  147.618494][ T5844]  kill_f2fs_super+0x314/0x730
[  147.618520][ T5844]  ? __pfx_kill_f2fs_super+0x10/0x10
[  147.618553][ T5844]  ? lockdep_hardirqs_on+0x7a/0x110
[  147.618591][ T5844]  deactivate_locked_super+0xbc/0x130
[  147.618620][ T5844]  cleanup_mnt+0x437/0x4d0
[  147.618638][ T5844]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.618663][ T5844]  task_work_run+0x1d9/0x270
[  147.618689][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  147.618720][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.618740][ T5844]  exit_to_user_mode_loop+0xed/0x480
[  147.618770][ T5844]  ? rcu_is_watching+0x15/0xb0
[  147.618790][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.618809][ T5844]  do_syscall_64+0x33e/0xf80
[  147.618829][ T5844]  ? trace_irq_disable+0x3b/0x140
[  147.618849][ T5844]  ? clear_bhb_loop+0x40/0x90
[  147.618871][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.618889][ T5844] RIP: 0033:0x7f5ac199da57
[  147.618908][ T5844] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  147.618921][ T5844] RSP: 002b:00007ffe32ebac18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  147.618941][ T5844] RAX: 0000000000000000 RBX: 00007f5ac1a32048 RCX: 00007f5ac199da57
[  147.618953][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe32ebacd0
[  147.618964][ T5844] RBP: 00007ffe32ebacd0 R08: 00007ffe32ebbcd0 R09: 00000000ffffffff
[  147.618975][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe32ebbd60
[  147.618986][ T5844] R13: 00007f5ac1a32048 R14: 0000000000023f20 R15: 00007ffe32ebbda0
[  147.619026][ T5844]  </TASK>
[  147.619033][ T5844] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  147.645042][ T5913] hid_mf 0003:0079:1846.0001: unknown main item tag 0x0
[  147.753070][ T7241] loop4: detected capacity change from 0 to 2048
[  147.826191][    T9] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0
[  148.053880][ T5913] hid_mf 0003:0079:1846.0001: unknown main item tag 0x0
[  148.063796][ T7241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.129043][ T5913] hid_mf 0003:0079:1846.0001: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.5-1/input0
[  148.170111][ T5913] hid_mf 0003:0079:1846.0001: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  148.222378][    T9] hid-thrustmaster 0003:044F:B65D.0002: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0
[  148.274867][    T9] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints?
[  148.306967][ T5913] usb 6-1: USB disconnect, device number 2
[  148.332626][    C0] hid-thrustmaster 0003:044F:B65D.0002: Unknown packet type 0x0, unable to proceed further with wheel init
[  148.565873][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.618340][ T7246] fido_id[7246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  148.795637][   T24] usb 4-1: USB disconnect, device number 3
[  148.972409][ T5913] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  149.199568][ T5913] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  149.209542][ T5913] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  149.228441][ T5913] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  149.257194][ T5913] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  149.297456][ T5913] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  149.326008][ T5913] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  149.334807][ T5913] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  149.375362][ T5913] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  149.422445][ T5913] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  149.476075][ T5913] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  149.510132][ T5913] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  149.521074][ T5913] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  149.553120][ T5913] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  149.586087][ T5913] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  149.608926][ T5913] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  149.647200][ T5913] usb 6-1: string descriptor 0 read error: -22
[  149.654049][ T5913] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  149.680071][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.257036][ T7283] loop2: detected capacity change from 0 to 4096
[  150.286470][ T7283] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  150.726296][ T5913] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  150.742607][ T7285] loop5: detected capacity change from 0 to 1024
[  150.744226][ T5913] usb 6-1: USB disconnect, device number 3
[  150.915266][ T7278] loop3: detected capacity change from 0 to 32768
[  150.972143][ T7276] loop4: detected capacity change from 0 to 131072
[  150.983516][ T7283] ntfs3(loop2): ino=1a, mi_enum_attr
[  150.994466][ T7283] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  151.053032][ T7278] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  151.100179][ T7276] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  151.119529][ T7276] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  151.225554][   T30] audit: type=1800 audit(1774887235.365:16): pid=7285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.495" name="file1" dev="loop5" ino=3 res=0 errno=0
[  151.294276][ T7278] XFS (loop3): Ending clean mount
[  151.408916][ T7278] XFS (loop3): Quotacheck needed: Please wait.
[  151.523118][   T36] hfsplus: b-tree write err: -5, ino 3
[  151.716498][ T7278] XFS (loop3): Quotacheck: Done.
[  152.218262][ T5847] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  153.073474][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'.
[  153.232299][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'.
