last executing test programs:

4m26.461723998s ago: executing program 3 (id=1069):
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed1)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)

4m26.223698236s ago: executing program 3 (id=1070):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x805}, 0x24000840)

4m25.848179166s ago: executing program 3 (id=1071):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, 0x0, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)='k', 0x1)

4m25.816703369s ago: executing program 3 (id=1072):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'pim6reg1\x00', 0x3}, 0x18)

4m25.746393745s ago: executing program 3 (id=1073):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000140)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$eJzs3b2PHGcdB/Dfvt6LiXNKEQULoYsTXkKIX4MxBEhSQEGTArmhQLYul8jCAWQb5EQWvugaCipqChASJUKUiII/IAUtHRUVlmwkkCsGzd3z+OY2u95zzrezd8/nI51nf/vM7D5z353bWc/MPgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHe/872znYi4/LN0x0rEp6IX0Y1YquvViFhaXcnz9yPiudhqjmcjYrAQUS+/9c/TEa9GxEfHI+7dv71W331uj/349h///rsfHHvrb38YnP7vn272Xps0361bv/zPn+/sb50BAACgNFVVVZ30Mf9E+nzfbbtTAMBM5Pf/Ksn3H/n6V/986y/z1B+1Wq1Wq2dQN1Xj3WkWEbHRXKbeZ3A4HgAOmY140HYXaJH8i9aPiGNtdwKYa522O8CBuHf/9lon5dtpvh+sbrfnc0F25b/ReXh9x6TpNKPnmMzq9bUZvXhmQn+WZtSHeZLz747mf3m7fZjmO+j8Z2VS/sPtS5+Kk/PvjeY/4ujk3x2bf6ly/v3Hyr8nfwAAAAAAmGP5//9XWj7+u7D/VdmTRx3/XZ1RHwAAAAAAAADgSdvv+H8PGf8PAAAA5lb9Wb32m+M79036Lrb6/kudiKdG5gcKky6WWW67HwAAAAAAAAAAAABQkv72ObyXOhGDiHhqebmqqvqnabR+XPtd/rArff2hZG3/kQcAgG0fHR+5lr8TsRgRl9J3/Q2Wl5eranFpuVqulhby/uxwYbFaanyuzdP6voXhHnaI+8OqfrDFxnJN0z4vT2sffbz6uYZVbw8de0IG6bc5obmlsAEg2X43uucd6Yipqqcn7XzALrb/o8f2z160/ToFAAAADl5VVVUnfZ33iXTMv9t2pwCAmcjv/6PHBQ6kjjjYx5/3emHn9z4X/VGr1Wp1cXVTNd6dZhERG81l6n0Gw/EDwCGzEQ/a7gItkn/R+hHxXNudAOZap+0OcCDu3b+91kn5dprvB2l893wuyK78Nzpby+Xlx02nGT3HZFavr83oxTMT+vPsjPowT3L+3dH8L2+3D9N8B53/rEzKv17PlRb607acf280/xFHJ//u2PxLlfPvP1b+PfkDAAAAAMAcy///v+L4b15lAAAAAAAAADh07t2/vZave83H/z8zZj7Xfx5NOf+O/IuU8++O5P/Fkfl6jdt339zJ/9/3b6/9/ua/Pp2ne81/IT9kJ72yOukV0UnP1Omn6T5XcMTmoDesn2nQ6fb66ZyfavBOXI1rsR5nds3bTb+Pnfazu9rrng52tZ/b1d7/WPv5Xe2D9L0D1VJuPxVr8eO4Fm9vtddtC1PWf3FKezWlPeffs/0XKeffb/zU+S+n9s7ItHb3w+7HtvvmdNzzvHH1s784c/CrM9Vm9B6uW1O9fidb6M+ZiF8/iIif3li/furWlZs3r5+NNDk2bNx7LtLkCcv5D7Z+Fnb+/r+w3Z7/7je317sfDh87/3mxGf2J+b/QuF2v70sz7lsbcv7D9JPzfzu1j9/+D3P+k7f/l1voDwAAAAAAAAAAAAAAADxKVVVbl4i+EREX0vU/bV2bCQDMxvE0ze//9f7A9xvtVaJWq9Vqtfro1E3VeK83i4j4a3OZep/h5+MeDACYZ/+LiH+03QlaI/+C5e/7q6cvtt0ZYKZuvP/BD69cu7Z+/UbbPQEAAAAAAAAAPqk8/udqY/znFyNiZWS+XeO/vhmr+x3/s59vPBxg9AkP9D3BZnfY6zaGG38+tsbnPjVp/O+T8ejxv/tTnm8wpX04pX1hSvvi2Ht30hp7oUdDzv/5xnjndf4nRoZfL2H819Ex70uQ8z/ZeD3X+X9hZL5m/tVv5y7/jb3OuBndXfmfvvneT07feP+DV66+d+Xd9XfXf3T+7Nkz5y9cuHjx4ul3rl5bP7P978H0eg7k/PPY184DLUvOP2cu/7Lk/D+XavmXJef/+VTLvyw5/7y/J/+y5PzzZx/5lyXn/1Kq5V+WnP+XUi3/suT8X061/MuS8/9yquVflpz/K6mWf1ly/qdSLf+y5PxPp3oP+ft6+CMk55+PcNn+y5Lzz2c2yL8sOf9zqZZ/WXL+51Mt/7Lk/F9NtfzLkvP/SqrlX5ac/4VUy78sOf+vplr+Zcn5X0y1/MuS8/9aquVflpz/11Mt/7Lk/F9LtfzLkvP/RqrlX5ac/zdTLf+y5Py/lWr5lyXn/3qq5V+Wne//d8MNN9zIN9r+ywQAAAAAAAAAAAAAjJrF6cRtryMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvbuLkeus7wd+Zl/stUOIgRCc/A1sEhNCsmTXduIX/k0xAQINUAokFPqC7XrXZsFveO0SKJJNDSUSRkUVVdMLWkCojVpVWBUXtKI0F1Vfrkp7QW8qqkpIjaqAAhJSXyBbzZzneTwzOztn7R2vZ8/z+Uj2b3fmzJwzZ87M7nft7x4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa3f7Guc80iqJo/mn9taUoXtD8eNPkltZlr7veWwgAAACs1k9bfz93U7pg/wpu1LbM373iH7++uLi4WLxv9HfHv7C4mK6YLIrxjUXRui669O/vb7QvE1woJhojbZ+PVKx+tOL6sYrrxyuu31Bx/caK6ycqrl+yA5bYVP48pnVn21sfbil3aXFzMd66bnuPW11obBwZiT/LaWm0brM4fqSYL44Vc8VMx/Llso3W8t+8vbmutxZxXSNt69rWPEJ++InDcRsaYR9v71jX5fuMvv+GYvJHP/zE4T868+ytvWblbui4v3I7776juZ2fCpeU29ooNqZ9ErdzpG07t/V4TkY7trPRul3z4+7tfG6F2zl6eTPXVPdzPlGMtD7+dms/jbX/WC/tp23hsv+6syiK85c3u3uZJesqRorNHZeMXH5+JsojsnkfzUPpxcXYFR2nt6/gOG3O2e2dx2n3ayI+/7eH240tsw3tT9P3P7lhyfN+pcdp1HzUy71Wuo/BQb9WhuUYjMfFt1sP+omex+D28Pg/cdfyx2DPY6fHMZged9sxeEfVMTiyYbS1zelJaLRuc/kY3NGx/GhrTY3WfOau/sfg9Jnjp6YXPvbx184fP3R07ujciV07dszs2r17796900fmj83NlH9f5d4efpuLkfQauCPsu/gaeHXXsu2H6uKXB/c6nOjzOtzSteygX4dj3Q+usTYvyKXHdPnaeLS50ycujhTLvMZaz889q38dpsfd9joca3sd9vya0uN1OLaC12FzmVP3rOx7lrG2P7224Vp9LdjSdgx2fz/SfQwO+vuRYTkGJ8Jx8a/3LP+1YFvY3iemrvT7kdElx2B6uOG9p3lJ+n5/Ym9r9Doub2teccOG4uzC3On7Hj905szpHUUYa+IlbcdK9/G6ue0xFUuO15ErPl73z7/iidt6XL4l7KuJ1zb/mlj2uWouc/99/Z+r1le33vuz49KdRRgDttb7s9dX8+b+TFmyz/5sLvOp6dV/L55yadv77/gy778x9z9fri/d1YXR8bHy9Tua9s54x/tx51M11nrvarTW/dz0yt6Px8OftX4/vrnP+/HWrmUH/X483v3g4vtxo+qnHavT/XxOhOPk2Ez/9+PmMlt3XukxOdb3/fjOMBth/78mJIWUi9qOneWO27SusbHx8LjG4ho6j9NdHcuPh2zWXNdTO6/uOL37zvK+RtOju2ytjtPJrmUHfZym96vljtNG1U/frk738zkRjoubd/U/TpvLPH3/6t87N8UP2947N1Qdg+OjG5rbPJ4OwvL9fnFTPAbvKw4XJ4tjxWzr2g2t46nRWtfUAys7BjeEP2v9Xrm1zzF4d9eygz4G09ex5Y69xtjSBz8A3c/nRDgunnyg/zHYXOZNewb7vevd4ZK0TNv3rt0/X1vuZ163de2ma/kzr+Z2/s2e/j+bbS5zbO+V5sz+++necMkNPfZT9+t3udfUbLE2+2lr2M5n9y6/n5rb01zmC/tWeDztL4ri3Eceav28N/z7yp+f/c7XO/7dpde/6Zz7yEM/uPHI317J9gOw/j1fjs3l17q2f5layb//AwAAAOtCzP0jYSbyPwAAANRGzP3xf4Un8j8AAADURsz9Y2EmmeT/rW96dv75c0Vq5i8G8fq0Gx4pl4sd15nw+eTiZc3LH/rq3I//8tzK1j1SFMVPHvmNnstvfSRuV2kybOelN3devvSG51a0/oOPXV6uvb/+pXD/8fGs9DDoVcGdKYrimzd9rrWeyfdfbM2nHznYmu8+/8SF5jLP7Ss/j7d/5iXl8l8M5d/9Rw513P6ZsB++F+bM23rvj3i7r118zbY97728vni7xh0vbD3sJz9Q3m/8PTmfv1AuH/fzctv/V5996mvN5R9/Ve/tPzfSe/ufCvf71TD/++Xl8u3PQfPzeLtPh+2P64u3u+8r3+q5/Zc+Uy5/6uFyuYNhxvXfHT7f/vCz8+376/HGoY7HVbylXC6uf+Y7v926Pt5fvP/u7Z84cLFjf3QfH0//c3k/013Lx8vjeqK/6Fp/837aj8+4/qd+62DHfq5a/6V3P/Py5v12r//eruVGu27f/Rub/uDTn+u5vrg9+//sVMfj2f+u8DoO63/yA+F4DNf/z6XPdaw3OviuzvefuPyXtpzreDzRW39Urv/S64+25n9M/vj3b3jBjS88/8rmviuKb7+nvL+q9R/9w5Md2//lW+5pPR/x+tjR717/cuL6T3906sTJhbPzs217tfW7c95ebs/GiU2bm9t7U3hv7f78wMkzH5w7PTkzOVMUk/X9FXpX7Sth/qAc56/09vc8Fp7P237vm5vv+qfPxsv/5dHy8otvK79uvTos9/lw+Zby+VtsrHL9T95+S+v13Xi6/Lyjxz4A27b/594VLRgef/f3BfF4P/XSD7b2Q/O61teN+Lpe5fZ/d7a8n2+E/boYfjPzHbdcXl/78vF3I1x8T/l6X/X+C29z8Xn94/B8v+N75f3H7YqP97vh+5hvbe18v4vHxzfOjXTff+u3eJwP7yfF+fL6uFTc3xefu6Xn5sXfQ1Kcv7X1+e+k+7n1ih7mchY+tjB9bP7E2cenz8wtnJle+NjHDxw/efbEmQOt3+V54ENVt7/8/rS59f40O7f7/mJmU1EUJ4uZNXjDujbb3/xoZdt/6rHDs3tm7pqdO3Lo7JEzj52aO3308MLC4bnZhbsOHTky99Gq28/PPrhj575de3ZOHZ2ffXDvvn279k3NnzjZ3Ixyoyrsnvnw1InTB1o3WXjw/n07Hnjg/pmp4ydn5x7cMzMzdbbq9q2vTVPNW//61Om5Y4fOzB+fm1qY//jcgzv27d69s/K3AR4/dWRhcvr02RPTZxfmTk+Xj2XyTOvi5te+qttTTwv/Vn4/261R/iK+4p337k6/n7Xpq59c9q7KRbp+geiz4XfR/MOLTu1dyecx94+HmWSS/wEAACAHMfdvCDOR/wEAAKA2Yu7fGGYi/wMAAEBtxNw/EWaSSf7X/9f/X1n/v7xe/z+v/v+pj5S90vXe/4/9ef3/PFzn/v+q16//r/9fv/7/yvvz63379f/1/1lq2Pr/MfdvKoos8z8AAADkIOb+zWEm8j8AAADURsz9N4SZyP8AAABQGzH3vyDMJJP8r/+/ov7/zqrCVf37/87/r/9frM/+f3xy9P+zccX9+/c+2vGp/n+g/6//r/+v/6//z6qNL3vN9er/x9x/Y5hJJvkfAAAAchBz/wvDTOR/AAAAqI2Y+28KM5H/AQAAoDZi7t8SZpJJ/tf/d/5//X/9/3XU/+8o0q7J+f/bNkb/f32o3/n/f6r/vy76/xP6/+ux/z8+2O0f7v5/5ebr/3NNDNv5/2Puf1GYSSb5HwAAAHIQc/+Lw0zkfwAAAKiNmPtfEmYi/wMAAEBtxNx/c5hJJvlf/1//f4X9/y/p/+v/D0H/v+PxrEn/v+/5/8uP9P+HS/36/87/X6yL/r/z/xfrsf8/4O0f7v7/oM//P/7m7tvr/9PLsPX/Y+5/aZhJJvkfAAAAchBz/y1hJvI/AAAA1EbM/S8LM5H/AQAAoDZi7t8aZpJJ/tf/1/93/n/9f/3/3uuv7v+X9P+Hi/5/f/r/FfT/9f/1/1fW/+/xza/+P70MW/8/5v5bw0wyyf8AAACQg5j7bwszkf8BAACgNmLu/39hJvI/AAAA1EbM/dvCTDLJ//r/+v/6/3n1/+/doP+v/19v+v/96f9X0P/X/9f/X+H5/5e6kv7/xqo7ozaGrf8fc//Lw0wyyf8AAACQg5j7XxFmIv8DAABAbcTc/8owE/kfAAAAaiPm/skwk0zyv/5/vfr/f/rXT76y0P/X/69Yf037//Ew0P/PnP5/f/r/FfT/9f/1/9ek/08+hq3/H3P/7WEmmeR/AAAAyEHM/XeEmcj/AAAAUBsx998ZZiL/AwAAQG3E3L89zCST/K//X6/+f6T/v4b9/y8+nO5H/7/k/P+96f+vDf3/HtpepPr/FfT/9f+z7//H7371/xmMYev/x9z/qjCTTPI/AAAA5CDm/rvCTOR/AAAAqI2Y+18dZiL/AwAAQG3E3H93mEkm+V//X/9f/9/5//X/e69f/3990v/vT/+/gv6//n/2/X/n/2ewhq3/H3P/a8JMMsn/AAAAkIOY++8JM5H/AQAAoDbi/98s/9+r/A8AAAB1FHP/VJhJJvlf/1//P6f+f0P/X/9f/7/29P/70/+voP+v/6//r//PQA1b/z/m/teGmWSS/wEAACAHMfffF2Yi/wMAAEBtxNw/HWYi/wMAAEBtxNw/E2aSSf7X/9f/z6n/7/z/+v/rof/f0P9fFf3//vT/K+j/6//Xrf9fFPr/XFfD1v+PuX9HmEkm+R8AAAByEHP/zjAT+R8AAABqI+b+XWEm8j8AAADURsz994eZZJL/9f/1//X/9f/1/3uv3/n/1yf9//70/yvo/+v/163/7/z/XGfD1v+Puf+BMJNM8j8AAADkIOb+3WEm8j8AAADURsz9e8JM5H8AAACojZj794aZZJL/9f9r0v//zb/vWLf+v/5/v/UPpv+/Sf8/TP3/4VLT/n/3y+Kq6f9X0P/X/9f/1/9noIat/x9z/74wk0zyPwAAAOQg5v7XhZl05P8Lf7LGmwUAAAAMUMz9/z/MxL//AwAAQG3E3P8zYSaZ5H/9/5r0/7vo/+v/91u/8//r/9dZTfv/A6P/XyHX/n94Q7ve/fnVut7br/+v/89S177/Hz9aWf8/5v4Hw0wyyf8AAACQg5j7fzbMRP4HAACA2oi5//VhJvI/AAAA1EbM/fvDTDLJ//r/+v/6//r/16b///qi2zD2/5sHj/5/vej/96f/XyHX/n9wvfvz63379f/1/1lq2M7/H3P/G8JMMsn/AAAAkIOY+x8KM5H/AQAAoDZi7n9jmIn8DwAAALURc/+bwkwyyf/6//r/+v/6/87/33v9+v/rk/5/f/r/FfT/9f/1//X/Gahh6//H3P/mMJNM8j8AAADkIOb+h8NM5H8AAACojZj73xJmIv8DAABAbcTc/9Ywk0zyv/6//r/+v/6//n/v9ev/r0/6//3p/1fQ/9f/797+1pu9/r/+P1dr2Pr/Mff/XJhJJvkfAAAAchBz/yNhJvI/AAAA1EbM/W8LM5H/AQAAoDZi7n97mEkm+V//X/9f/1//X/+/9/r1/9cn/f/+9P8r6P/r/zv/v/4/AzVs/f+Y+98RZpJJ/gcAAIAcxNz/82Em8j8AAADURsz97wwzkf8BAACgNmLu/4Uwk0zyv/6//r/+v/5/Fv3/5o30/7Og/9+f/n+FHv3/jfr/A+vPbxrIVl6/7a+i/6//z1LD1v+Puf9dYSaZ5H8AAADIQcz97w4zkf8BAACgNmLuf0+YifwPAAAAtRFz/6NhJpnkf/3/LPv/6SHr/5f0/zPo/zv/fzb0//vT/6/g/P/O/6//r//PQA1b/z/m/sfCTDLJ/wAAAJCDmPvfG2Yi/wMAAEBtxNz/i2Em8j8AAADURsz97wszyST/6/9n2f93/v816/+PdRwfOfX/J9qez3Rc6v/r/68B/f/+9P8r6P/r/w9z/z8czZuWub3+P8No2Pr/Mfe/P8wkk/wPAAAAOYi5/5fCTOR/AAAAqI2Y+385zET+BwAAgNqIuf9Xwkwyyf/6//r/+v/O/+/8/73Xr/+/Pun/96f/X0H/X/9/mPv/FfT/GUbD1v+Puf9Xw0wyyf8AAACQg5j7PxBmIv8DAABAbcTcfyDMRP4HAACA2oi5/2CYSSb5X/+/u/8fz6iq/6//r/+v/6//vx4Nrv//shuLQv9f/1//X/9f/1//n9UYtv5/zP2Hwkwyyf8AAACQg5j7fy3MRP4HAACA2oi5/3CYifwPAAAAtRFz/2yYSSb5X///Wp3/P16ST///J/r/+v+B/n9v+v9rw/n/+9P/r6D/r/+v/6//z0ANW/8/5v65MJNM8j8AAADUWPpxcMz9R8JM5H8AAACojZj7j4aZyP8AAABQGzH3fzDMJJP8r/9/rfr/zv/fa/v1/2P/f6xjef3/kv6//v8g6P/3p/9fQf9f/1//X/+fgRq2/n/M/fNhJpnkfwAAAMhBzP0fCjOR/wEAAKA2Yu7/cJiJ/A8AAAC1EXP/sTCTTPJ/ffr//1tus/5/x+30/6v7/42iOO/8//r/vdav/78+6f/3p/9fQf9f/1//X/+fgRq2/n/M/cfDTDLJ/wAAAJCDmPtPhJnI/wAAwP+xdx9Nct1VH8f78WNb0gpeAlXsWLGEFW+BLTuq2LChSCYHY3IwweRkggkm5xxNzjlnk3M0yYaqoTw650gz07otadoz9/7P57PgoEHjblmD4Oepb11gGLn77xu32P8AAAAwjNz994tbmuz/cfr//ET9/0r/v4Dn/+/9+fr/0/T/+v9tONDfX3phn3/O/v/Od7ninvp//b/+f5L+X/+v/2e/ufX/ufvvH7c02f8AAADQQe7+B8Qt9j8AAAAMI3f/A+MW+x8AAACGkbv/irilyf7X/+v/9f/6/z39/w36//Ps/++YH9f/z4vn/0/T/2+wnf7//1f6f/2//l//z6659f+5+x8UtzTZ/wAAANBB7v4Hxy32PwAAAAwjd/9D4hb7HwAAAIaRu/+hcUuT/a//1//r//X/nv+//vU9/3+Z9P/T9P8beP6//l//r/9nq+bW/+fuf1jc0mT/AwAAQAe5+x8et9j/AAAAMIzc/Y+IW+x/AAAAGEbu/kfGLU32v/5f/6//1//r/9e/vv5/ma5bnfkzQf9/kP5/gw39/2ql/59y3v38+l/ect7/Oej/9f8cNLf+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuvzJusf8BAABgGLn7HxO3NNn/+n/9v/5f/6//X//6+v9l8vz/aYfv/+90+/vcq2//7/n/0zz/X/+v/2e/ufX/ufuvilua7H8AAADoIHf/Y+MW+x8AAACGkbv/cXGL/Q8AAADDyN3/+Lilyf7X/7fp/3drF/2//l//r/8fnf5/muf/b7D7x9yp+qH+X/+v/9f/czhz6/9z9z8hbmmy/wEAAKCD3P1PjFvsfwAAABhG7v4nxS32PwAAAAwjd/+T45Ym+1//36b/9/x//b/+X//fgv5/mv5/g1Ge/3+RXzXH3c8f1nG/f/2//p+D5tb/5+5/StzSZP8DAABAB7n7nxq32P8AAAAwjNz9T4tb7H8AAAAYRu7+q+OWJvtf/7+l/v+ygx/T/2+z/89X0P/r//X/+v9p+v9p+v8NRun/L9Jx9/NLf//6f/0/B82t/8/d//S4pcn+BwAAgA5y9z8jbrH/AQAAYBi5+58Zt9j/AAAAMIzc/c+KW5rsf/2/5/9fTP9/b8//1//r//X/M6X/n6b/30D/r//X/+v/2aq59f+5+6+JW5rsfwAAAOggd/+z4xb7HwAAAIaRu/85cYv9DwAAAMPI3f/cuKXJ/tf/6/+X8fx//b/+X/+v/z8/+v9p+v8N9P/6f/2//p+tmlH/f9ZnnVw9L25psv8BAACgg9z9z49b7H8AAAAYRu7+F8Qt9j8AAAAMI3f/C+OWJvtf/z+b/n835xur/z+1Wq30/6um/f+ps34/6+tS/6//PwL6/2n6/w30//p//b/+n62aUf+/++Pc/S+KW5rsfwAAAOggd/+L4xb7HwAAAIaRu/8lcYv9DwAAAMPI3f/SuGWo/X/inP+J/n82/f+usfp/z//f//Ux5/7/1p/k+f/6/xHo/6fp/zfQ/+v/9f/6f7Zqbv1/7v5rb/0z9Oozf53LL7v4XyMAAAAwL9fu/uvJ1cvilqG+/w8AAAC95e5/edxi/wMAAMBCXXPgI7n7XxG3NNn/+v/t9v+Xn/Ux/b/+f//Xx5z7/20//1//f5D+/2jo/6fp/zfQ/+v/9f/6f7Zqbv1/7v5Xxi1N9j8AAAB0kLv/urjF/gcAAIBh5O5/Vdxi/wMAAMAwcve/Om5psv/1/57/r//X/+v/17++/n+Z9P/T9P8b6P/1/8fb/58482/1/4zhAvr/nZ2dK2/z/j93/2vilib7HwAAADrI3f/auGXP/r9+/7ejAAAAgAXJ3X993OL7/wAAADCM3P2vi1ua7H/9f9P+P7/U9f+79P/6/3Wvr/9fJv3/NP3/Bvp//b/n/+v/2aq5Pf8/d//r45Ym+x8AAAA6yN3/hrjF/gcAAIBh5O5/Y9xi/wMAAMAwcve/KW5psv/1/037f8//1//r/4+6/79lpf8/Eovo/0+d+/Xn3v9fpf/X/09o1//f/a57fqj/1/9z0Nz6/9z9b45bmux/AAAA6CB3/1viFvsfAAAAhpG7/61xi/0PAAAAw8jd/7a46dIm+1//r//X/+v/9f/rX/+In/9/+Wq10v9vwSL6/wlz7/89/1//P6Vd/7+P/l//z0Fz6/9z9789bmmy/wEAAKCD3P3viFvsfwAAABhG7v53xi32PwAAAAwjd/+74pYm+1//r//X/194/3/zzs6O/n9B/f9Vi+j/Pf9/S/T/0/T/G+j/9f/6f/0/R+K4+v/c/e+OW5rsfwAAAOggd/974hb7HwAAAIaRu/+9cYv9DwAAAMPI3f++uKXJ/tf/6//1/57/f2J2/f/JPX+9Js//1/9vif5/2hz7/7P/DNH/6/+X/P4H6f+v0f+zTXN7/n/u/vfHLU32PwAAAHSQu/8Dcesf3dr/AAAAMIzc/R+MW+x/AAAAGEbu/g/FLU32v/5f/6//1/8P//x//X8r+v9pc+z/z6b/1/8v+f0P0v97/j9bNbf+P3f/h+OWJvsfAAAAOsjd/5G4xf4HAACAYeTu/2jcYv8DAADAMHL33xC3NNn/+n/9v/5f/6//P/17qP8fg/5/2tH0/6f0//r/6uf/L/5boP/X/2/6fMY0t/4/d//H4pYm+x8AAAA6yN3/8bjF/gcAAIBh5O7/RNxi/wMAAMAiXbrmY7n7Pxm3NNn/+n/9v/5f/6//X//6+v9l0v9P8/z/DfT/F9jP32HPj5b2/P/9//ul/9f/s31z6/9z938qbmmy/wEAAKCD3P2fjlvsfwAAABhG7v7PxC32PwAAAAwjd/9n45Ym+1//r//X/+v/9f/rX1//v0z6/2n6/w30/8f6/Pylv3/9v/6fg+bW/+fu/1zc0mT/AwAAQAe5+z8ft9j/AAAAMIzc/V+IW+x/AAAAGMbu7s+4rOH+1//r//X/+n/9//rX1/8vk/5/mv5/A/2//l//r/9nq+bW/39x97NOrr4UtzTZ/wAAANBB7v4vxy32PwAAAAwjd/9X4hb7HwAAAIaRu/+rcUuT/a//1/8vo//f2dm5Uv+v/9/76znT/9+o/6fo/6fp/zfQ/+v/9f/6f7Zqbv1/7v6vxS1N9j8AAAB0kLv/63GL/Q8AAADDyN3/jbjF/gcAAIBh5O7/ZtzSZP/r/2fQ/5/U/3v+v/5/5fn/+v8t0f9P0/9vMGL/f/L8f/nH3c8f1nG/f/2//p+D5tb/5+7/VtzSZP8DAABAB7n7vx232P8AAAAwjNz934lb7H8AAAAYRu7+78YtTfa//v/o+v9b/951ef7/qdX696//1//r//X/tzX9/zT9/wYj9v8X4Lj7+aW/f/2//p+D5tb/5+7/XtzSZP8DAABAB7n7vx+32P8AAAAwjNz9P4hb7H8AAAAYRu7+H8YtTfa//n8Gz/8fsP/3/P/1Xx/6/1n3/5fo/8eg/5+m/99A/6//1/9vqf/Pr2b9f3dz6/9z9/8obmmy/wEAAKCD3P0/jlvsfwAAABhG7v6fxC32PwAAAAwjd/+NcctZ+39d2z0K/b/+X/+v/9f/r399/f8y6f+nnW//f2J1uP4/6f/1//r/rv2/5/9z2tz6/9z9P41bfP8fAAAAFueyc3w8d//P4hb7HwAAAIaRu//ncYv9DwAAAMPI3f+LuOWmS47rLR0p/b/+X/+v/9f/r399/f8y6f+nef7/Bovv/3d2ds7z/4ets6V+/m76/zH6/9VK/8/hza3/z93/y7jF9/8BAABgGLn7fxW32P8AAAAwjNz9v45b7H8AAAAYRu7+38QtTfa//l//f8j+fzfN1P+fpv8/Tf+/nv7/aOj/p+n/N1h8/384x93PL/39j9b/e/4/2zC3/j93/2/jlib7HwAAADrI3f+7uMX+BwAAgGHk7v993GL/AwAAwDBy9/8hbmmy/4+t/4+/1fr/xff/nv+v/9f/6/9nRf8/Tf+/gf5f/6//1/+zVXPr/3P3/zFuabL/AQAAoIPc/X+KW+x/AAAAGEbu/j/HLfY/AAAADCN3/1/ilib73/P/9f/6f/2//n/96+v/l0n/P03/v179Run/9f/6f/0/WzW3/j93/1/jlib7HwAAADrI3f+3uMX+BwAAgGHk7r8pbrH/AQAAYBi5+/8etzTZ//p//b/+X/+v/1//+vr/ZdL/TzvO/v8et9v8sp7/f+z9f74F/b/+X//PVsyt/8/d/4+4pcn+BwAAgA5y9/8zbrH/AQAAYBi5+/8Vt9j/AAAAMIzc/f+OW5rs/w39/4n6ifr/Sfr/ve9f/7/+60P/r//X/9/29P/TPP9/A/2/5//r//X/bNXc+v/c/TfHLU32PwAAAHSQu/+WuMX+BwAAgGHk7v9P3GL/AwAAwDBy9/83bmmy/z3/X/+v/9f/6//Xv77+f5n0/9P0/xvo//X/+n/9P1s1t/4/d///AgAA//+XbGLE")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140))
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180))

