last executing test programs:

16.356540141s ago: executing program 3 (id=565):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7a5076f1, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0)

16.087612115s ago: executing program 3 (id=566):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2})

15.942195663s ago: executing program 3 (id=568):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="5905e8705dfe81dad5c95ee8e30fd069dc25a7b334198d924ee464fdf64ddc42450b1b61fb8626e4b21769fba64c4ebc", 0x30}], 0x1)

15.668262941s ago: executing program 3 (id=571):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x2210018, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42900, 0xc8)
getdents64(r0, &(0x7f0000001f80)=""/4102, 0x1006)

15.158347657s ago: executing program 3 (id=573):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}])

14.660306814s ago: executing program 3 (id=574):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000640)="b44c806748f06309624431ed337301000000010000009c1fd05dac", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

13.763313225s ago: executing program 32 (id=574):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000640)="b44c806748f06309624431ed337301000000010000009c1fd05dac", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

5.251873588s ago: executing program 1 (id=613):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0)

5.079282037s ago: executing program 1 (id=616):
r0 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0)

4.848175104s ago: executing program 1 (id=618):
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000002c0)={[{@pquota}, {@discard}, {@swalloc}, {@grpid}, {@uquota}, {@noalign}, {@inode64}, {@attr2}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}})
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x80, 0x0, 0x0, 0xffffffffffffffff, 0x1000000, 0x800, 0x6, 0x0, 0x4040c445})

4.708845452s ago: executing program 2 (id=620):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x2, 0xfffffffa})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000140)={0x2, 0x3, 0x3})

4.471199516s ago: executing program 2 (id=622):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f0000000000)=""/107, 0x6b})

4.235951369s ago: executing program 2 (id=625):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x8001, &(0x7f00000006c0)=ANY=[], 0xfd, 0x156, &(0x7f00000001c0)="$eJzsjsFLYlEUxn9Xn844ozMOODAzMMPALEYcHJ9PDFq0UEoSsgeFm7b5IuFZURAuq3WL/gAXRdBKJKJli7KVpRC6dNFf4C5oWdz3nlDb1ve3ufd83znfOTNTvThR8OMw+cF9t6zK7wWzVFg8O7/4hA/eAe8dq7axKZsrbuNlDlblq8Fo15WvIz7Atv4vr9uyHuUgDuQ/wko1gC4HvYX5mNRsK407H/8D7a+uZrzUNKBqWxlP+6Ex9CIsmfd0BH9l3pfp4TjvAag3Am4XycTJT3/OK6g3/rWaN/PdTjGZ+GXtG4Xvx+FvfspWEBDSH6Q6ybtUq9nvdUtzZsnsZQxjIqOndT3bN2+7xezOAdpseBuWxOu8oMwow56AhoCm44+uxODeXV77fBoLAWtREI4TAdqHj2ZNePdJx/mHxhcjUCgUCoVCoVAoFAqF4o08BwAA//9yfVeX")
execve(&(0x7f0000000040)='./file2\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x1080090, 0x0, 0x1, 0x0, 0x0)

3.006472825s ago: executing program 0 (id=629):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=cp775,fmask=00000000000000000000240,errors=remount-ro,iocharset=cp936,iocharset=iso8859-14,allow_utime=00000000000000000000007,gid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,errors=continue,dmask=00000000000000000000116,uid=', @ANYRESDEC=0x0, @ANYBLOB=',fsmagic=0x0000000000010001,euid<', @ANYRESDEC=0x0, @ANYBLOB=',subj_type=sched_switch\x00,fowner=', @ANYRESDEC=0x0, @ANYBLOB="786170704b617369672c04"], 0x1, 0x1531, &(0x7f00000037c0)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2.796072484s ago: executing program 1 (id=631):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
io_setup(0x408, &(0x7f0000000140))

2.421523214s ago: executing program 0 (id=633):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000092}]})

2.158586348s ago: executing program 2 (id=635):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)={0x2, 0x0, [{0xb, 0x0, 0x2, 0x13d, 0x4, 0x6, 0x2}, {0x80000000, 0x2, 0x2, 0xffffff00, 0x800, 0x40, 0x4}]})

1.966761073s ago: executing program 0 (id=636):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000002c0)={0x5, 0x0, [{0x9d6, 0x0, 0x80000004}, {0xc0000a8e, 0x0, 0xa}, {0x89d, 0x0, 0x400}, {0x21, 0x0, 0x10}, {0x1fb, 0x0, 0x200000}]})

1.94239594s ago: executing program 4 (id=637):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="80fd02000040", 0x6}], 0x1, 0x0, 0x0)

1.765978383s ago: executing program 2 (id=638):
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@grpid}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$eJzs3M1vFOUfAPDvTLctLz9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVtpDKQg2tiRCi1QMeDYl3439hPOnFqBdNvOrdkBDDBdTLmtmZKUvZLVu67QL7+STTPs/M0z7Pd2ae2Wfm2d0AetZI9iOJ+F9E/B4RQ3n25gIj+a/rVy9M/X31wlQStdpbfyX1cteuXpgqi5Z/tzXP1GpFfrBJvRffjZisVmfOFvmxhdMfjM2fO//C7OnJkzMnZ85MHD166OCegSMThzsSZxbXtV0fz+3eeeydS29MHb/03k9JJfK4Y1kcnTKS792mnu50ZV22rSFd37FL9v5yI93sTKCb+iIiO1z99f4/FH2xeWnbULz2WVcbB6yrWq1WW+GqvFgD7mNJdLsFQHcUtwD1+99y2cDhR9ddeTm/Acrivl4s+ZZKpHlib/+y+9tOGomI44v/fJUtsU7PIQAAGn2XjX+ebzb+S+PhPDGQ/fh/MYcyHBEPRMT2iHgwInZExEMR9bKPRMSjq6x/+QzJreOf9PIdB9eGbPz3UjG3dfP4Ly2LDPcVuW31+PuTE7PVmQPFPtkf/YMnZpOZ8RXq+P7V375ota1x/JctWf3lWLBox+XK4Kab/mZ6cmFyTUE3uPJpxK5Ks/iTKKdxkojYGRG77rCO2WcrLbfdPv4VtP63bat9HfFMfvwXY1n8paTl/OT4i0cmDo9tiurMgbHyrLjVz79efLNV/WuKvwOy47+l6fm/FP9wsili/tz5U/X52vnV13Hxj89b3tO0d/4vZY5tK87/geTt+oqBYsNHkwsLZ8cjBpLXb10/ceO/lfmyfBb//n3N+//2uLEnHouI3RGxJyIez24Ki7Y/ERFPRsS+FeL/8ZWn3l99/BszV5rFP3274x+Nx3/1ib5TP3x7+/iza1yr43+ontpfrGnn+tduA9ey7wAAAOBekdbfA5+ko0mlSKfp6Gj+Hv4dsSWtzs0vPHdi7sMz0/l75YejPy2fdA01PA8dL54Nl/mJZfmDxXPjL/s21/OjU3PV6W4HDz1ua9n/l64Fef/P/NnX7dYB664D82jAPUr/h96l/0NvSvR/6Gn6P/SuZv3/k5alR79Z18YAG8rrP/SuNvr/Yv6r9agAuDd5/Yfepf9DT2r52fh0TR/53/DEv8X3Gd4t7bn/E5HeFc24/xOVtr/MYhWJ2lDe/7M1g03LdPvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA///T8uXN")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x7)
getdents64(r0, 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x29)

1.592593924s ago: executing program 0 (id=639):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x19)
close_range(r0, 0xffffffffffffffff, 0x0)

1.500783451s ago: executing program 0 (id=640):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94)
syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000d40)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES8, @ANYRES8], 0x40, 0x2fb, &(0x7f00000005c0)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x58)

1.450324745s ago: executing program 4 (id=641):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000005440)=@base={0x12, 0x5, 0x8, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20)
recvmmsg(r0, &(0x7f0000005040)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/46, 0x2e}], 0x1}, 0x7}], 0x2, 0x10000, 0x0)

1.165812771s ago: executing program 4 (id=642):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0)

1.126842591s ago: executing program 0 (id=643):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./bus\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x4421, &(0x7f0000008940)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000380), 0x4)
ftruncate(r0, 0xa)

1.096522177s ago: executing program 2 (id=644):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8c, 0x8, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200c06"], 0x0, 0x0, 0x0, 0x0}, 0x0)

977.998346ms ago: executing program 4 (id=645):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)

922.741845ms ago: executing program 1 (id=646):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0xc17a)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

676.160131ms ago: executing program 1 (id=647):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[], 0x1, 0x5540, &(0x7f0000006040)="$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")
r0 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0)

463.764453ms ago: executing program 4 (id=648):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf650100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000120003"], 0x60}, 0x1, 0x0, 0x0, 0x20008844}, 0x4048004)