[  153.352907][ T7341] netem: change failed
[  153.654532][ T7354] loop5: detected capacity change from 0 to 128
[  153.686387][ T7354] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  153.940814][ T7354] overlay: ./file0 is not a directory
[  154.459995][ T7382] Bluetooth: MGMT ver 1.23
[  154.687672][ T7391] loop5: detected capacity change from 0 to 512
[  154.721870][ T7391] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  154.812692][ T7391] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  154.903485][ T7391] EXT4-fs (loop5): 1 truncate cleaned up
[  154.925055][ T7391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.012358][ T7389] EXT4-fs warning (device loop5): ext4_group_add:1735: No reserved GDT blocks, can't resize
[  155.178464][ T6843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.578694][   T30] audit: type=1326 audit(1774887239.705:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799c819 code=0x7ffc0000
[  155.627282][ T5842] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  155.646389][   T30] audit: type=1326 audit(1774887239.705:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799c819 code=0x7ffc0000
[  155.722704][   T30] audit: type=1326 audit(1774887239.715:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799c819 code=0x7ffc0000
[  156.672355][ T7409] loop2: detected capacity change from 0 to 32768
[  156.724760][ T7409] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.533 (7409)
[  156.729586][   T30] audit: type=1326 audit(1774887239.715:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799c819 code=0x7ffc0000
[  156.759963][ T5842] usb 5-1: Using ep0 maxpacket: 8
[  156.766915][   T30] audit: type=1326 audit(1774887239.715:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a0799c819 code=0x7ffc0000
[  156.938386][ T5920] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  157.028239][ T7429] loop5: detected capacity change from 0 to 131072
[  157.038556][   T30] audit: type=1326 audit(1774887239.715:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799c819 code=0x7ffc0000
[  157.066407][   T30] audit: type=1326 audit(1774887239.745:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799c819 code=0x7ffc0000
[  157.093129][ T7429] F2FS-fs (loop5): Test dummy encryption mode enabled
[  157.101840][   T30] audit: type=1326 audit(1774887239.745:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799c819 code=0x7ffc0000
[  157.132795][ T7409] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  157.133820][ T5842] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  157.152585][ T7429] F2FS-fs (loop5): invalid crc value
[  157.164075][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.181426][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.191269][ T7409] BTRFS info (device loop2): using crc32c checksum algorithm
[  157.195023][   T30] audit: type=1326 audit(1774887239.745:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1a0799c819 code=0x7ffc0000
[  157.225228][ T5920] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  157.228077][ T5842] usb 5-1: Product: syz
[  157.256569][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.299753][ T5920] usb 4-1: config 0 descriptor??
[  157.322283][ T5842] usb 5-1: Manufacturer: syz
[  157.327052][ T5842] usb 5-1: SerialNumber: syz
[  157.337692][   T30] audit: type=1326 audit(1774887239.855:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799c819 code=0x7ffc0000
[  157.362160][ T7429] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  157.379730][ T7429] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  157.398465][ T5842] usb 5-1: config 0 descriptor??
[  157.403912][   T30] audit: type=1326 audit(1774887239.855:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a0799c582 code=0x7ffc0000
[  157.431904][   T30] audit: type=1326 audit(1774887239.855:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1a0799c617 code=0x7ffc0000
[  157.454184][   T30] audit: type=1326 audit(1774887239.885:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1a07959511 code=0x7ffc0000
[  157.504142][ T5842] gspca_main: se401-2.14.0 probing 047d:5003
[  157.572839][ T5920] usbhid 4-1:0.0: can't add hid device: -71
[  157.609949][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  157.622338][ T7409] BTRFS info (device loop2): rebuilding free space tree
[  157.716014][ T5920] usb 4-1: USB disconnect, device number 4
[  157.750877][ T7409] BTRFS info (device loop2): checking UUID tree
[  157.794143][ T7409] BTRFS info (device loop2): allowing degraded mounts
[  157.827021][ T7409] BTRFS info (device loop2): enabling ssd optimizations
[  157.845942][ T5842] gspca_se401: Bayer format not supported!
[  157.871820][ T7409] BTRFS info (device loop2): enabling free space tree
[  157.904587][ T7409] BTRFS info (device loop2): force clearing of disk cache
[  157.913860][ T7409] BTRFS info (device loop2): force zlib compression, level 3
[  158.047806][ T7409] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  158.091293][ T5913] usb 5-1: USB disconnect, device number 5
[  158.157373][ T5920] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  158.377049][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  158.422358][ T5920] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40
[  158.463786][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.523542][ T5920] usb 4-1: config 0 descriptor??
[  158.615918][ T5920] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8
[  158.886777][    C1] usb 4-1: unknown answer from device
[  158.892509][    C1] input input8: Pen battery low
[  159.094404][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  159.095086][ T5913] usb 4-1: USB disconnect, device number 5
[  159.101575][    C1] usb 4-1: pegasus_irq - usb_submit_urb failed with result -19
[  159.106922][ T5194] usb 4-1: control msg error: -71
[  159.898030][ T7483] loop1: detected capacity change from 0 to 32768
[  159.927030][ T7483] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.547 (7483)
[  159.985089][ T7483] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  160.020810][ T7483] BTRFS info (device loop1): using crc32c checksum algorithm
[  160.049039][ T7483] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  160.193048][ T7483] BTRFS info (device loop1): rebuilding free space tree
[  160.394829][ T7483] BTRFS info (device loop1): disabling free space tree
[  160.500924][ T7483] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  160.537554][   T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  160.560134][ T7483] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  160.655595][ T7483] BTRFS info (device loop1): enabling ssd optimizations
[  160.698215][ T7483] BTRFS info (device loop1): turning on async discard
[  160.715409][ T7483] BTRFS info (device loop1): enabling disk space caching
[  160.721111][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.725159][ T7483] BTRFS info (device loop1): force clearing of disk cache
[  160.756443][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.768581][ T7483] BTRFS info (device loop1): use zstd compression, level 3
[  160.785823][   T29] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  160.798431][ T7539] loop4: detected capacity change from 0 to 1024
[  160.828617][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.890918][ T7539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.922761][   T29] usb 4-1: config 0 descriptor??
[  160.975802][ T7539] EXT4-fs error (device loop4): ext4_iget_extra_inode:5043: inode #15: comm syz.4.556: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  161.171157][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.366034][   T29] hid_parser_main: 25 callbacks suppressed
[  161.366068][   T29] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x2
[  161.453709][   T29] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0
[  161.460038][ T5848] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  161.648255][ T5921] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  161.754032][   T29] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device
[  161.768736][   T29] pyra 0003:1E7D:2CF6.0003: couldn't install mouse
[  161.819677][ T5921] usb 5-1: Using ep0 maxpacket: 32
[  161.823825][   T29] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -71
[  161.873822][ T5921] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  161.901391][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.926229][ T7548] loop2: detected capacity change from 0 to 8192
[  161.927051][   T29] usb 4-1: USB disconnect, device number 6
[  161.935112][ T5921] usb 5-1: Product: syz
[  161.955111][ T5921] usb 5-1: Manufacturer: syz
[  161.966633][ T5921] usb 5-1: SerialNumber: syz
[  162.038981][ T5921] usb 5-1: config 0 descriptor??
