last executing test programs:

4.794192256s ago: executing program 3 (id=1932):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x1, 0x0, &(0x7f0000000140))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000000c0)={0x4, 0xfffffffffffffffd, 0x1, 0x7ffd, 0x6a})

4.644609036s ago: executing program 2 (id=1933):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)='!*:n_existent_event:mod:', 0x18)

4.37658242s ago: executing program 2 (id=1936):
mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10)
write(r0, &(0x7f0000000800)='file *evio.c +', 0xe)

3.840934355s ago: executing program 1 (id=1940):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000004c0)="02155e65", 0x4, 0x2)

3.558497251s ago: executing program 2 (id=1941):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000100)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c)

3.248037786s ago: executing program 1 (id=1942):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)="84801dc070eb3d02050b03b7b765146d6bdd78cb2c2bb145f9cbdffe4073f878", 0x20)

2.998516385s ago: executing program 3 (id=1944):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.load\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)="04080076657273696f6e000205000000040a00", 0x13)

2.628940159s ago: executing program 1 (id=1946):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x40000000, 0x0, 0x7, 0x40000001, 0x4b4d564b, 0x564b4d56, 0x4d}]})

2.612026977s ago: executing program 4 (id=1947):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r2, r0, 0x4}, 0xb)

2.389067075s ago: executing program 4 (id=1948):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}}, 0x0)

2.272937701s ago: executing program 2 (id=1949):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7bfd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_connect$uac2(0x2, 0xfffffffffffffd34, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x249c, 0x932c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xff, 0x0, 0x9, {0x8, 0xb, 0x2, 0x1, 0x1, 0x6, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x9, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3cf, 0xf9, 0x7, 0x6, {0x8, 0x25, 0x1, 0x0, 0x3, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xad, 0x3, 0x5, {0x8, 0x25, 0x1, 0x82, 0x33, 0x7, 0x2}}}}}}}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

2.234416601s ago: executing program 0 (id=1950):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c)

2.23357889s ago: executing program 1 (id=1951):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000540)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1], 0x20000600}, 0x1, 0x0, 0x0, 0x4000081}, 0x20004080)

