last executing test programs:

1m12.335295825s ago: executing program 3 (id=460):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0101feffffff000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="04004600050034006e000000080026006c090000200051"], 0x50}}, 0x20004800)

1m12.242083063s ago: executing program 3 (id=461):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x2, 0x4fac, 0x2, 0x2}}]})

1m10.934811849s ago: executing program 3 (id=467):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)

1m10.581984703s ago: executing program 3 (id=471):
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f0000000040)=ANY=[], 0xfe, 0xc24, &(0x7f0000001480)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x11a)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m10.009146016s ago: executing program 3 (id=476):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020)
preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/70, 0x46}], 0x1, 0x103, 0x4, 0x2)
read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x2020)

1m8.876460197s ago: executing program 3 (id=480):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e003000028008000300030000000800", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

1m8.269177329s ago: executing program 32 (id=480):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e003000028008000300030000000800", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

4.999657225s ago: executing program 1 (id=971):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
setns(0xc9, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00')
sendfile(r0, r1, &(0x7f0000000100)=0x8, 0xf2)

4.804573174s ago: executing program 1 (id=974):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000380)=""/28, 0x1c)
getdents64(r0, 0xfffffffffffffffe, 0x29)

3.987590429s ago: executing program 4 (id=985):
r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r1 = dup(r0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4606040000000000006ccf000002003e"], 0x78)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

3.572011265s ago: executing program 4 (id=988):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x40000002, 0x0, 0x864}]})

3.471046161s ago: executing program 0 (id=990):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x4e, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @broadcast, @random="0bb056fae33d", {0xc, 0x81}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x0, 0x0, 0x2}}, 0x900, 0x3, @device_b, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x0, 0x0, {0x6, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x81, 0x7}}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0)

3.220265003s ago: executing program 4 (id=992):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f13608060001080006040002ffffffffffffac1414bb"], 0x0)

3.115763478s ago: executing program 0 (id=993):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1})
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4)

2.990523096s ago: executing program 2 (id=994):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x2c}}, 0x18)

2.889842685s ago: executing program 0 (id=995):
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0)

2.868812036s ago: executing program 1 (id=996):
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24008001)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', <r1=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

2.603443881s ago: executing program 0 (id=997):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000001000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x100, 0x0, 0x6c, 0x0, 0x0, 0xbffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x16, 0xcc, 0x0, 0x8008, 0x7ffffffffffffffc}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fff, 0x36cc, 0xa3e5, 0x106, 0x9}}]}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040080}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

2.529342156s ago: executing program 2 (id=998):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100)
write$binfmt_script(r0, &(0x7f0000000380), 0x4)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

2.164487396s ago: executing program 4 (id=999):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000580)=ANY=[], 0x81, 0x14fb, &(0x7f0000002a80)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814011, 0x0, 0x44, 0x0, &(0x7f0000000140))
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2.159067282s ago: executing program 1 (id=1000):
syz_open_dev$vcsa(0x0, 0x1, 0x102)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006)

2.011408825s ago: executing program 1 (id=1001):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})
open(&(0x7f00000000c0)='.\x00', 0xfb3bdc61155d168b, 0xa)

1.845149365s ago: executing program 2 (id=1002):
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="00d0867e65d443152ee691a70d225b73c01164645c70ff689f607da7a169dbbfebbeb349b043f54ddfb3b52988088bcd11a44f2074aa41532279b5718bc4d89fe5010d6bf465008743edc5516b18e0c4c3116386337cddaefbc0f0293d06483bec82e15366358709c5d5c0049ff9dcb70c725e5c7add4f7624f42dea7e855e3c24bc3b4173720476fb379ce25c0ea4", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC, @ANYRES16], 0x1, 0x146, &(0x7f0000001040)="$eJzs2r9K+1AUB/Dz+1lo6SM4FRKwCvmvdXAXBCefwNAmaTDxlkSQdgq+gOJwHR1d3UQ3HyGzT6AvcSVtamjuIC5t0e9nuYecy8nJkDMdLWGx5aca0XZ2e/L+P2Fxp+fs933Ld2nmiIg6RZALcaeT5PQrn4tMly4oL+XZDfjxsx9Gni3XAAAAAAAAAAAAAAAAAAAAAAD4I5SPMmgPOXvww8izqmSWjidnbhR5STp/pFK5o0M79+yguO8s1Os2iNTp/k7ID6+KvLmQV+eVtoac/au9j4yLeGSk44kWxm7gBd65bTs9c9c092xjWsuoV1Rvyp4oF08jeZ9Ifaz2id5MeZ+I2rOjsRny68t69er7EfyioEVE390RG2vR6jKC1nq0seKg+aP/vT4/aNB0lNdifuh9Fg2WOD+kiQawIp8BAAD//6epNV0=")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1.751091947s ago: executing program 4 (id=1003):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x40)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ff, 0x14b, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0x401}, 0x0, 0x0, 0x0, 0x0)

1.388230419s ago: executing program 2 (id=1006):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='retu -', 0x6)

1.260601987s ago: executing program 5 (id=1008):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc118fd50, &(0x7f00000001c0)="040000")

1.128107784s ago: executing program 2 (id=1009):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8)
sendto$inet6(r0, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c)
setsockopt$inet6_int(r0, 0x84, 0x24, 0x0, 0x0)

1.12782846s ago: executing program 5 (id=1010):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
ptrace(0x10, r0)
waitid(0x1, r0, 0x0, 0x8, &(0x7f00000010c0))

1.074181429s ago: executing program 5 (id=1011):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

986.727223ms ago: executing program 0 (id=1012):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x26f, 0x0, 0x800000000000000}]})

982.271538ms ago: executing program 5 (id=1013):
r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x3, 0x1ff, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', "94a200", ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "0000001b00"]})
r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02)
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x7388, 0xfffffffffffffffd, 0x4, 0x4, 0x5, 0x1, "57c1169b6664ea61326ac71ae7213059", 0x0, 0xfc, 0x0, 0x10, 0x0, 0x4})

783.1692ms ago: executing program 4 (id=1014):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3c1, 0x0, 0x14a, 0xa}})
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xef89, 0x7fa, 0xb2, "35969809006e24a7446d8073145e6c31c267a0", 0x100, 0x200008})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))

623.033256ms ago: executing program 1 (id=1015):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc)

573.66978ms ago: executing program 5 (id=1016):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macgreek,namecase=1,iocharset=cp857,namecase=1,utf8,errors=continue,dmask=00000000000020000000000,\x00'], 0x1, 0x154a, &(0x7f0000000400)="$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")
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./sys\x00', 0x22404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e3, &(0x7f0000000140)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
open(&(0x7f00000002c0)='.\x00', 0x0, 0x0)

502.756709ms ago: executing program 0 (id=1017):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)={[{@part={'part', 0x3d, 0x5}}, {@nls={'nls', 0x3d, 'koi8-ru'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@nobarrier}]}, 0x1, 0x5d9, &(0x7f0000000cc0)="$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")
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a1, 0x0, 0x83, 0x0, &(0x7f0000000480))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

146.995784ms ago: executing program 5 (id=1018):
setns(0xc9, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x40400d4)

0s ago: executing program 2 (id=1019):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a5bb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000043c0)=""/69, 0x45}, 0x2}], 0x1c, 0x10022, 0x0)

kernel console output (not intermixed with test programs):