[  162.069110][ T5921] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  162.132121][ T7535] loop5: detected capacity change from 0 to 40427
[  162.165197][ T7535] F2FS-fs (loop5): invalid crc value
[  162.564925][ T7535] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  162.589291][ T7535] F2FS-fs (loop5): Start checkpoint disabled!
[  162.633575][ T7535] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  162.667710][ T7535] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  162.910550][ T5921] gspca_ov534_9: reg_w failed -71
[  163.239542][   T13] kworker/u8:1: attempt to access beyond end of device
[  163.239542][   T13] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  163.260244][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  163.260282][   T13] Tainted: [L]=SOFTLOCKUP
[  163.260290][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  163.260303][   T13] Workqueue: writeback wb_workfn (flush-7:5)
[  163.260339][   T13] Call Trace:
[  163.260347][   T13]  <TASK>
[  163.260356][   T13]  dump_stack_lvl+0xe8/0x150
[  163.260393][   T13]  f2fs_stop_checkpoint+0x3c7/0x590
[  163.260433][   T13]  f2fs_write_end_io+0x12e5/0x17a0
[  163.260485][   T13]  __submit_merged_bio+0x256/0x6a0
[  163.260526][   T13]  __submit_merged_write_cond+0x3c9/0x4e0
[  163.260569][   T13]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  163.260631][   T13]  f2fs_write_data_pages+0x287e/0x34f0
[  163.260701][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.260808][   T13]  ? __lock_acquire+0x6b5/0x2cf0
[  163.260871][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.260894][   T13]  do_writepages+0x32e/0x550
[  163.260930][   T13]  ? reacquire_held_locks+0x104/0x190
[  163.260951][   T13]  ? writeback_sb_inodes+0x463/0x19d0
[  163.260996][   T13]  __writeback_single_inode+0x133/0x10e0
[  163.261026][   T13]  ? do_raw_spin_unlock+0xf5/0x210
[  163.261059][   T13]  writeback_sb_inodes+0x979/0x19d0
[  163.261083][   T13]  ? __lock_acquire+0x6b5/0x2cf0
[  163.261149][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  163.261173][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  163.261252][   T13]  ? rcu_is_watching+0x15/0xb0
[  163.261287][   T13]  wb_writeback+0x445/0xb00
[  163.261320][   T13]  ? queue_io+0x211/0x470
[  163.261357][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  163.261380][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  163.261427][   T13]  wb_workfn+0x3f8/0xf10
[  163.261447][   T13]  ? __lock_acquire+0x6b5/0x2cf0
[  163.261474][   T13]  ? look_up_lock_class+0x57/0x110
[  163.261531][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  163.261559][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  163.261581][   T13]  ? lock_acquire+0x106/0x350
[  163.261613][   T13]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  163.261643][   T13]  ? process_scheduled_works+0xa70/0x1860
[  163.261676][   T13]  ? process_scheduled_works+0xa70/0x1860
[  163.261716][   T13]  ? process_scheduled_works+0xa70/0x1860
[  163.261744][   T13]  ? process_scheduled_works+0xa70/0x1860
[  163.261776][   T13]  process_scheduled_works+0xb5d/0x1860
[  163.261851][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  163.261891][   T13]  ? assign_work+0x3d5/0x5e0
[  163.261929][   T13]  worker_thread+0xa53/0xfc0
[  163.262006][   T13]  kthread+0x388/0x470
[  163.262031][   T13]  ? __pfx_worker_thread+0x10/0x10
[  163.262060][   T13]  ? __pfx_kthread+0x10/0x10
[  163.262086][   T13]  ret_from_fork+0x514/0xb70
[  163.262119][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  163.262148][   T13]  ? __switch_to+0xc7d/0x1420
[  163.262182][   T13]  ? __pfx_kthread+0x10/0x10
[  163.262209][   T13]  ret_from_fork_asm+0x1a/0x30
[  163.262254][   T13]  </TASK>
[  163.263625][   T13] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  163.532741][ T7561] loop3: detected capacity change from 0 to 40427
[  163.596100][ T5921] gspca_ov534_9: Unknown sensor 0000
[  163.596209][ T5921] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  163.621119][ T5921] usb 5-1: USB disconnect, device number 6
[  163.628147][ T7561] F2FS-fs (loop3): invalid crc value
[  163.791361][ T7561] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  163.832389][ T7561] F2FS-fs (loop3): Start checkpoint disabled!
[  163.977606][ T7561] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  163.997658][ T7561] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  164.569970][ T7580] netlink: 84 bytes leftover after parsing attributes in process `syz.2.574'.
[  164.615309][ T7583] netlink: 84 bytes leftover after parsing attributes in process `syz.5.568'.
[  164.628855][ T7580] netlink: 84 bytes leftover after parsing attributes in process `syz.2.574'.
[  165.142007][ T7596] loop5: detected capacity change from 0 to 512
[  165.203257][ T7596] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  165.302572][ T7594] loop2: detected capacity change from 0 to 32768
[  165.324980][ T7594] (syz.2.579,7594,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  165.347370][ T7594] (syz.2.579,7594,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  165.384475][ T7594] (syz.2.579,7594,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[  165.385616][ T7596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.414281][ T7594] (syz.2.579,7594,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[  165.432839][ T7594] JBD2: Ignoring recovery information on journal
[  165.467672][ T7601] loop3: detected capacity change from 0 to 1024
[  165.498116][ T7594] (syz.2.579,7594,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[  165.514871][ T7594] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  165.531807][ T7594] (syz.2.579,7594,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[  165.553342][ T7594] (syz.2.579,7594,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  165.556139][ T7601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.603437][ T7601] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.656632][ T7596] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.580: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0
[  165.721813][ T7596] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 12: comm syz.5.580: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0
[  165.785627][ T7594] (syz.2.579,7594,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC.