4m24.130066363s ago: executing program 3 (id=1084):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}}, 0x4)

4m9.084941215s ago: executing program 32 (id=1084):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}}, 0x4)

3m32.575277788s ago: executing program 2 (id=1709):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
getsockname$unix(r0, 0x0, &(0x7f0000000140))

3m32.529557724s ago: executing program 2 (id=1710):
timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=<r0=>0x0)
exit(0x3)
timer_settime(r0, 0x0, &(0x7f0000000100), 0x0)

3m31.503823385s ago: executing program 2 (id=1717):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x10)

3m31.395605651s ago: executing program 2 (id=1720):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m31.338146497s ago: executing program 2 (id=1721):
syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3010846, &(0x7f0000000340)={[{@discard_size={'discard', 0x3d, 0xf4}}, {@usrquota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@usrquota}, {@noquota}, {@gid}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'utf8'}}]}, 0x24, 0x6318, &(0x7f0000011180)="$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")
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./bus\x00')

3m30.465844255s ago: executing program 2 (id=1731):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
sendfile(r1, r0, 0x0, 0x210)

3m15.372065265s ago: executing program 33 (id=1731):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
sendfile(r1, r0, 0x0, 0x210)

3m2.827879143s ago: executing program 5 (id=2114):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x86, 0x6}, 0x4)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4)

3m2.670419086s ago: executing program 5 (id=2117):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x3)

3m2.321342436s ago: executing program 5 (id=2124):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'geneve0\x00', 0x112})
r0 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100)

3m2.102666629s ago: executing program 5 (id=2127):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x14, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcaf}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x30}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m1.980010258s ago: executing program 5 (id=2130):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f00000002c0)=ANY=[@ANYBLOB='iocharset=koi8-u,discard=0x0000000000000004,iocharset=iso8859-9,discard,iocharset=koi8-ru,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c6e6f646973636172642c696f636861727365743d69736f383835392d332c005d245603bb5b494e31b3e32f7a4536f7389f889613f9bebfad670d9c5b69025afa2ed8a0983033c21a066b886aded885e0be89c3a88225b41e870229bff872d594d5a79ca2a73ae38725a8a4251c102dd8a175ce9f42f974c650e3f4d216c776b32d707119113d826189e7cc3f2b74b5191cce0209a7c007d15932d18b9ea2f49c0c2b7395277707"], 0x24, 0x62d7, &(0x7f0000021240)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

3m1.241369055s ago: executing program 5 (id=2140):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x12, 0xa01, 0x0, 0x25dfdbff, {0x7}}, 0x14}}, 0x0)

2m46.152638932s ago: executing program 34 (id=2140):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x12, 0xa01, 0x0, 0x25dfdbff, {0x7}}, 0x14}}, 0x0)

2m16.230278755s ago: executing program 7 (id=2597):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r1, 0x331, 0x1, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c015}, 0x200480c4)

2m15.926354141s ago: executing program 7 (id=2602):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000080))

2m15.353250563s ago: executing program 7 (id=2607):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc080}, 0x10)

2m14.540124859s ago: executing program 7 (id=2614):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

2m13.35993601s ago: executing program 7 (id=2620):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='&'], 0x10)

2m12.458482304s ago: executing program 7 (id=2628):
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x2, 0x8000}, 0x9, 0x0, &(0x7f0000000040)={{0x51, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x40}})

2m11.648829736s ago: executing program 35 (id=2628):
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x2, 0x8000}, 0x9, 0x0, &(0x7f0000000040)={{0x51, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x40}})

4.602673668s ago: executing program 1 (id=4068):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x400, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=")
syz_mount_image$exfat(0x0, &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80d808, 0x0, 0x1, 0x0, &(0x7f0000000240))
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
lstat(&(0x7f0000000140)='./file1\x00', 0x0)

4.42450352s ago: executing program 6 (id=4069):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdd, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x82, &(0x7f00000003c0), 0x514)

4.253051793s ago: executing program 1 (id=4072):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1fd)
mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004500)={0x2020}, 0x2028)

4.019371377s ago: executing program 1 (id=4074):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1', 0x1)

3.810739657s ago: executing program 1 (id=4076):
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408)

3.523111926s ago: executing program 1 (id=4077):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

2.995065906s ago: executing program 8 (id=4079):
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x32, &(0x7f0000000000)="d9b3e650dfd552d74daa378c851397a623af935b89a0466f6b871ade06971b123f6178d5500085a65cd7951fd147f77a000b")
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

2.709017502s ago: executing program 1 (id=4080):
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0)

2.158230719s ago: executing program 6 (id=4085):
socket$nl_netfilter(0x10, 0x3, 0xc)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006})
mlock(&(0x7f0000007000/0x2000)=nil, 0x2000)

2.098574901s ago: executing program 6 (id=4088):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0xd, 0x6e, &(0x7f0000000080)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0)

1.932101241s ago: executing program 0 (id=4091):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfe247000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
fspick(0xffffffffffffffff, 0x0, 0x1)

1.52520389s ago: executing program 0 (id=4092):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r1, @in6={{0xa, 0x0, 0x0, @dev}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7]}, &(0x7f0000000000)=0x100)

1.2313566s ago: executing program 8 (id=4096):
mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x4)

1.226961294s ago: executing program 6 (id=4107):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./file2\x00', 0x200000, &(0x7f0000000900)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'ascii'}}, {@gid}, {@type={'type', 0x3d, "e481e91c"}}, {@gid}, {@nobarrier}, {@nobarrier}]}, 0xfe, 0x5ea, &(0x7f0000002f00)="$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")
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000080)="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")
mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0)
mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0)

1.141424426s ago: executing program 8 (id=4099):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x3, 0x495, &(0x7f0000000540)="$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")
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)

966.590868ms ago: executing program 6 (id=4100):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x8, 0x101000)
fanotify_mark(r1, 0x39, 0x1a, r0, 0x0)
fanotify_mark(r1, 0x80, 0x1a, 0xffffffffffffffff, 0x0)

961.970348ms ago: executing program 8 (id=4102):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
fcntl$setlease(r0, 0x400, 0x1)
open(&(0x7f0000000040)='./file0\x00', 0x109200, 0x149)
fcntl$setlease(r0, 0x400, 0x0)

845.932443ms ago: executing program 6 (id=4103):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdd, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x82, &(0x7f00000003c0), 0x514)

825.100347ms ago: executing program 4 (id=4104):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x10)
close(r0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

797.152336ms ago: executing program 8 (id=4105):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000002580)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001780)='\"', 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="d6", 0x1}], 0x1}}], 0x3, 0x4000800)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r1, 0x8ec6, 0x10}, 0xc)

715.03184ms ago: executing program 8 (id=4106):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000006040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x84)
write$cgroup_pressure(r0, &(0x7f0000000040)={'some', 0x20, 0x4, 0x20, 0xfffffffffffffffc}, 0x2f)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)

701.625033ms ago: executing program 4 (id=4108):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x40}}, 0x0)

591.975176ms ago: executing program 0 (id=4109):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x36, 0x0, &(0x7f0000000240)="2dd8000071a76d2686dd4c6588a80a38667d2f15638825a1c2e92dd592a8879c57d3d4afd2d68ab5e8eb7063b06cb919062b3862d052", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

577.231945ms ago: executing program 4 (id=4110):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1fd)
mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004500)={0x2020}, 0x2028)

272.6756ms ago: executing program 0 (id=4111):
unshare(0xa000200)
r0 = semget$private(0x0, 0x4000, 0x0)
semtimedop(r0, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}], 0x1, 0x0)
unshare(0x20060400)

205.954405ms ago: executing program 0 (id=4112):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, &(0x7f0000000040))

205.751684ms ago: executing program 4 (id=4113):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