00000.
[  126.947974][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  127.046124][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  127.196919][    T9] usb 4-1: New USB device found: idVendor=28de, idProduct=1142, bcdDevice=0.00
[  127.197988][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.198019][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.198058][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.228898][    T9] usb 4-1: config 0 descriptor??
[  127.341966][   T33] audit: type=1326 audit(1790296176.408:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.1.346" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37acb9e159 code=0x0
[  127.386384][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  127.386690][   T27] az6027: usb out operation failed. (-32)
[  127.386708][   T27] stb0899_attach: Driver disabled by Kconfig
[  127.386715][   T27] az6027: no front-end attached
[  127.386715][   T27] 
[  127.387088][   T27] az6027: usb out operation failed. (-71)
[  127.387102][   T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  127.412497][   T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6
[  127.481838][   T27] dvb-usb: schedule remote query interval to 400 msecs.
[  127.481867][   T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  127.509698][   T27] usb 1-1: USB disconnect, device number 5
[  127.558117][ T5720] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  127.661290][   T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  127.688669][    T9] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[  127.689865][    T9] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  127.727360][ T5720] usb 3-1: New USB device found: idVendor=9710, idProduct=7810, bcdDevice=1.00
[  127.728752][ T5720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  127.728782][ T5720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  127.730806][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  127.730829][ T5720] usb 3-1: Product: syz
[  127.730843][ T5720] usb 3-1: Manufacturer: syz
[  127.747975][    T9] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected
[  127.748298][    T9] hid-steam 0003:28DE:1142.0004: steam_probe:steam_get_conn_status failed with error -22
[  127.824563][ T5720] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  127.857528][    T9] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[  127.868849][    T9] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  127.898376][   T27] usb 4-1: USB disconnect, device number 5
[  128.022044][ T6795] fido_id[6795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  128.055207][   T27] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected
[  128.267066][    T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  128.399220][ T6803] loop1: detected capacity change from 0 to 128
[  128.422037][ T6803] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  128.422450][ T6803] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  128.459733][    T9] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  128.464125][    T9] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  128.464148][    T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[  128.464183][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  128.473569][    T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  128.473594][    T9] usb 5-1: Product: syz
[  128.473633][    T9] usb 5-1: Manufacturer: syz
[  128.473645][    T9] usb 5-1: SerialNumber: syz
[  128.484621][    T9] usb 5-1: config 0 descriptor??
[  128.508707][    T9] usb 5-1: selecting invalid altsetting 0
[  128.605269][ T6799] loop0: detected capacity change from 0 to 32768
[  128.623538][ T6799] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.350 (6799)
[  128.638207][ T5613] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  128.645182][ T6799] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  128.645214][ T6799] BTRFS info (device loop0): using crc32c checksum algorithm
[  128.680568][ T5720] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71
[  128.709882][ T5720] usb 3-1: USB disconnect, device number 3
[  128.770253][ T6799] BTRFS info (device loop0): setting nodatasum
[  128.770282][ T6799] BTRFS info (device loop0): setting nodatacow
[  128.770298][ T6799] BTRFS info (device loop0): enabling ssd optimizations
[  128.770314][ T6799] BTRFS info (device loop0): turning on flush-on-commit
[  128.770330][ T6799] BTRFS info (device loop0): turning on async discard
[  128.770345][ T6799] BTRFS info (device loop0): enabling free space tree
[  128.805000][ T5720] mos7840 3-1:1.0: device disconnected
[  128.951613][    T9] usb 5-1: USB disconnect, device number 5
[  129.167480][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.272130][ T5606] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  130.078121][   T33] audit: type=1400 audit(1790296179.149:12): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6843 comm="syz.1.364" name="unknown" offset=16
[  130.079918][ T6829] loop3: detected capacity change from 0 to 40427
[  130.096099][ T6829] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  130.096125][ T6829] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  130.121221][ T6829] F2FS-fs (loop3): invalid crc value
[  130.147737][ T6842] tap0: tun_chr_ioctl cmd 1074025692
[  130.276410][ T6829] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  130.343911][ T6829] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  130.343943][ T6829] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  130.359857][ T6855] sch_tbf: burst 1735 is lower than device lo mtu (65550) !
[  130.585062][ T5609] syz-executor: attempt to access beyond end of device
[  130.585062][ T5609] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  130.608455][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  130.608491][ T5609] Tainted: [L]=SOFTLOCKUP
[  130.608499][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  130.608510][ T5609] Call Trace:
[  130.608518][ T5609]  <TASK>
[  130.608527][ T5609]  dump_stack_lvl+0xe8/0x150
[  130.608563][ T5609]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  130.608600][ T5609]  ? __submit_merged_bio+0x258/0x6a0
[  130.608618][ T5609]  f2fs_cache_write_end_io+0x2a5/0x6e0
[  130.608648][ T5609]  ? bio_endio+0x984/0xac0
[  130.608678][ T5609]  __submit_merged_bio+0x258/0x6a0
[  130.608697][ T5609]  ? rcu_is_watching+0x16/0xb0
[  130.608739][ T5609]  f2fs_submit_merged_write+0x2cc/0x610
[  130.608778][ T5609]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  130.608821][ T5609]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  130.608853][ T5609]  ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0
[  130.608882][ T5609]  f2fs_writeback_node_caches+0xf85/0x1120
[  130.608946][ T5609]  ? __pfx_f2fs_writeback_node_caches+0x10/0x10
[  130.609008][ T5609]  ? f2fs_write_checkpoint+0xe1e/0x24d0
[  130.609040][ T5609]  ? up_write+0x19d/0x4a0
[  130.609067][ T5609]  f2fs_write_checkpoint+0xe51/0x24d0
[  130.609132][ T5609]  kill_f2fs_super+0x2dc/0x700
[  130.609164][ T5609]  ? rcu_do_enqueue+0x616/0x870
[  130.609189][ T5609]  ? lockdep_hardirqs_on+0x7b/0x110
[  130.609210][ T5609]  ? __pfx_kill_f2fs_super+0x10/0x10
[  130.609253][ T5609]  ? __pfx_call_rcu+0x10/0x10
[  130.609291][ T5609]  ? shrinker_free+0x2a7/0x3b0
[  130.609315][ T5609]  deactivate_locked_super+0xbe/0x110
[  130.609342][ T5609]  cleanup_mnt+0x3d3/0x460
[  130.609373][ T5609]  task_work_run+0x1d9/0x260
[  130.609403][ T5609]  ? __pfx_task_work_run+0x10/0x10
[  130.609438][ T5609]  exit_to_user_mode_loop+0x204/0x770
[  130.609466][ T5609]  ? rcu_is_watching+0x16/0xb0
[  130.609499][ T5609]  do_syscall_64+0x328/0x520
[  130.609520][ T5609]  ? trace_irq_disable+0x3b/0x140
[  130.609546][ T5609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.609564][ T5609]  ? clear_bhb_loop+0x70/0xc0
[  130.609590][ T5609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.609611][ T5609] RIP: 0033:0x7f5e0bf9f397
[  130.609631][ T5609] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  130.609647][ T5609] RSP: 002b:00007ffe7d74cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  130.609669][ T5609] RAX: 0000000000000000 RBX: 00007f5e0c0344bb RCX: 00007f5e0bf9f397
[  130.609683][ T5609] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7d74cd30
[  130.609696][ T5609] RBP: 00007ffe7d74cd30 R08: 00007ffe7d74dd30 R09: 00000000ffffffff
[  130.609708][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7d74ddc0
[  130.609720][ T5609] R13: 00007f5e0c0344bb R14: 000000000001fd81 R15: 00007ffe7d74de00
[  130.609754][ T5609]  </TASK>
[  130.613067][ T5609] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  131.594595][ T6875] can0: slcan on ttyS3.
[  131.702257][ T6882] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  131.702984][ T6882] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  131.703266][ T6882] overlayfs: overlapping lowerdir path
[  131.955700][ T6877] can0 (unregistered): slcan off ttyS3.
[  131.964073][ T6887] team0: entered allmulticast mode
[  131.964094][ T6887] team_slave_0: entered allmulticast mode
[  131.964110][ T6887] team_slave_1: entered allmulticast mode
[  131.967187][ T6887] team0: left allmulticast mode
[  131.967211][ T6887] team_slave_0: left allmulticast mode
[  131.967228][ T6887] team_slave_1: left allmulticast mode
[  132.423518][ T6901] loop0: detected capacity change from 0 to 128
[  132.433748][ T6902] loop4: detected capacity change from 0 to 128
[  132.479787][ T6901] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  132.639591][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'.
[  132.639618][ T6908] netlink: 36 bytes leftover after parsing attributes in process `syz.3.391'.
[  132.863645][ T6914] program syz.0.392 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  133.316644][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  133.316711][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  133.467243][   T33] audit: type=1400 audit(1790296182.539:13): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=6929 comm="syz.0.400" name="p" offset=79
[  133.759647][ T6904] loop2: detected capacity change from 0 to 32768
[  133.787578][ T6904] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.860616][ T6904] XFS (loop2): Ending clean mount
[  133.939304][   T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  134.053712][ T5618] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  134.092675][   T27] usb 1-1: New USB device found: idVendor=046d, idProduct=c086, bcdDevice=0.00
[  134.101415][   T27] usb 1-1: config 0 has too many interfaces: 90, using maximum allowed: 32
[  134.101444][   T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 90
[  134.101486][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.101508][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.101543][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.139653][   T27] usb 1-1: config 0 descriptor??
[  134.160692][ T5727] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  134.325929][ T5727] usb 2-1: Using ep0 maxpacket: 16
[  134.332904][ T5727] usb 2-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00
[  134.341346][ T5727] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.341380][ T5727] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.341432][ T5727] usb 2-1: config 0 interface 0 has no altsetting 0
[  134.341466][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.352066][ T5727] usb 2-1: config 0 descriptor??
[  134.501114][ T6960] block2mtd: illegal erase size
[  134.637623][   T27] hid (null): unknown global tag 0xc
[  134.637710][   T27] hid (null): unknown global tag 0xd
[  134.682509][   T27] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  134.682549][   T27] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  134.682604][   T27] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  134.682631][   T27] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  134.682656][   T27] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  134.682681][   T27] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  134.682706][   T27] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  134.682760][   T27] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  134.682785][   T27] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  134.682809][   T27] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  134.683491][   T27] logitech-hidpp-device 0003:046D:C086.0006: unexpected long global item
[  134.690453][   T27] logitech-hidpp-device 0003:046D:C086.0006: hidpp_probe:parse failed
[  134.690581][   T27] logitech-hidpp-device 0003:046D:C086.0006: probe with driver logitech-hidpp-device failed with error -22
[  134.824328][ T5727] nzxt-smart2 0003:1E71:2009.0007: collection stack underflow
[  134.824360][ T5727] nzxt-smart2 0003:1E71:2009.0007: item 0 0 0 12 parsing failed
[  134.830241][ T5727] nzxt-smart2 0003:1E71:2009.0007: probe with driver nzxt-smart2 failed with error -22
[  134.861570][ T6964] loop2: detected capacity change from 0 to 22
[  134.883886][ T5727] usb 1-1: USB disconnect, device number 6
[  134.890192][ T6964] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  134.900847][ T6955] loop3: detected capacity change from 0 to 32768
[  134.914523][ T6955] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.407 (6955)
[  134.942796][ T6955] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  134.942832][ T6955] BTRFS info (device loop3): using blake2b checksum algorithm
[  134.975240][ T6964] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  134.998502][   T27] usb 2-1: USB disconnect, device number 5
[  135.092094][ T6955] BTRFS info (device loop3): enabling ssd optimizations
[  135.092124][ T6955] BTRFS info (device loop3): turning on async discard
[  135.092140][ T6955] BTRFS info (device loop3): enabling free space tree
[  135.261896][   T33] audit: type=1400 audit(1790296184.329:14): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6978 comm="syz.4.413" name="p" offset=58
[  135.808028][ T6991] loop1: detected capacity change from 0 to 64
[  135.832042][ T6987] loop4: detected capacity change from 0 to 4096
[  135.845151][ T6987] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  135.939389][   T33] audit: type=1800 audit(1790296185.009:15): pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.418" name="file1" dev="loop1" ino=21 res=0 errno=0
[  135.969885][ T6991] hfs: request for non-existent node 65538 in B*Tree
[  135.969905][ T6991] hfs: request for non-existent node 65538 in B*Tree
[  135.969914][ T6991] hfs: fail to find leaf node: node ID 65538
[  136.146358][ T5609] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  136.737372][   T33] audit: type=1400 audit(1790296185.809:16): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7004 comm="syz.4.426"
[  136.885679][ T7010] capability: warning: `syz.4.428' uses deprecated v2 capabilities in a way that may be insecure
[  136.969061][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.429'.
[  137.015009][ T5727] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  137.157965][ T6993] loop2: detected capacity change from 0 to 40427
[  137.175970][ T5727] usb 2-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00
[  137.180444][ T6993] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  137.180470][ T6993] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  137.181268][ T5727] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.181322][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  137.181348][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  137.181371][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  137.181393][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  137.181414][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64
[  137.181436][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64
[  137.181458][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64
[  137.181481][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  137.181503][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  137.181522][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  137.181542][ T5727] usb 2-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14
[  137.182091][ T6993] F2FS-fs (loop2): invalid crc value
[  137.193838][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.193864][ T5727] usb 2-1: Product: syz
[  137.193877][ T5727] usb 2-1: Manufacturer: syz
[  137.193890][ T5727] usb 2-1: SerialNumber: syz
[  137.211084][ T7008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  137.211245][ T7008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  137.211365][ T7008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  137.211680][ T7008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  137.211805][ T7008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  137.211929][ T7008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  137.212222][ T7008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  137.212350][ T7008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  137.225725][ T5727] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected
[  137.227084][ T5727] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7
[  137.256423][ T5727] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 5
[  137.380802][ T7020] loop3: detected capacity change from 0 to 2048
[  137.413933][ T5727] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  137.456575][ T5727] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3
[  137.462241][ T5727] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 4
[  137.462359][ T5727] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6
[  137.502192][ T5727] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  137.540259][ T7020] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.943002][ T6993] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  137.958170][ T7005] loop0: detected capacity change from 0 to 40427
[  138.017397][ T6993] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  138.017428][ T6993] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  138.044295][ T7005] F2FS-fs (loop0): invalid crc value
[  138.113277][   T33] audit: type=1800 audit(1790296187.179:17): pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.419" name="file1" dev="loop2" ino=10 res=0 errno=0
[  138.196843][ T5618] syz-executor: attempt to access beyond end of device
[  138.196843][ T5618] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  138.204423][ T5618] CPU: 1 UID: 0 PID: 5618 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  138.204469][ T5618] Tainted: [L]=SOFTLOCKUP
[  138.204481][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  138.204492][ T5618] Call Trace:
[  138.204503][ T5618]  <TASK>
[  138.204511][ T5618]  dump_stack_lvl+0xe8/0x150
[  138.204544][ T5618]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  138.204578][ T5618]  f2fs_write_end_bio+0xda7/0x11c0
[  138.204619][ T5618]  __submit_merged_bio+0x258/0x6a0
[  138.204636][ T5618]  ? rcu_is_watching+0x16/0xb0
[  138.204668][ T5618]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  138.204698][ T5618]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  138.204748][ T5618]  f2fs_write_data_pages+0x2a13/0x36e0
[  138.204805][ T5618]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  138.204838][ T5618]  ? is_bpf_text_address+0x292/0x2b0
[  138.204855][ T5618]  ? is_bpf_text_address+0x26/0x2b0
[  138.204898][ T5618]  ? stack_trace_save+0xa9/0x100
[  138.204920][ T5618]  ? __pfx_stack_trace_save+0x10/0x10
[  138.204959][ T5618]  ? lockdep_unlock+0x5c/0xd0
[  138.204978][ T5618]  ? __lock_acquire+0x1511/0x2de0
[  138.205026][ T5618]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  138.205048][ T5618]  do_writepages+0x338/0x560
[  138.205077][ T5618]  ? do_raw_spin_unlock+0xf5/0x200
[  138.205101][ T5618]  filemap_fdatawrite+0x1e9/0x2f0
[  138.205123][ T5618]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  138.205188][ T5618]  ? do_raw_spin_unlock+0xf5/0x200
[  138.205211][ T5618]  f2fs_sync_dirty_inodes+0x471/0x970
[  138.205249][ T5618]  f2fs_write_checkpoint+0x860/0x24d0
[  138.205308][ T5618]  kill_f2fs_super+0x2dc/0x700
[  138.205334][ T5618]  ? rcu_do_enqueue+0x616/0x870
[  138.205355][ T5618]  ? lockdep_hardirqs_on+0x7b/0x110
[  138.205375][ T5618]  ? __pfx_kill_f2fs_super+0x10/0x10
[  138.205413][ T5618]  ? __pfx_call_rcu+0x10/0x10
[  138.205444][ T5618]  ? shrinker_free+0x2a7/0x3b0
[  138.205474][ T5618]  deactivate_locked_super+0xbe/0x110
[  138.205498][ T5618]  cleanup_mnt+0x3d3/0x460
[  138.205526][ T5618]  task_work_run+0x1d9/0x260
[  138.205551][ T5618]  ? __pfx_task_work_run+0x10/0x10
[  138.205583][ T5618]  exit_to_user_mode_loop+0x204/0x770