[  165.793482][ T7609] EXT4-fs error (device loop5): ext4_map_blocks:789: inode #2: block 18: comm syz.5.580: lblock 23 mapped to illegal pblock 18 (length 1)
[  165.807159][ T7594] (syz.2.579,7594,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC.
[  165.832437][ T7594] (syz.2.579,7594,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af
[  165.845116][ T7594] (syz.2.579,7594,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  165.854066][ T7594] (syz.2.579,7594,0):ocfs2_quota_read:201 ERROR: status = -5
[  165.862322][ T7594] __quota_error: 17 callbacks suppressed
[  165.862340][ T7594] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 5
[  165.872810][ T7596] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 13: comm syz.5.580: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0
[  165.877777][ T7594] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  165.908033][ T7594] (syz.2.579,7594,0):ocfs2_acquire_dquot:904 ERROR: status = -5
[  165.910184][ T7586] loop4: detected capacity change from 0 to 32768
[  165.918334][ T7594] (syz.2.579,7594,0):ocfs2_mknod:318 ERROR: status = -5
[  165.929778][ T7594] (syz.2.579,7594,0):ocfs2_mknod:506 ERROR: status = -5
[  165.938070][ T7594] (syz.2.579,7594,0):ocfs2_create:679 ERROR: status = -5
[  166.020425][ T7601] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.571: bg 0: block 112: padding at end of block bitmap is not set
[  166.056011][ T7594] syz.2.579 (7594) used greatest stack depth: 18040 bytes left
[  166.082101][ T6843] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  166.114676][ T7601] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  166.126086][ T6843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.132867][ T7586] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  166.166563][ T7601] EXT4-fs (loop3): This should not happen!! Data will be lost
[  166.166563][ T7601] 
[  166.193067][ T7601] EXT4-fs (loop3): Total free blocks count 0
[  166.214642][ T7601] EXT4-fs (loop3): Free/Dirty block details
[  166.246548][ T7601] EXT4-fs (loop3): free_blocks=0
[  166.258558][ T5844] ocfs2: Unmounting device (7,2) on (node local)
[  166.263171][ T7586] XFS (loop4): Ending clean mount
[  166.301219][ T7586] XFS (loop4): Quotacheck needed: Please wait.
[  166.318591][ T7601] EXT4-fs (loop3): dirty_blocks=64
[  166.329230][ T7601] EXT4-fs (loop3): Block reservation details
[  166.346368][ T7601] EXT4-fs (loop3): i_reserved_data_blocks=4
[  166.461591][ T5847] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  166.505517][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  166.554782][ T7586] XFS (loop4): Quotacheck: Done.
[  166.753895][ T5839] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  166.850816][ T7622] bond1: entered allmulticast mode
[  166.863430][ T7622] 8021q: adding VLAN 0 to HW filter on device bond1
[  167.175896][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.587'.
[  167.476623][ T7637] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.586348][ T7637] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.698778][ T7637] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.825747][ T7644] loop2: detected capacity change from 0 to 40427
[  167.833414][ T7644] F2FS-fs: heap/no_heap options were deprecated
[  167.848496][ T7644] F2FS-fs (loop2): build fault injection rate: 690
[  167.859895][ T7644] F2FS-fs (loop2): invalid crc value
[  167.875177][ T7637] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.036471][ T7644] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  168.062791][ T7644] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  168.088426][   T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.168489][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.258646][ T5844] syz-executor: attempt to access beyond end of device
[  168.258646][ T5844] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  168.296720][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.309119][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  168.309152][ T5844] Tainted: [L]=SOFTLOCKUP
[  168.309159][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  168.309172][ T5844] Call Trace:
[  168.309180][ T5844]  <TASK>
[  168.309188][ T5844]  dump_stack_lvl+0xe8/0x150
[  168.309226][ T5844]  f2fs_stop_checkpoint+0x3c7/0x590
[  168.309265][ T5844]  f2fs_write_end_io+0x12e5/0x17a0
[  168.309315][ T5844]  __submit_merged_bio+0x256/0x6a0
[  168.309354][ T5844]  __submit_merged_write_cond+0x3c9/0x4e0
[  168.309394][ T5844]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  168.309451][ T5844]  f2fs_write_data_pages+0x287e/0x34f0
[  168.309472][ T5844]  ? unwind_next_frame+0xa6/0x2550
[  168.309544][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  168.309564][ T5844]  ? is_bpf_text_address+0x26/0x2b0
[  168.309607][ T5844]  ? arch_stack_walk+0xfb/0x150
[  168.309664][ T5844]  ? add_lock_to_list+0xc7/0x100
[  168.309689][ T5844]  ? lockdep_unlock+0x5d/0xd0
[  168.309714][ T5844]  ? __lock_acquire+0x146e/0x2cf0
[  168.309775][ T5844]  ? do_raw_spin_lock+0x12b/0x2f0
[  168.309814][ T5844]  ? do_raw_spin_unlock+0xf5/0x210
[  168.309840][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  168.309862][ T5844]  do_writepages+0x32e/0x550
[  168.309900][ T5844]  ? do_raw_spin_unlock+0xf5/0x210
[  168.309929][ T5844]  filemap_fdatawrite+0x1e9/0x2f0
[  168.309959][ T5844]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  168.310040][ T5844]  ? preempt_schedule_common+0x82/0xd0
[  168.310067][ T5844]  ? preempt_schedule_thunk+0x16/0x30
[  168.310103][ T5844]  f2fs_sync_dirty_inodes+0x30e/0x830
[  168.310144][ T5844]  f2fs_write_checkpoint+0x9df/0x26a0
[  168.310166][ T5844]  ? __lock_acquire+0x6b5/0x2cf0
[  168.310234][ T5844]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  168.310322][ T5844]  kill_f2fs_super+0x314/0x730
[  168.310352][ T5844]  ? __pfx_kill_f2fs_super+0x10/0x10
[  168.310390][ T5844]  ? lockdep_hardirqs_on+0x7a/0x110
[  168.310440][ T5844]  deactivate_locked_super+0xbc/0x130
[  168.310474][ T5844]  cleanup_mnt+0x437/0x4d0
[  168.310493][ T5844]  ? _raw_spin_unlock_irq+0x23/0x50
[  168.310523][ T5844]  task_work_run+0x1d9/0x270
[  168.310551][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  168.310594][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.310615][ T5844]  exit_to_user_mode_loop+0xed/0x480
[  168.310642][ T5844]  ? rcu_is_watching+0x15/0xb0
[  168.310664][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.310686][ T5844]  do_syscall_64+0x33e/0xf80
[  168.310711][ T5844]  ? trace_irq_disable+0x3b/0x140
[  168.310737][ T5844]  ? clear_bhb_loop+0x40/0x90
[  168.310759][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.310779][ T5844] RIP: 0033:0x7f5ac199da57
[  168.310798][ T5844] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  168.310814][ T5844] RSP: 002b:00007ffe32ebac18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  168.310836][ T5844] RAX: 0000000000000000 RBX: 00007f5ac1a32048 RCX: 00007f5ac199da57
