last executing test programs:

24m28.814962574s ago: executing program 32 (id=4101):
add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000880)="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", 0x110, 0xffffffffffffffff)

23m4.399461721s ago: executing program 33 (id=4810):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_FLOW={0x8, 0xb, 0x2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000)

17m44.370902152s ago: executing program 34 (id=11588):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x7, 0xff, 0x34343459, 0x32314742, 0x2, 0x7e, 0x6, 0x2, 0x1, 0x3, 0x2, 0x6}})

17m38.691248812s ago: executing program 35 (id=11681):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc25}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x355}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xdc0, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

11m48.584916871s ago: executing program 36 (id=16162):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a000100717565756500000014000280080004400700000006000340000300000900010073797a30000000000900020073797a3200"], 0xa0}}, 0x0)

7m35.430770136s ago: executing program 9 (id=17302):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000017c0)={0x0, 0x0})

7m34.965609923s ago: executing program 9 (id=17306):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000f00)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0xea}, 0x90)

7m33.666355863s ago: executing program 9 (id=17318):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000001480)=0xc000000, 0x4)

7m33.363847738s ago: executing program 9 (id=17320):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000001080))

7m31.439500867s ago: executing program 9 (id=17330):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000200)='./file1\x00', 0x3010846, &(0x7f0000000240)=ANY=[@ANYBLOB='discard=0x00000000000000f4,errors=continue,grpquota,iocharset=macinuit,grpquota,noquota,nointegrity,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB], 0x24, 0x62e1, &(0x7f000000a880)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)

7m27.354876188s ago: executing program 9 (id=17344):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x8084)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="18200000410001000800000000000000030100000f0000001200010000112233445566778899aabb86dd000004000280e51f03801d12178014005d"], 0x2018}}, 0x0)

7m11.226710838s ago: executing program 37 (id=17344):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x8084)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="18200000410001000800000000000000030100000f0000001200010000112233445566778899aabb86dd000004000280e51f03801d12178014005d"], 0x2018}}, 0x0)

4m46.372877273s ago: executing program 4 (id=17990):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

4m45.357801508s ago: executing program 4 (id=17994):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2)

4m40.30733521s ago: executing program 4 (id=18008):
syz_open_dev$dvb_frontend(&(0x7f0000000140), 0x0, 0x203)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
close(0x3)

4m39.951545777s ago: executing program 4 (id=18010):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1c5)
mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4m37.72329705s ago: executing program 4 (id=18017):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa)

4m35.228677513s ago: executing program 4 (id=18029):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000f00), 0x4)
sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001000)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000001080)=[{&(0x7f00000010c0)="f4000900062b2c25fec0000000000000dc8b850f238466ccfe807a000000bd6e911b51818462b400", 0x28}], 0x1}, 0x0)

4m34.12935524s ago: executing program 38 (id=18029):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000f00), 0x4)
sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001000)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000001080)=[{&(0x7f00000010c0)="f4000900062b2c25fec0000000000000dc8b850f238466ccfe807a000000bd6e911b51818462b400", 0x28}], 0x1}, 0x0)

3m8.409857813s ago: executing program 2 (id=18465):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000e41400000018000180140002006e657464657673696d3000000000000008000400060000000800050000000000080003"], 0x44}}, 0x0)

3m8.025737415s ago: executing program 2 (id=18469):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x301, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}}, 0x20040000)

3m7.780197662s ago: executing program 2 (id=18473):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa00)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\x00#\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "0000000002000000f5ff002100", "f9ff4602", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]})
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd})

3m7.479398184s ago: executing program 2 (id=18477):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)

3m7.207472951s ago: executing program 2 (id=18480):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@gid}, {@gid}, {@nls={'nls', 0x3d, 'cp855'}}, {@force}]}, 0x1, 0x5e6, &(0x7f0000002f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})

3m6.956781909s ago: executing program 2 (id=18482):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd70000000001f30000000180001801400020064756d6d7930"], 0x2c}}, 0x0)

2m50.7090511s ago: executing program 39 (id=18482):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd70000000001f30000000180001801400020064756d6d7930"], 0x2c}}, 0x0)

2m30.858859399s ago: executing program 0 (id=18711):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[], 0xfc, 0xc41, &(0x7f0000001b80)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0)
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfd000/0x400000)=nil)

2m30.670933037s ago: executing program 0 (id=18713):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004540000000c0a090000000000000000000a0000060900020073797a31000000000900010073797a310000000028000380180000800c00018006000100d103000008000340000000010c00008008000340000000022c0000000e0a010200000000000000000a0000000900020073797a31000000000900010073797a310000000014000000110001"], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2m30.26823067s ago: executing program 0 (id=18716):
r0 = socket$kcm(0x29, 0x5, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3e, 0x0)

2m26.888159246s ago: executing program 0 (id=18742):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x10e, &(0x7f0000000580), 0x3, 0x464, &(0x7f00000005c0)="$eJzs3MtvG8UfAPDvbpK26eOX/Ep5tBQIFETEI2nSAj1wAAQSB0BIXMoxJGlVmjaoCRKtKggIlSMq4o44gvgLOMEFASckrnBHlSrUC4WT0Xp360dtN02dONSfj7T2zO7YM+PZsWd2sgmgb41lD0nEzoj4LSJG8mhjgrH86eqV87N/Xzk/m0Sl8safSTXdX1fOz5ZJy9ftKCLjaUT6cRL3tsh36ey5kzMLC/Nnivjk8ql3JpfOnnvyxKmZ4/PH509PHzly+NDUM09PP9WVev4/K+u+9xf37335zYuvzh69+NZP3yRl/ZvqccuGq49jnZI8Uql0LbvNYFddOBnsYUG4KQMRkTXXULX/j8RA1BpvJF76qKeFA9ZVpdDm8EoFuI0l0esSAL1R/tBn899y27jRR+9dfj6fAGX1vlps+ZHBSCOfGA01zW+7aSwijq7880W2RbevQwAAtPBdNv55otX4L4276tL9r1gbGi3WUnZHxB0RsSci7oyopr07Iu65yfybF0muH/+kl9ZUsVXKxn/PFmtbjeO/tEwyOlDEdlUjQ8mxEwvzB4vPZDyGtmbxqQ55fP/ir5+2O1Y//su2LP9yLFiU49Lg1sbXzM0sz9xKnetd/jBi32Cr+ifXVgKSiNj72trzOPHYV/vbHWuufyXp9E7PNUa7sM5U+TLi0bz9V6Kp/qWk8/rk5LZYmD84WZ4V1/v5lwuvt8v/xu2/vrL2397y/L9W/9Gkfr126ebzuPD7J23nNBNrOv9rO7YUz+/NLC+fmYrYkrySF7p+/3TttWW8TJ/Vf/xA6/6/Ow989nVEdQ07O4nvi4j7I+KBou0ejIiHIuJAuwquRPz4wsNvtzu8Gdp/rqn9RxuTNLV/LbAlmve0Dgyc/OHbxnesBVf3/Xe4Ghov9qzm+2815Vrb2QwAAAD/PWlE7IwknbgWTtOJifxv+PfE9nRhcWn58WOL756ey+8RGI2htLzSlV8Pzq+HThXT+jI+3RQ/VFw3/nxguBqfmF1cmOt15aHP7WjT/zN/DPS6dMC6c78W9C/9H/qX/g/9S/+H/tWi/w/3ohzAxmv1+/9BLVgZ2cjCABuqqf9b9oM+Yv4P/Uv/h/5V3/873n8P3E6WhuPGN8kLbObAtrIpNzb3SDdB3Vcb2Bqd0yTr3At2boYPoQyU//uzc+IefzEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0yb8BAAD///7G59I=")
mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000001200)='./file0\x00', 0x0, 0x84022, &(0x7f0000001240)=ANY=[@ANYBLOB='nr_inodes=5,size=0'])

2m26.377141783s ago: executing program 0 (id=18750):
r0 = epoll_create1(0x80000)
r1 = syz_open_dev$cec(&(0x7f00000001c0), 0xffffffffffffffff, 0x200)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x2002})

2m25.07536098s ago: executing program 0 (id=18765):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
syz_emit_ethernet(0x7f, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200492c00fe8000000000000000000000000000bbfeeb"], 0x0)

2m24.570423634s ago: executing program 40 (id=18765):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
syz_emit_ethernet(0x7f, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200492c00fe8000000000000000000000000000bbfeeb"], 0x0)

1m9.594527769s ago: executing program 6 (id=19552):
r0 = msgget$private(0x0, 0xd)
msgrcv(r0, 0x0, 0x0, 0x0, 0x1000)
msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYRESHEX], 0x8, 0x800)
msgctl$IPC_RMID(r0, 0x0)

1m9.385001163s ago: executing program 6 (id=19555):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000480)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964dee674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
clock_settime(0xfffffffb, &(0x7f00000001c0))

1m9.199705122s ago: executing program 6 (id=19560):
syz_mount_image$nilfs2(&(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1, 0xf01, &(0x7f0000000d00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2000, 0xc)
lseek(r0, 0x3ff, 0x1)
getdents64(r0, 0x0, 0x0)

1m9.016274341s ago: executing program 6 (id=19561):
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000e40)='.\x00', &(0x7f0000000e80)='./file0\x00', 0x0, 0x21d000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000ec0)='./file0/file0\x00', &(0x7f0000000f00), 0x0, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000f40)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', 0x112)

1m8.873206014s ago: executing program 6 (id=19563):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noacl}]}, 0x1, 0x5599, &(0x7f0000001400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000069c0)='./file0\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000006a00)={0x5, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}})

1m8.366916601s ago: executing program 6 (id=19568):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000440)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x16, 0x5, 0xb05, 0x8502, 0x0, 0x0, "05010902a10185030901150026ff00750895088102c0"}}, 0x12e)
close_range(r0, 0xffffffffffffffff, 0x0)

1m7.967181554s ago: executing program 41 (id=19568):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000440)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x16, 0x5, 0xb05, 0x8502, 0x0, 0x0, "05010902a10185030901150026ff00750895088102c0"}}, 0x12e)
close_range(r0, 0xffffffffffffffff, 0x0)

4.618232173s ago: executing program 7 (id=20200):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff000a}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x8200, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x9f7e, <r2=>r0})
mmap$IORING_OFF_SQ_RING(0xfffff000, 0x1040, 0x200000b, 0x12, r2, 0x4000)

4.23602154s ago: executing program 7 (id=20204):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/vrf/strict_mode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)

4.012830385s ago: executing program 7 (id=20206):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

3.916588858s ago: executing program 3 (id=20208):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x48, r2, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}, 0x1, 0x0, 0x0, 0x8805}, 0x400400c)

3.818566621s ago: executing program 7 (id=20210):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000800)={0x0, r1})
fcntl$getownex(r0, 0x10, &(0x7f0000001740))

3.538505001s ago: executing program 7 (id=20214):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0xfffffffd, 0x3, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)

3.208174104s ago: executing program 7 (id=20215):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f00000005c0), 0x200)
r0 = landlock_create_ruleset(&(0x7f0000000600)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x8)

2.758077041s ago: executing program 3 (id=20221):
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80401c, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000340)="$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")
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000005880)={0x0, 0x10000000001629, 0x2c5})

1.705503558s ago: executing program 8 (id=20232):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x440, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

1.658287302s ago: executing program 3 (id=20233):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x458, 0x528, 0xfeffffff, 0x458, 0x528, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8)

1.561574922s ago: executing program 8 (id=20237):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r2, 0x40110, 0x586}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x4f}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}]}}}]}, 0x54}}, 0x40000c0)

1.388564982s ago: executing program 1 (id=20240):
mkdir(&(0x7f0000001640)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001680)='my_sys\x00', &(0x7f00000016c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x1)

1.257349708s ago: executing program 1 (id=20242):
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x04\xb3\x00\x00\x00\x00\x00\x00\x00\x00\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e)

1.162796944s ago: executing program 8 (id=20243):
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0, &(0x7f00000004c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240))

1.098794558s ago: executing program 5 (id=20244):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0})
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000027f000/0x2000)=nil)

1.072991393s ago: executing program 1 (id=20245):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x12, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
io_setup(0x7, &(0x7f0000000280))

1.03006166s ago: executing program 8 (id=20246):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRESOCT], 0x1, 0x55a8, &(0x7f0000006a80)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==")
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000cc0)=ANY=[@ANYBLOB="03000000000000000a004e2300000049ff0000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x590)

964.407707ms ago: executing program 1 (id=20247):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010117, 0x0, 0xffffffffffffffff}]})

962.974364ms ago: executing program 5 (id=20248):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0)

887.217874ms ago: executing program 3 (id=20249):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1, 0x0, 0x300}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

807.971436ms ago: executing program 3 (id=20250):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000300)='./file1\x00', 0x1c886, &(0x7f0000005400)=ANY=[], 0x83, 0x614e, &(0x7f0000006ac0)="$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")
r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0)
flock(r0, 0x6)
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00')

778.745067ms ago: executing program 5 (id=20251):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ef)
mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000003080)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000)

654.840984ms ago: executing program 1 (id=20252):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEV_UP(r0, 0x0, 0x0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32, @ANYBLOB="08000400000000000800030001000000"], 0x2c}}, 0x0)

650.782295ms ago: executing program 5 (id=20253):
newfstatat(0xffffffffffffff9c, &(0x7f0000000800)='.\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x4000)
setresuid(r0, r0, 0x0)
r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x13)

467.315603ms ago: executing program 1 (id=20254):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[], [{@obj_user}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x39, 0x0, 0x34, 0x37, 0x37, 0x62, 0x36], 0x2d, [0x78, 0x32, 0x37, 0x61], 0x2d, [0x9, 0x37, 0x66, 0x63], 0x2d, [0x63, 0x32, 0x31, 0x39], 0x2d, [0x66, 0x57, 0x30, 0x30, 0x65, 0x65, 0x65, 0x64]}}}]}, 0xfc, 0x59c, &(0x7f0000000fc0)="$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")
io_submit(0x0, 0x1, &(0x7f0000000080)=[0x0])
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a056020"], 0xd)
syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd)

309.142943ms ago: executing program 5 (id=20255):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000840)={0x1f, 0xffff, 0x3}, 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r0, &(0x7f00000008c0)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)

200.929557ms ago: executing program 8 (id=20256):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000140)={[], 0xffffffffffffff8c}, 0x0, 0x0)

78.94628ms ago: executing program 3 (id=20257):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setns(0xc9, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
read$FUSE(r0, &(0x7f0000001280)={0x2020}, 0x2020)

44.632522ms ago: executing program 5 (id=20258):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x82200, 0x0)
ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80010, 0x0, 0x0, {<r2=>0x0, {'syz', 0x0, '3\x00'}}})
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x9410, 0x0, 0x0, @by_dev={r2}, [@crypt={0x0, 0x2050, 0x0, 0x68, 'crypt\x00', {'aes-cbc-essiv:sha256', 0x20, @none, 0x20, '16', 0x20, {@ram={'/dev/ram', 0x0}, 0x20, '1'}, ' 1 integrity:8:none'}}]})

0s ago: executing program 8 (id=20259):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ec000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

kernel console output (not intermixed with test programs):