[  138.205607][ T5618]  ? rcu_is_watching+0x16/0xb0
[  138.205636][ T5618]  do_syscall_64+0x328/0x520
[  138.205654][ T5618]  ? trace_irq_disable+0x3b/0x140
[  138.205676][ T5618]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.205693][ T5618]  ? clear_bhb_loop+0x70/0xc0
[  138.205716][ T5618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.205733][ T5618] RIP: 0033:0x7f3c0a99f397
[  138.205751][ T5618] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  138.205766][ T5618] RSP: 002b:00007ffd6390e678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  138.205786][ T5618] RAX: 0000000000000000 RBX: 00007f3c0aa344bb RCX: 00007f3c0a99f397
[  138.205798][ T5618] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6390e730
[  138.205809][ T5618] RBP: 00007ffd6390e730 R08: 00007ffd6390f730 R09: 00000000ffffffff
[  138.205821][ T5618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6390f7c0
[  138.205832][ T5618] R13: 00007f3c0aa344bb R14: 0000000000021b84 R15: 00007ffd6390f800
[  138.205863][ T5618]  </TASK>
[  138.233038][ T5618] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  138.414526][ T5727] usb 2-1: USB disconnect, device number 6
[  138.573642][ T5727] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  138.588495][ T5727] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  138.599776][ T5727] keyspan 2-1:1.0: device disconnected
[  138.641971][ T7005] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  138.675562][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'.
[  138.728777][ T7005] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[  138.728801][ T7005] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  138.728853][ T7005] F2FS-fs (loop0): Start checkpoint disabled!
[  138.778657][ T7005] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[  138.788261][ T7005] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  139.001068][ T7005] syz.0.425: attempt to access beyond end of device
[  139.001068][ T7005] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  139.132856][   T81] kworker/u8:5: attempt to access beyond end of device
[  139.132856][   T81] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  139.133919][   T81] CPU: 0 UID: 0 PID: 81 Comm: kworker/u8:5 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  139.133958][   T81] Tainted: [L]=SOFTLOCKUP
[  139.133966][   T81] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  139.133979][   T81] Workqueue: writeback wb_workfn (flush-7:0)
[  139.134040][   T81] Call Trace:
[  139.134049][   T81]  <TASK>
[  139.134059][   T81]  dump_stack_lvl+0xe8/0x150
[  139.134091][   T81]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  139.134128][   T81]  f2fs_write_end_bio+0xda7/0x11c0
[  139.134174][   T81]  __submit_merged_bio+0x258/0x6a0
[  139.134193][   T81]  ? rcu_is_watching+0x16/0xb0
[  139.134228][   T81]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  139.134262][   T81]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  139.134316][   T81]  f2fs_write_data_pages+0x2a13/0x36e0
[  139.134375][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  139.134452][   T81]  ? __lock_acquire+0x747/0x2de0
[  139.134513][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  139.134536][   T81]  do_writepages+0x338/0x560
[  139.134566][   T81]  ? reacquire_held_locks+0x117/0x1a0
[  139.134592][   T81]  ? writeback_sb_inodes+0x450/0x1af0
[  139.134617][   T81]  __writeback_single_inode+0x136/0x1220
[  139.134641][   T81]  ? do_raw_spin_unlock+0xf5/0x200
[  139.134667][   T81]  writeback_sb_inodes+0x9de/0x1af0
[  139.134686][   T81]  ? __lock_acquire+0x747/0x2de0
[  139.134739][   T81]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  139.134809][   T81]  ? rcu_is_watching+0x16/0xb0
[  139.134838][   T81]  ? queue_io+0x2d3/0x470
[  139.134863][   T81]  wb_writeback+0x41c/0xad0
[  139.134887][   T81]  ? queue_io+0x2a1/0x470
[  139.134914][   T81]  ? __pfx_wb_writeback+0x10/0x10
[  139.134931][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  139.134972][   T81]  wb_workfn+0x431/0x10f0
[  139.135029][   T81]  ? __pfx_wb_workfn+0x10/0x10
[  139.135072][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  139.135103][   T81]  ? lock_acquire+0x115/0x350
[  139.135137][   T81]  ? rcu_is_watching+0x16/0xb0
[  139.135167][   T81]  ? process_scheduled_works+0x97a/0x1630
[  139.135195][   T81]  process_scheduled_works+0xc3d/0x1630
[  139.135262][   T81]  ? __pfx_process_scheduled_works+0x10/0x10
[  139.135298][   T81]  ? assign_work+0x3cf/0x5d0
[  139.135333][   T81]  worker_thread+0xa47/0xfb0
[  139.135390][   T81]  kthread+0x38b/0x480
[  139.135413][   T81]  ? __pfx_worker_thread+0x10/0x10
[  139.135436][   T81]  ? __pfx_kthread+0x10/0x10
[  139.135460][   T81]  ret_from_fork+0x514/0xb70
[  139.135484][   T81]  ? __pfx_ret_from_fork+0x10/0x10
[  139.135503][   T81]  ? __switch_to+0xc78/0x1410
[  139.135534][   T81]  ? __pfx_kthread+0x10/0x10
[  139.135560][   T81]  ret_from_fork_asm+0x1a/0x30
[  139.135610][   T81]  </TASK>
[  139.269268][   T81] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  139.443818][ T7051] bonding: no command found in bonding_masters - use +ifname or -ifname
[  140.631737][ T7069] device-mapper: ioctl: Invalid ioctl structure: name c, dev 30
[  140.658499][ T7070] loop1: detected capacity change from 0 to 128
[  140.710430][ T7070] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  140.712798][ T7070] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  140.859926][ T5613] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  140.862435][ T7067] loop4: detected capacity change from 0 to 4096
[  140.970335][ T7080] synth uevent: /devices/platform/pcspkr: unknown uevent action string
[  140.970377][ T7080] platform pcspkr: uevent: failed to send synthetic uevent: -22
[  141.791130][ T7095] loop4: detected capacity change from 0 to 1024
[  141.841207][ T7095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.903020][   T54] Bluetooth: hci1: hardware error 0x04
[  142.217077][ T7088] loop1: detected capacity change from 0 to 131072
[  142.257778][ T7088] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945)
[  142.257813][ T7088] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  142.263216][ T7088] F2FS-fs (loop1): invalid crc value
[  142.267184][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  142.395857][ T7088] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  142.409681][ T7088] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  142.409711][ T7088] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  142.469503][   T10] usb 3-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00
[  142.471828][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  142.471858][   T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  142.474207][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.474231][   T10] usb 3-1: Product: syz
[  142.474242][   T10] usb 3-1: Manufacturer: syz
[  142.474254][   T10] usb 3-1: SerialNumber: syz
[  142.723375][   T10] usb 3-1: Limiting number of CPorts to U8_MAX
[  142.968091][ T7119] loop3: detected capacity change from 0 to 2048
[  143.019908][ T7119] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  143.020517][ T7119] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  143.033037][ T7119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.222278][ T7119] overlayfs: upper fs needs to support d_type.
[  143.250033][ T7119] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  143.250064][ T7119] overlayfs: failed to set xattr on upper
[  143.250072][ T7119] overlayfs: ...falling back to redirect_dir=nofollow.
[  143.250081][ T7119] overlayfs: ...falling back to index=off.
[  143.250089][ T7119] overlayfs: ...falling back to uuid=null.
[  143.325594][ T7126] loop0: detected capacity change from 0 to 4096
[  143.329121][ T5609] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh
[  143.329656][ T5609] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh
[  143.617087][ T7127] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.645373][   T10] usb 3-1: failed to execute ARPC: -110
[  143.645597][   T10] usb 3-1: failed to set connected state for cport 0: -110
[  143.645618][   T10] greybus greybus1: 0/0:0: failed to set connected state: -110
[  143.661941][   T10] usb 3-1: failed to send ARPC request 3: -71
[  143.662612][   T10] usb 3-1: failed to execute ARPC: -71
[  143.662789][   T10] usb 3-1: failed to clear cport 0: -71
[  143.662805][   T10] greybus greybus1: 0/0:0: failed to clear host cport: -71
[  143.826424][   T10] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -110
[  143.888871][   T10] usb 3-1: USB disconnect, device number 4
[  144.024490][   T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  144.276447][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.873016][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.097272][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.353320][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.442223][ T7151] netlink: 'syz.2.485': attribute type 12 has an invalid length.
[  145.442256][ T7151] netlink: 'syz.2.485': attribute type 29 has an invalid length.
[  145.442269][ T7151] netlink: 148 bytes leftover after parsing attributes in process `syz.2.485'.
[  145.442313][ T7151] netlink: 'syz.2.485': attribute type 1 has an invalid length.
[  145.442342][ T7151] netlink: 'syz.2.485': attribute type 2 has an invalid length.
[  145.736972][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.744357][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  145.752628][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  145.753615][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  145.781098][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  145.793891][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  146.682884][ T7190] sd 0:0:1:0: PR command failed: 1026
[  146.682936][ T7190] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  146.682996][ T7190] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  146.886346][   T12] bridge_slave_1: left allmulticast mode
[  146.886726][   T12] bridge_slave_1: left promiscuous mode
[  146.889752][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.019026][   T12] bridge_slave_0: left allmulticast mode
[  147.019056][   T12] bridge_slave_0: left promiscuous mode
[  147.019308][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.333627][ T7213] loop2: detected capacity change from 0 to 16
[  147.360328][ T7213] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  147.863689][   T54] Bluetooth: hci2: command tx timeout
[  148.178798][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.195515][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.198966][   T12] bond0 (unregistering): Released all slaves
[  148.332065][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1
[  148.561886][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'.
[  148.562067][ T7242] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.715085][ T7242] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.921026][ T7255] loop1: detected capacity change from 0 to 512
[  148.947580][ T7256] program syz.4.520 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  148.972275][ T7255] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13
[  148.972744][ T7255] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.519: inode #15: comm syz.1.519: iget: illegal inode #
[  148.972775][ T7255] loop1: lost filesystem error report for type 5 error -117
[  148.973350][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  148.973371][    C0] EXT4-fs (loop1): initial error at time 1790296198: ext4_orphan_get:1403
[  148.973394][    C0] EXT4-fs (loop1): last error at time 1790296198: ext4_orphan_get:1403
[  149.031323][ T7255] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.519: couldn't read orphan inode 15 (err -117)
[  149.031358][ T7255] loop1: lost filesystem error report for type 5 error -117
[  149.052944][ T7255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.250631][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.833389][ T5727] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  149.915917][ T7261] loop2: detected capacity change from 0 to 32768
[  149.950111][   T54] Bluetooth: hci2: command tx timeout
[  149.984003][ T5727] usb 1-1: Using ep0 maxpacket: 8
[  149.985619][ T5727] usb 1-1: New USB device found: idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  149.994817][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.994844][ T5727] usb 1-1: Product: syz
[  149.994858][ T5727] usb 1-1: Manufacturer: syz
[  149.994872][ T5727] usb 1-1: SerialNumber: syz
[  150.000676][ T5727] usb 1-1: config 0 descriptor??
[  150.019934][ T5727] gspca_main: se401-2.14.0 probing 047d:5003
[  150.435732][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2
[  150.696357][ T5727] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7
[  150.833050][   T51] IPVS: starting estimator thread 0...
[  150.933417][ T7286] IPVS: using max 27 ests per chain, 64800 per kthread
[  150.950720][ T5727] usb 1-1: USB disconnect, device number 7
[  151.128353][ T7290] loop2: detected capacity change from 0 to 2048
[  151.167529][ T7290] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.341281][   T12] hsr_slave_0: left promiscuous mode
[  151.367475][   T12] hsr_slave_1: left promiscuous mode
[  151.368615][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.368658][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.378010][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.378034][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.437779][   T12] batman_adv: batadv0: Interface deactivated: macsec1
[  151.437805][   T12] batman_adv: batadv0: Removing interface: macsec1
[  151.609225][   T12] veth1_macvtap: left promiscuous mode
[  151.609349][   T12] veth0_macvtap: left promiscuous mode
[  151.609488][   T12] veth1_vlan: left promiscuous mode
[  151.609589][   T12] veth0_vlan: left promiscuous mode
[  151.839284][ T7307] loop0: detected capacity change from 0 to 512
[  151.883367][ T7307] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.537: bg 0: block 5: invalid block bitmap
[  151.883403][ T7307] loop0: lost filesystem error report for type 5 error -117
[  151.884241][ T7307] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  151.884265][ T7307] loop0: lost filesystem error report for type 5 error -117
[  151.893014][    C1] EXT4-fs (loop0): error count since last fsck: 2
[  151.893037][    C1] EXT4-fs (loop0): initial error at time 1790296200: ext4_validate_block_bitmap:436
[  151.893060][    C1] EXT4-fs (loop0): last error at time 1790296200: ext4_mb_clear_bb:6680
[  151.943629][ T7307] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.537: invalid indirect mapped block 3 (level 2)
[  151.943663][ T7307] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  151.953162][ T7307] EXT4-fs (loop0): 1 orphan inode deleted
[  151.953186][ T7307] EXT4-fs (loop0): 1 truncate cleaned up
[  151.963214][ T7310] loop4: detected capacity change from 0 to 512
[  151.978740][ T7307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.023836][   T54] Bluetooth: hci2: command tx timeout
[  152.060221][ T7310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.060329][ T7310] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.191050][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.197278][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.550894][ T7323] netlink: 'syz.4.542': attribute type 3 has an invalid length.
[  152.550918][ T7323] netlink: 'syz.4.542': attribute type 1 has an invalid length.
[  152.550930][ T7323] netlink: 224 bytes leftover after parsing attributes in process `syz.4.542'.
[  152.670613][   T12] team0 (unregistering): Port device team_slave_1 removed
[  152.690121][   T12] team0 (unregistering): Port device team_slave_0 removed
[  153.529709][   T27] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  153.685597][   T27] usb 5-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=1.00
[  153.687884][   T27] usb 5-1: config index 0 descriptor too short (expected 69, got 51)
[  153.687951][   T27] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.687975][   T27] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.692852][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.692875][   T27] usb 5-1: Product: syz
[  153.692888][   T27] usb 5-1: Manufacturer: syz
[  153.692900][   T27] usb 5-1: SerialNumber: syz
[  153.815157][   T27] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  154.103588][   T54] Bluetooth: hci2: command tx timeout
[  154.120718][ T7163] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.121005][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.121227][ T7163] bridge_slave_0: entered allmulticast mode
[  154.131747][ T7163] bridge_slave_0: entered promiscuous mode
[  154.146906][ T7163] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.147070][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.147249][ T7163] bridge_slave_1: entered allmulticast mode
[  154.161316][ T7163] bridge_slave_1: entered promiscuous mode
[  154.284133][ T7163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.291517][ T7163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.355731][ T7163] team0: Port device team_slave_0 added
[  154.358923][ T7163] team0: Port device team_slave_1 added
[  154.405914][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.405933][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  154.405965][ T7163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.408121][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.408136][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  154.408159][ T7163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.580846][   T27] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -71
[  154.893137][ T7163] hsr_slave_0: entered promiscuous mode
[  154.893337][ T7353] loop1: detected capacity change from 0 to 32768
[  154.902363][ T7163] hsr_slave_1: entered promiscuous mode
[  154.913360][ T7163] debugfs: 'hsr0' already exists in 'hsr'
[  154.913393][ T7163] Cannot create hsr debugfs directory
[  154.927372][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3
[  155.084007][   T27] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  155.109112][   T27] usb 5-1: USB disconnect, device number 6
[  155.288522][ T6309] udevd[6309]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  155.892524][ T7381] Illegal XDP return value 4294967274 on prog  (id 29) dev N/A, expect packet loss!
[  156.514299][ T7163] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  156.544018][ T7163] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  156.795923][ T7163] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  156.836404][ T7163] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  156.837422][ T7163] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  156.860443][ T7163] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  156.861448][ T7163] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  156.888799][ T7163] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  156.917614][ T7405] loop1: detected capacity change from 0 to 512
[  156.991698][ T7405] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.562: bg 0: block 5: invalid block bitmap
[  156.991733][ T7405] loop1: lost filesystem error report for type 5 error -117
[  156.992400][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  156.992421][    C1] EXT4-fs (loop1): initial error at time 1790296206: ext4_validate_block_bitmap:436
[  156.992446][    C1] EXT4-fs (loop1): last error at time 1790296206: ext4_validate_block_bitmap:436
[  157.052248][ T7405] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  157.052278][ T7405] loop1: lost filesystem error report for type 5 error -117
[  157.064048][ T7405] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.562: invalid indirect mapped block 3 (level 2)
[  157.064087][ T7405] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  157.087881][ T7405] EXT4-fs (loop1): 1 orphan inode deleted
[  157.087908][ T7405] EXT4-fs (loop1): 1 truncate cleaned up
[  157.099740][ T7405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.196894][ T7405] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  157.338664][ T7163] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.354528][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4
[  157.378153][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.405207][ T7163] 8021q: adding VLAN 0 to HW filter on device team0
[  157.454312][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.454446][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.529503][ T7403] loop4: detected capacity change from 0 to 32768