[  168.310850][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe32ebacd0
[  168.310861][ T5844] RBP: 00007ffe32ebacd0 R08: 00007ffe32ebbcd0 R09: 00000000ffffffff
[  168.310875][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe32ebbd60
[  168.310886][ T5844] R13: 00007f5ac1a32048 R14: 00000000000290e4 R15: 00007ffe32ebbda0
[  168.310922][ T5844]  </TASK>
[  168.405240][ T5844] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  168.524362][ T7653] loop5: detected capacity change from 0 to 1764
[  168.675752][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.978487][ T7663] loop3: detected capacity change from 0 to 1024
[  169.010852][ T7663] EXT4-fs: quotafile must be on filesystem root
[  169.266812][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.602'.
[  169.317198][ T5842] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  169.342703][ T7660] loop4: detected capacity change from 0 to 32768
[  169.391923][ T7660] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  169.400282][ T7660] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  169.463848][ T7660] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  169.467236][ T5842] usb 4-1: Using ep0 maxpacket: 8
[  169.477496][ T5921] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  169.491065][ T5842] usb 4-1: unable to get BOS descriptor or descriptor too short
[  169.504354][ T5921] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  169.512118][ T5842] usb 4-1: config 17 has an invalid interface number: 8 but max is 1
[  169.531564][ T5842] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2
[  169.543585][ T5842] usb 4-1: config 17 has no interface number 0
[  169.550070][ T5842] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 99, changing to 10
[  169.574470][ T5842] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 8407, setting to 1024
[  169.589477][ T7671] loop1: detected capacity change from 0 to 512
[  169.660400][ T5842] usb 4-1: config 17 interface 8 has no altsetting 0
[  169.676590][ T7671] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  169.713753][ T7671] EXT4-fs (loop1): orphan cleanup on readonly fs
[  169.728283][ T7671] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.603: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 2052(4), depth 0(0)
[  169.748211][ T7671] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[  169.753197][ T5842] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  169.762734][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  169.762778][    C1] EXT4-fs (loop1): last error at time 1774887253: ext4_ext_check_inode:521: inode 4
[  169.775328][ T5921] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 270ms
[  169.781262][ T7671] EXT4-fs error (device loop1): ext4_quota_enable:7195: comm syz.1.603: Bad quota inode: 4, type: 1
[  169.800909][ T5921] gfs2: fsid=syz:syz.0: jid=0: Done
[  169.815633][ T7660] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  169.827657][ T7671] loop1: lost filesystem error report for type 5 error -117
[  169.844933][ T7671] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  169.896931][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.974315][ T5842] usb 4-1: Product: syz
[  169.979848][ T7671] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  169.988646][ T5842] usb 4-1: Manufacturer: syz
[  170.015867][ T5842] usb 4-1: SerialNumber: syz
[  170.027048][ T7671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  170.300055][ T5842] usb 4-1: selecting invalid altsetting 0
[  170.366436][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.557718][ T5842] usb 4-1: USB disconnect, device number 7
[  170.648060][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.944287][ T7692] loop2: detected capacity change from 0 to 2048
[  171.047323][ T5863]  loop2: p3 < > p4 < >
[  171.064646][ T5863] loop2: partition table partially beyond EOD, truncated
[  171.098149][ T5863] loop2: p3 start 4284289 is beyond EOD, truncated
[  171.119519][ T7697] capability: warning: `syz.1.613' uses 32-bit capabilities (legacy support in use)
[  171.206113][ T7692]  loop2: p3 < > p4 < >
[  171.225931][ T7692] loop2: partition table partially beyond EOD, truncated
[  171.258513][ T7692] loop2: p3 start 4284289 is beyond EOD, truncated
[  171.491601][ T5209]  loop2: p3 < > p4 < >
[  171.503747][ T5209] loop2: partition table partially beyond EOD, truncated
[  171.527346][ T5209] loop2: p3 start 4284289 is beyond EOD, truncated
[  171.596821][ T7709] loop3: detected capacity change from 0 to 4096
[  171.717772][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  172.081505][ T7720] loop2: detected capacity change from 0 to 1024
[  172.101397][ T7717] loop4: detected capacity change from 0 to 32768
[  172.111046][ T7717] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.621 (7717)
[  172.115645][ T7720] EXT4-fs: inline encryption not supported
[  172.177004][ T7717] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  172.187308][ T7717] BTRFS info (device loop4): using xxhash64 checksum algorithm
[  172.195039][ T7717] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  172.228906][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  172.304929][ T7720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  172.333432][ T7717] BTRFS info (device loop4): rebuilding free space tree
[  172.400116][ T7717] BTRFS info (device loop4): disabling free space tree
[  172.407287][ T7717] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  172.418720][ T7717] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  172.437864][ T7717] BTRFS info (device loop4): setting nodatasum
[  172.444295][ T7717] BTRFS info (device loop4): allowing degraded mounts
[  172.451336][ T7717] BTRFS info (device loop4): turning on async discard
[  172.455319][ T7710] loop5: detected capacity change from 0 to 32768
[  172.458152][ T7717] BTRFS info (device loop4): enabling disk space caching
[  172.458174][ T7717] BTRFS info (device loop4): force clearing of disk cache
[  172.458194][ T7717] BTRFS info (device loop4): force zlib compression, level 3
[  172.512684][ T7720] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.581475][ T7717] BTRFS info (device loop4): balance: start -susage=1,usage=1..0,drange=6..6,vrange=8..15,limit=2,stripes=7..3
[  172.594917][ T7717] BTRFS info (device loop4): balance: ended with status: 0
[  172.626963][ T7710] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  172.784802][ T5839] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  172.811498][ T7710] XFS (loop5): Ending clean mount
[  172.854583][ T7749] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.624: Freeing blocks not in datazone - block = 0, count = 16
[  172.860556][ T7710] XFS (loop5): Quotacheck needed: Please wait.