2.131717641s ago: executing program 4 (id=1952):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x14040, &(0x7f0000001e40)=ANY=[], 0xff, 0x5e92, &(0x7f0000018400)="$eJzs3U1vHVf9B/DfffD1Q/9No+qvKkQs3BRKS2nzHChPTVl0AQuQUNckct0qkAJKAqJVRFxlgdgALwE23bDoW+AF9DUgXgCRbFZdUAaNfU4yHl/nOiS+c6/P5yM5M785d3zP5Ovx3OuZuScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPj+Wz8+24uIK79OC45H/F8MIvoRy3W9GvXM5fz4YUSciO3meC4iBosR9frb/zwTcSEiPj0Wsbl1e61efO6A/bh45taNz3/wvb//7o93T/z0nZ983G7/0f+f/+T3dyKO//D1Tz6/82S2HQAAAEpRVVXVS2/zT6b39/2uOwUATEU+/ldJXq5Wq9XqJ1r/oT9b/VEXWjdV491pFhGx0Vynfs3gdDwAzJmN+KzrLtAh+RdtGBFPdd0JYKb1uu4Ah2Jz6/ZaL+Xbax4PVnfa898pd+W/0bt/f8d+00na15hM6+frbgzi2X36szylPsySnH+/nf+VnfZRetxh5z8t++U/2rn1qTg5/0E7/5Zd+f8pIuY2//7Y/EuV8x8+Sv4bgzne/+UPAAAAAMDRl//+f7zj87+Lj78pB/Kw87+rU+oDAAAAAAAAADxpjzv+333G/wMAAICZVb9Xr/352INl+30WW7387V7E063HA4VZbXw4IAAAAAAAAAAAAAAwHcOIlXRd/0JEPL2yUlVV/dXUrh/V464/70rffihZ17/kAQBgx6fHWvfy9yKWIuLt9Fl/CysrK1W1tLxSrVTLi/n17GhxqVpuvK/N03rZ4ugAL4iHo6r+ZkuN9ZomvV+e1N7+fvVzjarBATo2HR0GDgARsXM02nREOmKq6pno+lUO88H+f/TY/zmIrn9OAQAAgMNXVVXVSx/nfTKd8+933SkAYCry8b99XkCtVqvVavXRq5uq8e40i4jYaK5Tv2YwHD8AzJmN+KzrLtAh+RdtGBEnuu4EMNN6XXeAQ7G5dXutl/LtNY8Hqzvt+VqQXflv9LbXy+uPm07SvsZkWj9fd2MQz+7Tn+em1IdZkvPvt/O/stOeh/g/7PynZb/86+083kF/upbzH7Tzbzk6+ffH5l+qnP/wkfIfyB8AAAAAAGZY/vv/ced/8yYDAAAAAAAAwNzZ3Lq9lu97zef/vzjmcb3mnPs/j4ycf+/A+bv/9yjJ+ffb+bcuyBk05u+9+SD/f23dXvv41j+/kKczn//CYFQ/90KvPxima36qhXfjWlyP9Tiz5/HDXe1n97Qv7Go/N6H9/J72Ud2+vN3+Vl2vxS/ierxzv31xwoVRSxPaqwntOf+B/b9IOf9h46vOfyW191rT2r2P+nv2++Z03PNc/uu/X9y7d03f3Rjc37amevtOddCf7f+Tp0bxq5vrN177zdVbt26cjTTZtfRcpMkTlvNfSF85/5de2GnPv/eb++u9j0aPnP+suBvDffN/oTFfb+/LU+5bF3L+o/SV889HoPH7/zznv//+/0oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5erp1Usz1h+1Wq1WH926qRrvjWYREX9rrlO/ZvjtuG8GAMyy/0TEP7ruBJ2Rf8Hy5/3V0y913Rlgqm5+8OHPrl6/vn7jZtc9AQAAAAAAAAD+V3n8z9XG+M/b1wG1xo3eNf7rm7E6t+N/9keD7bHO0wY9Hw8f//tUPHz87+GE51uY0D6a0L44oX1pQvvYGz0acv7Pp4xz/ifThpU0/utLHfSnazn/U2ms55z/V1qPa+Zf/WWe8+/vyv/0rfd/efrmBx++eu39q++tv7f+87NnLl04f/HC+YsXT7977fr6mZ1/O+zx4cr557GvXQdalpx/zlz+Zcn5fznV8i9Lzv/FVMu/LDn//HpP/mXJ+ef3PvIvS87/5VTLvyw5/6+mWv5lyfm/kmr5lyXn/7VUy78sOf9XUy3/suT8X0u1/MuS8z+davmXJeefz3DJvyw5/3xlg/zLkvM/l2r5lyXnfz7V8i9Lzv9CquVflpz/xVTLvyw5/0upln9Zcv5fT7X8y5Lz/0aq5V+WnP/rqZZ/WXL+30y1/MuS8/9WquVflpz/t1Mt/7Lk/L+TavmXJef/3VTLvyw5/zdSLf+yPPj8fzNmzJjJM13/ZgIAAAAAAAAAAAAA2qZxOXHX2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/JcdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWHvXmPkKu/7gZ+92WtDgv+BcIsDtrkZWNhd38AhBpOE/CnphZKQNi2pcbxrs4lv9e5yEyqbQluiIBWpVUVfNE2iNIrUVqAqaqlEIqRGat81rxrxJmqlvPALqByUVEoV2OrMPM+zM7Ozc9aXsWfO+XyQ/fPunJl55syZ2fku+s4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Gjzx6f/ZCDLsvxP7a8NWXZx/u912d78y4VdF3qFAAAAwNl6t/b3312SvrF3FWdq2OZfr/n37y4uLi5mX3jn5Ht/triYTtiUZUNrs6x2WvRvv/j5YuM2wXPZ6MBgw9eDBVc/VHD6cMHpIwWnryk4fW3B6aMFpy/bAcusq/8+pnZh19f+uaG+S7PLspHaade3OddzA2sHB+PvcmoGaudZHDmYzWSHs+lsYtl5Bmr/Zdnrm/Pruj+L1zXYcF0bsyw79dNnDsQ1DIR9fH3WdGU1jffd2/dmm9756TMHvj331lXtZuFuWLbSLNu6JV/n81m29OuqbCBbm/ZJXOdgwzo3tlnnUNM6B2rny//dus5Tq1xnvN2jYZ0/7LDOjeF7T16XZdlCtuI2rZ7LBrP1Ldea9vdo/YjILyO/Kz+QDZ/WcbJ5FcdJfp6fXNd8nLQek3H/bw77ZHiFNTTeHW9/ec2y/X6mx0l+q3vhWM0v+8H8SkdHG3+12nSs5ts8c8PKx0Db+67NMZCO5YZjYEvRMTC4Zqh2DAwurXlL0zEwuew8g9lA7bpO3tD5GBifO3J8fPapp2+bObL/0PSh6aOTE7t2bN+5Y/vOneMHZw5PT9T/Pr1d2kfWZ4PpGNwSnmviMXhTy7aNh+TiN87d42C0Rx4H+W3/zI35gi4ezFY4xvNtnt969o+D9HO/4XEw3PA4aPuc2uZxMLyKx0G+zamtq/uZOdzwp90auvVcuKHhGLiQPw/z63zk5pWfCzeGdb1wy+n+PBxadgzEmzUQHnv5d9LrvdE7w35ZflxcnZ9w0Zpsfnb6xO1P7p+bOzGZhXFeXNpwX7UeL+sbblO27HgZPO3jZe/f/vLGq9t8f0PYV6O3dr6v8m12jHW+r2rP7u33Z9N3t2VhnGPne3+2+2mW78+UJTrsz3yb5287+9eCKZc0PP+NFD3/DY0M15//htLeGGl6/lt+1wzVVpZlp25b3fPfSPhzvp//LuuR5798Xz1ye+djIN/mhfHTPQaGOz7/XRfmQFjPzSExjDbk/vdqpy/UD9OG+7LwuBkeHgnHzXC8xubjZvuy8+SXll/31okzO262Xtd8XzW9binhcZPvqz+f6Hzc5Nu8MXn2zx3r4j8bnjvWFB0DI0Nr8vWOpIOg/ny3uC4eA7dnB7Jj2eFsKp0nv5fz6xrbtrpjYE34c76fO67skWMg31cvb+t8DOTb/GD7uX3ttDV8J23T8Nqp9fcLK2X+q4eXLq91t53rzJ+v8xM7Ov9uKN/mrR2nmzM676dbw3cuarOfWh8/Kx3TU9n52U9XhnUe3tn5d1P5NpftWuXxtDfLsjcn36z9viv8fvcf5v/ju02/9233O+U3J998YPyhH53O+gEAOHPv1f5eWFN/rdnwf6xX8///AQAAgL4Qc/9gmIn8DwAAAKURc/9QmIn8DwAAAKURc/9wmElF8v9jd+5+5d1ns/RugItBPD3uhgfvrm8XO94L4etNi0vy73/sWyOvfOXZ1V33YJZlv3zgQ223f+zuuK6643GdH2n+/jJXXruq63/04aXtGt8/4dTu+uXH27PawyB2lV8f31a73E1PTdbmGw9ktfnQwgvP1S+//nXc/uT2+vZ/Fd60ZO/Bgabzbw3ruT7MTeE9ZR7cu7Qf8hnP98rGa/7l0s8uXV8838CW99du5st/UL/c+B5RL11a3z7e7pXW/72vfueVfPsnb2i//mcH26//ZLjcn4T5iz317Rv3+Vca1v9HYf3x+uL5bv/m99uu/9Ur6tu/Go6Lr4fZuv57//TD77a7v+L17L2rfr54/RP/s6N2vnh58fJb1z/67GTT/mi9/DfeqV/Onsd/NtS4ffx+vJ7o0buaj++BcP829cizLPvOH2dN+zn7aP18/9yy/nh5x+9qv/5bW9Z5fODa2vmXbs+Gptv1tb/Z1vb2xvXs/fsNTbfnpfvC/ntn/Af55Z58KByP4fT//WH98lrfy/TV+5qfb+L2X99Qf9zGyxtvWf9LLetfuDbfd8Xrv/+d+vpfvWdt0/r3fjIcT/fXZ9H6D/31JU3n/8a36/fHiSfGjh6bnZ+ZatirjY/jtaPr1l908fvef0l4Lm39et+xucemT2ya2DSRZZv68C0Du73+b4b53/WxcO6voe5HP6sfdy9+qv5z66af179+KXz/0XB/xp+PX/vLkabjtfV+X7inPs92/beEdazWFV/9r2tXteHJz78+/09/+Fbr64J4e45/cLR2+17efHnttIE36qe3Pl8V+c8PNj+ufzw8UZuvhf26GN6Zecvl9etrvfz43iQvfrr++I2v5OL5s5b3E9kw1Hw7znb9Pw6vY75/ZfPzXzw+Xnu25d2cN2QD+RIWwvNDtlA/PW4V9/eLpy5ve33xfXiyhatOZ5krmn1qdvzwzNH5J8fnpmfnxmefenrfkWPzR+f21d67dN8Xi86/9PheX3t8T03v2pHVHu3H6qPLLvT6jz98YOqOiRunpg/unz849/Dx6ROHDszOHpiemr1x/8GD008UnX9mas/ktt3b79g2dmhmas+du3dv3z02c/RYvoz6ogrsmvjS2NET+2pnmd2zY/fkzp07JsaOHJua3nPHxMTYfNH5az+bxvJzPz52Yvrw/rmZI9NjszNPT++Z3L1r17bCd388cvzg7KbxE/NHx+dnp0+M12/Lprnat/OffUXnpxpmj4XnuxYD4dX5527dld4fN/etL694UfVNml+eZm+H94KKP9+Kvo65fyTMpCL5HwAAAKog5v7wxv9LJ8j/AAAAUBox968NM5H/AQAAoDRi7h8NM6lI/tf/1//X/1+h//+P39P/1//X/z8H9P/1/zvR/9f/7+f16//r/1Os1/r/Mfevy7JK5n8AAACogpj714eZyP8AAABQGjH3XxRmIv8DAABAacTcf3GYSTXy/0jrP/X/9f/1/xs//z9uq/+f6f/r/58h/X/9/070/0vc/39v8Jys8YKtvz/7/+v0/+k1vdb/j7n/fWEm1cj/AAAAUAkx978/zET+BwAAgNKIuf+SMBP5HwAAAEoj5v4NYSYVyf8+/1//X/+/U//f5/830v/X/z8T+v/6/53o/5e4/+/z/33+P/Rg/z/m/v8XZlKR/A8AAABVEHP/B8JM5H8AAAAojZj7Lw0zkf8BAACgNGLuvyzMpCL5X/9f/1//X/9f/1//v5v0//X/O9H/1//v5/Xr/+v/U6zX+v8x938wzKQi+R8AAACqIOb+y8NM5H8AAAAojZj7rwgzkf8BAACgNGLuvzLMpCL5X/9f/1//X/9f/1//v5v0//X/O9H/1//v5/Xr/+v/U6zX+v8x918VZlKR/A8AAABVEHP/1WEm8j8AAACURsz9Hwozkf8BAACgNGLu3xhmUpH8r/+v/6//r/+v/6//30391f8fXPEU/f86/f9m+v/6/+es/5+/FNf/p4R6rf8fc/+Hw0wqkv8BAACgCmLuvybMRP4HAACA0oi5/9owE/kfAAAASiPm/k1hJhXJ//r/+v/6/73c/6/f0mr2/1/7i9b9qf+v/9+Oz//X/8/0/8/Yhe7P9/v6ff6//j/Feq3/H3P/5jCTiuR/AAAAqIKY+7eEmcj/AAAAUBox918XZiL/AwAAQGnE3H99mElF8r/+v/6//n8v9/99/n+m/6//X0D/X/8/0