114.804981ms ago: executing program 0 (id=4114):
r0 = msgget$private(0x0, 0x790)
msgrcv(r0, 0x0, 0x0, 0x3, 0x2000)
msgrcv(r0, 0x0, 0x0, 0x1, 0x3000)
msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000000"], 0xc8, 0x0)

70.908962ms ago: executing program 4 (id=4115):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x54, r1, 0x5eae78d9c54e9d3f, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f94b54cce6396c3599431c882366da01"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000001}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)

0s ago: executing program 4 (id=4116):
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x32, &(0x7f0000000000)="d9b3e650dfd552d74daa378c851397a623af935b89a0466f6b871ade06971b123f6178d5500085a65cd7951fd147f77a000b")
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

kernel console output (not intermixed with test programs):

sim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  317.705986][   T38] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.706030][   T38] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.706063][   T38] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.871295][T12846] openvswitch: netlink: Message has 4 unknown bytes.
[  318.138049][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.138085][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.200823][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.200860][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.401879][   T30] audit: type=1326 audit(1786642494.378:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.2630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d279e0d9 code=0x7ffc0000
[  318.431767][   T30] audit: type=1326 audit(1786642494.408:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.2630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d279e0d9 code=0x7ffc0000
[  318.481143][   T30] audit: type=1326 audit(1786642494.458:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.2630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71d279e0d9 code=0x7ffc0000
[  318.511734][   T30] audit: type=1326 audit(1786642494.458:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.2630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d279e0d9 code=0x7ffc0000
[  318.511819][   T30] audit: type=1326 audit(1786642494.458:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.2630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d279e0d9 code=0x7ffc0000
[  318.539039][   T30] audit: type=1326 audit(1786642494.518:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.2630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f71d279e0d9 code=0x7ffc0000
[  318.539090][   T30] audit: type=1326 audit(1786642494.518:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.2630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d279e0d9 code=0x7ffc0000
[  318.539132][   T30] audit: type=1326 audit(1786642494.518:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.2630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d279e0d9 code=0x7ffc0000
[  319.054287][T12887] netlink: 'syz.1.2784': attribute type 5 has an invalid length.
[  319.064937][T12887] netlink: 'syz.1.2784': attribute type 6 has an invalid length.
[  319.093665][T12887] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2784'.
[  319.094187][T12887] netlink: 8454 bytes leftover after parsing attributes in process `syz.1.2784'.
[  319.354497][T12898] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0
[  319.449278][ T5275] 8021q: adding VLAN 0 to HW filter on device eth13
[  319.777676][T12920] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  319.797526][T12921] syz.8.2797 uses obsolete (PF_INET,SOCK_PACKET)
[  319.860627][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2799'.
[  320.218030][T12944] loop4: detected capacity change from 0 to 64
[  320.454197][    T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  320.604275][    T9] usb 9-1: Using ep0 maxpacket: 32
[  320.606296][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  320.606340][    T9] usb 9-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  320.607287][    T9] usb 9-1: config 1 has an invalid interface number: 5 but max is 2
[  320.607307][    T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  320.607324][    T9] usb 9-1: config 1 has 4 interfaces, different from the descriptor's value: 3
[  320.607342][    T9] usb 9-1: config 1 has no interface number 3
[  320.607415][    T9] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  320.607438][    T9] usb 9-1: config 1 interface 1 has no altsetting 0
[  320.609488][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.609510][    T9] usb 9-1: Product: syz
[  320.609522][    T9] usb 9-1: Manufacturer: syz
[  320.609533][    T9] usb 9-1: SerialNumber: syz
[  320.678364][T12957] loop4: detected capacity change from 0 to 1024
[  320.931162][T12962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2811'.
[  321.150335][    T9] usb 9-1: selecting invalid altsetting 0
[  321.151095][    T9] usb 9-1: Audio class v2/v3 interfaces need an interface association
[  321.221507][ T5275] 8021q: adding VLAN 0 to HW filter on device eth14
[  321.972221][    T9] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[  322.022928][T12995] loop8: detected capacity change from 0 to 512
[  322.032614][T12995] EXT4-fs: Ignoring removed i_version option
[  322.087449][T12995] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  322.121199][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  322.124958][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2824'.
[  322.125126][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2824'.
[  322.128787][    T9] usb 9-1: USB disconnect, device number 2
[  322.227148][T12995] EXT4-fs error (device loop8) in ext4_process_orphan:346: Corrupt filesystem
[  322.227195][T12995] loop8: lost filesystem error report for type 5 error -117
[  322.243166][    C0] EXT4-fs (loop8): initial error at time 1786642498: ext4_process_orphan:346
[  322.243229][    C0] EXT4-fs (loop8): last error at time 1786642498: ext4_process_orphan:346
[  322.282167][T12995] EXT4-fs (loop8): 2 truncates cleaned up
[  322.321601][T12995] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.429278][T12995] EXT4-fs error (device loop8): ext4_get_parent:1834: inode #11: comm syz.8.2825: bad parent inode number: 3
[  322.528173][T12399] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.785239][T13013] loop4: detected capacity change from 0 to 256
[  323.408585][ T5275] 8021q: adding VLAN 0 to HW filter on device eth15
[  323.524759][T13037] netlink: 'syz.6.2840': attribute type 3 has an invalid length.
[  323.524804][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2840'.
[  324.297193][T13069] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2851'.
[  324.993168][   T44] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  325.153743][   T44] usb 5-1: New USB device found, idVendor=3344, idProduct=1122, bcdDevice= 0.00
[  325.164533][   T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  325.180437][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.188766][   T44] usb 5-1: Product: syz
[  325.194525][   T44] usb 5-1: Manufacturer: syz
[  325.199308][   T44] usb 5-1: SerialNumber: syz
[  325.432381][   T44] usb 5-1: selecting invalid altsetting 1
[  325.632925][   T44] LME2510(C): Firmware Status: 00 00 00 00 00 00
[  325.633052][   T44] dvb_usb_lmedm04 5-1:1.0: probe with driver dvb_usb_lmedm04 failed with error -22
[  325.660810][   T44] usb 5-1: USB disconnect, device number 22
[  326.230050][T13154] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  326.230098][T13154] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  326.357040][ T5275] 8021q: adding VLAN 0 to HW filter on device eth16
[  326.507400][T13164] vivid-002: =================  START STATUS  =================
[  326.534834][T13164] vivid-002: Radio HW Seek Mode: Bounded
[  326.552476][T13164] vivid-002: Radio Programmable HW Seek: false
[  326.565677][T13164] vivid-002: RDS Rx I/O Mode: Block I/O
[  326.571585][T13164] vivid-002: Generate RBDS Instead of RDS: false
[  326.578265][T13164] vivid-002: RDS Reception: true
[  326.584474][T13164] vivid-002: RDS Program Type: 0 inactive
[  326.591029][T13164] vivid-002: RDS PS Name:  inactive
[  326.596660][T13164] vivid-002: RDS Radio Text:  inactive
[  326.603816][T13164] vivid-002: RDS Traffic Announcement: false inactive
[  326.611696][T13164] vivid-002: RDS Traffic Program: false inactive
[  326.618861][T13164] vivid-002: RDS Music: false inactive
[  326.650405][T13164] vivid-002: ==================  END STATUS  ==================
[  326.835248][T13142] mmap: syz.0.2877 (13142) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  327.073536][   T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  327.223331][   T10] usb 9-1: Using ep0 maxpacket: 32
[  327.225394][   T10] usb 9-1: unable to get BOS descriptor or descriptor too short
[  327.225440][   T10] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  327.226365][   T10] usb 9-1: config 7 has an invalid interface number: 187 but max is 0
[  327.226386][   T10] usb 9-1: config 7 has no interface number 0
[  327.226430][   T10] usb 9-1: config 7 interface 187 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 32
[  327.226452][   T10] usb 9-1: config 7 interface 187 has no altsetting 0
[  327.228325][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.228347][   T10] usb 9-1: Product: syz
[  327.228360][   T10] usb 9-1: Manufacturer: syz
[  327.228373][   T10] usb 9-1: SerialNumber: syz
[  327.241121][T13176] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  327.437268][T13171] loop4: detected capacity change from 0 to 32768
[  327.492228][   T10] usb 9-1: Unknown endpoint type found, address 0x07
[  327.492284][   T10] usb 9-1: Not enough endpoints found in device, aborting!
[  327.576142][T13189] mmap: syz.1.2894 (13189): VmData 37404672 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  327.716533][   T10] usb 9-1: USB disconnect, device number 3
[  328.698682][T13238] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1'
[  328.821844][T13242] bridge0: port 3(batadv1) entered blocking state
[  328.821981][T13242] bridge0: port 3(batadv1) entered disabled state
[  328.822151][T13242] batadv1: entered allmulticast mode
[  328.832254][T13242] batadv1: entered promiscuous mode
[  329.015206][ T5801] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  329.114021][   T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  329.164301][ T5801] usb 2-1: Using ep0 maxpacket: 32
[  329.165031][ T5801] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  329.166187][ T5801] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  329.166214][ T5801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  329.166236][ T5801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  329.166255][ T5801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  329.166276][ T5801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  329.168440][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.168460][ T5801] usb 2-1: Product: syz
[  329.168473][ T5801] usb 2-1: Manufacturer: syz
[  329.168485][ T5801] usb 2-1: SerialNumber: syz
[  329.171296][ T5801] usb 2-1: config 0 descriptor??
[  329.264541][   T10] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  329.266165][   T10] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[  329.266247][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.266273][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.267894][   T10] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  329.267944][   T10] usb 9-1: Manufacturer: syz
[  329.279647][   T10] usb 9-1: config 0 descriptor??
[  329.289273][T10031] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  329.289294][T10031] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  329.309083][   T10] igorplugusb 9-1:0.0: endpoint incorrect
[  329.460010][   T30] audit: type=1326 audit(1786642505.438:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.0.2925" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3559e0d9 code=0x7ffc0000
[  329.463677][   T30] audit: type=1326 audit(1786642505.438:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.0.2925" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3559e0d9 code=0x7ffc0000
[  329.463729][   T30] audit: type=1326 audit(1786642505.438:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.0.2925" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3559e0d9 code=0x7ffc0000
[  329.463766][   T30] audit: type=1326 audit(1786642505.438:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.0.2925" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4a3559e0d9 code=0x7ffc0000
[  329.463826][   T30] audit: type=1326 audit(1786642505.438:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.0.2925" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3559e0d9 code=0x7ffc0000
[  329.463863][   T30] audit: type=1326 audit(1786642505.438:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.0.2925" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3559e0d9 code=0x7ffc0000
[  329.463899][   T30] audit: type=1326 audit(1786642505.438:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.0.2925" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3559e0d9 code=0x7ffc0000
[  329.463956][   T30] audit: type=1326 audit(1786642505.438:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.0.2925" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4a3559e0d9 code=0x7ffc0000
[  329.463993][   T30] audit: type=1326 audit(1786642505.438:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.0.2925" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4a3559e0d9 code=0x7ffc0000
[  329.521592][  T191] usb 9-1: USB disconnect, device number 4
[  329.616347][ T5801] iforce 2-1:0.0: usb_submit_urb failed: -71
[  329.616407][ T5801] input input27: Device does not respond to id packet M
[  329.618181][ T5801] iforce 2-1:0.0: usb_submit_urb failed: -71
[  329.618224][ T5801] input input27: Device does not respond to id packet P
[  329.620279][ T5801] iforce 2-1:0.0: usb_submit_urb failed: -71
[  329.620322][ T5801] input input27: Device does not respond to id packet B
[  329.622400][ T5801] iforce 2-1:0.0: usb_submit_urb failed: -71
[  329.622442][ T5801] input input27: Device does not respond to id packet N
[  329.623450][ T5801] iforce 2-1:0.0: usb_submit_urb failed: -71
[  329.623848][ T5801] iforce 2-1:0.0: usb_submit_urb failed: -71
[  329.624232][ T5801] iforce 2-1:0.0: usb_submit_urb failed: -71
[  329.625540][ T5801] iforce 2-1:0.0: usb_submit_urb failed: -71
[  329.625955][ T5801] iforce 2-1:0.0: usb_submit_urb failed -90
[  329.626192][ T5801] iforce 2-1:0.0: usb_submit_urb failed -90
[  329.751956][ T5801] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input27
[  329.856671][ T5801] usb 2-1: USB disconnect, device number 28
[  330.740551][T13307] openvswitch: netlink: Missing key (keys=40, expected=100)
[  330.984274][T13281] loop6: detected capacity change from 0 to 40427
[  330.991928][T13281] F2FS-fs (loop6): Small segment_count (9 < 1 * 24)
[  330.992378][T13281] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  331.118116][T13281] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  331.162605][T13281] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  331.170428][T13281] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  331.348888][T13330] loop8: detected capacity change from 0 to 2048
[  331.377214][T13330] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  331.419698][T13330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  331.893499][ T5801] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  332.043321][ T5801] usb 2-1: Using ep0 maxpacket: 8
[  332.044348][ T5801] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  332.045707][ T5801] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[  332.045730][ T5801] usb 2-1: config 2 has no interface number 0
[  332.045767][ T5801] usb 2-1: config 2 interface 31 has no altsetting 0
[  332.048687][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.048709][ T5801] usb 2-1: Product: syz
[  332.048722][ T5801] usb 2-1: Manufacturer: syz
[  332.048734][ T5801] usb 2-1: SerialNumber: syz
[  332.087715][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.116404][T13337] loop8: detected capacity change from 0 to 32768
[  332.166353][T13337] JBD2: Ignoring recovery information on journal
[  332.256225][T13337] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  332.397149][T13337] OCFS2: ERROR (device loop8): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71
[  332.397201][T13337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  332.397234][T13337] OCFS2: File system is now read-only.
[  332.397241][T13337] (syz.8.2951,13337,0):ocfs2_reserve_suballoc_bits:972 ERROR: status = -30
[  332.397259][T13337] (syz.8.2951,13337,0):ocfs2_reserve_cluster_bitmap_bits:1255 ERROR: status = -30
[  332.397277][T13337] (syz.8.2951,13337,0):ocfs2_reserve_clusters_with_limit:1324 ERROR: status = -30
[  332.397315][T13337] (syz.8.2951,13337,0):ocfs2_reserve_clusters_with_limit:1337 ERROR: status = -30
[  332.397334][T13337] (syz.8.2951,13337,0):ocfs2_block_group_alloc:795 ERROR: status = -30
[  332.397374][T13337] (syz.8.2951,13337,0):ocfs2_block_group_alloc:880 ERROR: status = -30
[  332.397389][T13337] (syz.8.2951,13337,0):ocfs2_reserve_suballoc_bits:955 ERROR: status = -30
[  332.397406][T13337] (syz.8.2951,13337,0):ocfs2_reserve_suballoc_bits:972 ERROR: status = -30
[  332.397422][T13337] (syz.8.2951,13337,0):ocfs2_reserve_new_metadata_blocks:1112 ERROR: status = -30
[  332.397453][T13337] (syz.8.2951,13337,0):ocfs2_reserve_new_metadata_blocks:1135 ERROR: status = -30
[  332.397472][T13337] (syz.8.2951,13337,0):ocfs2_expand_inline_dir:2930 ERROR: status = -30
[  332.397492][T13337] (syz.8.2951,13337,0):ocfs2_extend_dir:3294 ERROR: status = -30
[  332.397531][T13337] (syz.8.2951,13337,0):ocfs2_prepare_dir_for_insert:4412 ERROR: status = -30
[  332.397550][T13337] (syz.8.2951,13337,0):ocfs2_mknod:303 ERROR: status = -30
[  332.397570][T13337] (syz.8.2951,13337,0):ocfs2_mknod:513 ERROR: status = -30
[  332.397586][T13337] (syz.8.2951,13337,0):ocfs2_mkdir:669 ERROR: status = -30
[  332.518189][T12399] ocfs2: Unmounting device (7,8) on (node local)
[  332.770055][ T5801] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22
[  332.778282][ T5801] usb 2-1: USB disconnect, device number 29
[  332.803323][T13348] loop4: detected capacity change from 0 to 32768
[  332.815538][T13348] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2954 (13348)
[  332.870456][T13348] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  332.870521][T13348] BTRFS info (device loop4): using crc32c checksum algorithm
[  333.006731][T13348] BTRFS info (device loop4): enabling ssd optimizations
[  333.006782][T13348] BTRFS info (device loop4): turning on async discard
[  333.006797][T13348] BTRFS info (device loop4): enabling free space tree
[  333.130477][ T5614] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  333.173997][T13374] loop8: detected capacity change from 0 to 256
[  333.185989][T13374] exfat: Deprecated parameter 'utf8'
[  333.191483][T13374] exfat: Deprecated parameter 'namecase'
[  333.200401][T13374] exfat: Deprecated parameter 'namecase'
[  333.306965][T13374] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  333.807861][T13391] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2962'.
[  334.525301][T13401] loop8: detected capacity change from 0 to 32768
[  334.543087][T13401] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2966 (13401)
[  334.580727][T13401] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  334.580781][T13401] BTRFS info (device loop8): using blake2b checksum algorithm
[  334.797249][T13401] BTRFS info (device loop8): enabling ssd optimizations
[  334.797299][T13401] BTRFS info (device loop8): turning on async discard
[  334.797314][T13401] BTRFS info (device loop8): enabling free space tree
[  334.797329][T13401] BTRFS info (device loop8): use zstd compression, level 3
[  334.926144][   T30] audit: type=1800 audit(1786642510.908:171): pid=13401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2966" name="file1" dev="loop8" ino=260 res=0 errno=0
[  335.104325][T12399] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  335.147040][T13442] bridge0: port 3(batadv1) entered blocking state
[  335.153834][T13442] bridge0: port 3(batadv1) entered disabled state
[  335.160826][T13442] batadv1: entered allmulticast mode
[  335.171638][T13442] batadv1: entered promiscuous mode
[  335.322421][T13448] loop6: detected capacity change from 0 to 1024
[  335.446917][T13448] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  335.447039][T13448] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.643655][   T38] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  335.643687][   T38] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  335.726511][T10542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  336.100770][T13463] loop8: detected capacity change from 0 to 1024
[  336.215049][T13469] virt_wifi0: entered promiscuous mode
[  336.229343][T13469] batman_adv: batadv0: Adding interface: virt_wifi0
[  336.236998][T13469] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  336.266430][T13469] batman_adv: batadv0: Interface activated: virt_wifi0
[  337.260013][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3009'.
[  337.260062][T13510] tipc: Started in network mode
[  337.260108][T13510] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711
[  337.260149][T13510] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  337.413990][T13514] loop6: detected capacity change from 0 to 1024
[  337.419996][T13514] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  337.567951][T13520] loop4: detected capacity change from 0 to 16