[  173.100563][ T5844] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  173.111949][ T7710] XFS (loop5): Quotacheck: Done.
[  173.189822][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  173.435344][ T6843] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  173.648956][ T7764] netlink: 71 bytes leftover after parsing attributes in process `syz.4.632'.
[  174.414343][ T7762] loop3: detected capacity change from 0 to 40427
[  174.442198][ T7762] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  174.459278][ T7762] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  174.516929][ T7762] F2FS-fs (loop3): invalid crc value
[  174.831219][ T7762] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  174.831653][ T7781] dvmrp1: tun_chr_ioctl cmd 35108
[  174.872576][ T7762] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  174.892246][ T7762] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  175.180935][ T7768] loop5: detected capacity change from 0 to 40427
[  175.234485][ T7768] F2FS-fs (loop5): invalid crc value
[  175.438692][ T7800] netlink: 32 bytes leftover after parsing attributes in process `syz.2.644'.
[  175.547510][ T7768] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  175.593506][ T7768] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  175.973574][ T6843] syz-executor: attempt to access beyond end of device
[  175.973574][ T6843] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  176.053491][ T6843] CPU: 0 UID: 0 PID: 6843 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  176.053529][ T6843] Tainted: [L]=SOFTLOCKUP
[  176.053537][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  176.053549][ T6843] Call Trace:
[  176.053557][ T6843]  <TASK>
[  176.053566][ T6843]  dump_stack_lvl+0xe8/0x150
[  176.053615][ T6843]  f2fs_stop_checkpoint+0x3c7/0x590
[  176.053654][ T6843]  f2fs_write_end_io+0x12e5/0x17a0
[  176.053707][ T6843]  __submit_merged_bio+0x256/0x6a0
[  176.053748][ T6843]  __submit_merged_write_cond+0x3c9/0x4e0
[  176.053791][ T6843]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  176.053853][ T6843]  f2fs_write_data_pages+0x287e/0x34f0
[  176.053873][ T6843]  ? unwind_next_frame+0xa6/0x2550
[  176.053943][ T6843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  176.053961][ T6843]  ? is_bpf_text_address+0x26/0x2b0
[  176.054006][ T6843]  ? arch_stack_walk+0xfb/0x150
[  176.054069][ T6843]  ? add_lock_to_list+0xc7/0x100
[  176.054096][ T6843]  ? lockdep_unlock+0x5d/0xd0
[  176.054121][ T6843]  ? __lock_acquire+0x146e/0x2cf0
[  176.054189][ T6843]  ? do_raw_spin_lock+0x12b/0x2f0
[  176.054230][ T6843]  ? do_raw_spin_unlock+0xf5/0x210
[  176.054257][ T6843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  176.054281][ T6843]  do_writepages+0x32e/0x550
[  176.054322][ T6843]  ? do_raw_spin_unlock+0xf5/0x210
[  176.054354][ T6843]  filemap_fdatawrite+0x1e9/0x2f0
[  176.054392][ T6843]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  176.054480][ T6843]  ? do_raw_spin_unlock+0xf5/0x210
[  176.054511][ T6843]  f2fs_sync_dirty_inodes+0x30e/0x830
[  176.054554][ T6843]  f2fs_write_checkpoint+0x9df/0x26a0
[  176.054577][ T6843]  ? __lock_acquire+0x6b5/0x2cf0
[  176.054662][ T6843]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  176.054758][ T6843]  kill_f2fs_super+0x314/0x730
[  176.054789][ T6843]  ? __pfx_kill_f2fs_super+0x10/0x10
[  176.054830][ T6843]  ? lockdep_hardirqs_on+0x7a/0x110
[  176.054875][ T6843]  deactivate_locked_super+0xbc/0x130
[  176.054911][ T6843]  cleanup_mnt+0x437/0x4d0
[  176.054933][ T6843]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.054964][ T6843]  task_work_run+0x1d9/0x270
[  176.054995][ T6843]  ? __pfx_task_work_run+0x10/0x10
[  176.055031][ T6843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.055055][ T6843]  exit_to_user_mode_loop+0xed/0x480
[  176.055083][ T6843]  ? rcu_is_watching+0x15/0xb0
[  176.055107][ T6843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.055130][ T6843]  do_syscall_64+0x33e/0xf80
[  176.055156][ T6843]  ? trace_irq_disable+0x3b/0x140
[  176.055182][ T6843]  ? clear_bhb_loop+0x40/0x90
[  176.055209][ T6843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.055230][ T6843] RIP: 0033:0x7fb83199da57
[  176.055251][ T6843] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  176.055268][ T6843] RSP: 002b:00007fff131def78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  176.055292][ T6843] RAX: 0000000000000000 RBX: 00007fb831a32048 RCX: 00007fb83199da57
[  176.055307][ T6843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff131df030
[  176.055320][ T6843] RBP: 00007fff131df030 R08: 00007fff131e0030 R09: 00000000ffffffff
[  176.055334][ T6843] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff131e00c0
[  176.055346][ T6843] R13: 00007fb831a32048 R14: 000000000002aed5 R15: 00007fff131e0100
[  176.055385][ T6843]  </TASK>
[  176.437980][ T6843] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  176.904117][   T29] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  176.920579][   T29] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  176.929373][   T29] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  176.944513][   T29] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  176.955581][   T29] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  176.973588][   T29] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  176.982020][   T29] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  176.989846][   T29] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  176.999716][   T29] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  177.009528][ T5921] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  177.011527][   T29] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0
[  177.040813][   T29] hid-generic 0006:0004:0009.0004: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  177.194189][ T7834] fido_id[7834]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  177.215034][ T5921] usb 6-1: Using ep0 maxpacket: 32
[  177.237796][ T5921] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  177.264417][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.302202][ T5921] usb 6-1: config 0 descriptor??