/8/Yxe6P9/v69f/X13/f03RBVFq57H/P5ytov8fc/8NYSYVyf8AAABQBTH33xhmIv8DAABAacTcf1OYifwPAAAApRFz/9Ywk4rkf/1//X/9f/1//X/9/27S/9f/70T/X/+/n9ev/+/z/ynWa5//H3P/zWEmFcn/AAAAUAUx998SZiL/AwAAQGnE3H9rmIn8DwAAAKURc/9YmElF8r/+v/6//r/+v/6//n83lbX/n55H9f/1//X/9f/1//X/WVGv9f9j7r8tzKQi+R8AAACqIOb+28NM5H8AAAAojZj7x8NM5H8AAAAojZj7J8JMKpL/9f/1//X/9f/1//X/u6ms/X+f/6//n+n/6//r/+v/U6jX+v8x90+GmVQk/wMAAEAVxNy/LcxE/gcAAIDSiLl/e5iJ/A8AAAClEXP/jjCTiuR//X/9f/1//X/9f/3/btL/1//vRP9f/7+f16//r/9Ps8E23+u1/n/M/TvDTCqS/wEAAKAKYu7fFWYi/wMAAEBpxNx/R5iJ/A8AAAClEXP/nWEmFcn/+v/6//r/+v/6//r/3aT/r//fif6//n8/r1//X/+fYr3W/4+5f3eYSUXyPwAAAFRBzP0fCTOR/wEAAKA0Yu6/K8xE/gcAAIC+0u5zCKOY+z8aZlKR/K//X/b+/+Ja/X/9f/3/zuvX/+8u/X/9/070//X/+3n9+v/6/xTrtf5/zP17wkwqkv8BAACgCmLuvzvMRP4HAACA0oi5/54wE/kfAAAASiPm/r1hJhXJ//r/Ze//+/x//X/9/6L16/93l/6//n8n+v/92f8PL1v0/3uo/58fQ/r/9KJe6//H3H9vmElF8j8AAABUQcz9Hwszkf8BAACgNGLu/3iYifwPAAAApRFz/yfCTCqS//X/9f/1//X/9f/1/7tJ/1//vxP9//7s/0f6/73T//f5//SqXuv/x9x/X5hJRfI/AAAAVEHM/Z8MM5H/AQAAoDRi7v//YSbyPwAAAJRGzP33h5lUJP/r/+v/6//r/+v/6/93k/6//n8n+v/6//28fv1//X+K9Vr/P+b+XwkzqUj+BwAAgCqIuf+BMBP5HwAAAEoj5v5PhZnI/wAAAFAaMff/aphJRfK//v/56f8PpsvX/9f/1//X/9f/P5f0//X/M/3/M3ah+/P9vn79f/1/ivVa/z/m/l8LM6lI/gcAAIAqiLn/18NM5H8AAAAojZj7fyPMRP4HAACA0oi5/8Ewk4rkf/1/n/+v/6//r/+v/99N+v/6/53o/+v/9/P69f/1/ynWa/3/mPt/M8ykIvkfAAAAqiDm/ofCTOR/AAAAKI2Y+z8dZiL/AwAAQGnE3P+ZMJOK5H/9f/1//X/9f/1//f9u0v/X/+9E/1//v5/Xr/+v/0+xXuv/x9z/cJhJRfI/AAAAVEHM/Z8NM5H/AQAAoDRi7v+tMBP5HwAAAEoj5v7fDjOpSP7X/9f/1//X/9f/1//vJv3/5f3//DnsQvb/16xmQ/3/VdH/1//X/9f/p7Ne6//H3P+5MJOK5H8AAACogpj7fyfMRP4HAACA0oi5/3fDTOR/AAAAKI2Y+x8JM6lI/tf/1//X/9f/1//vdv//Df1//X+f/78C/X/9/35ev/6//j/Feq3/H3P/58NMKpL/AQAAoApi7v+9MBP5HwAAAEoj5v59YSbyPwAAAJRGzP2PhplUJP/r/+v/X7D+fziP/v/S+fT/w/1auv6/z//X/9f/X4n+v/5/P69f/1//n2K91v+PuX9/mElF8j8AAABUQcz9Xwgzkf8BAACgNGLuPxBmIv8DAABAacTcPxVmUpH8r/+v/+/z//X/9f/1/7tJ/1//vxP9f/3/fl6//r/+P8V6rf8fc/90mElF8j8AAABUQcz9B8NM5H8AAAAojZj7D4WZyP8AAABQGjH3PxZmUpH8r/+v/6//r/+v/6//3036//r/nej/6//38/r1//X/KdZr/f+Y+2fCTCqS/wEAAKAKYu7/YpiJ/A8AAAClEXP/l8JM5H8AAAAojZj7D4eZVCT/6//r/+v/6/+36//XD0n9f/3/s6f/r//fif6//n8/r1//X/+fYr3W/4+5/0iYSUXyPwAAAFRBzP1Hw0zkfwAAACiNmPuPhZnI/wAAAFAaMfcfDzOpSP7X/9f/1//X//f5//r/3aT/r//fif6//n8/r1//X/+fYr3W/4+5//fDTCqS/wEAAKAKYu4/EWYi/wMAAEBpxNw/G2Yi/wMAAEBpxNw/F2ZSmP/XdXFV54/+v/6//r/+v/6//n836f/r/3ei/6//38/r1//X/6dYr/X/Y+6fDzPx//8BAACgNGLufzzMRP4HAACA0oi5/4kwE/kfAID/Y++udwW7qjiO35a0JSGEZ+EJeASegbfA3Yq7u7u7u7u7OxSKa1ICd601ZTrdZ+xw99nr8/lnBTrt7Mz965fJNweAZeTuv2fc0mT/6//1//r/afr/085P/6//1/9fEv2//v9E/3/ZzrqfP/r79f/6f7bN1v/n7r9X3NJk/wMAAEAHufvvHbfY/wAAALCM3P33iVvsfwAAAFhG7v77xi1N9r/+X/+v/5+m//f9//y56v/1/5dA/6//P9H/X7az7ueP/n79v/6fbbP1/7n77xe3NNn/AAAA0EHu/vvHLfY/AAAALCN3/wPiFvsfAAAAlpG7/4FxS5P9r//X/+v/9f/6f/3/nvT/+v8R/b/+/8jv1//r/9k2W/+fu/9BcUuT/Q8AAAAd5O5/cNxi/wMAAMAycvc/JG6x/wEAAGAZufsfGrc02f/6f/2//l//r//X/+9J/6//H9H/6/+P/H79v/6fbbP1/7n7Hxa3NNn/AAAA0EHu/ofHLfY/AAAALCN3/yPiFvsfAAAAlpG7/5FxS5P9r//X/+v/9f/6f/3/nvT/+v8R/b/+/8jv1//r/9m2e/9/9xv/ey+2/8/df2Pc0mT/AwAAQAe5+x8Vt9j/AAAAsIzc/Y+OW+x/AAAAWEbu/sfELU32v/5f/3+u/7/lGv2//l//f+7/1/9fHfp//f+I/n/W/v/i/iT0//p//T9bdu//N3r/8/937v7Hxi1N9j8AAAB0kLv/cXGL/Q8AAADLyN3/+LjF/gcAAIBl5O5/QtzSZP/r//X/vv+v/9f/6//3pP/X/4/o/2ft/33//0r7/7tdxPv1/3QwW/+fu/+JcUuT/Q8AAAAd5O5/Utxi/wMAAMAycvc/OW6x/wEAAGAZufufErc02f/6f/2//l//r//X/+9J/6//H9H/6/+P/H7f/9f/s222/j93/1Pjlib7HwAAADrI3f+0uMX+BwAAgGXk7n963GL/AwAAwDJy9z8jbmmy//X/+n/9v/7/ivr/O+j/9f9j+n/9/4j+X/9/5PdfYv9/w/n/vv6fDmbr/3P3PzNuabL/AQAAoIPc/c+KW+x/AAAAWEbu/mfHLfY/AAAALCN3/3Pilib7X/+v/9f/6/99/1//vyf9/3L9/zX6/3P0//p/3//X/zM2W/+fu/+5cUuT/Q8AAAAd5O5/Xtxi/wMAAMAycvc/P26x/wEAAGAZuftfELc02f/6f/2//l//r//X/+9J/79c/+/7/7ei/9f/6//1/4zN1v/n7n9h3NJk/wMAAEAHuftfFLfY/wAAALCM3P0vjlvsfwAAAFhG7v6XxC1N9v+U/f91+v9j9P/Xn5yc6P/1//p//f+Y/l//P6L/v3D/f8fb+f30/3O9X/+v/2fbbP1/7v6Xxi1N9j8AAAB0kLv/ZXGL/Q8AAADLyN3/8rjF/gcAAIBl5O5/RdzSZP/fXv9/851O/7nv/1+cnv2/7//r///3Pfp//f+F6P/1/yP6f9//P/L79f/6f7bN1v/n7n9l3NJk/wMAAEAHuftfFbfY/wAAALCM3P2vjlvsfwAAAFhG7v7XxC1N9v+U3//X/+v/9f/139H/6//1/2P6f/3/if7/sp11P3/09+v/9f9sm63/z93/2rilyf4HAACADnL3vy5usf8BAABgGbn7Xx+32P8AAACwjNz9b4hbmux//b/+/8z7/2v1/0n/Hz9X/b/+/xLo//X/J/r/y3bW/fzR36//1/+zbbb+P3f/G+OWJvsfAAAAOsjd/6a4xf4HAACAZeTuf3PcYv8DAADAMnL3vyVuabL/9f/6/zPv/33/v+j/4+e6Q///nz9D/f/Z0P/r/0f0//r/I79f/6//Z9ts/X/u/rfGLU32PwAAAHSQu/9tcYv9DwAAAMvI3f/2uMX+BwAAgGXk7n9H3NJk/+v/9f/6f/1/h/5/9H79/770//r/Ef2//v/I79f/6//ZNlv/n7v/nXFLk/0PAAAAHeTuf1fcYv8DAADAMnL3vztusf8BAABgGbn73xO3NNn/+v+j9//3uCleoP/X/+v/9f9T0v/r/0f0//r/I79f/6//Z9ts/X/u/vfGLU32PwAAAHSQu/99cYv9DwAAAMvI3f/+uMX+BwAAgGXk7v9A3NJk//fo/6+7zS9bp//3/X/9v/5f/z83/b/+f0T/r/8/8vv1//p/ts3W/+fu/2Dc0mT/AwAAQAe5+z8Ut9j/AAAAsIzc/R+OW+x/AAAAWEbu/o/ELU32f4/+/7b0/6euev9/y130//r/ov/X/5/o//X/G/T/+v8jv1//r/9n22z9f+7+j8YtTfY/AAAAdJC7/2Nxi/0PAAAAy8jd//G4xf4HAACAZeTu/0TccNc7n92T/q/0//p/3//X/+v/9f970v/r/0f0//r/I79f/6//Z9ts/X/u/k/GLf7+HwAAAJaRu/9TcYv9DwAAAMvI3f/puMX+BwAAgGXk7v9M3NJk/+v/9f/6/2P3/9fq//X/k9P/6/9H9P/6/yO/X/+v/2fbbP1/7v7Pxi1N9j8AAAB0kLv/c3GL/Q8AAADLyN3/+bjF/gcAAIBl5O7/QtzSZP/r//X/+v9j9/++/6//n53+X/8/ov/X/x/5/fp//T/bZuv/c/d/MW5psv8BAACgg9z9X4pb7H8AAABYRu7+L8ct9j8AAAAsI3f/V+KWJvtf/6//1//r//X/+v896f/1/yP6f/3/kd+v/9f/s222/j93/1fjlib7HwAAADrI3f+1uMX+BwAAgGXk7v963GL/AwAAwDJy938jbmmy/1fu/0e/TP9/Sv+v/z/R/+v/d6b/1/+P6P/1/0d+v/5f/8+22fr/3P3fjFua7H8AAADoIHf/t+IW+x8AAACWkbv/23GL/Q8AAADLyN3/nbilyf5fuf8f0f+f0v/r/0/0//r/nen/9f8j+n/9/5Hfr//X/7Nttv4/d/9345Ym+x8AAAA6yN3/vbjF/gcAAIBl5O7/ftxi/wMAAMAycvf/IG5psv/1//p//b/+X/+v/9+T/l//P6L/1/8f+f36f/0/22br/3P3/zBuabL/AQAAoIPc/T+KW+x/AAAAWEbu/h/HLfY/AAAALCN3/0/ilib7X/+v/9f/6//1//r/Pen/9f8j+n/9/5Hfr//X/7Nttv4/d/9P45Ym+x8AAAA6yN3/s7jF/gcAAIBl5O7/edxi/wMAAMAycvf/Im5psv/1//p//b/+X/+v/9+T/l//P6L/1/8f+f36f/0/22br/3P3/zJuabL/AQAAoIPc/b+KW+x/AAAAWEbu/l/HLfY/AAAALCN3/2/ilib7X/+v/9f/6/8b9v/X3/r30//vS/+v/x/R/+v/j/x+/b/+n21Xrf/PX3CF/X/u/pvilib7HwAAADrI3f/buMX+BwAAgGXk7v9d3GL/AwAAwDJy998ctzTZ//p//f+S/f8N+n/9v+//z0L/r/8f0f/r/4/8fv2//p9ts33/P3f/7+OWJvsfAAAAOsjd/4e4xf4HAACAZeTu/2PcYv8DAADAMnL3/yluabL/9f/6/yX7f9//1//r/6eh/9f/j+j/9f9Hfr/+X//Pttn6/9z9f45bmux/AAAA6CB3/1/iFvsfAAAAlpG7/69xi/0PAAAAy8jd/7e45cL7//xs9PD0//p//b/+X/+v/9+T/l//P6L/1/8f+f36f/0/22br/3P3/z1u8ff/AAAAsIzc/f+IW+x/AAAAWEbu/n/GLfY/AAAALCN3/7/ilib7X/+v/9f/6//1//r/Pen/9f8j+n/9/5Hfr//X/7Nttv4/d/+/AwAA//+foDTn")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2.13098601s ago: executing program 3 (id=1953):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x82, 0x180)
write(r0, &(0x7f0000000300)='*ub:*d', 0x6)