0s ago: executing program 4 (id=649):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$eJzs3c1vHGcdB/DfvvolNLVyqEqEkJuWl1KaxEkJgQJtD3Dg0gOKuKFErltFpICSgNLKIq4sJA6c+AtASBwR4og48Af0wJUbJ05EspFAPTFo7OeJZze7Xbu2d9aez0dyZn7zzK6f8XdnXzIz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEN/9zvdWWhFx82dpwVLEp6IT0Y5YKOvliFhYXsrrdyPi2dhpjmciojcXUd5+55+nI16JiA/PRmxtr6+Wi6/ssx/f/uPff/eDM2/+7Q+9S//90/3Oq+PWe/DgV//588PDbTMAAAA0TVEURSt9zD+fPt+36+4UADAV+fW/SPLyU1//+p9v/mWW+qNWq9Vq9RTqqmK0h9UiIjaqtynfMzgcDwAnzEZ8VHcXqJH8G60bEWfq7gQw01p1d4BjsbW9vtpK+baqrwfLu+35XJCB/Ddaj6/vGDedZPgck2k9vjajE+fG9GdhSn2YJTn/9nD+N3fb+2m9485/Wsbl39+99Klxcv6d4fyHnJ782yPzb6qcf/dA+XfkDwAAAAAAMyz///9Szcd/5w6/Kfvyccd/l6fUBwAAAAAAAAA4aocd/+8x4/8BAADAzCo/q5d+c3Zv2bjvYiuX32hFPDW0PtAw6WKZxbr7AQAAAAAAAAAAAABN0t09h/dGK6IXEU8tLhZFUf5UDdcHddjbn3RN335osrqf5AEAYNeHZ/O1/L3dBa2I+Yi4kb7rr7e4uFgU8wuLxWKxMJffz/bn5ouFyufaPC2XzfX38Ya42y/KO5uv3K5q0uflSe3D91f+rn7R2UfHjkj6Y8aY5hoDB4D0AhWx5RXplCmKp8e9+YAB9v9TaCmW6n5cMfvqfpgCAAAAx68oiqKVvs77fDrm3667UwDAVOTX/+HjAoeq22PaI47m/tVqtVqtVn+iuqoY7WG1iIiN6m3K9wyG4weAE2YjPqq7C9RI/o3WjYhn6+4EMNNadXeAY7G1vb7aSvm2qq8HaXz3fC7IQP4brZ3b5duPmk4yfI7JtB5fm9GJc2P688yU+jBLcv7t4fxv7rb303rHnf+0jMu/v3PJXPPk/DvD+Q85Pfm3R+bfVDn/7oHy78gfAAAAAABmWP7//yXHf/MmAwAAAAAAAMCJs7W9vpqve83H/z8zYj3Xf55OOf/WQfNfSPPyP9Fy/u2h/L84tF6nMv/ojb39/9/b66u/v/+vT+fpfvOfyzOt9MhqpUdEK/2mVjdND7N1T9rsdfrlb+q12p1uOuen6L0dt+NOrMXlgXXb6e+x174y0F72tDfQfmWgvftE+9WB9l763oFiIbdfjNX4cdyJt3bay7a5Cds/P6G9mNCe8+94/m+knH/38c+575f5L6b21tC09OiD9hP7fXU66ve8fvuzv7x8/Jsz0WZ0Hm9bVbl9F2roz87f5Ew/fnpv7e7FB7fu37+7EmkysPRKpMkRy/n3dn7m9p7/n99tz8/71f310Qf9A+c/KzajOzb/5yvz5fa+OOW+1SHn308/Of+3Uvvo/f8k5z9+/3+phv4AAAAAAAAAAAAAAADAxymKYucS0dcj4lq6/qeuazMBgOnKr/9Fkper1Wq1Wq0+fXVVMdpr1SIi/lq9Tfme4eej7gwAmGX/i4h/1N0JaiP/Bsvf91dOX6i7M8BU3Xvv/R/eunNn7e69unsCAAAAAAAAAHxSefzP5cr4zy9ExNLQegPjv74Ry4cd/7ObZx4PMHrEA32Psdnud9qV4cafi53xuS+OG//7Qjw5/nceE7dT3Y4xehPa+xPa5ya0z49cupfWyAs9KnL+z1XGOy/zPz80/HoTxn8dHvO+CXL+FyqP5zL/LwytV82/+O3M5b+x3xU3oz2Q/6X77/7k0r333n/59ru33ll7Z+1HV1dWLl+9du369euX3r59Z+3y7r/H0+sZkPPPY187D7RZcv45c/k3S87/c6mWf7Pk/D+favk3S84/v9+Tf7Pk/PNnH/k3S87/xVTLv1ly/l9KtfybZWt7fa7M/6VUy79Z8v7/5VTLv1ly/i+nWv7NkvO/mGr5N0vO/1Kq95G/r4c/RXL++QiX/b9Zcv4rqZZ/s+T8r6Ra/s2S87+aavk3S87/lVTLv1ly/l9JtfybJed/LdXyb5ac/1dTLf9myflfT7X8myXn/7VUy79Zcv5fT7X8myXn/2qq5d8sOf9vpFr+zZLz/2aq5d8sOf9vpVr+zZLzfy3V8m+Wve//N2NmFmZ+cbR32IkZ2a6TNlP3MxMAAAAAAAAAAAAAMGwapxPXvY0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LvXGLnO+n7gZ/bmtUOIgRCc/A1sEmOMs2TXl/jCHxcTrg1QbgmFXrBd79os+IbXLoEi2TRQImFUVIGavmgLCLWRqgqr4gWtKM2LqpdXpX1B31RUlZAaVSEKqEhtRbPVzHmexzOzszO73vF69jyfj2T/dmfOzDlz5szsftf+7gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGh295tmP18riqL+p/HX5qJ4Qf3jjRObG5e97mZvIQAAALBa/9v4+7nb0gWHl3GjpmX+9hX/8K2FhYWF4oPDXxn98sJCumKiKEY3FEXjuujqv32o1rxM8FgxXhtq+nyox+qHe1w/0uP60R7Xj/W4fkOP68d7XL9oByyysfx5TOPOtjU+3Fzu0uL2YrRx3bYOt3qstmFoKP4sp6HWuM3C6IlirjhVzBbTLcuXy9Yay3/n7vq63l7EdQ01rWtr/Qj58aePx22ohX28rWVd1+4z+tEbi4mf/PjTx//owjN3dpo9d0PL/ZXbueOe+nZ+NlxSbmut2JD2SdzOoabt3NrhORlu2c5a43b1j9u387llbufwtc1cU+3P+Xgx1Pj4e439NNL8Y720n7aGy/7r3qIoLl/b7PZlFq2rGCo2tVwydO35GS+PyPp91A+lFxcjKzpO717GcVqfM9taj9P210R8/u8OtxtZYhuan6YffWZs0fO+0uM0qj/qpV4r7cdgv18rg3IMxuPie40H/XjHY3BbePyf3r70Mdjx2OlwDKbH3XQM3tPrGBwaG25sc3oSao3bXDsGd7UsP9xYU60xn97e/RicunD63NT8Jz/12rnTx07Onpw9s2fXruk9+/YdOHBg6sTcqdnp8u/r3NuDb1MxlF4D94R9F18Dr25btvlQXfha/16H411eh5vblu3363Ck/cHV1uYFufiYLl8bD9d3+viVoWKJ11jj+dm5+tdhetxNr8ORptdhx68pHV6HI8t4HdaXObdzed+zjDT96bQNN+prweamY7D9+5H2Y7Df348MyjE4Ho6Lf9m59NeCrWF7H59c6fcjw4uOwfRww3tP/ZL0/f74gcbodFzeVb/ilrHi4vzs+fsfPXbhwvldRRhr4iVNx0r78bqp6TEVi47XoRUfr4fnXvH4XR0u3xz21fhr63+NL/lc1ZfZe3/356rx1a3z/my5dHcRRp+t9f7s9NW8vj9TluyyP+vLfHZq9d+Lp1za9P47usT7b8z9z5frS3f12PDoSPn6HU57Z7Tl/bj1qRppvHfVGut+bmp578ej4c9avx/f3uX9eEvbsv1+Px5tf3Dx/bjW66cdq9P+fI6H4+TUdPf34/oyW3av9Jgc6fp+fG+YtbD/XxOSQspFTcfOUsdtWtfIyGh4XCNxDa3H6Z6W5UdDNquv68nd13ec7ri3vK/h9OiuWavjdKJt2X4fp+n9aqnjtNbrp2/Xp/35HA/Hxe17uh+n9WWe2rv6986N8cOm986xXsfg6PBYfZtH00FYvt8vbIzH4P3F8eJscaqYaVw71jieao11TT6wvGNwLPxZ6/fKLV2OwR1ty/b7GExfx5Y69mojix98H7Q/n+PhuHjige7HYH2ZN+/v7/euO8IlaZmm713bf7621M+87mrbTTfyZ1717fzr/d1/Nltf5tSBlebM7vvpvnDJLR32U/vrd6nX1EyxNvtpS9jOZw4svZ/q21Nf5ssHl3k8HS6K4tLHH2z8vDf8+8qfXfz+t1r+3aXTv+lc+viDz9564m9Wsv0ArH/Pl2NT+bWu6V+mlvPv/wAAAMC6EHP/UJiJ/A8AAACVEXN//F/hifwPAAAAlRFz/0iYSSb5f8ubn5l7/lKRmvkLQbw+7YaHyuVix3U6fD6xcE398ge/MfvTv7i0vHUPFUXxs4d+o+PyWx6K21WaCNt59S2tly++4aVlrf/oI9eWa+6vfzXcf3w8yz0MOlVwp4ui+M5tX2ysZ+JDVxrzqYeONub7Lj/+WH2Z5w6Wn8fbP/2ScvnfD+XfwyeOtdz+6bAffhjm9Ds67494u29eec3W/R+4tr54u9o9L2w87Cc+XN5v/D05X3qsXD7u56W2/y+/8OQ368s/+qrO239pqPP2Pxnu9xth/vfLy+Wbn4P65/F2nwvbH9cXb3f/17/bcfuvfr5c/txby+WOhhnXvyN8vu2tz8w1769Ha8daHlfxtnK5uP7p7/924/p4f/H+27d//MiVlv3Rfnw89U/l/Uy1LR8vj+uJ/rxt/fX7aT4+4/qf/K2jLfu51/qvvu/pl9fvt33997UtN9x2+/bf2PQHn/tix/XF7Tn8p+daHs/h94bXcVj/Ex8Ox2O4/n+ufrFlvdHR97a+/8Tlv7r5Usvjid7+k3L9V99wsjH/feKnv3fLC2594eVX1vddUXzv/eX99Vr/yT8827L9X7tjZ+P5iNfHjn77+pcS13/+E5Nnzs5fnJtp2quN353zznJ7Noxv3FTf3tvCe2v750fOXvjI7PmJ6Ynpopio7q/Qu25fD/PZclxe6e13PhKez7t+9zubtv/jF+Ll//xwefmVd5Rft14dlvtSuHxz+fwt1Fa5/ifuvqPx+q49VX7e0mPvg63b/uPAshYMj7/9+4J4vJ976Uca+6F+XePrRnxdr3L7fzBT3s+3w35dCL+Z+Z47rq2vefn4uxGuvL98va96/4W3ufi8/nF4vt/1w/L+43bFx/uD8H3Md7e0vt/F4+Pbl4ba77/xWzwuh/eT4nJ5fVwq7u8rz93RcfPi7yEpLt/Z+Px30v3cuaKHuZT5T85PnZo7c/HRqQuz8xem5j/5qSOnz148c+FI43d5Hvlor9tfe3/a1Hh/mpndt7eY3lgUxdlieg3esG7M9tc/Wt72n3vk+Mz+6e0zsyeOXTxx4ZFzs+dPHp+fPz47M7/92IkTs5/odfu5mUO7dh/cs3/35Mm5mUMHDh7cc3By7szZ+maUG9XDvumPTZ45f6Rxk/lDew/ueuCBvdOTp8/OzB7aPz09ebHX7Rtfmybrt/71yfOzp45dmDs9Ozk/96nZQ7sO7tu3u+dvAzx97sT8xNT5i2emLs7Pnp8qH8vEhcbF9a99vW5PNc3/a/n9bLta+Yv4inffty/9fta6b3xmybsqF2n7BaLPhN9F8/cvOndgOZ/H3D8aZpJJ/gcAAIAcxNw/FmYi/wMAAEBlxNy/IcxE/gcAAIDKiLl/PMwkk/yv/6//v7z+f3m9/n9e/f9zHy97peu9/x/78/r/ebjJ/f9Vr1//X/+/ev3/5ffn1/v26//r/7PYoPX/Y+7fWBRZ5n8AAADIQcz9m8JM5H8AAACojJj7bwkzkf8BAACgMmLuf0GYSSb5P4f+/3s6LLbC/v/uXoWr6vf/1835/zcW+v/6/839//jk6P9nY8X9+w883PKp/n+g/6//r/+v/6//z6qNLnnNzer/x9x/a5hJJvkfAAAAchBz/wvDTOR/AAAAqIyY+28LM5H/AQAAoDJi7t8cZpJJ/s+h/9+J8/9Xtv/v/P/6//09/3/Txuj/rw/O/99d5/7/2C2LLtL/X2H/f1z/fz32/0f7u/2D3f/vufn6/9wQg3b+/5j7XxRmkkn+BwAAgBzE3P/iMBP5HwAAACoj5v6XhJnI/wAAAFAZMfffHmaSSf7X/9f/1//X/9f/77z+3uf/Lz/S/x8s+v/dOf9/D87/n1f/v8/bP9j9/36f/3/0Le231/+nk0Hr/8fc/9Iwk0zyPwAAAOQg5v47wkzkfwAAAKiMmPtfFmYi/wMAAEBlxNy/Jcwkk/yv/6//r/+v/6//33n9vfv/Jf3/waL/353+fw/6//r/+v/L6/93+OZX/59OevX/H3x9+T69Vv3/mPvvDDPJJP8DAABADmLuvyvMRP4HAACAyoi5//+Fmcj/AAAAUBkx928NM8kk/+v/6//r/+fV/79vTP9f/7/a9P+70//vQf9f/1//f5nn/19sJf3/Db3ujMro1f9/9337Gm+B7f3/DvmqL/3/mPtfHmaSSf4HAACAHMTc/4owE/kfAAAAKiPm/leGmcj/AAAAUBkx90+EmWSS//X/q9X//5O/euKVhf6//n+P9Ve0/x8PA/3/zOn/d6f/34P+v/6//v+a9P/Jx/X2/zvoS/8/5v67w0wyyf8AAACQg5j77wkzkf8BAACgMmLuvzfMRP4HAACAyoi5f1uYSSb5X/+/Wv3/SP9f/7/b+iva/0/0//Om/99B04tU/78H/X/9/+z7//G7X/1/+mPQ+v8x978qzCST/A8AAAA5iLl/e5iJ/A8AAACVEXP/q8NM5H8AAACojJj7d4SZZJL/9f/1//X/9f/1/zuvX/9/fdL/726l/f8x/X/9f/3/zPr/zv9Pfw1a/z/m/teEmWSS/wEAACAHMffvDDOR/wEAAKAy4v/fLP/fq/wPAAAAVRRz/2SYSSb5X/9f/z+n/n9N/1//X/+/8vT/u3P+/x70//X/9f/1/+mrQev/x9z/2jCTTPI/AAAA5CDm/vvDTOR/AAAAqIyY+6fCTOR/AAAAqIyY+6fDTDLJ//r/+v859f+d/1//X/+/+vT/u9P/70H/X/+/av3/otD/56YatP5/zP27wkwyyf8AAACQg5j7d4eZyP8AAABQGTH37wkzkf8BAACgMmLu3xtmkkn+1//X/9f/1//X/++8fv3/9alb//4ry7i9/n+g/6//r/9fjf6/8/9zkw1a/z/m/gfCTDLJ/wAAAJCDmPv3hZnI/wAAAFAZMffvDzMJ+b/T/+sGAAAA1peY+w+EmWTy7//6/xXp///m37WsW/9f/7/b+vvT/9+o/x+m/v9gqej5/9tfFtdtffb/n0+PX/9f/3+Qt1//X/+fxQat/x9z/8Ewk0zyPwAAAOQg5v7XhZnI/wAAAFAZMff//zAT+R8AAAAqI+b+14eZZJL/9f8r0v9vo/+v/99t/c7/r/9fZRXt//fN+uz/L3H+/yH9f/3/1W//WB+3X/9/Of3/Db3uhoq58f3/+NHy+v8x9x8KM8kk/wMAAEAOYu7/uTAT+R8AAAAqI+b+N4SZyP8AAABQGTH3Hw4zyST/6//r/+v/6//fmP7/G4p2g9j/rx88+v/Vov/fXaX6/87/r/8/YNuv/+/8/yw2aOf/j7n/jWEmmeR/AAAAyEHM/Q+Gmcj/AAAAUBkx978pzET+BwAAgMqIuf/NYSaZ5H/9f/1//X/9f+f/77x+/f/1Sf+/O/3/HvT/9f/1//X/6aub1//f0PH6mPvfEmaSSf4HAACAHMTc/9YwE/kfAAAAKiPm/reFmcj/AAAAUBkx9789zCST/K//r/+v/1/N/v+GLuvX/9f/rzL9/+70/3vQ/9f/1//X/6evBu38/zH3/3yYSSb5HwAAAHIQc/9DYSbyPwAAAFRGzP3vCDOR/wEAAKAyYu5/Z5hJJvlf/1//X/+/mv3/buvX/9f/rzL9/+70/3vQ/9f/1//X/6evBq3/H3P/u8JMMsn/AAAAkIOY+38hzET+BwAAgMqIuf/dYSbyPwAAAFRGzP3vCTPJJP/3p/9fK8pWq/5/M/3/6+n/L1xqvp3+v/5/0a/+f/1G+v9Z0P/vTv+/hw79/w36//r/+v/6/1y3Qev/x9z/3jCTTPI/AAAA5CDm/veFmcj/AAAAUBkx978/zET+BwAAgMqIuf/hMJNM8r/z/2fZ/08PefD6/87/r//v/P/6/6uj/9+d/n8Pzv+v/78u+/+jYX5sMn5t0v9nUAxa/z/m/kfCTDLJ/wAAAJCDmPs/EGYi/wMAAEBlxNz/i2Em8j8AAABURsz9HwwzyST/6/9n2f8f4PP/V63/P9JyfOTU/x9vej7Tcan/r/+/BvT/u9P/70H/X/9/kPv/4WjeuMTtnf+fQTRo/f+Y+z8UZpJJ/gcAAIAcxNz/S2Em8j8AAABURsz9vxxmIv8DAABAZcTc/ythJpnk/yz6/0OLF9P/1/9v3l/O/+/8/53Wr/+/Pun/d6f/34P+fz79/5H+b//NO/9/Sf+fQTRo/f+Y+381zGTJ4Pfsfy7jYQIAAAADJOb+D4eZZPLv/wAAAJCDmPuPhJnI/wAAAFAZMfcfDTPJJP9n0f/vYOn+fzyjqv6//r/+v/6//v961L/+/8tuLQr9f/1//f/K9v9vwPbr/+v/s9ig9f9j7j8WZpJJ/gcAAIAcxNz/a2Em8j8AAABURsz9x8NM5H8AAACojJj7Z8JMMsn/a93/b+r1jg5m/9/5/6+3//8z/X/9/0D/vzP9/7Xh/P/d6f/3oP+v/6//r/9PXw1a/z/m/tkwk0zyPwAAAFRY+nFwzP0nwkzkfwAAAKiMmPtPhpnI/wAAAFAZMfd/JMwkk/zv/P/6/87/fzP6/yMty+v/l/T/9f/7Qf+/O/3/HvT/9f/1//X/6atB6//H3D8XZpJJ/gcAAIAcxNz/0TAT+R8AAAAqI+b+j4WZyP8AAABQGTH3nwozyST/6//r/+fe/68VxWXn/9f/77R+/f/1Sf+/u/9j7z6a5DqrP463baVZwUtgzYqlWdkLXgBbdlSxNtHkYJmcwUSTwYDJOWeTc87Z5BxNMIaqoTw+50ij7rk90lx13/s8n8/m/KW/xbTwYOqH6luP/n8N/b/+X/+v/2dUU+v/c/dfFbd0sv8BAACgB7n77xu32P8AAADQjNz994tb7H8AAABoRu7++8ctnex//b/+v/f+f7GV9//3//Xt9/93/B3S/+v/N2Gpvz+2+q87KAo/sP+/2+VX31v/r//X/w/S/+v/9f+ca2r9f+7+B8Qtnex/AAAA6EHu/gfGLfY/AAAANCN3/4PiFvsfAAAAmpG7/+q4pZP9r//X/+v/9f/7+v+bvP+v/5837/8Pm0f/f/nu7q7+fxX9/7Q/v/5f/8+yqfX/ufsfHLd0sv8BAACgB7n7HxK32P8AAADQjNz9D41b7H8AAABoRu7+h8Utnex//b/+X/8/l/7/xIzf/4/vB/2//n8D9P/D5tH/e/9f/z/Pz6//1/+z7Pz7/wP/sT1K/5+7/+FxSyf7HwAAAHqQu/8RcYv9DwAAAM3I3f/IuMX+BwAAgGbk7n9U3NLJ/tf/6//1/3Pp/zf0/r/+X/8/czcszvwzQf+/TP+/xpr+f7HQ/w85dD+/+rc3n89/AP2//p9l59//H/gvNUr/n7v/0XHLlYvFiQv9TQIAAACTkrv/MXFLJ3/+DwAAAD3I3X9N3GL/AwAAQDNy95+OWzrZ//p//b/+X/+v/1/99fX/8+T9/2FH7//veuer7tNv/+/9/2He/x+7/7/9O6PJ/l9m3ZGp9f+5+6+NWzrZ/wAAANCD3P2PjVvsfwAAAGhG7v7HxS32PwAAADQjd//j45ZO9r/+f1r9f+YuF97/X7bv153V/+/VLvr/uff/99D/6//1/2vo/4d5/3+NvX/M7dQP9f/6f+//e/+fo5la/5+7/wlxSyf7HwAAAHqQu/+JcYv9DwAAAM3I3f+kuMX+BwAAgGbk7n9y3NLJ/tf/T6v/9/6//t/7//p//f/R6P+H6f/XaOX9/wv8rtl2P39U2/78+n/9P8um1v/n7n9K3NLJ/gcAAIAe5O5/atxi/wMAAEAzcvc/LW6x/wEAAKAZufufHrd0sv/1//r/efT/+RX0//r/i9//J/3/POn/h+n/12il/79A2+7n5/759f/6f5ZNrf/P3f+MuKWT/Q8AAAA9yN3/zLjF/gcAAIBm5O5/Vtxi/wMAAEAzcvc/O27pZP/r//X/8+j/vf+v//f+v/7/cPT/w/T/a+j/9f/6f/0/o5pa/5+7/7q4pZP9DwAAAD3I3f+cuMX+BwAAgGbk7n9u3GL/AwAAQDNy9z8vbulk/+v/V/X/t+j/9f/6f/2//n+m9P/D9P9r6P/1//p//T+jmlD/f9avOrV4ftzSyf4HAACAHuTuf0HcYv8DAABAM3L3vzBusf8BAACgGbn7r49bOtn/+v/JvP+/l/O11f/vLBYL/f+i0/5/56y/n/V9qf/X/2+A/n+Y/n8N/b/+X/+v/2dUE+r/936cu/9FcUsn+x8AAAB6kLv/xXGL/Q8AAADNyN3/krjF/gcAAIBm5O5/adzSyf7X/0+m/9/TVv/v/f9zvz966v+9/79M/78Z+v9h+v819P/6f/2//p9RTa3/z93/srjpxPEL/i0CAAAAE5O7/+VxSyd//g8AAAA9yN3/irjF/gcAAICZum7pZ3L3vzJu6WT/6//H7f9PnPVz+n/9/7nfH/p//b/+/+LT/w/T/6+h/9f/6//1/4xqav1/7v5XxS2d7H8AAADoQe7+G+IW+x8AAACakbv/1XGL/Q8AAADNyN3/mrilk/2v//f+v/5f/6//X/319f/zpP8fpv9fQ/9/YD9/mKex9f9H7v9Pnvk/9f+04Tz6/93d3Wsuev+fu/+1cUsn+x8AAAB6kLv/xrjF/gcAAIBm5O5/Xdxi/wMAAEAzcve/Pm7pZP/r/zvt//NbfV79/+nFYpL9/6X6//30/6vp/zdD/z9M/7+G/t/7/97/1/8zqqm9/5+7/w1xSyf7HwAAAHqQu/+NcYv9DwAAAM3I3f+muMX+BwAAgGbk7n9z3NLJ/tf/d9r/e//f+//6/033/7ct9P8bMYv+f+fgrz/1/v9a/b/+f0B3/f89777vh/p//T/Lptb/5+5/S9zSyf4HAACAHuTuf2vcYv8DAABAM3L3vy1usf8BAACgGbn73x43Hetk/+v/9f/6f/2//n/119/w+/8nFouF/n8Es+j/B0y9/x/n/f9z/1N+hv5f/z/nz6//1/+zbGr9f+7+d8Qtnex/AAAA6EHu/nfGLfY/AAAANCN3/7viFvsfAAAAmpG7/91xSyf7X/+v/9f/6/+b7/+vnUX/7/3/kej/h02j/z+Y/l//P+fPr//X/3N42+r/c/e/J27pZP8DAABAD3L3vzdusf8BAACgGbn73xe32P8AAADQjNz9749bOtn/+n/9//n0//k59f9t9f8nJ9f/n9r3r9fJ+//6/5Ho/4fp/9fQ/+v/9f/X6f8Z09Te/8/d/4G4pZP9DwAAAD3I3f/BuPU/3dr/AAAA0Izc/R+KW+x/AAAAaEbu/g/HLZ3sf/2//t/7//r/5t//1/93Rf8/TP+/hv5f/6//9/4/o5pa/5+7/yNxSyf7HwAAAHqQu/+jcYv9DwAAAM3I3f+xuMX+BwAAgGbk7r8pbulk/+v/9f/6f/2//v+Ov4f6/zbo/4dtpv/f0f/r/6ufvyT+U6D/1/+v+/W0aWr9f+7+j8ctnex/AAAAaM3xFT+Xu/8TcYv9DwAAAM3I3f/JuMX+BwAAgFk6tuLncvd/Km6Z5f5fVaEP0//r//X/+n/9/+qvr/+fp630//lNof/3/n/op/+/y74fze39/3P/++uyhf5f/8/Yptb/5+7/dNwyy/0PAAAArJK7/zNxi/0PAAAAzcjd/9m4xf4HAACAZuTu/1zc0sn+1//r//X/+n/9/+qvr/+fp9H6/5ML7//r//X/G34/f+6fX/+v/2fZ1Pr/3P2fj1s62f8AAADQg9z9X4hb7H8AAABoRu7+L8Yt9j8AAAA0Y2/3Z1zW4f7X/+v/9f/6f/3/6q+v/5+nrbz/r//X/+v/9+j/9f/6f841tf7/S3u/6tTiy3FLJ/sfAAAAepC7/ytxi/0PAAAAzcjd/9W4xf4HAACAZuTu/1rc0sn+1//va89P6/+n2v/v7u5eo/+/ZHGV/n9l/3/zjPv/6/X/I9P/D+u4/z92qA+g/9f/T77/P/e/Jc/Q/zNFU+v/c/d/PW7pZP8DAABAD3L3fyNusf8BAACgGbn7vxm32P8AAADQjNz934pbOtn/+v8JvP9/Sv/v/X/v/y+8/6//H4n+f1jH/f/htNj/nzr8b3/b/fxRbfvze/9f/8+yqfX/ufu/Hbd0sv8BAACgB7n7vxO32P8AAADQjNz9341b7H8AAABoRu7+78Utnex//f/m+v/b/73r5f3/ncXqz6//1//r//X/F5v+f5j+f40W+//zsO1+fu6fX/+v/2fZ1Pr/3P3fj1v2D7/j5/e7BAAAAKYkd/8P4pZO/vwfAAAAepC7/4dxi/0PAAAAzcjd/6O4pZP9r/+fwPv/Dfb/3v9f/f2h/590/3+p/r8N+v9h+v819P/6f/3/SP1/fjfr/3s3tf4/d/+P45ZO9j8AAAD0IHf/T+KWK3e29ZEAAACAkeXu/2nc4s//AQAAoBm5+2+OW87a/6va7lbo//X/+n/9v/5/9dfX/8+T/n/YYfv/k4uj9f9J/6//1//32v97/587bLj/P72u/8/d/7O4xZ//AwAAwOwcP+Dnc/f/PG6x/wEAAKAZuft/EbfY/wAAANCM3P2/jFtuuXRbH2mj9P/6f/3/mv7/1vgG1//r//X/s6D/H+b9/zX0/2P081fo/9vo/xcL/T9Ht+H+f+2Pc/f/Km7x5/8AAADQjNz9v45b7H8AAABoRu7+38Qt9j8AAAA0I3f/b+OWTva//l//f8T+fy/NbLr/9/6//j/o/+dB/z9s+/3/jYNfVv/fRP/v/f9G+n/v/zOGbfT/OwP//9z9v4tbOtn/AAAA0IPc/b+PW+x/AAAAaEbu/j/ELfY/AAAANCN3/x/jlk72/9b6//i3Wv8/+/6//ff/B/v/3YX+X/+v/58W/f+w7ff/w/T/+v85f379v/6fZdvo/wd/vPerTi3+FLd0sv8BAACgB7n7/xy32P8AAADQjNz9f4lb7H8AAABoRu7+v8Ytnex/7//r//X/3v/X/6/++vr/edL/D9P/r1Z/o/T/+n/9v/6fUU2t/8/d/7e4pZP9DwAAAD3I3f/3uMX+BwAAgGbk7r8lbrH/AQAAoBm5+/8RtzSx/4+t/Sv0/7Ps/yuP1v/r//X/+n/20/8P22b/f687rf+y3v/fev+fH0H/r//X/zOKqfX/ufv/Gbc0sf8BAACA2+Xu/1fcYv8DAABAM3L3/ztusf8BAACgGbn7b41bOtn/a/r/k/UX6v8Hef9//+fX/6/+/tD/6//1/xef/n+Y9//X0P97/1//r/9nVFPr/3P3/ydu6WT/AwAAQA9y998Wt9j/AAAA0Izc/f+NW+x/AAAAaEbu/v/FLZ3sf+//z6n/v0L/r//X/+v/9f9r6P+H6f/X0P/r//X/+n9GNbX+P3f//wMAAP//qbtNJQ==")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)

kernel console output (not intermixed with test programs):