[  337.616530][T13520] erofs (device loop4): mounted with root inode @ nid 36.
[  338.254967][    T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  338.405165][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  338.406159][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  338.406183][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  338.406199][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  338.406248][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.407785][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  338.407809][    T9] usb 5-1: Product: syz
[  338.407823][    T9] usb 5-1: Manufacturer: syz
[  338.417852][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  338.417871][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  338.431873][    T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  338.727808][ T5801] usb 5-1: USB disconnect, device number 23
[  339.127208][T13581] loop6: detected capacity change from 0 to 512
[  339.140551][T13581] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  339.199250][T13581] EXT4-fs (loop6): 1 truncate cleaned up
[  339.212012][T13581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.572310][T10542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.891120][T13605] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3042'.
[  339.957446][ T5346] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  340.114517][ T5346] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  340.127402][ T5346] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  340.138362][ T5346] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  340.148823][ T5346] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  340.148873][ T5346] usb 9-1: SerialNumber: syz
[  340.204954][T13618] netlink: 'syz.1.3046': attribute type 29 has an invalid length.
[  340.210949][T13618] netlink: 'syz.1.3046': attribute type 29 has an invalid length.
[  340.394201][ T5346] usb 9-1: 0:2 : does not exist
[  340.505611][ T5346] usb 9-1: USB disconnect, device number 5
[  340.660963][T13634] loop6: detected capacity change from 0 to 1024
[  340.701056][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  340.720125][T13634] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  340.720248][T13634] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  340.787057][   T30] audit: type=1800 audit(1786642516.768:172): pid=13634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3052" name="file1" dev="loop6" ino=15 res=0 errno=0
[  340.815012][T13634] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.3052: lblock 0 mapped to illegal pblock 0 (length 1)
[  340.854882][T13634] EXT4-fs (loop6): Remounting filesystem read-only
[  340.931243][T10542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  341.301150][T13658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3058'.
[  341.396995][T13666] loop8: detected capacity change from 0 to 16
[  341.416020][T13666] erofs (device loop8): mounted with root inode @ nid 36.
[  341.507430][    T9] hid_parser_main: 19 callbacks suppressed
[  341.516833][    T9] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0
[  341.562725][    T9] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0
[  341.599402][    T9] hid-generic 0000:0000:0000.002A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  341.751202][T13676] loop8: detected capacity change from 0 to 64
[  341.943742][T13671] fido_id[13671]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  341.989140][T13686] loop8: detected capacity change from 0 to 128
[  342.132956][T13686] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  342.133059][T13686] hpfs: filesystem error: improperly stopped
[  342.133080][T13686] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  342.133100][T13686] hpfs: You really don't want any checks? You are crazy...
[  342.133113][T13686] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  342.133127][T13686] hpfs: code page support is disabled
[  342.133243][T13686] hpfs: hpfs_map_4sectors(): unaligned read
[  342.133310][T13686] hpfs: hpfs_map_4sectors(): unaligned read
[  342.133322][T13686] hpfs: filesystem error: unable to find root dir
[  342.450603][T13692] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  343.503979][T13740] netlink: 'syz.0.3087': attribute type 1 has an invalid length.
[  343.504030][T13740] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3087'.
[  343.609770][T13744] loop4: detected capacity change from 0 to 512
[  343.620030][T13744] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  343.641522][T13744] EXT4-fs (loop4): 1 truncate cleaned up
[  343.643997][T13744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.047554][T13760] bond1: invalid ARP target 0.0.0.0 specified for addition
[  344.047603][T13760] bond1: option arp_ip_target: invalid value (0)
[  344.166549][T13764] input input28: cannot allocate more than FF_MAX_EFFECTS effects
[  344.347080][T13760] bond1 (unregistering): Released all slaves
[  344.406995][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.827013][T13786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3103'.
[  345.779696][T13818] loop8: detected capacity change from 0 to 1024
[  345.787856][T13818] EXT4-fs: Ignoring removed nomblk_io_submit option
[  345.840263][T13818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.840405][T13818] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.059180][T13818] EXT4-fs error (device loop8): ext4_map_blocks:832: inode #15: comm syz.8.3114: lblock 0 mapped to illegal pblock 0 (length 1)
[  346.101274][T13818] EXT4-fs (loop8): Remounting filesystem read-only
[  346.201242][T12399] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  346.338601][T13842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.664463][T13857] loop6: detected capacity change from 0 to 256
[  346.938610][ T5346] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  347.083661][ T5346] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  347.087118][ T5346] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.087144][ T5346] usb 9-1: Product: syz
[  347.087158][ T5346] usb 9-1: Manufacturer: syz
[  347.087170][ T5346] usb 9-1: SerialNumber: syz
[  347.245035][T13867] loop6: detected capacity change from 0 to 32768
[  347.296729][T13867] non-latin1 character 0x3ff found in JFS file name
[  347.296781][T13867] mount with iocharset=utf8 to access
[  347.763300][ T5346] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO
[  347.802722][ T5346] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  347.803619][ T5346] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  347.803672][ T5346] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  347.860343][ T5346] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  347.990536][ T5346] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71
[  348.009050][T13891] netlink: 'syz.1.3141': attribute type 4 has an invalid length.
[  348.017305][T13891] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3141'.
[  348.034452][ T5346] usb 9-1: USB disconnect, device number 6
[  348.195572][T13897] loop6: detected capacity change from 0 to 4096
[  348.318585][T13894] macvlan2: entered allmulticast mode
[  348.318735][T13894] bridge0: entered allmulticast mode
[  348.318773][T13894] bridge0: entered promiscuous mode
[  348.333669][T13894] bridge0: port 4(macvlan2) entered blocking state
[  348.334996][T13894] bridge0: port 4(macvlan2) entered disabled state
[  348.358525][T13894] bridge0: left allmulticast mode
[  348.376203][T13897] ntfs3(loop6): ino=b, mi_enum_attr
[  348.381594][T13897] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  348.428299][T13897] ntfs3(loop6): Failed to load $Extend (-22).
[  348.435338][T13897] ntfs3(loop6): Failed to initialize $Extend.
[  348.499179][   T44] bridge0: left promiscuous mode
[  348.501964][T13905] smc: net device ip6_vti0 applied user defined pnetid SYZ2
[  349.254178][T13901] loop4: detected capacity change from 0 to 40427
[  349.274014][T13901] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  349.282216][T13901] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  349.354465][   T38] IPVS: starting estimator thread 0...
[  349.444405][T13942] IPVS: using max 36 ests per chain, 86400 per kthread
[  349.452480][T13901] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  349.498336][T13901] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  349.498383][T13901] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  349.903226][    T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  350.015901][T13963] team0: Device wg0 is of different type
[  350.026047][T13963] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  350.054438][    T9] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  350.066693][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.066739][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.066791][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.069657][    T9] usb 9-1: config 0 descriptor??
[  350.594773][    T9] hid-steam 0003:28DE:1142.002B: unknown main item tag 0x0
[  350.594831][    T9] hid-steam 0003:28DE:1142.002B: unknown main item tag 0x0
[  350.594892][    T9] hid-steam 0003:28DE:1142.002B: unknown main item tag 0x0
[  350.594920][    T9] hid-steam 0003:28DE:1142.002B: unknown main item tag 0x0
[  350.594950][    T9] hid-steam 0003:28DE:1142.002B: unknown main item tag 0x0
[  350.649313][    T9] hid-steam 0003:28DE:1142.002B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0
[  350.850423][  T991] usb 9-1: USB disconnect, device number 7
[  351.339665][T14014] loop6: detected capacity change from 0 to 1024
[  351.431667][T14014] hfsplus: bad catalog file entry
[  351.582523][   T38] hfsplus: bad catalog file entry
[  351.603910][T14020] netlink: 'syz.8.3181': attribute type 3 has an invalid length.
[  352.218230][T14042] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3187'.
[  352.358301][T14009] loop4: detected capacity change from 0 to 65536
[  352.359936][T14009] xfs: Deprecated parameter 'ikeep'
[  352.359990][T14009] XFS: ikeep mount option is deprecated.
[  352.405961][T14009] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  352.418494][T14055] loop8: detected capacity change from 0 to 16
[  352.454678][T14055] erofs (device loop8): mounted with root inode @ nid 36.
[  352.534290][T14009] XFS (loop4): Ending clean mount
[  352.701082][ T5614] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  353.042791][  T991] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  353.225636][  T991] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  353.226753][  T991] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  353.226777][  T991] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  353.226888][  T991] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.251646][  T991] spcp8x5 9-1:1.0: SPCP8x5 converter detected
[  353.290638][  T991] usb 9-1: SPCP8x5 converter now attached to ttyUSB0
[  353.772839][ T5738] usb 9-1: USB disconnect, device number 8
[  353.785157][ T5738] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  353.785786][ T5738] spcp8x5 9-1:1.0: device disconnected
[  355.048135][T14122] loop8: detected capacity change from 0 to 32768
[  355.099463][T14122] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  355.179515][T14122] XFS (loop8): Ending clean mount
[  355.206173][T14122] XFS (loop8): Quotacheck needed: Please wait.
[  355.481802][T14122] XFS (loop8): Quotacheck: Done.
[  355.700162][T12399] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  356.667135][T14197] loop4: detected capacity change from 0 to 4096
[  356.691275][T14197] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  356.716025][T14199] loop8: detected capacity change from 0 to 1024
[  356.747411][T14199] EXT4-fs: Ignoring removed orlov option
[  356.799059][T14197] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  356.846078][T14199] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.980109][T12399] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.003727][ T5801] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  357.164087][ T5801] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  357.175494][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.189805][ T5801] usb 2-1: config 0 descriptor??
[  357.201334][ T5801] cp210x 2-1:0.0: cp210x converter detected
[  357.816282][ T5801] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71
[  357.825280][ T5801] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  357.918600][ T5801] usb 2-1: cp210x converter now attached to ttyUSB0
[  357.930042][ T5801] usb 2-1: USB disconnect, device number 30
[  357.946297][ T5801] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  357.957090][ T5801] cp210x 2-1:0.0: device disconnected
[  358.043314][ T5838] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  358.193412][ T5838] usb 5-1: Using ep0 maxpacket: 32
[  358.199240][ T5838] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  358.210385][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.221977][ T5838] usb 5-1: config 0 descriptor??
[  358.238306][ T5838] as10x_usb: device has been detected
[  358.246520][ T5838] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  358.289997][ T5838] usb 5-1: DVB: registering adapter 3 frontend 0 (nBox DVB-T Dongle)...
[  358.330816][ T5838] as10x_usb: error during firmware upload part1
[  358.339013][ T5838] Registered device nBox DVB-T Dongle
[  358.434726][ T5838] usb 5-1: USB disconnect, device number 24
[  358.508052][ T5838] Unregistered device nBox DVB-T Dongle
[  358.514185][ T5838] as10x_usb: device has been disconnected
[  358.954628][T14245] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3259'.
[  358.967037][T14245] netlink: 'syz.0.3259': attribute type 2 has an invalid length.
[  358.981453][T14245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3259'.
[  359.238660][T14256] serio: Serial port ttyS3
[  359.740380][T14265] sd 0:0:1:0: PR command failed: 1026
[  359.747416][T14265] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  359.755656][T14265] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  360.093691][T14275] 9p: Bad value for 'rfdno'
[  360.195904][T14279] kAFS: bad VL server IP address
[  360.329165][T14285] netlink: 'syz.1.3276': attribute type 1 has an invalid length.
[  360.342393][T14285] netlink: 'syz.1.3276': attribute type 2 has an invalid length.
[  360.357414][T14285] netlink: 'syz.1.3276': attribute type 1 has an invalid length.
[  360.366263][T14285] netlink: 'syz.1.3276': attribute type 2 has an invalid length.
[  360.435443][T14288] macvlan0: entered promiscuous mode
[  360.442566][T14288] netlink: 'syz.1.3277': attribute type 1 has an invalid length.
[  360.455349][T14288] netlink: 'syz.1.3277': attribute type 2 has an invalid length.
[  360.604074][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3282'.
[  360.868295][T14303] loop6: detected capacity change from 0 to 1764
[  360.883144][ T5738] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  361.024203][  T991] kernel write not supported for file /sg0 (pid: 991 comm: kworker/1:2)
[  361.037224][ T5738] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  361.041693][ T5738] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.041717][ T5738] usb 9-1: Product: syz
[  361.041730][ T5738] usb 9-1: Manufacturer: syz
[  361.041743][ T5738] usb 9-1: SerialNumber: syz
[  361.046595][ T5738] usb 9-1: config 0 descriptor??
[  361.093661][T14312] loop4: detected capacity change from 0 to 2048
[  361.194842][T14312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  361.333629][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.459477][ T5738] usb 9-1: Firmware: major: 0, minor: 59, hardware type: UNKNOWN (60)
[  361.665166][ T5738] usb 9-1: failed to fetch extended address, random address set
[  361.665221][ T5738] usb 9-1: atusb_probe: initialization failed, error = -524
[  361.665489][ T5738] atusb 9-1:0.0: probe with driver atusb failed with error -524
[  361.697225][ T5738] usb 9-1: USB disconnect, device number 9
[  361.919215][T14342] loop6: detected capacity change from 0 to 1024
[  361.969517][T14342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.203733][T10542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.675413][T14362] batman_adv: batadv0: Adding interface: vlan2
[  362.675460][T14362] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  362.675962][T14362] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  363.166316][T14382] loop4: detected capacity change from 0 to 256
[  363.199462][T14382] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  364.215115][T14384] loop6: detected capacity change from 0 to 40427
[  364.228761][T14384] F2FS-fs (loop6): build fault injection rate: 174
[  364.228799][T14384] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[  364.233865][T14384] F2FS-fs (loop6): invalid crc value
[  364.391110][T14409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3333'.
[  364.401162][T14409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3333'.
[  364.602079][T14384] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  364.682170][T14384] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  364.739556][T14422] netlink: 'syz.1.3337': attribute type 1 has an invalid length.
[  364.739608][T14422] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3337'.
[  364.739649][T14422] netlink: 'syz.1.3337': attribute type 2 has an invalid length.
[  364.850948][T10542] syz-executor: attempt to access beyond end of device
[  364.850948][T10542] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  364.876847][T10542] CPU: 0 UID: 0 PID: 10542 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  364.876880][T10542] Tainted: [L]=SOFTLOCKUP
[  364.876887][T10542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  364.876899][T10542] Call Trace:
[  364.876968][T10542]  <TASK>
[  364.877076][T10542]  dump_stack_lvl+0xe8/0x150
[  364.877205][T10542]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  364.877308][T10542]  f2fs_write_end_bio+0x1211/0x16e0
[  364.877402][T10542]  __submit_merged_bio+0x258/0x6a0
[  364.877423][T10542]  ? rcu_is_watching+0x16/0xb0
[  364.877503][T10542]  __submit_merged_write_cond+0x3c9/0x4e0
[  364.877532][T10542]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  364.877575][T10542]  f2fs_write_data_pages+0x2a27/0x36f0
[  364.877630][T10542]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  364.877652][T10542]  ? is_bpf_text_address+0x26/0x2b0
[  364.877704][T10542]  ? arch_stack_walk+0xfb/0x150
[  364.877761][T10542]  ? add_lock_to_list+0xc7/0x100
[  364.877792][T10542]  ? lockdep_unlock+0x5c/0xd0
[  364.877814][T10542]  ? __lock_acquire+0x14b9/0x2e50
[  364.877855][T10542]  ? do_raw_spin_lock+0x12b/0x2f0
[  364.877888][T10542]  ? do_raw_spin_unlock+0xf5/0x200
[  364.877911][T10542]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  364.877935][T10542]  do_writepages+0x338/0x560
[  364.877982][T10542]  ? do_raw_spin_unlock+0xf5/0x200
[  364.878009][T10542]  filemap_fdatawrite+0x1e9/0x2f0
[  364.878035][T10542]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  364.878103][T10542]  ? do_raw_spin_unlock+0xf5/0x200
[  364.878131][T10542]  f2fs_sync_dirty_inodes+0x30e/0x830
[  364.878203][T10542]  f2fs_write_checkpoint+0xa3d/0x2710
[  364.878228][T10542]  ? __lock_acquire+0x6df/0x2e50
[  364.878278][T10542]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  364.878340][T10542]  ? try_to_wake_up+0x8b6/0x14d0
[  364.878390][T10542]  kill_f2fs_super+0x2dd/0x700
[  364.878427][T10542]  ? __pfx_kill_f2fs_super+0x10/0x10
[  364.878465][T10542]  ? call_rcu+0x64d/0x8b0
[  364.878486][T10542]  ? lockdep_hardirqs_on+0x7b/0x110
[  364.878627][T10542]  deactivate_locked_super+0xbc/0x110
[  364.878670][T10542]  cleanup_mnt+0x3d3/0x460
[  364.878703][T10542]  task_work_run+0x1d9/0x270
[  364.878724][T10542]  ? __pfx_task_work_run+0x10/0x10
[  364.878751][T10542]  exit_to_user_mode_loop+0x204/0x770
[  364.878770][T10542]  ? rcu_is_watching+0x16/0xb0
[  364.878795][T10542]  do_syscall_64+0x328/0x520
[  364.878818][T10542]  ? trace_irq_disable+0x3b/0x140
[  364.878835][T10542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.878873][T10542]  ? clear_bhb_loop+0x70/0xc0
[  364.878897][T10542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.878915][T10542] RIP: 0033:0x7fa0d439f317
[  364.878961][T10542] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  364.878975][T10542] RSP: 002b:00007ffc12a64328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  364.879028][T10542] RAX: 0000000000000000 RBX: 00007fa0d4434474 RCX: 00007fa0d439f317
[  364.879041][T10542] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc12a643e0
[  364.879053][T10542] RBP: 00007ffc12a643e0 R08: 00007ffc12a653e0 R09: 00000000ffffffff
[  364.879064][T10542] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc12a65470
[  364.879075][T10542] R13: 00007fa0d4434474 R14: 00000000000592d2 R15: 00007ffc12a654b0
[  364.879104][T10542]  </TASK>
[  364.915307][   T52] Bluetooth: hci6: command 0x0406 tx timeout
[  364.967842][T10542] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  365.734046][ T5838] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  365.895082][ T5838] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  365.909592][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.918429][ T5838] usb 5-1: Product: syz
[  365.925964][ T5838] usb 5-1: Manufacturer: syz
[  365.930868][ T5838] usb 5-1: SerialNumber: syz
[  366.118603][T14465] tun0: tun_chr_ioctl cmd 1074025680
[  366.267135][   T30] audit: type=1326 audit(1786642542.248:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14468 comm="syz.1.3359" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f319e0d9 code=0x7ffc0000
[  366.269623][   T30] audit: type=1326 audit(1786642542.248:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14468 comm="syz.1.3359" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f319e0d9 code=0x7ffc0000