[  157.538543][ T7403] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.563 (7403)
[  157.541034][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.541137][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.640579][ T7403] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  157.640614][ T7403] BTRFS info (device loop4): using crc32c checksum algorithm
[  157.921539][ T7403] BTRFS info (device loop4): enabling ssd optimizations
[  157.921571][ T7403] BTRFS info (device loop4): turning on flush-on-commit
[  157.921586][ T7403] BTRFS info (device loop4): enabling free space tree
[  157.921601][ T7403] BTRFS info (device loop4): enabling auto defrag
[  157.921619][ T7403] BTRFS info (device loop4): use lzo compression, level 1
[  157.921639][ T7403] BTRFS info (device loop4): max_inline set to 4096
[  158.690715][ T5607] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.127812][ T7443] loop2: detected capacity change from 0 to 131072
[  159.185716][ T7443] F2FS-fs (loop2): invalid crc value
[  159.271759][ T7443] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  159.272958][ T7443] loop2: lost filesystem error report for type 5 error -117
[  159.291246][ T7443] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  159.326779][ T7443] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  159.605034][ T7470] loop0: detected capacity change from 0 to 512
[  159.828251][ T7470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.828389][ T7470] ext4 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.886436][ T7163] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.104070][ T7470] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  160.142223][   T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  160.168366][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.345777][   T27] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  160.350517][   T27] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  160.350552][   T27] usb 2-1: config 0 interface 0 has no altsetting 0
[  160.354488][   T27] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  160.354514][   T27] usb 2-1: Product: syz
[  160.354526][   T27] usb 2-1: Manufacturer: syz
[  160.354539][   T27] usb 2-1: SerialNumber: syz
[  160.362897][   T27] usb 2-1: config 0 descriptor??
[  160.409028][   T27] usb 2-1: selecting invalid altsetting 0
[  160.614491][ T7491] loop0: detected capacity change from 0 to 128
[  160.640742][ T7491] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  160.659616][ T7494] loop2: detected capacity change from 0 to 736
[  160.677293][ T7491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.947332][   T27] usb 2-1: USB disconnect, device number 7
[  160.976057][ T7163] veth0_vlan: entered promiscuous mode
[  160.996262][ T7163] veth1_vlan: entered promiscuous mode
[  161.105292][ T7163] veth0_macvtap: entered promiscuous mode
[  161.128274][ T7163] veth1_macvtap: entered promiscuous mode
[  161.165723][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.230632][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.297987][ T7504] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  161.469740][ T1481] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.479015][ T1481] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.482834][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.483256][   T81] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.577123][ T6311] udevd[6311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.651632][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.651656][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.883672][ T1481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.883697][ T1481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.112457][ T7523] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  162.164467][ T7525] loop1: detected capacity change from 0 to 512
[  162.235688][ T7525] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  162.235809][ T7525] System zones: 0-2, 18-18, 34-35
[  162.261929][ T7525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.262046][ T7525] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.295467][ T5728] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  162.408714][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.451781][ T5728] usb 3-1: Using ep0 maxpacket: 16
[  162.455193][ T5728] usb 3-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00
[  162.456672][ T5728] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.456703][ T5728] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.456724][ T5728] usb 3-1: config 0 interface 0 has no altsetting 0
[  162.456757][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.494522][ T7532] loop4: detected capacity change from 0 to 1024
[  162.502206][ T7532] EXT4-fs: Ignoring removed orlov option
[  162.530317][ T5728] usb 3-1: config 0 descriptor??
[  162.566095][ T7532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.628417][ T7536] loop0: detected capacity change from 0 to 512
[  162.668861][ T7536] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  162.668886][ T7536] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  162.683371][ T7536] EXT4-fs (loop0): 1 truncate cleaned up
[  162.700919][ T7536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.976128][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.008325][ T5728] hid (null): unknown global tag 0xe
[  163.008353][ T5728] hid (null): unknown global tag 0xd
[  163.008369][ T5728] hid (null): unknown global tag 0xe
[  163.086638][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.217716][ T5728] usb 3-1: USB disconnect, device number 5
[  163.295002][ T7555] loop5: detected capacity change from 0 to 128
[  163.319374][ T7555] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  163.345465][ T7555] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  163.421089][  T140] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  163.446726][ T7559] netlink: 104 bytes leftover after parsing attributes in process `syz.1.603'.
[  164.132998][ T7583] loop0: detected capacity change from 0 to 512
[  164.251042][ T7583] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.614: inode has both inline data and extents flags
[  164.251080][ T7583] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  164.251520][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  164.251542][    C1] EXT4-fs (loop0): initial error at time 1790296213: ext4_orphan_get:1403: inode 15
[  164.251574][    C1] EXT4-fs (loop0): last error at time 1790296213: ext4_orphan_get:1403: inode 15
[  164.296714][ T7583] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.614: couldn't read orphan inode 15 (err -117)
[  164.296772][ T7583] loop0: lost filesystem error report for type 5 error -117
[  164.307963][ T7583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.326192][ T7591] loop2: detected capacity change from 0 to 256
[  164.340668][ T7591] exfat: Deprecated parameter 'utf8'
[  164.340690][ T7591] exfat: Deprecated parameter 'utf8'
[  164.346566][ T7591] exfat: Deprecated parameter 'utf8'
[  164.346599][ T7591] exfat: Deprecated parameter 'namecase'
[  164.420790][ T7591] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  164.464283][ T7593] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 2. Delete some EAs or run e2fsck.
[  164.671219][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.555995][ T7628] loop2: detected capacity change from 0 to 256
[  165.946213][ T7637] ipvlan0: entered promiscuous mode
[  165.954276][ T7637] ipvlan0: left promiscuous mode
[  166.360386][ T7647] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  166.437451][ T7618] loop0: detected capacity change from 0 to 40427
[  166.457622][ T7618] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  166.457650][ T7618] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  166.473867][ T7618] F2FS-fs (loop0): invalid crc value
[  166.703718][ T7618] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  166.765847][ T7618] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  166.765881][ T7618] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  166.820816][ T7655] input: syz0 as /devices/virtual/input/input10
[  166.860695][ T7662] input: syz1 as /devices/virtual/input/input11
[  167.003827][ T7667] loop1: detected capacity change from 0 to 1024
[  167.082108][ T6309] udevd[6309]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  168.222058][ T7692] loop0: detected capacity change from 0 to 128
[  168.239048][ T7692] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  168.244057][ T7692] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.292031][ T5791] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  168.447867][ T5791] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  168.452796][ T5791] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  168.452835][ T5791] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[  168.452856][ T5791] usb 2-1: config 0 interface 0 has no altsetting 0
[  168.456897][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  168.457004][ T5791] usb 2-1: Product: syz
[  168.457018][ T5791] usb 2-1: Manufacturer: syz
[  168.457031][ T5791] usb 2-1: SerialNumber: syz
[  168.468851][ T5791] usb 2-1: config 0 descriptor??
[  168.496555][ T5791] usb 2-1: selecting invalid altsetting 0
[  168.658786][ T7694] loop4: detected capacity change from 0 to 4096
[  168.767210][ T7704] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  168.835541][ T7689] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow!
[  168.857114][ T5791] usb 2-1: USB disconnect, device number 8
[  169.169200][ T6311] udevd[6311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  169.697836][ T1236] kernel read not supported for file /sysvipc/msg (pid: 1236 comm: kworker/0:2)
[  170.349230][ T7756] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd
[  170.736257][ T7773] netlink: 'syz.1.688': attribute type 13 has an invalid length.
[  170.807271][ T7745] mmap: syz.2.677 (7745) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  171.156666][ T7777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.690'.
[  171.373823][ T7787] loop0: detected capacity change from 0 to 2048
[  171.406609][ T7787] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  171.406636][ T7787] UDF-fs: Scanning with blocksize 512 failed
[  171.595231][ T7796] loop2: detected capacity change from 0 to 512
[  171.608405][ T7787] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  171.642866][ T7787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.756977][ T7796] EXT4-fs error (device loop2): ext4_quota_enable:7260: inode #4: comm syz.2.696: iget: bad i_size value: -1873497444986120192
[  171.757016][ T7796] loop2: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[  171.774722][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  171.774751][    C0] EXT4-fs (loop2): initial error at time 1790296220: ext4_quota_enable:7260: inode 4
[  171.774784][    C0] EXT4-fs (loop2): last error at time 1790296220: ext4_quota_enable:7260: inode 4
[  171.800817][ T7796] EXT4-fs error (device loop2): ext4_quota_enable:7263: comm syz.2.696: Bad quota inode: 4, type: 1
[  171.800850][ T7796] loop2: lost filesystem error report for type 5 error -117
[  171.804119][ T7796] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  171.823091][ T7796] EXT4-fs (loop2): mount failed
[  172.308471][ T7782] loop5: detected capacity change from 0 to 32768
[  172.348310][ T7782] 
[  172.348310][ T7782]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  172.348310][ T7782] 
[  172.422480][ T5791] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  172.449003][ T7782] ERROR: (device loop5): diWrite: ixpxd invalid
[  172.449003][ T7782] 
[  172.494040][ T7782] ERROR: (device loop5): txCommit: 
[  172.494040][ T7782] 
[  172.527520][ T7782] ERROR: (device loop5): dtReadFirst: btstack overrun
[  172.527520][ T7782] 
[  172.527559][ T7782] btstack dump:
[  172.527566][ T7782] bn = 0, index = 0
[  172.527577][ T7782] bn = 0, index = 0
[  172.527586][ T7782] bn = 0, index = 0
[  172.571811][ T5791] usb 1-1: Using ep0 maxpacket: 32
[  172.575131][ T5791] usb 1-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  172.575842][ T7782] bn = 0, index = 0
[  172.575855][ T7782] bn = 0, index = 0
[  172.575863][ T7782] bn = 0, index = 0
[  172.575872][ T7782] bn = 0, index = 0
[  172.575881][ T7782] bn = 0, index = 0
[  172.579029][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.653615][ T5791] usb 1-1: config 0 descriptor??
[  172.774680][ T5791] as10x_usb: device has been detected
[  172.776152][ T5791] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  172.796843][   T45] ERROR: (device loop5): diWrite: ixpxd invalid
[  172.796843][   T45] 
[  172.797589][   T45] ERROR: (device loop5): txCommit: 
[  172.797589][   T45] 
[  172.797637][   T45] jfs_write_inode: jfs_commit_inode failed!
[  172.798977][ T7163] 
[  172.798977][ T7163]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  172.798977][ T7163] 
[  172.839040][ T7163] 
[  172.839040][ T7163]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  172.839040][ T7163] 
[  172.977841][ T5791] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  173.311402][ T5791] as10x_usb: error during firmware upload part1
[  173.325255][ T5791] Registered device nBox DVB-T Dongle
[  173.336559][ T5791] usb 1-1: USB disconnect, device number 8
[  173.477102][ T7818] loop1: detected capacity change from 0 to 131072
[  173.479063][ T7818] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945)
[  173.479094][ T7818] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  173.494263][ T7818] F2FS-fs (loop1): invalid crc value
[  173.615389][ T7818] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  173.636122][ T7818] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  173.636152][ T7818] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  173.684929][ T5791] Unregistered device nBox DVB-T Dongle
[  173.701160][ T7810] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12
[  173.709205][ T5791] as10x_usb: device has been disconnected
[  174.201128][   T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  174.201169][   T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  174.201197][   T54] Tainted: [L]=SOFTLOCKUP
[  174.201205][   T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  174.201218][   T54] Workqueue: hci2 hci_rx_work
[  174.201258][   T54] Call Trace:
[  174.201266][   T54]  <TASK>
[  174.201276][   T54]  dump_stack_lvl+0xe8/0x150
[  174.201309][   T54]  sysfs_create_dir_ns+0x271/0x2a0
[  174.201335][   T54]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  174.201367][   T54]  ? do_raw_spin_unlock+0xf5/0x200
[  174.201394][   T54]  kobject_add_internal+0x622/0xcd0
[  174.201428][   T54]  kobject_add+0x163/0x240
[  174.201459][   T54]  ? __pfx_kobject_add+0x10/0x10
[  174.201491][   T54]  ? get_device_parent+0x366/0x3a0
[  174.201516][   T54]  device_add+0x3fa/0xb80
[  174.201542][   T54]  hci_conn_add_sysfs+0xd5/0x210
[  174.201577][   T54]  le_conn_complete_evt+0x10b2/0x17a0
[  174.201605][   T54]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  174.201628][   T54]  ? __mutex_unlock_slowpath+0x731/0x900
[  174.201655][   T54]  ? skb_pull_data+0xf0/0x200
[  174.201685][   T54]  hci_le_conn_complete_evt+0x187/0x470
[  174.201716][   T54]  hci_event_packet+0x67a/0xf10
[  174.201750][   T54]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  174.201777][   T54]  ? __pfx_hci_event_packet+0x10/0x10
[  174.201830][   T54]  ? kcov_remote_start+0x523/0x7e0
[  174.201861][   T54]  ? hci_send_to_monitor+0xdf/0x600
[  174.201890][   T54]  hci_rx_work+0x2b4/0x1110
[  174.201926][   T54]  ? process_scheduled_works+0x97a/0x1630
[  174.201956][   T54]  process_scheduled_works+0xc3d/0x1630
[  174.202023][   T54]  ? __pfx_process_scheduled_works+0x10/0x10
[  174.202060][   T54]  ? assign_work+0x3cf/0x5d0
[  174.202095][   T54]  worker_thread+0xa47/0xfb0
[  174.202153][   T54]  kthread+0x38b/0x480
[  174.202177][   T54]  ? __pfx_worker_thread+0x10/0x10
[  174.202204][   T54]  ? __pfx_kthread+0x10/0x10
[  174.202229][   T54]  ret_from_fork+0x514/0xb70
[  174.202252][   T54]  ? __pfx_ret_from_fork+0x10/0x10
[  174.202272][   T54]  ? __switch_to+0xc78/0x1410
[  174.202305][   T54]  ? __pfx_kthread+0x10/0x10
[  174.202331][   T54]  ret_from_fork_asm+0x1a/0x30
[  174.202378][   T54]  </TASK>
[  174.204845][   T54] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  174.204893][   T54] Bluetooth: hci2: failed to register connection device
[  174.488256][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz.0.713'.
[  174.489588][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz.0.713'.
[  174.509266][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz.0.713'.
[  174.817865][ T7861] loop1: detected capacity change from 0 to 512
[  174.869134][ T7861] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.715: corrupted in-inode xattr: invalid ea_ino
[  174.869172][ T7861] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  174.870233][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  174.870255][    C0] EXT4-fs (loop1): initial error at time 1790296223: ext4_iget_extra_inode:5210: inode 15
[  174.870287][    C0] EXT4-fs (loop1): last error at time 1790296223: ext4_iget_extra_inode:5210: inode 15
[  174.872925][ T7861] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.715: couldn't read orphan inode 15 (err -117)
[  174.872960][ T7861] loop1: lost filesystem error report for type 5 error -117
[  174.885310][ T7861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.189706][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.330642][ T7877] loop0: detected capacity change from 0 to 512
[  175.440792][ T7877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.440908][ T7877] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.502061][   T33] audit: type=1400 audit(1790296224.574:18): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7880 comm="syz.1.722" name="p" offset=48
[  175.601403][ T7877] EXT4-fs warning (device loop0): ext4_group_add:1715: Can't resize non-sparse filesystem further
[  175.788848][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.139485][ T7898] batman_adv: batadv0: Adding interface: macvtap1
[  176.139506][ T7898] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  176.139534][ T7898] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  176.242584][ T7860] loop2: detected capacity change from 0 to 32768
[  176.247344][ T7860] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.717 (7860)
[  176.315004][ T7860] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.315062][ T7860] BTRFS info (device loop2): using crc32c checksum algorithm
[  176.523108][ T7860] BTRFS info (device loop2): enabling ssd optimizations
[  176.523141][ T7860] BTRFS info (device loop2): turning on async discard
[  176.523158][ T7860] BTRFS info (device loop2): enabling free space tree
[  176.675662][ T5618] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  177.022177][ T7935] Cannot find set identified by id 0 to match
[  177.227750][ T7939] loop0: detected capacity change from 0 to 1024
[  177.258023][ T7939] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  177.478246][ T7946] netlink: 'syz.0.738': attribute type 4 has an invalid length.
[  177.478272][ T7946] netlink: 'syz.0.738': attribute type 8 has an invalid length.
[  177.478285][ T7946] netlink: 212 bytes leftover after parsing attributes in process `syz.0.738'.
[  177.872956][ T7954] loop1: detected capacity change from 0 to 256
[  177.955873][ T7954] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d)
[  178.449297][ T7929] loop4: detected capacity change from 0 to 40427
[  178.463860][ T7929] F2FS-fs (loop4): build fault injection rate: 174
[  178.463886][ T7929] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  178.474763][ T7929] F2FS-fs (loop4): invalid crc value
[  178.845466][ T7929] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  178.865359][ T7929] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  178.995222][ T7953] loop5: detected capacity change from 0 to 40427
[  179.024727][ T7953] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  179.024760][ T7953] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  179.044474][ T7953] F2FS-fs (loop5): invalid crc_offset: 33558524
[  179.185048][   T33] audit: type=1400 audit(1790296228.254:19): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7989 comm="syz.1.752" name="p" offset=53
[  179.433759][ T5607] syz-executor: attempt to access beyond end of device