1.980990207s ago: executing program 0 (id=1954):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

1.960637197s ago: executing program 1 (id=1955):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000001e80)="$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")
fanotify_init(0x40, 0x80000)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.888836266s ago: executing program 3 (id=1956):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_trie\x00')
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/67, 0x43}], 0x1, 0x7, 0x5)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))

1.610567926s ago: executing program 3 (id=1957):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5818048, &(0x7f00000003c0)=ANY=[], 0x1, 0x153d, &(0x7f0000001880)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
lseek(r0, 0xfffffffffffffffc, 0x2)
getdents(r0, 0x0, 0x54)

1.229403652s ago: executing program 0 (id=1958):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r0, 0x108000)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0})

1.220305706s ago: executing program 1 (id=1959):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000010129000009054f928c"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1)
write$cgroup_pid(r1, &(0x7f0000000000), 0x12)

1.195998361s ago: executing program 3 (id=1960):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="60140a00000023"], 0x0, 0x0, 0x0, 0x0})

649.950868ms ago: executing program 0 (id=1961):
r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000040))
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0xf3b, 0x5d4, 0x1, 0x400011})

534.820136ms ago: executing program 4 (id=1962):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000380)={0x33, 0x29, 0x1, {0x10001, [{{0x1, 0x2, 0x4}, 0x100000000, 0x85, 0x10, './proc_mnt/file0'}]}}, 0x33)

444.089074ms ago: executing program 0 (id=1963):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfffffffffffffff4}]})

259.759881ms ago: executing program 2 (id=1964):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0)
ppoll(&(0x7f0000000140)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0)

242.43815ms ago: executing program 4 (id=1965):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x130, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'geneve0\x00'}, 0x287, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0020010000000000000800000000000000ff0200000000000000000000000000010103"], 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x94489e87720a3ec, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50)

32.731704ms ago: executing program 0 (id=1966):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2c}}}, &(0x7f0000000280)=<r5=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
syz_ublk_setup_queues(r0, r5, &(0x7f0000000400)={0x0, 0xf39b, 0x80, 0x3, 0xb0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x1, 0x1, 0x31b, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x800, 0x1, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0)

31.64066ms ago: executing program 2 (id=1967):
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0806000108080604"], 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
syz_usb_connect(0x1, 0x36, 0x0, 0x0)

0s ago: executing program 4 (id=1968):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904900102020d0000090582"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