[  366.269812][   T30] audit: type=1326 audit(1786642542.248:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14468 comm="syz.1.3359" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f319e0d9 code=0x7ffc0000
[  366.282822][   T30] audit: type=1326 audit(1786642542.248:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14468 comm="syz.1.3359" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f319e0d9 code=0x7ffc0000
[  366.283077][   T30] audit: type=1326 audit(1786642542.248:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14468 comm="syz.1.3359" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd4f319e0d9 code=0x7ffc0000
[  366.283334][   T30] audit: type=1326 audit(1786642542.248:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14468 comm="syz.1.3359" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f319e0d9 code=0x7ffc0000
[  366.283534][   T30] audit: type=1326 audit(1786642542.248:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14468 comm="syz.1.3359" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f319e0d9 code=0x7ffc0000
[  366.283918][   T30] audit: type=1326 audit(1786642542.248:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14468 comm="syz.1.3359" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f319e0d9 code=0x7ffc0000
[  366.284175][   T30] audit: type=1326 audit(1786642542.248:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14468 comm="syz.1.3359" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4f315e90e code=0x7ffc0000
[  366.284843][   T30] audit: type=1326 audit(1786642542.248:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14468 comm="syz.1.3359" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f319e0d9 code=0x7ffc0000
[  366.377467][ T5838] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  366.377535][ T5838] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  366.605372][ T5838] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[  366.605448][ T5838] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  366.624452][ T5838] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  366.639618][ T5838] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  366.665931][ T5838] usb 5-1: USB disconnect, device number 25
[  366.834486][T14483] loop8: detected capacity change from 0 to 1024
[  366.867846][T14483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  366.918682][T12399] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  367.474926][T14505] loop8: detected capacity change from 0 to 512
[  367.509548][T14505] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.3374: iget: bad i_size value: 38620345925642
[  367.509608][T14505] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  367.522705][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  367.522731][    C1] EXT4-fs (loop8): initial error at time 1786642543: ext4_orphan_get:1403: inode 15
[  367.522764][    C1] EXT4-fs (loop8): last error at time 1786642543: ext4_orphan_get:1403: inode 15
[  367.552570][T14505] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.3374: couldn't read orphan inode 15 (err -117)
[  367.552603][T14505] loop8: lost filesystem error report for type 5 error -117
[  367.578913][T14505] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  367.764170][T14511] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.3374: bg 0: block 5: invalid block bitmap
[  367.818167][T14514] kvm [14512]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0xfff
[  367.882098][T14511] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28
[  367.905045][T14511] EXT4-fs (loop8): This should not happen!! Data will be lost
[  367.905045][T14511] 
[  367.915585][T14511] EXT4-fs (loop8): Total free blocks count 0
[  367.935965][T14511] EXT4-fs (loop8): Free/Dirty block details
[  367.943467][T14511] EXT4-fs (loop8): free_blocks=0
[  367.949142][T14511] EXT4-fs (loop8): dirty_blocks=532
[  367.954941][T14511] EXT4-fs (loop8): Block reservation details
[  367.961358][T14511] EXT4-fs (loop8): i_reserved_data_blocks=532
[  368.161560][   T38] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 524 with error 28
[  368.512269][T14541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3389'.
[  368.512319][T14541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3389'.
[  368.751944][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3390'.
[  368.766250][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3390'.
[  368.948850][T14534] loop4: detected capacity change from 0 to 32768
[  369.059848][T14534] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  369.110310][T14534] XFS (loop4): Ending clean mount
[  369.489309][ T5614] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  370.181324][T14589] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  370.562396][T14611] program syz.6.3416 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  370.783554][T14622] loop6: detected capacity change from 0 to 1024
[  370.843370][T14622] hfsplus: xattr search failed
[  370.996550][T14624] hfsplus: xattr search failed
[  371.227903][T14633] loop8: detected capacity change from 0 to 512
[  371.258488][T14633] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #11: comm syz.8.3424: ea_inode with extended attributes
[  371.258553][T14633] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  371.259337][T14633] EXT4-fs (loop8): Remounting filesystem read-only
[  371.259517][T14633] EXT4-fs (loop8): 1 orphan inode deleted
[  371.261599][T14633] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  371.536962][T12399] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.941501][T14682] loop8: detected capacity change from 0 to 256
[  373.407890][T14687] vhci_hcd: not connected 4
[  373.507232][T14693] MTRR 1 not used
[  373.568190][T14697] loop4: detected capacity change from 0 to 1024
[  373.578582][T14697] EXT4-fs: Ignoring removed orlov option
[  373.615367][T14697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  373.695825][T14702] loop8: detected capacity change from 0 to 4096
[  373.754467][T14706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3456'.
[  373.819292][T14707] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  373.821702][T14702] NILFS error (device loop8): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  373.822460][T14702] NILFS (loop8): mounting fs with errors
[  373.916953][T14702] NILFS (loop8): DAT doesn't have a block to manage vblocknr = 159744
[  373.927603][T14702] NILFS error (device loop8): nilfs_bmap_truncate: broken bmap (inode number=15)
[  373.938941][T14709] netlink: 'syz.0.3457': attribute type 1 has an invalid length.
[  373.938965][T14709] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3457'.
[  373.960982][T14702] NILFS (loop8): error -5 truncating bmap (ino=15)
[  373.962316][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.133482][T14717] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  374.133656][T14717] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  374.550304][T14739] openvswitch: netlink: IP tunnel TTL not specified.
[  374.550363][T14739] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  374.590502][T14740] loop8: detected capacity change from 0 to 1024
[  374.603708][T14740] EXT4-fs: Ignoring removed orlov option
[  374.671985][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3473'.
[  374.672388][T14740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.697075][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3473'.
[  374.733557][   T61] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  374.734855][   T38] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  374.734894][   T38] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  374.734946][   T38] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  374.960028][T12399] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.074883][T14761] netlink: 'syz.0.3481': attribute type 30 has an invalid length.
[  375.436099][T14774] input: syz1 as /devices/virtual/input/input31
[  375.552805][T14782] loop6: detected capacity change from 0 to 1024
[  375.576056][T14782] EXT4-fs: Ignoring removed orlov option
[  375.610786][T14782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.921169][T10542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.187099][T14796] loop4: detected capacity change from 0 to 2048
[  376.198437][T14796] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  376.199078][T14796] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  376.201121][T14796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  376.325802][T14802] netlink: 'syz.8.3498': attribute type 1 has an invalid length.
[  376.339719][T14802] netlink: 232 bytes leftover after parsing attributes in process `syz.8.3498'.
[  376.390432][T14802] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3498'.
[  377.859537][T14843] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3517'.
[  378.038964][T14849] loop4: detected capacity change from 0 to 1024
[  378.142995][T14849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  378.181160][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  378.197306][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  378.197358][   T30] audit: type=1800 audit(1786642554.178:195): pid=14849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3520" name="file1" dev="loop4" ino=15 res=0 errno=0
[  378.465882][T14849] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.3520: missing EA_INODE flag
[  378.483478][T14849] EXT4-fs (loop4): Remounting filesystem read-only
[  378.782739][ T5346] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  378.830212][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.048661][ T5346] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  379.060541][ T5346] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  379.060570][ T5346] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  379.060591][ T5346] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  379.080483][ T5346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.080509][ T5346] usb 2-1: Product: syz
[  379.080522][ T5346] usb 2-1: Manufacturer: syz
[  379.080535][ T5346] usb 2-1: SerialNumber: syz
[  379.095362][ T5346] hub 2-1:1.0: bad descriptor, ignoring hub
[  379.095390][ T5346] hub 2-1:1.0: probe with driver hub failed with error -5
[  379.120961][   T30] audit: type=1326 audit(1786642555.098:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.3527" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce19e0d9 code=0x7ffc0000
[  379.124357][   T30] audit: type=1326 audit(1786642555.098:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.3527" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce19e0d9 code=0x7ffc0000
[  379.126399][   T30] audit: type=1326 audit(1786642555.108:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.3527" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce19e0d9 code=0x7ffc0000
[  379.126674][   T30] audit: type=1326 audit(1786642555.108:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.3527" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f49ce19e0d9 code=0x7ffc0000
[  379.126854][   T30] audit: type=1326 audit(1786642555.108:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.3527" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce19e0d9 code=0x7ffc0000
[  379.171604][   T30] audit: type=1326 audit(1786642555.148:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.3527" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce19e0d9 code=0x7ffc0000
[  379.176051][   T30] audit: type=1326 audit(1786642555.158:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14872 comm="syz.4.3527" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f49ce15e90e code=0x7ffc0000
[  379.176368][   T30] audit: type=1326 audit(1786642555.158:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.3527" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce19e0d9 code=0x7ffc0000
[  379.268498][   T30] audit: type=1326 audit(1786642555.248:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.3527" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce19e0d9 code=0x7ffc0000
[  379.403474][ T5346] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  379.680025][ T5346] usb 2-1: reset high-speed USB device number 31 using dummy_hcd
[  379.742845][ T5346] usb 2-1: device reset changed ep0 maxpacket size!
[  379.790622][ T5346] usb 2-1: USB disconnect, device number 31
[  379.805485][ T5346] usblp0: removed
[  379.874594][    T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  380.023535][    T9] usb 9-1: Using ep0 maxpacket: 16
[  380.024269][    T9] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  380.025676][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.036990][    T9] usb 9-1: config 0 descriptor??
[  380.045314][    T9] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  380.150209][ T5346] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  380.271697][T14876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.272289][T14876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.292252][T14876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.376014][T14876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.387126][    T9] usb 9-1: Detected FT232B
[  380.514013][ T5346] usb 2-1: Using ep0 maxpacket: 16
[  380.601567][ T5346] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  380.609820][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  380.610281][    T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  380.617857][ T5346] usb 2-1: config 0 has no interfaces?
[  380.620282][    T9] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  380.629461][    T9] usb 9-1: USB disconnect, device number 10
[  380.651661][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  380.652228][    T9] ftdi_sio 9-1:0.0: device disconnected
[  380.682872][ T5346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.682904][ T5346] usb 2-1: Product: syz
[  380.682933][ T5346] usb 2-1: Manufacturer: syz
[  380.682950][ T5346] usb 2-1: SerialNumber: syz
[  380.688233][ T5346] usb 2-1: config 0 descriptor??
[  380.915312][ T5801] usb 2-1: USB disconnect, device number 32
[  381.552456][T14806] Set syz0 is full, maxelem 65536 reached
[  382.495870][T14948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3563'.
[  382.495904][T14948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3563'.
[  382.547457][T14944] loop6: detected capacity change from 0 to 32768
[  383.572410][T14988] loop8: detected capacity change from 0 to 1024
[  383.588697][T14988] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  384.105387][T15006] loop6: detected capacity change from 0 to 8
[  384.252165][T15008] netlink: 'syz.1.3589': attribute type 12 has an invalid length.
[  384.252203][T15008] netlink: 'syz.1.3589': attribute type 29 has an invalid length.
[  384.252232][T15008] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3589'.
[  384.252267][T15008] netlink: 'syz.1.3589': attribute type 3 has an invalid length.
[  384.252284][T15008] netlink: 'syz.1.3589': attribute type 2 has an invalid length.
[  384.252298][T15008] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3589'.
[  384.302487][T15001] loop4: detected capacity change from 0 to 32768
[  384.379939][T15001] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  384.379991][T15001] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  384.527157][T15001] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  384.537724][ T5801] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  384.537768][ T5801] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  384.644858][T15012] loop9: detected capacity change from 0 to 7
[  384.776925][T15019] netlink: 'syz.0.3592': attribute type 6 has an invalid length.
[  384.830001][T15012] Dev loop9: unable to read RDB block 7
[  384.830122][T15012]  loop9: unable to read partition table
[  384.830321][T15012] loop9: partition table beyond EOD, truncated
[  384.830358][T15012] loop_reread_partitions: partition scan of loop9 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  385.178939][ T5801] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 641ms
[  385.211105][ T5801] gfs2: fsid=syz:syz.0: jid=0: Done
[  385.213993][T15001] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  385.322904][ T5346] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  385.494141][ T5346] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  385.509677][ T5346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  385.509758][ T5346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.532076][ T5346] usb 2-1: config 0 descriptor??
[  385.538929][T15027] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  385.989476][ T5346] uclogic 0003:5543:0064.002C: unknown main item tag 0x0
[  386.001266][ T5346] uclogic 0003:5543:0064.002C: unknown main item tag 0x0
[  386.010018][ T5346] uclogic 0003:5543:0064.002C: unknown main item tag 0x0
[  386.017546][ T5346] uclogic 0003:5543:0064.002C: unknown main item tag 0x0
[  386.024832][ T5346] uclogic 0003:5543:0064.002C: unknown main item tag 0x0
[  386.032146][ T5346] uclogic 0003:5543:0064.002C: unknown main item tag 0x0
[  386.039819][ T5346] uclogic 0003:5543:0064.002C: unknown main item tag 0x0
[  386.047172][ T5346] uclogic 0003:5543:0064.002C: unknown main item tag 0x0
[  386.057986][ T5346] uclogic 0003:5543:0064.002C: unknown main item tag 0x0
[  386.065610][ T5346] uclogic 0003:5543:0064.002C: unknown main item tag 0x0
[  386.075338][ T5346] uclogic 0003:5543:0064.002C: unexpected long global item
[  386.084738][ T5346] uclogic 0003:5543:0064.002C: parse failed
[  386.094183][ T5346] uclogic 0003:5543:0064.002C: probe with driver uclogic failed with error -22
[  386.166079][ T5838] usb 2-1: USB disconnect, device number 33
[  386.519845][T15063] loop4: detected capacity change from 0 to 128
[  386.570591][T15063] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  386.585978][T15063] ext4 filesystem being mounted at /780/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  386.644527][ T5614] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  386.902806][T15078] program syz.8.3617 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  387.106642][T15087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3621'.
[  387.482557][ T5801] hid-generic 0000:0000:0000.002D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  387.748513][T15109] program syz.4.3630 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  388.940186][T15129] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  389.330091][T15141] nlmon0: entered promiscuous mode
[  389.337406][T15140] nlmon0: left promiscuous mode
[  389.381464][T15147] program syz.8.3648 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  389.405575][T15144] loop4: detected capacity change from 0 to 2048
[  389.416591][T15145] loop6: detected capacity change from 0 to 512
[  389.419660][T15144] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  389.420118][T15144] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  389.421685][T15144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  389.885385][T15160] i2c i2c-0: new_device: Missing parameters
[  390.045217][T15165] loop6: detected capacity change from 0 to 512
[  390.107555][T15165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.120803][T15165] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  390.167955][T15170] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  390.283095][T10542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.463216][T15176] loop4: detected capacity change from 0 to 512
[  390.475604][T15176] EXT4-fs (loop4): Test dummy encryption mode enabled
[  390.494010][T15176] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.3658: bg 0: block 7: invalid block bitmap
[  390.494057][T15176] loop4: lost filesystem error report for type 5 error -117
[  390.512970][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  390.512995][    C0] EXT4-fs (loop4): initial error at time 1786642566: ext4_validate_block_bitmap:436
[  390.513019][    C0] EXT4-fs (loop4): last error at time 1786642566: ext4_validate_block_bitmap:436
[  390.585719][T15176] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  390.585761][T15176] loop4: lost filesystem error report for type 5 error -117
[  390.600548][T15176] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #11: comm syz.4.3658: corrupted xattr block 95: invalid header
[  390.600664][T15176] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  390.623968][T15176] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117)
[  390.654223][T15176] EXT4-fs (loop4): 1 orphan inode deleted
[  390.663551][T15176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  390.720431][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  390.720474][   T30] audit: type=1800 audit(1786642566.698:212): pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3658" name="file1" dev="loop4" ino=15 res=0 errno=0
[  390.728208][   T30] audit: type=1800 audit(1786642566.708:213): pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3658" name="file1" dev="loop4" ino=15 res=0 errno=0
[  390.747470][T15179] loop6: detected capacity change from 0 to 8192
[  390.760223][T15179] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  390.910480][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.380549][T15203] netlink: 'syz.1.3670': attribute type 12 has an invalid length.
[  391.380594][T15203] netlink: 'syz.1.3670': attribute type 29 has an invalid length.
[  391.380621][T15203] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3670'.
[  391.950032][T15221] pimreg1: tun_chr_ioctl cmd 1074025677
[  391.950184][T15221] pimreg1: linktype set to 774
[  392.111241][T15215] loop4: detected capacity change from 0 to 32768
[  392.159183][T15215] JBD2: Ignoring recovery information on journal