? gfs2_quota_sync+0x370/0x470
[  112.764944][ T5829]  ? __pfx_do_sync+0x10/0x10
[  112.764985][ T5829]  ? gfs2_quota_sync+0x370/0x470
[  112.765022][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  112.765052][ T5829]  gfs2_quota_sync+0x370/0x470
[  112.765103][ T5829]  gfs2_sync_fs+0x4c/0xb0
[  112.765133][ T5829]  sync_filesystem+0xee/0x230
[  112.765170][ T5829]  generic_shutdown_super+0x77/0x2d0
[  112.765209][ T5829]  kill_block_super+0x44/0x90
[  112.765234][ T5829]  deactivate_locked_super+0xbc/0x130
[  112.765268][ T5829]  cleanup_mnt+0x437/0x4d0
[  112.765290][ T5829]  ? _raw_spin_unlock_irq+0x23/0x50
[  112.765317][ T5829]  task_work_run+0x1d9/0x270
[  112.765345][ T5829]  ? __pfx_task_work_run+0x10/0x10
[  112.765380][ T5829]  exit_to_user_mode_loop+0xed/0x480
[  112.765406][ T5829]  ? rcu_is_watching+0x15/0xb0
[  112.765442][ T5829]  do_syscall_64+0x32d/0xf80
[  112.765468][ T5829]  ? trace_irq_disable+0x3b/0x150
[  112.765499][ T5829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.765522][ T5829]  ? clear_bhb_loop+0x40/0x90
[  112.765550][ T5829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.765572][ T5829] RIP: 0033:0x7f4a1d19c1d7
[  112.765594][ T5829] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  112.765612][ T5829] RSP: 002b:00007ffc7312d348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  112.765635][ T5829] RAX: 0000000000000000 RBX: 00007f4a1d230b3b RCX: 00007f4a1d19c1d7
[  112.765649][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7312d400
[  112.765662][ T5829] RBP: 00007ffc7312d400 R08: 00007ffc7312e400 R09: 00000000ffffffff
[  112.765676][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7312e490
[  112.765689][ T5829] R13: 00007f4a1d230b3b R14: 000000000001b5eb R15: 00007ffc7312e4d0
[  112.765725][ T5829]  </TASK>
[  112.765734][ T5829] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  113.166012][ T6291] input: syz0 as /devices/virtual/input/input7
[  113.264051][ T5821] ocfs2: Unmounting device (7,1) on (node local)
[  113.431912][ T6279] loop0: detected capacity change from 0 to 32768
[  113.454816][ T6299] loop3: detected capacity change from 0 to 128
[  113.490870][ T6279] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.103 (6279)
[  113.608262][ T6279] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  113.652345][ T6279] BTRFS info (device loop0): using blake2b checksum algorithm
[  113.804991][ T6279] BTRFS info (device loop0): enabling ssd optimizations
[  113.848046][ T6279] BTRFS info (device loop0): turning on async discard
[  113.893482][ T6279] BTRFS info (device loop0): enabling free space tree
[  113.900389][ T6279] BTRFS info (device loop0): use zstd compression, level 3
[  114.257744][ T5823] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  114.319534][ T6303] loop4: detected capacity change from 0 to 32768
[  114.477677][ T6334] tmpfs: Bad value for 'mpol'
[  114.501270][ T6303] UFO tlock:0xffffc900028ca048
[  114.585969][ T6303] MetaData crosses page boundary!!
[  114.602388][ T6303] lblock = 6300000010, size  = -820051968
[  114.608266][ T6303] CPU: 0 UID: 0 PID: 6303 Comm: syz.4.112 Not tainted syzkaller #0 PREEMPT(full) 
[  114.608293][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  114.608305][ T6303] Call Trace:
[  114.608314][ T6303]  <TASK>
[  114.608324][ T6303]  dump_stack_lvl+0xe8/0x150
[  114.608361][ T6303]  __get_metapage+0x9ed/0xde0
[  114.608394][ T6303]  dtReadFirst+0xd5/0x930
[  114.608440][ T6303]  jfs_readdir+0x94b/0x3c10
[  114.608505][ T6303]  ? lockdep_unlock+0x5d/0xd0
[  114.608529][ T6303]  ? __lock_acquire+0x146e/0x2cf0
[  114.608561][ T6303]  ? irqentry_exit+0x59e/0x620
[  114.608588][ T6303]  ? lockdep_hardirqs_on+0x7a/0x110
[  114.608613][ T6303]  ? irqentry_exit+0x59e/0x620
[  114.608637][ T6303]  ? trace_irq_disable+0x3b/0x150
[  114.608670][ T6303]  ? __pfx_jfs_readdir+0x10/0x10
[  114.608729][ T6303]  ? down_write+0x16d/0x200
[  114.608759][ T6303]  ? __pfx_down_write+0x10/0x10
[  114.608789][ T6303]  ? wrap_directory_iterator+0x52/0xe0
[  114.608815][ T6303]  ? __pfx_jfs_readdir+0x10/0x10
[  114.608848][ T6303]  wrap_directory_iterator+0x96/0xe0
[  114.608877][ T6303]  iterate_dir+0x399/0x570
[  114.608906][ T6303]  __se_sys_getdents64+0xf1/0x280
[  114.608936][ T6303]  ? __pfx___se_sys_getdents64+0x10/0x10
[  114.608960][ T6303]  ? __pfx_filldir64+0x10/0x10
[  114.608994][ T6303]  ? rcu_is_watching+0x15/0xb0
[  114.609038][ T6303]  do_syscall_64+0x14d/0xf80
[  114.609064][ T6303]  ? trace_irq_disable+0x3b/0x150
[  114.609094][ T6303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.609117][ T6303]  ? clear_bhb_loop+0x40/0x90
[  114.609143][ T6303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.609165][ T6303] RIP: 0033:0x7fa74f19af79
[  114.609187][ T6303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.609204][ T6303] RSP: 002b:00007fa74ffb9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  114.609227][ T6303] RAX: ffffffffffffffda RBX: 00007fa74f415fa0 RCX: 00007fa74f19af79
[  114.609242][ T6303] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000004
[  114.609256][ T6303] RBP: 00007fa74f2316e0 R08: 0000000000000000 R09: 0000000000000000
[  114.609269][ T6303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.609282][ T6303] R13: 00007fa74f416038 R14: 00007fa74f415fa0 R15: 00007fff194ffe88
[  114.609316][ T6303]  </TASK>
[  114.609338][ T6303] bread failed!
[  114.911065][ T6303] jfs_readdir: unexpected rc = -5 from dtReadNext
[  115.323539][ T6348] overlay: filesystem on ./file0 not supported as upperdir
[  115.544628][ T6354] netlink: 36 bytes leftover after parsing attributes in process `syz.3.127'.
[  115.691103][ T6358] loop4: detected capacity change from 0 to 64
[  115.738691][ T6360] netlink: 'syz.3.129': attribute type 1 has an invalid length.
[  115.743684][ T6356] loop0: detected capacity change from 0 to 8192
[  115.860313][ T6344] loop1: detected capacity change from 0 to 32768
[  115.895683][ T6344] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.121 (6344)
[  115.969357][ T6344] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.005268][ T6344] BTRFS info (device loop1): using sha256 checksum algorithm
[  116.052078][ T6366] loop4: detected capacity change from 0 to 512
[  116.078999][ T6371] loop0: detected capacity change from 0 to 128
[  116.132153][ T6371] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  116.166104][ T6366] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.130: corrupted in-inode xattr: e_value size too large
[  116.182648][ T6371] hpfs: filesystem error: improperly stopped
[  116.188711][ T6371] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  116.214094][ T6366] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  116.217740][ T6366] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.130: couldn't read orphan inode 15 (err -117)
[  116.227141][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  116.227238][    C1] EXT4-fs (loop4): initial error at time 1770636479: ext4_iget_extra_inode:5025: inode 15
[  116.227273][    C1] EXT4-fs (loop4): last error at time 1770636479: ext4_iget_extra_inode:5025: inode 15
[  116.275759][ T6344] BTRFS info (device loop1): enabling ssd optimizations
[  116.295070][ T6344] BTRFS info (device loop1): turning on async discard
[  116.302002][ T6344] BTRFS info (device loop1): enabling free space tree
[  116.333249][ T6366] loop4: lost filesystem error report for type 5 error -117
[  116.333593][ T6371] hpfs: You really don't want any checks? You are crazy...
[  116.359358][ T6366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.393025][ T6371] hpfs: hpfs_map_sector(): read error
[  116.398600][ T6371] hpfs: code page support is disabled
[  116.432014][ T6371] hpfs: hpfs_map_4sectors(): unaligned read
[  116.451688][ T6371] hpfs: hpfs_map_4sectors(): unaligned read
[  116.478796][ T6371] hpfs: filesystem error: unable to find root dir
[  116.505636][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.534425][ T6371] hpfs: hpfs_map_4sectors(): unaligned read
[  116.541631][ T6371] hpfs: hpfs_map_sector(): read error
[  116.585382][ T5821] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.891291][ T6363] loop3: detected capacity change from 0 to 32768
[  116.979165][ T6363] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  117.030603][ T6392] loop1: detected capacity change from 0 to 2048
[  117.138096][ T6392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.188397][ T6363] XFS (loop3): Ending clean mount
[  117.346188][ T6408] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  117.367201][ T5830] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  117.391499][ T6410] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.416505][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.564012][ T6408] 8021q: adding VLAN 0 to HW filter on device bond1
[  117.594149][ T6413] loop0: detected capacity change from 0 to 512
[  117.605573][ T6408] bond0: (slave bond1): Enslaving as an active interface with an up link
[  117.658656][ T6413] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  117.757668][ T6413] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.143: inode has both inline data and extents flags
[  117.839893][ T6413] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  117.842253][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  117.858281][    C0] EXT4-fs (loop0): initial error at time 1770636481: ext4_orphan_get:1391: inode 15
[  117.867871][    C0] EXT4-fs (loop0): last error at time 1770636481: ext4_orphan_get:1391: inode 15
[  117.881698][ T6413] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.143: couldn't read orphan inode 15 (err -117)
[  117.896761][ T6413] loop0: lost filesystem error report for type 5 error -117
[  117.898966][ T6413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.931303][ T6413] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  117.944758][ T6413] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  117.955906][ T6413] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.143: Failed to acquire dquot type 0
[  118.052134][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.193837][ T5829] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566
[  118.232715][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  118.232745][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  118.232757][ T5829] Call Trace:
[  118.232765][ T5829]  <TASK>
[  118.232774][ T5829]  dump_stack_lvl+0xe8/0x150
[  118.232809][ T5829]  gfs2_assert_warn_i+0x194/0x2c0
[  118.232843][ T5829]  gfs2_make_fs_ro+0x30d/0x320
[  118.232874][ T5829]  ? __pfx_gfs2_make_fs_ro+0x10/0x10
[  118.232898][ T5829]  ? do_raw_spin_lock+0x12b/0x2f0
[  118.232920][ T5829]  ? __pfx_autoremove_wake_function+0x10/0x10
[  118.232950][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  118.232976][ T5829]  gfs2_put_super+0x220/0x860
[  118.233010][ T5829]  ? __pfx_gfs2_put_super+0x10/0x10
[  118.233037][ T5829]  generic_shutdown_super+0x13d/0x2d0
[  118.233072][ T5829]  kill_block_super+0x44/0x90
[  118.233095][ T5829]  deactivate_locked_super+0xbc/0x130
[  118.233126][ T5829]  cleanup_mnt+0x437/0x4d0
[  118.233164][ T5829]  ? _raw_spin_unlock_irq+0x23/0x50
[  118.233191][ T5829]  task_work_run+0x1d9/0x270
[  118.233217][ T5829]  ? __pfx_task_work_run+0x10/0x10
[  118.233250][ T5829]  exit_to_user_mode_loop+0xed/0x480
[  118.233274][ T5829]  ? rcu_is_watching+0x15/0xb0
[  118.233308][ T5829]  do_syscall_64+0x32d/0xf80
[  118.233341][ T5829]  ? trace_irq_disable+0x3b/0x150
[  118.233371][ T5829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.233392][ T5829]  ? clear_bhb_loop+0x40/0x90
[  118.233418][ T5829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.233443][ T5829] RIP: 0033:0x7f4a1d19c1d7
[  118.233469][ T5829] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  118.233485][ T5829] RSP: 002b:00007ffc7312d348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  118.233507][ T5829] RAX: 0000000000000000 RBX: 00007f4a1d230b3b RCX: 00007f4a1d19c1d7
[  118.233520][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7312d400
[  118.233532][ T5829] RBP: 00007ffc7312d400 R08: 00007ffc7312e400 R09: 00000000ffffffff
[  118.233546][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7312e490
[  118.233558][ T5829] R13: 00007f4a1d230b3b R14: 000000000001b5eb R15: 00007ffc7312e4d0
[  118.233590][ T5829]  </TASK>
[  118.795621][ T6441] loop0: detected capacity change from 0 to 512
[  118.870055][ T6441] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  118.932313][ T6441] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  119.023576][ T6441] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  119.038851][ T6441] System zones: 0-2, 18-18, 34-35
[  119.082140][ T6441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  119.105471][ T6447] Illegal XDP return value 4294967274 on prog  (id 10) dev N/A, expect packet loss!
[  119.237602][ T6441] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  119.296246][ T6441] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  119.330363][ T6441] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  119.365213][ T6441] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.149: bg 0: block 353: padding at end of block bitmap is not set
[  119.551173][ T6424] loop4: detected capacity change from 0 to 32768
[  119.595327][ T6424] xfs: Deprecated parameter 'ikeep'
[  119.600655][ T6424] XFS: ikeep mount option is deprecated.
[  119.609800][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.628907][ T6424] xfs: Deprecated parameter 'ikeep'
[  119.643481][ T6424] XFS: ikeep mount option is deprecated.
[  119.696102][ T6424] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  119.739998][ T6424] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  119.837177][ T6424] XFS (loop4): Ending clean mount
[  119.860581][ T6424] XFS (loop4): Quotacheck needed: Please wait.
[  120.055433][ T6424] XFS (loop4): Quotacheck: Done.
[  120.662614][ T5820] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  120.767407][ T1225] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  120.942496][ T1225] usb 2-1: Using ep0 maxpacket: 32
[  120.970719][ T1225] usb 2-1: config 0 interface 0 has no altsetting 0
[  121.004639][ T1225] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  121.061575][ T1225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.104082][ T1225] usb 2-1: config 0 descriptor??
[  121.123823][ T6493] capability: warning: `syz.0.169' uses 32-bit capabilities (legacy support in use)
[  121.147235][ T6480] loop3: detected capacity change from 0 to 40427
[  121.205244][ T6493] program syz.0.169 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  121.230959][ T6480] F2FS-fs (loop3): invalid crc value
[  121.233471][ T6497] netlink: 'syz.2.170': attribute type 1 has an invalid length.
[  121.256735][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.170'.
[  121.508123][ T6480] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  121.528296][ T6507] loop4: detected capacity change from 0 to 128
[  121.536808][ T6480] F2FS-fs (loop3): Start checkpoint disabled!
[  121.574813][ T6480] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  121.584688][ T1225] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0
[  121.607799][ T6480] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  121.786672][ T6513] loop0: detected capacity change from 0 to 128
[  121.971354][ T1225] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -71
[  122.002275][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  122.015118][ T1225] usb 2-1: USB disconnect, device number 2
[  122.162877][ T5914] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  122.183779][   T24] usb 3-1: Using ep0 maxpacket: 16
[  122.207081][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.221629][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  122.244239][   T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  122.253786][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.285581][   T24] usb 3-1: config 0 descriptor??
[  122.366394][ T5914] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  122.392444][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.409547][ T5914] usb 5-1: config 0 descriptor??
[  122.626406][ T5914] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  122.719718][ T6529] capability: warning: `syz.1.183' uses deprecated v2 capabilities in a way that may be insecure
[  122.752031][   T24] HID 045e:07da: Invalid code 65791 type 1
[  122.820136][ T6531] loop0: detected capacity change from 0 to 512
[  122.836000][ T5914] [drm:udl_init] *ERROR* Selecting channel failed
[  122.852958][   T24] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input9
[  122.958788][   T24] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  122.981408][ T5914] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  122.990789][ T5914] [drm] Initialized udl on minor 2
[  123.010823][ T5914] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  123.021549][ T6531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.027465][ T5914] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  123.050633][   T24] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  123.063037][   T24] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  123.073103][ T5914] usb 5-1: USB disconnect, device number 3
[  123.080703][ T6531] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.229784][ T5900] usb 3-1: USB disconnect, device number 2
[  123.348181][ T6537] fido_id[6537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  123.387974][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.529725][ T6543] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  123.805705][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'.
[  123.833027][ T6552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.191'.
[  124.120190][ T6562] loop0: detected capacity change from 0 to 2048
[  124.207302][ T6562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.221121][ T6562] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.333088][ T5900] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  124.340593][ T6573] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.196: bg 0: block 345: padding at end of block bitmap is not set
[  124.365174][ T6573] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 297 with error 117
[  124.395931][ T6573] EXT4-fs (loop0): This should not happen!! Data will be lost
[  124.395931][ T6573] 
[  124.468896][ T6548] loop4: detected capacity change from 0 to 32768
[  124.525041][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.553223][ T6548] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  124.561931][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.593668][ T5900] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  124.595708][   T49] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 313 with max blocks 2 with error 117
[  124.632306][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.654858][ T5900] usb 3-1: config 0 descriptor??
[  124.700129][   T49] EXT4-fs (loop0): This should not happen!! Data will be lost
[  124.700129][   T49] 
[  124.716602][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.808109][ T6548] XFS (loop4): Ending clean mount
[  124.837547][ T6548] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x20 
[  124.931099][ T6548] XFS (loop4): Unmount and run xfs_repair
[  124.952687][ T6548] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  124.965958][ T6548] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  124.990831][ T6548] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  125.032078][ T6548] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  125.065323][ T6548] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  125.092399][ T6548] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  125.115857][ T6548] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  125.123878][ T5900] petalynx 0003:18B1:0037.0006: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0
[  125.137400][ T6548] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  125.168320][ T6548] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  125.198699][ T6548] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x20 len 8 error 74
[  125.210524][ T5959] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  125.223823][ T6548] loop4: lost filesystem error report for type 5 error -117
[  125.223982][ T6548] XFS (loop4): Failed to initialize disk quotas, err -117.
[  125.326935][  T794] usb 3-1: USB disconnect, device number 3