  ? trace_irq_disable+0x3b/0x140
[ 1790.805260][T17007]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1790.805280][T17007]  ? clear_bhb_loop+0x70/0xc0
[ 1790.805305][T17007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1790.805325][T17007] RIP: 0033:0x7f1e47daa157
[ 1790.805345][T17007] Code: a2 c7 05 9c 25 25 00 00 00 00 00 eb 96 e8 c1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1790.805361][T17007] RSP: 002b:00007ffd3f9283b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1790.805383][T17007] RAX: 0000000000000000 RBX: 00007f1e47e37363 RCX: 00007f1e47daa157
[ 1790.805397][T17007] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3f928470
[ 1790.805410][T17007] RBP: 00007ffd3f928470 R08: 00007ffd3f929470 R09: 00000000ffffffff
[ 1790.805423][T17007] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3f929500
[ 1790.805436][T17007] R13: 00007f1e47e37363 R14: 000000000019d624 R15: 00007ffd3f929540
[ 1790.805469][T17007]  </TASK>
[ 1790.884265][T17007] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1792.648362][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1792.769334][T18356] loop7: detected capacity change from 0 to 8192
[ 1793.637709][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19033'.
[ 1793.845669][ T1228] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1794.007587][ T1228] usb 6-1: Using ep0 maxpacket: 16
[ 1794.008318][ T1228] usb 6-1: New USB device found: idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[ 1794.009163][T18383] loop1: detected capacity change from 0 to 32768
[ 1794.017447][T18383] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.19027 (18383)
[ 1794.058094][ T1228] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[ 1794.058121][ T1228] usb 6-1: Product: syz
[ 1794.058136][ T1228] usb 6-1: Manufacturer: syz
[ 1794.058150][ T1228] usb 6-1: SerialNumber: syz
[ 1794.064204][ T1228] usb 6-1: config 0 descriptor??
[ 1794.104133][T18383] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1794.104166][T18383] BTRFS info (device loop1): using blake2b checksum algorithm
[ 1794.226231][T18383] BTRFS info (device loop1): enabling ssd optimizations
[ 1794.226259][T18383] BTRFS info (device loop1): turning on async discard
[ 1794.226276][T18383] BTRFS info (device loop1): enabling free space tree
[ 1794.226295][T18383] BTRFS info (device loop1): use zstd compression, level 3
[ 1794.340009][ T1228] peak_usb 6-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[ 1794.552429][ T1228] peak_usb 6-1:0.0 can0: sending command failure: -22
[ 1794.552456][ T1228] peak_usb 6-1:0.0 can0: sending command failure: -22
[ 1794.552572][ T1228] peak_usb 6-1:0.0 can0: sending command failure: -22
[ 1794.631853][T18394] loop3: detected capacity change from 0 to 40427
[ 1794.635628][T18431] loop7: detected capacity change from 0 to 4096
[ 1794.644482][T18431] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[ 1794.664780][T18394] F2FS-fs (loop3): Invalid SB checksum offset: 0
[ 1794.664804][T18394] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[ 1794.684463][T18394] F2FS-fs (loop3): invalid crc value
[ 1794.776282][T18394] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1794.798876][T18394] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[ 1794.806234][T18394] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1794.815279][T18431] ntfs3(loop7): ino=19, mi_enum_attr
[ 1794.815308][T18431] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[ 1794.822804][T18431] ntfs3(loop7): ino=1a, mi_enum_attr
[ 1794.822921][T18431] ntfs3(loop7): ino=1a, mi_enum_attr
[ 1794.822939][T18431] ntfs3(loop7): Failed to initialize $Extend/$Reparse.
[ 1794.853658][ T1228] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22
[ 1794.896614][ T1228] usb 6-1: USB disconnect, device number 32
[ 1794.910096][   T33] audit: type=1800 audit(2000000973.134:761): pid=18394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19032" name="file1" dev="loop3" ino=10 res=0 errno=-22
[ 1795.001659][   T33] audit: type=1800 audit(2000000973.218:762): pid=18431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.19037" name="bus" dev="loop7" ino=24 res=0 errno=-22
[ 1795.017527][T18444] ntfs3(loop7): ino=1e, mi_enum_attr
[ 1795.103984][T13364] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1795.232382][T17550] syz-executor: attempt to access beyond end of device
[ 1795.232382][T17550] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1795.287429][T17550] CPU: 0 UID: 0 PID: 17550 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1795.287465][T17550] Tainted: [L]=SOFTLOCKUP
[ 1795.287473][T17550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 1795.287484][T17550] Call Trace:
[ 1795.287499][T17550]  <TASK>
[ 1795.287509][T17550]  dump_stack_lvl+0xe8/0x150
[ 1795.287545][T17550]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1795.287573][T17550]  f2fs_write_end_bio+0x118e/0x15d0
[ 1795.287620][T17550]  __submit_merged_bio+0x258/0x6a0
[ 1795.287641][T17550]  ? rcu_is_watching+0x16/0xb0
[ 1795.287676][T17550]  f2fs_submit_merged_write_cond+0x1ef/0x590
[ 1795.287701][T17550]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[ 1795.287749][T17550]  f2fs_write_data_pages+0x2a13/0x36e0
[ 1795.287814][T17550]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1795.287854][T17550]  ? is_bpf_text_address+0x292/0x2b0
[ 1795.287876][T17550]  ? is_bpf_text_address+0x26/0x2b0
[ 1795.287925][T17550]  ? stack_trace_save+0xa9/0x100
[ 1795.287951][T17550]  ? __pfx_stack_trace_save+0x10/0x10
[ 1795.287995][T17550]  ? lockdep_unlock+0x5c/0xd0
[ 1795.288017][T17550]  ? __lock_acquire+0x1511/0x2de0
[ 1795.288073][T17550]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1795.288100][T17550]  do_writepages+0x338/0x560
[ 1795.288135][T17550]  ? do_raw_spin_unlock+0xf5/0x200
[ 1795.288161][T17550]  filemap_fdatawrite+0x1e9/0x2f0
[ 1795.288190][T17550]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1795.288259][T17550]  ? do_raw_spin_unlock+0xf5/0x200
[ 1795.288285][T17550]  f2fs_sync_dirty_inodes+0x471/0x970
[ 1795.288326][T17550]  f2fs_write_checkpoint+0x867/0x24d0
[ 1795.288391][T17550]  kill_f2fs_super+0x2df/0x700
[ 1795.288423][T17550]  ? rcu_do_enqueue+0x616/0x870
[ 1795.288447][T17550]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1795.288479][T17550]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1795.288525][T17550]  ? __pfx_call_rcu+0x10/0x10
[ 1795.288550][T17550]  ? shrinker_free+0x2a7/0x3b0
[ 1795.288575][T17550]  deactivate_locked_super+0xbe/0x110
[ 1795.288604][T17550]  cleanup_mnt+0x204/0x2a0
[ 1795.288626][T17550]  task_work_run+0x1d9/0x260
[ 1795.288652][T17550]  ? __pfx_task_work_run+0x10/0x10
[ 1795.288688][T17550]  exit_to_user_mode_loop+0x204/0x770
[ 1795.288714][T17550]  ? rcu_is_watching+0x16/0xb0
[ 1795.288746][T17550]  do_syscall_64+0x32c/0x530
[ 1795.288768][T17550]  ? trace_irq_disable+0x3b/0x140
[ 1795.288794][T17550]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1795.288815][T17550]  ? clear_bhb_loop+0x70/0xc0
[ 1795.288839][T17550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1795.288858][T17550] RIP: 0033:0x7f7fdc9aa157
[ 1795.288877][T17550] Code: a2 c7 05 9c 25 25 00 00 00 00 00 eb 96 e8 c1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1795.288893][T17550] RSP: 002b:00007fff8833e848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1795.288913][T17550] RAX: 0000000000000000 RBX: 00007f7fdca37363 RCX: 00007f7fdc9aa157
[ 1795.288926][T17550] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8833e900
[ 1795.288939][T17550] RBP: 00007fff8833e900 R08: 00007fff8833f900 R09: 00000000ffffffff
[ 1795.288953][T17550] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8833f990
[ 1795.288964][T17550] R13: 00007f7fdca37363 R14: 000000000019e606 R15: 00007fff8833f9d0
[ 1795.289002][T17550]  </TASK>
[ 1795.303882][T17550] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1796.110515][T18466] loop7: detected capacity change from 0 to 1024
[ 1796.175756][T18467] loop5: detected capacity change from 0 to 1024
[ 1796.218448][T18470] random: crng reseeded on system resumption
[ 1796.264258][T18467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1796.518574][T17007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1796.793497][T18486] loop5: detected capacity change from 0 to 8
[ 1796.973024][T18495] loop7: detected capacity change from 0 to 512
[ 1797.738498][ T1228] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1797.809605][T18499] loop1: detected capacity change from 0 to 32768
[ 1797.843383][T18499] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1797.917433][T18499] XFS (loop1): Ending clean mount
[ 1797.924668][ T1228] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1797.924719][ T1228] usb 4-1: New USB device found: idVendor=0025, idProduct=0000, bcdDevice=0.00
[ 1797.924754][ T1228] usb 4-1: no configurations
[ 1797.924765][ T1228] usb 4-1: can't read configurations, error -22
[ 1798.097992][T13364] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1798.186227][T18545] Bluetooth: hci0: unsupported parameter 5134
[ 1798.186251][T18545] Bluetooth: hci0: unsupported parameter 8192
[ 1798.186265][T18545] Bluetooth: hci0: unsupported parameter 5134
[ 1798.186278][T18545] Bluetooth: hci0: unsupported parameter 8192
[ 1799.232194][T18588] loop7: detected capacity change from 0 to 8
[ 1799.286669][T18588] SQUASHFS error: Unable to read inode 0x0
[ 1799.397547][T18592] 0x0000000000ec-0x0000000000f2 : ""
[ 1799.442571][T18592] ftl_cs: FTL header corrupt!
[ 1800.554216][T18636] team0: Device vlan2 is already an upper device of the team interface
[ 1800.575702][T18641] loop7: detected capacity change from 0 to 128
[ 1800.681489][T18646] loop3: detected capacity change from 0 to 8
[ 1800.769869][T18646] SQUASHFS error: Failed to read block 0x2d7: -5
[ 1800.769903][T18646] SQUASHFS error: Unable to read metadata cache entry [2d5]
[ 1801.302430][T18672] loop5: detected capacity change from 0 to 256
[ 1801.307800][T18672] exfat: Deprecated parameter 'utf8'
[ 1801.373652][T18672] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[ 1801.516515][T18682] loop5: detected capacity change from 0 to 512
[ 1801.558829][T18682] EXT4-fs error (device loop5): ext4_iget_extra_inode:6003: inode #15: comm syz.5.19114: corrupted in-inode xattr: e_value size too large
[ 1801.558865][T18682] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1801.560454][T18682] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.19114: couldn't read orphan inode 15 (err -117)
[ 1801.560489][T18682] loop5: lost filesystem error report for type 5 error -117
[ 1801.570216][T18682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1801.617239][T18687] xt_hashlimit: size too large, truncated to 1048576
[ 1801.926454][T17007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1802.933683][T18747] loop3: detected capacity change from 0 to 2048
[ 1802.990465][T18753] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1803.426148][T18771] loop5: detected capacity change from 0 to 4096
[ 1803.460783][T18771] ntfs3(loop5): ino=19, mi_enum_attr
[ 1803.460817][T18771] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 1803.943931][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19152'.
[ 1803.943957][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19152'.
[ 1803.943981][T18797] netlink: 'syz.1.19152': attribute type 13 has an invalid length.
[ 1803.943995][T18797] netlink: 'syz.1.19152': attribute type 14 has an invalid length.
[ 1805.016404][T18822] loop1: detected capacity change from 0 to 32768
[ 1805.055100][T18822] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1805.175913][T18822] XFS (loop1): Ending clean mount
[ 1805.185876][T18822] XFS (loop1): Quotacheck needed: Please wait.
[ 1805.396551][T18822] XFS (loop1): Quotacheck: Done.
[ 1805.592768][T18873] Bluetooth: MGMT ver 1.23
[ 1805.751989][T13364] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1806.150901][T18964] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1806.205406][T10313] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[ 1806.306106][T18899] loop1: detected capacity change from 0 to 256
[ 1806.314832][T18964] usb 6-1: Using ep0 maxpacket: 8
[ 1806.315581][T18964] usb 6-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00
[ 1806.316636][T18964] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1806.316666][T18964] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1806.316693][T18964] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1806.316725][T18964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1806.319392][T18964] usb 6-1: config 0 descriptor??
[ 1806.409922][T10313] usb 4-1: New USB device found: idVendor=056a, idProduct=010e, bcdDevice=0.00
[ 1806.411687][T10313] usb 4-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1806.411718][T10313] usb 4-1: config 0 interface 0 altsetting 249 endpoint 0x81 has invalid maxpacket 1015, setting to 64
[ 1806.411744][T10313] usb 4-1: config 0 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1806.411810][T10313] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1806.411849][T10313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1806.477218][T10313] usb 4-1: config 0 descriptor??
[ 1806.478252][T18885] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1806.525950][T18902] loop1: detected capacity change from 0 to 256
[ 1806.826837][T18964] hid (null): usage index exceeded
[ 1806.844443][T18913] sch_tbf: burst 0 is lower than device batadv_slave_0 mtu (1514) !
[ 1806.856303][T18964] hid_parser_main: 19 callbacks suppressed
[ 1806.856336][T18964] logitech-djreceiver 0003:046D:C53A.001B: unknown main item tag 0x2
[ 1806.856396][T18964] logitech-djreceiver 0003:046D:C53A.001B: ignoring exceeding usage max
[ 1806.859851][T18964] logitech-djreceiver 0003:046D:C53A.001B: ignoring exceeding usage max
[ 1806.859874][T18964] logitech-djreceiver 0003:046D:C53A.001B: usage index exceeded
[ 1806.859889][T18964] logitech-djreceiver 0003:046D:C53A.001B: item 0 0 2 2 parsing failed
[ 1806.863406][T18964] logitech-djreceiver 0003:046D:C53A.001B: logi_dj_probe: parse failed
[ 1806.863528][T18964] logitech-djreceiver 0003:046D:C53A.001B: probe with driver logitech-djreceiver failed with error -22
[ 1806.998439][T10313] wacom 0003:056A:010E.001C: hidraw0: USB HID vf9.be Joystick [HID 056a:010e] on usb-dummy_hcd.3-1/input0
[ 1807.074151][T10425] usb 6-1: USB disconnect, device number 33
[ 1807.151198][ T1228] usb 4-1: USB disconnect, device number 44
[ 1807.765576][T18929] loop7: detected capacity change from 0 to 32768
[ 1807.846475][   T33] audit: type=1800 audit(2000000985.228:763): pid=18929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.19193" name="file1" dev="loop7" ino=4 res=0 errno=-22
[ 1808.111800][T18929] read_mapping_page failed!
[ 1808.111818][T18929] ERROR: (device loop7): txCommit: 
[ 1808.111818][T18929] 
[ 1808.199897][T18929] ERROR: (device loop7): remounting filesystem as read-only
[ 1808.659285][T18959] loop1: detected capacity change from 0 to 32768
[ 1808.664483][T18959] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.19200 (18959)
[ 1808.713339][T18959] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1808.713376][T18959] BTRFS info (device loop1): using crc32c checksum algorithm
[ 1808.848545][T18959] BTRFS info (device loop1): setting nodatasum
[ 1808.848574][T18959] BTRFS info (device loop1): setting nodatacow
[ 1808.848592][T18959] BTRFS info (device loop1): disabling tree log
[ 1808.848609][T18959] BTRFS info (device loop1): turning on async discard
[ 1808.848626][T18959] BTRFS info (device loop1): enabling free space tree
[ 1808.848645][T18959] BTRFS info (device loop1): max_inline set to 0
[ 1809.069095][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1809.557160][T13364] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1809.630778][T19020] loop5: detected capacity change from 0 to 128
[ 1810.611020][T19046] vlan2: entered promiscuous mode
[ 1810.611043][T19046] syz_tun: entered promiscuous mode
[ 1811.622594][T19053] loop1: detected capacity change from 0 to 32768
[ 1811.726902][T19053] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1811.746855][T19058] loop3: detected capacity change from 0 to 32768
[ 1811.851784][T19053] XFS (loop1): Ending clean mount
[ 1811.872726][T19058] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1812.089119][T13364] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1812.293011][T17550] ocfs2: Unmounting device (7,3) on (node local)
[ 1812.686134][T19120] netlink: 'syz.1.19233': attribute type 1 has an invalid length.
[ 1812.940573][T19129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19238'.
[ 1812.940645][T19129] netlink: 'syz.5.19238': attribute type 2 has an invalid length.
[ 1812.940659][T19129] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19238'.
[ 1813.026701][T19130] loop3: detected capacity change from 0 to 1024
[ 1813.042415][T19132] netlink: 20 bytes leftover after parsing attributes in process `syz.7.19241'.
[ 1813.073603][T19130] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1813.159239][T19138] loop5: detected capacity change from 0 to 512
[ 1813.202936][T19138] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[ 1813.202958][T19138] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1813.212929][T19138] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[ 1813.213077][T19138] System zones: 1-12
[ 1813.255597][T19138] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.19244: bad orphan inode 131072
[ 1813.255631][T19138] loop5: lost filesystem error report for type 5 error -117
[ 1813.257945][T19138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1813.504685][T17007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1813.718497][T19161] loop1: detected capacity change from 0 to 256
[ 1813.735018][T19161] exfat: Deprecated parameter 'utf8'
[ 1813.735042][T19161] exfat: Deprecated parameter 'utf8'
[ 1813.735101][T19161] exfat: Deprecated parameter 'namecase'
[ 1813.735154][T19161] exfat: Deprecated parameter 'namecase'
[ 1813.791099][T19161] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[ 1813.962984][T19158] loop7: detected capacity change from 0 to 32768
[ 1813.987405][T10313] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1814.044475][T19158] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 1814.164971][T10313] usb 6-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 1814.189465][T10313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1814.189526][T10313] usb 6-1: Product: syz
[ 1814.189542][T10313] usb 6-1: Manufacturer: syz
[ 1814.189558][T10313] usb 6-1: SerialNumber: syz
[ 1814.222580][T10313] usb 6-1: config 0 descriptor??
[ 1814.241675][T10313] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 1814.265943][T10313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1814.267405][T10313] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[ 1814.267460][T10313] usb 6-1: media controller created
[ 1814.320283][T10313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1814.586693][T10313] DVB: Unable to find symbol mt352_attach()
[ 1814.634944][T32531] ocfs2: Unmounting device (7,7) on (node local)
[ 1814.791216][T10313] DVB: Unable to find symbol nxt6000_attach()
[ 1814.791235][T10313] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[ 1814.822624][T10313] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input126
[ 1814.829510][T10313] dvb-usb: schedule remote query interval to 1000 msecs.
[ 1814.829532][T10313] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[ 1814.829546][T10313] dvb-usb: bulk message failed: -22 (7/0)
[ 1814.829560][T10313] dvb-usb: bulk message failed: -22 (7/0)
[ 1814.878732][T10313] usb 6-1: USB disconnect, device number 34
[ 1815.054693][T10313] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[ 1815.063403][T19192] Bluetooth: hci0: unsupported parameter 5135
[ 1815.063426][T19192] Bluetooth: hci0: unsupported parameter 8192
[ 1815.063440][T19192] Bluetooth: hci0: unsupported parameter 5135
[ 1815.063453][T19192] Bluetooth: hci0: unsupported parameter 8192
[ 1815.531962][T19213] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1815.531985][T19213] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1815.789097][T19218] loop7: detected capacity change from 0 to 512
[ 1815.790063][T19218] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1815.818451][T19218] EXT4-fs (loop7): orphan cleanup on readonly fs
[ 1815.818475][T19218] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13
[ 1815.823952][T19218] EXT4-fs error (device loop7): ext4_clear_blocks:893: inode #13: comm syz.7.19267: attempt to clear invalid blocks 2 len 1
[ 1815.823986][T19218] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[ 1815.825376][    C1] EXT4-fs (loop7): error count since last fsck: 1
[ 1815.825397][    C1] EXT4-fs (loop7): initial error at time 2000000992: ext4_clear_blocks:893: inode 13