[  392.194277][ T5346] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  392.347826][ T5346] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  392.347890][ T5346] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  392.348980][ T5346] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  392.349024][ T5346] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  392.349048][ T5346] usb 2-1: config 0 interface 0 has no altsetting 0
[  392.349954][ T5346] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  392.349994][ T5346] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  392.350016][ T5346] usb 2-1: config 0 interface 0 has no altsetting 0
[  392.351049][ T5346] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  392.351090][ T5346] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  392.351112][ T5346] usb 2-1: config 0 interface 0 has no altsetting 0
[  392.351990][ T5346] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  392.352029][ T5346] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  392.352051][ T5346] usb 2-1: config 0 interface 0 has no altsetting 0
[  392.353411][ T5346] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  392.353452][ T5346] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  392.353476][ T5346] usb 2-1: config 0 interface 0 has no altsetting 0
[  392.354927][ T5346] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  392.354967][ T5346] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  392.354990][ T5346] usb 2-1: config 0 interface 0 has no altsetting 0
[  392.361659][ T5346] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  392.361705][ T5346] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  392.361738][ T5346] usb 2-1: config 0 interface 0 has no altsetting 0
[  392.363087][ T5346] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  392.363129][ T5346] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  392.363152][ T5346] usb 2-1: config 0 interface 0 has no altsetting 0
[  392.371389][ T5346] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  392.371415][ T5346] usb 2-1: Product: syz
[  392.371428][ T5346] usb 2-1: Manufacturer: syz
[  392.371440][ T5346] usb 2-1: SerialNumber: syz
[  392.379572][ T5346] usb 2-1: config 0 descriptor??
[  392.488379][T15215] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  392.497735][ T5346] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  392.713180][    C1] usb 2-1: yurex_control_callback - control failed: -71
[  392.718396][ T5346] usb 2-1: USB disconnect, device number 34
[  392.772456][ T5346] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  392.856935][ T5614] ocfs2: Unmounting device (7,4) on (node local)
[  392.903730][T15246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.966186][T15248] loop8: detected capacity change from 0 to 128
[  393.008336][T15248] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  393.024097][T15248] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  393.117749][T12399] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  393.518343][T15268] loop4: detected capacity change from 0 to 256
[  393.533179][T15268] exfat: Deprecated parameter 'namecase'
[  393.539775][T15268] exfat: Deprecated parameter 'utf8'
[  393.555492][T15268] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  393.807803][T15279] loop4: detected capacity change from 0 to 256
[  394.067319][T15288] program syz.1.3709 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  394.800520][T15315] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3720'.
[  395.114710][   T44] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  395.269149][   T44] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  395.272117][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.272141][   T44] usb 2-1: Product: syz
[  395.272154][   T44] usb 2-1: Manufacturer: syz
[  395.272167][   T44] usb 2-1: SerialNumber: syz
[  395.274870][   T44] usb 2-1: config 0 descriptor??
[  395.405157][ T5801] kernel read not supported for file /mdstat (pid: 5801 comm: kworker/0:6)
[  395.485992][   T44] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  395.773063][T15346] loop4: detected capacity change from 0 to 512
[  395.791065][T15344] loop8: detected capacity change from 0 to 8192
[  395.810571][T15346] EXT4-fs (loop4): Test dummy encryption mode enabled
[  395.810609][T15346] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  395.861791][T15346] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.3734: bad orphan inode 131072
[  395.861839][T15346] loop4: lost filesystem error report for type 5 error -117
[  395.872895][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  395.872918][    C0] EXT4-fs (loop4): initial error at time 1786642571: ext4_orphan_get:1429
[  395.872937][    C0] EXT4-fs (loop4): last error at time 1786642571: ext4_orphan_get:1429
[  395.920040][T15346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  395.957601][T15346] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  395.997055][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.096837][   T44] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  396.110293][   T44] usb 2-1: USB disconnect, device number 35
[  396.821797][    T9] kernel write not supported for file 1686/net/vlan/vlan0 (pid: 9 comm: kworker/0:0)
[  397.170298][T15372] loop4: detected capacity change from 0 to 128
[  397.189265][T15372] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  397.303786][T15372] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  397.340444][T15372] FAT-fs (loop4): Filesystem has been set read-only
[  397.624062][T15386] loop6: detected capacity change from 0 to 512
[  397.814778][T15386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.829035][T15386] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  397.935574][T15392] program syz.8.3753 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  398.231557][T15401] netlink: 'syz.8.3757': attribute type 9 has an invalid length.
[  398.242028][T15401] netlink: 16166 bytes leftover after parsing attributes in process `syz.8.3757'.
[  398.271574][T10542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.384564][T15407] loop8: detected capacity change from 0 to 256
[  398.392290][T15407] exfat: Deprecated parameter 'namecase'
[  398.399692][T15407] exfat: Deprecated parameter 'utf8'
[  398.440589][T15407] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  398.751486][T15384] loop4: detected capacity change from 0 to 40427
[  398.760843][T15384] F2FS-fs: heap/no_heap options were deprecated
[  398.764090][T15384] F2FS-fs (loop4): build fault injection rate: 19
[  398.764111][T15384] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  398.764952][T15384] F2FS-fs (loop4): invalid crc value
[  398.786230][T15384] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9a1/0x1820
[  399.028560][T15384] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  399.089199][T15384] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  399.207640][T15384] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  399.221377][T15434] pimreg: tun_chr_ioctl cmd 2147767520
[  399.228931][T15384] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  399.255853][T15384] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0
[  399.337037][T15384] F2FS-fs (loop4): inject truncate fail in f2fs_truncate of f2fs_evict_inode+0xb49/0x21f0
[  399.474261][ T5614] syz-executor: attempt to access beyond end of device
[  399.474261][ T5614] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  399.493432][ T5614] CPU: 1 UID: 0 PID: 5614 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  399.493465][ T5614] Tainted: [L]=SOFTLOCKUP
[  399.493472][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  399.493484][ T5614] Call Trace:
[  399.493492][ T5614]  <TASK>
[  399.493501][ T5614]  dump_stack_lvl+0xe8/0x150
[  399.493533][ T5614]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  399.493561][ T5614]  f2fs_write_end_bio+0x1211/0x16e0
[  399.493600][ T5614]  ? blkg_put+0x22/0x240
[  399.493714][ T5614]  __submit_merged_bio+0x258/0x6a0
[  399.493735][ T5614]  ? rcu_is_watching+0x16/0xb0
[  399.493761][ T5614]  f2fs_submit_merged_write+0x27d/0x380
[  399.493787][ T5614]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  399.493824][ T5614]  f2fs_sync_node_pages+0x1055/0x1210
[  399.493868][ T5614]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  399.493938][ T5614]  f2fs_write_checkpoint+0xf91/0x2710
[  399.493964][ T5614]  ? __lock_acquire+0x6df/0x2e50
[  399.494018][ T5614]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  399.494083][ T5614]  ? try_to_wake_up+0x8b6/0x14d0
[  399.494123][ T5614]  kill_f2fs_super+0x2dd/0x700
[  399.494160][ T5614]  ? __pfx_kill_f2fs_super+0x10/0x10
[  399.494200][ T5614]  ? call_rcu+0x64d/0x8b0
[  399.494221][ T5614]  ? lockdep_hardirqs_on+0x7b/0x110
[  399.494265][ T5614]  deactivate_locked_super+0xbc/0x110
[  399.494289][ T5614]  cleanup_mnt+0x3d3/0x460
[  399.494317][ T5614]  task_work_run+0x1d9/0x270
[  399.494340][ T5614]  ? __pfx_task_work_run+0x10/0x10
[  399.494367][ T5614]  exit_to_user_mode_loop+0x204/0x770
[  399.494385][ T5614]  ? rcu_is_watching+0x16/0xb0
[  399.494410][ T5614]  do_syscall_64+0x328/0x520
[  399.494428][ T5614]  ? trace_irq_disable+0x3b/0x140
[  399.494445][ T5614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.494465][ T5614]  ? clear_bhb_loop+0x70/0xc0
[  399.494488][ T5614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.494506][ T5614] RIP: 0033:0x7f49ce19f317
[  399.494525][ T5614] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  399.494539][ T5614] RSP: 002b:00007ffec801f8a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  399.494559][ T5614] RAX: 0000000000000000 RBX: 00007f49ce234474 RCX: 00007f49ce19f317
[  399.494572][ T5614] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec801f960
[  399.494591][ T5614] RBP: 00007ffec801f960 R08: 00007ffec8020960 R09: 00000000ffffffff
[  399.494604][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec80209f0
[  399.494614][ T5614] R13: 00007f49ce234474 R14: 00000000000619d1 R15: 00007ffec8020a30
[  399.494649][ T5614]  </TASK>
[  399.579429][ T5614] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  399.580020][ T5614] CPU: 0 UID: 0 PID: 5614 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  399.580049][ T5614] Tainted: [L]=SOFTLOCKUP
[  399.580056][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  399.580079][ T5614] Call Trace:
[  399.580087][ T5614]  <TASK>
[  399.580095][ T5614]  dump_stack_lvl+0xe8/0x150
[  399.580128][ T5614]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  399.580159][ T5614]  f2fs_write_end_bio+0x1211/0x16e0
[  399.580211][ T5614]  __submit_merged_bio+0x258/0x6a0
[  399.580230][ T5614]  ? rcu_is_watching+0x16/0xb0
[  399.580274][ T5614]  f2fs_submit_merged_write+0x27d/0x380
[  399.580303][ T5614]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  399.580344][ T5614]  f2fs_sync_node_pages+0x1055/0x1210
[  399.580389][ T5614]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  399.580463][ T5614]  f2fs_write_checkpoint+0xf91/0x2710
[  399.580488][ T5614]  ? __lock_acquire+0x6df/0x2e50
[  399.580543][ T5614]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  399.580611][ T5614]  ? try_to_wake_up+0x8b6/0x14d0
[  399.580648][ T5614]  kill_f2fs_super+0x2dd/0x700
[  399.580685][ T5614]  ? __pfx_kill_f2fs_super+0x10/0x10
[  399.580725][ T5614]  ? call_rcu+0x64d/0x8b0
[  399.580745][ T5614]  ? lockdep_hardirqs_on+0x7b/0x110
[  399.580786][ T5614]  deactivate_locked_super+0xbc/0x110
[  399.580809][ T5614]  cleanup_mnt+0x3d3/0x460
[  399.580836][ T5614]  task_work_run+0x1d9/0x270
[  399.580859][ T5614]  ? __pfx_task_work_run+0x10/0x10
[  399.580893][ T5614]  exit_to_user_mode_loop+0x204/0x770
[  399.580912][ T5614]  ? rcu_is_watching+0x16/0xb0
[  399.580935][ T5614]  do_syscall_64+0x328/0x520
[  399.580955][ T5614]  ? trace_irq_disable+0x3b/0x140
[  399.580971][ T5614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.580990][ T5614]  ? clear_bhb_loop+0x70/0xc0
[  399.581011][ T5614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.581027][ T5614] RIP: 0033:0x7f49ce19f317
[  399.581045][ T5614] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  399.581056][ T5614] RSP: 002b:00007ffec801f8a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  399.581082][ T5614] RAX: 0000000000000000 RBX: 00007f49ce234474 RCX: 00007f49ce19f317
[  399.581093][ T5614] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec801f960
[  399.581103][ T5614] RBP: 00007ffec801f960 R08: 00007ffec8020960 R09: 00000000ffffffff
[  399.581115][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec80209f0
[  399.581126][ T5614] R13: 00007f49ce234474 R14: 00000000000619d1 R15: 00007ffec8020a30
[  399.581157][ T5614]  </TASK>
[  399.594224][ T5614] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  399.594324][ T5614] CPU: 0 UID: 0 PID: 5614 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  399.594350][ T5614] Tainted: [L]=SOFTLOCKUP
[  399.594357][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  399.594367][ T5614] Call Trace:
[  399.594376][ T5614]  <TASK>
[  399.594384][ T5614]  dump_stack_lvl+0xe8/0x150
[  399.594416][ T5614]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  399.594447][ T5614]  f2fs_write_end_bio+0x1211/0x16e0
[  399.594508][ T5614]  __submit_merged_bio+0x258/0x6a0
[  399.594528][ T5614]  ? rcu_is_watching+0x16/0xb0
[  399.594557][ T5614]  f2fs_submit_merged_write+0x27d/0x380
[  399.594585][ T5614]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  399.594627][ T5614]  f2fs_sync_node_pages+0x1055/0x1210
[  399.594673][ T5614]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  399.594746][ T5614]  f2fs_write_checkpoint+0xf91/0x2710
[  399.594774][ T5614]  ? __lock_acquire+0x6df/0x2e50
[  399.594829][ T5614]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  399.594906][ T5614]  ? try_to_wake_up+0x8b6/0x14d0
[  399.594944][ T5614]  kill_f2fs_super+0x2dd/0x700
[  399.594980][ T5614]  ? __pfx_kill_f2fs_super+0x10/0x10
[  399.595019][ T5614]  ? call_rcu+0x64d/0x8b0
[  399.595040][ T5614]  ? lockdep_hardirqs_on+0x7b/0x110
[  399.595080][ T5614]  deactivate_locked_super+0xbc/0x110
[  399.595099][ T5614]  cleanup_mnt+0x3d3/0x460
[  399.595124][ T5614]  task_work_run+0x1d9/0x270
[  399.595148][ T5614]  ? __pfx_task_work_run+0x10/0x10
[  399.595179][ T5614]  exit_to_user_mode_loop+0x204/0x770
[  399.595198][ T5614]  ? rcu_is_watching+0x16/0xb0
[  399.595224][ T5614]  do_syscall_64+0x328/0x520
[  399.595247][ T5614]  ? trace_irq_disable+0x3b/0x140
[  399.595264][ T5614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.595283][ T5614]  ? clear_bhb_loop+0x70/0xc0
[  399.595306][ T5614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.595325][ T5614] RIP: 0033:0x7f49ce19f317
[  399.595343][ T5614] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  399.595357][ T5614] RSP: 002b:00007ffec801f8a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  399.595377][ T5614] RAX: 0000000000000000 RBX: 00007f49ce234474 RCX: 00007f49ce19f317
[  399.595389][ T5614] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec801f960
[  399.595400][ T5614] RBP: 00007ffec801f960 R08: 00007ffec8020960 R09: 00000000ffffffff
[  399.595411][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec80209f0
[  399.595422][ T5614] R13: 00007f49ce234474 R14: 00000000000619d1 R15: 00007ffec8020a30
[  399.595456][ T5614]  </TASK>
[  399.596507][ T5614] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  400.172823][    T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  400.323588][    T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  400.324775][    T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  400.324797][    T9] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  400.324813][    T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  400.324852][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  400.324875][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  400.327610][    T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  400.327632][    T9] usb 9-1: Product: syz
[  400.327645][    T9] usb 9-1: Manufacturer: syz
[  400.336792][    T9] cdc_wdm 9-1:1.0: skipping garbage
[  400.336811][    T9] cdc_wdm 9-1:1.0: skipping garbage
[  400.398473][    T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  400.398560][    T9] cdc_wdm 9-1:1.0: Unknown control protocol
[  400.808451][ T5801] usb 9-1: USB disconnect, device number 11
[  400.885793][T15449] Invalid ELF header magic: != ELF
[  400.913829][    T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  401.072835][    T9] usb 2-1: Using ep0 maxpacket: 8
[  401.078967][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  401.091550][    T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  401.091615][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  401.091643][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  401.091667][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  401.091692][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  401.091714][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  401.091756][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.318116][T15478] sctp: [Deprecated]: syz.0.3790 (pid 15478) Use of struct sctp_assoc_value in delayed_ack socket option.
[  401.318116][T15478] Use struct sctp_sack_info instead
[  401.391601][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  401.391664][    T9] usbtmc 2-1:16.0: can't read capabilities
[  401.443962][T15480] loop8: detected capacity change from 0 to 16
[  401.490098][T15480] erofs (device loop8): mounted with root inode @ nid 36.
[  401.504573][T15482] overlayfs: invalid origin (0000)
[  401.697214][ T5801] usb 2-1: USB disconnect, device number 36
[  401.778010][T15489] loop8: detected capacity change from 0 to 512
[  401.812260][T15489] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.833769][T15489] ext4 filesystem being mounted at /216/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  401.949089][T12399] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.044540][T15498] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3797'.
[  402.127279][T15498] bond0 (unregistering): Released all slaves
[  402.773814][ T5801] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  402.933369][ T5801] usb 9-1: Using ep0 maxpacket: 16
[  402.939229][ T5801] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  402.949905][ T5801] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.979196][ T5801] usb 9-1: config 0 descriptor??
[  402.988220][ T5801] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  403.199994][ T5801] usb 9-1: Detected FT232B
[  403.400726][ T5801] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  403.413721][ T5801] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  403.629358][ T5838] usb 9-1: USB disconnect, device number 12
[  403.656449][ T5838] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  403.666590][ T5838] ftdi_sio 9-1:0.0: device disconnected
[  403.783075][   T44] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  403.945538][   T44] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  403.950985][   T44] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  403.951013][   T44] usb 5-1: config 0 has no interface number 0
[  403.956576][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.956601][   T44] usb 5-1: Product: syz
[  403.956614][   T44] usb 5-1: Manufacturer: syz
[  403.956626][   T44] usb 5-1: SerialNumber: syz
[  403.959490][   T44] usb 5-1: config 0 descriptor??
[  403.969513][   T44] usb 5-1: selecting invalid altsetting 1
[  404.045924][   T44] dvb_ttusb_budget: ttusb_init_controller: error
[  404.045964][   T44] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  404.299707][   T44] DVB: Unable to find symbol stv0299_attach()
[  404.461113][   T44] DVB: Unable to find symbol tda8083_attach()
[  404.461148][   T44] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  404.468754][   T44] usb 5-1: USB disconnect, device number 26
[  405.022553][T15586] loop8: detected capacity change from 0 to 32768
[  405.069928][T15586] 
[  405.069928][T15586]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.069928][T15586] 
[  405.105485][T15586] ERROR: (device loop8): diWrite: ixpxd invalid
[  405.105485][T15586] 
[  405.108570][T15586] ERROR: (device loop8): txCommit: 
[  405.108570][T15586] 
[  405.136498][T15586] ERROR: (device loop8): dtSearch: stack overrun!
[  405.136498][T15586] 
[  405.136555][T15586] btstack dump:
[  405.136579][T15586] bn = 0, index = 0
[  405.136593][T15586] bn = 0, index = 0
[  405.136604][T15586] bn = 0, index = 0
[  405.136616][T15586] bn = 0, index = 0
[  405.136627][T15586] bn = 0, index = 0
[  405.136639][T15586] bn = 0, index = 0
[  405.136650][T15586] bn = 0, index = 0
[  405.136662][T15586] bn = 0, index = 0
[  405.262533][T12399] 
[  405.262533][T12399]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.262533][T12399] 
[  405.264166][T12399] 
[  405.264166][T12399]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.264166][T12399] 
[  405.477755][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3833'.
[  405.477799][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3833'.
[  405.921483][T15600] loop6: detected capacity change from 0 to 32768
[  405.957482][T15600] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3827 (15600)
[  405.994573][T15600] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  405.994685][T15600] BTRFS info (device loop6): using crc32c checksum algorithm
[  406.190673][T15600] BTRFS info (device loop6): enabling ssd optimizations
[  406.190722][T15600] BTRFS info (device loop6): turning on flush-on-commit
[  406.190762][T15600] BTRFS info (device loop6): enabling free space tree
[  406.190776][T15600] BTRFS info (device loop6): enabling auto defrag
[  406.190862][T15600] BTRFS info (device loop6): use lzo compression, level 1