[  179.433759][ T5607] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  179.441565][ T5607] CPU: 0 UID: 0 PID: 5607 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  179.441595][ T5607] Tainted: [L]=SOFTLOCKUP
[  179.441602][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  179.441613][ T5607] Call Trace:
[  179.441620][ T5607]  <TASK>
[  179.441628][ T5607]  dump_stack_lvl+0xe8/0x150
[  179.441661][ T5607]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  179.441696][ T5607]  f2fs_write_end_bio+0xda7/0x11c0
[  179.441736][ T5607]  __submit_merged_bio+0x258/0x6a0
[  179.441753][ T5607]  ? rcu_is_watching+0x16/0xb0
[  179.441784][ T5607]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  179.441816][ T5607]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  179.441867][ T5607]  f2fs_write_data_pages+0x2a13/0x36e0
[  179.441924][ T5607]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  179.441991][ T5607]  ? __pfx_clockevents_program_event+0x10/0x10
[  179.442028][ T5607]  ? __pfx___schedule+0x10/0x10
[  179.442043][ T5607]  ? irqentry_exit+0x218/0x910
[  179.442073][ T5607]  ? do_raw_spin_lock+0x12b/0x2f0
[  179.442096][ T5607]  ? preempt_schedule_common+0x7f/0xd0
[  179.442121][ T5607]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  179.442143][ T5607]  do_writepages+0x338/0x560
[  179.442172][ T5607]  ? do_raw_spin_unlock+0xf5/0x200
[  179.442195][ T5607]  filemap_fdatawrite+0x1e9/0x2f0
[  179.442218][ T5607]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  179.442282][ T5607]  ? do_raw_spin_unlock+0xf5/0x200
[  179.442314][ T5607]  f2fs_sync_dirty_inodes+0x471/0x970
[  179.442352][ T5607]  f2fs_write_checkpoint+0x860/0x24d0
[  179.442411][ T5607]  kill_f2fs_super+0x2dc/0x700
[  179.442438][ T5607]  ? rcu_do_enqueue+0x616/0x870
[  179.442459][ T5607]  ? lockdep_hardirqs_on+0x7b/0x110
[  179.442478][ T5607]  ? __pfx_kill_f2fs_super+0x10/0x10
[  179.442520][ T5607]  ? __pfx_call_rcu+0x10/0x10
[  179.442552][ T5607]  ? shrinker_free+0x2a7/0x3b0
[  179.442574][ T5607]  deactivate_locked_super+0xbe/0x110
[  179.442597][ T5607]  cleanup_mnt+0x3d3/0x460
[  179.442625][ T5607]  task_work_run+0x1d9/0x260
[  179.442650][ T5607]  ? __pfx_task_work_run+0x10/0x10
[  179.442682][ T5607]  exit_to_user_mode_loop+0x204/0x770
[  179.442706][ T5607]  ? rcu_is_watching+0x16/0xb0
[  179.442736][ T5607]  do_syscall_64+0x328/0x520
[  179.442754][ T5607]  ? trace_irq_disable+0x3b/0x140
[  179.442776][ T5607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.442795][ T5607]  ? clear_bhb_loop+0x70/0xc0
[  179.442817][ T5607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.442835][ T5607] RIP: 0033:0x7fd15af9f397
[  179.442853][ T5607] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  179.442868][ T5607] RSP: 002b:00007ffe6e4fce98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  179.442890][ T5607] RAX: 0000000000000000 RBX: 00007fd15b0344bb RCX: 00007fd15af9f397
[  179.442902][ T5607] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6e4fcf50
[  179.442913][ T5607] RBP: 00007ffe6e4fcf50 R08: 00007ffe6e4fdf50 R09: 00000000ffffffff
[  179.442926][ T5607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6e4fdfe0
[  179.442938][ T5607] R13: 00007fd15b0344bb R14: 000000000002bc16 R15: 00007ffe6e4fe020
[  179.442969][ T5607]  </TASK>
[  179.453616][ T5607] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  179.554055][ T1236] loop4: lost filesystem error report for type 5 error -108
[  179.657684][ T7953] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  179.736643][ T7953] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  179.736672][ T7953] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  179.894951][ T8001] batman_adv: batadv0: Adding interface: gretap2
[  179.894972][ T8001] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  179.895003][ T8001] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active
[  180.091470][ T7953] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  180.091508][ T7953] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  180.091543][ T7953] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  180.091560][ T7953] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  180.091576][ T7953] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  180.091591][ T7953] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  180.091605][ T7953] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  180.091621][ T7953] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  180.091635][ T7953] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  180.091650][ T7953] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  180.198814][ T8013] RDS: rds_bind could not find a transport for 4600::, load rds_tcp or rds_rdma?
[  180.390060][ T1236] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  180.470519][ T5728] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  180.542770][ T1236] usb 3-1: New USB device found: idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  180.543894][ T1236] usb 3-1: config 150 has an invalid interface number: 204 but max is 2
[  180.543922][ T1236] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  180.543942][ T1236] usb 3-1: config 150 has no interface number 0
[  180.543984][ T1236] usb 3-1: config 150 interface 204 has no altsetting 0
[  180.546403][ T1236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.546426][ T1236] usb 3-1: Product: syz
[  180.546441][ T1236] usb 3-1: Manufacturer: syz
[  180.546454][ T1236] usb 3-1: SerialNumber: syz
[  180.644393][ T5728] usb 1-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  180.655749][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  180.655776][ T5728] usb 1-1: Product: syz
[  180.655789][ T5728] usb 1-1: SerialNumber: syz
[  180.664371][ T5728] usb 1-1: config 0 descriptor??
[  180.950149][ T5728] hso 1-1:0.0: Failed to find BULK eps
[  180.961777][ T1236] xr_serial 3-1:150.204: skipping garbage
[  180.961829][ T1236] xr_serial 3-1:150.204: xr_serial converter detected
[  181.108612][   T32] usb 1-1: USB disconnect, device number 9
[  181.471903][ T1236] xr_serial ttyUSB0: Failed to set reg 0x0d: -71
[  181.471970][ T1236] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  181.524358][ T1236] usb 3-1: USB disconnect, device number 6
[  181.563361][ T1236] xr_serial 3-1:150.204: device disconnected
[  181.696246][ T8040] loop4: detected capacity change from 0 to 1024
[  181.710802][ T8040] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  181.839274][ T8036] loop5: detected capacity change from 0 to 32768
[  181.884692][ T8036] XFS (loop5): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent.
[  181.979759][ T7163] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  182.302028][ T8056] netlink: 76 bytes leftover after parsing attributes in process `syz.4.776'.
[  182.302057][ T8056] netlink: 32 bytes leftover after parsing attributes in process `syz.4.776'.
[  182.728835][ T8070] loop5: detected capacity change from 0 to 128
[  183.119014][ T8075] loop0: detected capacity change from 0 to 256
[  183.171675][ T8077] loop2: detected capacity change from 0 to 128
[  183.311084][ T8077] syz.2.785: attempt to access beyond end of device
[  183.311084][ T8077] loop2: rw=2049, sector=138, nr_sectors = 6 limit=128
[  184.203545][ T8101] profile_transition: unconfined exec no attachment
[  184.277728][ T8105] profile_transition: unconfined exec no attachment
[  184.635104][ T1236] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  184.687594][ T8113] loop4: detected capacity change from 0 to 1024
[  184.708379][ T8092] loop2: detected capacity change from 0 to 32768
[  184.733301][ T8092] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.792 (8092)
[  184.758654][ T8092] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  184.758693][ T8092] BTRFS info (device loop2): using blake2b checksum algorithm
[  184.801615][ T1236] usb 1-1: Using ep0 maxpacket: 16
[  184.803787][ T1236] usb 1-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00
[  184.809479][ T1236] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.809512][ T1236] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.809532][ T1236] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  184.809556][ T1236] usb 1-1: config 0 interface 0 has no altsetting 0
[  184.809587][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.822106][ T1236] usb 1-1: config 0 descriptor??
[  184.904618][ T8125] loop1: detected capacity change from 0 to 512
[  184.925064][ T8113] hfsplus: xattr search failed
[  184.975594][ T8125] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  184.975719][ T8125] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.804: corrupted in-inode xattr: e_value size too large
[  184.975747][ T8125] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  184.979851][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  184.979880][    C1] EXT4-fs (loop1): initial error at time 1790296234: ext4_iget_extra_inode:5210: inode 15
[  184.979914][    C1] EXT4-fs (loop1): last error at time 1790296234: ext4_iget_extra_inode:5210: inode 15
[  185.001843][ T8125] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.804: couldn't read orphan inode 15 (err -117)
[  185.001879][ T8125] loop1: lost filesystem error report for type 5 error -117
[  185.048825][ T8092] BTRFS info (device loop2): enabling ssd optimizations
[  185.048854][ T8092] BTRFS info (device loop2): turning on async discard
[  185.048890][ T8092] BTRFS info (device loop2): enabling free space tree
[  185.048906][ T8092] BTRFS info (device loop2): use zstd compression, level 3
[  185.062047][ T8125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.171442][ T8122] hfsplus: xattr search failed
[  185.195746][   T33] audit: type=1800 audit(1790296234.265:20): pid=8122 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.802" name="file1" dev="loop4" ino=20 res=0 errno=0
[  185.219151][   T33] audit: type=1800 audit(1790296234.275:21): pid=8092 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.2.792" name="file1" dev="loop2" ino=260 res=0 errno=0
[  185.330575][ T8138] profile_transition: unconfined exec no attachment
[  185.340196][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.386048][ T1236] hid (null): report_id 49134 is invalid
[  185.386084][ T1236] hid (null): unknown global tag 0xd
[  185.386127][ T1236] hid (null): unknown global tag 0xc
[  185.394875][ T1236] hid (null): unknown global tag 0xc
[  185.394924][ T1236] hid (null): global environment stack overflow
[  185.584562][ T8140] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  185.619488][   T32] usb 1-1: USB disconnect, device number 10
[  185.721909][ T5618] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  185.864917][ T8145] profile_transition: unconfined exec no attachment
[  185.972559][ T8148] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  185.972593][ T8148] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  187.037002][ T8174] loop5: detected capacity change from 0 to 512
[  187.090448][ T8177] loop4: detected capacity change from 0 to 256
[  187.131853][ T8174] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  187.138804][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  187.138833][    C0] EXT4-fs (loop5): initial error at time 1790296236: ext4_mb_generate_buddy:1317
[  187.138860][    C0] EXT4-fs (loop5): last error at time 1790296236: ext4_mb_generate_buddy:1317
[  187.156919][ T8174] EXT4-fs (loop5): Remounting filesystem read-only
[  187.166320][ T8174] EXT4-fs (loop5): 1 truncate cleaned up
[  187.168168][ T8174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.216026][ T8177] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d)
[  187.231566][ T7163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.344669][ T8142] loop1: detected capacity change from 0 to 32768
[  187.374306][ T8159] loop0: detected capacity change from 0 to 32768
[  187.487072][ T8159] 
[  187.487072][ T8159]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  187.487072][ T8159] 
[  187.617475][ T8159] ERROR: (device loop0): diWrite: ixpxd invalid
[  187.617475][ T8159] 
[  187.745158][ T8159] ERROR: (device loop0): txCommit: 
[  187.745158][ T8159] 
[  187.997123][ T5606] 
[  187.997123][ T5606]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  187.997123][ T5606] 
[  187.997461][ T5606] 
[  187.997461][ T5606]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  187.997461][ T5606] 
[  188.405022][ T8142] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  188.405048][ T8142] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  188.470547][ T8179] loop2: detected capacity change from 0 to 131072
[  188.475706][ T8179] F2FS-fs (loop2): Test dummy encryption mode enabled
[  188.585686][ T8179] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  188.601504][ T8179] F2FS-fs (loop2): Mounted with checkpoint version = 1b41e955
[  189.026306][ T8142] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 18, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[  189.026346][ T8142] gfs2: fsid=syz:syz.0: G:  s:SH n:2/12 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:2
[  189.026376][ T8142] gfs2: fsid=syz:syz.0:  H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[  189.026416][ T8142] gfs2: fsid=syz:syz.0:  I: n:1/18 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[  189.026449][ T8142] CPU: 1 UID: 0 PID: 8142 Comm: syz.1.807 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  189.026478][ T8142] Tainted: [L]=SOFTLOCKUP
[  189.026485][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  189.026498][ T8142] Call Trace:
[  189.026508][ T8142]  <TASK>
[  189.026518][ T8142]  dump_stack_lvl+0xe8/0x150
[  189.026550][ T8142]  gfs2_withdraw+0xc3/0x1b0
[  189.026578][ T8142]  gfs2_jdesc_check+0x17d/0x2f0
[  189.026614][ T8142]  init_journal+0xcc8/0x2390
[  189.026655][ T8142]  ? init_inodes+0xdb/0x320
[  189.026685][ T8142]  ? __pfx_init_journal+0x10/0x10
[  189.026709][ T8142]  ? vsnprintf+0xe42/0xef0
[  189.026750][ T8142]  ? snprintf+0xe8/0x140
[  189.026780][ T8142]  ? init_inodes+0xdb/0x320
[  189.026824][ T8142]  ? __pfx_snprintf+0x10/0x10
[  189.026854][ T8142]  ? gfs2_glock_nq_num+0x15f/0x1a0
[  189.026888][ T8142]  init_inodes+0xdb/0x320
[  189.026917][ T8142]  gfs2_fill_super+0x193f/0x20b0
[  189.026959][ T8142]  ? __pfx_gfs2_fill_super+0x10/0x10
[  189.026987][ T8142]  ? init_locking+0xb8/0x210
[  189.027010][ T8142]  ? sb_set_blocksize+0x155/0x240
[  189.027040][ T8142]  ? setup_bdev_super+0x586/0x680
[  189.027071][ T8142]  get_tree_bdev_flags+0x430/0x4f0
[  189.027103][ T8142]  ? __pfx_gfs2_fill_super+0x10/0x10
[  189.027130][ T8142]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  189.027166][ T8142]  gfs2_get_tree+0x51/0x1e0
[  189.027196][ T8142]  vfs_get_tree+0x92/0x2a0
[  189.027245][ T8142]  do_new_mount+0x319/0xdc0
[  189.027270][ T8142]  ? __pfx_do_new_mount+0x10/0x10
[  189.027294][ T8142]  ? ns_capable+0x84/0xe0
[  189.027323][ T8142]  ? path_mount+0x647/0x1050
[  189.027348][ T8142]  ? user_path_at+0xd4/0x160
[  189.027373][ T8142]  __se_sys_mount+0x31d/0x420
[  189.027402][ T8142]  ? __pfx___se_sys_mount+0x10/0x10
[  189.027432][ T8142]  ? __x64_sys_mount+0x20/0xc0
[  189.027456][ T8142]  do_syscall_64+0x166/0x520
[  189.027475][ T8142]  ? trace_irq_disable+0x3b/0x140
[  189.027500][ T8142]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.027521][ T8142]  ? clear_bhb_loop+0x70/0xc0
[  189.027546][ T8142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.027566][ T8142] RIP: 0033:0x7f37acb9f3ca
[  189.027587][ T8142] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.027604][ T8142] RSP: 002b:00007f37adabfe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  189.027627][ T8142] RAX: ffffffffffffffda RBX: 00007f37adabfee0 RCX: 00007f37acb9f3ca
[  189.027643][ T8142] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f37adabfea0
[  189.027657][ T8142] RBP: 00002000000124c0 R08: 00007f37adabfee0 R09: 0000000000000000
[  189.027672][ T8142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500
[  189.027685][ T8142] R13: 00007f37adabfea0 R14: 00000000000125f4 R15: 00002000000000c0
[  189.027716][ T8142]  </TASK>
[  189.100588][ T8142] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[  189.688365][ T8210] loop4: detected capacity change from 0 to 1024
[  189.918089][ T8214] loop5: detected capacity change from 0 to 1024
[  189.942831][ T8217] vcan0: tx address claim with dlc 0
[  190.304031][ T8214] hfsplus: xattr search failed
[  190.701043][ T8219] loop1: detected capacity change from 0 to 32768
[  190.717141][ T8219] BTRFS info: device /dev/loop1 (7:1) using temp-fsid c8d0b26b-d7f5-47d3-b87c-a91402995491
[  190.717210][ T8219] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.840 (8219)
[  190.743956][ T8219] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  190.743993][ T8219] BTRFS info (device loop1): using sha256 checksum algorithm
[  190.929262][ T8219] BTRFS info (device loop1): enabling ssd optimizations
[  190.929295][ T8219] BTRFS info (device loop1): turning on async discard
[  190.929312][ T8219] BTRFS info (device loop1): enabling free space tree
[  191.096940][ T8247] profile_transition: unconfined exec no attachment
[  191.225193][ T8224] loop4: detected capacity change from 0 to 32768
[  191.231428][ T8224] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.841 (8224)
[  191.258051][ T8224] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.258091][ T8224] BTRFS info (device loop4): using crc32c checksum algorithm
[  191.258956][ T8249] loop5: detected capacity change from 0 to 512
[  191.326299][ T8249] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  191.417273][ T8249] EXT4-fs (loop5): 1 truncate cleaned up
[  191.443555][ T8249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.487743][ T5613] BTRFS info (device loop1): last unmount of filesystem c8d0b26b-d7f5-47d3-b87c-a91402995491
[  191.603726][ T8249] EXT4-fs error (device loop5): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.5.846: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  191.604702][ T8224] BTRFS info (device loop4): enabling ssd optimizations
[  191.604725][ T8224] BTRFS info (device loop4): turning on flush-on-commit
[  191.604740][ T8224] BTRFS info (device loop4): enabling free space tree
[  191.604754][ T8224] BTRFS info (device loop4): enabling auto defrag
[  191.604770][ T8224] BTRFS info (device loop4): use lzo compression, level 1
[  191.604788][ T8224] BTRFS info (device loop4): max_inline set to 4096
[  191.696694][ T8270] netlink: 244 bytes leftover after parsing attributes in process `syz.0.847'.
[  191.696721][ T8270] netlink: 'syz.0.847': attribute type 1 has an invalid length.
[  191.717455][ T8249] EXT4-fs (loop5): Remounting filesystem read-only
[  191.818973][ T8274] profile_transition: unconfined exec no attachment
[  191.881906][ T7163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.004071][ T8277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  192.004093][ T8277] IPv6: NLM_F_CREATE should be set when creating new route
[  192.308532][ T5607] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.760724][ T8291] loop2: detected capacity change from 0 to 2048
[  192.779563][ T8291] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  193.070728][   T32] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  193.232428][   T32] usb 6-1: Using ep0 maxpacket: 8
[  193.233200][   T32] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  193.234382][   T32] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  193.234407][   T32] usb 6-1: config 0 has no interface number 0
[  193.234443][   T32] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  193.234465][   T32] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  193.234487][   T32] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  193.234511][   T32] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  193.234549][   T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.326565][   T32] usb 6-1: config 0 descriptor??
[  193.356253][   T32] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  193.639701][   T32] usb 6-1: USB disconnect, device number 2
[  193.649770][   T32] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  193.873704][ T8288] loop0: detected capacity change from 0 to 40427
[  193.931528][ T8288] F2FS-fs (loop0): Image doesn't support compression
[  193.932093][ T8288] F2FS-fs (loop0): build fault injection type: 0x4
[  193.939836][ T8288] F2FS-fs (loop0): invalid crc value
[  193.995985][ T8308] profile_transition: unconfined exec no attachment
[  194.250949][ T8288] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  194.277126][ T8288] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  194.432710][ T8319] jffs2: notice: (8319) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  194.542808][ T8288] syz.0.857: attempt to access beyond end of device