: 4 bytes leftover after parsing attributes in process `syz.1.1024'.
[  237.245189][ T8786] loop4: detected capacity change from 0 to 4096
[  237.257231][ T8789] gretap0: entered promiscuous mode
[  237.315494][ T8789] macvlan2: entered allmulticast mode
[  237.315513][ T8789] gretap0: entered allmulticast mode
[  238.159879][ T8805] loop1: detected capacity change from 0 to 2048
[  238.219275][ T8805] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  238.219294][ T8805] UDF-fs: Scanning with blocksize 512 failed
[  238.305731][ T8805] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  238.542210][ T8810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1026'.
[  238.823579][ T8814] loop3: detected capacity change from 0 to 1024
[  238.944499][ T8814] gfs2: path_lookup on c::: returned error -2
[  239.006844][ T8797] loop2: detected capacity change from 0 to 32768
[  239.046935][ T8797] 
[  239.046935][ T8797]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  239.046935][ T8797] 
[  239.224512][ T8816] loop4: detected capacity change from 0 to 4096
[  239.249866][ T8816] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  239.311499][ T8797] ERROR: (device loop2): diWrite: ixpxd invalid
[  239.311499][ T8797] 
[  239.318422][ T8797] ERROR: (device loop2): txCommit: 
[  239.318422][ T8797] 
[  239.396800][ T8822] loop3: detected capacity change from 0 to 2048
[  239.409533][ T8816] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  239.441229][ T8797] jfs_create: dtSearch returned -17
[  239.522050][ T8816] ntfs3(loop4): failed to convert name for inode a.
[  239.593421][ T8822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.666631][ T5610] 
[  239.666631][ T5610]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  239.666631][ T5610] 
[  239.667275][ T5610] 
[  239.667275][ T5610]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  239.667275][ T5610] 
[  239.714095][ T8822] EXT4-fs (loop3): shut down requested (2)
[  239.923570][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.207892][ T8838] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1044'.
[  240.589485][ T8849] loop2: detected capacity change from 0 to 1024
[  240.638220][ T8849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  240.638289][ T8849] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.973158][ T8858] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  240.973176][ T8858] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  241.017013][ T8856] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.1049: corrupted xattr block 84: invalid header
[  241.217600][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  241.487327][ T8865] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  241.820938][ T8881] pimreg: tun_chr_ioctl cmd 1074025677
[  241.821020][ T8881] pimreg: linktype set to 0
[  241.926205][ T8887] loop3: detected capacity change from 0 to 2048
[  241.950379][ T8887] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  241.950686][ T8887] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  241.950698][ T8887] UDF-fs: Scanning with blocksize 512 failed
[  242.001302][ T8887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  242.119212][ T8891] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  242.649339][ T8908] loop4: detected capacity change from 0 to 1024
[  242.694689][ T8908] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002]
[  242.694765][ T8908] System zones: 0-1, 3-12
[  242.696064][ T8908] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.924213][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  243.228593][ T8925] loop2: detected capacity change from 0 to 256
[  243.360988][ T8930] netlink: 'syz.4.1085': attribute type 21 has an invalid length.
[  243.361006][ T8930] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1085'.
[  243.361155][ T8930] netlink: 'syz.4.1085': attribute type 5 has an invalid length.
[  243.361164][ T8930] netlink: 'syz.4.1085': attribute type 6 has an invalid length.
[  243.361172][ T8930] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1085'.
[  243.423176][ T8930] netlink: 'syz.4.1085': attribute type 21 has an invalid length.
[  243.423193][ T8930] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1085'.
[  243.423230][ T8930] netlink: 'syz.4.1085': attribute type 5 has an invalid length.
[  243.423239][ T8930] netlink: 'syz.4.1085': attribute type 6 has an invalid length.
[  243.423246][ T8930] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1085'.
[  243.541940][ T5734] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  243.616440][ T8934] loop3: detected capacity change from 0 to 512
[  243.654525][ T8934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.654594][ T8934] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.693985][ T5734] usb 3-1: unable to get BOS descriptor or descriptor too short
[  243.694021][ T5734] usb 3-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40
[  243.694890][ T5734] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.694916][ T5734] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  243.742685][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.742716][ T5734] usb 3-1: Product: syz
[  243.742725][ T5734] usb 3-1: Manufacturer: syz
[  243.742733][ T5734] usb 3-1: SerialNumber: syz
[  243.782892][ T5734] usb 3-1: selecting invalid altsetting 1
[  243.783361][ T5734] usb 3-1: unit 0 not found!
[  243.856100][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.958330][ T5734] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  244.019096][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  244.039349][ T8925] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  244.039369][ T8925] FAT-fs (loop2): Filesystem has been set read-only
[  244.078521][ T5734] usb 3-1: USB disconnect, device number 11
[  244.611695][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  244.946347][ T8954] jffs2: notice: (8954) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  245.304519][ T8965] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1098'.
[  245.810885][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  245.963717][    T9] usb 4-1: New USB device found: idVendor=047e, idProduct=ffff, bcdDevice=0.00
[  245.964881][    T9] usb 4-1: config 0 has no interfaces?
[  245.964913][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.999047][    T9] usb 4-1: config 0 descriptor??
[  246.124205][ T5734] kernel write not supported for file /input/mice (pid: 5734 comm: kworker/0:6)
[  246.231660][ T5734] usb 4-1: USB disconnect, device number 10
[  246.339075][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'.
[  246.671912][ T5734] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  246.747589][ T8984] loop0: detected capacity change from 0 to 32768
[  246.768647][ T8984] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1106 (8984)
[  246.797654][ T8984] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  246.797680][ T8984] BTRFS info (device loop0): using crc32c checksum algorithm
[  246.842324][ T5734] usb 3-1: New USB device found: idVendor=2001, idProduct=b301, bcdDevice=45.b0
[  246.842354][ T5734] usb 3-1: too many configurations: 129, using maximum allowed: 8
[  246.844429][ T5734] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  246.844456][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  246.848738][ T5734] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  246.848766][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  246.851083][ T5734] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  246.851112][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  246.952463][ T5734] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  246.952493][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  246.953815][ T5734] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  246.953840][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  246.971845][ T5734] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  246.971877][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  247.016084][ T5734] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  247.016115][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  247.075203][ T5734] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  247.075245][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  247.116404][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.116424][ T5734] usb 3-1: Product: syz
[  247.116433][ T5734] usb 3-1: Manufacturer: syz
[  247.116441][ T5734] usb 3-1: SerialNumber: syz
[  247.154587][ T5734] r8152-cfgselector 3-1: Unknown version 0x0000
[  247.154609][ T5734] r8152-cfgselector 3-1: config 0 descriptor??
[  247.248621][ T8984] BTRFS info (device loop0): enabling ssd optimizations
[  247.248642][ T8984] BTRFS info (device loop0): turning on flush-on-commit
[  247.248651][ T8984] BTRFS info (device loop0): enabling free space tree
[  247.248661][ T8984] BTRFS info (device loop0): enabling auto defrag
[  247.248671][ T8984] BTRFS info (device loop0): use lzo compression, level 1
[  247.248683][ T8984] BTRFS info (device loop0): max_inline set to 4096
[  247.425680][ T5734] r8152-cfgselector 3-1: USB disconnect, device number 12
[  247.539208][ T7091] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  248.382478][ T9031] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  248.800301][ T5734] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  248.807800][ T9043] loop2: detected capacity change from 0 to 2048
[  248.854716][ T9043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.888258][ T9043] EXT4-fs (loop2): shut down requested (2)
[  248.944277][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.954034][ T5734] usb 5-1: Using ep0 maxpacket: 16
[  248.955846][ T5734] usb 5-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42
[  248.985948][ T5734] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.985982][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  248.985998][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  248.986010][ T5734] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  248.986023][ T5734] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  249.051578][ T5734] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  249.051598][ T5734] usb 5-1: Manufacturer: syz
[  249.057855][ T5734] usb 5-1: config 0 descriptor??
[  249.169069][ T9048] program syz.2.1129 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  249.381521][ T5734] rc_core: IR keymap rc-hauppauge not found
[  249.381538][ T5734] Registered IR keymap rc-empty
[  249.381632][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  249.403161][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  249.423039][ T5734] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  249.444411][ T5734] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15
[  249.478791][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  249.492644][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  249.511553][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  249.532315][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  249.554260][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  249.572386][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  249.591511][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  249.611550][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  249.631723][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  249.650687][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  249.675836][ T5734] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  249.675856][ T5734] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  249.810569][ T9059] kAFS: bad VL server IP address
[  249.829048][ T5726] usb 5-1: USB disconnect, device number 15
[  250.638034][ T9063] loop2: detected capacity change from 0 to 32768
[  250.657792][ T9063] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1134 (9063)
[  250.680646][ T9063] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  250.680671][ T9063] BTRFS info (device loop2): using sha256 checksum algorithm
[  250.871929][ T9063] BTRFS info (device loop2): rebuilding free space tree
[  251.594256][ T9063] BTRFS info (device loop2): disabling free space tree
[  251.594326][ T9063] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  251.594341][ T9063] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  251.708485][ T9063] BTRFS info (device loop2): setting nodatasum
[  251.708506][ T9063] BTRFS info (device loop2): setting nodatacow
[  251.708516][ T9063] BTRFS info (device loop2): turning off barriers
[  251.708526][ T9063] BTRFS info (device loop2): force clearing of disk cache
[  252.017818][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1155'.
[  252.096734][ T9079] loop3: detected capacity change from 0 to 32768
[  252.133021][ T9079] xfs: Deprecated parameter 'ikeep'
[  252.133037][ T9079] XFS: ikeep mount option is deprecated.
[  252.133052][ T9079] xfs: Deprecated parameter 'noattr2'
[  252.133059][ T9079] XFS: noattr2 mount option is deprecated.
[  252.229433][ T9079] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  252.421874][ T9133] loop0: detected capacity change from 0 to 256
[  252.471355][ T9079] XFS (loop3): Ending clean mount
[  252.648383][ T9079] XFS (loop3): Quotacheck needed: Please wait.
[  252.787459][ T5610] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  253.143900][ T9079] XFS (loop3): Quotacheck: Done.
[  253.272375][   T33] kauditd_printk_skb: 10 callbacks suppressed
[  253.272392][   T33] audit: type=1800 audit(1790309039.260:51): pid=9079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1143" name="file1" dev="loop3" ino=9286 res=0 errno=0
[  253.402511][ T5611] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  253.666168][ T9132] loop1: detected capacity change from 0 to 32768
[  254.045589][ T9147] ea_get: invalid extended attribute
[  254.045603][ T9147] ffff888066d8c100: 04 00 00 00                                      ....
[  254.288112][ T9155] loop2: detected capacity change from 0 to 512
[  254.310672][ T9155] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  254.339485][ T9155] EXT4-fs (loop2): 1 truncate cleaned up
[  254.351185][ T9155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.605786][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.119712][ T9169] loop3: detected capacity change from 0 to 4096
[  255.209050][ T9175] loop4: detected capacity change from 0 to 1024
[  255.236816][ T9175] EXT4-fs (loop4): Test dummy encryption mode enabled
[  255.237108][ T9175] EXT4-fs (loop4): stripe (129) is not aligned with cluster size (16), stripe is disabled
[  255.329492][ T9175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.538306][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.291503][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  256.291559][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  256.299022][ T9199] loop3: detected capacity change from 0 to 4096
[  256.331216][ T9199] ntfs3(loop3): ino=3, mi_enum_attr
[  256.629619][ T9211] input: syz0 as /devices/virtual/input/input16
[  256.705885][ T9215] loop2: detected capacity change from 0 to 164
[  257.457826][ T9225] loop4: detected capacity change from 0 to 4096
[  257.469289][ T9225] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  257.526665][ T9225] ntfs3(loop4): Failed to load $Extend (-22).
[  257.526685][ T9225] ntfs3(loop4): Failed to initialize $Extend.
[  257.680931][ T5726] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  257.832727][ T5726] usb 3-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[  257.834801][ T5726] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  257.834836][ T5726] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  257.834861][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.899196][ T9214] loop0: detected capacity change from 0 to 32768
[  257.949669][ T9214] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  258.112045][ T9214] XFS (loop0): Ending clean mount
[  258.132000][ T9243] WARNING! power/level is deprecated; use power/control instead
[  258.158142][ T5726] rtsx_usb 3-1:1.0: probe with driver rtsx_usb failed with error -22
[  258.188697][ T5726] usb 3-1: USB disconnect, device number 13
[  258.271170][ T7091] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  258.662941][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1206'.
[  258.998869][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'.
[  259.144624][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1210'.
[  259.146671][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1211'.
[  259.607978][ T9272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1216'.