[  406.190882][T15600] BTRFS info (device loop6): max_inline set to 4096
[  406.298765][T15600] BTRFS critical (device loop6 state E): emergency shutdown
[  406.577939][T10542] BTRFS info (device loop6 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  407.013448][T15687] binder: 15686:15687 ioctl 400c620e 200000004e40 returned -22
[  407.299930][T15692] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  407.624964][T15705] xt_TPROXY: Can be used only with -p tcp or -p udp
[  408.698594][T15740] input: syz0 as /devices/virtual/input/input32
[  408.853134][ T5838] usb 9-1: new full-speed USB device number 13 using dummy_hcd
[  409.005800][ T5838] usb 9-1: not running at top speed; connect to a high speed hub
[  409.005849][ T5838] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  409.028968][ T5838] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  409.040234][ T5838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.067485][ T5838] uvcvideo 9-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  409.243402][T15749] loop4: detected capacity change from 0 to 32768
[  409.271544][T15749] JBD2: Ignoring recovery information on journal
[  409.311749][T15749] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  409.387031][T15749] (syz.4.3876,15749,0):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1
[  409.517785][ T5614] ocfs2: Unmounting device (7,4) on (node local)
[  409.713013][    T9] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  409.875652][    T9] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  409.877575][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  409.877604][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  409.877649][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  409.879987][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.880010][    T9] usb 2-1: Product: syz
[  409.880022][    T9] usb 2-1: Manufacturer: syz
[  409.880036][    T9] usb 2-1: SerialNumber: syz
[  409.884176][    T9] usb 2-1: config 0 descriptor??
[  409.894794][T15767] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  409.921640][ T5838] uvcvideo 9-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  409.921762][ T5838] uvcvideo 9-1:1.1: Failed to initialize the device (-71).
[  409.930163][ T5838] uvcvideo 9-1:1.0: probe with driver uvcvideo failed with error -71
[  409.964431][ T5838] usb 9-1: USB disconnect, device number 13
[  410.046433][    T9] rc_core: IR keymap rc-streamzap not found
[  410.046456][    T9] Registered IR keymap rc-empty
[  410.048306][    T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  410.057035][    T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33
[  410.102763][ T5801] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  410.253539][ T5801] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  410.255157][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.255185][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.255204][ T5801] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  410.255242][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.261681][ T5801] usb 5-1: config 0 descriptor??
[  410.315546][ T5838] usb 2-1: USB disconnect, device number 37
[  410.505561][T15787] loop8: detected capacity change from 0 to 16
[  410.513040][T15787] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  410.694222][T15780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.694746][T15780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.698763][ T5801] ortek 0003:1223:3F07.002E: Fixing up logical maximum in report descriptor (Skycable)
[  410.699728][ T5801] hid_parser_main: 118 callbacks suppressed
[  410.699796][ T5801] ortek 0003:1223:3F07.002E: unknown main item tag 0x0
[  410.699826][ T5801] ortek 0003:1223:3F07.002E: unknown main item tag 0x0
[  410.702217][ T5801] ortek 0003:1223:3F07.002E: unknown main item tag 0x1
[  410.702255][ T5801] ortek 0003:1223:3F07.002E: unknown main item tag 0x0
[  410.702280][ T5801] ortek 0003:1223:3F07.002E: unknown main item tag 0x0
[  410.702304][ T5801] ortek 0003:1223:3F07.002E: unknown main item tag 0x0
[  410.702326][ T5801] ortek 0003:1223:3F07.002E: unknown main item tag 0x0
[  410.702350][ T5801] ortek 0003:1223:3F07.002E: unknown main item tag 0x0
[  410.702375][ T5801] ortek 0003:1223:3F07.002E: unknown main item tag 0x0
[  410.702399][ T5801] ortek 0003:1223:3F07.002E: unknown main item tag 0x0
[  410.702513][ T5801] ortek 0003:1223:3F07.002E: unexpected long global item
[  410.703340][ T5801] ortek 0003:1223:3F07.002E: probe with driver ortek failed with error -22
[  410.907336][ T5801] usb 5-1: USB disconnect, device number 27
[  411.000266][T15804] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  411.307658][T15819] sd 0:0:1:0: PR command failed: 1026
[  411.307724][T15819] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  411.307758][T15819] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  411.945474][T15836] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  412.282568][T15827] loop6: detected capacity change from 0 to 32768
[  412.428733][T15827] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  412.475383][T15827] XFS (loop6): Ending clean mount
[  412.659264][T15827] XFS (loop6): Quotacheck needed: Please wait.
[  412.767277][T15827] XFS (loop6): Quotacheck: Done.
[  413.439390][T10542] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  414.002512][T15896] loop8: detected capacity change from 0 to 256
[  414.011604][T15894] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  414.305531][T15906] netlink: 'syz.8.3938': attribute type 3 has an invalid length.
[  414.314029][T15906] netlink: 'syz.8.3938': attribute type 3 has an invalid length.
[  414.567941][T15920] netlink: 'syz.8.3945': attribute type 4 has an invalid length.
[  414.567987][T15920] netlink: 'syz.8.3945': attribute type 8 has an invalid length.
[  414.568024][T15920] netlink: 212 bytes leftover after parsing attributes in process `syz.8.3945'.
[  414.669837][T15924] netlink: 'syz.8.3946': attribute type 11 has an invalid length.
[  414.691600][T15924] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3946'.
[  415.201578][T15951] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  417.333111][  T991] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  417.363275][ T5346] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  417.483706][  T991] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  417.496624][  T991] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  417.496695][  T991] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  417.496716][  T991] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  417.496754][  T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.526080][ T5346] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  417.529308][ T5346] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  417.529338][ T5346] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.529358][ T5346] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  417.529381][ T5346] usb 2-1: config 0 interface 0 has no altsetting 0
[  417.530641][ T5346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.535975][  T991] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected
[  417.541149][  T991] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[  417.541234][  T991] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  417.548056][ T5346] usb 2-1: config 0 descriptor??
[  417.551963][  T991] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  417.560691][  T991] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88
[  417.560781][  T991] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6
[  417.593536][  T991] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  417.800113][T16032] sctp: [Deprecated]: syz.0.3995 (pid 16032) Use of int in max_burst socket option deprecated.
[  417.800113][T16032] Use struct sctp_assoc_value instead
[  417.951198][ T5838] usb 5-1: USB disconnect, device number 28
[  417.963392][ T5838] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  418.017228][ T5838] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  418.018079][ T5838] keyspan 5-1:1.0: device disconnected
[  418.019009][ T5346] input: HID 1532:011d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1532:011D.002F/input/input34
[  418.138519][ T5346] hid-rmi 0003:1532:011D.002F: input,hidraw0: USB HID v0.00 Joystick [HID 1532:011d] on usb-dummy_hcd.1-1/input0
[  418.182418][ T5346] usb 2-1: USB disconnect, device number 38
[  418.230450][ T5611] udevd[5611]: setting mode of /dev/input/js0 to 020664 failed: No such file or directory
[  418.230585][ T5611] udevd[5611]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory
[  418.281381][T16035] fido_id[16035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  418.557548][T16034] loop8: detected capacity change from 0 to 32768
[  418.568243][T16034] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3996 (16034)
[  418.590900][T16034] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  418.590957][T16034] BTRFS info (device loop8): using crc32c checksum algorithm
[  418.728865][T16034] BTRFS info (device loop8): enabling ssd optimizations
[  418.728909][T16034] BTRFS info (device loop8): turning on flush-on-commit
[  418.728940][T16034] BTRFS info (device loop8): enabling free space tree
[  418.728958][T16034] BTRFS info (device loop8): enabling auto defrag
[  418.728978][T16034] BTRFS info (device loop8): use lzo compression, level 1
[  418.729008][T16034] BTRFS info (device loop8): max_inline set to 4096
[  418.784504][T16056] loop4: detected capacity change from 0 to 512
[  418.798146][T16056] EXT4-fs (loop4): invalid journal inode
[  418.809260][T16056] EXT4-fs (loop4): can't get journal size
[  418.825312][T16056] EXT4-fs (loop4): 1 truncate cleaned up
[  418.852213][T16056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  418.958767][T16064] loop6: detected capacity change from 0 to 2048
[  419.008069][T16066] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  419.111655][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.179065][T16066] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  419.179123][T16066] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4)
[  419.306722][T16066] Remounting filesystem read-only
[  419.331107][T16064] NILFS (loop6): mounting fs with errors
[  419.545689][T16066] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  419.545744][T16066] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4)
[  419.545774][T16066] Remounting filesystem read-only
[  419.597519][T10542] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[  419.656632][T12399] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  420.503994][T16100] loop4: detected capacity change from 0 to 4096
[  420.526779][T16100] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  420.659926][T16100] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  421.744646][T16138] netlink: 'syz.6.4033': attribute type 30 has an invalid length.
[  421.794782][T16120] loop4: detected capacity change from 0 to 32768
[  421.801756][T16120] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4022 (16120)
[  421.853865][T16120] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  421.853923][T16120] BTRFS info (device loop4): using crc32c checksum algorithm
[  421.902266][T16150] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4034'.
[  422.071865][T16120] BTRFS info (device loop4): enabling ssd optimizations
[  422.071917][T16120] BTRFS info (device loop4): turning on flush-on-commit
[  422.072322][T16120] BTRFS info (device loop4): enabling free space tree
[  422.072340][T16120] BTRFS info (device loop4): enabling auto defrag
[  422.072356][T16120] BTRFS info (device loop4): use lzo compression, level 1
[  422.072374][T16120] BTRFS info (device loop4): max_inline set to 4096
[  422.094516][T16162] loop6: detected capacity change from 0 to 1024
[  422.154098][ T5346] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  422.178504][T16162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.201963][   T30] audit: type=1800 audit(1786642599.171:214): pid=16162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4037" name="file1" dev="loop6" ino=15 res=0 errno=0
[  422.222135][T16162] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.4037: missing EA_INODE flag
[  422.275059][T16162] EXT4-fs (loop6): Remounting filesystem read-only
[  422.315742][ T5346] usb 9-1: Using ep0 maxpacket: 16
[  422.319816][ T5346] usb 9-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  422.321906][ T5346] usb 9-1: config 0 has an invalid interface number: 98 but max is 0
[  422.321928][ T5346] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  422.321945][ T5346] usb 9-1: config 0 has no interface number 0
[  422.321983][ T5346] usb 9-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  422.322005][ T5346] usb 9-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  422.322026][ T5346] usb 9-1: config 0 interface 98 has no altsetting 0
[  422.327864][ T5614] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  422.330352][ T5346] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.330375][ T5346] usb 9-1: Product: syz
[  422.330388][ T5346] usb 9-1: Manufacturer: syz
[  422.330401][ T5346] usb 9-1: SerialNumber: syz
[  422.374038][ T5346] usb 9-1: config 0 descriptor??
[  422.376775][T16153] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  422.376897][T16153] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  422.479150][T10542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.606257][T16153] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  422.606421][T16153] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  423.217427][ T5346] asix 9-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  423.217686][ T5346] asix 9-1:0.98: probe with driver asix failed with error -71
[  423.224024][ T5346] usb 9-1: USB disconnect, device number 14
[  424.741188][   T30] audit: type=1326 audit(1786642601.711:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16176 comm="syz.6.4050" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d439e0d9 code=0x7ffc0000
[  424.741326][   T30] audit: type=1326 audit(1786642601.711:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16176 comm="syz.6.4050" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d439e0d9 code=0x7ffc0000
[  424.745884][   T30] audit: type=1326 audit(1786642601.721:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16176 comm="syz.6.4050" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d439e0d9 code=0x7ffc0000
[  424.747044][   T30] audit: type=1326 audit(1786642601.721:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16176 comm="syz.6.4050" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d439e0d9 code=0x7ffc0000
[  424.747229][   T30] audit: type=1326 audit(1786642601.721:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16176 comm="syz.6.4050" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0d439e0d9 code=0x7ffc0000
[  424.747812][   T30] audit: type=1326 audit(1786642601.721:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16176 comm="syz.6.4050" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d439e0d9 code=0x7ffc0000
[  424.749336][   T30] audit: type=1326 audit(1786642601.721:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16176 comm="syz.6.4050" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d439e0d9 code=0x7ffc0000
[  424.750053][   T30] audit: type=1326 audit(1786642601.721:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16176 comm="syz.6.4050" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fa0d439e0d9 code=0x7ffc0000
[  424.751582][   T30] audit: type=1326 audit(1786642601.721:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16176 comm="syz.6.4050" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d439e0d9 code=0x7ffc0000
[  425.082394][T16190] loop8: detected capacity change from 0 to 2048
[  425.149779][T16193] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  425.285559][T16193] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  425.310459][T16193] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4)
[  425.334099][T16193] Remounting filesystem read-only
[  425.356492][T16190] NILFS (loop8): mounting fs with errors
[  425.456794][T16193] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  425.456852][T16193] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4)
[  425.456883][T16193] Remounting filesystem read-only
[  425.486862][T12399] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer
[  426.394672][T16220] loop8: detected capacity change from 0 to 1024
[  426.400013][T16220] EXT4-fs: Ignoring removed bh option
[  426.400096][T16220] EXT4-fs: Ignoring removed bh option
[  426.415803][T16220] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  426.448359][T16220] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  426.483550][T16220] EXT4-fs error (device loop8): ext4_check_all_de:675: inode #12: block 7: comm syz.8.4059: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  426.544566][T16220] EXT4-fs (loop8): Remounting filesystem read-only
[  426.590876][T12399] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.968467][T16225] loop6: detected capacity change from 0 to 32768
[  426.987269][T16225] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4060 (16225)
[  427.024592][T16225] BTRFS info (device loop6): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  427.024641][T16225] BTRFS info (device loop6): using xxhash64 checksum algorithm
[  427.153712][T16225] BTRFS info (device loop6): enabling ssd optimizations
[  427.162044][T16225] BTRFS info (device loop6): turning on async discard
[  427.169025][T16225] BTRFS info (device loop6): enabling free space tree
[  427.337676][T16257] loop8: detected capacity change from 0 to 1024
[  427.734127][T16265] netlink: 'syz.8.4071': attribute type 30 has an invalid length.
[  427.979881][T10542] BTRFS info (device loop6): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  429.202887][ T5738] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  429.353003][ T5738] usb 9-1: Using ep0 maxpacket: 8
[  429.353828][ T5738] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  429.354947][ T5738] usb 9-1: config index 0 descriptor too short (expected 5924, got 36)
[  429.354969][ T5738] usb 9-1: config 250 has an invalid interface number: 228 but max is -1
[  429.354987][ T5738] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0
[  429.355077][ T5738] usb 9-1: config 250 has no interface number 0
[  429.355115][ T5738] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  429.355138][ T5738] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  429.355159][ T5738] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 11
[  429.355180][ T5738] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  429.355202][ T5738] usb 9-1: config 250 interface 228 has no altsetting 0
[  429.357245][ T5738] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  429.357266][ T5738] usb 9-1: Product: syz
[  429.357287][ T5738] usb 9-1: SerialNumber: syz
[  429.367431][ T5738] hub 9-1:250.228: bad descriptor, ignoring hub
[  429.367455][ T5738] hub 9-1:250.228: probe with driver hub failed with error -5
[  429.392947][  T991] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  429.543617][  T991] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  429.545010][  T991] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  429.545034][  T991] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  429.545098][  T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.561204][  T991] spcp8x5 2-1:1.0: SPCP8x5 converter detected
[  429.571266][  T991] usb 2-1: SPCP8x5 converter now attached to ttyUSB0
[  429.609038][ T5738] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  429.920762][ T5838] usb 2-1: USB disconnect, device number 39
[  429.948073][ T5838] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  429.956983][ T5838] spcp8x5 2-1:1.0: device disconnected
[  430.052998][    C1] usblp0: nonzero read bulk status received: -71
[  430.139193][ T5801] usb 9-1: USB disconnect, device number 15
[  430.146547][ T5801] usblp0: removed
[  430.699292][T16330] loop6: detected capacity change from 0 to 1024
[  430.734057][T16330] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  430.759816][T16332] loop8: detected capacity change from 0 to 128
[  430.785736][T16332] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  430.801904][T16332] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  431.851241][T16350] loop8: detected capacity change from 0 to 40427
[  431.854212][T16350] F2FS-fs (loop8): Invalid SB checksum offset: 0
[  431.854237][T16350] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock
[  431.855302][T16350] F2FS-fs (loop8): invalid crc value
[  432.019357][T16350] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  432.026215][T16350] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0
[  432.026242][T16350] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  432.214644][ T5838] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  432.382769][ T5838] usb 5-1: Using ep0 maxpacket: 8
[  432.383604][ T5838] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  432.384592][ T5838] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  432.384615][ T5838] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  432.384634][ T5838] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  432.384652][ T5838] usb 5-1: config 250 has no interface number 0
[  432.384689][ T5838] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  432.384713][ T5838] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  432.384734][ T5838] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 11
[  432.384756][ T5838] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  432.384780][ T5838] usb 5-1: config 250 interface 228 has no altsetting 0