[  177.368473][ T5921] as10x_usb: device has been detected
[  177.383277][ T5921] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  177.485750][ T5921] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  177.560433][ T7826] ------------[ cut here ]------------
[  177.565975][ T7826] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[  177.565995][ T7826] WARNING: kernel/locking/mutex.c:611 at __mutex_lock+0x11c1/0x1420, CPU#0: syz.5.651/7826
[  177.582456][ T7826] Modules linked in:
[  177.586359][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: syz.5.651 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  177.597193][ T7826] Tainted: [L]=SOFTLOCKUP
[  177.601578][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  177.612190][ T7826] RIP: 0010:__mutex_lock+0x11c8/0x1420
[  177.618064][ T7826] Code: 12 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 36 02 00 00 83 3d 6c d5 5e 04 00 75 13 48 8d 3d 1f ed 61 04 48 c7 c6 c0 e7 cc 8b <67> 48 0f b9 3a 90 e9 91 ef ff ff 90 0f 0b 90 e9 a6 f3 ff ff 90 0f
[  177.638391][ T7826] RSP: 0018:ffffc90004e37a20 EFLAGS: 00010246
[  177.644747][ T7826] RAX: 0000000000000000 RBX: 1ffff920009c6f5c RCX: 0000000000080000
[  177.653006][ T7826] RDX: ffffc90003a99000 RSI: ffffffff8bcce7c0 RDI: ffffffff9015d5a0
[  177.661185][ T7826] RBP: ffffc90004e37bd8 R08: ffffffff9012bde3 R09: 1ffffffff20257bc
[  177.669408][ T7826] R10: dffffc0000000000 R11: fffffbfff20257bd R12: ffff88806b884b30
[  177.677477][ T7826] R13: dffffc0000000000 R14: ffff88806b884000 R15: 0000000000000000
[  177.685927][ T7826] FS:  00007fb83285a6c0(0000) GS:ffff88812543f000(0000) knlGS:0000000000000000
[  177.694991][ T7826] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.701663][ T7826] CR2: 000000110c37aa33 CR3: 0000000031cee000 CR4: 00000000003526f0
[  177.709707][ T7826] Call Trace:
[  177.713019][ T7826]  <TASK>
[  177.715981][ T7826]  ? trace_contention_end+0x3d/0x140
[  177.721530][ T7826]  ? __mutex_lock+0x320/0x1420
[  177.726432][ T7826]  ? as102_dvb_dmx_start_feed+0x70/0x290
[  177.732242][ T7826]  ? __pfx___mutex_lock+0x10/0x10
[  177.737419][ T7826]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  177.743097][ T7826]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  177.749165][ T7826]  ? do_raw_spin_lock+0x12b/0x2f0
[  177.754468][ T7826]  as102_dvb_dmx_start_feed+0x70/0x290
[  177.760174][ T7826]  dmx_section_feed_start_filtering+0x518/0x6c0
[  177.766464][ T7826]  dvb_dmxdev_filter_start+0xcf4/0x10e0
[  177.772067][ T7826]  ? dvb_dmxdev_filter_set+0x2d1/0x580
[  177.777570][ T7826]  dvb_demux_do_ioctl+0x470/0x540
[  177.782812][ T7826]  dvb_usercopy+0x199/0x2e0
[  177.787424][ T7826]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  177.792994][ T7826]  ? __pfx_dvb_usercopy+0x10/0x10
[  177.798058][ T7826]  ? __fget_files+0x3a0/0x420
[  177.802854][ T7826]  ? __fget_files+0x2a/0x420
[  177.807582][ T7826]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  177.812907][ T7826]  dvb_demux_ioctl+0x29/0x40
[  177.817569][ T7826]  __se_sys_ioctl+0xfc/0x170
[  177.822195][ T7826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.828332][ T7826]  do_syscall_64+0x15f/0xf80
[  177.832953][ T7826]  ? trace_irq_disable+0x3b/0x140
[  177.838191][ T7826]  ? clear_bhb_loop+0x40/0x90
[  177.842904][ T7826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.848923][ T7826] RIP: 0033:0x7fb83199c819
[  177.853373][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.873351][ T7826] RSP: 002b:00007fb83285a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  177.882048][ T7826] RAX: ffffffffffffffda RBX: 00007fb831c15fa0 RCX: 00007fb83199c819
[  177.890080][ T7826] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004
[  177.898090][ T7826] RBP: 00007fb831a32c91 R08: 0000000000000000 R09: 0000000000000000
[  177.906170][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.914279][ T7826] R13: 00007fb831c16038 R14: 00007fb831c15fa0 R15: 00007fff131dfd08
[  177.922344][ T7826]  </TASK>
[  177.925435][ T7826] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  177.932891][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: syz.5.651 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  177.943662][ T7826] Tainted: [L]=SOFTLOCKUP