[ 1815.825444][    C1] EXT4-fs (loop7): last error at time 2000000992: ext4_clear_blocks:893: inode 13
[ 1815.840236][T19196] loop3: detected capacity change from 0 to 32768
[ 1815.907155][T19218] EXT4-fs (loop7): Remounting filesystem read-only
[ 1815.908618][T19218] EXT4-fs (loop7): 1 truncate cleaned up
[ 1815.943512][T19218] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1815.946295][T19196] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1816.051861][T19196] XFS (loop3): Ending clean mount
[ 1816.135286][T17550] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1816.269375][T32531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1816.349449][T19212] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1816.349715][T19212] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1816.349779][T19212] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1816.457026][T19212] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1816.457100][T19212] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1816.513691][T19212] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1816.540202][T19212] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1816.540289][T19212] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1816.578588][T19212] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1817.206273][T19264] Bluetooth: hci0: unsupported parameter 5161
[ 1817.206296][T19264] Bluetooth: hci0: unsupported parameter 8192
[ 1817.206309][T19264] Bluetooth: hci0: unsupported parameter 5161
[ 1817.206322][T19264] Bluetooth: hci0: unsupported parameter 8192
[ 1817.707146][ T5647] Bluetooth: hci1: command 0x0406 tx timeout
[ 1818.346387][T19287] loop3: detected capacity change from 0 to 32768
[ 1818.449364][T19309] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.19291'.
[ 1818.531518][T19287] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1818.647906][ T5647] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1818.647970][ T5647] Bluetooth: hci3: command 0x0419 tx timeout
[ 1818.733738][T14867] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1818.955336][T17550] ocfs2: Unmounting device (7,3) on (node local)
[ 1819.671104][T19327] loop5: detected capacity change from 0 to 32768
[ 1819.672083][T19327] xfs: Deprecated parameter 'noattr2'
[ 1819.672104][T19327] XFS: noattr2 mount option is deprecated.
[ 1819.701803][T19327] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1819.787703][T19327] XFS (loop5): Ending clean mount
[ 1819.942054][T17007] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1820.110513][T19372] loop3: detected capacity change from 0 to 256
[ 1820.205501][T19372] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[ 1820.505329][ T5297] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1820.872055][T14867] Bluetooth: hci3: command 0x0419 tx timeout
[ 1820.872093][T14867] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1820.957075][ T5647] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1821.117295][T10313] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1821.142034][T19414] loop3: detected capacity change from 0 to 2048
[ 1821.163944][T19420] netlink: 48 bytes leftover after parsing attributes in process `syz.1.19324'.
[ 1821.182900][T19414] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1821.216515][T19421] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1821.289344][T10313] usb 6-1: New USB device found: idVendor=056a, idProduct=00b7, bcdDevice=0.00
[ 1821.290410][T10313] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1821.290473][T10313] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1821.290499][T10313] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1821.290528][T10313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1821.293594][T10313] usb 6-1: config 0 descriptor??
[ 1821.518678][T19414] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean
[ 1821.749899][T10313] wacom 0003:056A:00B7.001D: Unknown device_type for 'HID 056a:00b7'. Assuming pen.
[ 1821.801225][T10313] wacom 0003:056A:00B7.001D: hidraw0: USB HID vff.fb Device [HID 056a:00b7] on usb-dummy_hcd.5-1/input0
[ 1821.820758][T10313] input: Wacom Intuos3 4x6 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00B7.001D/input/input127
[ 1821.991563][T10313] usb 6-1: USB disconnect, device number 35
[ 1822.111108][ T5297] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1822.174965][T19445] fido_id[19445]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 1822.420313][T19440] loop3: detected capacity change from 0 to 40427
[ 1822.436509][T19440] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(301990400)
[ 1822.436538][T19440] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1822.455822][T19440] F2FS-fs (loop3): build fault injection rate: 174
[ 1822.455855][T19440] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[ 1822.460152][T19440] F2FS-fs (loop3): invalid crc value
[ 1822.626146][T19460] device-mapper: table: 248:19: ram2 too small for target: start=128, len=12288, dev_size=8192
[ 1822.626177][T19460] device-mapper: core: Cannot calculate initial queue limits
[ 1822.626187][T19460] device-mapper: ioctl: unable to set up device queue for new table.
[ 1822.807295][T19440] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1822.987911][T19440] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1822.987942][T19440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1823.095627][ T5647] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1823.192494][ T5647] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1823.389139][T19496] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1823.460160][T17550] syz-executor: attempt to access beyond end of device
[ 1823.460160][T17550] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1823.486110][T17550] CPU: 1 UID: 0 PID: 17550 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1823.486146][T17550] Tainted: [L]=SOFTLOCKUP
[ 1823.486154][T17550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 1823.486166][T17550] Call Trace:
[ 1823.486174][T17550]  <TASK>
[ 1823.486183][T17550]  dump_stack_lvl+0xe8/0x150
[ 1823.486220][T17550]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1823.486248][T17550]  f2fs_write_end_bio+0x118e/0x15d0
[ 1823.486297][T17550]  __submit_merged_bio+0x258/0x6a0
[ 1823.486317][T17550]  ? rcu_is_watching+0x16/0xb0
[ 1823.486353][T17550]  f2fs_submit_merged_write_cond+0x1ef/0x590
[ 1823.486378][T17550]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[ 1823.486424][T17550]  f2fs_write_data_pages+0x2a13/0x36e0
[ 1823.486485][T17550]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1823.486522][T17550]  ? is_bpf_text_address+0x292/0x2b0
[ 1823.486543][T17550]  ? is_bpf_text_address+0x26/0x2b0
[ 1823.486591][T17550]  ? stack_trace_save+0xa9/0x100
[ 1823.486615][T17550]  ? __pfx_stack_trace_save+0x10/0x10
[ 1823.486658][T17550]  ? lockdep_unlock+0x5c/0xd0
[ 1823.486679][T17550]  ? __lock_acquire+0x1511/0x2de0
[ 1823.486730][T17550]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1823.486762][T17550]  do_writepages+0x338/0x560
[ 1823.486795][T17550]  ? do_raw_spin_unlock+0xf5/0x200
[ 1823.486821][T17550]  filemap_fdatawrite+0x1e9/0x2f0
[ 1823.486848][T17550]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1823.486917][T17550]  ? do_raw_spin_unlock+0xf5/0x200
[ 1823.486943][T17550]  f2fs_sync_dirty_inodes+0x471/0x970
[ 1823.486987][T17550]  f2fs_write_checkpoint+0x867/0x24d0
[ 1823.487050][T17550]  kill_f2fs_super+0x2df/0x700
[ 1823.487081][T17550]  ? rcu_do_enqueue+0x616/0x870
[ 1823.487104][T17550]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1823.487126][T17550]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1823.487169][T17550]  ? __pfx_call_rcu+0x10/0x10
[ 1823.487194][T17550]  ? shrinker_free+0x2a7/0x3b0
[ 1823.487220][T17550]  deactivate_locked_super+0xbe/0x110
[ 1823.487249][T17550]  cleanup_mnt+0x204/0x2a0
[ 1823.487274][T17550]  task_work_run+0x1d9/0x260
[ 1823.487302][T17550]  ? __pfx_task_work_run+0x10/0x10
[ 1823.487337][T17550]  exit_to_user_mode_loop+0x204/0x770
[ 1823.487364][T17550]  ? rcu_is_watching+0x16/0xb0
[ 1823.487397][T17550]  do_syscall_64+0x32c/0x530
[ 1823.487418][T17550]  ? trace_irq_disable+0x3b/0x140
[ 1823.487445][T17550]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1823.487465][T17550]  ? clear_bhb_loop+0x70/0xc0
[ 1823.487489][T17550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1823.487508][T17550] RIP: 0033:0x7f7fdc9aa157
[ 1823.487527][T17550] Code: a2 c7 05 9c 25 25 00 00 00 00 00 eb 96 e8 c1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1823.487545][T17550] RSP: 002b:00007fff8833e848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1823.487566][T17550] RAX: 0000000000000000 RBX: 00007f7fdca37363 RCX: 00007f7fdc9aa157
[ 1823.487579][T17550] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8833e900
[ 1823.487592][T17550] RBP: 00007fff8833e900 R08: 00007fff8833f900 R09: 00000000ffffffff
[ 1823.487605][T17550] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8833f990
[ 1823.487618][T17550] R13: 00007f7fdca37363 R14: 00000000001a4d9c R15: 00007fff8833f9d0
[ 1823.487651][T17550]  </TASK>
[ 1823.495911][T17550] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1823.932260][T19471] loop7: detected capacity change from 0 to 32768
[ 1824.011293][T19471] (syz.7.19340,19471,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1824.011588][T19471] (syz.7.19340,19471,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1824.047383][T19471] JBD2: Ignoring recovery information on journal
[ 1824.125538][T19514] loop5: detected capacity change from 0 to 1024
[ 1824.128360][T19471] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 1824.233527][T19471] (syz.7.19340,19471,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[ 1824.271419][T19514] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1824.525994][T32531] ocfs2: Unmounting device (7,7) on (node local)
[ 1824.526701][ T5297] 8021q: adding VLAN 0 to HW filter on device eth12
[ 1824.756929][T19522] loop5: detected capacity change from 0 to 4096
[ 1824.807647][T19526] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1825.484184][T19555] loop3: detected capacity change from 0 to 2048
[ 1825.504673][T19555] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[ 1825.504722][T19555] UDF-fs: Scanning with blocksize 512 failed
[ 1825.549339][T19555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1825.626167][T19563] loop5: detected capacity change from 0 to 16
[ 1825.698656][T19563] erofs (device loop5): mounted with root inode @ nid 36.
[ 1825.706955][T19555] overlayfs: upper fs needs to support d_type.
[ 1825.733543][T19563] erofs (device loop5): per-inode big pcluster without sb feature for nid 36
[ 1825.775083][T19555] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1825.775113][T19555] overlayfs: failed to set xattr on upper
[ 1825.775122][T19555] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1825.775130][T19555] overlayfs: ...falling back to metacopy=off.
[ 1825.775137][T19555] overlayfs: ...falling back to index=off.
[ 1825.775145][T19555] overlayfs: ...falling back to uuid=null.
[ 1825.945867][ T5297] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1827.067755][T19609] loop5: detected capacity change from 0 to 32768
[ 1827.888372][T19654] loop3: detected capacity change from 0 to 164
[ 1827.938363][T19654] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[ 1828.276845][T19677] loop3: detected capacity change from 0 to 1024
[ 1828.332603][T19677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1828.332721][T19677] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1828.544268][T17550] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1829.228105][   T33] audit: type=1326 audit(2000001005.227:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19716 comm="syz.3.19425" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fdc9a8f19 code=0x0
[ 1829.358169][T19678] loop7: detected capacity change from 0 to 40427
[ 1829.398200][T19678] F2FS-fs (loop7): invalid crc value
[ 1829.425001][T19699] loop1: detected capacity change from 0 to 32768
[ 1829.507967][T19730] program syz.5.19429 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1829.643400][T18946] libceph: connect (1)127.0.0.1:1 error -22
[ 1829.643578][T18946] libceph: mon0 (1)127.0.0.1:1 connect error
[ 1829.878093][T19678] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1829.939107][T18946] libceph: connect (1)127.0.0.1:1 error -22
[ 1829.939309][T18946] libceph: mon0 (1)127.0.0.1:1 connect error
[ 1829.993393][T19733] loop5: detected capacity change from 0 to 32768
[ 1830.026244][T19678] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0
[ 1830.026272][T19678] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[ 1830.026299][T19678] F2FS-fs (loop7): Start checkpoint disabled!
[ 1830.072399][T19733] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1830.234908][T19733] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1830.282970][T19733] XFS (loop5): Starting recovery (logdev: internal)
[ 1830.319998][T19678] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0
[ 1830.324603][T19678] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[ 1830.476287][T19733] XFS (loop5): Ending recovery (logdev: internal)
[ 1830.492351][T18946] libceph: connect (1)127.0.0.1:1 error -22
[ 1830.510951][T18946] libceph: mon0 (1)127.0.0.1:1 connect error
[ 1830.658166][T17007] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1830.800202][T19734] ceph: No mds server is up or the cluster is laggy
[ 1830.863167][T18946] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1831.040475][T18946] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[ 1831.041727][T18946] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1831.041776][T18946] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1831.041798][T18946] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1831.041821][T18946] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1831.041861][T18946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1831.504984][T18946] gud 4-1:1.0: No supported pixel formats found
[ 1831.505018][T18946] gud 4-1:1.0: probe with driver gud failed with error -22
[ 1831.707459][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19444'.
[ 1831.779726][T10425] usb 4-1: USB disconnect, device number 45
[ 1831.859099][T19802] loop7: detected capacity change from 0 to 64
[ 1831.879868][T19802] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.	Mounting read-only.
[ 1831.885670][T19802] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  leaving read-only.
[ 1831.971174][T19771] loop1: detected capacity change from 0 to 32768
[ 1832.028329][T19771] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1832.183591][T19771] XFS (loop1): Ending clean mount
[ 1832.191578][T19771] XFS (loop1): Quotacheck needed: Please wait.
[ 1832.479113][T19771] XFS (loop1): Quotacheck: Done.
[ 1832.627157][T19837] netlink: 48 bytes leftover after parsing attributes in process `syz.6.19455'.
[ 1832.689173][T13364] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1833.907048][T19857] loop7: detected capacity change from 0 to 32768
[ 1833.959047][T19857] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1834.067234][T19857] XFS (loop7): Ending clean mount
[ 1834.150225][T32531] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1834.840862][T19888] loop5: detected capacity change from 0 to 32768
[ 1834.879393][T19888] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1834.942178][T19927] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19482'.
[ 1834.990525][T19888] XFS (loop5): Ending clean mount
[ 1835.066821][T19911] loop3: detected capacity change from 0 to 32768
[ 1835.079488][T19911] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.19479 (19911)
[ 1835.097434][T17007] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1835.127106][T19911] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1835.127140][T19911] BTRFS info (device loop3): using crc32c checksum algorithm
[ 1835.328781][T19911] BTRFS info (device loop3): setting nodatasum
[ 1835.328810][T19911] BTRFS info (device loop3): setting nodatacow
[ 1835.328827][T19911] BTRFS info (device loop3): disabling tree log
[ 1835.328842][T19911] BTRFS info (device loop3): turning on async discard
[ 1835.328857][T19911] BTRFS info (device loop3): enabling free space tree
[ 1835.328874][T19911] BTRFS info (device loop3): max_inline set to 0
[ 1835.692023][T17550] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1836.256747][T19950] loop5: detected capacity change from 0 to 32768
[ 1836.333473][T19962] rnbd_client L127: Can't parse path ip:: -22
[ 1836.383376][T19950] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1836.424289][T19950] XFS (loop5): Ending clean mount
[ 1836.487408][T17007] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1837.087660][T19991] loop3: detected capacity change from 0 to 1024
[ 1837.096854][T19991] EXT4-fs: Ignoring removed oldalloc option
[ 1837.096878][T19991] EXT4-fs: Ignoring removed orlov option
[ 1837.139160][T19991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1837.139319][T19991] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1837.295247][T17550] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1837.615274][T19987] loop5: detected capacity change from 0 to 32768
[ 1837.620217][T19987] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.19496 (19987)
[ 1837.668798][T19987] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1837.668833][T19987] BTRFS info (device loop5): using crc32c checksum algorithm
[ 1837.749167][T19987] BTRFS info (device loop5): setting nodatasum
[ 1837.749194][T19987] BTRFS info (device loop5): setting nodatacow
[ 1837.749210][T19987] BTRFS info (device loop5): disabling tree log
[ 1837.749225][T19987] BTRFS info (device loop5): turning on async discard
[ 1837.749241][T19987] BTRFS info (device loop5): enabling free space tree
[ 1837.749258][T19987] BTRFS info (device loop5): max_inline set to 0
[ 1837.838681][T18946] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1838.000525][T18946] usb 4-1: New USB device found: idVendor=28bd, idProduct=0905, bcdDevice=0.00
[ 1838.003239][T18946] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[ 1838.003266][T18946] usb 4-1: config 0 has no interface number 0
[ 1838.003306][T18946] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1838.003332][T18946] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1838.003371][T18946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1838.012608][T18946] usb 4-1: config 0 descriptor??
[ 1838.074594][T19987] BTRFS info (device loop5): scrub: started on devid 1
[ 1838.110829][T19987] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0
[ 1838.219153][T17007] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1838.556244][T18946] uclogic 0003:28BD:0905.001E: Interface probing failed: -22
[ 1838.556306][T18946] uclogic 0003:28BD:0905.001E: interface is invalid, ignoring
[ 1838.821941][T18946] usb 4-1: USB disconnect, device number 46
[ 1839.284670][T20057] netlink: 20 bytes leftover after parsing attributes in process `syz.7.19521'.
[ 1839.516839][T20047] loop1: detected capacity change from 0 to 32768
[ 1840.766622][T10322] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1840.926912][T10322] usb 6-1: Using ep0 maxpacket: 16
[ 1840.927639][T10322] usb 6-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00
[ 1840.928859][T10322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1840.928888][T10322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1840.928911][T10322] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1840.928949][T10322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1840.933610][T10322] usb 6-1: config 0 descriptor??
[ 1841.251101][T20111] loop3: detected capacity change from 0 to 32768
[ 1841.345398][T20111] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1841.382499][T20111] XFS (loop3): Ending clean mount
[ 1841.405855][T10322] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 1841.405891][T10322] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 1841.405919][T10322] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 1841.405946][T10322] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 1841.405968][T10322] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 1841.406015][T10322] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 1841.406042][T10322] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 1841.406069][T10322] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 1841.470217][T10322] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 1841.470255][T10322] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 1841.487962][T17550] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1841.508598][T10322] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001F/input/input130