[  125.352743][ T5820] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  125.378322][ T5820] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  125.407918][ T5959] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  125.443385][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.493663][ T5959] usb 1-1: Product: syz
[  125.497926][ T5959] usb 1-1: Manufacturer: syz
[  125.533529][ T5959] usb 1-1: SerialNumber: syz
[  125.557458][ T5959] usb 1-1: config 0 descriptor??
[  125.809020][ T5959] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  126.413758][ T5959] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  126.445975][ T5959] usb 1-1: USB disconnect, device number 3
[  126.509499][ T6633] netlink: 128 bytes leftover after parsing attributes in process `syz.1.212'.
[  127.366854][ T6664] loop4: detected capacity change from 0 to 64
[  127.619006][ T6673] loop0: detected capacity change from 0 to 512
[  127.773463][ T6673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.863177][ T6653] loop3: detected capacity change from 0 to 32768
[  127.883142][ T6653] (syz.3.218,6653,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  127.892662][ T6673] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.911448][ T6653] (syz.3.218,6653,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  127.988760][ T6653] (syz.3.218,6653,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  128.066840][ T6653] JBD2: Ignoring recovery information on journal
[  128.110727][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.200772][ T6669] loop2: detected capacity change from 0 to 32768
[  128.221166][ T6653] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  128.272539][ T5900] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  128.349653][ T6653] (syz.3.218,6653,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  128.430183][ T6653] (syz.3.218,6653,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  128.446399][ T6653] (syz.3.218,6653,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  128.473474][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.488329][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.498969][ T6653] (syz.3.218,6653,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  128.528978][ T5900] usb 2-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[  128.577894][ T6653] (syz.3.218,6653,0):ocfs2_quota_read:201 ERROR: status = -5
[  128.585471][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.604760][ T5900] usb 2-1: config 0 descriptor??
[  128.682511][ T6653] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 5
[  128.691827][ T6653] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  128.755664][ T6653] (syz.3.218,6653,0):ocfs2_acquire_dquot:895 ERROR: status = -5
[  128.781546][ T6697] loop0: detected capacity change from 0 to 2048
[  128.800985][ T6653] (syz.3.218,6653,0):ocfs2_mknod:318 ERROR: status = -5
[  128.851646][ T6653] (syz.3.218,6653,0):ocfs2_mknod:506 ERROR: status = -5
[  128.870934][ T6697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.891549][ T6653] (syz.3.218,6653,0):ocfs2_create:679 ERROR: status = -5
[  128.927931][   T29] audit: type=1800 audit(1770636492.650:3): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.236" name="file3" dev="loop0" ino=1416 res=0 errno=0
[  129.127659][ T5830] ocfs2: Unmounting device (7,3) on (node local)
[  129.249140][ T1225] usb 2-1: USB disconnect, device number 3
[  129.308044][ T6703] loop4: detected capacity change from 0 to 512
[  129.345095][ T6703] ext4: Bad value for 'stripe'
[  129.365860][ T6703] overlayfs: upper fs does not support tmpfile.
[  129.948086][ T6719] loop1: detected capacity change from 0 to 1024
[  130.189418][ T6708] loop4: detected capacity change from 0 to 40427
[  130.217271][ T6708] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  130.234154][ T6708] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  130.246328][ T6708] F2FS-fs (loop4): invalid crc_offset: 33558524
[  130.269100][ T1146] hfsplus: b-tree write err: -5, ino 3
[  130.554466][ T6708] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  130.612918][ T6708] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  130.620042][ T6708] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  131.250605][ T6729] loop0: detected capacity change from 0 to 32768
[  131.355970][ T6729] ERROR: (device loop0): dbAllocNext: Corrupt dmap page
[  131.355970][ T6729] 
[  131.402243][ T6729] ERROR: (device loop0): remounting filesystem as read-only
[  131.454936][ T6739] ERROR: (device loop0): dbAllocAG: unable to allocate blocks
[  131.454936][ T6739] 
[  131.471070][ T6726] loop3: detected capacity change from 0 to 32768
[  131.514400][ T6739] ERROR: (device loop0): dbDiscardAG: -EIO
[  131.514400][ T6739] 
[  131.581688][ T6726] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  131.751118][ T6726] XFS (loop3): Ending clean mount
[  131.816457][ T6726] XFS (loop3): Quotacheck needed: Please wait.
[  131.907004][ T6735] F2FS-fs (loop2): Image doesn't support compression
[  131.938672][ T6735] F2FS-fs (loop2): build fault injection rate: 690
[  131.958402][ T6735] F2FS-fs (loop2): build fault injection type: 0x4
[  131.972703][ T6726] XFS (loop3): Quotacheck: Done.
[  132.005540][ T6735] F2FS-fs (loop2): invalid crc value
[  132.100312][ T5830] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  132.287676][ T6735] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  132.319599][ T6759] use of bytesused == 0 is deprecated and will be removed in the future,
[  132.351585][ T6735] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  132.364416][ T6759] use the actual size instead.
[  132.396448][ T6761] set_capacity_and_notify: 1 callbacks suppressed
[  132.396468][ T6761] loop1: detected capacity change from 0 to 1024
[  132.525599][   T29] audit: type=1800 audit(1770636496.250:4): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.252" name="file0" dev="loop2" ino=14 res=0 errno=0
[  132.530222][ T6761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.565265][ T6751] loop4: detected capacity change from 0 to 32768
[  132.604267][ T6751] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.254 (6751)
[  132.645008][ T5829] syz-executor: attempt to access beyond end of device
[  132.645008][ T5829] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  132.678466][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  132.678492][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  132.678502][ T5829] Call Trace:
[  132.678510][ T5829]  <TASK>
[  132.678517][ T5829]  dump_stack_lvl+0xe8/0x150
[  132.678549][ T5829]  f2fs_handle_critical_error+0x37c/0x540
[  132.678582][ T5829]  f2fs_write_end_io+0xcdb/0xff0
[  132.678626][ T5829]  __submit_merged_bio+0x256/0x700
[  132.678656][ T5829]  __submit_merged_write_cond+0x3c3/0x4e0
[  132.678688][ T5829]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  132.678734][ T5829]  f2fs_write_data_pages+0x2975/0x35e0
[  132.678797][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.678837][ T5829]  ? css_rstat_updated+0x23a/0x530
[  132.678882][ T5829]  ? rcu_is_watching+0x15/0xb0
[  132.678908][ T5829]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  132.678938][ T5829]  ? __lock_acquire+0x6b5/0x2cf0
[  132.678975][ T5829]  ? __lock_acquire+0x6b5/0x2cf0
[  132.679003][ T5829]  ? do_raw_spin_lock+0x12b/0x2f0
[  132.679051][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  132.679074][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.679106][ T5829]  do_writepages+0x32e/0x550
[  132.679148][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  132.679175][ T5829]  filemap_fdatawrite+0x1e9/0x2f0
[  132.679211][ T5829]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  132.679295][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  132.679324][ T5829]  f2fs_sync_dirty_inodes+0x30e/0x860
[  132.679377][ T5829]  f2fs_write_checkpoint+0x9cf/0x2680
[  132.679453][ T5829]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  132.679538][ T5829]  ? kfree+0x1c1/0x630
[  132.679568][ T5829]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  132.679603][ T5829]  kill_f2fs_super+0x314/0x720
[  132.679644][ T5829]  ? __pfx_kill_f2fs_super+0x10/0x10
[  132.679694][ T5829]  ? lockdep_hardirqs_on+0x7a/0x110
[  132.679739][ T5829]  deactivate_locked_super+0xbc/0x130
[  132.679776][ T5829]  cleanup_mnt+0x437/0x4d0
[  132.679798][ T5829]  ? _raw_spin_unlock_irq+0x23/0x50
[  132.679828][ T5829]  task_work_run+0x1d9/0x270
[  132.679857][ T5829]  ? __pfx_task_work_run+0x10/0x10
[  132.679895][ T5829]  exit_to_user_mode_loop+0xed/0x480
[  132.679920][ T5829]  ? rcu_is_watching+0x15/0xb0
[  132.679956][ T5829]  do_syscall_64+0x32d/0xf80
[  132.679990][ T5829]  ? trace_irq_disable+0x3b/0x150
[  132.680020][ T5829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.680049][ T5829]  ? clear_bhb_loop+0x40/0x90
[  132.680077][ T5829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.680099][ T5829] RIP: 0033:0x7f4a1d19c1d7
[  132.680121][ T5829] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  132.680139][ T5829] RSP: 002b:00007ffc7312d348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  132.680161][ T5829] RAX: 0000000000000000 RBX: 00007f4a1d230b3b RCX: 00007f4a1d19c1d7
[  132.680175][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7312d400
[  132.680187][ T5829] RBP: 00007ffc7312d400 R08: 00007ffc7312e400 R09: 00000000ffffffff
[  132.680201][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7312e490
[  132.680219][ T5829] R13: 00007f4a1d230b3b R14: 00000000000205e2 R15: 00007ffc7312e4d0
[  132.680257][ T5829]  </TASK>
[  133.008622][ T6751] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  133.018922][ T6751] BTRFS info (device loop4): using sha256 checksum algorithm
[  133.032878][ T5829] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  133.039956][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  133.039990][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  133.040002][ T5829] Call Trace:
[  133.040010][ T5829]  <TASK>
[  133.040019][ T5829]  dump_stack_lvl+0xe8/0x150
[  133.040054][ T5829]  f2fs_handle_critical_error+0x37c/0x540
[  133.040089][ T5829]  f2fs_write_end_io+0xcdb/0xff0
[  133.040138][ T5829]  __submit_merged_bio+0x256/0x700
[  133.040172][ T5829]  __submit_merged_write_cond+0x3c3/0x4e0
[  133.040207][ T5829]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  133.040258][ T5829]  f2fs_write_data_pages+0x2975/0x35e0
[  133.040326][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.040368][ T5829]  ? css_rstat_updated+0x23a/0x530
[  133.040416][ T5829]  ? rcu_is_watching+0x15/0xb0
[  133.040445][ T5829]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  133.040476][ T5829]  ? __lock_acquire+0x6b5/0x2cf0
[  133.040519][ T5829]  ? __lock_acquire+0x6b5/0x2cf0
[  133.040550][ T5829]  ? do_raw_spin_lock+0x12b/0x2f0
[  133.040582][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  133.040604][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.040635][ T5829]  do_writepages+0x32e/0x550
[  133.040674][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  133.040700][ T5829]  filemap_fdatawrite+0x1e9/0x2f0
[  133.040734][ T5829]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  133.040811][ T5829]  ? do_raw_spin_unlock+0xf5/0x210
[  133.040837][ T5829]  f2fs_sync_dirty_inodes+0x30e/0x860
[  133.040884][ T5829]  f2fs_write_checkpoint+0x9cf/0x2680
[  133.040950][ T5829]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  133.041030][ T5829]  ? kfree+0x1c1/0x630
[  133.041059][ T5829]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  133.041090][ T5829]  kill_f2fs_super+0x314/0x720
[  133.041127][ T5829]  ? __pfx_kill_f2fs_super+0x10/0x10
[  133.041171][ T5829]  ? lockdep_hardirqs_on+0x7a/0x110
[  133.041211][ T5829]  deactivate_locked_super+0xbc/0x130
[  133.041244][ T5829]  cleanup_mnt+0x437/0x4d0
[  133.041265][ T5829]  ? _raw_spin_unlock_irq+0x23/0x50
[  133.041292][ T5829]  task_work_run+0x1d9/0x270
[  133.041318][ T5829]  ? __pfx_task_work_run+0x10/0x10
[  133.041352][ T5829]  exit_to_user_mode_loop+0xed/0x480
[  133.041376][ T5829]  ? rcu_is_watching+0x15/0xb0
[  133.041408][ T5829]  do_syscall_64+0x32d/0xf80
[  133.041433][ T5829]  ? trace_irq_disable+0x3b/0x150
[  133.041462][ T5829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.041483][ T5829]  ? clear_bhb_loop+0x40/0x90
[  133.041509][ T5829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.041530][ T5829] RIP: 0033:0x7f4a1d19c1d7
[  133.041551][ T5829] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  133.041567][ T5829] RSP: 002b:00007ffc7312d348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  133.041588][ T5829] RAX: 0000000000000000 RBX: 00007f4a1d230b3b RCX: 00007f4a1d19c1d7
[  133.041601][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7312d400
[  133.041613][ T5829] RBP: 00007ffc7312d400 R08: 00007ffc7312e400 R09: 00000000ffffffff
[  133.041626][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7312e490
[  133.041638][ T5829] R13: 00007f4a1d230b3b R14: 00000000000205e2 R15: 00007ffc7312e4d0
[  133.041672][ T5829]  </TASK>
[  133.041680][ T5829] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  133.424331][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.455221][ T6751] BTRFS info (device loop4): rebuilding free space tree
[  133.494535][ T6751] BTRFS info (device loop4): disabling free space tree
[  133.512021][ T6751] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  133.545685][ T6751] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  133.626029][ T6751] BTRFS info (device loop4): enabling ssd optimizations
[  133.652869][ T6751] BTRFS info (device loop4): turning on async discard
[  133.688584][ T6751] BTRFS info (device loop4): force clearing of disk cache
[  133.731005][ T6751] BTRFS info (device loop4): enabling auto defrag
[  133.744218][ T6751] BTRFS info (device loop4): max_inline set to 4096
[  133.765891][ T6787] loop3: detected capacity change from 0 to 4096
[  133.826632][ T6787] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  134.002440][ T6792] Zero length message leads to an empty skb
[  134.006149][ T1096] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.038724][ T6787] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  134.074078][ T1096] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  134.106397][ T1096] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  134.146880][ T1096] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.158970][ T5820] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  134.401375][ T6797] netlink: 'syz.2.262': attribute type 21 has an invalid length.
[  134.427683][ T6768] loop0: detected capacity change from 0 to 32768
[  134.444696][ T6797] netlink: 'syz.2.262': attribute type 1 has an invalid length.
[  134.482440][ T6797] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.262'.
[  134.496547][ T6768] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  134.534492][ T6768] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  134.813266][ T6768] XFS (loop0): Ending clean mount
[  134.895100][ T6768] XFS (loop0): Quotacheck needed: Please wait.
[  134.978231][ T6768] XFS (loop0): Quotacheck: Done.
[  135.061274][ T6813] bridge_slave_0: left allmulticast mode
[  135.079210][ T6813] bridge_slave_0: left promiscuous mode
[  135.121890][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.246469][ T5823] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.266372][ T6798] loop3: detected capacity change from 0 to 32768
[  135.347427][ T6818] loop2: detected capacity change from 0 to 1024
[  135.371865][ T6818] EXT4-fs: Ignoring removed nomblk_io_submit option
[  135.447619][ T6798] JFS: Invalid stbl[2] = -55 for inode 2, block = 0
[  135.467175][ T6818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.930345][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.260527][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'.
[  136.273425][ T6837] loop0: detected capacity change from 0 to 512
[  136.299560][ T6838] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  136.423790][ T6834] loop2: detected capacity change from 0 to 32768
[  136.431373][ T6834] xfs: Deprecated parameter 'ikeep'
[  136.436803][ T6834] XFS: ikeep mount option is deprecated.
[  136.463982][ T6837] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  136.475495][ T6834] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  136.539014][ T6837] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  136.626234][ T6837] EXT4-fs (loop0): 1 truncate cleaned up
[  136.651568][ T6837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.674480][ T6834] XFS (loop2): Starting recovery (logdev: internal)
[  136.698343][ T6834] XFS (loop2): Metadata CRC error detected at xfs_agi_read_verify+0x142/0x210, xfs_agi block 0x2 
[  136.709119][ T6834] XFS (loop2): Unmount and run xfs_repair
[  136.714983][ T6834] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  136.722446][ T6834] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 10 00  XAGI............
[  136.731369][ T6834] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37  ...@...........7
[  136.740341][ T6834] 00000020: 00 00 11 40 ff ff ff ff ff ff ff ff ff ff ff ff  ...@............
[  136.749302][ T6834] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  136.759438][ T6834] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  136.768405][ T6834] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  136.777339][ T6834] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  136.786320][ T6834] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  136.795516][ T6834] XFS (loop2): metadata I/O error in "xfs_read_agi+0x270/0x5f0" at daddr 0x2 len 1 error 74
[  136.805796][ T6834] loop2: lost filesystem error report for type 5 error -117
[  136.805823][ T6834] XFS (loop2): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  136.822525][ T6834] XFS (loop2): Failed to read root inode 0x1140, error 117
[  136.830298][ T6834] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  137.347479][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.615385][ T6866] loop2: detected capacity change from 0 to 128
[  137.667045][ T6866] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  137.772116][ T6866] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  137.975441][ T6858] loop4: detected capacity change from 0 to 32768
[  138.044003][ T5829] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  138.062971][ T6858] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  138.110811][ T6885] loop3: detected capacity change from 0 to 256
[  138.172289][ T6858] XFS (loop4): Ending clean mount
[  138.186929][ T6885] exFAT-fs (loop3): failed to test first cluster bit of root dir(5)
[  138.223464][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  138.230126][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  138.336578][ T6890] loop2: detected capacity change from 0 to 8
[  138.469591][ T5820] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  139.292517][ T5900] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  139.453317][ T5900] usb 4-1: Using ep0 maxpacket: 16
[  139.471198][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.492504][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.523249][ T5900] usb 4-1: New USB device found, idVendor=17ef, idProduct=7309, bcdDevice= 0.00
[  139.543344][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.588900][ T6920] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  139.650585][ T5900] usb 4-1: config 0 descriptor??
[  139.674900][ T5900] hub 4-1:0.0: USB hub found
[  139.889547][ T5900] hub 4-1:0.0: 7 ports detected
[  139.902774][ T5900] hub 4-1:0.0: insufficient power available to use all downstream ports
[  139.941879][ T6930] loop1: detected capacity change from 0 to 1024
[  139.963750][ T6930] hfsplus: invalid length 32517 has been corrected to 255
[  140.092329][ T5900] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  140.116319][ T5900] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  140.134281][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'.
[  140.143267][ T1096] hfsplus: b-tree write err: -5, ino 4
[  140.209110][ T5900] usb 4-1: USB disconnect, device number 5
[  140.834773][ T6953] loop3: detected capacity change from 0 to 1024
[  140.843319][ T1225] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  140.863100][ T6953] EXT4-fs: inline encryption not supported
[  140.875019][ T6955] loop0: detected capacity change from 0 to 512
[  140.886434][ T6953] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  140.898768][ T6939] loop1: detected capacity change from 0 to 40427
[  140.906052][ T6955] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  140.911681][ T6939] F2FS-fs (loop1): build fault injection rate: 771