[  259.732786][ T9254] loop1: detected capacity change from 0 to 40427
[  259.761625][ T9254] F2FS-fs (loop1): invalid crc value
[  260.094254][ T9254] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  260.228703][ T9254] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  260.407786][ T9295] program syz.3.1225 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  260.449255][ T9296] loop2: detected capacity change from 0 to 2048
[  260.576099][ T9298] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  260.690581][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1227'.
[  260.699504][ T9254] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SIT and SSA
[  260.727639][ T9254] CPU: 0 UID: 0 PID: 9254 Comm: syz.1.1208 Not tainted syzkaller #0 PREEMPT(full) 
[  260.727662][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  260.727670][ T9254] Call Trace:
[  260.727676][ T9254]  <TASK>
[  260.727681][ T9254]  dump_stack_lvl+0xe8/0x150
[  260.727705][ T9254]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  260.727729][ T9254]  do_garbage_collect+0x123f/0x6f30
[  260.727758][ T9254]  ? trace_contention_end+0x3d/0x140
[  260.727801][ T9254]  ? __pfx_do_garbage_collect+0x10/0x10
[  260.727818][ T9254]  ? f2fs_get_victim+0x4725/0x4dd0
[  260.727876][ T9254]  f2fs_gc+0xd08/0x25b0
[  260.727891][ T9254]  ? check_noncircular+0xdb/0x150
[  260.727931][ T9254]  ? __pfx_f2fs_gc+0x10/0x10
[  260.727954][ T9254]  ? lock_acquire+0x232/0x350
[  260.727980][ T9254]  ? rcu_is_watching+0x16/0xb0
[  260.728001][ T9254]  f2fs_expand_inode_data+0x64d/0xb10
[  260.728028][ T9254]  ? __pfx_f2fs_expand_inode_data+0x10/0x10
[  260.728048][ T9254]  ? __pfx_inode_dio_wait+0x10/0x10
[  260.728069][ T9254]  ? mnt_put_write_access_file+0xc3/0x100
[  260.728086][ T9254]  ? file_update_time_flags+0x3ab/0x440
[  260.728104][ T9254]  f2fs_fallocate+0x4d8/0x970
[  260.728122][ T9254]  vfs_fallocate+0x65a/0x7e0
[  260.728141][ T9254]  ? __pfx_vfs_fallocate+0x10/0x10
[  260.728156][ T9254]  ? __might_fault+0xaf/0x130
[  260.728178][ T9254]  file_ioctl+0x564/0x7d0
[  260.728196][ T9254]  ? __pfx_file_ioctl+0x10/0x10
[  260.728213][ T9254]  ? irqentry_exit+0x218/0x910
[  260.728227][ T9254]  ? lockdep_hardirqs_on+0x7b/0x110
[  260.728239][ T9254]  ? irqentry_exit+0x218/0x910
[  260.728250][ T9254]  ? trace_irq_disable+0x3b/0x140
[  260.728278][ T9254]  ? tomoyo_path_number_perm+0x55e/0x5f0
[  260.728297][ T9254]  do_vfs_ioctl+0xc27/0x1530
[  260.728321][ T9254]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  260.728346][ T9254]  ? do_futex+0x3e7/0x4e0
[  260.728370][ T9254]  ? __fget_files+0x2a/0x420
[  260.728384][ T9254]  ? __fget_files+0x2a/0x420
[  260.728397][ T9254]  ? __fget_files+0x2a/0x420
[  260.728412][ T9254]  ? bpf_lsm_file_ioctl+0x9/0x20
[  260.728430][ T9254]  __se_sys_ioctl+0x82/0x170
[  260.728448][ T9254]  do_syscall_64+0x166/0x520
[  260.728459][ T9254]  ? trace_irq_disable+0x3b/0x140
[  260.728474][ T9254]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.728486][ T9254]  ? clear_bhb_loop+0x70/0xc0
[  260.728501][ T9254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.728513][ T9254] RIP: 0033:0x7f7cee99e159
[  260.728526][ T9254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.728536][ T9254] RSP: 002b:00007f7cef789028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  260.728551][ T9254] RAX: ffffffffffffffda RBX: 00007f7ceec25fa0 RCX: 00007f7cee99e159
[  260.728560][ T9254] RDX: 0000200000000040 RSI: 0000000040305828 RDI: 0000000000000004
[  260.728568][ T9254] RBP: 00007f7ceea3506b R08: 0000000000000000 R09: 0000000000000000
[  260.728576][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  260.728583][ T9254] R13: 00007f7ceec26038 R14: 00007f7ceec25fa0 R15: 00007fffe2da46d8
[  260.728602][ T9254]  </TASK>
[  260.728608][ T9254] F2FS-fs (loop1): Stopped filesystem due to reason: 4
[  261.102441][ T9298] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  261.102464][ T9298] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  261.195812][ T9298] Remounting filesystem read-only
[  261.196293][ T5610] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  261.362319][ T9281] loop0: detected capacity change from 0 to 32768
[  261.390652][ T9281] 
[  261.390652][ T9281]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  261.390652][ T9281] 
[  261.445907][ T9281] ERROR: (device loop0): diWrite: ixpxd invalid
[  261.445907][ T9281] 
[  261.448412][ T9281] ERROR: (device loop0): txCommit: 
[  261.448412][ T9281] 
[  261.537895][ T9281] jfs_create: dtSearch returned -17
[  261.679839][ T7091] 
[  261.679839][ T7091]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  261.679839][ T7091] 
[  261.680000][ T7091] 
[  261.680000][ T7091]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  261.680000][ T7091] 
[  263.267624][ T9336] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1243'.
[  263.267644][ T9336] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  263.494892][ T9328] loop3: detected capacity change from 0 to 40427
[  263.533212][ T9328] F2FS-fs (loop3): invalid crc value
[  263.822597][ T9332] loop2: detected capacity change from 0 to 40427
[  263.841390][ T9328] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  263.866581][ T9332] F2FS-fs (loop2): invalid crc value
[  263.920227][ T9334] loop1: detected capacity change from 0 to 32768
[  263.964434][ T9334] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  263.995495][ T9328] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  264.108628][ T9334] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  264.161843][ T9334] XFS (loop1): Starting recovery (logdev: internal)
[  264.325021][ T9332] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  264.346674][ T9334] XFS (loop1): Ending recovery (logdev: internal)
[  264.462464][ T9332] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[  264.462487][ T9332] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  264.462503][ T9332] F2FS-fs (loop2): Start checkpoint disabled!
[  264.464133][ T5611] syz-executor: attempt to access beyond end of device
[  264.464133][ T5611] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  264.582397][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  264.582420][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  264.582429][ T5611] Call Trace:
[  264.582434][ T5611]  <TASK>
[  264.582439][ T5611]  dump_stack_lvl+0xe8/0x150
[  264.582462][ T5611]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  264.582486][ T5611]  f2fs_write_end_bio+0xda7/0x11c0
[  264.582518][ T5611]  __submit_merged_bio+0x258/0x6a0
[  264.582531][ T5611]  ? rcu_is_watching+0x16/0xb0
[  264.582553][ T5611]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  264.582574][ T5611]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  264.582607][ T5611]  f2fs_write_data_pages+0x2a13/0x36e0
[  264.582642][ T5611]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  264.582655][ T5611]  ? is_bpf_text_address+0x26/0x2b0
[  264.582674][ T5611]  ? arch_stack_walk+0xfb/0x150
[  264.582704][ T5611]  ? add_lock_to_list+0xc7/0x100
[  264.582722][ T5611]  ? lockdep_unlock+0x5c/0xd0
[  264.582734][ T5611]  ? __lock_acquire+0x1511/0x2de0
[  264.582765][ T5611]  ? do_raw_spin_lock+0x12b/0x2f0
[  264.582784][ T5611]  ? do_raw_spin_unlock+0xf5/0x200
[  264.582796][ T5611]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  264.582813][ T5611]  do_writepages+0x338/0x560
[  264.582833][ T5611]  ? do_raw_spin_unlock+0xf5/0x200
[  264.582848][ T5611]  filemap_fdatawrite+0x1e9/0x2f0
[  264.582867][ T5611]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  264.582906][ T5611]  ? do_raw_spin_unlock+0xf5/0x200
[  264.582921][ T5611]  f2fs_sync_dirty_inodes+0x471/0x970
[  264.582946][ T5611]  f2fs_write_checkpoint+0x860/0x24d0
[  264.582982][ T5611]  kill_f2fs_super+0x2dc/0x700
[  264.582999][ T5611]  ? rcu_do_enqueue+0x616/0x870
[  264.583013][ T5611]  ? lockdep_hardirqs_on+0x7b/0x110
[  264.583026][ T5611]  ? __pfx_kill_f2fs_super+0x10/0x10
[  264.583050][ T5611]  ? __pfx_call_rcu+0x10/0x10
[  264.583071][ T5611]  ? shrinker_free+0x2a7/0x3b0
[  264.583086][ T5611]  deactivate_locked_super+0xbe/0x110
[  264.583100][ T5611]  cleanup_mnt+0x3d3/0x460
[  264.583119][ T5611]  task_work_run+0x1d9/0x260
[  264.583136][ T5611]  ? __pfx_task_work_run+0x10/0x10
[  264.583157][ T5611]  exit_to_user_mode_loop+0x204/0x770
[  264.583177][ T5611]  ? rcu_is_watching+0x16/0xb0
[  264.583196][ T5611]  do_syscall_64+0x328/0x520
[  264.583208][ T5611]  ? trace_irq_disable+0x3b/0x140
[  264.583224][ T5611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.583236][ T5611]  ? clear_bhb_loop+0x70/0xc0
[  264.583250][ T5611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.583262][ T5611] RIP: 0033:0x7f3cddf9f397
[  264.583275][ T5611] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  264.583285][ T5611] RSP: 002b:00007fff3a8efae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  264.583300][ T5611] RAX: 0000000000000000 RBX: 00007f3cde0344bb RCX: 00007f3cddf9f397
[  264.583308][ T5611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3a8efba0
[  264.583316][ T5611] RBP: 00007fff3a8efba0 R08: 00007fff3a8f0ba0 R09: 00000000ffffffff
[  264.583324][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3a8f0c30
[  264.583332][ T5611] R13: 00007f3cde0344bb R14: 00000000000407d2 R15: 00007fff3a8f0c70
[  264.583358][ T5611]  </TASK>
[  264.587851][ T5611] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  264.587942][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  264.587957][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  264.587964][ T5611] Call Trace:
[  264.587969][ T5611]  <TASK>
[  264.587974][ T5611]  dump_stack_lvl+0xe8/0x150
[  264.587995][ T5611]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  264.588018][ T5611]  f2fs_write_end_bio+0xda7/0x11c0
[  264.588043][ T5611]  __submit_merged_bio+0x258/0x6a0
[  264.588054][ T5611]  ? rcu_is_watching+0x16/0xb0
[  264.588075][ T5611]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  264.588095][ T5611]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  264.588128][ T5611]  f2fs_write_data_pages+0x2a13/0x36e0
[  264.588163][ T5611]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  264.588176][ T5611]  ? is_bpf_text_address+0x26/0x2b0
[  264.588195][ T5611]  ? arch_stack_walk+0xfb/0x150
[  264.588226][ T5611]  ? add_lock_to_list+0xc7/0x100
[  264.588244][ T5611]  ? lockdep_unlock+0x5c/0xd0
[  264.588256][ T5611]  ? __lock_acquire+0x1511/0x2de0
[  264.588293][ T5611]  ? do_raw_spin_lock+0x12b/0x2f0
[  264.588320][ T5611]  ? do_raw_spin_unlock+0xf5/0x200
[  264.588332][ T5611]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  264.588346][ T5611]  do_writepages+0x338/0x560
[  264.588373][ T5611]  ? do_raw_spin_unlock+0xf5/0x200
[  264.588387][ T5611]  filemap_fdatawrite+0x1e9/0x2f0
[  264.588402][ T5611]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  264.588442][ T5611]  ? do_raw_spin_unlock+0xf5/0x200
[  264.588457][ T5611]  f2fs_sync_dirty_inodes+0x471/0x970
[  264.588481][ T5611]  f2fs_write_checkpoint+0x860/0x24d0
[  264.588517][ T5611]  kill_f2fs_super+0x2dc/0x700
[  264.588535][ T5611]  ? rcu_do_enqueue+0x616/0x870
[  264.588549][ T5611]  ? lockdep_hardirqs_on+0x7b/0x110
[  264.588561][ T5611]  ? __pfx_kill_f2fs_super+0x10/0x10
[  264.588585][ T5611]  ? __pfx_call_rcu+0x10/0x10
[  264.588606][ T5611]  ? shrinker_free+0x2a7/0x3b0
[  264.588620][ T5611]  deactivate_locked_super+0xbe/0x110
[  264.588635][ T5611]  cleanup_mnt+0x3d3/0x460
[  264.588654][ T5611]  task_work_run+0x1d9/0x260
[  264.588671][ T5611]  ? __pfx_task_work_run+0x10/0x10
[  264.588691][ T5611]  exit_to_user_mode_loop+0x204/0x770
[  264.588707][ T5611]  ? rcu_is_watching+0x16/0xb0
[  264.588726][ T5611]  do_syscall_64+0x328/0x520
[  264.588739][ T5611]  ? trace_irq_disable+0x3b/0x140
[  264.588754][ T5611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.588766][ T5611]  ? clear_bhb_loop+0x70/0xc0
[  264.588780][ T5611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.588792][ T5611] RIP: 0033:0x7f3cddf9f397
[  264.588804][ T5611] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  264.588814][ T5611] RSP: 002b:00007fff3a8efae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  264.588828][ T5611] RAX: 0000000000000000 RBX: 00007f3cde0344bb RCX: 00007f3cddf9f397
[  264.588837][ T5611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3a8efba0
[  264.588844][ T5611] RBP: 00007fff3a8efba0 R08: 00007fff3a8f0ba0 R09: 00000000ffffffff
[  264.588852][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3a8f0c30
[  264.588860][ T5611] R13: 00007f3cde0344bb R14: 00000000000407d2 R15: 00007fff3a8f0c70
[  264.588879][ T5611]  </TASK>
[  264.588884][ T5611] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  265.342673][ T9332] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[  265.344602][ T9332] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  265.459994][ T5614] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  265.803102][   T13] kworker/u8:1: attempt to access beyond end of device
[  265.803102][   T13] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  265.852681][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  265.852708][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  265.852716][   T13] Workqueue: writeback wb_workfn (flush-7:2)
[  265.852742][   T13] Call Trace:
[  265.852748][   T13]  <TASK>
[  265.852753][   T13]  dump_stack_lvl+0xe8/0x150
[  265.852773][   T13]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  265.852796][   T13]  f2fs_write_end_bio+0xda7/0x11c0
[  265.852822][   T13]  __submit_merged_bio+0x258/0x6a0
[  265.852834][   T13]  ? rcu_is_watching+0x16/0xb0
[  265.852855][   T13]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  265.852877][   T13]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  265.852909][   T13]  f2fs_write_data_pages+0x2a13/0x36e0
[  265.852944][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  265.852966][   T13]  ? stack_trace_save+0xa9/0x100
[  265.852996][   T13]  ? __pfx_read_node_cache+0x10/0x10
[  265.853027][   T13]  ? __lock_acquire+0x747/0x2de0
[  265.853052][   T13]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  265.853070][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  265.853084][   T13]  do_writepages+0x338/0x560
[  265.853098][   T13]  ? __lock_acquire+0x747/0x2de0
[  265.853115][   T13]  ? reacquire_held_locks+0x117/0x1a0
[  265.853131][   T13]  ? writeback_sb_inodes+0x450/0x1af0
[  265.853147][   T13]  __writeback_single_inode+0x136/0x1220
[  265.853161][   T13]  ? do_raw_spin_unlock+0xf5/0x200
[  265.853176][   T13]  writeback_sb_inodes+0x9de/0x1af0
[  265.853188][   T13]  ? __lock_acquire+0x747/0x2de0
[  265.853217][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  265.853257][   T13]  ? rcu_is_watching+0x16/0xb0
[  265.853275][   T13]  ? queue_io+0x2d3/0x470
[  265.853289][   T13]  wb_writeback+0x41c/0xad0
[  265.853303][   T13]  ? queue_io+0x2a1/0x470
[  265.853319][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  265.853329][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  265.853351][   T13]  wb_workfn+0x431/0x10f0
[  265.853379][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  265.853399][   T13]  ? trace_hrtimer_start+0x82/0x200
[  265.853417][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  265.853434][   T13]  ? lock_acquire+0x115/0x350
[  265.853454][   T13]  ? rcu_is_watching+0x16/0xb0
[  265.853472][   T13]  ? process_scheduled_works+0x97a/0x1630
[  265.853490][   T13]  process_scheduled_works+0xc3d/0x1630
[  265.853526][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  265.853548][   T13]  ? assign_work+0x3cf/0x5d0
[  265.853569][   T13]  worker_thread+0xa47/0xfb0
[  265.853603][   T13]  kthread+0x38b/0x480
[  265.853617][   T13]  ? __pfx_worker_thread+0x10/0x10
[  265.853634][   T13]  ? __pfx_kthread+0x10/0x10
[  265.853648][   T13]  ret_from_fork+0x514/0xb70
[  265.853668][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  265.853680][   T13]  ? __switch_to+0xc78/0x1410
[  265.853698][   T13]  ? __pfx_kthread+0x10/0x10
[  265.853713][   T13]  ret_from_fork_asm+0x1a/0x30
[  265.853741][   T13]  </TASK>
[  265.853820][   T13] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  265.853897][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  265.853911][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  265.853918][   T13] Workqueue: writeback wb_workfn (flush-7:2)
[  265.853939][   T13] Call Trace:
[  265.853944][   T13]  <TASK>
[  265.853949][   T13]  dump_stack_lvl+0xe8/0x150
[  265.853966][   T13]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  265.853989][   T13]  f2fs_write_end_bio+0xda7/0x11c0