[ 1841.529916][T10322] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[ 1841.643700][T10322] usb 6-1: USB disconnect, device number 36
[ 1841.938946][T20142] fido_id[20142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 1841.963310][T20147] loop7: detected capacity change from 0 to 256
[ 1842.065320][T20147] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[ 1842.104240][T20150] loop3: detected capacity change from 0 to 2048
[ 1842.162011][T20150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1842.354211][T20150] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[ 1842.468896][T20150] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[ 1842.468929][T20150] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 1842.468929][T20150] 
[ 1842.468957][T20150] EXT4-fs (loop3): Total free blocks count 0
[ 1842.491315][T20150] EXT4-fs (loop3): Free/Dirty block details
[ 1842.491453][T20150] EXT4-fs (loop3): free_blocks=4096
[ 1842.491495][T20150] EXT4-fs (loop3): dirty_blocks=48
[ 1842.491508][T20150] EXT4-fs (loop3): Block reservation details
[ 1842.491521][T20150] EXT4-fs (loop3): i_reserved_data_blocks=3
[ 1842.709284][T17550] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1843.198154][T20194] sg_write: process 361 (syz.5.19556) changed security contexts after opening file descriptor, this is not allowed.
[ 1843.279840][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1844.519545][T20224] loop5: detected capacity change from 0 to 32768
[ 1844.570255][T20224] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1844.683610][T20224] XFS (loop5): Ending clean mount
[ 1844.696198][T20224] XFS (loop5): Quotacheck needed: Please wait.
[ 1844.927663][T14867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1844.946342][T14867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1844.961124][T14867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1844.969475][T14867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1844.985963][T20250] program syz.1.19573 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1844.986033][T14867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1845.137874][T20224] XFS (loop5): Quotacheck: Done.
[ 1845.293276][T17007] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1845.691982][T26779] .` (unregistering): Released all slaves
[ 1845.747454][T26779] bond1 (unregistering): Released all slaves
[ 1845.814638][T26779] bond2 (unregistering): Released all slaves
[ 1845.859132][T26779] bond0 (unregistering): Released all slaves
[ 1845.890139][T26779] bond3 (unregistering): Released all slaves
[ 1845.927023][T26779] bond4 (unregistering): Released all slaves
[ 1846.391387][T20257] loop1: detected capacity change from 0 to 32768
[ 1846.607473][T20257] lbmIODone: I/O error in JFS log
[ 1846.607495][T20257] *** Log Format Error ! ***
[ 1846.607920][T20257] lmLogInit: exit(-22)
[ 1846.607969][T20257] lmLogOpen: exit(-22)
[ 1846.740235][T20257] lbmIODone: I/O error in JFS log
[ 1846.740253][T20257] *** Log Format Error ! ***
[ 1846.740664][T20257] lmLogInit: exit(-22)
[ 1846.740707][T20257] lmLogOpen: exit(-22)
[ 1846.827140][T26779] tipc: Disabling bearer <eth:macvlan0>
[ 1846.856532][T26779] tipc: Left network mode
[ 1846.867253][T26779] IPVS: stopping master sync thread 9167 ...
[ 1847.144980][T20247] rxe_eth0 speed is unknown, defaulting to 1000
[ 1847.175034][T20261] loop3: detected capacity change from 0 to 32768
[ 1847.216726][T20261] 
[ 1847.216726][T20261]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1847.216726][T20261] 
[ 1847.259668][T20261] ERROR: (device loop3): diWrite: ixpxd invalid
[ 1847.259668][T20261] 
[ 1847.261270][T20261] ERROR: (device loop3): txCommit: 
[ 1847.261270][T20261] 
[ 1847.333101][ T5647] Bluetooth: hci4: command tx timeout
[ 1847.349475][T20261] ERROR: (device loop3): diWrite: ixpxd invalid
[ 1847.349475][T20261] 
[ 1847.349532][T20261] ERROR: (device loop3): txCommit: 
[ 1847.349532][T20261] 
[ 1847.527166][T17550] 
[ 1847.527166][T17550]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1847.527166][T17550] 
[ 1847.530653][T17550] 
[ 1847.530653][T17550]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1847.530653][T17550] 
[ 1847.780537][T20310] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.19588'.
[ 1848.044080][T20296] loop1: detected capacity change from 0 to 40427
[ 1848.055584][T20296] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(301990400)
[ 1848.055614][T20296] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1848.111232][T20296] F2FS-fs (loop1): build fault injection rate: 174
[ 1848.111257][T20296] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[ 1848.116473][T20296] F2FS-fs (loop1): invalid crc value
[ 1848.251624][T20296] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1848.318806][T20296] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1848.318836][T20296] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1848.482157][T13364] syz-executor: attempt to access beyond end of device
[ 1848.482157][T13364] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1848.527828][T13364] CPU: 1 UID: 0 PID: 13364 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1848.527863][T13364] Tainted: [L]=SOFTLOCKUP
[ 1848.527870][T13364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 1848.527888][T13364] Call Trace:
[ 1848.527896][T13364]  <TASK>
[ 1848.527904][T13364]  dump_stack_lvl+0xe8/0x150
[ 1848.527942][T13364]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1848.527972][T13364]  f2fs_write_end_bio+0x118e/0x15d0
[ 1848.528018][T13364]  __submit_merged_bio+0x258/0x6a0
[ 1848.528039][T13364]  ? rcu_is_watching+0x16/0xb0
[ 1848.528075][T13364]  f2fs_submit_merged_write_cond+0x1ef/0x590
[ 1848.528101][T13364]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[ 1848.528149][T13364]  f2fs_write_data_pages+0x2a13/0x36e0
[ 1848.528213][T13364]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1848.528236][T13364]  ? is_bpf_text_address+0x26/0x2b0
[ 1848.528272][T13364]  ? arch_stack_walk+0xfb/0x150
[ 1848.528330][T13364]  ? add_lock_to_list+0xc7/0x100
[ 1848.528361][T13364]  ? lockdep_unlock+0x5c/0xd0
[ 1848.528382][T13364]  ? __lock_acquire+0x1511/0x2de0
[ 1848.528437][T13364]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1848.528471][T13364]  ? do_raw_spin_unlock+0xf5/0x200
[ 1848.528493][T13364]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1848.528519][T13364]  do_writepages+0x338/0x560
[ 1848.528555][T13364]  ? do_raw_spin_unlock+0xf5/0x200
[ 1848.528581][T13364]  filemap_fdatawrite+0x1e9/0x2f0
[ 1848.528609][T13364]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1848.528682][T13364]  ? do_raw_spin_unlock+0xf5/0x200
[ 1848.528708][T13364]  f2fs_sync_dirty_inodes+0x471/0x970
[ 1848.528752][T13364]  f2fs_write_checkpoint+0x867/0x24d0
[ 1848.528818][T13364]  kill_f2fs_super+0x2df/0x700
[ 1848.528850][T13364]  ? rcu_do_enqueue+0x616/0x870
[ 1848.528874][T13364]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1848.528903][T13364]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1848.528946][T13364]  ? __pfx_call_rcu+0x10/0x10
[ 1848.528971][T13364]  ? shrinker_free+0x2a7/0x3b0
[ 1848.528998][T13364]  deactivate_locked_super+0xbe/0x110
[ 1848.529028][T13364]  cleanup_mnt+0x204/0x2a0
[ 1848.529054][T13364]  task_work_run+0x1d9/0x260
[ 1848.529083][T13364]  ? __pfx_task_work_run+0x10/0x10
[ 1848.529119][T13364]  exit_to_user_mode_loop+0x204/0x770
[ 1848.529147][T13364]  ? rcu_is_watching+0x16/0xb0
[ 1848.529181][T13364]  do_syscall_64+0x32c/0x530
[ 1848.529203][T13364]  ? trace_irq_disable+0x3b/0x140
[ 1848.529261][T13364]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1848.529283][T13364]  ? clear_bhb_loop+0x70/0xc0
[ 1848.529331][T13364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1848.529351][T13364] RIP: 0033:0x7f3c541aa157
[ 1848.529370][T13364] Code: a2 c7 05 9c 25 25 00 00 00 00 00 eb 96 e8 c1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1848.529388][T13364] RSP: 002b:00007fffb04197d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1848.529409][T13364] RAX: 0000000000000000 RBX: 00007f3c54237363 RCX: 00007f3c541aa157
[ 1848.529423][T13364] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb0419890
[ 1848.529436][T13364] RBP: 00007fffb0419890 R08: 00007fffb041a890 R09: 00000000ffffffff
[ 1848.529450][T13364] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb041a920
[ 1848.529463][T13364] R13: 00007f3c54237363 R14: 00000000001aa95b R15: 00007fffb041a960
[ 1848.529498][T13364]  </TASK>
[ 1848.719871][T13364] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[ 1849.055498][T20247] lo speed is unknown, defaulting to 1000
[ 1849.326020][   T33] audit: type=1400 audit(2000001024.029:765): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=20340 comm="syz.5.19596" name="//o" offset=71
[ 1849.535898][ T5647] Bluetooth: hci4: command tx timeout
[ 1849.762327][T10322] input: syz0 as /devices/virtual/misc/uhid/D1BC:2000B05:8502.0020/input/input131
[ 1849.832240][T14815] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1849.992602][T14815] usb 6-1: Using ep0 maxpacket: 32
[ 1850.036966][T14815] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1850.037021][T14815] usb 6-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00
[ 1850.037054][T14815] usb 6-1: no configurations
[ 1850.037066][T14815] usb 6-1: can't read configurations, error -22
[ 1850.179527][T10322] hid-generic D1BC:2000B05:8502.0020: input,hidraw0: <UNKNOWN> HID v0.00 Mouse [syz0] on syz1
[ 1850.267554][T26779] hsr_slave_0: left promiscuous mode
[ 1850.280633][T26779] hsr_slave_1: left promiscuous mode
[ 1850.343719][T26779] veth1_macvtap: left promiscuous mode
[ 1850.343794][T26779] veth0_macvtap: left promiscuous mode
[ 1850.344114][T26779] veth1_vlan: left promiscuous mode
[ 1850.344170][T26779] veth0_vlan: left promiscuous mode
[ 1850.420784][T20367] fido_id[20367]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1850.844448][T20379] loop9: detected capacity change from 0 to 255852544
[ 1850.903584][   T33] audit: type=1326 audit(2000001025.497:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20380 comm="syz.1.19606" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c541a8f19 code=0x7ffc0000
[ 1850.903618][   T33] audit: type=1326 audit(2000001025.507:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20380 comm="syz.1.19606" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c541a8f19 code=0x7ffc0000
[ 1850.904621][   T33] audit: type=1326 audit(2000001025.507:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20380 comm="syz.1.19606" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c541a8f19 code=0x7ffc0000
[ 1850.906069][   T33] audit: type=1326 audit(2000001025.507:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20380 comm="syz.1.19606" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c541a8f19 code=0x7ffc0000
[ 1850.906108][   T33] audit: type=1326 audit(2000001025.507:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20380 comm="syz.1.19606" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3c541a8f19 code=0x7ffc0000
[ 1850.906139][   T33] audit: type=1326 audit(2000001025.507:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20380 comm="syz.1.19606" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c541a8f19 code=0x7ffc0000
[ 1850.906169][   T33] audit: type=1326 audit(2000001025.507:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20380 comm="syz.1.19606" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c541a8f19 code=0x7ffc0000
[ 1850.906767][T20379] loop9: detected capacity change from 255852544 to 524287999
[ 1850.913496][   T33] audit: type=1326 audit(2000001025.507:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20380 comm="syz.1.19606" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c541a8f19 code=0x7ffc0000
[ 1851.004674][   T33] audit: type=1326 audit(2000001025.600:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20380 comm="syz.1.19606" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c541a8f19 code=0x7ffc0000
[ 1851.746713][ T5647] Bluetooth: hci4: command tx timeout
[ 1852.064080][T20407] loop7: detected capacity change from 0 to 256
[ 1852.073346][T20407] exfat: Deprecated parameter 'namecase'
[ 1852.082547][T20407] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d)
[ 1852.093925][T20407] exFAT-fs (loop7): error, in sector 160, dentry 5 should be unused, but 0xc1
[ 1852.693761][T20425] program syz.3.19622 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1852.936569][T20432] loop3: detected capacity change from 0 to 16
[ 1853.013929][T20432] erofs (device loop3): mounted with root inode @ nid 36.
[ 1853.067772][T20432] syz.3.19625: attempt to access beyond end of device
[ 1853.067772][T20432] loop3: rw=0, sector=301990144, nr_sectors = 257 limit=16
[ 1853.067930][T20432] syz.3.19625: attempt to access beyond end of device
[ 1853.067930][T20432] loop3: rw=0, sector=301990400, nr_sectors = 2 limit=16
[ 1853.068530][T20247] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1853.068835][T20247] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1853.068993][T20247] bridge_slave_0: entered allmulticast mode
[ 1853.094472][T20247] bridge_slave_0: entered promiscuous mode
[ 1853.109294][T20247] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1853.109392][T20247] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1853.109539][T20247] bridge_slave_1: entered allmulticast mode
[ 1853.113132][T20247] bridge_slave_1: entered promiscuous mode
[ 1853.227450][T20432] erofs (device loop3): read error -5 @ 0 of nid 36
[ 1853.278542][T20247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1853.289252][T20247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1853.323646][T26779] IPVS: stop unused estimator thread 0...
[ 1853.511833][T20247] team0: Port device team_slave_0 added
[ 1853.527385][T20247] team0: Port device team_slave_1 added
[ 1853.633770][T20247] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1853.633788][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1853.633814][T20247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1853.637457][T20247] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1853.637474][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1853.637499][T20247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1853.692294][T20452] scsi_dev_info_list_add_str: bad dev info string '�' '' ''
[ 1853.809235][T20247] hsr_slave_0: entered promiscuous mode
[ 1853.810207][T20247] hsr_slave_1: entered promiscuous mode
[ 1853.810913][T20247] debugfs: 'hsr0' already exists in 'hsr'
[ 1853.810929][T20247] Cannot create hsr debugfs directory
[ 1853.923232][T20457] loop5: detected capacity change from 0 to 512
[ 1853.969594][ T5647] Bluetooth: hci4: command tx timeout
[ 1853.995449][T20457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000600000000 r/w without journal. Quota mode: writeback.
[ 1853.995556][T20457] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1854.096014][T20457] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 1854.150017][T20457] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28
[ 1854.150050][T20457] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1854.150050][T20457] 
[ 1854.150069][T20457] EXT4-fs (loop5): Total free blocks count 0
[ 1854.150085][T20457] EXT4-fs (loop5): Free/Dirty block details
[ 1854.150100][T20457] EXT4-fs (loop5): free_blocks=65281
[ 1854.150116][T20457] EXT4-fs (loop5): dirty_blocks=3
[ 1854.150130][T20457] EXT4-fs (loop5): Block reservation details
[ 1854.150142][T20457] EXT4-fs (loop5): i_reserved_data_blocks=3
[ 1854.358223][T17007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000600000000.
[ 1854.414390][T20469] usb usb1: usbfs: process 20469 (syz.1.19632) did not claim interface 0 before use
[ 1854.522563][T20471] loop5: detected capacity change from 0 to 256
[ 1854.550924][T20471] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d)
[ 1854.823271][T20477] loop5: detected capacity change from 0 to 512
[ 1854.842018][T20477] EXT4-fs error (device loop5): ext4_iget_extra_inode:6003: inode #15: comm syz.5.19636: corrupted in-inode xattr: invalid ea_ino
[ 1854.842053][T20477] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1854.842272][T20477] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.19636: couldn't read orphan inode 15 (err -117)
[ 1854.842300][T20477] loop5: lost filesystem error report for type 5 error -117
[ 1854.843993][T20477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1854.893712][T20482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19637'.
[ 1855.105469][T17007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1855.335642][T20498] loop5: detected capacity change from 0 to 512
[ 1855.360157][T20498] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[ 1855.360179][T20498] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1855.400298][T20498] EXT4-fs (loop5): 1 truncate cleaned up
[ 1855.409629][T20498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1855.475013][T20504] block2mtd: illegal erase size
[ 1855.535394][T17007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1855.904469][T10425] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1856.068454][T10425] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[ 1856.071055][T10425] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1856.071084][T10425] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1856.071103][T10425] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1856.071146][T10425] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1856.071172][T10425] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1856.072720][T10425] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1856.072747][T10425] usb 6-1: Product: syz
[ 1856.072762][T10425] usb 6-1: Manufacturer: syz
[ 1856.158940][T10425] cdc_wdm 6-1:1.0: skipping garbage
[ 1856.158961][T10425] cdc_wdm 6-1:1.0: skipping garbage
[ 1856.202821][T10425] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1856.202847][T10425] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1856.391185][T20511] cdc_wdm 6-1:1.0: Error submitting int urb - -90
[ 1856.391968][T20511] cdc_wdm 6-1:1.0: Error submitting int urb - -90
[ 1856.393134][T10425] usb 6-1: USB disconnect, device number 39
[ 1858.297127][T20554] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1858.297151][T20554] block device autoloading is deprecated and will be removed.
[ 1858.573563][T20578] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1858.573762][T20578] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1858.573969][T20578] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1858.574127][T20578] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1858.574484][T20578] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1858.574569][T20578] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1858.707007][T20578] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1858.949384][T14867] Bluetooth: hci3: connection err: -111
[ 1859.013879][T20600] loop7: detected capacity change from 0 to 128
[ 1859.048445][T20600] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1859.050289][T20600] ext4 filesystem being mounted at /1523/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1859.074841][T20600] fscrypt (loop7, inode 12): Direct key flag not allowed with different contents and filenames modes
[ 1859.141910][T32531] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1859.269182][T20247] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1859.289830][T20247] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1859.291488][T20247] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1859.321107][T20247] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1859.321972][T20247] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1859.330821][T20606] loop7: detected capacity change from 0 to 128
[ 1859.351384][T20247] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1859.359880][T20247] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1859.398159][T20247] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1859.582328][T20247] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1859.606229][T20247] 8021q: adding VLAN 0 to HW filter on device team0
[ 1859.620940][T12655] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1859.621042][T12655] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1859.643647][T15381] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1859.643744][T15381] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1860.163385][T20639] netlink: 280 bytes leftover after parsing attributes in process `syz.3.19675'.
[ 1860.731829][ T5647] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1860.731877][ T5647] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1860.731905][ T5647] Bluetooth: hci3: command 0x0419 tx timeout
[ 1860.731930][ T5647] Bluetooth: hci1: command 0x0406 tx timeout