[  140.928394][ T6939] F2FS-fs (loop1): invalid crc value
[  140.954903][ T6953] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.325: lblock 2 mapped to illegal pblock 2 (length 1)
[  140.970462][ T6953] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  140.992213][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  140.992742][ T6955] EXT4-fs (loop0): 1 truncate cleaned up
[  141.001380][    C1] EXT4-fs (loop3): initial error at time 1770636504: ext4_map_blocks:776
[  141.012426][ T1225] usb 3-1: Using ep0 maxpacket: 32
[  141.013910][    C1] : inode 3: block 2
[  141.031416][    C1] EXT4-fs (loop3): last error at time 1770636504: ext4_map_blocks:776: inode 3: block 2
[  141.057372][ T6953] EXT4-fs (loop3): Remounting filesystem read-only
[  141.084942][ T1225] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  141.102301][ T6953] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  141.120087][ T6955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.137679][ T6953] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  141.147223][ T6953] EXT4-fs (loop3): 1 orphan inode deleted
[  141.157786][ T6953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.166005][ T1225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  141.211205][ T1225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  141.226905][ T6953] EXT4-fs (loop3): shut down requested (1)
[  141.243415][ T1225] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  141.269965][ T6939] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  141.284991][ T1225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.309578][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.321820][ T1225] usb 3-1: config 0 descriptor??
[  141.335726][ T6939] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  141.342105][ T6947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  141.399487][ T1225] hub 3-1:0.0: USB hub found
[  141.414404][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.583740][ T5821] syz-executor: attempt to access beyond end of device
[  141.583740][ T5821] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  141.622289][ T1225] hub 3-1:0.0: 1 port detected
[  141.632849][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  141.632883][ T5821] Tainted: [L]=SOFTLOCKUP
[  141.632891][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  141.632903][ T5821] Call Trace:
[  141.632911][ T5821]  <TASK>
[  141.632920][ T5821]  dump_stack_lvl+0xe8/0x150
[  141.632957][ T5821]  f2fs_handle_critical_error+0x37c/0x540
[  141.632995][ T5821]  f2fs_write_end_io+0xcdb/0xff0
[  141.633047][ T5821]  __submit_merged_bio+0x256/0x700
[  141.633082][ T5821]  __submit_merged_write_cond+0x3c3/0x4e0
[  141.633116][ T5821]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  141.633164][ T5821]  f2fs_write_data_pages+0x2975/0x35e0
[  141.633241][ T5821]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  141.633283][ T5821]  ? css_rstat_updated+0x23a/0x530
[  141.633337][ T5821]  ? rcu_is_watching+0x15/0xb0
[  141.633364][ T5821]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  141.633396][ T5821]  ? __lock_acquire+0x6b5/0x2cf0
[  141.633433][ T5821]  ? __lock_acquire+0x6b5/0x2cf0
[  141.633462][ T5821]  ? do_raw_spin_lock+0x12b/0x2f0
[  141.633492][ T5821]  ? do_raw_spin_unlock+0xf5/0x210
[  141.633510][ T5821]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  141.633538][ T5821]  do_writepages+0x32e/0x550
[  141.633594][ T5821]  ? do_raw_spin_unlock+0xf5/0x210
[  141.633619][ T5821]  filemap_fdatawrite+0x1e9/0x2f0
[  141.633651][ T5821]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  141.633738][ T5821]  ? do_raw_spin_unlock+0xf5/0x210
[  141.633764][ T5821]  f2fs_sync_dirty_inodes+0x30e/0x860
[  141.633812][ T5821]  f2fs_write_checkpoint+0x9cf/0x2680
[  141.633884][ T5821]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  141.633970][ T5821]  ? kfree+0x1c1/0x630
[  141.634001][ T5821]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  141.634035][ T5821]  kill_f2fs_super+0x314/0x720
[  141.634076][ T5821]  ? __pfx_kill_f2fs_super+0x10/0x10
[  141.634125][ T5821]  ? lockdep_hardirqs_on+0x7a/0x110
[  141.634172][ T5821]  deactivate_locked_super+0xbc/0x130
[  141.634221][ T5821]  cleanup_mnt+0x437/0x4d0
[  141.634244][ T5821]  ? _raw_spin_unlock_irq+0x23/0x50
[  141.634274][ T5821]  task_work_run+0x1d9/0x270
[  141.634304][ T5821]  ? __pfx_task_work_run+0x10/0x10
[  141.634343][ T5821]  exit_to_user_mode_loop+0xed/0x480
[  141.634369][ T5821]  ? rcu_is_watching+0x15/0xb0
[  141.634407][ T5821]  do_syscall_64+0x32d/0xf80
[  141.634433][ T5821]  ? trace_irq_disable+0x3b/0x150
[  141.634465][ T5821]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.634490][ T5821]  ? clear_bhb_loop+0x40/0x90
[  141.634519][ T5821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.634542][ T5821] RIP: 0033:0x7f75c1d9c1d7
[  141.634565][ T5821] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  141.634583][ T5821] RSP: 002b:00007fffaeb49428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  141.634606][ T5821] RAX: 0000000000000000 RBX: 00007f75c1e30b3b RCX: 00007f75c1d9c1d7
[  141.634621][ T5821] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffaeb494e0
[  141.634634][ T5821] RBP: 00007fffaeb494e0 R08: 00007fffaeb4a4e0 R09: 00000000ffffffff
[  141.634649][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffaeb4a570
[  141.634663][ T5821] R13: 00007f75c1e30b3b R14: 0000000000022853 R15: 00007fffaeb4a5b0
[  141.634704][ T5821]  </TASK>
[  141.634714][ T5821] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  141.852848][ T1225] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  142.056692][ T1225] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  142.073771][ T1225] usbhid 3-1:0.0: can't add hid device: -71
[  142.088213][ T1225] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  142.133854][ T1225] usb 3-1: USB disconnect, device number 4
[  142.779736][ T6975] loop0: detected capacity change from 0 to 65536
[  142.801255][ T6981] loop1: detected capacity change from 0 to 512
[  142.848488][ T6975] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  142.909719][ T6965] loop4: detected capacity change from 0 to 40427
[  142.984512][ T6965] F2FS-fs (loop4): build fault injection rate: 174
[  142.991110][ T6965] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  143.001265][ T6975] XFS (loop0): Ending clean mount
[  143.007969][ T6975] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  143.104952][ T6965] F2FS-fs (loop4): invalid crc value
[  143.464364][ T7000] bridge_slave_0: left allmulticast mode
[  143.483357][ T7000] bridge_slave_0: left promiscuous mode
[  143.485602][ T5142] Bluetooth: hci4: link tx timeout
[  143.499794][ T5142] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.508381][ T7000] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.550076][ T6965] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  143.635438][ T6965] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  143.732905][ T7008] loop2: detected capacity change from 0 to 128
[  143.830882][ T7008] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  143.840027][ T6965] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_create+0x1cd/0x6a0
[  143.890325][ T7008] System zones: 1-3, 19-19, 35-36
[  143.902900][ T6965] overlayfs: Failed to create volatile/dirty file.
[  143.938086][ T7008] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  143.985253][ T7008] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  144.073359][   T24] hid-generic 0005:16C0:05DF.0008: item fetching failed at offset 0/1
[  144.092967][   T24] hid-generic 0005:16C0:05DF.0008: probe with driver hid-generic failed with error -22
[  144.162933][ T7008] EXT4-fs warning (device loop2): ext4_group_add:1736: No reserved GDT blocks, can't resize
[  144.195445][ T6992] loop3: detected capacity change from 0 to 40427
[  144.210634][ T6992] F2FS-fs (loop3): build fault injection rate: 174
[  144.222476][ T6992] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  144.240827][ T6992] F2FS-fs (loop3): invalid crc value
[  144.260483][ T5820] syz-executor: attempt to access beyond end of device
[  144.260483][ T5820] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  144.294428][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  144.294460][ T5820] Tainted: [L]=SOFTLOCKUP
[  144.294466][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  144.294476][ T5820] Call Trace:
[  144.294484][ T5820]  <TASK>
[  144.294491][ T5820]  dump_stack_lvl+0xe8/0x150
[  144.294525][ T5820]  f2fs_handle_critical_error+0x37c/0x540
[  144.294561][ T5820]  f2fs_write_end_io+0xcdb/0xff0
[  144.294591][ T5820]  ? __submit_merged_bio+0x256/0x700
[  144.294632][ T5820]  __submit_merged_bio+0x256/0x700
[  144.294665][ T5820]  __submit_merged_write_cond+0x3c3/0x4e0
[  144.294700][ T5820]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  144.294749][ T5820]  f2fs_write_data_pages+0x2975/0x35e0
[  144.294814][ T5820]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.294884][ T5820]  ? arch_stack_walk+0xfb/0x150
[  144.294928][ T5820]  ? __lock_acquire+0x6b5/0x2cf0
[  144.294971][ T5820]  ? __lock_acquire+0x6b5/0x2cf0
[  144.295014][ T5820]  ? do_raw_spin_lock+0x12b/0x2f0
[  144.295046][ T5820]  ? do_raw_spin_unlock+0xf5/0x210
[  144.295067][ T5820]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.295097][ T5820]  do_writepages+0x32e/0x550
[  144.295137][ T5820]  ? do_raw_spin_unlock+0xf5/0x210
[  144.295163][ T5820]  filemap_fdatawrite+0x1e9/0x2f0
[  144.295195][ T5820]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  144.295265][ T5820]  ? do_raw_spin_unlock+0xf5/0x210
[  144.295289][ T5820]  f2fs_sync_dirty_inodes+0x30e/0x860
[  144.295334][ T5820]  f2fs_write_checkpoint+0x9cf/0x2680
[  144.295398][ T5820]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  144.295488][ T5820]  kill_f2fs_super+0x314/0x720
[  144.295527][ T5820]  ? __pfx_kill_f2fs_super+0x10/0x10
[  144.295569][ T5820]  ? lockdep_hardirqs_on+0x7a/0x110
[  144.295608][ T5820]  deactivate_locked_super+0xbc/0x130
[  144.295642][ T5820]  cleanup_mnt+0x437/0x4d0
[  144.295662][ T5820]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.295690][ T5820]  task_work_run+0x1d9/0x270
[  144.295716][ T5820]  ? __pfx_task_work_run+0x10/0x10
[  144.295749][ T5820]  exit_to_user_mode_loop+0xed/0x480
[  144.295772][ T5820]  ? rcu_is_watching+0x15/0xb0
[  144.295805][ T5820]  do_syscall_64+0x32d/0xf80
[  144.295829][ T5820]  ? trace_irq_disable+0x3b/0x150
[  144.295857][ T5820]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.295877][ T5820]  ? clear_bhb_loop+0x40/0x90
[  144.295901][ T5820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.295921][ T5820] RIP: 0033:0x7fa74f19c1d7
[  144.295941][ T5820] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  144.295957][ T5820] RSP: 002b:00007fff194ff0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  144.295978][ T5820] RAX: 0000000000000000 RBX: 00007fa74f230b3b RCX: 00007fa74f19c1d7
[  144.295991][ T5820] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff194ff1b0
[  144.296012][ T5820] RBP: 00007fff194ff1b0 R08: 00007fff195001b0 R09: 00000000ffffffff
[  144.296025][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff19500240
[  144.296036][ T5820] R13: 00007fa74f230b3b R14: 000000000002323a R15: 00007fff19500280
[  144.296067][ T5820]  </TASK>
[  144.298281][ T5820] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  144.623593][ T5829] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  144.659012][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  144.659047][ T5820] Tainted: [L]=SOFTLOCKUP
[  144.659055][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  144.659067][ T5820] Call Trace:
[  144.659075][ T5820]  <TASK>
[  144.659083][ T5820]  dump_stack_lvl+0xe8/0x150
[  144.659118][ T5820]  f2fs_handle_critical_error+0x37c/0x540
[  144.659153][ T5820]  f2fs_write_end_io+0xcdb/0xff0
[  144.659203][ T5820]  __submit_merged_bio+0x256/0x700
[  144.659236][ T5820]  __submit_merged_write_cond+0x3c3/0x4e0
[  144.659271][ T5820]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  144.659322][ T5820]  f2fs_write_data_pages+0x2975/0x35e0
[  144.659389][ T5820]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.659462][ T5820]  ? arch_stack_walk+0xfb/0x150
[  144.659503][ T5820]  ? __lock_acquire+0x6b5/0x2cf0
[  144.659546][ T5820]  ? __lock_acquire+0x6b5/0x2cf0
[  144.659578][ T5820]  ? do_raw_spin_lock+0x12b/0x2f0
[  144.659611][ T5820]  ? do_raw_spin_unlock+0xf5/0x210
[  144.659633][ T5820]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.659664][ T5820]  do_writepages+0x32e/0x550
[  144.659703][ T5820]  ? do_raw_spin_unlock+0xf5/0x210
[  144.659728][ T5820]  filemap_fdatawrite+0x1e9/0x2f0
[  144.659762][ T5820]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  144.659841][ T5820]  ? do_raw_spin_unlock+0xf5/0x210
[  144.659867][ T5820]  f2fs_sync_dirty_inodes+0x30e/0x860
[  144.659914][ T5820]  f2fs_write_checkpoint+0x9cf/0x2680
[  144.659985][ T5820]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  144.660054][ T5820]  kill_f2fs_super+0x314/0x720
[  144.660085][ T5820]  ? __pfx_kill_f2fs_super+0x10/0x10
[  144.660120][ T5820]  ? lockdep_hardirqs_on+0x7a/0x110
[  144.660151][ T5820]  deactivate_locked_super+0xbc/0x130
[  144.660179][ T5820]  cleanup_mnt+0x437/0x4d0
[  144.660195][ T5820]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.660218][ T5820]  task_work_run+0x1d9/0x270
[  144.660238][ T5820]  ? __pfx_task_work_run+0x10/0x10
[  144.660265][ T5820]  exit_to_user_mode_loop+0xed/0x480
[  144.660284][ T5820]  ? rcu_is_watching+0x15/0xb0
[  144.660310][ T5820]  do_syscall_64+0x32d/0xf80
[  144.660330][ T5820]  ? trace_irq_disable+0x3b/0x150
[  144.660353][ T5820]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.660370][ T5820]  ? clear_bhb_loop+0x40/0x90
[  144.660391][ T5820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.660407][ T5820] RIP: 0033:0x7fa74f19c1d7
[  144.660423][ T5820] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  144.660436][ T5820] RSP: 002b:00007fff194ff0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  144.660454][ T5820] RAX: 0000000000000000 RBX: 00007fa74f230b3b RCX: 00007fa74f19c1d7
[  144.660465][ T5820] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff194ff1b0
[  144.660475][ T5820] RBP: 00007fff194ff1b0 R08: 00007fff195001b0 R09: 00000000ffffffff
[  144.660486][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff19500240
[  144.660496][ T5820] R13: 00007fa74f230b3b R14: 000000000002323a R15: 00007fff19500280
[  144.660521][ T5820]  </TASK>
[  144.660533][ T5820] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  144.815901][ T6992] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  144.938104][ T7025] netlink: 300 bytes leftover after parsing attributes in process `syz.1.350'.
[  145.012102][ T6992] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  145.274274][ T5830] syz-executor: attempt to access beyond end of device
[  145.274274][ T5830] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  145.342786][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  145.342820][ T5830] Tainted: [L]=SOFTLOCKUP
[  145.342827][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  145.342838][ T5830] Call Trace:
[  145.342846][ T5830]  <TASK>
[  145.342854][ T5830]  dump_stack_lvl+0xe8/0x150
[  145.342889][ T5830]  f2fs_handle_critical_error+0x37c/0x540
[  145.342934][ T5830]  f2fs_write_end_io+0xcdb/0xff0
[  145.342964][ T5830]  ? __submit_merged_bio+0x256/0x700
[  145.343007][ T5830]  __submit_merged_bio+0x256/0x700
[  145.343040][ T5830]  __submit_merged_write_cond+0x3c3/0x4e0
[  145.343075][ T5830]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  145.343127][ T5830]  f2fs_write_data_pages+0x2975/0x35e0
[  145.343195][ T5830]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  145.343240][ T5830]  ? css_rstat_updated+0x23a/0x530
[  145.343291][ T5830]  ? rcu_is_watching+0x15/0xb0
[  145.343321][ T5830]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  145.343353][ T5830]  ? __lock_acquire+0x6b5/0x2cf0
[  145.343392][ T5830]  ? __lock_acquire+0x6b5/0x2cf0
[  145.343422][ T5830]  ? do_raw_spin_lock+0x12b/0x2f0
[  145.343453][ T5830]  ? do_raw_spin_unlock+0xf5/0x210
[  145.343474][ T5830]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  145.343504][ T5830]  do_writepages+0x32e/0x550
[  145.343543][ T5830]  ? do_raw_spin_unlock+0xf5/0x210
[  145.343567][ T5830]  filemap_fdatawrite+0x1e9/0x2f0
[  145.343599][ T5830]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  145.343676][ T5830]  ? do_raw_spin_unlock+0xf5/0x210
[  145.343703][ T5830]  f2fs_sync_dirty_inodes+0x30e/0x860
[  145.343750][ T5830]  f2fs_write_checkpoint+0x9cf/0x2680
[  145.343818][ T5830]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  145.343918][ T5830]  kill_f2fs_super+0x314/0x720
[  145.343957][ T5830]  ? __pfx_kill_f2fs_super+0x10/0x10
[  145.344002][ T5830]  ? lockdep_hardirqs_on+0x7a/0x110
[  145.344043][ T5830]  deactivate_locked_super+0xbc/0x130
[  145.344077][ T5830]  cleanup_mnt+0x437/0x4d0
[  145.344098][ T5830]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.344125][ T5830]  task_work_run+0x1d9/0x270
[  145.344151][ T5830]  ? __pfx_task_work_run+0x10/0x10
[  145.344186][ T5830]  exit_to_user_mode_loop+0xed/0x480
[  145.344209][ T5830]  ? rcu_is_watching+0x15/0xb0
[  145.344242][ T5830]  do_syscall_64+0x32d/0xf80
[  145.344267][ T5830]  ? trace_irq_disable+0x3b/0x150
[  145.344297][ T5830]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.344318][ T5830]  ? clear_bhb_loop+0x40/0x90
[  145.344344][ T5830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.344365][ T5830] RIP: 0033:0x7fb134f9c1d7
[  145.344385][ T5830] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  145.344401][ T5830] RSP: 002b:00007ffec80fb498 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  145.344423][ T5830] RAX: 0000000000000000 RBX: 00007fb135030b3b RCX: 00007fb134f9c1d7
[  145.344436][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec80fb550
[  145.344448][ T5830] RBP: 00007ffec80fb550 R08: 00007ffec80fc550 R09: 00000000ffffffff
[  145.344460][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec80fc5e0
[  145.344471][ T5830] R13: 00007fb135030b3b R14: 00000000000236ff R15: 00007ffec80fc620
[  145.344502][ T5830]  </TASK>
[  145.344510][ T5830] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  145.644693][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  145.670607][ T7033] loop1: detected capacity change from 0 to 2048
[  145.702937][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  145.702966][ T5830] Tainted: [L]=SOFTLOCKUP
[  145.702973][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  145.702983][ T5830] Call Trace:
[  145.702989][ T5830]  <TASK>
[  145.702997][ T5830]  dump_stack_lvl+0xe8/0x150
[  145.703029][ T5830]  f2fs_handle_critical_error+0x37c/0x540
[  145.703059][ T5830]  f2fs_write_end_io+0xcdb/0xff0
[  145.703113][ T5830]  __submit_merged_bio+0x256/0x700
[  145.703161][ T5830]  __submit_merged_write_cond+0x3c3/0x4e0
[  145.703193][ T5830]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  145.703237][ T5830]  f2fs_write_data_pages+0x2975/0x35e0
[  145.703295][ T5830]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  145.703334][ T5830]  ? css_rstat_updated+0x23a/0x530
[  145.703375][ T5830]  ? rcu_is_watching+0x15/0xb0
[  145.703401][ T5830]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  145.703433][ T5830]  ? __lock_acquire+0x6b5/0x2cf0
[  145.703470][ T5830]  ? __lock_acquire+0x6b5/0x2cf0
[  145.703496][ T5830]  ? do_raw_spin_lock+0x12b/0x2f0
[  145.703524][ T5830]  ? do_raw_spin_unlock+0xf5/0x210
[  145.703543][ T5830]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  145.703570][ T5830]  do_writepages+0x32e/0x550
[  145.703605][ T5830]  ? do_raw_spin_unlock+0xf5/0x210
[  145.703627][ T5830]  filemap_fdatawrite+0x1e9/0x2f0
[  145.703658][ T5830]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  145.703724][ T5830]  ? do_raw_spin_unlock+0xf5/0x210
[  145.703747][ T5830]  f2fs_sync_dirty_inodes+0x30e/0x860
[  145.703789][ T5830]  f2fs_write_checkpoint+0x9cf/0x2680
[  145.703850][ T5830]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  145.703931][ T5830]  kill_f2fs_super+0x314/0x720
[  145.703964][ T5830]  ? __pfx_kill_f2fs_super+0x10/0x10
[  145.704003][ T5830]  ? lockdep_hardirqs_on+0x7a/0x110
[  145.704039][ T5830]  deactivate_locked_super+0xbc/0x130
[  145.704072][ T5830]  cleanup_mnt+0x437/0x4d0
[  145.704098][ T5830]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.704122][ T5830]  task_work_run+0x1d9/0x270