[  265.854016][   T13]  __submit_merged_bio+0x258/0x6a0
[  265.854027][   T13]  ? rcu_is_watching+0x16/0xb0
[  265.854048][   T13]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  265.854069][   T13]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  265.854103][   T13]  f2fs_write_data_pages+0x2a13/0x36e0
[  265.854145][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  265.854170][   T13]  ? stack_trace_save+0xa9/0x100
[  265.854204][   T13]  ? __pfx_read_node_cache+0x10/0x10
[  265.854238][   T13]  ? __lock_acquire+0x747/0x2de0
[  265.854264][   T13]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  265.854283][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  265.854297][   T13]  do_writepages+0x338/0x560
[  265.854310][   T13]  ? __lock_acquire+0x747/0x2de0
[  265.854328][   T13]  ? reacquire_held_locks+0x117/0x1a0
[  265.854344][   T13]  ? writeback_sb_inodes+0x450/0x1af0
[  265.854360][   T13]  __writeback_single_inode+0x136/0x1220
[  265.854377][   T13]  ? do_raw_spin_unlock+0xf5/0x200
[  265.854393][   T13]  writeback_sb_inodes+0x9de/0x1af0
[  265.854404][   T13]  ? __lock_acquire+0x747/0x2de0
[  265.854436][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  265.854478][   T13]  ? rcu_is_watching+0x16/0xb0
[  265.854495][   T13]  ? queue_io+0x2d3/0x470
[  265.854510][   T13]  wb_writeback+0x41c/0xad0
[  265.854525][   T13]  ? queue_io+0x2a1/0x470
[  265.854541][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  265.854551][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  265.854575][   T13]  wb_workfn+0x431/0x10f0
[  265.854604][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  265.854625][   T13]  ? trace_hrtimer_start+0x82/0x200
[  265.854643][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  265.854669][   T13]  ? lock_acquire+0x115/0x350
[  265.854690][   T13]  ? rcu_is_watching+0x16/0xb0
[  265.854709][   T13]  ? process_scheduled_works+0x97a/0x1630
[  265.854727][   T13]  process_scheduled_works+0xc3d/0x1630
[  265.854767][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  265.854789][   T13]  ? assign_work+0x3cf/0x5d0
[  265.854810][   T13]  worker_thread+0xa47/0xfb0
[  265.854848][   T13]  kthread+0x38b/0x480
[  265.854862][   T13]  ? __pfx_worker_thread+0x10/0x10
[  265.854879][   T13]  ? __pfx_kthread+0x10/0x10
[  265.854894][   T13]  ret_from_fork+0x514/0xb70
[  265.854908][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  265.854919][   T13]  ? __switch_to+0xc78/0x1410
[  265.854938][   T13]  ? __pfx_kthread+0x10/0x10
[  265.854953][   T13]  ret_from_fork_asm+0x1a/0x30
[  265.854983][   T13]  </TASK>
[  266.046859][   T13] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  266.691507][ T9352] loop4: detected capacity change from 0 to 32768
[  266.705609][ T9352] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1246 (9352)
[  266.730614][ T9352] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  266.730640][ T9352] BTRFS info (device loop4): using sha256 checksum algorithm
[  266.921092][ T9352] BTRFS info (device loop4): rebuilding free space tree
[  267.224352][ T9352] BTRFS info (device loop4): disabling free space tree
[  267.224398][ T9352] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  267.224413][ T9352] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  267.438498][ T9352] BTRFS info (device loop4): setting nodatasum
[  267.438518][ T9352] BTRFS info (device loop4): setting nodatacow
[  267.438528][ T9352] BTRFS info (device loop4): turning off barriers
[  267.438538][ T9352] BTRFS info (device loop4): force clearing of disk cache
[  267.568356][ T5612] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  268.082440][ T9399] loop2: detected capacity change from 0 to 2048
[  268.117882][ T9399] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  268.172481][ T5726] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  268.332357][ T5726] usb 4-1: Using ep0 maxpacket: 32
[  268.333738][ T5726] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  268.351250][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.356052][ T5726] usb 4-1: config 0 descriptor??
[  268.627710][ T5726] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  268.634187][ T5726] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  268.656751][ T9404] loop1: detected capacity change from 0 to 4096
[  268.668787][ T5726] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  268.668832][ T5726] usb 4-1: media controller created
[  268.715698][ T5726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  268.736273][ T9404] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  268.777120][ T9404] ntfs3(loop1): Failed to initialize $Secure::$SDH (-22).
[  268.777199][ T9404] ntfs3(loop1): Failed to initialize $Secure (-22).
[  269.035109][ T5726] az6027: usb out operation failed. (-71)
[  269.035418][ T5726] az6027: usb out operation failed. (-71)
[  269.035427][ T5726] stb0899_attach: Driver disabled by Kconfig
[  269.035433][ T5726] az6027: no front-end attached
[  269.035433][ T5726] 
[  269.037115][ T5726] az6027: usb out operation failed. (-71)
[  269.037124][ T5726] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  269.038583][ T5726] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17
[  269.169896][ T5726] dvb-usb: schedule remote query interval to 400 msecs.
[  269.169914][ T5726] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  269.239387][ T5726] usb 4-1: USB disconnect, device number 11
[  269.433965][ T5726] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  269.480327][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  269.631663][    T9] usb 3-1: New USB device found: idVendor=5543, idProduct=0064, bcdDevice=0.00
[  269.632530][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  269.632559][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.637299][    T9] usb 3-1: config 0 descriptor??
[  269.637882][ T9416] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  270.121585][    T9] hid_parser_main: 64 callbacks suppressed
[  270.121604][    T9] uclogic 0003:5543:0064.000B: unknown main item tag 0x0
[  270.121622][    T9] uclogic 0003:5543:0064.000B: unknown main item tag 0x0
[  270.121637][    T9] uclogic 0003:5543:0064.000B: unknown main item tag 0x0
[  270.121667][    T9] uclogic 0003:5543:0064.000B: unknown main item tag 0x0
[  270.121682][    T9] uclogic 0003:5543:0064.000B: unknown main item tag 0x0
[  270.121696][    T9] uclogic 0003:5543:0064.000B: unknown main item tag 0x0
[  270.121710][    T9] uclogic 0003:5543:0064.000B: unknown main item tag 0x0
[  270.121725][    T9] uclogic 0003:5543:0064.000B: unknown main item tag 0x0
[  270.121739][    T9] uclogic 0003:5543:0064.000B: unknown main item tag 0x0
[  270.121753][    T9] uclogic 0003:5543:0064.000B: unknown main item tag 0x0
[  270.127551][ T9404] loop1: detected capacity change from 0 to 32768
[  270.201480][    T9] uclogic 0003:5543:0064.000B: unexpected long global item
[  270.201983][    T9] uclogic 0003:5543:0064.000B: parse failed
[  270.202064][    T9] uclogic 0003:5543:0064.000B: probe with driver uclogic failed with error -22
[  270.253332][ T9404] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1259 (9404)
[  270.307341][ T9404] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  270.307371][ T9404] BTRFS info (device loop1): using crc32c checksum algorithm
[  270.333996][    T9] usb 3-1: USB disconnect, device number 14
[  270.470041][ T9404] BTRFS info (device loop1): enabling ssd optimizations
[  270.470459][ T9404] BTRFS info (device loop1): turning on flush-on-commit
[  270.470472][ T9404] BTRFS info (device loop1): enabling free space tree
[  270.470482][ T9404] BTRFS info (device loop1): enabling auto defrag
[  270.470493][ T9404] BTRFS info (device loop1): use lzo compression, level 1
[  270.470504][ T9404] BTRFS info (device loop1): max_inline set to 4096
[  271.559779][ T5614] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  271.831765][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1285'.
[  272.467835][ T9487] loop2: detected capacity change from 0 to 512
[  272.515456][ T9487] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  272.520112][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  272.520129][    C0] EXT4-fs (loop2): initial error at time 1790309058: mb_free_blocks:2049: inode 11: block 64
[  272.520152][    C0] EXT4-fs (loop2): last error at time 1790309058: mb_free_blocks:2049: inode 11: block 64
[  272.719568][ T9487] EXT4-fs (loop2): Remounting filesystem read-only
[  272.719842][ T9487] EXT4-fs (loop2): 1 truncate cleaned up
[  272.745723][ T9487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.794154][ T9487] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed
[  272.929567][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.213891][ T9468] loop0: detected capacity change from 0 to 32768
[  273.298030][ T9468] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  273.385637][ T9468] XFS (loop0): Ending clean mount
[  273.526591][ T9509] loop3: detected capacity change from 0 to 64
[  273.549698][ T9468] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  273.882159][ T9514] rnbd_client L213: map_device: Parameters missing
[  273.986368][ T9516] loop2: detected capacity change from 0 to 8
[  274.518938][ T9522] loop2: detected capacity change from 0 to 512
[  274.535716][ T9522] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  274.568481][ T9522] EXT4-fs (loop2): 1 truncate cleaned up
[  274.569590][ T9522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.728120][ T9528] jffs2: notice: (9528) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  274.761677][ T9530] loop0: detected capacity change from 0 to 256
[  274.881081][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.645965][    T9] kernel read not supported for file /sysvipc/msg (pid: 9 comm: kworker/0:0)
[  276.215319][ T9570] loop0: detected capacity change from 0 to 64
[  276.364258][ T9574] loop4: detected capacity change from 0 to 512
[  277.168812][ T9576] loop1: detected capacity change from 0 to 131072
[  277.189105][ T9576] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945)
[  277.189128][ T9576] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  277.209201][ T9576] F2FS-fs (loop1): invalid crc value
[  277.272380][ T9576] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  277.297414][ T9576] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  277.297438][ T9576] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  277.966454][ T9588] sd 0:0:1:0: PR command failed: 1026
[  277.966489][ T9588] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  277.966514][ T9588] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  278.321205][ T9598] loop0: detected capacity change from 0 to 128
[  278.351201][ T9598] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  278.394967][ T9598] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  278.757315][ T7091] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  279.243494][ T9615] loop3: detected capacity change from 0 to 256
[  279.831719][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'.
[  280.109007][ T9631] tipc: Started in network mode
[  280.109029][ T9631] tipc: Node identity ac14140f, cluster identity 4711
[  280.109747][ T9631] tipc: New replicast peer: 255.255.255.255
[  280.142958][ T9631] tipc: Enabled bearer <udp:syz2>, priority 10
[  280.404933][ T9638] program syz.0.1346 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  281.220494][    T9] tipc: Node number set to 2886997007
[  282.085360][ T9685] loop4: detected capacity change from 0 to 512
[  282.126398][ T9684] loop0: detected capacity change from 0 to 2048
[  282.141883][ T9684] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  282.145810][ T9685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  282.205092][ T9689] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  282.266457][ T9685] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.1370: Unimplemented hash flags: 0x0001
[  282.266482][ T9685] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1370: Corrupt directory, running e2fsck is recommended
[  282.453780][ T9693] loop1: detected capacity change from 0 to 1024
[  282.478700][ T9693] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  282.713595][ T9693] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #3: block 1: comm syz.1.1373: lblock 1 mapped to illegal pblock 1 (length 1)
[  282.713625][ T9693] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  282.720109][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  282.720127][    C0] EXT4-fs (loop1): initial error at time 1790309068: ext4_map_blocks:832: inode 3: block 1
[  282.720150][    C0] EXT4-fs (loop1): last error at time 1790309068: ext4_map_blocks:832: inode 3: block 1
[  282.765971][ T5734] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  282.790789][ T9693] EXT4-fs (loop1): Remounting filesystem read-only
[  282.790808][ T9693] Quota error (device loop1): write_blk: dquota write failed
[  282.790832][ T9693] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  282.790905][ T9693] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  282.790983][ T9693] EXT4-fs (loop1): 1 orphan inode deleted
[  282.793892][ T9701] program syz.3.1376 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  282.794048][ T9693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.926029][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.940586][ T5734] usb 3-1: Using ep0 maxpacket: 32
[  282.942590][ T5734] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  282.965238][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.006717][ T5734] usb 3-1: config 0 descriptor??
[  283.134672][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.247477][ T5734] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  283.257669][ T5734] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  283.273006][ T5734] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  283.273043][ T5734] usb 3-1: media controller created
[  283.355284][ T5734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  283.462691][ T5734] az6027: usb out operation failed. (-71)
[  283.462999][ T5734] az6027: usb out operation failed. (-71)
[  283.463008][ T5734] stb0899_attach: Driver disabled by Kconfig
[  283.463014][ T5734] az6027: no front-end attached
[  283.463014][ T5734] 
[  283.464758][ T5734] az6027: usb out operation failed. (-71)
[  283.464768][ T5734] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  283.466172][ T5734] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18
[  283.533060][ T5734] dvb-usb: schedule remote query interval to 400 msecs.
[  283.533076][ T5734] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  283.648225][ T5734] usb 3-1: USB disconnect, device number 15
[  283.835592][ T5734] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  284.239920][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'.
[  284.239946][ T9723] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1385'.
[  284.378179][ T9707] loop4: detected capacity change from 0 to 32768
[  284.457371][ T9729] loop2: detected capacity change from 0 to 512
[  284.469737][ T9729] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  284.552995][ T9729] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003]
[  284.553065][ T9729] System zones: 1-2, 4-12, 8-8
[  284.554998][ T9729] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.1388: iget: bad i_size value: 38620345925642
[  284.555020][ T9729] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  284.563272][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  284.563287][    C0] EXT4-fs (loop2): initial error at time 1790309070: ext4_orphan_get:1403: inode 15
[  284.565004][    C0] EXT4-fs (loop2): last error at time 1790309070: ext4_orphan_get:1403: inode 15
[  284.583677][ T9729] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1388: couldn't read orphan inode 15 (err -117)
[  284.583699][ T9729] loop2: lost filesystem error report for type 5 error -117
[  284.646878][ T9729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.675431][ T9707] JBD2: Ignoring recovery information on journal
[  284.723881][ T9707] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75
[  284.723901][ T9707] JBD2: bad block at offset 32
[  284.760041][ T9707] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  284.824846][ T9707] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total
[  284.824889][ T9707] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  284.824896][ T9707] OCFS2: File system is now read-only.
[  284.824901][ T9707] (syz.4.1379,9707,0):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30