[  194.542808][ T8288] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  194.637995][ T8288] CPU: 0 UID: 0 PID: 8288 Comm: syz.0.857 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  194.638038][ T8288] Tainted: [L]=SOFTLOCKUP
[  194.638046][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  194.638059][ T8288] Call Trace:
[  194.638069][ T8288]  <TASK>
[  194.638078][ T8288]  dump_stack_lvl+0xe8/0x150
[  194.638118][ T8288]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  194.638159][ T8288]  f2fs_write_end_bio+0xda7/0x11c0
[  194.638207][ T8288]  __submit_merged_bio+0x258/0x6a0
[  194.638227][ T8288]  ? rcu_is_watching+0x16/0xb0
[  194.638262][ T8288]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  194.638298][ T8288]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  194.638358][ T8288]  f2fs_write_data_pages+0x2a13/0x36e0
[  194.638428][ T8288]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  194.638451][ T8288]  ? is_bpf_text_address+0x26/0x2b0
[  194.638486][ T8288]  ? arch_stack_walk+0xfb/0x150
[  194.638545][ T8288]  ? add_lock_to_list+0xc7/0x100
[  194.638574][ T8288]  ? lockdep_unlock+0x5c/0xd0
[  194.638594][ T8288]  ? __lock_acquire+0x1511/0x2de0
[  194.638652][ T8288]  ? do_raw_spin_lock+0x12b/0x2f0
[  194.638686][ T8288]  ? do_raw_spin_unlock+0xf5/0x200
[  194.638708][ T8288]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  194.638734][ T8288]  do_writepages+0x338/0x560
[  194.638768][ T8288]  ? do_raw_spin_unlock+0xf5/0x200
[  194.638793][ T8288]  filemap_fdatawrite+0x1e9/0x2f0
[  194.638826][ T8288]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  194.638900][ T8288]  ? do_raw_spin_unlock+0xf5/0x200
[  194.638927][ T8288]  f2fs_sync_dirty_inodes+0x471/0x970
[  194.638970][ T8288]  f2fs_write_checkpoint+0x860/0x24d0
[  194.639036][ T8288]  f2fs_issue_checkpoint+0x424/0x6f0
[  194.639073][ T8288]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  194.639097][ T8288]  ? kasan_save_free_info+0x40/0x50
[  194.639115][ T8288]  ? __kasan_slab_free+0x5c/0x80
[  194.639137][ T8288]  ? kmem_cache_free+0x182/0x650
[  194.639158][ T8288]  ? f2fs_mknod+0x3f5/0x690
[  194.639183][ T8288]  ? vfs_mknod+0x448/0x610
[  194.639205][ T8288]  ? filename_mknodat+0x3cb/0x660
[  194.639228][ T8288]  ? __se_sys_mknodat+0x3b/0x150
[  194.639251][ T8288]  ? do_syscall_64+0x166/0x520
[  194.639271][ T8288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.639299][ T8288]  ? __lock_acquire+0x747/0x2de0
[  194.639377][ T8288]  ? f2fs_sync_fs+0x1f2/0x3c0
[  194.639411][ T8288]  f2fs_mknod+0x4b8/0x690
[  194.639446][ T8288]  ? __pfx_f2fs_mknod+0x10/0x10
[  194.639484][ T8288]  ? bpf_lsm_inode_mknod+0x9/0x20
[  194.639506][ T8288]  ? security_inode_mknod+0xc7/0x370
[  194.639534][ T8288]  vfs_mknod+0x448/0x610
[  194.639570][ T8288]  filename_mknodat+0x3cb/0x660
[  194.639606][ T8288]  ? __pfx_filename_mknodat+0x10/0x10
[  194.639638][ T8288]  ? do_getname+0x151/0x250
[  194.639663][ T8288]  __se_sys_mknodat+0x3b/0x150
[  194.639691][ T8288]  do_syscall_64+0x166/0x520
[  194.639711][ T8288]  ? trace_irq_disable+0x3b/0x140
[  194.639734][ T8288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.639754][ T8288]  ? clear_bhb_loop+0x70/0xc0
[  194.639780][ T8288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.639800][ T8288] RIP: 0033:0x7fd65e99e159
[  194.639831][ T8288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  194.639849][ T8288] RSP: 002b:00007fd65f913028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[  194.639871][ T8288] RAX: ffffffffffffffda RBX: 00007fd65ec25fa0 RCX: 00007fd65e99e159
[  194.639887][ T8288] RDX: 0000000000002000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  194.639901][ T8288] RBP: 00007fd65ea3506b R08: 0000000000000000 R09: 0000000000000000
[  194.639913][ T8288] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000000
[  194.639926][ T8288] R13: 00007fd65ec26038 R14: 00007fd65ec25fa0 R15: 00007ffc566c5d38
[  194.639963][ T8288]  </TASK>
[  194.648621][ T8288] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  194.752217][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  194.752281][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  195.247707][ T8340] loop1: detected capacity change from 0 to 512
[  195.249166][ T8340] EXT4-fs: Ignoring removed bh option
[  195.437275][ T8340] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.877: corrupted in-inode xattr: e_value size too large
[  195.437315][ T8340] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  195.437758][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  195.437780][    C1] EXT4-fs (loop1): initial error at time 1790296244: ext4_iget_extra_inode:5210: inode 15
[  195.437811][    C1] EXT4-fs (loop1): last error at time 1790296244: ext4_iget_extra_inode:5210: inode 15
[  195.453925][ T8340] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.877: couldn't read orphan inode 15 (err -117)
[  195.453958][ T8340] loop1: lost filesystem error report for type 5 error -117
[  195.514199][ T8340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.729369][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.038541][ T8363] loop1: detected capacity change from 0 to 128
[  197.310588][ T8338] loop4: detected capacity change from 0 to 262144
[  197.325183][ T8338] F2FS-fs (loop4): invalid crc value
[  197.336581][ T8363] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  197.337027][ T8363] hpfs: filesystem error: improperly stopped
[  197.337048][ T8363] hpfs: You really don't want any checks? You are crazy...
[  197.337550][ T8363] hpfs: hpfs_map_sector(): read error
[  197.337563][ T8363] hpfs: code page support is disabled
[  197.368098][ T8363] hpfs: hpfs_map_4sectors(): unaligned read
[  197.368402][ T8363] hpfs: hpfs_map_4sectors(): unaligned read
[  197.368416][ T8363] hpfs: filesystem error: unable to find root dir
[  197.447559][ T8338] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  197.464260][ T8338] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  197.692315][ T8379] loop5: detected capacity change from 0 to 256
[  197.721181][ T8379] exfat: Deprecated parameter 'utf8'
[  197.721253][ T8379] exfat: Deprecated parameter 'namecase'
[  197.721363][ T8379] exfat: Deprecated parameter 'namecase'
[  197.721388][ T8379] exfat: Deprecated parameter 'utf8'
[  197.871562][ T8379] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  197.871924][ T8379] exFAT-fs (loop5): failed to test first cluster bit of root dir(5)
[  198.269961][ T8389] profile_transition: unconfined exec no attachment
[  198.452546][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.030646][ T8385] loop2: detected capacity change from 0 to 131072
[  199.078804][ T8385] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  199.078861][ T8385] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  199.079617][ T8385] F2FS-fs (loop2): invalid crc value
[  199.192253][ T8385] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  199.211543][ T8385] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  199.211575][ T8385] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  199.350246][ T8405] program syz.0.900 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  199.643213][ T8411] i2c i2c-0: delete_device: Can't find device in list
[  200.104392][ T8423] profile_transition: unconfined exec no attachment
[  200.220566][ T8428] loop1: detected capacity change from 0 to 164
[  200.888015][ T8439] Dead loop on virtual device lo (net 77), fix it urgently!
[  200.888353][ T8439] Dead loop on virtual device lo (net 77), fix it urgently!
[  200.890738][ T8439] Dead loop on virtual device lo (net 77), fix it urgently!
[  200.924502][ T8439] Dead loop on virtual device lo (net 77), fix it urgently!
[  200.924767][ T8439] Dead loop on virtual device lo (net 77), fix it urgently!
[  200.924979][ T8439] Dead loop on virtual device lo (net 77), fix it urgently!
[  200.957611][ T8439] Dead loop on virtual device lo (net 77), fix it urgently!
[  200.957834][ T8439] Dead loop on virtual device lo (net 77), fix it urgently!
[  200.958057][ T8439] Dead loop on virtual device lo (net 77), fix it urgently!
[  200.960513][ T8439] Dead loop on virtual device lo (net 77), fix it urgently!
[  201.405473][ T8445] loop0: detected capacity change from 0 to 16
[  201.455985][ T8445] erofs (device loop0): mounted with root inode @ nid 36.
[  201.482999][ T8445] erofs (device loop0): negative i_size @ nid 86
[  201.647965][ T8451] C: renamed from veth1_to_team (while UP)
[  201.673676][ T8451] netlink: 'syz.5.919': attribute type 2 has an invalid length.
[  201.673702][ T8451] netlink: 116 bytes leftover after parsing attributes in process `syz.5.919'.
[  201.770290][ T8455] usb usb8: usbfs: process 8455 (syz.5.922) did not claim interface 0 before use
[  201.835174][ T8456] ima: policy update failed
[  201.835370][   T33] audit: type=1802 audit(1790296250.907:22): pid=8456 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.5.923" res=0 errno=0
[  201.867132][ T5728] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  201.947560][ T5616] Bluetooth: hci3: command 0x0406 tx timeout
[  201.947605][ T5616] Bluetooth: hci0: command 0x0406 tx timeout
[  201.948322][ T5616] Bluetooth: hci4: command 0x0405 tx timeout
[  202.018300][ T5728] usb 1-1: New USB device found: idVendor=1532, idProduct=010d, bcdDevice=0.00
[  202.019774][ T5728] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  202.019810][ T5728] usb 1-1: config 0 interface 0 has no altsetting 0
[  202.019845][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.088867][ T5728] usb 1-1: config 0 descriptor??
[  202.089899][ T8450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  202.145813][ T8464] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.926'.
[  202.146012][ T8461] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.926'.
[  202.548397][ T5728] hid_parser_main: 48 callbacks suppressed
[  202.548423][ T5728] razer 0003:1532:010D.000A: unknown main item tag 0x0
[  202.548451][ T5728] razer 0003:1532:010D.000A: unknown main item tag 0x0
[  202.548474][ T5728] razer 0003:1532:010D.000A: unknown main item tag 0x0
[  202.548496][ T5728] razer 0003:1532:010D.000A: unknown main item tag 0x0
[  202.548519][ T5728] razer 0003:1532:010D.000A: unknown main item tag 0x0
[  202.548542][ T5728] razer 0003:1532:010D.000A: unknown main item tag 0x0
[  202.548565][ T5728] razer 0003:1532:010D.000A: unknown main item tag 0x0
[  202.548606][ T5728] razer 0003:1532:010D.000A: unknown main item tag 0x0
[  202.548629][ T5728] razer 0003:1532:010D.000A: unknown main item tag 0x0
[  202.548651][ T5728] razer 0003:1532:010D.000A: unknown main item tag 0x0
[  202.645789][ T5728] razer 0003:1532:010D.000A: collection stack underflow
[  202.645824][ T5728] razer 0003:1532:010D.000A: item 0 0 0 12 parsing failed
[  202.654465][ T5728] razer 0003:1532:010D.000A: probe with driver razer failed with error -22
[  202.731699][ T5728] usb 1-1: USB disconnect, device number 11
[  202.895923][ T8463] loop2: detected capacity change from 0 to 32768
[  202.933749][ T8467] loop1: detected capacity change from 0 to 40427
[  202.945621][ T8467] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384)
[  202.945651][ T8467] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  203.289569][ T8467] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  203.333256][ T8467] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  203.333285][ T8467] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  203.563495][ T5613] syz-executor: attempt to access beyond end of device
[  203.563495][ T5613] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.594477][ T5613] CPU: 0 UID: 0 PID: 5613 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  203.594515][ T5613] Tainted: [L]=SOFTLOCKUP
[  203.594524][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  203.594537][ T5613] Call Trace:
[  203.594545][ T5613]  <TASK>
[  203.594555][ T5613]  dump_stack_lvl+0xe8/0x150
[  203.594590][ T5613]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  203.594628][ T5613]  f2fs_write_end_bio+0xda7/0x11c0
[  203.594674][ T5613]  __submit_merged_bio+0x258/0x6a0
[  203.594709][ T5613]  ? rcu_is_watching+0x16/0xb0
[  203.594745][ T5613]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  203.594779][ T5613]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  203.594837][ T5613]  f2fs_write_data_pages+0x2a13/0x36e0
[  203.594903][ T5613]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  203.594923][ T5613]  ? is_bpf_text_address+0x26/0x2b0
[  203.594957][ T5613]  ? arch_stack_walk+0xfb/0x150
[  203.595013][ T5613]  ? add_lock_to_list+0xc7/0x100
[  203.595045][ T5613]  ? lockdep_unlock+0x5c/0xd0
[  203.595066][ T5613]  ? __lock_acquire+0x1511/0x2de0
[  203.595123][ T5613]  ? do_raw_spin_lock+0x12b/0x2f0
[  203.595157][ T5613]  ? do_raw_spin_unlock+0xf5/0x200
[  203.595178][ T5613]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  203.595203][ T5613]  do_writepages+0x338/0x560
[  203.595236][ T5613]  ? do_raw_spin_unlock+0xf5/0x200
[  203.595262][ T5613]  filemap_fdatawrite+0x1e9/0x2f0
[  203.595288][ T5613]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  203.595362][ T5613]  ? do_raw_spin_unlock+0xf5/0x200
[  203.595388][ T5613]  f2fs_sync_dirty_inodes+0x471/0x970
[  203.595431][ T5613]  f2fs_write_checkpoint+0x860/0x24d0
[  203.595499][ T5613]  kill_f2fs_super+0x2dc/0x700
[  203.595529][ T5613]  ? rcu_do_enqueue+0x616/0x870
[  203.595552][ T5613]  ? lockdep_hardirqs_on+0x7b/0x110
[  203.595574][ T5613]  ? __pfx_kill_f2fs_super+0x10/0x10
[  203.595617][ T5613]  ? __pfx_call_rcu+0x10/0x10
[  203.595652][ T5613]  ? shrinker_free+0x2a7/0x3b0
[  203.595677][ T5613]  deactivate_locked_super+0xbe/0x110
[  203.595710][ T5613]  cleanup_mnt+0x3d3/0x460
[  203.595742][ T5613]  task_work_run+0x1d9/0x260
[  203.595770][ T5613]  ? __pfx_task_work_run+0x10/0x10
[  203.595806][ T5613]  exit_to_user_mode_loop+0x204/0x770
[  203.595833][ T5613]  ? rcu_is_watching+0x16/0xb0
[  203.595865][ T5613]  do_syscall_64+0x328/0x520
[  203.595886][ T5613]  ? trace_irq_disable+0x3b/0x140
[  203.595910][ T5613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.595929][ T5613]  ? clear_bhb_loop+0x70/0xc0
[  203.595955][ T5613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.595975][ T5613] RIP: 0033:0x7f37acb9f397
[  203.595995][ T5613] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  203.596013][ T5613] RSP: 002b:00007ffc8d8293d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  203.596036][ T5613] RAX: 0000000000000000 RBX: 00007f37acc344bb RCX: 00007f37acb9f397
[  203.596051][ T5613] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8d829490
[  203.596064][ T5613] RBP: 00007ffc8d829490 R08: 00007ffc8d82a490 R09: 00000000ffffffff
[  203.596078][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc8d82a520
[  203.596091][ T5613] R13: 00007f37acc344bb R14: 0000000000031a59 R15: 00007ffc8d82a560
[  203.596126][ T5613]  </TASK>
[  203.643252][ T5613] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  203.982024][ T8496] loop0: detected capacity change from 0 to 256
[  204.347268][ T8500] loop5: detected capacity change from 0 to 512
[  204.397112][ T8500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.439710][ T8504] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  204.448463][ T8488] loop4: detected capacity change from 0 to 32768
[  204.471614][ T8488] 
[  204.471614][ T8488]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.471614][ T8488] 
[  204.547559][ T8500] fs-verity (loop5, inode 15): Unsupported log_blocksize: 12
[  204.636218][   T33] audit: type=1800 audit(1790296253.707:23): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.933" name="file1" dev="loop4" ino=4 res=0 errno=0
[  204.684580][ T8508] find_entry called with index = 0
[  204.686326][ T8508] read_mapping_page failed!
[  204.686349][ T8508] ERROR: (device loop4): txCommit: 
[  204.686349][ T8508] 
[  204.756161][ T7163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.916528][ T5607] 
[  204.916528][ T5607]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.916528][ T5607] 
[  204.944898][ T5607] 
[  204.944898][ T5607]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.944898][ T5607] 
[  205.010452][ T8498] loop2: detected capacity change from 0 to 40427
[  205.048171][ T8498] F2FS-fs (loop2): invalid crc value
[  205.281728][ T8521] loop0: detected capacity change from 0 to 128
[  205.305536][ T8521] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  205.305594][ T8521] hpfs: filesystem error: improperly stopped
[  205.305609][ T8521] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  205.305624][ T8521] hpfs: You really don't want any checks? You are crazy...
[  205.306018][ T8521] hpfs: hpfs_map_sector(): read error
[  205.306028][ T8521] hpfs: code page support is disabled
[  205.306685][ T5728] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  205.315524][ T8521] hpfs: hpfs_map_4sectors(): unaligned read
[  205.315610][ T8521] hpfs: hpfs_map_4sectors(): unaligned read
[  205.315619][ T8521] hpfs: filesystem error: unable to find root dir
[  205.374831][ T8522] profile_transition: unconfined exec no attachment
[  205.403369][ T8522] nfs: Bad value for 'source'
[  205.418563][ T8521] hpfs: hpfs_map_4sectors(): unaligned read
[  205.463391][ T8498] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  205.490980][ T5728] usb 6-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  205.492561][ T5728] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  205.492589][ T5728] usb 6-1: config 0 has no interface number 0
[  205.508980][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.509009][ T5728] usb 6-1: Product: syz
[  205.509023][ T5728] usb 6-1: Manufacturer: syz
[  205.509035][ T5728] usb 6-1: SerialNumber: syz
[  205.527066][ T5728] usb 6-1: config 0 descriptor??
[  205.593563][ T8498] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  205.778382][ T5728] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  205.854683][ T5728] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  205.873298][ T5728] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  205.873366][ T5728] usb 6-1: media controller created
[  206.012064][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  206.130877][ T5618] syz-executor: attempt to access beyond end of device
[  206.130877][ T5618] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  206.162111][ T5618] CPU: 1 UID: 0 PID: 5618 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  206.162145][ T5618] Tainted: [L]=SOFTLOCKUP
[  206.162151][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  206.162162][ T5618] Call Trace:
[  206.162169][ T5618]  <TASK>
[  206.162176][ T5618]  dump_stack_lvl+0xe8/0x150
[  206.162208][ T5618]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  206.162241][ T5618]  f2fs_write_end_bio+0xda7/0x11c0
[  206.162280][ T5618]  __submit_merged_bio+0x258/0x6a0
[  206.162297][ T5618]  ? rcu_is_watching+0x16/0xb0
[  206.162328][ T5618]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  206.162358][ T5618]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  206.162407][ T5618]  f2fs_write_data_pages+0x2a13/0x36e0
[  206.162464][ T5618]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  206.162480][ T5618]  ? is_bpf_text_address+0x26/0x2b0
[  206.162508][ T5618]  ? arch_stack_walk+0xfb/0x150
[  206.162560][ T5618]  ? add_lock_to_list+0xc7/0x100
[  206.162586][ T5618]  ? lockdep_unlock+0x5c/0xd0
[  206.162603][ T5618]  ? __lock_acquire+0x1511/0x2de0
[  206.162650][ T5618]  ? do_raw_spin_lock+0x12b/0x2f0
[  206.162679][ T5618]  ? do_raw_spin_unlock+0xf5/0x200
[  206.162696][ T5618]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  206.162716][ T5618]  do_writepages+0x338/0x560
[  206.162744][ T5618]  ? do_raw_spin_unlock+0xf5/0x200
[  206.162767][ T5618]  filemap_fdatawrite+0x1e9/0x2f0
[  206.162790][ T5618]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  206.162853][ T5618]  ? do_raw_spin_unlock+0xf5/0x200
[  206.162889][ T5618]  f2fs_sync_dirty_inodes+0x471/0x970
[  206.162930][ T5618]  f2fs_write_checkpoint+0x860/0x24d0
[  206.162987][ T5618]  kill_f2fs_super+0x2dc/0x700
[  206.163013][ T5618]  ? rcu_do_enqueue+0x616/0x870
[  206.163034][ T5618]  ? lockdep_hardirqs_on+0x7b/0x110
[  206.163052][ T5618]  ? __pfx_kill_f2fs_super+0x10/0x10
[  206.163090][ T5618]  ? __pfx_call_rcu+0x10/0x10
[  206.163121][ T5618]  ? shrinker_free+0x2a7/0x3b0
[  206.163142][ T5618]  deactivate_locked_super+0xbe/0x110
[  206.163163][ T5618]  cleanup_mnt+0x3d3/0x460
[  206.163190][ T5618]  task_work_run+0x1d9/0x260
[  206.163215][ T5618]  ? __pfx_task_work_run+0x10/0x10