[  145.704145][ T5830]  ? __pfx_task_work_run+0x10/0x10
[  145.704175][ T5830]  exit_to_user_mode_loop+0xed/0x480
[  145.704197][ T5830]  ? rcu_is_watching+0x15/0xb0
[  145.704227][ T5830]  do_syscall_64+0x32d/0xf80
[  145.704248][ T5830]  ? trace_irq_disable+0x3b/0x150
[  145.704276][ T5830]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.704296][ T5830]  ? clear_bhb_loop+0x40/0x90
[  145.704318][ T5830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.704337][ T5830] RIP: 0033:0x7fb134f9c1d7
[  145.704356][ T5830] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  145.704371][ T5830] RSP: 002b:00007ffec80fb498 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  145.704391][ T5830] RAX: 0000000000000000 RBX: 00007fb135030b3b RCX: 00007fb134f9c1d7
[  145.704403][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec80fb550
[  145.704414][ T5830] RBP: 00007ffec80fb550 R08: 00007ffec80fc550 R09: 00000000ffffffff
[  145.704426][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec80fc5e0
[  145.704437][ T5830] R13: 00007fb135030b3b R14: 00000000000236ff R15: 00007ffec80fc620
[  145.704466][ T5830]  </TASK>
[  146.065906][ T5830] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  146.078361][ T7033] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.846739][ T7050] loop3: detected capacity change from 0 to 1024
[  146.947328][   T29] audit: type=1800 audit(1770636510.670:5): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.353" name="file1" dev="loop3" ino=0 res=0 errno=0
[  147.117541][ T7060] loop3: detected capacity change from 0 to 1024
[  147.227063][ T1146] hfsplus: b-tree write err: -5, ino 4
[  148.099737][ T7067] loop1: detected capacity change from 0 to 32768
[  148.145483][ T7067] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.367 (7067)
[  148.177150][ T7067] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  148.219391][ T7067] BTRFS info (device loop1): using sha256 checksum algorithm
[  148.253033][ T5959] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  148.369694][ T7067] BTRFS info (device loop1): rebuilding free space tree
[  148.429791][ T7067] BTRFS info (device loop1): disabling free space tree
[  148.474761][ T7067] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  148.504173][ T5959] usb 5-1: config index 0 descriptor too short (expected 64799, got 45)
[  148.519080][ T7067] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  148.534322][ T5959] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  148.555665][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.573937][ T5959] usb 5-1: Product: syz
[  148.583473][ T7067] BTRFS info (device loop1): setting nodatasum
[  148.592042][ T5959] usb 5-1: Manufacturer: syz
[  148.607446][ T5959] usb 5-1: SerialNumber: syz
[  148.613061][ T7067] BTRFS info (device loop1): setting nodatacow
[  148.628996][ T7067] BTRFS info (device loop1): turning off barriers
[  148.662539][ T7067] BTRFS info (device loop1): force clearing of disk cache
[  148.887900][ T5821] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  148.950828][ T7118] loop0: detected capacity change from 0 to 256
[  149.011361][ T7118] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x22fbf2bb, utbl_chksum : 0xe619d30d)
[  149.466426][ T5959] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  149.494837][ T5959] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  149.525507][ T5959] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  149.567942][ T5959] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  149.663897][ T5959] usb 5-1: USB disconnect, device number 4
[  149.674005][ T7133] program syz.3.391 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  149.829742][ T7139] loop1: detected capacity change from 0 to 256
[  150.537296][ T7166] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  151.738317][ T7180] loop3: detected capacity change from 0 to 40427
[  151.770352][ T7180] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  151.814657][ T7180] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  151.831071][ T7184] loop4: detected capacity change from 0 to 32768
[  151.894969][ T7184] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  152.030323][ T7184] XFS (loop4): Ending clean mount
[  152.109561][ T7180] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  152.153182][ T7180] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  152.161131][ T7180] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  152.227540][ T7180] syz.3.412: attempt to access beyond end of device
[  152.227540][ T7180] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  152.247845][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'.
[  152.305866][ T7222] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  152.359946][ T5820] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  152.471863][ T7224] loop2: detected capacity change from 0 to 256
[  152.544790][ T7224] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  152.612540][ T7224] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  153.047612][ T7241] loop1: detected capacity change from 0 to 128
[  153.086031][  T794] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  153.131898][ T7241] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  153.181689][ T7241] hpfs: filesystem error: improperly stopped
[  153.211476][ T7241] hpfs: You really don't want any checks? You are crazy...
[  153.242330][  T794] usb 1-1: Using ep0 maxpacket: 32
[  153.251426][ T7241] hpfs: hpfs_map_sector(): read error
[  153.259818][  T794] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  153.278550][ T7241] hpfs: code page support is disabled
[  153.284314][  T794] usb 1-1: config 0 has no interface number 0
[  153.292899][ T7241] hpfs: hpfs_map_4sectors(): unaligned read
[  153.299940][ T7241] hpfs: hpfs_map_4sectors(): unaligned read
[  153.311372][  T794] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  153.329176][  T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.337895][ T7241] hpfs: filesystem error: unable to find root dir
[  153.346724][  T794] usb 1-1: Product: syz
[  153.350946][  T794] usb 1-1: Manufacturer: syz
[  153.356981][  T794] usb 1-1: SerialNumber: syz
[  153.367140][  T794] usb 1-1: config 0 descriptor??
[  153.422689][  T794] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  153.607992][  T794] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  153.673248][  T794] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  153.935315][ T7261] loop4: detected capacity change from 0 to 128
[  154.019497][ T7261] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  154.081895][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  154.086318][ T5914] usb 1-1: USB disconnect, device number 4
[  154.116682][ T5914] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  154.139135][ T5914] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  154.161429][ T7261] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  154.199347][ T5914] quatech2 1-1:0.51: device disconnected
[  154.281197][ T7268] loop1: detected capacity change from 0 to 256
[  154.319891][ T5820] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  154.420711][ T7268] FAT-fs (loop1): Directory bread(block 64) failed
[  154.454219][ T7268] FAT-fs (loop1): Directory bread(block 65) failed
[  154.461002][ T7268] FAT-fs (loop1): Directory bread(block 66) failed
[  154.502550][ T7268] FAT-fs (loop1): Directory bread(block 67) failed
[  154.509283][ T7268] FAT-fs (loop1): Directory bread(block 68) failed
[  154.536474][ T7268] FAT-fs (loop1): Directory bread(block 69) failed
[  154.548378][ T7270] input: syz1 as /devices/virtual/input/input11
[  154.571765][ T7268] FAT-fs (loop1): Directory bread(block 70) failed
[  154.602291][ T7268] FAT-fs (loop1): Directory bread(block 71) failed
[  154.618291][ T7268] FAT-fs (loop1): Directory bread(block 72) failed
[  154.635584][ T7268] FAT-fs (loop1): Directory bread(block 73) failed
[  154.649644][ T7253] loop3: detected capacity change from 0 to 32768
[  154.682771][ T7253] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.441 (7253)
[  154.787569][ T7253] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  154.834393][ T7253] BTRFS info (device loop3): using sha256 checksum algorithm
[  154.885742][ T7251] loop2: detected capacity change from 0 to 32768
[  154.975224][ T7251] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  155.040569][ T7253] BTRFS info (device loop3): enabling ssd optimizations
[  155.049387][ T7297] loop0: detected capacity change from 0 to 1024
[  155.080826][ T7253] BTRFS info (device loop3): turning on async discard
[  155.142427][ T7253] BTRFS info (device loop3): enabling free space tree
[  155.178524][ T7251] XFS (loop2): Ending clean mount
[  155.233090][ T7251] XFS (loop2): Quotacheck needed: Please wait.
[  155.400948][ T7251] XFS (loop2): Quotacheck: Done.
[  155.533058][ T5830] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.685628][ T5829] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.534637][ T7305] loop1: detected capacity change from 0 to 32768
[  156.549927][ T7305] btrfs: Deprecated parameter 'usebackuproot'
[  156.566566][ T7305] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  156.577542][ T7305] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.452 (7305)
[  156.680628][ T7305] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  156.707234][ T7305] BTRFS info (device loop1): using crc32c checksum algorithm
[  156.773645][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.456'.
[  156.886815][ T7305] BTRFS info (device loop1): rebuilding free space tree
[  156.964899][ T7305] BTRFS info (device loop1): allowing degraded mounts
[  156.991014][ T7305] BTRFS info (device loop1): enabling ssd optimizations
[  156.999329][ T7305] BTRFS info (device loop1): turning on flush-on-commit
[  157.007246][ T7305] BTRFS info (device loop1): enabling free space tree
[  157.015025][ T7305] BTRFS info (device loop1): force clearing of disk cache
[  157.022666][ T7305] BTRFS info (device loop1): trying to use backup root at mount time
[  157.033700][ T7305] BTRFS info (device loop1): use zstd compression, level 3
[  157.098980][ T5821] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  157.193610][  T794] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  157.392779][  T794] usb 5-1: Using ep0 maxpacket: 8
[  157.422435][  T794] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  157.458952][ T7343] Bluetooth: MGMT ver 1.23
[  157.464214][  T794] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  157.464250][  T794] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  157.464276][  T794] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  157.464323][  T794] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  157.464348][  T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.733031][  T794] usb 5-1: GET_CAPABILITIES returned 0
[  157.747309][  T794] usbtmc 5-1:16.0: can't read capabilities
[  157.873501][   T51] Bluetooth: hci5: command 0x1003 tx timeout
[  157.881015][ T5142] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  157.965791][ T5900] usb 5-1: USB disconnect, device number 5
[  158.138318][ T7360] loop0: detected capacity change from 0 to 4096
[  158.289459][ T7365] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.339454][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'.
[  158.756042][ T7372] loop1: detected capacity change from 0 to 4096
[  159.389917][ T7406] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.429215][ T7406] bond0: (slave rose0): Enslaving as an active interface with an up link
[  159.683387][ T7417] loop4: detected capacity change from 0 to 1024
[  159.701879][ T7417] EXT4-fs: Ignoring removed orlov option
[  159.721439][ T7417] ext4: Unknown parameter 'nouser_xattr'
[  159.931581][ T7394] loop3: detected capacity change from 0 to 32768
[  159.944843][ T7424] program syz.2.494 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  160.002861][ T7394] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  160.022692][ T1225] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  160.077026][ T7394] JBD2: Ignoring recovery information on journal
[  160.235654][ T1225] usb 5-1: Using ep0 maxpacket: 32
[  160.266445][ T7431] netlink: 'syz.2.496': attribute type 10 has an invalid length.
[  160.270120][ T1225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 223, changing to 11
[  160.310453][ T7394] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  160.349697][ T1225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42636, setting to 1024
[  160.383580][ T1225] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  160.413372][ T1225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.448589][ T1225] usb 5-1: config 0 descriptor??
[  160.474002][ T7417] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  160.497100][ T1225] hub 5-1:0.0: USB hub found
[  160.552926][ T5830] ocfs2: Unmounting device (7,3) on (node local)
[  160.697190][ T7446] loop0: detected capacity change from 0 to 64
[  160.727143][ T1225] hub 5-1:0.0: 1 port detected
[  160.776027][   T29] audit: type=1800 audit(1770636524.500:6): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.501" name="file1" dev="loop0" ino=22 res=0 errno=0
[  160.866581][ T7446] syz.0.501: attempt to access beyond end of device
[  160.866581][ T7446] loop0: rw=8423425, sector=57, nr_sectors = 8 limit=64
[  160.962334][ T1225] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  160.968757][ T1225] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  161.010567][ T1225] usbhid 5-1:0.0: can't add hid device: -71
[  161.037484][ T1225] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  161.087082][ T1225] usb 5-1: USB disconnect, device number 6
[  161.163016][   T29] audit: type=1326 audit(1770636524.880:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1d9af79 code=0x7fc00000
[  161.213656][ T7455] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  161.494452][ T7465] loop3: detected capacity change from 0 to 1024
[  161.636857][ T7465] hfsplus: invalid extended attribute record
[  161.794126][ T1146] hfsplus: b-tree write err: -5, ino 4
[  161.797385][ T7445] loop2: detected capacity change from 0 to 32768
[  161.833244][ T7445] xfs: Deprecated parameter 'attr2'
[  161.859081][ T7445] XFS: attr2 mount option is deprecated.
[  161.907863][ T7445] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  162.002248][ T1225] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  162.048503][ T7445] XFS (loop2): Ending clean mount
[  162.143666][ T7445] XFS (loop2): Quotacheck needed: Please wait.
[  162.193531][ T1225] usb 2-1: Using ep0 maxpacket: 8
[  162.224818][ T1225] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  162.281367][ T1225] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  162.298500][ T7445] XFS (loop2): Quotacheck: Done.
[  162.323354][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.331417][ T1225] usb 2-1: Product: syz
[  162.341533][ T7459] mkiss: ax0: crc mode is auto.
[  162.386655][ T1225] usb 2-1: Manufacturer: syz
[  162.391346][ T1225] usb 2-1: SerialNumber: syz
[  162.441191][ T1225] usb 2-1: config 0 descriptor??
[  162.460139][ T1225] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  162.490674][ T1225] usb 2-1: setting power ON
[  162.497661][ T5829] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  162.511623][ T1225] dvb-usb: bulk message failed: -22 (2/0)
[  162.639588][ T1225] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  162.702754][ T1225] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  162.717764][ T7474] dvb-usb: bulk message failed: -22 (3/0)
[  162.736990][ T7474] dvb-usb: bulk message failed: -22 (4/0)
[  162.745689][ T1225] usb 2-1: media controller created
[  162.771346][ T7474] cxusb: i2c read failed
[  162.816978][ T7508] dvb-usb: bulk message failed: -22 (3/0)
[  162.839419][ T1225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  162.978358][ T1225] usb 2-1: selecting invalid altsetting 6
[  162.996364][ T1225] usb 2-1: digital interface selection failed (-22)
[  163.012203][ T1225] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  163.040906][ T1225] usb 2-1: setting power OFF
[  163.055052][ T1225] dvb-usb: bulk message failed: -22 (2/0)
[  163.089377][ T1225] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  163.120068][ T1225] (NULL device *): no alternate interface
[  163.266312][ T1225] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  163.352712][ T1225] usb 2-1: USB disconnect, device number 4
[  163.628905][ T7503] loop4: detected capacity change from 0 to 32768
[  163.638351][ T7524] loop3: detected capacity change from 0 to 128
[  163.716580][ T7503] JBD2: Ignoring recovery information on journal
[  163.878583][ T7503] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  164.398582][ T5820] ocfs2: Unmounting device (7,4) on (node local)
[  164.526131][ T7537] loop0: detected capacity change from 0 to 512
[  164.606211][ T7537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.651022][ T7537] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.801116][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.854009][ T7523] loop1: detected capacity change from 0 to 32768
[  164.944600][ T7523] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  164.984114][ T7557] netlink: 'syz.2.531': attribute type 30 has an invalid length.
[  164.992715][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.531'.
[  165.005346][ T7523] XFS (loop1): Ending clean mount
[  165.049133][ T7523] XFS (loop1): Quotacheck needed: Please wait.
[  165.146925][ T7557] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  165.197419][ T7562] loop4: detected capacity change from 0 to 512
[  165.209584][ T7523] XFS (loop1): Quotacheck: Done.
[  165.255765][ T7562] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.533: corrupted in-inode xattr: invalid ea_ino
[  165.269713][ T7562] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  165.270308][ T7562] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.533: couldn't read orphan inode 15 (err -117)
[  165.279647][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  165.279675][    C0] EXT4-fs (loop4): initial error at time 1770636528: ext4_iget_extra_inode:5025: inode 15
[  165.279734][    C0] EXT4-fs (loop4): last error at time 1770636528: ext4_iget_extra_inode:5025: inode 15
[  165.311858][ T7557] bond1 (unregistering): Released all slaves
[  165.336576][ T7562] loop4: lost filesystem error report for type 5 error -117
[  165.339447][ T7562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.392307][ T1225] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  165.423697][ T5821] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  165.560442][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.569776][ T1225] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  165.616472][ T1225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[  165.677606][ T1225] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  165.722232][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.730315][ T1225] usb 4-1: Product: syz
[  165.755350][ T1225] usb 4-1: Manufacturer: syz
[  165.778659][ T1225] usb 4-1: SerialNumber: syz
[  165.803686][ T1225] usb 4-1: config 0 descriptor??
[  166.092069][ T7581] loop1: detected capacity change from 0 to 128
[  166.108303][ T7581] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  166.144772][ T7581] hpfs: filesystem error: improperly stopped
[  166.159844][ T7581] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  166.202259][ T7581] hpfs: You really don't want any checks? You are crazy...
[  166.263616][ T7581] hpfs: hpfs_map_sector(): read error
[  166.307292][ T5900] usb 4-1: USB disconnect, device number 6
[  166.322266][ T7581] hpfs: code page support is disabled
[  166.327852][ T7581] hpfs: hpfs_map_4sectors(): unaligned read
[  166.335688][ T7585] netlink: 'syz.4.542': attribute type 10 has an invalid length.
[  166.382365][ T7581] hpfs: hpfs_map_4sectors(): unaligned read
[  166.392771][ T7581] hpfs: filesystem error: unable to find root dir
[  166.477091][ T7585] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  166.693480][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'.
[  166.706920][ T7595] loop1: detected capacity change from 0 to 1024
[  166.872465][   T35] hfsplus: b-tree write err: -5, ino 4
[  167.770735][ T7604] loop1: detected capacity change from 0 to 32768
[  167.777375][ T7601] loop0: detected capacity change from 0 to 40427
[  167.813977][ T7601] F2FS-fs: heap/no_heap options were deprecated