[ 1860.732020][T14867] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1860.846209][T20669] Format for adding new port is "id [perm_addr]" (uint MAC).
[ 1861.006501][T20681] netlink: 'syz.5.19688': attribute type 3 has an invalid length.
[ 1861.006525][T20681] netlink: 'syz.5.19688': attribute type 2 has an invalid length.
[ 1861.125052][T20247] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1861.727238][T20247] veth0_vlan: entered promiscuous mode
[ 1861.742893][T20247] veth1_vlan: entered promiscuous mode
[ 1861.850298][T20247] veth0_macvtap: entered promiscuous mode
[ 1861.857893][T20247] veth1_macvtap: entered promiscuous mode
[ 1861.874906][T20247] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1861.896253][T20247] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1861.925703][ T2362] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1862.041693][ T2362] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1862.041736][ T2362] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1862.041767][ T2362] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1862.204779][T11408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1862.204801][T11408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1862.280159][T11408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1862.280175][T11408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1862.638494][T20731] device-mapper: ioctl: Invalid ioctl structure: name m, dev 2d
[ 1862.785481][T20718] loop1: detected capacity change from 0 to 32768
[ 1862.788789][T20718] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.19695 (20718)
[ 1862.830776][T20718] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1862.830814][T20718] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1862.940692][T20738] loop5: detected capacity change from 0 to 2048
[ 1862.950192][ T4952] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1862.977208][T20718] BTRFS info (device loop1): enabling ssd optimizations
[ 1862.977238][T20718] BTRFS info (device loop1): turning on async discard
[ 1862.977274][T20718] BTRFS info (device loop1): enabling free space tree
[ 1862.995202][T20738] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1863.037629][ T4952] Bluetooth: hci4: unexpected event for opcode 0x0c22
[ 1863.316178][T13364] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1863.419256][ T4952] Bluetooth: hci4: ACL packet for unknown connection handle 201
[ 1864.107736][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19706'.
[ 1864.668436][T20808] erspan0: entered promiscuous mode
[ 1864.697261][T20804] loop5: detected capacity change from 0 to 8192
[ 1864.806426][T20818] loop8: detected capacity change from 0 to 1024
[ 1864.819359][T20818] EXT4-fs: Ignoring removed orlov option
[ 1864.880988][T20818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1865.078502][T20247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1866.150783][T20871] ima: policy update failed
[ 1866.151996][   T33] kauditd_printk_skb: 6 callbacks suppressed
[ 1866.152011][   T33] audit: type=1807 audit(2000001039.762:781): func=FILE_CHECK res=0
[ 1866.152053][   T33] audit: type=1802 audit(2000001039.771:782): pid=20873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.8.19737" res=0 errno=-22
[ 1866.152088][   T33] audit: type=1802 audit(2000001039.771:783): pid=20871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.19737" res=0 errno=-22
[ 1866.510280][T20882] loop1: detected capacity change from 0 to 4096
[ 1866.581653][T20882] ntfs3(loop1): Failed to load $Extend (-22).
[ 1866.581681][T20882] ntfs3(loop1): Failed to initialize $Extend.
[ 1866.903620][T20880] loop8: detected capacity change from 0 to 32768
[ 1866.939536][T20880] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1866.958442][T20870] loop7: detected capacity change from 0 to 32768
[ 1866.986987][   T33] audit: type=1326 audit(2000001040.548:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20891 comm="syz.1.19742" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c541a8f19 code=0x0
[ 1866.987934][T20880] XFS (loop8): Ending clean mount
[ 1867.025838][T20870] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1867.028865][T20880] XFS (loop8): Quotacheck needed: Please wait.
[ 1867.124998][T20870] XFS (loop7): Ending clean mount
[ 1867.266193][   T33] audit: type=1800 audit(2000001040.810:785): pid=20870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.19735" name="file1" dev="loop7" ino=4422 res=0 errno=-22
[ 1867.396388][T32531] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1867.539546][T20880] XFS (loop8): Quotacheck: Done.
[ 1868.104812][T20934] loop1: detected capacity change from 0 to 2048
[ 1868.112550][T20934] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 1868.112926][T20934] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[ 1868.112943][T20934] UDF-fs: Scanning with blocksize 512 failed
[ 1868.207355][T20934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1868.301920][T20247] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1868.569635][T20948] loop1: detected capacity change from 0 to 64
[ 1868.633275][T20948] syz.1.19752: attempt to access beyond end of device
[ 1868.633275][T20948] loop1: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[ 1868.633311][T20948] Buffer I/O error on dev loop1, logical block 512, async page read
[ 1868.633519][T20948] syz.1.19752: attempt to access beyond end of device
[ 1868.633519][T20948] loop1: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[ 1868.633544][T20948] Buffer I/O error on dev loop1, logical block 56576, async page read
[ 1868.771057][T20952] syz.1.19752: attempt to access beyond end of device
[ 1868.771057][T20952] loop1: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[ 1868.771092][T20952] Buffer I/O error on dev loop1, logical block 512, async page read
[ 1868.771129][T20952] syz.1.19752: attempt to access beyond end of device
[ 1868.771129][T20952] loop1: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[ 1868.771152][T20952] Buffer I/O error on dev loop1, logical block 56576, async page read
[ 1869.148096][T20960] loop3: detected capacity change from 0 to 4096
[ 1869.172794][T20960] ntfs3(loop3): ino=0, mi_enum_attr
[ 1869.220406][T20960] ntfs3(loop3): ino=0, mi_enum_attr
[ 1869.220441][T20960] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[ 1869.220714][T20960] ntfs3(loop3): ino=0, mi_enum_attr
[ 1869.340725][T20972] loop8: detected capacity change from 0 to 512
[ 1869.395326][T20972] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1869.395447][T20972] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1869.560556][T20979] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19760'.
[ 1869.603296][T20247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1869.988881][T20965] loop1: detected capacity change from 0 to 32768
[ 1870.016821][T20965] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1870.095509][T21005] loop8: detected capacity change from 0 to 2048
[ 1870.110749][T20965] XFS (loop1): Ending clean mount
[ 1870.193277][T21005] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1870.254894][T21005] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[ 1870.255248][T21005] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[ 1870.255275][T21005] EXT4-fs (loop8): This should not happen!! Data will be lost
[ 1870.255275][T21005] 
[ 1870.255290][T21005] EXT4-fs (loop8): Total free blocks count 0
[ 1870.255303][T21005] EXT4-fs (loop8): Free/Dirty block details
[ 1870.255316][T21005] EXT4-fs (loop8): free_blocks=4096
[ 1870.255330][T21005] EXT4-fs (loop8): dirty_blocks=48
[ 1870.255343][T21005] EXT4-fs (loop8): Block reservation details
[ 1870.255355][T21005] EXT4-fs (loop8): i_reserved_data_blocks=3
[ 1870.346978][T13364] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1870.558217][T20247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1871.267433][ T1228] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1871.428546][ T1228] usb 6-1: Using ep0 maxpacket: 32
[ 1871.429274][ T1228] usb 6-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1871.430239][ T1228] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1871.432406][ T1228] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1871.432431][ T1228] usb 6-1: Product: syz
[ 1871.432445][ T1228] usb 6-1: Manufacturer: syz
[ 1871.432465][ T1228] usb 6-1: SerialNumber: syz
[ 1871.436202][ T1228] usb 6-1: config 0 descriptor??
[ 1871.437390][T21036] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1871.443992][ T1228] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1871.444017][ T1228] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1871.713982][T21051] Format for deleting device is "id" (uint).
[ 1871.791254][T10313] usb 6-1: USB disconnect, device number 40
[ 1871.997721][   T64] IPVS: starting estimator thread 0...
[ 1872.090787][T21062] IPVS: using max 30 ests per chain, 72000 per kthread
[ 1872.918555][T21105] loop3: detected capacity change from 0 to 128
[ 1872.954595][T21105] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[ 1872.954689][T21105] System zones: 1-3, 19-19, 35-36
[ 1872.984397][T21105] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1873.004351][T21105] ext4 filesystem being mounted at /195/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1873.400584][T17550] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1873.496307][T21090] loop7: detected capacity change from 0 to 32768
[ 1873.518864][T21090] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1873.698471][T21090] XFS (loop7): Ending clean mount
[ 1873.699482][T21136] loop8: detected capacity change from 0 to 164
[ 1873.728427][ T2362] IPVS: starting estimator thread 0...
[ 1873.834397][T21137] IPVS: using max 38 ests per chain, 91200 per kthread
[ 1873.867541][T32531] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1875.227001][T21166] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input133
[ 1875.270478][T21175] IPVS: ip_vs_edit_dest(): server weight less than zero
[ 1875.936865][T21169] loop3: detected capacity change from 0 to 32768
[ 1875.976373][T21169] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1876.008380][T21169] XFS (loop3): Ending clean mount
[ 1876.076099][T17550] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1876.419338][   T33] audit: type=1400 audit(2000001049.369:786): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=21205 comm="syz.3.19816" name="unknown" offset=16
[ 1877.123033][T21227] loop5: detected capacity change from 0 to 2048
[ 1877.147323][T21227] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[ 1877.154252][T21227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1877.547541][T21246] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1877.736054][T21252] loop5: detected capacity change from 0 to 128
[ 1877.747054][T21252] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1877.749723][T21252] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1877.923298][T21260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19836'.
[ 1878.443098][   T33] audit: type=1807 audit(2000001051.268:787): action=appraise func=KEXEC_KERNEL_CHECK res=1
[ 1878.443378][T21283] ima: policy update completed
[ 1878.444360][   T33] audit: type=1802 audit(2000001051.268:788): pid=21283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.7.19846" res=1 errno=0
[ 1878.477586][T21289] device-mapper: table: 248:20: crypt: Error decoding and setting key (-EINVAL)
[ 1878.477612][T21289] device-mapper: ioctl: error adding target to table
[ 1878.744176][T21302] loop7: detected capacity change from 0 to 512
[ 1878.757166][T21302] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[ 1878.757186][T21302] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1878.796334][T21302] EXT4-fs error (device loop7): ext4_free_branches:1040: inode #16: comm syz.7.19852: invalid indirect mapped block 32768 (level 2)
[ 1878.796375][T21302] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 1878.803707][    C1] EXT4-fs (loop7): error count since last fsck: 1
[ 1878.803732][    C1] EXT4-fs (loop7): initial error at time 2000001051: ext4_free_branches:1040: inode 16
[ 1878.803760][    C1] EXT4-fs (loop7): last error at time 2000001051: ext4_free_branches:1040: inode 16
[ 1878.840474][T21310] loop8: detected capacity change from 0 to 128
[ 1878.856386][T21302] EXT4-fs (loop7): 1 orphan inode deleted
[ 1878.856410][T21302] EXT4-fs (loop7): 1 truncate cleaned up
[ 1878.857659][ T4952] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1878.889519][T21302] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1878.951017][ T4952] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1879.204254][T21322] netlink: 4412 bytes leftover after parsing attributes in process `syz.3.19857'.
[ 1879.222341][T32531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1879.798053][T10333] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1879.938090][T21352] loop1: detected capacity change from 0 to 2048
[ 1879.969110][T10333] usb 9-1: Using ep0 maxpacket: 32
[ 1879.969916][T10333] usb 9-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1879.978057][T10333] usb 9-1: config 0 has an invalid interface number: 85 but max is 0
[ 1879.978084][T10333] usb 9-1: config 0 has no interface number 0
[ 1879.978120][T10333] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1879.978145][T10333] usb 9-1: config 0 interface 85 has no altsetting 0
[ 1879.994787][T21352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1879.994906][T21352] ext4 filesystem being mounted at /482/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1880.006017][T21350] loop3: detected capacity change from 0 to 4096
[ 1880.025909][T10333] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1880.025939][T10333] usb 9-1: Product: syz
[ 1880.025955][T10333] usb 9-1: Manufacturer: syz
[ 1880.025969][T10333] usb 9-1: SerialNumber: syz
[ 1880.112378][T10333] usb 9-1: config 0 descriptor??
[ 1880.125284][T21325] loop5: detected capacity change from 0 to 32768
[ 1880.151364][T21325] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.19862 (21325)
[ 1880.192883][T21325] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1880.192916][T21325] BTRFS info (device loop5): using blake2b checksum algorithm
[ 1880.265847][T21350] ntfs3(loop3): ino=9, mi_enum_attr
[ 1880.265881][T21350] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[ 1880.268088][T13364] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1880.269517][T21350] ntfs3(loop3): ino=9, mi_enum_attr
[ 1880.269620][T21350] ntfs3(loop3): ino=b, mi_enum_attr
[ 1880.269695][T21350] ntfs3(loop3): Failed to load $Extend (-22).
[ 1880.269712][T21350] ntfs3(loop3): Failed to initialize $Extend.
[ 1880.382742][T21325] BTRFS info (device loop5): enabling ssd optimizations
[ 1880.382772][T21325] BTRFS info (device loop5): using spread ssd allocation scheme
[ 1880.382790][T21325] BTRFS info (device loop5): turning off barriers
[ 1880.382806][T21325] BTRFS info (device loop5): enabling free space tree
[ 1880.382823][T21325] BTRFS info (device loop5): enabling auto defrag
[ 1880.382841][T21325] BTRFS info (device loop5): force zlib compression, level 3
[ 1880.806724][T21375] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[ 1880.897682][T10333] appletouch 9-1:0.85: Geyser mode initialized.
[ 1880.914384][T10333] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input134
[ 1881.137609][T10333] usb 9-1: USB disconnect, device number 13
[ 1881.422092][T10333] appletouch 9-1:0.85: input: appletouch disconnected
[ 1881.435937][T17007] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1882.011020][T10425] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1882.173675][T10425] usb 6-1: Using ep0 maxpacket: 8
[ 1882.174416][T10425] usb 6-1: New USB device found: idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1882.199478][T10425] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1882.199509][T10425] usb 6-1: Product: syz
[ 1882.199525][T10425] usb 6-1: Manufacturer: syz
[ 1882.199540][T10425] usb 6-1: SerialNumber: syz
[ 1882.228423][T10425] usb 6-1: config 0 descriptor??
[ 1882.247260][T10425] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[ 1882.583377][T21434] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1882.838826][T21443] loop3: detected capacity change from 0 to 2048
[ 1882.906490][T21443] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1882.921630][T10425] input: gspca_zc3xx as /devices/platform/dummy_hcd.5/usb6/6-1/input/input135
[ 1883.211516][T10425] usb 6-1: USB disconnect, device number 41
[ 1883.675486][T21468] loop7: detected capacity change from 0 to 256
[ 1883.683892][T21468] vfat: Unknown parameter '��������0x000000000000000001777777777777777777777a�׃�����䢬ZuǨf����	~�]�y'P�z�<�\�w��@�qj��$�1�ͽ�ۛ�|�����Og�
C-�i��GV��K�r�U$��#6�48��^D ܻ��6���E�h^\[�&��А�1�Q������o��&�V�-�R���������'
[ 1884.015358][T21475] loop7: detected capacity change from 0 to 4096
[ 1884.090562][T21478] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1884.135264][T21475] NILFS error (device loop7): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1
[ 1884.250265][T21475] Remounting filesystem read-only
[ 1884.355473][T21480] NILFS error (device loop7): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1
[ 1884.383689][T32531] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer
[ 1885.010246][T21504] loop8: detected capacity change from 0 to 128
[ 1885.264605][T21498] loop3: detected capacity change from 0 to 32768
[ 1885.284497][T21498] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1885.497072][T21498] XFS (loop3): Ending clean mount
[ 1885.502804][T21498] XFS (loop3): Quotacheck needed: Please wait.
[ 1885.635800][T21529] loop7: detected capacity change from 0 to 512
[ 1885.664384][T21529] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm syz.7.19926: bg 0: block 5: invalid block bitmap
[ 1885.664805][T21529] loop7: lost filesystem error report for type 5 error -117
[ 1885.667077][    C1] EXT4-fs (loop7): error count since last fsck: 1
[ 1885.667098][    C1] EXT4-fs (loop7): initial error at time 2000001058: ext4_validate_block_bitmap:436
[ 1885.667119][    C1] EXT4-fs (loop7): last error at time 2000001058: ext4_validate_block_bitmap:436
[ 1885.709038][T21529] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6678: Corrupt filesystem
[ 1885.709066][T21529] loop7: lost filesystem error report for type 5 error -117
[ 1885.722999][T21529] EXT4-fs error (device loop7): ext4_free_branches:1040: inode #11: comm syz.7.19926: invalid indirect mapped block 3 (level 2)
[ 1885.723037][T21529] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1885.723744][T21529] EXT4-fs (loop7): 1 orphan inode deleted
[ 1885.723777][T21529] EXT4-fs (loop7): 1 truncate cleaned up
[ 1885.736751][T21498] XFS (loop3): Quotacheck: Done.
[ 1885.737989][T21529] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1885.940416][T32531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1886.029850][T21543] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19931'.
[ 1886.147147][T21547] netlink: 256 bytes leftover after parsing attributes in process `syz.7.19929'.
[ 1886.147173][T21547] netlink: 64 bytes leftover after parsing attributes in process `syz.7.19929'.
[ 1886.206259][T21550] jffs2: notice: (21550) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[ 1886.249207][T17550] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1886.894123][   T33] audit: type=1400 audit(2000001059.172:789): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/" pid=21565 comm="syz.8.19940"
[ 1887.185856][T21576] loop8: detected capacity change from 0 to 2048
[ 1887.288364][T21576] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1887.326296][T21583] loop3: detected capacity change from 0 to 512
[ 1887.343093][T21576] EXT4-fs (loop8): shut down requested (1)
[ 1887.388834][T21583] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[ 1887.388934][T21583] System zones: 0-2, 18-18, 34-35
[ 1887.409324][T21583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1887.409448][T21583] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1887.468457][T20247] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1887.662598][T21573] loop7: detected capacity change from 0 to 32768
[ 1887.696342][T21573] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1887.711708][T17550] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1887.838332][T21573] XFS (loop7): Ending clean mount
[ 1887.981924][T32531] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1888.126903][T21605] loop5: detected capacity change from 0 to 512
[ 1888.129677][T21605] EXT4-fs: Ignoring removed nobh option
[ 1888.135431][T21605] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[ 1888.240567][T21610] bonding: no command found in bonding_masters - use +ifname or -ifname
[ 1888.371929][T10333] usb 4-1: new high-speed USB device number 47 using dummy_hcd