[  206.163246][ T5618]  exit_to_user_mode_loop+0x204/0x770
[  206.163268][ T5618]  ? rcu_is_watching+0x16/0xb0
[  206.163297][ T5618]  do_syscall_64+0x328/0x520
[  206.163315][ T5618]  ? trace_irq_disable+0x3b/0x140
[  206.163337][ T5618]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.163353][ T5618]  ? clear_bhb_loop+0x70/0xc0
[  206.163374][ T5618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.163391][ T5618] RIP: 0033:0x7f3c0a99f397
[  206.163409][ T5618] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  206.163423][ T5618] RSP: 002b:00007ffd6390e678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  206.163444][ T5618] RAX: 0000000000000000 RBX: 00007f3c0aa344bb RCX: 00007f3c0a99f397
[  206.163456][ T5618] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6390e730
[  206.163466][ T5618] RBP: 00007ffd6390e730 R08: 00007ffd6390f730 R09: 00000000ffffffff
[  206.163478][ T5618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6390f7c0
[  206.163488][ T5618] R13: 00007f3c0aa344bb R14: 0000000000032408 R15: 00007ffd6390f800
[  206.163519][ T5618]  </TASK>
[  206.163621][ T5618] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  206.205645][ T5728] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  206.460241][ T5728] usb 6-1: USB disconnect, device number 3
[  206.550955][ T8538] netlink: 774 bytes leftover after parsing attributes in process `syz.4.952'.
[  207.126430][   T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  207.145770][ T8557] loop4: detected capacity change from 0 to 512
[  207.191281][ T8557] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  207.191430][ T8557] System zones: 1-12
[  207.224971][ T8557] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.961: missing EA_INODE flag
[  207.225002][ T8557] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  207.249240][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  207.249270][    C0] EXT4-fs (loop4): initial error at time 1790296256: ext4_xattr_inode_iget:437: inode 12
[  207.249304][    C0] EXT4-fs (loop4): last error at time 1790296256: ext4_xattr_inode_iget:437: inode 12
[  207.268186][ T8557] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.961: error while reading EA inode 12 err=-117
[  207.268220][ T8557] loop4: lost filesystem error report for type 5 error -117
[  207.280402][ T8557] EXT4-fs (loop4): 1 orphan inode deleted
[  207.287008][ T8557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.338852][ T8562] loop1: detected capacity change from 0 to 64
[  207.350115][   T27] usb 1-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00
[  207.351502][   T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  207.351530][   T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  207.353476][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.353499][   T27] usb 1-1: Product: syz
[  207.353513][   T27] usb 1-1: Manufacturer: syz
[  207.353526][   T27] usb 1-1: SerialNumber: syz
[  207.368733][ T8557] fscrypt (loop4, inode 15): Sub-block data units not yet supported with IV_INO_LBLK_32
[  207.451894][   T27] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  207.502025][   T27] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  207.502025][   T27]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  207.558291][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.999957][ T8581] loop2: detected capacity change from 0 to 256
[  208.083390][   T27] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -5
[  208.192143][ T8574] loop4: detected capacity change from 0 to 32768
[  208.194868][ T8574] BTRFS info: device /dev/loop4 (7:4) using temp-fsid d2932342-5938-46b4-9051-6cb9af588afd
[  208.194935][ T8574] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.965 (8574)
[  208.233504][ T8574] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  208.233543][ T8574] BTRFS info (device loop4): using sha256 checksum algorithm
[  208.276895][   T32] usb 1-1: USB disconnect, device number 12
[  208.293864][ T8585] netlink: 'syz.1.970': attribute type 1 has an invalid length.
[  208.293887][ T8585] netlink: 'syz.1.970': attribute type 2 has an invalid length.
[  208.293900][ T8585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.970'.
[  208.415313][ T8574] BTRFS info (device loop4): enabling ssd optimizations
[  208.415335][ T8574] BTRFS info (device loop4): turning on async discard
[  208.415349][ T8574] BTRFS info (device loop4): enabling free space tree
[  208.569471][ T8603] profile_transition: unconfined exec no attachment
[  208.851980][ T5607] BTRFS info (device loop4): last unmount of filesystem d2932342-5938-46b4-9051-6cb9af588afd
[  209.193915][ T8619] kvm [8617]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7
[  209.494948][ T8626] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  209.495567][   T32] team_slave_0: entered promiscuous mode
[  209.495606][   T32] team_slave_1: entered promiscuous mode
[  209.553012][ T8625] loop2: detected capacity change from 0 to 2048
[  209.669058][ T8630] profile_transition: name lookup ix on error
[  209.793479][ T8634] overlayfs: failed to clone lowerpath
[  210.055634][ T8607] loop1: detected capacity change from 0 to 32768
[  210.069097][ T8607] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.974 (8607)
[  210.157623][ T8607] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  210.157663][ T8607] BTRFS info (device loop1): using crc32c checksum algorithm
[  210.187832][ T5728] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  210.303364][ T8607] BTRFS info (device loop1): enabling ssd optimizations
[  210.303394][ T8607] BTRFS info (device loop1): turning on flush-on-commit
[  210.303410][ T8607] BTRFS info (device loop1): enabling free space tree
[  210.303425][ T8607] BTRFS info (device loop1): enabling auto defrag
[  210.303441][ T8607] BTRFS info (device loop1): use lzo compression, level 1
[  210.303460][ T8607] BTRFS info (device loop1): max_inline set to 4096
[  210.353461][ T5728] usb 6-1: New USB device found: idVendor=145f, idProduct=0212, bcdDevice=0.00
[  210.354664][ T5728] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  210.354690][ T5728] usb 6-1: config 0 has no interface number 0
[  210.354741][ T5728] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  210.354769][ T5728] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.354801][ T5728] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  210.354828][ T5728] usb 6-1: config 0 interface 1 has no altsetting 0
[  210.354863][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.441555][ T5728] usb 6-1: config 0 descriptor??
[  210.444007][ T8661] profile_transition: unconfined exec no attachment
[  210.516079][ T5613] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  210.984690][ T8672] profile_transition: unconfined exec no attachment
[  211.041403][ T8673] profile_transition: unconfined exec no attachment
[  211.116895][ T5728] uclogic 0003:145F:0212.000B: pen parameters not found
[  211.116925][ T5728] uclogic 0003:145F:0212.000B: interface is invalid, ignoring
[  211.122228][ T5728] usb 6-1: USB disconnect, device number 4
[  211.129150][   T32] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  211.289881][   T32] usb 1-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40
[  211.294739][   T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  211.294782][   T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.297429][   T32] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  211.297453][   T32] usb 1-1: Product: syz
[  211.315526][   T32] usb 1-1: config 0 descriptor??
[  211.332030][   T32] hub 1-1:0.0: USB hub found
[  211.400208][ T8678] loop4: detected capacity change from 0 to 256
[  211.422157][ T8678] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d)
[  211.557642][   T32] hub 1-1:0.0: 1 port detected
[  211.626728][ T8682] loop2: detected capacity change from 0 to 22
[  211.629066][ T8682] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  211.649783][ T8682] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  211.790252][   T32] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  211.810607][   T32] usbhid 1-1:0.0: can't add hid device: -71
[  211.810712][   T32] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  211.907897][   T32] usb 1-1: USB disconnect, device number 13
[  212.121797][ T8692] i2c i2c-0: new_device: Can't parse I2C address
[  212.170901][ T8694] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc118fd50
[  212.383029][ T8680] loop1: detected capacity change from 0 to 32768
[  212.405108][ T8680] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1001 (8680)
[  212.444989][ T8680] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  212.445112][ T8680] BTRFS info (device loop1): using crc32c checksum algorithm
[  212.617164][ T8680] BTRFS info (device loop1): enabling ssd optimizations
[  212.617197][ T8680] BTRFS info (device loop1): turning on flush-on-commit
[  212.617213][ T8680] BTRFS info (device loop1): enabling free space tree
[  212.617230][ T8680] BTRFS info (device loop1): enabling auto defrag
[  212.617247][ T8680] BTRFS info (device loop1): use lzo compression, level 1
[  212.617275][ T8680] BTRFS info (device loop1): max_inline set to 4096
[  212.706834][ T8680] BTRFS critical (device loop1 state E): emergency shutdown
[  212.745263][ T5613] BTRFS info (device loop1 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  212.871594][ T8722] profile_transition: unconfined exec no attachment
[  212.919577][ T8724] loop5: detected capacity change from 0 to 256
[  212.972734][ T8724] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[  213.009392][ T8726] loop0: detected capacity change from 0 to 1024
[  256.173039][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  268.489316][ T4926] Bluetooth: hci2: command 0x0406 tx timeout
[  317.608298][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  357.279034][   T34] INFO: task syz-executor:5595 blocked in I/O wait for more than 143 seconds.
[  357.279065][   T34]       Tainted: G             L       syzkaller #0
[  357.279077][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  357.279086][   T34] task:syz-executor    state:D stack:21992 pid:5595  tgid:5595  ppid:5594   task_flags:0x440100 flags:0x00080000
[  357.279140][   T34] Call Trace:
[  357.279218][   T34]  <TASK>
[  357.279285][   T34]  __schedule+0x1b47/0x5c60
[  357.279497][   T34]  ? lock_acquire+0x115/0x350
[  357.279710][   T34]  ? __pfx___schedule+0x10/0x10
[  357.279747][   T34]  ? schedule+0x90/0x2b0
[  357.279770][   T34]  schedule+0x164/0x2b0
[  357.279790][   T34]  io_schedule+0x7f/0xd0
[  357.279804][   T34]  bit_wait_io+0x13/0x110
[  357.279819][   T34]  __wait_on_bit+0xac/0x300
[  357.279832][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  357.279847][   T34]  out_of_line_wait_on_bit+0x13b/0x190
[  357.279861][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  357.279873][   T34]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  357.279888][   T34]  ? __pfx_wake_bit_function+0x10/0x10
[  357.279916][   T34]  do_get_write_access+0x658/0x10c0
[  357.280056][   T34]  jbd2_journal_get_write_access+0x1d7/0x230
[  357.280074][   T34]  __ext4_journal_get_write_access+0xec/0x620
[  357.280112][   T34]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  357.280126][   T34]  ? trace_kmem_cache_alloc+0x29/0xe0
[  357.280156][   T34]  ? jbd2__journal_start+0x145/0x5d0
[  357.280176][   T34]  ext4_reserve_inode_write+0x294/0x360
[  357.280201][   T34]  __ext4_mark_inode_dirty+0x141/0x7b0
[  357.280230][   T34]  ext4_dirty_inode+0xd0/0x110
[  357.280245][   T34]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  357.280259][   T34]  __mark_inode_dirty+0x3a8/0x13b0
[  357.280290][   T34]  file_update_time_flags+0x399/0x440
[  357.280315][   T34]  ext4_page_mkwrite+0x21f/0x12c0
[  357.280348][   T34]  ? reacquire_held_locks+0x117/0x1a0
[  357.280373][   T34]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  357.280386][   T34]  ? __lock_acquire+0x747/0x2de0
[  357.280443][   T34]  do_page_mkwrite+0x147/0x310
[  357.280477][   T34]  do_wp_page+0x1a85/0x4b60
[  357.280506][   T34]  ? __pfx_do_wp_page+0x10/0x10
[  357.280521][   T34]  ? do_raw_spin_lock+0x12b/0x2f0
[  357.280536][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  357.280554][   T34]  handle_mm_fault+0x15d7/0x3750
[  357.280578][   T34]  ? handle_mm_fault+0xf1/0x3750
[  357.280602][   T34]  ? __pfx_handle_mm_fault+0x10/0x10
[  357.280618][   T34]  ? lock_vma_under_rcu+0x45a/0x500
[  357.280636][   T34]  ? __pfx_set_user_sigmask+0x10/0x10
[  357.280680][   T34]  do_user_addr_fault+0xb35/0x1480
[  357.280710][   T34]  ? trace_page_fault_user+0x84/0x1e0
[  357.280724][   T34]  exc_page_fault+0x6a/0xc0
[  357.280757][   T34]  asm_exc_page_fault+0x26/0x30
[  357.280792][   T34] RIP: 0033:0x7f972ac7c6e2
[  357.280821][   T34] RSP: 002b:00007fff7ce381d0 EFLAGS: 00010202
[  357.280849][   T34] RAX: 00007f9728d48000 RBX: 0000555563d613a0 RCX: 0000000000000007
[  357.280858][   T34] RDX: 0000000000002bcd RSI: 0000555563d61278 RDI: 0000000000000080
[  357.280866][   T34] RBP: 00007fff7ce386d0 R08: 0000555563d612a0 R09: 00000000000000a1
[  357.280875][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff7ce38510
[  357.280883][   T34] R13: 00007fff7ce38300 R14: 585858582e7a7973 R15: 00007fff7ce38250
[  357.280906][   T34]  </TASK>
[  357.280934][   T34] INFO: task syz.4.1014:8720 blocked in I/O wait for more than 143 seconds.
[  357.280946][   T34]       Tainted: G             L       syzkaller #0
[  357.280953][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  357.280959][   T34] task:syz.4.1014      state:D stack:25608 pid:8720  tgid:8720  ppid:5607   task_flags:0x440040 flags:0x00080002
[  357.280994][   T34] Call Trace:
[  357.280998][   T34]  <TASK>
[  357.281006][   T34]  __schedule+0x1b47/0x5c60
[  357.281027][   T34]  ? lock_acquire+0x115/0x350
[  357.281052][   T34]  ? __pfx___schedule+0x10/0x10
[  357.281148][   T34]  ? schedule+0x90/0x2b0
[  357.281174][   T34]  schedule+0x164/0x2b0
[  357.281197][   T34]  io_schedule+0x7f/0xd0
[  357.281218][   T34]  bit_wait_io+0x13/0x110
[  357.281240][   T34]  __wait_on_bit+0xac/0x300
[  357.281253][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  357.281267][   T34]  out_of_line_wait_on_bit+0x13b/0x190
[  357.281281][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  357.281294][   T34]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  357.281308][   T34]  ? __pfx_wake_bit_function+0x10/0x10
[  357.281332][   T34]  do_get_write_access+0x658/0x10c0
[  357.281357][   T34]  jbd2_journal_get_write_access+0x1d7/0x230
[  357.281374][   T34]  __ext4_journal_get_write_access+0xec/0x620
[  357.281394][   T34]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  357.281416][   T34]  ? trace_kmem_cache_alloc+0x29/0xe0
[  357.281428][   T34]  ? jbd2__journal_start+0x145/0x5d0
[  357.281447][   T34]  ext4_reserve_inode_write+0x294/0x360
[  357.281467][   T34]  __ext4_mark_inode_dirty+0x141/0x7b0
[  357.281491][   T34]  ext4_dirty_inode+0xd0/0x110
[  357.281506][   T34]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  357.281520][   T34]  __mark_inode_dirty+0x3a8/0x13b0
[  357.281541][   T34]  file_update_time_flags+0x399/0x440
[  357.281560][   T34]  ext4_page_mkwrite+0x21f/0x12c0
[  357.281580][   T34]  ? __pfx_filemap_fault+0x10/0x10
[  357.281612][   T34]  ? ktime_get+0x45/0x220
[  357.281642][   T34]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  357.281663][   T34]  do_page_mkwrite+0x147/0x310
[  357.281679][   T34]  do_pte_missing+0x70f/0x3570
[  357.281699][   T34]  ? handle_mm_fault+0xf1/0x3750
[  357.281719][   T34]  handle_mm_fault+0x1a53/0x3750
[  357.281742][   T34]  ? handle_mm_fault+0xf1/0x3750
[  357.281766][   T34]  ? __pfx_handle_mm_fault+0x10/0x10
[  357.281782][   T34]  ? lock_vma_under_rcu+0x45a/0x500
[  357.281814][   T34]  do_user_addr_fault+0xb35/0x1480
[  357.281834][   T34]  ? trace_page_fault_user+0x84/0x1e0
[  357.281848][   T34]  exc_page_fault+0x6a/0xc0
[  357.281861][   T34]  asm_exc_page_fault+0x26/0x30
[  357.281873][   T34] RIP: 0033:0x7fd15ae727a9
[  357.281884][   T34] RSP: 002b:00007ffe6e4fdc70 EFLAGS: 00010202
[  357.281895][   T34] RAX: 0000001b33720000 RBX: ffffffff81a6d7ae RCX: 0000001b3371fff8
[  357.281906][   T34] RDX: 0000001b3312421c RSI: 0000000000000008 RDI: 00007fd15bd55720
[  357.281915][   T34] RBP: 0000000000000105 R08: 00007fd15b210000 R09: 00007fd15b212000
[  357.281923][   T34] R10: 0000000081a6d7b2 R11: 0000000000000003 R12: 00007fd15b226038
[  357.281931][   T34] R13: 00000000000003c8 R14: ffffffff81a6d34d R15: 00007fd15bd55720
[  357.281941][   T34]  ? console_unlock+0x13d/0x1c0
[  357.281975][   T34]  ? vprintk_emit+0x3ce/0x560
[  357.281999][   T34]  </TASK>
[  357.282005][   T34] INFO: task syz.0.1017:8725 blocked in I/O wait for more than 143 seconds.
[  357.282016][   T34]       Tainted: G             L       syzkaller #0
[  357.282022][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  357.282028][   T34] task:syz.0.1017      state:D stack:24584 pid:8725  tgid:8725  ppid:5606   task_flags:0x440040 flags:0x00080002
[  357.282061][   T34] Call Trace:
[  357.282065][   T34]  <TASK>
[  357.282072][   T34]  __schedule+0x1b47/0x5c60
[  357.282101][   T34]  ? __pfx___schedule+0x10/0x10
[  357.282119][   T34]  ? schedule+0x90/0x2b0
[  357.282132][   T34]  schedule+0x164/0x2b0
[  357.282145][   T34]  io_schedule+0x7f/0xd0
[  357.282158][   T34]  bit_wait_io+0x13/0x110
[  357.282172][   T34]  __wait_on_bit+0xac/0x300
[  357.282184][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  357.282199][   T34]  out_of_line_wait_on_bit+0x13b/0x190
[  357.282212][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  357.282225][   T34]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  357.282239][   T34]  ? __pfx_wake_bit_function+0x10/0x10
[  357.282263][   T34]  do_get_write_access+0x658/0x10c0
[  357.282288][   T34]  jbd2_journal_get_write_access+0x1d7/0x230
[  357.282305][   T34]  __ext4_journal_get_write_access+0xec/0x620
[  357.282324][   T34]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  357.282338][   T34]  ? trace_kmem_cache_alloc+0x29/0xe0
[  357.282350][   T34]  ? jbd2__journal_start+0x145/0x5d0
[  357.282369][   T34]  ext4_reserve_inode_write+0x294/0x360
[  357.282389][   T34]  __ext4_mark_inode_dirty+0x141/0x7b0
[  357.282419][   T34]  ext4_dirty_inode+0xd0/0x110
[  357.282434][   T34]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  357.282447][   T34]  __mark_inode_dirty+0x3a8/0x13b0
[  357.282468][   T34]  file_update_time_flags+0x399/0x440
[  357.282486][   T34]  ext4_page_mkwrite+0x21f/0x12c0
[  357.282528][   T34]  ? __pfx_filemap_fault+0x10/0x10
[  357.282547][   T34]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  357.282562][   T34]  ? lruvec_stat_mod_folio+0x28e/0x3e0
[  357.282591][   T34]  do_page_mkwrite+0x147/0x310
[  357.282607][   T34]  do_pte_missing+0x70f/0x3570
[  357.282631][   T34]  handle_mm_fault+0x1a53/0x3750
[  357.282655][   T34]  ? handle_mm_fault+0xf1/0x3750
[  357.282679][   T34]  ? __pfx_handle_mm_fault+0x10/0x10
[  357.282695][   T34]  ? lock_vma_under_rcu+0x45a/0x500
[  357.282712][   T34]  ? __hrtimer_get_next_event+0x51c/0x600
[  357.282738][   T34]  do_user_addr_fault+0xb35/0x1480
[  357.282757][   T34]  ? trace_page_fault_user+0x84/0x1e0
[  357.282772][   T34]  exc_page_fault+0x6a/0xc0
[  357.282785][   T34]  asm_exc_page_fault+0x26/0x30
[  357.282796][   T34] RIP: 0033:0x7fd65e872809
[  357.282806][   T34] RSP: 002b:00007ffc566c5d80 EFLAGS: 00010202
[  357.282817][   T34] RAX: 0000001b33324000 RBX: 0000000000000000 RCX: 00000000005ffde8
[  357.282825][   T34] RDX: 0000001b33323ffc RSI: 00000000005ffde8 RDI: 00007fd65f755700
[  357.282833][   T34] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fd65ec12000
[  357.282840][   T34] R10: 00007fd65f755700 R11: 0000000000000000 R12: 0000000000000000
[  357.282848][   T34] R13: 0000000000003908 R14: ffffffff816d72fe R15: 00007fd65f755720
[  357.282857][   T34]  ? fpregs_assert_state_consistent+0xee/0x150
[  357.282883][   T34]  </TASK>
[  357.282888][   T34] INFO: task syz.1.1015:8727 blocked in I/O wait for more than 143 seconds.
[  357.282898][   T34]       Tainted: G             L       syzkaller #0
[  357.282909][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  357.282915][   T34] task:syz.1.1015      state:D stack:26936 pid:8727  tgid:8727  ppid:5613   task_flags:0x440040 flags:0x00080002
[  357.282948][   T34] Call Trace:
[  357.282952][   T34]  <TASK>
[  357.282959][   T34]  __schedule+0x1b47/0x5c60
[  357.282984][   T34]  ? is_bpf_text_address+0x26/0x2b0
[  357.283004][   T34]  ? __pfx___schedule+0x10/0x10
[  357.283022][   T34]  ? schedule+0x90/0x2b0
[  357.283035][   T34]  schedule+0x164/0x2b0