[  167.857932][ T7604] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  167.899877][ T7601] F2FS-fs (loop0): invalid crc value
[  167.908654][ T7611] loop3: detected capacity change from 0 to 32768
[  167.931983][ T7611] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.555 (7611)
[  167.988579][ T7605] loop4: detected capacity change from 0 to 32768
[  168.008980][ T7604] XFS (loop1): Ending clean mount
[  168.031457][ T7605] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  168.046609][ T7611] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.063348][ T7611] BTRFS info (device loop3): using sha256 checksum algorithm
[  168.262210][ T7605] XFS (loop4): Ending clean mount
[  168.284637][ T7605] XFS (loop4): Quotacheck needed: Please wait.
[  168.398445][ T7601] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  168.431779][ T7611] BTRFS info (device loop3): enabling ssd optimizations
[  168.442532][ T7605] XFS (loop4): Quotacheck: Done.
[  168.452328][ T5821] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  168.472273][ T7611] BTRFS info (device loop3): turning on async discard
[  168.474445][ T7601] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  168.479631][ T7611] BTRFS info (device loop3): enabling free space tree
[  168.594322][ T5820] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  168.668569][ T7611] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  168.685613][ T5823] syz-executor: attempt to access beyond end of device
[  168.685613][ T5823] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  168.722327][ T5823] CPU: 0 UID: 0 PID: 5823 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  168.722360][ T5823] Tainted: [L]=SOFTLOCKUP
[  168.722367][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  168.722378][ T5823] Call Trace:
[  168.722387][ T5823]  <TASK>
[  168.722395][ T5823]  dump_stack_lvl+0xe8/0x150
[  168.722430][ T5823]  f2fs_handle_critical_error+0x37c/0x540
[  168.722465][ T5823]  f2fs_write_end_io+0xcdb/0xff0
[  168.722515][ T5823]  __submit_merged_bio+0x256/0x700
[  168.722548][ T5823]  __submit_merged_write_cond+0x3c3/0x4e0
[  168.722583][ T5823]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  168.722633][ T5823]  f2fs_write_data_pages+0x2975/0x35e0
[  168.722700][ T5823]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  168.722772][ T5823]  ? arch_stack_walk+0xfb/0x150
[  168.722813][ T5823]  ? __lock_acquire+0x6b5/0x2cf0
[  168.722853][ T5823]  ? __lock_acquire+0x6b5/0x2cf0
[  168.722883][ T5823]  ? do_raw_spin_lock+0x12b/0x2f0
[  168.722916][ T5823]  ? do_raw_spin_unlock+0xf5/0x210
[  168.722937][ T5823]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  168.722967][ T5823]  do_writepages+0x32e/0x550
[  168.723006][ T5823]  ? do_raw_spin_unlock+0xf5/0x210
[  168.723030][ T5823]  filemap_fdatawrite+0x1e9/0x2f0
[  168.723071][ T5823]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  168.723133][ T5823]  ? do_raw_spin_unlock+0xf5/0x210
[  168.723154][ T5823]  f2fs_sync_dirty_inodes+0x30e/0x860
[  168.723193][ T5823]  f2fs_write_checkpoint+0x9cf/0x2680
[  168.723247][ T5823]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  168.723319][ T5823]  kill_f2fs_super+0x314/0x720
[  168.723349][ T5823]  ? __pfx_kill_f2fs_super+0x10/0x10
[  168.723386][ T5823]  ? lockdep_hardirqs_on+0x7a/0x110
[  168.723418][ T5823]  deactivate_locked_super+0xbc/0x130
[  168.723447][ T5823]  cleanup_mnt+0x437/0x4d0
[  168.723464][ T5823]  ? _raw_spin_unlock_irq+0x23/0x50
[  168.723485][ T5823]  task_work_run+0x1d9/0x270
[  168.723507][ T5823]  ? __pfx_task_work_run+0x10/0x10
[  168.723535][ T5823]  exit_to_user_mode_loop+0xed/0x480
[  168.723554][ T5823]  ? rcu_is_watching+0x15/0xb0
[  168.723605][ T5823]  do_syscall_64+0x32d/0xf80
[  168.723626][ T5823]  ? trace_irq_disable+0x3b/0x150
[  168.723650][ T5823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.723667][ T5823]  ? clear_bhb_loop+0x40/0x90
[  168.723688][ T5823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.723705][ T5823] RIP: 0033:0x7f7de779c1d7
[  168.723723][ T5823] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  168.723738][ T5823] RSP: 002b:00007ffdd5397068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  168.723757][ T5823] RAX: 0000000000000000 RBX: 00007f7de7830b3b RCX: 00007f7de779c1d7
[  168.723767][ T5823] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd5397120
[  168.723778][ T5823] RBP: 00007ffdd5397120 R08: 00007ffdd5398120 R09: 00000000ffffffff
[  168.723789][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd53981b0
[  168.723799][ T5823] R13: 00007f7de7830b3b R14: 0000000000029233 R15: 00007ffdd53981f0
[  168.723828][ T5823]  </TASK>
[  168.723836][ T5823] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  169.339910][ T5830] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  169.484905][ T7617] loop2: detected capacity change from 0 to 32768
[  169.539385][ T7617] 
[  169.539385][ T7617]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.539385][ T7617] 
[  169.813420][   T12] read_mapping_page failed!
[  169.818287][   T12] ERROR: (device loop2): txCommit: 
[  169.818287][   T12] 
[  169.863867][   T12] jfs_write_inode: jfs_commit_inode failed!
[  169.869968][ T5829] 
[  169.869968][ T5829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.869968][ T5829] 
[  169.916533][ T5829] 
[  169.916533][ T5829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.916533][ T5829] 
[  170.001118][ T7658] bond0: entered promiscuous mode
[  170.042322][ T7658] bond_slave_0: entered promiscuous mode
[  170.063645][ T7658] bond_slave_1: entered promiscuous mode
[  170.100970][ T7658] bond1: entered promiscuous mode
[  170.113142][ T7658] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  170.141316][ T7662] loop0: detected capacity change from 0 to 1024
[  170.178677][ T7662] EXT4-fs: Ignoring removed nobh option
[  170.194624][ T7658] batadv0: entered promiscuous mode
[  170.262542][ T7658] 8021q: adding VLAN 0 to HW filter on device hsr1
[  170.314229][ T7662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.358706][ T7658] bond0: left promiscuous mode
[  170.387576][ T7658] bond_slave_0: left promiscuous mode
[  170.412622][ T7658] bond_slave_1: left promiscuous mode
[  170.443990][ T7658] bond1: left promiscuous mode
[  170.477279][ T7658] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  170.508984][ T7658] batadv0: left promiscuous mode
[  170.561221][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.033559][ T7682] loop3: detected capacity change from 0 to 512
[  171.072325][ T7682] EXT4-fs (loop3): Test dummy encryption mode enabled
[  171.092218][ T7682] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  171.144321][ T7682] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.571: bad orphan inode 131083
[  171.199546][ T7682] loop3: lost filesystem error report for type 5 error -117
[  171.203855][ T7682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.601963][ T7674] loop0: detected capacity change from 0 to 32768
[  171.644521][ T7674] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.567 (7674)
[  171.701938][ T7674] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  171.726100][ T7674] BTRFS info (device loop0): using sha256 checksum algorithm
[  171.786816][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.847905][ T7680] loop4: detected capacity change from 0 to 40427
[  171.886613][ T7678] loop2: detected capacity change from 0 to 32768
[  171.927820][ T7680] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  171.949318][ T7678] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.569 (7678)
[  171.967042][ T7674] BTRFS info (device loop0): turning on sync discard
[  171.992228][ T7680] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  172.032090][ T7674] BTRFS info (device loop0): enabling free space tree
[  172.053811][ T7678] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.066026][ T7674] BTRFS info (device loop0): enabling auto defrag
[  172.072651][ T7680] F2FS-fs (loop4): invalid crc value
[  172.102364][ T7678] BTRFS info (device loop2): using crc32c checksum algorithm
[  172.118977][ T7674] BTRFS info (device loop0): max_inline set to 0
[  172.169923][   T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.336664][ T7685] loop1: detected capacity change from 0 to 40427
[  172.363035][ T7685] F2FS-fs (loop1): Image doesn't support compression
[  172.369937][ T7685] F2FS-fs (loop1): build fault injection rate: 690
[  172.381245][ T7685] F2FS-fs (loop1): invalid crc value
[  172.414288][ T5823] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  172.428667][ T7678] BTRFS info (device loop2): setting nodatasum
[  172.478104][ T7678] BTRFS info (device loop2): setting nodatacow
[  172.519002][ T7678] BTRFS info (device loop2): turning on async discard
[  172.548722][ T7680] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  172.558993][ T7678] BTRFS info (device loop2): enabling free space tree
[  172.595770][ T7680] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  172.603056][ T7678] BTRFS info (device loop2): enabling auto defrag
[  172.623264][ T7680] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  172.642328][ T7678] BTRFS info (device loop2): max_inline set to 0
[  172.736914][   T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.859272][ T7685] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  172.965967][ T7685] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  173.052240][   T29] audit: type=1804 audit(1770636536.770:8): pid=7685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.572" name="/newroot/112/bus/file0" dev="loop1" ino=10 res=1 errno=0
[  173.076373][   T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.111038][ T5829] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  173.200285][ T5821] syz-executor: attempt to access beyond end of device
[  173.200285][ T5821] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  173.249590][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  173.260012][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  173.263040][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  173.263133][ T5821] Tainted: [L]=SOFTLOCKUP
[  173.263155][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  173.263211][ T5821] Call Trace:
[  173.263232][ T5821]  <TASK>
[  173.263255][ T5821]  dump_stack_lvl+0xe8/0x150
[  173.263341][ T5821]  f2fs_handle_critical_error+0x37c/0x540
[  173.263443][ T5821]  f2fs_write_end_io+0xcdb/0xff0
[  173.263580][ T5821]  __submit_merged_bio+0x256/0x700
[  173.263667][ T5821]  __submit_merged_write_cond+0x3c3/0x4e0
[  173.263763][ T5821]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  173.263895][ T5821]  f2fs_write_data_pages+0x2975/0x35e0
[  173.264065][ T5821]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  173.264257][ T5821]  ? is_bpf_text_address+0x292/0x2b0
[  173.264321][ T5821]  ? is_bpf_text_address+0x26/0x2b0
[  173.264410][ T5821]  ? __lock_acquire+0x6b5/0x2cf0
[  173.264531][ T5821]  ? __lock_acquire+0x6b5/0x2cf0
[  173.264624][ T5821]  ? do_raw_spin_lock+0x12b/0x2f0
[  173.264711][ T5821]  ? do_raw_spin_unlock+0xf5/0x210
[  173.264766][ T5821]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  173.264849][ T5821]  do_writepages+0x32e/0x550
[  173.264955][ T5821]  ? do_raw_spin_unlock+0xf5/0x210
[  173.265026][ T5821]  filemap_fdatawrite+0x1e9/0x2f0
[  173.265112][ T5821]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  173.265308][ T5821]  ? do_raw_spin_unlock+0xf5/0x210
[  173.265375][ T5821]  f2fs_sync_dirty_inodes+0x30e/0x860
[  173.265494][ T5821]  f2fs_write_checkpoint+0x9cf/0x2680
[  173.265679][ T5821]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  173.265940][ T5821]  kill_f2fs_super+0x314/0x720
[  173.266037][ T5821]  ? __pfx_kill_f2fs_super+0x10/0x10
[  173.266153][ T5821]  ? lockdep_hardirqs_on+0x7a/0x110
[  173.266259][ T5821]  deactivate_locked_super+0xbc/0x130
[  173.266346][ T5821]  cleanup_mnt+0x437/0x4d0
[  173.266400][ T5821]  ? _raw_spin_unlock_irq+0x23/0x50
[  173.266474][ T5821]  task_work_run+0x1d9/0x270
[  173.266548][ T5821]  ? __pfx_task_work_run+0x10/0x10
[  173.266635][ T5821]  exit_to_user_mode_loop+0xed/0x480
[  173.266698][ T5821]  ? rcu_is_watching+0x15/0xb0
[  173.266784][ T5821]  do_syscall_64+0x32d/0xf80
[  173.266855][ T5821]  ? trace_irq_disable+0x3b/0x150
[  173.266931][ T5821]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.266992][ T5821]  ? clear_bhb_loop+0x40/0x90
[  173.267027][ T5821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.267047][ T5821] RIP: 0033:0x7f75c1d9c1d7
[  173.267067][ T5821] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  173.267083][ T5821] RSP: 002b:00007fffaeb49428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  173.267105][ T5821] RAX: 0000000000000000 RBX: 00007f75c1e30b3b RCX: 00007f75c1d9c1d7
[  173.267119][ T5821] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffaeb494e0
[  173.267132][ T5821] RBP: 00007fffaeb494e0 R08: 00007fffaeb4a4e0 R09: 00000000ffffffff
[  173.267146][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffaeb4a570
[  173.267183][ T5821] R13: 00007f75c1e30b3b R14: 000000000002a3eb R15: 00007fffaeb4a5b0
[  173.267317][ T5821]  </TASK>
[  173.273756][ T5821] F2FS-fs (loop1): Remounting filesystem read-only
[  173.300498][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  173.593923][ T7727] loop0: detected capacity change from 0 to 1024
[  173.613537][ T7727] EXT4-fs: Ignoring removed orlov option
[  173.625449][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  173.642561][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  173.754730][ T7727] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  173.774335][   T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.891302][ T7727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.075330][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'.
[  174.084418][ T5923] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  174.138977][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.321787][ T5923] usb 3-1: Using ep0 maxpacket: 16
[  174.347392][ T5923] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  174.366495][ T5923] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 13
[  174.418201][ T5923] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  174.432843][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.482106][ T5923] usb 3-1: Product: syz
[  174.496586][ T5923] usb 3-1: Manufacturer: syz
[  174.532464][ T5923] usb 3-1: SerialNumber: syz
[  174.576065][ T7731] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  174.652335][   T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  174.842375][   T24] usb 5-1: Using ep0 maxpacket: 8
[  174.883766][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  174.899395][   T35] bridge_slave_1: left allmulticast mode
[  174.916598][   T24] usb 5-1: config 4 interface 0 has no altsetting 0
[  174.932338][   T35] bridge_slave_1: left promiscuous mode
[  174.941788][   T24] usb 5-1: string descriptor 0 read error: -22
[  174.955679][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.972409][   T24] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  174.981665][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.035280][   T35] bridge_slave_0: left allmulticast mode
[  175.041040][   T35] bridge_slave_0: left promiscuous mode
[  175.071112][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.079278][   T24] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  175.121385][   T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  175.161258][   T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  175.177108][   T24] usb 5-1: media controller created
[  175.217887][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  175.284196][   T24] zl10353_read_register: readreg error (reg=127, ret==0)
[  175.347893][ T7739] loop0: detected capacity change from 0 to 32768
[  175.405437][ T7739] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.581 (7739)
[  175.445667][ T5923] cdc_ncm 3-1:1.0: SET_CRC_MODE failed
[  175.461650][ T5923] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed
[  175.485867][   T24] usb 5-1: USB disconnect, device number 7
[  175.494582][ T7739] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.497839][ T5923] cdc_ncm 3-1:1.0: bind() failure
[  175.524609][ T7739] BTRFS info (device loop0): using crc32c checksum algorithm
[  175.560719][ T5923] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  175.596414][ T5923] cdc_ncm 3-1:1.1: bind() failure
[  175.672576][ T5923] usb 3-1: USB disconnect, device number 5
[  175.718578][ T7739] BTRFS info (device loop0): setting nodatasum
[  175.743714][ T7739] BTRFS info (device loop0): setting nodatacow
[  175.751417][ T7739] BTRFS info (device loop0): turning on async discard
[  175.774623][ T7739] BTRFS info (device loop0): enabling free space tree
[  175.781488][ T7739] BTRFS info (device loop0): enabling auto defrag
[  175.789811][ T7739] BTRFS info (device loop0): max_inline set to 0
[  175.802315][   T51] Bluetooth: hci3: command tx timeout
[  176.283490][ T5923] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  176.379227][ T5823] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.501875][ T5923] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  176.514221][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.540034][ T5923] usb 5-1: Product: syz
[  176.550895][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.560622][ T5923] usb 5-1: Manufacturer: syz
[  176.581008][ T5923] usb 5-1: SerialNumber: syz
[  176.596841][ T5923] usb 5-1: config 0 descriptor??
[  176.620314][ T5923] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 008
[  176.634760][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.642724][ T5900] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  176.695050][   T35] bond0 (unregistering): Released all slaves
[  176.812543][ T5900] usb 3-1: Using ep0 maxpacket: 8
[  176.850882][ T5900] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  176.872319][ T5900] usb 3-1: config 0 has no interface number 0
[  176.878543][ T5900] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  176.930286][ T5900] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  176.942560][ T5900] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  176.960933][ T5900] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  176.974711][ T5900] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  176.983844][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.997588][ T5900] usb 3-1: config 0 descriptor??
[  177.014396][ T5900] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  177.032458][ T5923]  (null): failure reading functionality
[  177.087117][ T5923] i2c i2c-1: connected i2c-tiny-usb device
[  177.274003][ T5900] usb 5-1: USB disconnect, device number 8
[  177.309667][ T5914] usb 3-1: USB disconnect, device number 6
[  177.315879][    C1] ldusb 3-1:0.55: usb_submit_urb failed (-19)
[  177.420410][ T5914] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  177.510001][ T7724] chnl_net:caif_netlink_parms(): no params data found
[  177.879055][   T51] Bluetooth: hci3: command tx timeout
[  178.068834][ T5900] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  178.276692][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.294121][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.323469][ T7724] bridge_slave_0: entered allmulticast mode
[  178.333707][ T5900] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  178.341760][ T5900] usb 1-1: config 0 has no interface number 0
[  178.351068][ T7724] bridge_slave_0: entered promiscuous mode
[  178.365970][ T5900] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  178.387261][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.411943][ T5900] usb 1-1: Product: syz
[  178.417062][ T5900] usb 1-1: Manufacturer: syz
[  178.426520][ T5900] usb 1-1: SerialNumber: syz
[  178.463362][ T5900] usb 1-1: config 0 descriptor??
[  178.490423][   T35] hsr_slave_0: left promiscuous mode
[  178.506116][   T35] hsr_slave_1: left promiscuous mode
[  178.523813][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.545412][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.587469][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.615470][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.704531][ T5900] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  178.725937][ T5900] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  178.763604][ T5900] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  178.779125][   T35] veth1_macvtap: left promiscuous mode
[  178.792406][   T35] veth0_macvtap: left promiscuous mode
[  178.798273][   T35] veth1_vlan: left promiscuous mode