syzkaller
syzkaller login: [ 1888.554731][T10333] usb 4-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01
[ 1888.555725][T10333] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1888.555808][T10333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1888.629147][T10333] as10x_usb: device has been detected
[ 1888.630045][T10333] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[ 1888.663227][T10333] usb 4-1: DVB: registering adapter 4 frontend 0 (Abilis Systems DVB-Titan)...
[ 1888.731521][T10425] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[ 1888.770169][T10333] as10x_usb: error during firmware upload part1
[ 1888.770806][T10333] Registered device Abilis Systems DVB-Titan
[ 1888.899836][T10425] usb 9-1: New USB device found: idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1888.901029][T10425] usb 9-1: config 0 has an invalid interface number: 251 but max is 0
[ 1888.901055][T10425] usb 9-1: config 0 has no interface number 0
[ 1888.903114][T10425] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1888.903139][T10425] usb 9-1: Product: syz
[ 1888.903155][T10425] usb 9-1: Manufacturer: syz
[ 1888.903170][T10425] usb 9-1: SerialNumber: syz
[ 1888.906483][T10425] usb 9-1: config 0 descriptor??
[ 1889.298504][T21632] ip_tables: iptables: counters copy to user failed while replacing table
[ 1889.634049][T21634] loop5: detected capacity change from 0 to 4096
[ 1889.659342][T21634] NILFS (loop5): invalid segment: Checksum error in segment payload
[ 1889.659394][T21634] NILFS (loop5): trying rollback from an earlier position
[ 1889.701068][T21634] NILFS (loop5): recovery complete
[ 1889.706804][T21635] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1889.790335][T10425] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1889.790371][T10425] asix 9-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[ 1889.790650][T10425] asix 9-1:0.251: probe with driver asix failed with error -71
[ 1889.839678][T10425] usb 9-1: USB disconnect, device number 14
[ 1890.043050][T21639] loop5: detected capacity change from 0 to 4096
[ 1890.044581][T21639] ntfs3(loop5): Primary boot: invalid index size -57.
[ 1890.044767][T21639] ntfs3(loop5): try to read out of volume at offset 0x1ffe00
[ 1890.454877][T21656] loop8: detected capacity change from 0 to 256
[ 1890.455979][T21656] exfat: Deprecated parameter 'namecase'
[ 1890.483240][T21656] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d)
[ 1890.608787][T21660] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19977'.
[ 1890.608806][T21660] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19977'.
[ 1890.609092][T21660] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19977'.
[ 1890.609104][T21660] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19977'.
[ 1890.691889][ T4952] Bluetooth: hci2: unexpected event for opcode 0x2040
[ 1890.760553][T21668] xt_hashlimit: size too large, truncated to 1048576
[ 1891.131164][T21681] loop7: detected capacity change from 0 to 1024
[ 1891.140301][T21681] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[ 1891.163226][T21681] EXT4-fs (loop7): Errors on filesystem, clearing orphan list.
[ 1891.169736][T21681] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1891.232061][T21681] fscrypt (loop7, inode 18): Mutually exclusive encryption flags (0x18)
[ 1891.293171][T32531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1891.336691][T21686] loop8: detected capacity change from 0 to 4096
[ 1891.366838][T21686] NILFS (loop8): invalid segment: Checksum error in segment payload
[ 1891.366867][T21686] NILFS (loop8): trying rollback from an earlier position
[ 1891.383038][T10333] usb 4-1: USB disconnect, device number 47
[ 1891.418214][T21686] NILFS (loop8): recovery complete
[ 1891.442426][T21687] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1891.469630][T21689] loop7: detected capacity change from 0 to 512
[ 1891.480328][T21689] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1891.480350][T21689] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[ 1891.480369][T21689] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1891.514531][T21689] EXT4-fs error (device loop7): ext4_orphan_get:1430: comm syz.7.19988: bad orphan inode 131083
[ 1891.514566][T21689] loop7: lost filesystem error report for type 5 error -117
[ 1891.514966][    C0] EXT4-fs (loop7): error count since last fsck: 1
[ 1891.514983][    C0] EXT4-fs (loop7): initial error at time 2000001063: ext4_orphan_get:1430
[ 1891.515005][    C0] EXT4-fs (loop7): last error at time 2000001063: ext4_orphan_get:1430
[ 1891.561333][T21689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1891.569771][T10333] Unregistered device Abilis Systems DVB-Titan
[ 1891.578433][T10333] as10x_usb: device has been disconnected
[ 1891.636001][T21689] EXT4-fs (loop7): shut down requested (2)
[ 1891.694596][T32531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1891.886375][T21691] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 4100 already freed
[ 1891.893983][T21691] NILFS (loop8): error -2 preparing GC: cannot delete virtual blocks from DAT file
[ 1891.941296][T10425] kernel write not supported for file /505/uid_map (pid: 10425 comm: kworker/0:6)
[ 1892.140553][   T33] audit: type=1326 audit(2000001064.083:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21707 comm="syz.5.19998" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e47da8f19 code=0x0
[ 1892.303084][T21714] loop1: detected capacity change from 0 to 4096
[ 1892.362083][T21714] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[ 1892.472444][T21714] ntfs3(loop1): failed to convert "256c" to koi8-ru
[ 1892.596636][T10313] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1892.647812][T21732] kAFS: Invalid Command on /proc/fs/afs/cells file
[ 1892.688592][T21733] nvme_fcloop: unknown parameter or missing value 'wwp'
[ 1892.769934][T10313] usb 4-1: New USB device found: idVendor=046d, idProduct=c71f, bcdDevice=0.00
[ 1892.771140][T10313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1892.771191][T10313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1892.784049][T10313] usb 4-1: config 0 descriptor??
[ 1892.789441][T21719] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1892.945271][T21742] vcan0: tx drop: invalid da for name 0x00000000000000f5
[ 1893.029054][T21719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1893.032571][T21719] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1893.273497][T10313] hid (null): report_id 0 is invalid
[ 1893.288485][T10313] hid_parser_main: 5 callbacks suppressed
[ 1893.288534][T10313] logitech-djreceiver 0003:046D:C71F.0021: unknown main item tag 0x0
[ 1893.288567][T10313] logitech-djreceiver 0003:046D:C71F.0021: unknown main item tag 0x0
[ 1893.288594][T10313] logitech-djreceiver 0003:046D:C71F.0021: unknown main item tag 0x0
[ 1893.288620][T10313] logitech-djreceiver 0003:046D:C71F.0021: unknown main item tag 0x0
[ 1893.288646][T10313] logitech-djreceiver 0003:046D:C71F.0021: unknown main item tag 0x0
[ 1893.288672][T10313] logitech-djreceiver 0003:046D:C71F.0021: unknown main item tag 0x0
[ 1893.288698][T10313] logitech-djreceiver 0003:046D:C71F.0021: unknown main item tag 0x0
[ 1893.288724][T10313] logitech-djreceiver 0003:046D:C71F.0021: unknown main item tag 0x0
[ 1893.288750][T10313] logitech-djreceiver 0003:046D:C71F.0021: unknown main item tag 0x0
[ 1893.288777][T10313] logitech-djreceiver 0003:046D:C71F.0021: unknown main item tag 0x0
[ 1893.293706][T10313] logitech-djreceiver 0003:046D:C71F.0021: unexpected long global item
[ 1893.296314][T10313] logitech-djreceiver 0003:046D:C71F.0021: logi_dj_probe: parse failed
[ 1893.296388][T10313] logitech-djreceiver 0003:046D:C71F.0021: probe with driver logitech-djreceiver failed with error -22
[ 1893.515305][T10313] usb 4-1: USB disconnect, device number 48
[ 1893.729377][T21770] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[ 1893.971211][T21777] loop7: detected capacity change from 0 to 2048
[ 1894.018057][T21777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1894.025335][T21777] ext4 filesystem being mounted at /1600/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1894.140643][T32531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1894.247597][T21785] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2
[ 1894.453370][T21793] loop7: detected capacity change from 0 to 512
[ 1894.466833][T21793] EXT4-fs: Ignoring removed nobh option
[ 1894.679450][ T5647] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1894.679458][ T4952] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1895.079272][T21811] loop5: detected capacity change from 0 to 2048
[ 1895.137438][T21811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1895.137548][T21811] ext4 filesystem being mounted at /284/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1895.296084][T21807] loop8: detected capacity change from 0 to 40427
[ 1895.311150][T21807] F2FS-fs (loop8): invalid crc value
[ 1895.396850][T17007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1895.400926][T21807] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1895.455841][T21807] F2FS-fs (loop8): f2fs_disable_checkpoint starts, unusable: 0
[ 1895.455872][T21807] F2FS-fs (loop8): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[ 1895.455897][T21807] F2FS-fs (loop8): Start checkpoint disabled!
[ 1895.505280][T21807] F2FS-fs (loop8): f2fs_disable_checkpoint finishes, err:0
[ 1895.511374][T21807] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[ 1895.655737][T15381] kworker/u8:9: attempt to access beyond end of device
[ 1895.655737][T15381] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1895.655819][T15381] CPU: 0 UID: 0 PID: 15381 Comm: kworker/u8:9 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1895.655844][T15381] Tainted: [L]=SOFTLOCKUP
[ 1895.655850][T15381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 1895.655862][T15381] Workqueue: writeback wb_workfn (flush-7:8)
[ 1895.655892][T15381] Call Trace:
[ 1895.655908][T15381]  <TASK>
[ 1895.655916][T15381]  dump_stack_lvl+0xe8/0x150
[ 1895.655944][T15381]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1895.655967][T15381]  f2fs_write_end_bio+0x118e/0x15d0
[ 1895.656008][T15381]  __submit_merged_bio+0x258/0x6a0
[ 1895.656026][T15381]  ? rcu_is_watching+0x16/0xb0
[ 1895.656058][T15381]  f2fs_submit_merged_write_cond+0x1ef/0x590
[ 1895.656081][T15381]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[ 1895.656121][T15381]  f2fs_write_data_pages+0x2a13/0x36e0
[ 1895.656175][T15381]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1895.656266][T15381]  ? __lock_acquire+0x747/0x2de0
[ 1895.656309][T15381]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1895.656329][T15381]  do_writepages+0x338/0x560
[ 1895.656350][T15381]  ? __lock_acquire+0x747/0x2de0
[ 1895.656372][T15381]  ? reacquire_held_locks+0x117/0x1a0
[ 1895.656394][T15381]  ? writeback_sb_inodes+0x450/0x1af0
[ 1895.656423][T15381]  __writeback_single_inode+0x136/0x1220
[ 1895.656446][T15381]  ? do_raw_spin_unlock+0xf5/0x200
[ 1895.656467][T15381]  writeback_sb_inodes+0x9de/0x1af0
[ 1895.656484][T15381]  ? __lock_acquire+0x747/0x2de0
[ 1895.656530][T15381]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1895.656593][T15381]  ? rcu_is_watching+0x16/0xb0
[ 1895.656618][T15381]  ? queue_io+0x2d3/0x470
[ 1895.656645][T15381]  wb_writeback+0x41c/0xad0
[ 1895.656670][T15381]  ? queue_io+0x221/0x470
[ 1895.656697][T15381]  ? __pfx_wb_writeback+0x10/0x10
[ 1895.656715][T15381]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1895.656751][T15381]  wb_workfn+0x431/0x10f0
[ 1895.656786][T15381]  ? __pfx_wb_workfn+0x10/0x10
[ 1895.656810][T15381]  ? trace_hrtimer_start+0x82/0x200
[ 1895.656840][T15381]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1895.656867][T15381]  ? lock_acquire+0x115/0x350
[ 1895.656894][T15381]  ? rcu_is_watching+0x16/0xb0
[ 1895.656930][T15381]  ? process_scheduled_works+0x97a/0x1630
[ 1895.656955][T15381]  process_scheduled_works+0xc3d/0x1630
[ 1895.657007][T15381]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1895.657035][T15381]  ? assign_work+0x3cf/0x5d0
[ 1895.657062][T15381]  worker_thread+0xa47/0xfb0
[ 1895.657093][T15381]  ? __kthread_parkme+0x71/0x1f0
[ 1895.657120][T15381]  kthread+0x38b/0x480
[ 1895.657139][T15381]  ? __pfx_worker_thread+0x10/0x10
[ 1895.657153][T15381]  ? __pfx_kthread+0x10/0x10
[ 1895.657175][T15381]  ret_from_fork+0x514/0xb70
[ 1895.657194][T15381]  ? save_fpregs_to_fpstate+0x176/0x200
[ 1895.657225][T15381]  ? __pfx_ret_from_fork+0x10/0x10
[ 1895.657244][T15381]  ? __switch_to+0xc78/0x1410
[ 1895.657263][T15381]  ? __pfx_kthread+0x10/0x10
[ 1895.657281][T15381]  ret_from_fork_asm+0x1a/0x30
[ 1895.657313][T15381]  </TASK>
[ 1895.669185][T15381] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[ 1896.475569][ T4952] Bluetooth: hci5: command 0x1003 tx timeout
[ 1896.475919][T14867] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1896.777620][T21846] loop8: detected capacity change from 0 to 128
[ 1896.796854][T21846] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[ 1896.796884][T21846] FAT-fs (loop8): Filesystem has been set read-only
[ 1896.799695][T21846] loop8: Can't mount, would change RO state
[ 1896.973368][T21836] ima: impossible to appraise a kernel image without a file descriptor; try using kexec_file_load syscall.
[ 1897.231229][T21855] ima: Unable to open file: /eas (-2)
[ 1897.232529][T21854] ima: policy update failed
[ 1897.232701][   T33] audit: type=1802 audit(2000001068.844:791): pid=21854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.20060" res=0 errno=-22
[ 1897.606192][T21871] tap0: tun_chr_ioctl cmd 2147767506
[ 1897.689627][T21879] netlink: 80 bytes leftover after parsing attributes in process `syz.5.20071'.
[ 1897.946674][T21891] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[ 1898.038814][T21895] netlink: 36 bytes leftover after parsing attributes in process `syz.7.20079'.
[ 1898.045256][T21895] netlink: 68 bytes leftover after parsing attributes in process `syz.7.20079'.
[ 1898.048776][T10313] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1898.079884][T21897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20080'.
[ 1898.182945][T21901] loop1: detected capacity change from 0 to 16
[ 1898.203071][T21901] erofs (device loop1): mounted with root inode @ nid 36.
[ 1898.218775][T10313] usb 9-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1898.218820][T10313] usb 9-1: too many configurations: 9, using maximum allowed: 8
[ 1898.220186][T10313] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1898.220247][T10313] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1898.220274][T10313] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1898.221408][T10313] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1898.221455][T10313] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1898.221481][T10313] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1898.222607][T10313] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1898.222652][T10313] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1898.222679][T10313] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1898.223882][T10313] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1898.223926][T10313] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1898.223951][T10313] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1898.225132][T10313] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1898.225175][T10313] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1898.225209][T10313] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1898.226519][T10313] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1898.226906][T10313] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1898.226935][T10313] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1898.227954][T10313] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1898.227996][T10313] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1898.228022][T10313] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1898.269777][T10313] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1898.269830][T10313] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1898.269855][T10313] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1898.352079][T10313] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1898.352108][T10313] usb 9-1: Product: syz