[  432.386678][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  432.386699][ T5838] usb 5-1: Product: syz
[  432.386712][ T5838] usb 5-1: SerialNumber: syz
[  432.402485][ T5838] hub 5-1:250.228: bad descriptor, ignoring hub
[  432.402512][ T5838] hub 5-1:250.228: probe with driver hub failed with error -5
[  437.458955][ T5838] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  439.606278][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  457.042894][ T5625] Bluetooth: hci1: command 0x0406 tx timeout
[  501.054364][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  562.494464][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  577.844863][   T31] INFO: task syz-executor:5598 blocked in I/O wait for more than 143 seconds.
[  577.844911][   T31]       Tainted: G             L      syzkaller #0
[  577.844938][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  577.844950][   T31] task:syz-executor    state:D stack:21952 pid:5598  tgid:5598  ppid:5597   task_flags:0x440100 flags:0x00080000
[  577.845005][   T31] Call Trace:
[  577.845016][   T31]  <TASK>
[  577.845034][   T31]  __schedule+0x1b57/0x5bc0
[  577.845169][   T31]  ? __pfx___schedule+0x10/0x10
[  577.845205][   T31]  ? schedule+0x90/0x2b0
[  577.845235][   T31]  schedule+0x164/0x2b0
[  577.845263][   T31]  io_schedule+0x7f/0xd0
[  577.845293][   T31]  bit_wait_io+0x11/0xd0
[  577.845321][   T31]  __wait_on_bit+0xac/0x300
[  577.845346][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  577.845375][   T31]  out_of_line_wait_on_bit+0x13b/0x190
[  577.845405][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  577.845432][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  577.845464][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  577.845504][   T31]  do_get_write_access+0x662/0x1070
[  577.845563][   T31]  jbd2_journal_get_write_access+0x1d7/0x230
[  577.845590][   T31]  __ext4_journal_get_write_access+0xf1/0x620
[  577.845626][   T31]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  577.845648][   T31]  ? trace_kmem_cache_alloc+0x29/0xe0
[  577.845685][   T31]  ? jbd2__journal_start+0x145/0x5d0
[  577.845723][   T31]  ext4_reserve_inode_write+0x294/0x360
[  577.845762][   T31]  __ext4_mark_inode_dirty+0x146/0x7b0
[  577.845803][   T31]  ext4_dirty_inode+0xd0/0x110
[  577.845827][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  577.845849][   T31]  __mark_inode_dirty+0x3a8/0x13b0
[  577.845886][   T31]  file_update_time_flags+0x399/0x440
[  577.845918][   T31]  ext4_page_mkwrite+0x224/0x1140
[  577.845959][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  577.845981][   T31]  ? __lock_acquire+0x6df/0x2e50
[  577.846047][   T31]  do_page_mkwrite+0x147/0x310
[  577.846080][   T31]  do_wp_page+0x1a9c/0x4b80
[  577.846128][   T31]  ? __pfx_
** replaying previous printk message **
[  577.846128][   T31]  ? __pfx_do_wp_page+0x10/0x10
[  577.846156][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  577.846185][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  577.846218][   T31]  handle_mm_fault+0x15d7/0x3750
[  577.846246][   T31]  ? handle_mm_fault+0xf1/0x3750
[  577.846279][   T31]  ? __pfx_handle_mm_fault+0x10/0x10
[  577.846299][   T31]  ? lock_vma_under_rcu+0x45a/0x500
[  577.846322][   T31]  ? __pfx_set_user_sigmask+0x10/0x10
[  577.846373][   T31]  do_user_addr_fault+0xa4f/0x1340
[  577.846422][   T31]  ? trace_page_fault_user+0x84/0x1e0
[  577.846450][   T31]  exc_page_fault+0x6a/0xc0
[  577.846481][   T31]  asm_exc_page_fault+0x26/0x30
[  577.846506][   T31] RIP: 0033:0x7fc5bba70163
[  577.846528][   T31] RSP: 002b:00007fff3d06dd90 EFLAGS: 00010212
[  577.846552][   T31] RAX: 00007fc5b7be8234 RBX: 00007fff3d06dec0 RCX: 0000000000000000
[  577.846570][   T31] RDX: 00007fc5b7be8230 RSI: 0000000000000008 RDI: 00007fff3d06dec0
[  577.846586][   T31] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000
[  577.846601][   T31] R10: 00007fff3d06dea0 R11: 0000000000000000 R12: 0000000000000000
[  577.846617][   T31] R13: 0000000000017dcc R14: fffffffffffe8234 R15: 0000000000000000
[  577.846649][   T31]  </TASK>
[  577.846718][   T31] INFO: task syz.6.4103:16340 blocked in I/O wait for more than 143 seconds.
[  577.846739][   T31]       Tainted: G             L      syzkaller #0
[  577.846752][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  577.846763][   T31] task:syz.6.4103      state:D stack:23976 pid:16340 tgid:16340 ppid:10542  task_flags:0x440040 flags:0x00080002
[  577.846815][   T31] Call Trace:
[  577.846824][   T31]  <TASK>
[  577.846840][   T31]  __schedule+0x1b57/0x5bc0
[  577.846887][   T31]  ? __lock_acquire+0x6df/0x2e50
[  577.846915][   T31]  ? __pfx___schedule+0x10/0x10
[  577.846950][   T31]  ? schedule+0x90/0x2b0
[  577.846980][   T31]  schedule+0x164/0x2b0
[  577.847008][   T31]  io_schedule+0x7f/0xd0
[  577.847036][   T31]  bit_wait_io+0x11/0xd0
[  577.847073][   T31]  __wait_on_bit+0xac/0x300
[  577.847100][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  577.847131][   T31]  out_of_line_wait_on_bit+0x13b/0x190
[  577.847157][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  577.847178][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  577.847202][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  577.847231][   T31]  do_get_write_access+0x662/0x1070
[  577.847263][   T31]  jbd2_journal_get_write_access+0x1d7/0x230
[  577.847283][   T31]  __ext4_journal_get_write_access+0xf1/0x620
[  577.847307][   T31]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  577.847325][   T31]  ? trace_kmem_cache_alloc+0x29/0xe0
[  577.847344][   T31]  ? jbd2__journal_start+0x145/0x5d0
[  577.847374][   T31]  ext4_reserve_inode_write+0x294/0x360
[  577.847399][   T31]  __ext4_mark_inode_dirty+0x146/0x7b0
[  577.847430][   T31]  ext4_dirty_inode+0xd0/0x110
[  577.847448][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  577.847465][   T31]  __mark_inode_dirty+0x3a8/0x13b0
[  577.847491][   T31]  file_update_time_flags+0x399/0x440
[  577.847516][   T31]  ext4_page_mkwrite+0x224/0x1140
[  577.847542][   T31]  ? __pfx_filemap_fault+0x10/0x10
[  577.847560][   T31]  ? do_raw_spin_unlock+0xf5/0x200
[  577.847583][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  577.847610][   T31]  do_page_mkwrite+0x147/0x310
[  577.847634][   T31]  do_pte_missing+0x757/0x34b0
[  577.847663][   T31]  ? handle_mm_fault+0xf1/0x3750
[  577.847683][   T31]  handle_mm_fault+0x1a53/0x3750
[  577.847708][   T31]  ? handle_mm_fault+0xf1/0x3750
[  577.847734][   T31]  ? __pfx_handle_mm_fault+0x10/0x10
[  577.847750][   T31]  ? lock_vma_under_rcu+0x45a/0x500
[  577.847789][   T31]  do_user_addr_fault+0xa4f/0x1340
[  577.847814][   T31]  ? trace_page_fault_user+0x84/0x1e0
[  577.847833][   T31]  exc_page_fault+0x6a/0xc0
[  577.847855][   T31]  asm_exc_page_fault+0x26/0x30
[  577.847873][   T31] RIP: 0033:0x7fa0d4272eb2
[  577.847889][   T31] RSP: 002b:00007ffc12a65160 EFLAGS: 00010202
[  577.847906][   T31] RAX: 0000000000008008 RBX: 00007fa0d5155720 RCX: 0000000000000000
[  577.847918][   T31] RDX: 0000001b2f41c000 RSI: 0000000000000008 RDI: 00007fa0d5155720
[  577.847931][   T31] RBP: 00000000000001d7 R08: 00007fa0d4610000 R09: 00007fa0d4626128
[  577.847944][   T31] R10: 0000000000000001 R11: 0000000000000002 R12: ffffffff848ea604
[  577.847956][   T31] R13: 00007fa0d4626128 R14: 00000000000000cc R15: ffffffffffff8000
[  577.847970][   T31]  ? tomoyo_socket_sendmsg_permission+0x34/0x300
[  577.848068][   T31]  </TASK>
[  577.848077][   T31] INFO: task syz.8.4106:16348 blocked in I/O wait for more than 143 seconds.
[  577.848093][   T31]       Tainted: G             L      syzkaller #0
[  577.848102][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  577.848111][   T31] task:syz.8.4106      state:D stack:24648 pid:16348 tgid:16348 ppid:12399  task_flags:0x440040 flags:0x00080002
[  577.848152][   T31] Call Trace:
[  577.848159][   T31]  <TASK>
[  577.848170][   T31]  __schedule+0x1b57/0x5bc0
[  577.848211][   T31]  ? __pfx___schedule+0x10/0x10
[  577.848237][   T31]  ? schedule+0x90/0x2b0
[  577.848258][   T31]  schedule+0x164/0x2b0
[  577.848279][   T31]  io_schedule+0x7f/0xd0
[  577.848299][   T31]  bit_wait_io+0x11/0xd0
[  577.848321][   T31]  __wait_on_bit+0xac/0x300
[  577.848340][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  577.848363][   T31]  out_of_line_wait_on_bit+0x13b/0x190
[  577.848385][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  577.848405][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  577.848428][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  577.848455][   T31]  do_get_write_access+0x662/0x1070
[  577.848486][   T31]  jbd2_journal_get_write_access+0x1d7/0x230
[  577.848507][   T31]  __ext4_journal_get_write_access+0xf1/0x620
[  577.848529][   T31]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  577.848548][   T31]  ? trace_kmem_cache_alloc+0x29/0xe0
[  577.848565][   T31]  ? jbd2__journal_start+0x145/0x5d0
[  577.848595][   T31]  ext4_reserve_inode_write+0x294/0x360
[  577.848619][   T31]  __ext4_mark_inode_dirty+0x146/0x7b0
[  577.848650][   T31]  ext4_dirty_inode+0xd0/0x110
[  577.848667][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  577.848684][   T31]  __mark_inode_dirty+0x3a8/0x13b0
[  577.848710][   T31]  file_update_time_flags+0x399/0x440
[  577.848734][   T31]  ext4_page_mkwrite+0x224/0x1140
[  577.848759][   T31]  ? __pfx_filemap_fault+0x10/0x10
[  577.848780][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  577.848797][   T31]  ? lruvec_stat_mod_folio+0x28b/0x3e0
[  577.848837][   T31]  do_page_mkwrite+0x147/0x310
[  577.848860][   T31]  do_pte_missing+0x757/0x34b0
[  577.848882][   T31]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[  577.848913][   T31]  handle_mm_fault+0x1a53/0x3750
[  577.848938][   T31]  ? handle_mm_fault+0xf1/0x3750
[  577.848963][   T31]  ? __pfx_handle_mm_fault+0x10/0x10
[  577.848978][   T31]  ? lock_vma_under_rcu+0x45a/0x500
[  577.848996][   T31]  ? __pfx_do_futex+0x10/0x10
[  577.849049][   T31]  do_user_addr_fault+0xa4f/0x1340
[  577.849076][   T31]  ? trace_page_fault_user+0x84/0x1e0
[  577.849096][   T31]  exc_page_fault+0x6a/0xc0
[  577.849119][   T31]  asm_exc_page_fault+0x26/0x30
[  577.849137][   T31] RIP: 0033:0x7f71d2672729
[  577.849153][   T31] RSP: 002b:00007ffc1c0d7340 EFLAGS: 00010202
[  577.849172][   T31] RAX: 0000001b33c24000 RBX: ffffffff82548fca RCX: 0000001b33c23ff8
[  577.849187][   T31] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007f71d3555700
[  577.849200][   T31] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f71d2a12000
[  577.849213][   T31] R10: 00007f71d3555700 R11: 0000000000000000 R12: 00007f71d2a26038
[  577.849225][   T31] R13: 0000000000000000 R14: ffffffff825486a0 R15: 00007f71d3555720
[  577.849237][   T31]  ? __x64_sys_mount+0x20/0xc0
[  577.849255][   T31]  ? __se_sys_fsmount+0x2ea/0xf40
[  577.849280][   T31]  </TASK>
[  577.849291][   T31] INFO: task syz.4.4116:16372 blocked in I/O wait for more than 143 seconds.
[  577.849306][   T31]       Tainted: G             L      syzkaller #0
[  577.849315][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  577.849324][   T31] task:syz.4.4116      state:D stack:25608 pid:16372 tgid:16372 ppid:5614   task_flags:0x440040 flags:0x00080002
[  577.849380][   T31] Call Trace:
[  577.849387][   T31]  <TASK>
[  577.849399][   T31]  __schedule+0x1b57/0x5bc0
[  577.849441][   T31]  ? __pfx___schedule+0x10/0x10
[  577.849469][   T31]  ? schedule+0x90/0x2b0
[  577.849495][   T31]  schedule+0x164/0x2b0
[  577.849518][   T31]  io_schedule+0x7f/0xd0
[  577.849539][   T31]  bit_wait_io+0x11/0xd0
[  577.849561][   T31]  __wait_on_bit+0xac/0x300
[  577.849584][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  577.849611][   T31]  out_of_line_wait_on_bit+0x13b/0x190
[  577.849638][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  577.849665][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  577.849695][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  577.849731][   T31]  do_get_write_access+0x662/0x1070
[  577.849770][   T31]  jbd2_journal_get_write_access+0x1d7/0x230
[  577.849796][   T31]  __ext4_journal_get_write_access+0xf1/0x620
[  577.849825][   T31]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  577.849848][   T31]  ? trace_kmem_cache_alloc+0x29/0xe0
[  577.849872][   T31]  ? jbd2__journal_start+0x145/0x5d0
[  577.849910][   T31]  ext4_reserve_inode_write+0x294/0x360
[  577.849942][   T31]  __ext4_mark_inode_dirty+0x146/0x7b0
[  577.849979][   T31]  ext4_dirty_inode+0xd0/0x110
[  577.850002][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  577.850024][   T31]  __mark_inode_dirty+0x3a8/0x13b0
[  577.850064][   T31]  file_update_time_flags+0x399/0x440
[  577.850094][   T31]  ext4_page_mkwrite+0x224/0x1140
[  577.850126][   T31]  ? __pfx_filemap_fault+0x10/0x10
[  577.850150][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  577.850191][   T31]  do_page_mkwrite+0x147/0x310
[  577.850220][   T31]  do_pte_missing+0x757/0x34b0
[  577.850261][   T31]  ? handle_mm_fault+0xf1/0x3750
[  577.850290][   T31]  handle_mm_fault+0x1a53/0x3750
[  577.850321][   T31]  ? handle_mm_fault+0xf1/0x3750
[  577.850354][   T31]  ? __pfx_handle_mm_fault+0x10/0x10
[  577.850374][   T31]  ? lock_vma_under_rcu+0x45a/0x500
[  577.850397][   T31]  ? lapic_next_event+0x11/0x20
[  577.850462][   T31]  do_user_addr_fault+0xa4f/0x1340
[  577.850494][   T31]  ? trace_page_fault_user+0x84/0x1e0
[  577.850518][   T31]  exc_page_fault+0x6a/0xc0
[  577.850546][   T31]  asm_exc_page_fault+0x26/0x30
[  577.850567][   T31] RIP: 0033:0x7f49ce072eb2
[  577.850585][   T31] RSP: 002b:00007ffec8020690 EFLAGS: 00010202
[  577.850607][   T31] RAX: 0000000000001008 RBX: 00007f49cef55720 RCX: 0000000000000000
[  577.850623][   T31] RDX: 0000001b33923000 RSI: 0000000000000008 RDI: 00007f49cef55720
[  577.850638][   T31] RBP: 00000000000006d6 R08: 00007f49ce410000 R09: 00007f49ce426038
[  577.850653][   T31] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff8bd3ca71
[  577.850668][   T31] R13: 00007f49ce426038 R14: 0000000000000105 R15: fffffffffffff000
[  577.850688][   T31]  ? ida_alloc_range+0x4d1/0x870
[  577.850787][   T31]  </TASK>
[  577.850807][   T31] 
[  577.850807][   T31] Showing all locks held in the system:
[  577.850850][   T31] locks held by kworker/u8:0/12: 4, on CPU#1:
[  577.850923][   T31]  #0: ffff8880206c9140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  577.851052][   T31]  #1: ffffc90000117c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  577.851116][   T31]  #2: ffff8880358b40e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0
[  577.851192][   T31]  #3: ffff8880358b2c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  577.851252][   T31] locks held by khungtaskd/31: 1, last CPU#1:
[  578.045851][   T31]  #0: ffffffff8ed5caa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  578.045971][   T31] locks held by getty/5367: 2, on CPU#1:
[  578.045985][   T31]  #0: ffff888032c750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  578.046117][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  578.046200][   T31] locks held by syz-executor/5598: 3, on CPU#1:
[  578.046213][   T31]  #0: ffff88807f023808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  578.046258][   T31]  #1: ffff8880358b4558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140
[  578.046302][   T31]  #2: ffff8880358b0938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200
[  578.046369][   T31] locks held by syz.6.4103/16340: 3, on CPU#0:
[  578.046382][   T31]  #0: ffff88803ae8d308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  578.046426][   T31]  #1: ffff8880358b4558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140
[  578.046469][   T31]  #2: ffff8880358b0938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200
[  578.046519][   T31] locks held by syz.8.4106/16348: 3, on CPU#0:
[  578.046532][   T31]  #0: ffff88807593f588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  578.046575][   T31]  #1: ffff8880358b4558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140
[  578.046624][   T31]  #2: ffff8880358b0938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200
[  578.046674][   T31] locks held by syz.4.4116/16372: 3, on CPU#0:
[  578.046687][   T31]  #0: ffff88802906f6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  578.046730][   T31]  #1: ffff8880358b4558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140
[  578.046772][   T31]  #2: ffff8880358b0938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200
[  578.048282][   T31] 
[  578.048289][   T31] =============================================
[  578.048289][   T31] 
[  578.048305][   T31] NMI backtrace for cpu 0
[  578.048321][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  578.048345][   T31] Tainted: [L]=SOFTLOCKUP
[  578.048352][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  578.048363][   T31] Call Trace:
[  578.048371][   T31]  <TASK>
[  578.048380][   T31]  dump_stack_lvl+0xe8/0x150
[  578.048409][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  578.048476][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  578.048505][   T31]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  578.048528][   T31]  sys_info+0x135/0x170
[  578.048572][   T31]  watchdog+0xfd7/0x1030
[  578.048597][   T31]  ? watchdog+0x1c7/0x1030
[  578.048627][   T31]  kthread+0x38b/0x480
[  578.048646][   T31]  ? __pfx_watchdog+0x10/0x10
[  578.048661][   T31]  ? __pfx_kthread+0x10/0x10
[  578.048680][   T31]  ret_from_fork+0x514/0xb70
[  578.048713][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  578.048740][   T31]  ? __switch_to+0xc89/0x1420
[  578.048766][   T31]  ? __pfx_kthread+0x10/0x10
[  578.048785][   T31]  ret_from_fork_asm+0x1a/0x30
[  578.048826][   T31]  </TASK>
[  578.048848][   T31] Sending NMI from CPU 0 to CPUs 1:
[  578.048878][    C1] NMI backtrace for cpu 1
[  578.048893][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  578.048919][    C1] Tainted: [L]=SOFTLOCKUP
[  578.048926][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  578.048937][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  578.049036][    C1] Code: e8 9e 94 59 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 af 0c c8 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 0a 60 72 06 cc 44 89 f9 80 e1 07
[  578.049053][    C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002
[  578.049071][    C1] RAX: 1ffffffff35a0f00 RBX: 00000000000003fd RCX: 0000000000000000
[  578.049084][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  578.049096][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  578.049109][    C1] R10: dffffc0000000000 R11: ffffffff856e2b10 R12: dffffc0000000000
[  578.049130][    C1] R13: 0000000000000000 R14: ffffffff9ad07bc0 R15: 0000000000000000
[  578.049143][    C1] FS:  0000000000000000(0000) GS:ffff888124e03000(0000) knlGS:0000000000000000
[  578.049158][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  578.049172][    C1] CR2: 000055fb65989660 CR3: 00000000770ac000 CR4: 00000000003526f0
[  578.049189][    C1] Call Trace:
[  578.049196][    C1]  <TASK>
[  578.049205][    C1]  wait_for_lsr+0x184/0x2f0
[  578.049233][    C1]  __serial8250_console_fifo_write+0x346/0x3e0
[  578.049259][    C1]  serial8250_console_write+0xaa1/0x1200
[  578.049284][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  578.049314][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  578.049340][    C1]  ? __schedule+0x1b6d/0x5bc0
[  578.049371][    C1]  nbcon_emit_next_record+0xef5/0x1a90
[  578.049400][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  578.049424][    C1]  ? nbcon_context_try_acquire+0x819/0xbd0
[  578.049452][    C1]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  578.049477][    C1]  nbcon_kthread_func+0x679/0x880
[  578.049501][    C1]  ? nbcon_kthread_func+0x163/0x880
[  578.049519][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  578.049542][    C1]  ? __kthread_parkme+0x71/0x1f0
[  578.049570][    C1]  ? __kthread_parkme+0x199/0x1f0
[  578.049599][    C1]  kthread+0x38b/0x480
[  578.049616][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  578.049634][    C1]  ? __pfx_kthread+0x10/0x10
[  578.049653][    C1]  ret_from_fork+0x514/0xb70
[  578.049683][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  578.049712][    C1]  ? __switch_to+0xc89/0x1420
[  578.049738][    C1]  ? __pfx_kthread+0x10/0x10
[  578.049757][    C1]  ret_from_fork_asm+0x1a/0x30
[  578.049794][    C1]  </TASK>
[  578.051800][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  579.704371][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  579.715030][   T31] Tainted: [L]=SOFTLOCKUP
[  579.719337][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  579.729379][   T31] Call Trace:
[  579.732699][   T31]  <TASK>
[  579.735638][   T31]  vpanic+0x56d/0xa60
[  579.739782][   T31]  ? __pfx___schedule+0x10/0x10
[  579.744621][   T31]  ? __pfx_vpanic+0x10/0x10
[  579.749134][   T31]  panic+0xc5/0xd0
[  579.752839][   T31]  ? __pfx_panic+0x10/0x10
[  579.757237][   T31]  ? preempt_schedule_common+0x7f/0xd0
[  579.762685][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  579.768057][   T31]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  579.774204][   T31]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  579.780346][   T31]  watchdog+0x1030/0x1030
[  579.784665][   T31]  ? watchdog+0x1c7/0x1030
[  579.789094][   T31]  kthread+0x38b/0x480
[  579.793161][   T31]  ? __pfx_watchdog+0x10/0x10
[  579.797817][   T31]  ? __pfx_kthread+0x10/0x10
[  579.802398][   T31]  ret_from_fork+0x514/0xb70
[  579.806977][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  579.812076][   T31]  ? __switch_to+0xc89/0x1420
[  579.816917][   T31]  ? __pfx_kthread+0x10/0x10
[  579.821498][   T31]  ret_from_fork_asm+0x1a/0x30
[  579.826266][   T31]  </TASK>
[  579.829584][   T31] Kernel Offset: disabled
[  579.833916][   T31] Rebooting in 86400 seconds..