[  178.814624][   T35] veth0_vlan: left promiscuous mode
[  178.816241][ T5900] usb 1-1: media controller created
[  178.923199][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  179.023068][ T5900] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  179.154260][ T5900] usb 1-1: USB disconnect, device number 5
[  179.560892][ T7851] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size.
[  179.952297][   T51] Bluetooth: hci3: command tx timeout
[  180.112120][   T35] team0 (unregistering): Port device team_slave_1 removed
[  180.161981][   T35] team0 (unregistering): Port device team_slave_0 removed
[  180.185852][   T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  180.365936][   T24] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  180.376018][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.388219][   T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.406091][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  180.414202][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.423486][   T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.440058][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  180.464853][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.474610][   T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.490170][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  180.498736][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.510940][   T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.522993][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  180.537717][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.547163][   T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.559837][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  180.569062][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.586960][   T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.599137][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  180.607221][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.619710][   T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.631081][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  180.640138][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  180.649460][   T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  180.660929][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  180.670745][   T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  180.683224][   T24] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  180.692044][   T24] usb 1-1: Product: syz
[  180.696735][   T24] usb 1-1: Manufacturer: syz
[  180.701801][   T24] usb 1-1: SerialNumber: syz
[  180.712021][   T24] usb 1-1: config 0 descriptor??
[  180.737281][   T24] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  180.967232][ T5913] usb 1-1: USB disconnect, device number 6
[  180.987242][ T5913] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  181.017326][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.024909][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.034137][ T7724] bridge_slave_1: entered allmulticast mode
[  181.044746][ T7724] bridge_slave_1: entered promiscuous mode
[  181.137544][ T7858] tap0: tun_chr_ioctl cmd 1074812118
[  181.234574][ T7724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.284954][ T7724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.486242][ T7724] team0: Port device team_slave_0 added
[  181.540692][ T7724] team0: Port device team_slave_1 added
[  181.608179][ T7874] loop2: detected capacity change from 0 to 64
[  181.730001][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.789856][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.906999][ T7724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.959076][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.002312][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.037198][   T51] Bluetooth: hci3: command tx timeout
[  182.053213][ T7888] loop4: detected capacity change from 0 to 64
[  182.109127][ T7888] hfs: unable to locate alternate MDB
[  182.142309][ T7724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.152406][ T7888] hfs: continuing without an alternate MDB
[  182.521932][ T7724] hsr_slave_0: entered promiscuous mode
[  182.554946][ T7724] hsr_slave_1: entered promiscuous mode
[  183.082541][ T7882] loop1: detected capacity change from 0 to 32768
[  183.131764][ T7882] xfs: Deprecated parameter 'attr2'
[  183.145033][ T7882] XFS: attr2 mount option is deprecated.
[  183.175970][ T7910] loop2: detected capacity change from 0 to 8
[  183.215624][ T7916] loop4: detected capacity change from 0 to 64
[  183.220924][ T7160] udevd[7160]: incorrect cramfs checksum on /dev/loop2
[  183.232110][ T7882] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  183.367222][ T7882] XFS (loop1): Ending clean mount
[  183.398172][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'.
[  183.447604][ T7882] XFS (loop1): Quotacheck needed: Please wait.
[  183.460681][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'.
[  183.542477][ T7882] XFS (loop1): Quotacheck: Done.
[  183.584720][ T7882] XFS (loop1): User initiated shutdown received.
[  183.591756][ T7882] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:479).  Shutting down filesystem.
[  183.607434][ T7901] process 'syz.2.625' launched './file2' with NULL argv: empty string added
[  183.617654][ T7901] cramfs: Error -3 while decompressing!
[  183.625701][ T7901] cramfs: ffffffff9a3a2ae8(26)->ffff88806d790000(4096)
[  183.633572][ T7882] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  183.658134][ T7901] cramfs: Error -3 while decompressing!
[  183.669418][ T7901] cramfs: ffffffff9a3a2b02(26)->ffff88806d791000(4096)
[  183.718588][ T7901] cramfs: Error -3 while decompressing!
[  183.770905][ T7901] cramfs: ffffffff9a3a2b1c(16)->ffff88806d792000(4096)
[  183.795855][ T7901] cramfs: Error -3 while decompressing!
[  183.806973][ T7925] loop0: detected capacity change from 0 to 256
[  183.822757][ T5821] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  183.836243][ T7925] exfat: Deprecated parameter 'utf8'
[  183.850087][ T7901] cramfs: ffffffff9a3a2ae8(26)->ffff88806d790000(4096)
[  183.916831][ T7925] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  183.935488][ T7724] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  183.969284][ T7925] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 10)
[  184.045798][ T7724] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  184.187181][ T7724] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  184.260678][ T7724] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  184.893355][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.907134][ T7961] loop2: detected capacity change from 0 to 512
[  184.947211][ T7961] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  184.986502][ T7724] 8021q: adding VLAN 0 to HW filter on device team0
[  185.005373][ T7961] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  185.052364][ T7961] System zones: 1-12
[  185.083876][ T7961] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.638: corrupted in-inode xattr: e_value size too large
[  185.121104][ T7968] loop0: detected capacity change from 0 to 128
[  185.132174][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.135355][ T7961] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  185.139405][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.143617][    C1] EXT4-fs (loop2): initial error at time 1770636548: ext4_iget_extra_inode:5025: inode 15
[  185.165872][    C1] EXT4-fs (loop2): last error at time 1770636548: ext4_iget_extra_inode:5025: inode 15
[  185.202363][ T7961] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.638: couldn't read orphan inode 15 (err -117)
[  185.217373][ T7968] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  185.255458][ T7961] loop2: lost filesystem error report for type 5 error -117
[  185.271042][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.286231][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.306029][ T7961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.479564][ T1164] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  185.617074][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.112400][ T5959] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  186.279952][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.283498][ T7997] netlink: 'syz.4.648': attribute type 3 has an invalid length.
[  186.302260][ T5959] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  186.337156][ T5959] usb 3-1: config 0 interface 0 has no altsetting 0
[  186.355248][ T5959] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  186.372591][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'.
[  186.399376][ T7997] netlink: 'syz.4.648': attribute type 3 has an invalid length.
[  186.403123][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.431863][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'.
[  186.473450][ T5959] usb 3-1: config 0 descriptor??
[  186.707621][ T7982] loop0: detected capacity change from 0 to 32768
[  186.785105][ T7982] JBD2: Ignoring recovery information on journal
[  186.875397][ T7982] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  186.899637][ T5959] uclogic 0003:28BD:0042.0009: interface is invalid, ignoring
[  187.055853][ T7982] 
[  187.058265][ T7982] ======================================================
[  187.065413][ T7982] WARNING: possible circular locking dependency detected
[  187.072490][ T7982] syzkaller #0 Tainted: G             L     
[  187.078498][ T7982] ------------------------------------------------------
[  187.085743][ T7982] syz.0.643/7982 is trying to acquire lock:
[  187.091659][ T7982] ffff888024eea610 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_write_begin_nolock+0x2068/0x41e0
[  187.101709][ T7982] 
[  187.101709][ T7982] but task is already holding lock:
[  187.109105][ T7982] ffff888059ef4da0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_write_begin+0x1a2/0x320
[  187.119789][ T7982] 
[  187.119789][ T7982] which lock already depends on the new lock.
[  187.119789][ T7982] 
[  187.130233][ T7982] 
[  187.130233][ T7982] the existing dependency chain (in reverse order) is:
[  187.139317][ T7982] 
[  187.139317][ T7982] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[  187.148485][ T7982]        down_write+0x96/0x200
[  187.153290][ T7982]        ocfs2_lock_global_qf+0x201/0x290
[  187.159042][ T7982]        ocfs2_acquire_dquot+0x3fa/0xb30
[  187.164711][ T7982]        dqget+0x7b1/0xf10
[  187.169245][ T7982]        __dquot_initialize+0x3ba/0xd30
[  187.174907][ T7982]        ocfs2_get_init_inode+0x147/0x1c0
[  187.180652][ T7982]        ocfs2_mknod+0xa67/0x2290
[  187.185703][ T7982]        ocfs2_create+0x195/0x490
[  187.190837][ T7982]        vfs_create+0x2d1/0x460
[  187.195710][ T7982]        filename_mknodat+0x3e8/0x660
[  187.201100][ T7982]        __se_sys_mknod+0x3a/0x150
[  187.206231][ T7982]        do_syscall_64+0x14d/0xf80
[  187.211408][ T7982]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.217846][ T7982] 
[  187.217846][ T7982] -> #2 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}:
[  187.228383][ T7982]        down_write+0x96/0x200
[  187.233274][ T7982]        ocfs2_lock_global_qf+0x1da/0x290
[  187.239073][ T7982]        ocfs2_acquire_dquot+0x3fa/0xb30
[  187.244800][ T7982]        dqget+0x7b1/0xf10
[  187.249261][ T7982]        __dquot_initialize+0x3ba/0xd30
[  187.254835][ T7982]        ocfs2_get_init_inode+0x147/0x1c0
[  187.260612][ T7982]        ocfs2_mknod+0xa67/0x2290
[  187.265675][ T7982]        ocfs2_create+0x195/0x490
[  187.270726][ T7982]        vfs_create+0x2d1/0x460
[  187.275604][ T7982]        filename_mknodat+0x3e8/0x660
[  187.281004][ T7982]        __se_sys_mknod+0x3a/0x150
[  187.286133][ T7982]        do_syscall_64+0x14d/0xf80
[  187.291299][ T7982]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.297861][ T7982] 
[  187.297861][ T7982] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  187.306437][ T7982]        down_read+0x47/0x2e0
[  187.311166][ T7982]        ocfs2_start_trans+0x3ab/0x700
[  187.316653][ T7982]        ocfs2_shutdown_local_alloc+0x1f5/0xa40
[  187.322926][ T7982]        ocfs2_dismount_volume+0x1ec/0x900
[  187.328757][ T7982]        generic_shutdown_super+0x13d/0x2d0
[  187.334681][ T7982]        kill_block_super+0x44/0x90
[  187.340006][ T7982]        deactivate_locked_super+0xbc/0x130
[  187.345938][ T7982]        cleanup_mnt+0x437/0x4d0
[  187.350905][ T7982]        task_work_run+0x1d9/0x270
[  187.356076][ T7982]        exit_to_user_mode_loop+0xed/0x480
[  187.361915][ T7982]        do_syscall_64+0x32d/0xf80
[  187.367071][ T7982]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.373527][ T7982] 
[  187.373527][ T7982] -> #0 (sb_internal#5){.+.+}-{0:0}:
[  187.381047][ T7982]        __lock_acquire+0x15a5/0x2cf0
[  187.386457][ T7982]        lock_acquire+0xf0/0x2e0
[  187.391416][ T7982]        ocfs2_start_trans+0x2ac/0x700
[  187.396993][ T7982]        ocfs2_write_begin_nolock+0x2068/0x41e0
[  187.403261][ T7982]        ocfs2_write_begin+0x1c5/0x320
[  187.408754][ T7982]        generic_perform_write+0x2e2/0x8f0
[  187.414585][ T7982]        ocfs2_file_write_iter+0x1663/0x1ed0
[  187.420605][ T7982]        vfs_write+0x61d/0xb90
[  187.425531][ T7982]        ksys_write+0x150/0x270
[  187.430439][ T7982]        do_syscall_64+0x14d/0xf80
[  187.435631][ T7982]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.442092][ T7982] 
[  187.442092][ T7982] other info that might help us debug this:
[  187.442092][ T7982] 
[  187.452531][ T7982] Chain exists of:
[  187.452531][ T7982]   sb_internal#5 --> &ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE] --> &ocfs2_quota_ip_alloc_sem_key
[  187.452531][ T7982] 
[  187.469525][ T7982]  Possible unsafe locking scenario:
[  187.469525][ T7982] 
[  187.477021][ T7982]        CPU0                    CPU1
[  187.482499][ T7982]        ----                    ----
[  187.488144][ T7982]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  187.493809][ T7982]                                lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]);
[  187.503643][ T7982]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  187.511933][ T7982]   rlock(sb_internal#5);
[  187.516297][ T7982] 
[  187.516297][ T7982]  *** DEADLOCK ***
[  187.516297][ T7982] 
[  187.524465][ T7982] 4 locks held by syz.0.643/7982:
[  187.529530][ T7982]  #0: ffff88807c2d5278 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  187.538718][ T7982]  #1: ffff888024eea420 (sb_writers#19){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[  187.547723][ T7982]  #2: ffff888059ef5100 (&sb->s_type->i_mutex_key#41){+.+.}-{4:4}, at: ocfs2_file_write_iter+0x429/0x1ed0
[  187.559094][ T7982]  #3: ffff888059ef4da0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_write_begin+0x1a2/0x320
[  187.570202][ T7982] 
[  187.570202][ T7982] stack backtrace:
[  187.576121][ T7982] CPU: 0 UID: 0 PID: 7982 Comm: syz.0.643 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  187.576147][ T7982] Tainted: [L]=SOFTLOCKUP
[  187.576153][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  187.576164][ T7982] Call Trace:
[  187.576172][ T7982]  <TASK>
[  187.576180][ T7982]  dump_stack_lvl+0xe8/0x150
[  187.576208][ T7982]  print_circular_bug+0x2e1/0x300
[  187.576238][ T7982]  check_noncircular+0x12e/0x150
[  187.576266][ T7982]  __lock_acquire+0x15a5/0x2cf0
[  187.576298][ T7982]  lock_acquire+0xf0/0x2e0
[  187.576317][ T7982]  ? ocfs2_write_begin_nolock+0x2068/0x41e0
[  187.576350][ T7982]  ocfs2_start_trans+0x2ac/0x700
[  187.576374][ T7982]  ? ocfs2_write_begin_nolock+0x2068/0x41e0
[  187.576398][ T7982]  ? __pfx_ocfs2_start_trans+0x10/0x10
[  187.576421][ T7982]  ? __kmalloc_cache_noprof+0x31c/0x660
[  187.576443][ T7982]  ocfs2_write_begin_nolock+0x2068/0x41e0
[  187.576475][ T7982]  ? ocfs2_read_blocks+0x1207/0x15e0
[  187.576507][ T7982]  ? __pfx_ocfs2_write_begin_nolock+0x10/0x10
[  187.576527][ T7982]  ? unwind_next_frame+0xa5/0x23c0
[  187.576552][ T7982]  ? lock_release+0x4b/0x3d0
[  187.576571][ T7982]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.576588][ T7982]  ? unwind_next_frame+0xa5/0x23c0
[  187.576611][ T7982]  ? rcu_is_watching+0x15/0xb0
[  187.576634][ T7982]  ? __bfs+0x153/0x290
[  187.576654][ T7982]  ? __pfx_hlock_conflict+0x10/0x10
[  187.576680][ T7982]  ? check_path+0x21/0x40
[  187.576701][ T7982]  ? check_noncircular+0xda/0x150
[  187.576730][ T7982]  ? arch_stack_walk+0xfb/0x150
[  187.576767][ T7982]  ? down_write+0x16d/0x200
[  187.576790][ T7982]  ? __pfx_down_write+0x10/0x10
[  187.576812][ T7982]  ? __lock_acquire+0x6b5/0x2cf0
[  187.576834][ T7982]  ocfs2_write_begin+0x1c5/0x320
[  187.576858][ T7982]  ? __pfx_ocfs2_write_begin+0x10/0x10
[  187.576887][ T7982]  generic_perform_write+0x2e2/0x8f0
[  187.576912][ T7982]  ? __pfx_generic_perform_write+0x10/0x10
[  187.576933][ T7982]  ? file_update_time_flags+0x400/0x4a0
[  187.576951][ T7982]  ? __generic_file_write_iter+0xf9/0x230
[  187.576971][ T7982]  ? ocfs2_file_write_iter+0x163a/0x1ed0
[  187.576991][ T7982]  ocfs2_file_write_iter+0x1663/0x1ed0
[  187.577013][ T7982]  ? __pfx_stack_trace_save+0x10/0x10
[  187.577037][ T7982]  ? __pfx_ocfs2_file_write_iter+0x10/0x10
[  187.577074][ T7982]  vfs_write+0x61d/0xb90
[  187.577094][ T7982]  ? __pfx_vfs_write+0x10/0x10
[  187.577114][ T7982]  ? __fget_files+0x2a/0x420
[  187.577142][ T7982]  ksys_write+0x150/0x270
[  187.577159][ T7982]  ? __pfx_ksys_write+0x10/0x10
[  187.577180][ T7982]  do_syscall_64+0x14d/0xf80
[  187.577201][ T7982]  ? trace_irq_disable+0x3b/0x150
[  187.577225][ T7982]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.577242][ T7982]  ? clear_bhb_loop+0x40/0x90
[  187.577261][ T7982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.577278][ T7982] RIP: 0033:0x7f7de779af79
[  187.577295][ T7982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.577310][ T7982] RSP: 002b:00007f7de86c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  187.577328][ T7982] RAX: ffffffffffffffda RBX: 00007f7de7a15fa0 RCX: 00007f7de779af79
[  187.577349][ T7982] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000004
[  187.577359][ T7982] RBP: 00007f7de78316e0 R08: 0000000000000000 R09: 0000000000000000
[  187.577369][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.577379][ T7982] R13: 00007f7de7a16038 R14: 00007f7de7a15fa0 R15: 00007ffdd5397df8
[  187.577399][ T7982]  </TASK>
[  187.967382][ T7991] loop1: detected capacity change from 0 to 40427
[  187.979206][ T7991] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  187.985633][ T7991] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  187.994710][ T7991] F2FS-fs (loop1): invalid crc value
[  188.051261][ T7991] F2FS-fs (loop1): Inconsistent i_blocks, ino:3, iblocks:0, sectors:8
[  188.115643][ T5886] usb 3-1: USB disconnect, device number 7
[  188.152421][ T7724] veth0_vlan: entered promiscuous mode
[  188.218042][ T7724] veth1_vlan: entered promiscuous mode
[  188.325162][ T5823] ocfs2: Unmounting device (7,0) on (node local)
[  188.380253][ T8006] loop4: detected capacity change from 0 to 32768
[  188.462598][   T29] audit: type=1800 audit(1770636552.190:9): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.649" name="file1" dev="loop4" ino=4 res=0 errno=0
[  188.472940][ T8006] ERROR: (device loop4): diWrite: ixpxd invalid
[  188.472940][ T8006] 
[  188.515381][ T7724] veth0_macvtap: entered promiscuous mode
[  188.539320][ T8006] ERROR: (device loop4): remounting filesystem as read-only
[  188.567261][ T7724] veth1_macvtap: entered promiscuous mode
[  188.569149][ T8006] ERROR: (device loop4): txCommit: 
[  188.569149][ T8006] 
[  188.597414][ T8025] ERROR: (device loop4): diWrite: ixpxd invalid
[  188.597414][ T8025] 
[  188.616497][ T8025] ERROR: (device loop4): txCommit: 
[  188.616497][ T8025] 
[  188.686711][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.733197][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.783962][   T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.822077][   T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.843027][   T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.864885][   T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.930487][ T7724] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht'
[  188.961811][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.969986][ T7724] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht'
[  188.979230][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.007028][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.016545][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50