[ 1898.352122][T10313] usb 9-1: Manufacturer: syz
[ 1898.352135][T10313] usb 9-1: SerialNumber: syz
[ 1898.442699][T21901] erofs (device loop1): invalid de[0].nameoff 0 @ nid 36
[ 1898.502051][T21902] erofs (device loop1): invalid de[0].nameoff 0 @ nid 36
[ 1898.514588][T10313] usb 9-1: config 0 descriptor??
[ 1898.535996][T10313] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0
[ 1898.754091][T21911] loop1: detected capacity change from 0 to 1024
[ 1898.967996][ T1228] usb 9-1: USB disconnect, device number 15
[ 1898.982642][ T1228] yurex 9-1:0.0: USB YUREX #0 now disconnected
[ 1899.332167][T21927] loop3: detected capacity change from 0 to 512
[ 1899.691609][T21939] pimreg: tun_chr_ioctl cmd 35111
[ 1900.171082][T21942] ima: impossible to appraise a kernel image without a file descriptor; try using kexec_file_load syscall.
[ 1900.490499][T21959] loop8: detected capacity change from 0 to 32768
[ 1900.510431][T21959] JBD2: Ignoring recovery information on journal
[ 1900.547175][T21959] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[ 1900.599996][T21968] loop3: detected capacity change from 0 to 1024
[ 1900.653456][T21968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1900.833882][T20247] ocfs2: Unmounting device (7,8) on (node local)
[ 1901.182171][T14867] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[ 1901.582483][T21976] loop8: detected capacity change from 0 to 32768
[ 1901.588964][T21976] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.20114 (21976)
[ 1901.631159][T21976] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1901.631196][T21976] BTRFS info (device loop8): using sha256 checksum algorithm
[ 1901.645808][   T33] audit: type=1400 audit(2000001072.959:792): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="f/o" pid=21989 comm="syz.3.20118" name="f/o" offset=66
[ 1901.810704][T21976] BTRFS info (device loop8): enabling ssd optimizations
[ 1901.810732][T21976] BTRFS info (device loop8): turning on async discard
[ 1901.810748][T21976] BTRFS info (device loop8): enabling free space tree
[ 1901.942398][T20247] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1902.781936][T22035] netlink: 424 bytes leftover after parsing attributes in process `syz.5.20127'.
[ 1902.781985][T22035] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1902.985980][T22045] sd 0:0:1:0: PR command failed: 1026
[ 1902.986107][T22045] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[ 1902.986145][T22045] sd 0:0:1:0: Add. Sense: Invalid command operation code
[ 1903.090209][T22049] loop8: detected capacity change from 0 to 1024
[ 1903.748392][T22071] loop7: detected capacity change from 0 to 4096
[ 1903.807156][T22071] ntfs3(loop7): Failed to load $MFT (-22).
[ 1903.889084][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20144'.
[ 1903.921023][T22083] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode
[ 1903.938437][T22083] batman_adv: batadv0: Adding interface: macvlan2
[ 1903.938456][T22083] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1903.938488][T22083] batman_adv: batadv0: Interface activated: macvlan2
[ 1904.128438][T22092] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22
[ 1904.195915][T22095] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1904.495622][T22107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20155'.
[ 1904.495650][T22107] netlink: 47 bytes leftover after parsing attributes in process `syz.3.20155'.
[ 1904.569218][T22110] genirq: Flags mismatch irq 2. 00200000 (pcmmio) vs. 00200000 (pcl816)
[ 1904.705098][T22118] loop1: detected capacity change from 0 to 128
[ 1904.737096][T22118] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1904.746312][T22118] ext4 filesystem being mounted at /529/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1904.914918][T13364] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1905.095974][T10313] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1905.122505][T22129] input: syz1 as /devices/virtual/input/input136
[ 1905.234700][T22137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20166'.
[ 1905.242113][T22134] loop7: detected capacity change from 0 to 1024
[ 1905.262106][T22137] ipvlan2: entered allmulticast mode
[ 1905.262129][T22137] syz_tun: entered allmulticast mode
[ 1905.263425][T10313] usb 6-1: Using ep0 maxpacket: 16
[ 1905.275992][T22134] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[ 1905.284063][T22134] EXT4-fs (loop7): Errors on filesystem, clearing orphan list.
[ 1905.299179][T10313] usb 6-1: New USB device found: idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1905.302919][T22134] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1905.313572][T10313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1905.313600][T10313] usb 6-1: Product: syz
[ 1905.313615][T10313] usb 6-1: Manufacturer: syz
[ 1905.313629][T10313] usb 6-1: SerialNumber: syz
[ 1905.591610][T22147] netlink: 48 bytes leftover after parsing attributes in process `syz.8.20170'.
[ 1905.615817][T10313] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1905.620925][T10313] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1905.621332][T10313] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1905.621381][T10313] usb 6-1: media controller created
[ 1905.673421][T10313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1905.709044][T32531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1905.841035][T10313] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1905.909546][T10313] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1905.913236][T10313] usb 6-1: USB disconnect, device number 42
[ 1906.111575][T22165] netlink: 'syz.8.20177': attribute type 10 has an invalid length.
[ 1906.126447][T22165] team0: Device vxcan0 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port
[ 1906.293590][T22169] use of bytesused == 0 is deprecated and will be removed in the future,
[ 1906.293609][T22169] use the actual size instead.
[ 1906.406976][T22153] loop3: detected capacity change from 0 to 32768
[ 1906.434066][T22153] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1906.519505][T22153] XFS (loop3): Ending clean mount
[ 1906.532366][T22153] XFS (loop3): Quotacheck needed: Please wait.
[ 1906.645064][T22190] loop1: detected capacity change from 0 to 256
[ 1907.051989][T22153] XFS (loop3): Quotacheck: Done.
[ 1907.358185][T17550] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1907.504638][T22213] loop7: detected capacity change from 0 to 1024
[ 1907.514110][T22213] EXT4-fs: Ignoring removed orlov option
[ 1907.553396][T22213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1907.865829][T32531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1907.913172][T22196] loop8: detected capacity change from 0 to 40427
[ 1907.991596][T22196] F2FS-fs (loop8): invalid crc value
[ 1908.328298][T22196] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1908.358605][T22196] F2FS-fs (loop8): f2fs_disable_checkpoint starts, unusable: 0
[ 1908.358637][T22196] F2FS-fs (loop8): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[ 1908.358664][T22196] F2FS-fs (loop8): Start checkpoint disabled!
[ 1908.452664][T22238] ip_tables: iptables: counters copy to user failed while replacing table
[ 1908.527577][T22196] F2FS-fs (loop8): f2fs_disable_checkpoint finishes, err:0
[ 1908.533852][T22196] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[ 1908.653845][T22251] loop5: detected capacity change from 0 to 512
[ 1908.660815][T22251] EXT4-fs: Ignoring removed orlov option
[ 1908.660838][T22251] EXT4-fs: Ignoring removed nobh option
[ 1908.660884][T22251] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1908.660901][T22251] EXT4-fs: Ignoring removed bh option
[ 1908.747516][   T53] kworker/u8:3: attempt to access beyond end of device
[ 1908.747516][   T53] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1908.747594][   T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u8:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1908.747622][   T53] Tainted: [L]=SOFTLOCKUP
[ 1908.747629][   T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 1908.747642][   T53] Workqueue: writeback wb_workfn (flush-7:8)
[ 1908.747672][   T53] Call Trace:
[ 1908.747680][   T53]  <TASK>
[ 1908.747689][   T53]  dump_stack_lvl+0xe8/0x150
[ 1908.747722][   T53]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1908.747751][   T53]  f2fs_write_end_bio+0x118e/0x15d0
[ 1908.747798][   T53]  __submit_merged_bio+0x258/0x6a0
[ 1908.747819][   T53]  ? rcu_is_watching+0x16/0xb0
[ 1908.747855][   T53]  f2fs_submit_merged_write_cond+0x1ef/0x590
[ 1908.747881][   T53]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[ 1908.747930][   T53]  f2fs_write_data_pages+0x2a13/0x36e0
[ 1908.747996][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1908.748065][   T53]  ? lock_acquire+0x115/0x350
[ 1908.748108][   T53]  ? __lock_acquire+0x747/0x2de0
[ 1908.748155][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1908.748190][   T53]  do_writepages+0x338/0x560
[ 1908.748216][   T53]  ? __lock_acquire+0x747/0x2de0
[ 1908.748245][   T53]  ? reacquire_held_locks+0x117/0x1a0
[ 1908.748274][   T53]  ? writeback_sb_inodes+0x450/0x1af0
[ 1908.748307][   T53]  __writeback_single_inode+0x136/0x1220
[ 1908.748337][   T53]  ? do_raw_spin_unlock+0xf5/0x200
[ 1908.748363][   T53]  writeback_sb_inodes+0x9de/0x1af0
[ 1908.748388][   T53]  ? __lock_acquire+0x747/0x2de0
[ 1908.748433][   T53]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1908.748496][   T53]  ? rcu_is_watching+0x16/0xb0
[ 1908.748524][   T53]  ? queue_io+0x2d3/0x470
[ 1908.748553][   T53]  wb_writeback+0x41c/0xad0
[ 1908.748582][   T53]  ? queue_io+0x221/0x470
[ 1908.748613][   T53]  ? __pfx_wb_writeback+0x10/0x10
[ 1908.748636][   T53]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1908.748674][   T53]  wb_workfn+0x431/0x10f0
[ 1908.748717][   T53]  ? __pfx_wb_workfn+0x10/0x10
[ 1908.748745][   T53]  ? trace_hrtimer_start+0x82/0x200
[ 1908.748777][   T53]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1908.748808][   T53]  ? lock_acquire+0x115/0x350
[ 1908.748843][   T53]  ? rcu_is_watching+0x16/0xb0
[ 1908.748875][   T53]  ? process_scheduled_works+0x97a/0x1630
[ 1908.748905][   T53]  process_scheduled_works+0xc3d/0x1630
[ 1908.748976][   T53]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1908.749013][   T53]  ? assign_work+0x3cf/0x5d0
[ 1908.749046][   T53]  worker_thread+0xa47/0xfb0
[ 1908.749081][   T53]  ? __kthread_parkme+0x71/0x1f0
[ 1908.749114][   T53]  kthread+0x38b/0x480
[ 1908.749138][   T53]  ? __pfx_worker_thread+0x10/0x10
[ 1908.749155][   T53]  ? __pfx_kthread+0x10/0x10
[ 1908.749186][   T53]  ret_from_fork+0x514/0xb70
[ 1908.749213][   T53]  ? __pfx_ret_from_fork+0x10/0x10
[ 1908.749237][   T53]  ? __switch_to+0xc78/0x1410
[ 1908.749261][   T53]  ? __pfx_kthread+0x10/0x10
[ 1908.749286][   T53]  ret_from_fork_asm+0x1a/0x30
[ 1908.749327][   T53]  </TASK>
[ 1908.749449][   T53] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[ 1908.917584][T22251] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[ 1908.929831][    C0] EXT4-fs (loop5): error count since last fsck: 1
[ 1908.929854][    C0] EXT4-fs (loop5): initial error at time 2000001079: ext4_mb_generate_buddy:1315
[ 1908.929877][    C0] EXT4-fs (loop5): last error at time 2000001079: ext4_mb_generate_buddy:1315
[ 1908.990674][T22251] EXT4-fs (loop5): 1 orphan inode deleted
[ 1909.001577][T22251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1909.156365][T22251] CacheFiles: mkdir cache failed with error -1
[ 1909.156430][T22251] CacheFiles: Failed to register: -1
[ 1909.290181][T17007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1909.540636][   T33] audit: type=1400 audit(2000001080.358:793): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=22269 comm="syz.8.20218" name="p" offset=48
[ 1909.613837][T14867] block nbd1: Receive control failed (result -32)
[ 1909.633064][T14867] block nbd1: Receive control failed (result -32)
[ 1909.670054][T22272] loop5: detected capacity change from 0 to 1024
[ 1909.723435][T22272] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[ 1909.723553][T22272] System zones: 0-1, 3-8
[ 1909.725348][T22272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1909.725451][T22272] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1909.845402][T22278] device-mapper: raid: Choosing default region size of 4MiB
[ 1909.847557][T22278] device-mapper: raid: Superblocks created for new raid set
[ 1909.871531][T17007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1910.230559][T22278] md/raid10:mdX: not clean -- starting background reconstruction
[ 1910.230581][T22278] md/raid10:mdX: active with 2 out of 2 devices
[ 1910.386450][T22280] loop3: detected capacity change from 0 to 40427
[ 1910.409918][T22280] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[ 1910.409947][T22280] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1910.411687][T22280] F2FS-fs (loop3): Image doesn't support compression
[ 1910.444560][T22280] F2FS-fs (loop3): invalid crc value
[ 1910.624364][T22280] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1910.647389][T22280] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0
[ 1910.647420][T22280] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[ 1910.647444][T22280] F2FS-fs (loop3): Start checkpoint disabled!
[ 1910.709278][T22280] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0
[ 1910.711438][T22280] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1910.711465][T22280] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[ 1911.736771][T22348] jffs2: notice: (22348) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[ 1912.075878][T22357] loop1: detected capacity change from 0 to 1024
[ 1912.080554][T22357] ext4: Unknown parameter 'obj_user'
[ 1912.122153][ T4952] Bluetooth: hci3: unexpected event for opcode 0x2060
[ 1912.152136][T22346] loop3: detected capacity change from 0 to 32768
[ 1912.176236][T22338] loop8: detected capacity change from 0 to 40427
[ 1912.186604][T22338] f2fs: Unknown parameter '0177777777777777777777700000000000000000000000'
[ 1912.384742][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1912.580718][T22363] device-mapper: table: 248:22: crypt: Error decoding and setting key (-EINVAL)
[ 1912.580748][T22363] device-mapper: ioctl: error adding target to table
[ 1914.267654][ T4952] Bluetooth: hci3: command 0x0419 tx timeout
[ 2043.760014][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 2073.169990][   T35] INFO: task kworker/u8:3:53 blocked in I/O wait for more than 143 seconds.
[ 2073.170029][   T35]       Tainted: G             L      syzkaller #0
[ 2073.170040][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2073.170048][   T35] task:kworker/u8:3    state:D stack:19912 pid:53    tgid:53    ppid:2      task_flags:0x4248160 flags:0x00080000
[ 2073.170105][   T35] Workqueue: writeback wb_workfn (flush-8:0)
[ 2073.170146][   T35] Call Trace:
[ 2073.170154][   T35]  <TASK>