[  177.947995][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  177.958234][ T7826] Call Trace:
[  177.961545][ T7826]  <TASK>
[  177.964521][ T7826]  vpanic+0x56c/0xa60
[  177.968549][ T7826]  ? __pfx__printk+0x10/0x10
[  177.973159][ T7826]  ? __pfx_vpanic+0x10/0x10
[  177.977754][ T7826]  ? is_bpf_text_address+0x292/0x2b0
[  177.983219][ T7826]  ? is_bpf_text_address+0x26/0x2b0
[  177.988425][ T7826]  panic+0xc5/0xd0
[  177.992153][ T7826]  ? __pfx_panic+0x10/0x10
[  177.996580][ T7826]  __warn+0x315/0x4c0
[  178.000582][ T7826]  ? __mutex_lock+0x11c1/0x1420
[  178.005451][ T7826]  ? __mutex_lock+0x11c1/0x1420
[  178.010311][ T7826]  __report_bug+0x29a/0x540
[  178.014818][ T7826]  ? lock_release+0x4b/0x3c0
[  178.019421][ T7826]  ? lock_release+0x4b/0x3c0
[  178.024025][ T7826]  ? __mutex_lock+0x11c1/0x1420
[  178.028884][ T7826]  ? __pfx___report_bug+0x10/0x10
[  178.033913][ T7826]  ? is_bpf_text_address+0x26/0x2b0
[  178.039134][ T7826]  ? __lock_acquire+0x6b5/0x2cf0
[  178.044083][ T7826]  report_bug_entry+0x19a/0x290
[  178.048943][ T7826]  ? __mutex_lock+0x11c8/0x1420
[  178.053802][ T7826]  ? __mutex_lock+0x11cd/0x1420
[  178.058659][ T7826]  handle_bug+0xce/0x200
[  178.062915][ T7826]  exc_invalid_op+0x1a/0x50
[  178.067430][ T7826]  asm_exc_invalid_op+0x1a/0x20
[  178.072287][ T7826] RIP: 0010:__mutex_lock+0x11c8/0x1420
[  178.077841][ T7826] Code: 12 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 36 02 00 00 83 3d 6c d5 5e 04 00 75 13 48 8d 3d 1f ed 61 04 48 c7 c6 c0 e7 cc 8b <67> 48 0f b9 3a 90 e9 91 ef ff ff 90 0f 0b 90 e9 a6 f3 ff ff 90 0f
[  178.097462][ T7826] RSP: 0018:ffffc90004e37a20 EFLAGS: 00010246
[  178.103535][ T7826] RAX: 0000000000000000 RBX: 1ffff920009c6f5c RCX: 0000000000080000
[  178.111509][ T7826] RDX: ffffc90003a99000 RSI: ffffffff8bcce7c0 RDI: ffffffff9015d5a0
[  178.119574][ T7826] RBP: ffffc90004e37bd8 R08: ffffffff9012bde3 R09: 1ffffffff20257bc
[  178.127552][ T7826] R10: dffffc0000000000 R11: fffffbfff20257bd R12: ffff88806b884b30
[  178.135622][ T7826] R13: dffffc0000000000 R14: ffff88806b884000 R15: 0000000000000000
[  178.143629][ T7826]  ? trace_contention_end+0x3d/0x140
[  178.148937][ T7826]  ? __mutex_lock+0x320/0x1420
[  178.153985][ T7826]  ? as102_dvb_dmx_start_feed+0x70/0x290
[  178.159635][ T7826]  ? __pfx___mutex_lock+0x10/0x10
[  178.164676][ T7826]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  178.170410][ T7826]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  178.176487][ T7826]  ? do_raw_spin_lock+0x12b/0x2f0
[  178.181522][ T7826]  as102_dvb_dmx_start_feed+0x70/0x290
[  178.187006][ T7826]  dmx_section_feed_start_filtering+0x518/0x6c0
[  178.193256][ T7826]  dvb_dmxdev_filter_start+0xcf4/0x10e0
[  178.198805][ T7826]  ? dvb_dmxdev_filter_set+0x2d1/0x580
[  178.204271][ T7826]  dvb_demux_do_ioctl+0x470/0x540
[  178.209310][ T7826]  dvb_usercopy+0x199/0x2e0
[  178.213823][ T7826]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  178.219371][ T7826]  ? __pfx_dvb_usercopy+0x10/0x10
[  178.224402][ T7826]  ? __fget_files+0x3a0/0x420
[  178.229085][ T7826]  ? __fget_files+0x2a/0x420
[  178.233682][ T7826]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  178.238970][ T7826]  dvb_demux_ioctl+0x29/0x40
[  178.243583][ T7826]  __se_sys_ioctl+0xfc/0x170
[  178.248181][ T7826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.254425][ T7826]  do_syscall_64+0x15f/0xf80
[  178.259022][ T7826]  ? trace_irq_disable+0x3b/0x140
[  178.264153][ T7826]  ? clear_bhb_loop+0x40/0x90
[  178.268837][ T7826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.274740][ T7826] RIP: 0033:0x7fb83199c819
[  178.279159][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.299214][ T7826] RSP: 002b:00007fb83285a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  178.307635][ T7826] RAX: ffffffffffffffda RBX: 00007fb831c15fa0 RCX: 00007fb83199c819
[  178.315614][ T7826] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004
[  178.323619][ T7826] RBP: 00007fb831a32c91 R08: 0000000000000000 R09: 0000000000000000
[  178.331774][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  178.339751][ T7826] R13: 00007fb831c16038 R14: 00007fb831c15fa0 R15: 00007fff131dfd08
[  178.347731][ T7826]  </TASK>
[  178.350934][ T7826] Kernel Offset: disabled
[  178.355251][ T7826] Rebooting in 86400 seconds..