[  357.283048][   T34]  io_schedule+0x7f/0xd0
[  357.283060][   T34]  bit_wait_io+0x13/0x110
[  357.283074][   T34]  __wait_on_bit+0xac/0x300
[  357.283086][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  357.283101][   T34]  out_of_line_wait_on_bit+0x13b/0x190
[  357.283115][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  357.283127][   T34]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  357.283142][   T34]  ? __pfx_wake_bit_function+0x10/0x10
[  357.283166][   T34]  do_get_write_access+0x658/0x10c0
[  357.283191][   T34]  jbd2_journal_get_write_access+0x1d7/0x230
[  357.283208][   T34]  __ext4_journal_get_write_access+0xec/0x620
[  357.283226][   T34]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  357.283247][   T34]  ext4_reserve_inode_write+0x294/0x360
[  357.283267][   T34]  __ext4_mark_inode_dirty+0x141/0x7b0
[  357.283291][   T34]  ext4_dirty_inode+0xd0/0x110
[  357.283305][   T34]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  357.283320][   T34]  __mark_inode_dirty+0x3a8/0x13b0
[  357.283336][   T34]  ? mnt_get_write_access+0x216/0x280
[  357.283352][   T34]  ? ext4_file_mmap_prepare+0x277/0x450
[  357.283365][   T34]  touch_atime+0x568/0x670
[  357.283380][   T34]  ? ext4_file_mmap_prepare+0x277/0x450
[  357.283396][   T34]  ext4_file_mmap_prepare+0x277/0x450
[  357.283424][   T34]  mmap_region+0xf11/0x2c30
[  357.283445][   T34]  ? __update_page_owner_handle+0x512/0x580
[  357.283465][   T34]  ? lock_acquire+0x115/0x350
[  357.283481][   T34]  ? __page_table_check_zero+0x6c/0x430
[  357.283505][   T34]  ? __pfx_mmap_region+0x10/0x10
[  357.283527][   T34]  ? __page_table_check_zero+0x6c/0x430
[  357.283545][   T34]  ? __page_table_check_zero+0x6c/0x430
[  357.283560][   T34]  ? __page_table_check_zero+0x3c3/0x430
[  357.283574][   T34]  ? __page_table_check_zero+0x6c/0x430
[  357.283606][   T34]  ? lock_acquire+0x115/0x350
[  357.283661][   T34]  ? mt_find+0x186/0x630
[  357.283700][   T34]  ? mt_find+0x5ff/0x630
[  357.283715][   T34]  ? mt_find+0x186/0x630
[  357.283729][   T34]  ? __pfx_mt_find+0x10/0x10
[  357.283747][   T34]  ? bpf_lsm_mmap_addr+0x9/0x50
[  357.283769][   T34]  ? security_mmap_addr+0x71/0x240
[  357.283829][   T34]  ? shmem_mapping+0xd/0x50
[  357.283847][   T34]  ? memfd_check_seals_mmap+0xc5/0x220
[  357.283863][   T34]  do_mmap+0xe0a/0x1300
[  357.283886][   T34]  ? __pfx_do_mmap+0x10/0x10
[  357.283911][   T34]  ? vm_mmap_pgoff+0x1dd/0x4e0
[  357.283924][   T34]  ? down_write_killable+0x179/0x230
[  357.283956][   T34]  ? __pfx_down_write_killable+0x10/0x10
[  357.283972][   T34]  ? apparmor_mmap_file+0x2e7/0x390
[  357.284021][   T34]  vm_mmap_pgoff+0x272/0x4e0
[  357.284036][   T34]  ? lock_acquire+0x115/0x350
[  357.284054][   T34]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  357.284070][   T34]  ? __fget_files+0x2a/0x420
[  357.284095][   T34]  ? __fget_files+0x3a2/0x420
[  357.284108][   T34]  ? __fget_files+0x2a/0x420
[  357.284124][   T34]  ksys_mmap_pgoff+0x4dc/0x760
[  357.284146][   T34]  do_syscall_64+0x166/0x520
[  357.284159][   T34]  ? trace_irq_disable+0x3b/0x140
[  357.284181][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.284194][   T34]  ? clear_bhb_loop+0x70/0xc0
[  357.284210][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.284222][   T34] RIP: 0033:0x7f37acb9dec2
[  357.284233][   T34] RSP: 002b:00007ffc8d82a288 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  357.284247][   T34] RAX: ffffffffffffffda RBX: 0000001b32e64000 RCX: 00007f37acb9dec2
[  357.284255][   T34] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32e64000
[  357.284264][   T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  357.284272][   T34] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000000df
[  357.284280][   T34] R13: 00000000000927c0 R14: 0000000000033ec9 R15: 00007ffc8d82a560
[  357.284299][   T34]  </TASK>
[  357.284304][   T34] INFO: task syz.5.1018:8728 blocked in I/O wait for more than 143 seconds.
[  357.284315][   T34]       Tainted: G             L       syzkaller #0
[  357.284322][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  357.284327][   T34] task:syz.5.1018      state:D stack:26936 pid:8728  tgid:8728  ppid:7163   task_flags:0x440040 flags:0x00080002
[  357.284360][   T34] Call Trace:
[  357.284365][   T34]  <TASK>
[  357.284372][   T34]  __schedule+0x1b47/0x5c60
[  357.284407][   T34]  ? __pfx___schedule+0x10/0x10
[  357.284426][   T34]  ? schedule+0x90/0x2b0
[  357.284441][   T34]  schedule+0x164/0x2b0
[  357.284454][   T34]  io_schedule+0x7f/0xd0
[  357.284468][   T34]  bit_wait_io+0x13/0x110
[  357.284483][   T34]  __wait_on_bit+0xac/0x300
[  357.284495][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  357.284511][   T34]  out_of_line_wait_on_bit+0x13b/0x190
[  357.284526][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  357.284539][   T34]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  357.284555][   T34]  ? __pfx_wake_bit_function+0x10/0x10
[  357.284579][   T34]  do_get_write_access+0x658/0x10c0
[  357.284605][   T34]  jbd2_journal_get_write_access+0x1d7/0x230
[  357.284623][   T34]  __ext4_journal_get_write_access+0xec/0x620
[  357.284642][   T34]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  357.284664][   T34]  ext4_reserve_inode_write+0x294/0x360
[  357.284685][   T34]  __ext4_mark_inode_dirty+0x141/0x7b0
[  357.284710][   T34]  ext4_dirty_inode+0xd0/0x110
[  357.284725][   T34]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  357.284740][   T34]  __mark_inode_dirty+0x3a8/0x13b0
[  357.284756][   T34]  ? mnt_get_write_access+0x216/0x280
[  357.284773][   T34]  ? ext4_file_mmap_prepare+0x277/0x450
[  357.284787][   T34]  touch_atime+0x568/0x670
[  357.284802][   T34]  ? ext4_file_mmap_prepare+0x277/0x450
[  357.284820][   T34]  ext4_file_mmap_prepare+0x277/0x450
[  357.284836][   T34]  mmap_region+0xf11/0x2c30
[  357.284857][   T34]  ? __update_page_owner_handle+0x512/0x580
[  357.284876][   T34]  ? lock_acquire+0x115/0x350
[  357.284891][   T34]  ? __page_table_check_zero+0x6c/0x430
[  357.284908][   T34]  ? __pfx_mmap_region+0x10/0x10
[  357.284925][   T34]  ? __page_table_check_zero+0x6c/0x430
[  357.284942][   T34]  ? __page_table_check_zero+0x6c/0x430
[  357.284957][   T34]  ? __page_table_check_zero+0x3c3/0x430
[  357.284972][   T34]  ? __page_table_check_zero+0x6c/0x430
[  357.285004][   T34]  ? lock_acquire+0x115/0x350
[  357.285059][   T34]  ? mt_find+0x186/0x630
[  357.285075][   T34]  ? mt_find+0x5ff/0x630
[  357.285090][   T34]  ? mt_find+0x186/0x630
[  357.285103][   T34]  ? __pfx_mt_find+0x10/0x10
[  357.285121][   T34]  ? bpf_lsm_mmap_addr+0x9/0x50
[  357.285136][   T34]  ? security_mmap_addr+0x71/0x240
[  357.285153][   T34]  ? shmem_mapping+0xd/0x50
[  357.285164][   T34]  ? memfd_check_seals_mmap+0xc5/0x220
[  357.285178][   T34]  do_mmap+0xe0a/0x1300
[  357.285200][   T34]  ? __pfx_do_mmap+0x10/0x10
[  357.285223][   T34]  ? vm_mmap_pgoff+0x1dd/0x4e0
[  357.285236][   T34]  ? down_write_killable+0x179/0x230
[  357.285253][   T34]  ? __pfx_down_write_killable+0x10/0x10
[  357.285267][   T34]  ? apparmor_mmap_file+0x2e7/0x390
[  357.285286][   T34]  vm_mmap_pgoff+0x272/0x4e0
[  357.285301][   T34]  ? lock_acquire+0x115/0x350
[  357.285318][   T34]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  357.285333][   T34]  ? __fget_files+0x2a/0x420
[  357.285348][   T34]  ? __fget_files+0x3a2/0x420
[  357.285361][   T34]  ? __fget_files+0x2a/0x420
[  357.285376][   T34]  ksys_mmap_pgoff+0x4dc/0x760
[  357.285397][   T34]  do_syscall_64+0x166/0x520
[  357.285418][   T34]  ? trace_irq_disable+0x3b/0x140
[  357.285433][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.285446][   T34]  ? clear_bhb_loop+0x70/0xc0
[  357.285460][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.285472][   T34] RIP: 0033:0x7ff6ed19dec2
[  357.285482][   T34] RSP: 002b:00007ffffd13b668 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  357.285494][   T34] RAX: ffffffffffffffda RBX: 0000001b33264000 RCX: 00007ff6ed19dec2
[  357.285502][   T34] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b33264000
[  357.285510][   T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  357.285518][   T34] R10: 0000000000100001 R11: 0000000000000206 R12: 000000000000005c
[  357.285526][   T34] R13: 00000000000927c0 R14: 0000000000034042 R15: 00007ffffd13b940
[  357.285545][   T34]  </TASK>
[  357.285550][   T34] INFO: task syz.2.1019:8729 blocked in I/O wait for more than 143 seconds.
[  357.285560][   T34]       Tainted: G             L       syzkaller #0
[  357.285566][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  357.285571][   T34] task:syz.2.1019      state:D stack:26936 pid:8729  tgid:8729  ppid:5618   task_flags:0x440040 flags:0x00080002
[  357.285603][   T34] Call Trace:
[  357.285607][   T34]  <TASK>
[  357.285614][   T34]  __schedule+0x1b47/0x5c60
[  357.285643][   T34]  ? __pfx___schedule+0x10/0x10
[  357.285660][   T34]  ? schedule+0x90/0x2b0
[  357.285674][   T34]  schedule+0x164/0x2b0
[  357.285687][   T34]  io_schedule+0x7f/0xd0
[  357.285700][   T34]  bit_wait_io+0x13/0x110
[  357.285713][   T34]  __wait_on_bit+0xac/0x300
[  357.285726][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  357.285740][   T34]  out_of_line_wait_on_bit+0x13b/0x190
[  357.285754][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  357.285766][   T34]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  357.285781][   T34]  ? __pfx_wake_bit_function+0x10/0x10
[  357.285804][   T34]  do_get_write_access+0x658/0x10c0
[  357.285830][   T34]  jbd2_journal_get_write_access+0x1d7/0x230
[  357.285853][   T34]  __ext4_journal_get_write_access+0xec/0x620
[  357.285876][   T34]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  357.285898][   T34]  ext4_reserve_inode_write+0x294/0x360
[  357.285924][   T34]  __ext4_mark_inode_dirty+0x141/0x7b0
[  357.285954][   T34]  ext4_dirty_inode+0xd0/0x110
[  357.285968][   T34]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  357.285987][   T34]  __mark_inode_dirty+0x3a8/0x13b0
[  357.286010][   T34]  ? mnt_get_write_access+0x216/0x280
[  357.286030][   T34]  ? ext4_file_mmap_prepare+0x277/0x450
[  357.286044][   T34]  touch_atime+0x568/0x670
[  357.286058][   T34]  ? ext4_file_mmap_prepare+0x277/0x450
[  357.286074][   T34]  ext4_file_mmap_prepare+0x277/0x450
[  357.286090][   T34]  mmap_region+0xf11/0x2c30
[  357.286110][   T34]  ? __update_page_owner_handle+0x512/0x580
[  357.286129][   T34]  ? lock_acquire+0x115/0x350
[  357.286145][   T34]  ? __page_table_check_zero+0x6c/0x430
[  357.286162][   T34]  ? __pfx_mmap_region+0x10/0x10
[  357.286184][   T34]  ? __page_table_check_zero+0x6c/0x430
[  357.286201][   T34]  ? __page_table_check_zero+0x6c/0x430
[  357.286217][   T34]  ? __page_table_check_zero+0x3c3/0x430
[  357.286231][   T34]  ? __page_table_check_zero+0x6c/0x430
[  357.286263][   T34]  ? lock_acquire+0x115/0x350
[  357.286318][   T34]  ? mt_find+0x186/0x630
[  357.286334][   T34]  ? mt_find+0x5ff/0x630
[  357.286350][   T34]  ? mt_find+0x186/0x630
[  357.286363][   T34]  ? __pfx_mt_find+0x10/0x10
[  357.286381][   T34]  ? bpf_lsm_mmap_addr+0x9/0x50
[  357.286396][   T34]  ? security_mmap_addr+0x71/0x240
[  357.286419][   T34]  ? shmem_mapping+0xd/0x50
[  357.286430][   T34]  ? memfd_check_seals_mmap+0xc5/0x220
[  357.286444][   T34]  do_mmap+0xe0a/0x1300
[  357.286466][   T34]  ? __pfx_do_mmap+0x10/0x10
[  357.286489][   T34]  ? vm_mmap_pgoff+0x1dd/0x4e0
[  357.286502][   T34]  ? down_write_killable+0x179/0x230
[  357.286519][   T34]  ? __pfx_down_write_killable+0x10/0x10
[  357.286533][   T34]  ? apparmor_mmap_file+0x2e7/0x390
[  357.286552][   T34]  vm_mmap_pgoff+0x272/0x4e0
[  357.286566][   T34]  ? lock_acquire+0x115/0x350
[  357.286583][   T34]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  357.286599][   T34]  ? __fget_files+0x2a/0x420
[  357.286615][   T34]  ? __fget_files+0x3a2/0x420
[  357.286627][   T34]  ? __fget_files+0x2a/0x420
[  357.286642][   T34]  ksys_mmap_pgoff+0x4dc/0x760
[  357.286680][   T34]  do_syscall_64+0x166/0x520
[  357.286692][   T34]  ? trace_irq_disable+0x3b/0x140
[  357.286707][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.286719][   T34]  ? clear_bhb_loop+0x70/0xc0
[  357.286734][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.286745][   T34] RIP: 0033:0x7f3c0a99dec2
[  357.286755][   T34] RSP: 002b:00007ffd6390f528 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  357.286767][   T34] RAX: ffffffffffffffda RBX: 0000001b32f64000 RCX: 00007f3c0a99dec2
[  357.286776][   T34] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b32f64000
[  357.286784][   T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  357.286792][   T34] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000000ca
[  357.286799][   T34] R13: 00000000000927c0 R14: 000000000003406c R15: 00007ffd6390f800
[  357.286818][   T34]  </TASK>
[  357.286825][   T34] 
[  357.286825][   T34] Showing all locks held in the system:
[  357.286852][   T34] locks held by khungtaskd/34: 1, last CPU#1:
[  357.286911][   T34]  #0: ffffffff8ed5c2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  357.287002][   T34] locks held by kworker/u8:4/63: 4, on CPU#1:
[  357.287011][   T34]  #0: ffff888020ae1148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  357.287047][   T34]  #1: ffffc9000204fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  357.287081][   T34]  #2: ffff8880367420e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0
[  357.287114][   T34]  #3: ffff888036740c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0
[  357.287195][   T34] locks held by getty/5366: 2, on CPU#0:
[  357.287204][   T34]  #0: ffff8880366e70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  357.287293][   T34]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  357.287339][   T34] locks held by syz-executor/5595: 3, on CPU#0:
[  357.287348][   T34]  #0: ffff8880333c4d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  357.287392][   T34]  #1: ffff888036742558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0
[  357.287431][   T34]  #2: ffff88803674e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  357.287488][   T34] locks held by syz.4.1014/8720: 3, on CPU#0:
[  357.287497][   T34]  #0: ffff888033c231c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  357.287536][   T34]  #1: ffff888036742558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0
[  357.287568][   T34]  #2: ffff88803674e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  357.287598][   T34] locks held by syz.0.1017/8725: 3, on CPU#1:
[  357.287607][   T34]  #0: ffff8880771de808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  357.287641][   T34]  #1: ffff888036742558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0
[  357.287672][   T34]  #2: ffff88803674e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  357.287702][   T34] locks held by syz.1.1015/8727: 3, on CPU#1:
[  357.287711][   T34]  #0: ffff88807c48d900 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  357.287741][   T34]  #1: ffff888036742460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  357.287773][   T34]  #2: ffff88803674e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  357.287804][   T34] locks held by syz.5.1018/8728: 3, on CPU#1:
[  357.287812][   T34]  #0: ffff88801b7fccc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  357.287843][   T34]  #1: ffff888036742460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  357.287874][   T34]  #2: ffff88803674e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  357.287905][   T34] locks held by syz.2.1019/8729: 3, on CPU#0:
[  357.287914][   T34]  #0: ffff88807f359bc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  357.287944][   T34]  #1: ffff888036742460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  357.287975][   T34]  #2: ffff88803674e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  357.288006][   T34] 
[  357.288009][   T34] =============================================
[  357.288009][   T34] 
[  357.288015][   T34] NMI backtrace for cpu 1
[  357.288026][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  357.288042][   T34] Tainted: [L]=SOFTLOCKUP
[  357.288046][   T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  357.288053][   T34] Call Trace:
[  357.288058][   T34]  <TASK>
[  357.288063][   T34]  dump_stack_lvl+0xe8/0x150
[  357.288087][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  357.288104][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  357.288124][   T34]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  357.288142][   T34]  sys_info+0x135/0x170
[  357.288173][   T34]  watchdog+0x1058/0x10d0
[  357.288192][   T34]  ? watchdog+0x209/0x10d0
[  357.288210][   T34]  kthread+0x38b/0x480
[  357.288224][   T34]  ? __pfx_watchdog+0x10/0x10
[  357.288238][   T34]  ? __pfx_kthread+0x10/0x10
[  357.288251][   T34]  ret_from_fork+0x514/0xb70
[  357.288264][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  357.288276][   T34]  ? __switch_to+0xc78/0x1410
[  357.288311][   T34]  ? __pfx_kthread+0x10/0x10
[  357.288324][   T34]  ret_from_fork_asm+0x1a/0x30
[  357.288349][   T34]  </TASK>
[  357.288354][   T34] Sending NMI from CPU 1 to CPUs 0:
[  357.288399][    C0] NMI backtrace for cpu 0
[  357.288418][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  357.288442][    C0] Tainted: [L]=SOFTLOCKUP
[  357.288449][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  357.288459][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  357.288482][    C0] Code: 9b 83 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 74 1e 00 fb f4 <e9> 4c 18 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  357.288497][    C0] RSP: 0018:ffffffff8ea07ca0 EFLAGS: 00000242
[  357.288514][    C0] RAX: 000000000017b319 RBX: ffffffff819c7630 RCX: 8000000000000001
[  357.288527][    C0] RDX: 0000000000000001 RSI: ffffffff8e41809e RDI: ffffffff8c6dd380
[  357.288539][    C0] RBP: ffffffff8ea07d78 R08: ffff8880b8633e5b R09: 1ffff110170c67cb
[  357.288553][    C0] R10: dffffc0000000000 R11: ffffed10170c67cc R12: 0000000000000000
[  357.288565][    C0] R13: 1ffffffff1d51df8 R14: 1ffffffff1d40f9c R15: dffffc0000000000
[  357.288578][    C0] FS:  0000000000000000(0000) GS:ffff888124cb9000(0000) knlGS:0000000000000000
[  357.288593][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  357.288605][    C0] CR2: 0000562ed8c25660 CR3: 000000000eb46000 CR4: 00000000003526f0
[  357.288623][    C0] Call Trace:
[  357.288630][    C0]  <TASK>
[  357.288637][    C0]  default_idle+0x9/0x20
[  357.288660][    C0]  default_idle_call+0x72/0xb0
[  357.288681][    C0]  do_idle+0x2e0/0x540
[  357.288703][    C0]  ? __pfx_do_idle+0x10/0x10
[  357.288730][    C0]  cpu_startup_entry+0x43/0x60
[  357.288753][    C0]  rest_init+0x378/0x3a0
[  357.288774][    C0]  ? __pfx_rest_init+0x10/0x10
[  357.288800][    C0]  ? __pfx_kernel_init+0x10/0x10
[  357.288822][    C0]  ? __pfx_acpi_hw_get_mode+0x10/0x10
[  357.288899][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[  357.288972][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[  357.288999][    C0]  ? acpi_enable_subsystem+0x286/0x3c0
[  357.289109][    C0]  start_kernel+0x397/0x3e0
[  357.289253][    C0]  x86_64_start_reservations+0x24/0x30
[  357.289289][    C0]  x86_64_start_kernel+0x137/0x1b0
[  357.289306][    C0]  common_startup_64+0x13e/0x157
[  357.289336][    C0]  </TASK>
[  357.289461][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  360.145793][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  360.156563][   T34] Tainted: [L]=SOFTLOCKUP
[  360.161128][   T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  360.171388][   T34] Call Trace:
[  360.174685][   T34]  <TASK>
[  360.177643][   T34]  vpanic+0x26f/0x710
[  360.181784][   T34]  panic+0xc5/0xd0
[  360.185573][   T34]  ? __pfx_panic+0x10/0x10
[  360.190015][   T34]  ? preempt_schedule_common+0x7f/0xd0
[  360.195490][   T34]  ? preempt_schedule_thunk+0x16/0x40
[  360.200980][   T34]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  360.207197][   T34]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  360.213587][   T34]  watchdog+0x10cc/0x10d0
[  360.218013][   T34]  ? watchdog+0x209/0x10d0
[  360.222484][   T34]  kthread+0x38b/0x480
[  360.226621][   T34]  ? __pfx_watchdog+0x10/0x10
[  360.231343][   T34]  ? __pfx_kthread+0x10/0x10
[  360.236126][   T34]  ret_from_fork+0x514/0xb70
[  360.240712][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  360.246184][   T34]  ? __switch_to+0xc78/0x1410
[  360.250904][   T34]  ? __pfx_kthread+0x10/0x10
[  360.255527][   T34]  ret_from_fork_asm+0x1a/0x30
[  360.260308][   T34]  </TASK>
[  360.263921][   T34] Kernel Offset: disabled
[  360.268281][   T34] Rebooting in 86400 seconds..