[ 2073.170168][   T35]  __schedule+0x18a6/0x5c10
[ 2073.170192][   T35]  ? __lock_acquire+0x747/0x2de0
[ 2073.170275][   T35]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[ 2073.170434][   T35]  ? __blk_flush_plug+0x416/0x4d0
[ 2073.170508][   T35]  ? __pfx___schedule+0x10/0x10
[ 2073.170539][   T35]  ? schedule+0x90/0x2b0
[ 2073.170563][   T35]  schedule+0x164/0x2b0
[ 2073.170587][   T35]  io_schedule+0x7f/0xd0
[ 2073.170610][   T35]  rq_qos_wait+0x266/0x360
[ 2073.170692][   T35]  ? __pfx_wbt_inflight_cb+0x10/0x10
[ 2073.170740][   T35]  ? __pfx_wbt_cleanup_cb+0x10/0x10
[ 2073.170781][   T35]  ? __pfx_rq_qos_wait+0x10/0x10
[ 2073.170806][   T35]  ? __pfx_rq_qos_wake_function+0x10/0x10
[ 2073.170855][   T35]  ? __pfx_wbt_inflight_cb+0x10/0x10
[ 2073.170890][   T35]  wbt_wait+0x326/0x550
[ 2073.170913][   T35]  ? __pfx_wbt_wait+0x10/0x10
[ 2073.170933][   T35]  ? __pfx_dd_bio_merge+0x10/0x10
[ 2073.170993][   T35]  ? __pfx_wbt_wait+0x10/0x10
[ 2073.171013][   T35]  __rq_qos_throttle+0x6b/0xb0
[ 2073.171041][   T35]  blk_mq_submit_bio+0x18ae/0x2eb0
[ 2073.171072][   T35]  ? __pfx_blk_mq_submit_bio+0x10/0x10
[ 2073.171095][   T35]  ? blk_add_trace_bio+0x2e/0x2f0
[ 2073.171120][   T35]  ? __submit_bio+0x7e/0x340
[ 2073.171138][   T35]  submit_bio_noacct_nocheck+0x2fe/0xb10
[ 2073.171163][   T35]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[ 2073.171211][   T35]  ext4_bio_write_folio+0x101a/0x18c0
[ 2073.171282][   T35]  mpage_process_page_bufs+0x6bd/0x8a0
[ 2073.171363][   T35]  mpage_prepare_extent_to_map+0xf8d/0x1880
[ 2073.171385][   T35]  ? process_scheduled_works+0xc3d/0x1630
[ 2073.171433][   T35]  ? __pfx_mpage_prepare_extent_to_map+0x10/0x10
[ 2073.171490][   T35]  ? kmem_cache_alloc_noprof+0x31a/0x600
[ 2073.171602][   T35]  ? ext4_init_io_end+0x29/0x130
[ 2073.171623][   T35]  ? kmem_cache_alloc_noprof+0x151/0x600
[ 2073.171648][   T35]  ? ext4_init_io_end+0x29/0x130
[ 2073.171679][   T35]  ext4_do_writepages+0xc08/0x44a0
[ 2073.171753][   T35]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 2073.171782][   T35]  ? __lock_acquire+0x747/0x2de0
[ 2073.171817][   T35]  ? __lock_acquire+0x747/0x2de0
[ 2073.171854][   T35]  ? lock_acquire+0x115/0x350
[ 2073.171932][   T35]  ext4_writepages+0x1fe/0x4e0
[ 2073.171961][   T35]  ? __pfx_ext4_writepages+0x10/0x10
[ 2073.172000][   T35]  ? do_raw_spin_unlock+0xf5/0x200
[ 2073.172021][   T35]  ? __pfx_ext4_writepages+0x10/0x10
[ 2073.172048][   T35]  do_writepages+0x338/0x560
[ 2073.172073][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2073.172100][   T35]  ? reacquire_held_locks+0x117/0x1a0
[ 2073.172129][   T35]  ? writeback_sb_inodes+0x450/0x1af0
[ 2073.172162][   T35]  __writeback_single_inode+0x136/0x1220
[ 2073.172192][   T35]  ? do_raw_spin_unlock+0xf5/0x200
[ 2073.172224][   T35]  writeback_sb_inodes+0x9de/0x1af0
[ 2073.172277][   T35]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 2073.172341][   T35]  ? __pfx_down_read_trylock+0x10/0x10
[ 2073.172384][   T35]  __writeback_inodes_wb+0x114/0x250
[ 2073.172421][   T35]  wb_writeback+0x42f/0xad0
[ 2073.172448][   T35]  ? queue_io+0x221/0x470
[ 2073.172477][   T35]  ? __pfx_wb_writeback+0x10/0x10
[ 2073.172499][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2073.172536][   T35]  wb_workfn+0xc92/0x10f0
[ 2073.172575][   T35]  ? __pfx_wb_workfn+0x10/0x10
[ 2073.172598][   T35]  ? update_protect_slice+0x45/0x320
[ 2073.172628][   T35]  ? lock_acquire+0x115/0x350
[ 2073.172647][   T35]  ? rcu_is_watching+0x16/0xb0
[ 2073.172666][   T35]  ? process_scheduled_works+0x97a/0x1630
[ 2073.172684][   T35]  process_scheduled_works+0xc3d/0x1630
[ 2073.172721][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2073.172742][   T35]  ? assign_work+0x3cf/0x5d0
[ 2073.172761][   T35]  worker_thread+0xa47/0xfb0
[ 2073.172778][   T35]  ? __kthread_parkme+0x71/0x1f0
[ 2073.172795][   T35]  kthread+0x38b/0x480
[ 2073.172809][   T35]  ? __pfx_worker_thread+0x10/0x10
[ 2073.172818][   T35]  ? __pfx_kthread+0x10/0x10
[ 2073.172831][   T35]  ret_from_fork+0x514/0xb70
[ 2073.172846][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[ 2073.172859][   T35]  ? __switch_to+0xc78/0x1410
[ 2073.172871][   T35]  ? __pfx_kthread+0x10/0x10
[ 2073.172884][   T35]  ret_from_fork_asm+0x1a/0x30
[ 2073.172917][   T35]  </TASK>
[ 2073.172988][   T35] INFO: task jbd2/sda1-8:4965 blocked in I/O wait for more than 143 seconds.
[ 2073.172999][   T35]       Tainted: G             L      syzkaller #0
[ 2073.173005][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2073.173010][   T35] task:jbd2/sda1-8     state:D stack:25192 pid:4965  tgid:4965  ppid:2      task_flags:0x240040 flags:0x00080000
[ 2073.173043][   T35] Call Trace:
[ 2073.173047][   T35]  <TASK>
[ 2073.173054][   T35]  __schedule+0x18a6/0x5c10
[ 2073.173067][   T35]  ? __lock_acquire+0x747/0x2de0
[ 2073.173095][   T35]  ? __pfx___schedule+0x10/0x10
[ 2073.173112][   T35]  ? schedule+0x90/0x2b0
[ 2073.173124][   T35]  schedule+0x164/0x2b0
[ 2073.173137][   T35]  io_schedule+0x7f/0xd0
[ 2073.173173][   T35]  bit_wait_io+0x13/0x110
[ 2073.173188][   T35]  __wait_on_bit+0xac/0x300
[ 2073.173205][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[ 2073.173219][   T35]  out_of_line_wait_on_bit+0x13b/0x190
[ 2073.173233][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[ 2073.173245][   T35]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[ 2073.173259][   T35]  ? __pfx_wake_bit_function+0x10/0x10
[ 2073.173279][   T35]  ? __wait_on_buffer+0xe/0x80
[ 2073.173294][   T35]  jbd2_journal_commit_transaction+0x2f6e/0x5c80
[ 2073.173367][   T35]  ? trace_hrtimer_start+0x82/0x200
[ 2073.173401][   T35]  ? __pfx_jbd2_journal_commit_transaction+0x10/0x10
[ 2073.173418][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2073.173436][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2073.173453][   T35]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2073.173466][   T35]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2073.173477][   T35]  ? __timer_delete_sync+0x4a7/0x520
[ 2073.173495][   T35]  kjournald2+0x3bc/0x740
[ 2073.173520][   T35]  ? __pfx_kjournald2+0x10/0x10
[ 2073.173533][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2073.173551][   T35]  ? __kthread_parkme+0x71/0x1f0
[ 2073.173563][   T35]  ? __kthread_parkme+0x199/0x1f0
[ 2073.173578][   T35]  kthread+0x38b/0x480
[ 2073.173591][   T35]  ? __pfx_kjournald2+0x10/0x10
[ 2073.173603][   T35]  ? __pfx_kthread+0x10/0x10
[ 2073.173617][   T35]  ret_from_fork+0x514/0xb70
[ 2073.173632][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[ 2073.173644][   T35]  ? __switch_to+0xc78/0x1410
[ 2073.173656][   T35]  ? __pfx_kthread+0x10/0x10
[ 2073.173669][   T35]  ret_from_fork_asm+0x1a/0x30
[ 2073.173691][   T35]  </TASK>
[ 2073.173706][   T35] INFO: task syz-executor:5619 blocked in I/O wait for more than 143 seconds.
[ 2073.173716][   T35]       Tainted: G             L      syzkaller #0
[ 2073.173722][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2073.173726][   T35] task:syz-executor    state:D stack:22088 pid:5619  tgid:5619  ppid:5618   task_flags:0x400100 flags:0x00080000
[ 2073.173756][   T35] Call Trace:
[ 2073.173759][   T35]  <TASK>
[ 2073.173766][   T35]  __schedule+0x18a6/0x5c10
[ 2073.173777][   T35]  ? __lock_acquire+0x747/0x2de0
[ 2073.173805][   T35]  ? __pfx___schedule+0x10/0x10
[ 2073.173821][   T35]  ? schedule+0x90/0x2b0
[ 2073.173833][   T35]  schedule+0x164/0x2b0
[ 2073.173846][   T35]  io_schedule+0x7f/0xd0
[ 2073.173858][   T35]  folio_wait_bit_common+0x6d0/0xcf0
[ 2073.173882][   T35]  ? __pfx_folio_wait_bit_common+0x10/0x10
[ 2073.173897][   T35]  ? __pfx_wake_page_function+0x10/0x10
[ 2073.173912][   T35]  ? ext4_convert_inline_data+0x1bb/0x5c0
[ 2073.173935][   T35]  block_page_mkwrite+0x12a/0x3a0
[ 2073.173950][   T35]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[ 2073.173968][   T35]  ext4_page_mkwrite+0x1197/0x1470
[ 2073.174000][   T35]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[ 2073.174013][   T35]  ? __lock_acquire+0x747/0x2de0
[ 2073.174046][   T35]  do_page_mkwrite+0x147/0x310
[ 2073.174065][   T35]  do_wp_page+0x1a77/0x4c30
[ 2073.174086][   T35]  ? __pfx_do_wp_page+0x10/0x10
[ 2073.174096][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2073.174109][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2073.174127][   T35]  handle_mm_fault+0x1a02/0x3080
[ 2073.174146][   T35]  ? handle_mm_fault+0xee/0x3080
[ 2073.174162][   T35]  ? __pfx_handle_mm_fault+0x10/0x10
[ 2073.174173][   T35]  ? lock_vma_under_rcu+0x45a/0x500
[ 2073.174185][   T35]  ? __pfx_set_user_sigmask+0x10/0x10
[ 2073.174220][   T35]  do_user_addr_fault+0xb35/0x1480
[ 2073.174245][   T35]  ? trace_page_fault_user+0x84/0x1e0
[ 2073.174260][   T35]  exc_page_fault+0x6a/0xc0
[ 2073.174274][   T35]  asm_exc_page_fault+0x26/0x30
[ 2073.174285][   T35] RIP: 0033:0x7f8d6827e251
[ 2073.174296][   T35] RSP: 002b:00007ffec321a0e0 EFLAGS: 00010202
[ 2073.174306][   T35] RAX: 0000000000000040 RBX: 0000000000000001 RCX: 0000000000000006
[ 2073.174313][   T35] RDX: 00007f8d663f8000 RSI: 000000000000187f RDI: ffffffff847fffff
[ 2073.174321][   T35] RBP: 00007ffec321a5e0 R08: 0000000000001000 R09: 0000555592fb5128
[ 2073.174328][   T35] R10: 00000000000000a4 R11: 0000555592fb5430 R12: 00007ffec321a420
[ 2073.174335][   T35] R13: 00007ffec321a210 R14: 585858582e7a7973 R15: 00007ffec321a160
[ 2073.174349][   T35]  ? f2fs_listxattr+0x31f/0x8d0
[ 2073.174367][   T35]  </TASK>
[ 2073.174425][   T35] 
[ 2073.174425][   T35] Showing all locks held in the system:
[ 2073.174433][   T35] locks held by khungtaskd/35: 1, on CPU#1:
[ 2073.174442][   T35]  #0: ffffffff9015aa20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2073.174475][   T35] locks held by kworker/u8:3/53: 4, last CPU#1:
[ 2073.174482][   T35]  #0: ffff888021eae950 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 2073.174513][   T35]  #1: ffffc90000bd7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 2073.174544][   T35]  #2: ffff888036f0e100 (&type->s_umount_key#35){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0
[ 2073.174577][   T35]  #3: ffff88803716ccd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0
[ 2073.174622][   T35] locks held by syz-executor/5619: 3, last CPU#1:
[ 2073.174629][   T35]  #0: ffff8880343ee808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[ 2073.174655][   T35]  #1: ffff888036f0e570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[ 2073.174681][   T35]  #2: ffff8880775a71d8 (mapping.invalidate_lock#2){++++}-{4:4}, at: ext4_page_mkwrite+0x235/0x1470
[ 2073.174723][   T35] locks held by getty/21608: 2, last CPU#1:
[ 2073.174737][   T35]  #0: ffff8880388050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2073.174806][   T35]  #1: ffffc900030862e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[ 2073.174833][   T35] 
[ 2073.174836][   T35] =============================================
[ 2073.174836][   T35] 
[ 2073.174846][   T35] NMI backtrace for cpu 1
[ 2073.174856][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2073.174870][   T35] Tainted: [L]=SOFTLOCKUP
[ 2073.174874][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 2073.174880][   T35] Call Trace:
[ 2073.174885][   T35]  <TASK>
[ 2073.174889][   T35]  dump_stack_lvl+0xe8/0x150
[ 2073.174908][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[ 2073.174926][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2073.174940][   T35]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[ 2073.174959][   T35]  sys_info+0x135/0x170
[ 2073.174973][   T35]  watchdog+0x1073/0x10f0
[ 2073.174993][   T35]  ? watchdog+0x209/0x10f0
[ 2073.175011][   T35]  kthread+0x38b/0x480
[ 2073.175023][   T35]  ? __pfx_watchdog+0x10/0x10
[ 2073.175039][   T35]  ? __pfx_kthread+0x10/0x10
[ 2073.175052][   T35]  ret_from_fork+0x514/0xb70
[ 2073.175066][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[ 2073.175078][   T35]  ? __switch_to+0xc78/0x1410
[ 2073.175089][   T35]  ? __pfx_kthread+0x10/0x10
[ 2073.175102][   T35]  ret_from_fork_asm+0x1a/0x30
[ 2073.175121][   T35]  </TASK>
[ 2073.175141][   T35] Sending NMI from CPU 1 to CPUs 0:
[ 2073.175193][    C0] NMI backtrace for cpu 0
[ 2073.175209][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2073.175234][    C0] Tainted: [L]=SOFTLOCKUP
[ 2073.175241][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 2073.175252][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 2073.175275][    C0] Code: 5a 8f 02 e9 43 1b 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 9b 20 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 2073.175293][    C0] RSP: 0018:ffffffff8fe07ca0 EFLAGS: 00000242
[ 2073.175310][    C0] RAX: 00000000002b769b RBX: ffffffff819cb8c0 RCX: 8000000000000001
[ 2073.175325][    C0] RDX: 0000000000000001 RSI: ffffffff8e6ad2f8 RDI: ffffffff8c8ead80
[ 2073.175339][    C0] RBP: ffffffff8fe07d78 R08: ffff8880b8233ddb R09: 1ffff110170467bb
[ 2073.175353][    C0] R10: dffffc0000000000 R11: ffffed10170467bc R12: 0000000000000000
[ 2073.175368][    C0] R13: 1ffffffff1fd1df8 R14: 1ffffffff1fc0f9c R15: dffffc0000000000
[ 2073.175383][    C0] FS:  0000000000000000(0000) GS:ffff8881233f9000(0000) knlGS:0000000000000000
[ 2073.175399][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2073.175412][    C0] CR2: 000055c4d8224168 CR3: 000000000ff48000 CR4: 00000000003526f0
[ 2073.175430][    C0] Call Trace:
[ 2073.175437][    C0]  <TASK>
[ 2073.175445][    C0]  default_idle+0x9/0x20
[ 2073.175468][    C0]  default_idle_call+0x72/0xb0
[ 2073.175492][    C0]  do_idle+0x2e0/0x540
[ 2073.175514][    C0]  ? __pfx_do_idle+0x10/0x10
[ 2073.175539][    C0]  ? do_idle+0x4d4/0x540
[ 2073.175563][    C0]  cpu_startup_entry+0x43/0x60
[ 2073.175584][    C0]  rest_init+0x378/0x3a0
[ 2073.175609][    C0]  ? __pfx_rest_init+0x10/0x10
[ 2073.175638][    C0]  ? __pfx_kernel_init+0x10/0x10
[ 2073.175665][    C0]  ? __pfx_acpi_hw_get_mode+0x10/0x10
[ 2073.175740][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[ 2073.175786][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[ 2073.175807][    C0]  ? acpi_enable_subsystem+0x286/0x3c0
[ 2073.175893][    C0]  start_kernel+0x392/0x3e0
[ 2073.175974][    C0]  x86_64_start_reservations+0x24/0x30
[ 2073.176022][    C0]  x86_64_start_kernel+0x137/0x1b0
[ 2073.176044][    C0]  common_startup_64+0x13e/0x157
[ 2073.176082][    C0]  </TASK>
[ 2073.176186][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[ 2074.562017][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2074.572728][   T35] Tainted: [L]=SOFTLOCKUP
[ 2074.577086][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 2074.587135][   T35] Call Trace:
[ 2074.590419][   T35]  <TASK>
[ 2074.593370][   T35]  vpanic+0x26f/0x710
[ 2074.597359][   T35]  panic+0xc5/0xd0
[ 2074.601085][   T35]  ? __pfx_panic+0x10/0x10
[ 2074.605580][   T35]  ? __pfx_delay_tsc+0x10/0x10
[ 2074.610376][   T35]  ? nmi_trigger_cpumask_backtrace+0x205/0x390
[ 2074.616533][   T35]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[ 2074.622688][   T35]  watchdog+0x10e7/0x10f0
[ 2074.627020][   T35]  ? watchdog+0x209/0x10f0
[ 2074.631441][   T35]  kthread+0x38b/0x480
[ 2074.635500][   T35]  ? __pfx_watchdog+0x10/0x10
[ 2074.640181][   T35]  ? __pfx_kthread+0x10/0x10
[ 2074.644775][   T35]  ret_from_fork+0x514/0xb70
[ 2074.649358][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[ 2074.654481][   T35]  ? __switch_to+0xc78/0x1410
[ 2074.659149][   T35]  ? __pfx_kthread+0x10/0x10
[ 2074.663742][   T35]  ret_from_fork_asm+0x1a/0x30
[ 2074.668498][   T35]  </TASK>
[ 2074.671690][   T35] Kernel Offset: disabled
[ 2074.676021][   T35] Rebooting in 86400 seconds..