[  284.824916][ T9707] (syz.4.1379,9707,0):__ocfs2_claim_clusters:2579 ERROR: status = -30
[  284.824928][ T9707] (syz.4.1379,9707,0):__ocfs2_claim_clusters:2587 ERROR: status = -30
[  284.824939][ T9707] (syz.4.1379,9707,0):ocfs2_block_group_alloc_contig:553 ERROR: status = -30
[  284.824952][ T9707] (syz.4.1379,9707,0):ocfs2_block_group_alloc:827 ERROR: status = -30
[  284.825008][ T9707] (syz.4.1379,9707,0):ocfs2_block_group_alloc:880 ERROR: status = -30
[  284.825020][ T9707] (syz.4.1379,9707,0):ocfs2_reserve_suballoc_bits:955 ERROR: status = -30
[  284.825032][ T9707] (syz.4.1379,9707,0):ocfs2_reserve_suballoc_bits:972 ERROR: status = -30
[  284.825044][ T9707] (syz.4.1379,9707,0):ocfs2_reserve_new_metadata_blocks:1112 ERROR: status = -30
[  284.825075][ T9707] (syz.4.1379,9707,0):ocfs2_reserve_new_metadata_blocks:1135 ERROR: status = -30
[  284.825088][ T9707] (syz.4.1379,9707,0):ocfs2_expand_inline_dir:2985 ERROR: status = -30
[  284.825100][ T9707] (syz.4.1379,9707,0):ocfs2_extend_dir:3349 ERROR: status = -30
[  284.825111][ T9707] (syz.4.1379,9707,0):ocfs2_prepare_dir_for_insert:4467 ERROR: status = -30
[  284.825123][ T9707] (syz.4.1379,9707,0):ocfs2_symlink:1883 ERROR: status = -30
[  284.825135][ T9707] (syz.4.1379,9707,0):ocfs2_symlink:2084 ERROR: status = -30
[  285.162189][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.240553][ T5612] ocfs2: Unmounting device (7,4) on (node local)
[  285.764572][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1395'.
[  285.872438][   T45] Bluetooth: hci5: Frame reassembly failed (-84)
[  285.888683][   T45] Bluetooth: hci5: Frame reassembly failed (-84)
[  285.888745][   T45] Bluetooth: hci5: Frame reassembly failed (-84)
[  285.888791][   T45] Bluetooth: hci5: Frame reassembly failed (-84)
[  286.214304][ T9754] loop4: detected capacity change from 0 to 1024
[  286.269862][ T9756] loop0: detected capacity change from 0 to 256
[  286.270868][ T9756] vfat: Unknown parameter 'iocharse'
[  286.312755][ T9754] hfsplus: invalid length 1280 has been corrected to 255
[  286.331793][ T9754] hfsplus: invalid length 1280 has been corrected to 255
[  286.331842][ T9754] hfsplus: invalid length 1280 has been corrected to 255
[  286.331851][ T9754] hfsplus: invalid length 1280 has been corrected to 255
[  286.331859][ T9754] hfsplus: invalid length 1280 has been corrected to 255
[  286.606305][ T9758] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  286.629654][   T33] audit: type=1326 audit(1790309072.630:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.4.1401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d55d9e159 code=0x7ffc0000
[  286.679648][   T33] audit: type=1326 audit(1790309072.660:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.4.1401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d55d9e159 code=0x7ffc0000
[  286.679684][   T33] audit: type=1326 audit(1790309072.670:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.4.1401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1d55d9e159 code=0x7ffc0000
[  286.679709][   T33] audit: type=1326 audit(1790309072.670:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.4.1401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d55d9e159 code=0x7ffc0000
[  286.679734][   T33] audit: type=1326 audit(1790309072.670:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.4.1401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d55d9e159 code=0x7ffc0000
[  286.801947][   T33] audit: type=1326 audit(1790309072.800:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.4.1401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d55d9e159 code=0x7ffc0000
[  286.801983][   T33] audit: type=1326 audit(1790309072.800:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.4.1401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d55d9e159 code=0x7ffc0000
[  287.604907][ T9777] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1409'.
[  287.890961][   T54] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  288.180009][ T9792] loop2: detected capacity change from 0 to 128
[  288.208912][ T9792] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  288.274947][ T9792] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback.
[  288.330527][ T9797] loop7: detected capacity change from 0 to 7
[  288.383516][ T9799] loop4: detected capacity change from 0 to 8
[  288.698757][    C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  288.835122][ T9797] Dev loop7: unable to read RDB block 7
[  288.835160][ T9797]  loop7: unable to read partition table
[  288.835290][ T9797] loop7: partition table beyond EOD, truncated
[  288.835314][ T9797] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CîjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`µ4FLQkÝŠ5) failed (rc=-5)
[  289.094775][ T5610] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  289.160949][ T9813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1425'.
[  289.168250][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1425'.
[  289.168269][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1425'.
[  289.312072][ T9816] loop4: detected capacity change from 0 to 1024
[  289.319515][ T9816] EXT4-fs: Ignoring removed mblk_io_submit option
[  289.319536][ T9816] EXT4-fs: Ignoring removed oldalloc option
[  289.366360][ T9816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  289.366432][ T9816] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.618636][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  289.746879][ T9831] loop3: detected capacity change from 0 to 512
[  290.167975][ T9842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1435'.
[  290.196501][ T9845] input: syz0 as /devices/virtual/input/input19
[  290.680527][ T9861] program syz.2.1446 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  291.496540][ T9893] kernel profiling enabled (shift: 9)
[  291.561097][ T5734] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  291.721107][ T5734] usb 5-1: New USB device found: idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  291.721952][ T5734] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  291.721985][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.728530][ T5734] usb 5-1: config 0 descriptor??
[  292.323593][ T9902] hub 1-0:1.0: USB hub found
[  292.372544][ T9902] hub 1-0:1.0: 1 port detected
[  292.378439][ T5734] ath6kl: mismatched byte count 0 vs. expected 12
[  292.385138][ T5734] ath6kl: Failed to init ath6kl core: -22
[  292.385513][ T5734] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22
[  292.417775][ T5733] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  292.581512][ T5733] usb 4-1: New USB device found: idVendor=0b05, idProduct=1abe, bcdDevice=0.00
[  292.583835][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  292.583867][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.634528][ T5726] usb 5-1: USB disconnect, device number 16
[  292.654418][ T5733] usb 4-1: config 0 descriptor??
[  292.656591][ T9911] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  293.078631][ T5733] hid (null): global environment stack underflow
[  293.089527][ T5733] hid (null): invalid report_count 853270312
[  293.089550][ T5733] hid (null): report_id 0 is invalid
[  293.116349][ T5733] hid (null): global environment stack underflow
[  293.137849][ T5733] hid_parser_main: 117 callbacks suppressed
[  293.137868][ T5733] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  293.137887][ T5733] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  293.137901][ T5733] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  293.137915][ T5733] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  293.137933][ T5733] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  293.137948][ T5733] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  293.137962][ T5733] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  293.137977][ T5733] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  293.137991][ T5733] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  293.138005][ T5733] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  293.225941][ T5733] asus 0003:0B05:1ABE.000C: ignoring exceeding usage max
[  293.235967][ T5733] asus 0003:0B05:1ABE.000C: global environment stack underflow
[  293.235982][ T5733] asus 0003:0B05:1ABE.000C: item 0 4 1 11 parsing failed
[  293.239679][ T5733] asus 0003:0B05:1ABE.000C: Asus hid parse failed: -22
[  293.264606][ T5733] asus 0003:0B05:1ABE.000C: probe with driver asus failed with error -22
[  293.292666][ T5733] usb 4-1: USB disconnect, device number 12
[  293.444161][    T9] kernel read not supported for file /zero (pid: 9 comm: kworker/0:0)
[  293.590294][ T5734] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  293.741772][ T5734] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  293.743312][ T5734] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  293.743344][ T5734] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  293.743356][ T5734] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  293.743369][ T5734] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  293.743393][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.844430][ T9921] loop2: detected capacity change from 0 to 32768
[  294.264791][ T9939] loop2: detected capacity change from 0 to 256
[  294.296595][ T9939] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  294.341255][   T33] kauditd_printk_skb: 12 callbacks suppressed
[  294.341271][   T33] audit: type=1800 audit(1790309080.340:71): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1480" name="file1" dev="loop2" ino=136 res=0 errno=0
[  294.395539][   T33] audit: type=1800 audit(1790309080.390:72): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1480" name="file1" dev="loop2" ino=136 res=0 errno=0
[  294.584070][ T9946] loop1: detected capacity change from 0 to 512
[  294.597598][ T9946] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  294.621081][ T9944] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  294.621101][ T9944] FAT-fs (loop2): Filesystem has been set read-only
[  294.621260][ T9944] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  294.681340][    T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  294.699413][ T5734] gud 1-1:1.0: Failed to get connectors (error=-71)
[  294.699446][ T5734] gud 1-1:1.0: probe with driver gud failed with error -71
[  294.782017][ T5734] usb 1-1: USB disconnect, device number 11
[  294.832466][    T9] usb 4-1: Using ep0 maxpacket: 16
[  294.834444][    T9] usb 4-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  294.859651][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  294.879525][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.879545][    T9] usb 4-1: Product: syz
[  294.879554][    T9] usb 4-1: Manufacturer: syz
[  294.879562][    T9] usb 4-1: SerialNumber: syz
[  294.913639][    T9] usb 4-1: config 0 descriptor??
[  294.932231][    T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  294.932257][    T9] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  295.519221][ T9961] bcache: register_bcache() error : failed to open device
[  295.573261][    T9] em28xx 4-1:0.0: chip ID is em28178
[  295.634898][ T9957] dvmrp8: entered allmulticast mode
[  295.944015][    T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  295.944078][    T9] em28xx 4-1:0.0: board has no eeprom
[  296.086346][ T9971] loop2: detected capacity change from 0 to 1024
[  296.120550][    T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  296.120573][    T9] em28xx 4-1:0.0: dvb set to bulk mode.
[  296.121211][ T5733] em28xx 4-1:0.0: Binding DVB extension
[  296.157782][ T9971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.187037][    T9] usb 4-1: USB disconnect, device number 13
[  296.188306][    T9] em28xx 4-1:0.0: Disconnecting em28xx
[  296.285071][   T33] audit: type=1800 audit(1790309082.280:73): pid=9971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1496" name="file1" dev="loop2" ino=15 res=0 errno=0
[  296.338334][ T9971] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.1496: missing EA_INODE flag
[  296.471313][ T5733] em28xx 4-1:0.0: Registering input extension
[  296.548621][ T9971] EXT4-fs (loop2): Remounting filesystem read-only
[  296.651326][ T5733] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  296.651341][ T5733] Registered IR keymap rc-empty
[  296.722041][ T5733] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  296.743917][ T5733] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20
[  296.801837][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.016535][ T5733] em28xx 4-1:0.0: Input extension successfully initialized
[  297.027830][    T9] em28xx 4-1:0.0: Closing input extension
[  297.062542][ T9969] loop1: detected capacity change from 0 to 32768
[  297.084117][ T9969] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1495 (9969)
[  297.115635][ T9969] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  297.115660][ T9969] BTRFS info (device loop1): using crc32c checksum algorithm
[  297.189020][ T9998] loop3: detected capacity change from 0 to 256
[  297.277275][ T9969] BTRFS info (device loop1): enabling ssd optimizations
[  297.277295][ T9969] BTRFS info (device loop1): turning on flush-on-commit
[  297.277306][ T9969] BTRFS info (device loop1): enabling free space tree
[  297.277315][ T9969] BTRFS info (device loop1): enabling auto defrag
[  297.277326][ T9969] BTRFS info (device loop1): use lzo compression, level 1
[  297.277337][ T9969] BTRFS info (device loop1): max_inline set to 4096
[  298.104490][T10021] loop2: detected capacity change from 0 to 2048
[  298.123129][T10028] loop3: detected capacity change from 0 to 8
[  298.147844][T10028] SQUASHFS error: zlib decompression failed, data probably corrupt
[  298.147868][T10028] SQUASHFS error: Failed to read block 0x9b: -5
[  298.147877][T10028] SQUASHFS error: Unable to read metadata cache entry [99]
[  298.147885][T10028] SQUASHFS error: Unable to read inode 0x127
[  298.190298][T10029] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  298.209018][T10027] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1511'.
[  298.244768][ T5614] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  298.934648][    T9] em28xx: Freeing device
[  299.278238][T10049] loop4: detected capacity change from 0 to 2048
[  299.305251][T10049] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  299.847862][T10062] loop2: detected capacity change from 0 to 512
[  299.886264][T10062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.933285][T10062] EXT4-fs (loop2): shut down requested (1)
[  300.037730][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.181886][T10073] loop1: detected capacity change from 0 to 64
[  300.567678][T10081] loop4: detected capacity change from 0 to 4096
[  300.769707][T10081] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  300.783495][T10086] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  300.904536][T10081] Remounting filesystem read-only
[  301.008879][T10091] loop2: detected capacity change from 0 to 128
[  301.053971][T10091] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  301.078156][T10091] ext4 filesystem being mounted at /320/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  301.320675][T10097] hugetlbfs: syz.1.1541 (10097): Using mlock ulimits for SHM_HUGETLB is obsolete
[  301.376122][ T5610] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  301.681551][ T5726] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  301.832090][ T5726] usb 4-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  301.833000][ T5726] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  301.833024][ T5726] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  301.833039][ T5726] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  301.835257][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.835272][ T5726] usb 4-1: Product: syz
[  301.835281][ T5726] usb 4-1: Manufacturer: syz
[  301.835289][ T5726] usb 4-1: SerialNumber: syz
[  301.919824][ T5726] usb 4-1: config 0 descriptor??
[  301.927291][T10101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  301.927365][T10101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  301.947141][ T5726] usb 4-1: ucan: probing device on interface #0
[  302.133619][T10096] loop0: detected capacity change from 0 to 40427
[  302.165531][T10096] F2FS-fs (loop0): invalid crc value
[  302.455550][T10096] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  302.582264][T10096] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  302.624387][ T5726] ucan 4-1:0.0: probe with driver ucan failed with error -71
[  302.658873][ T5726] usb 4-1: USB disconnect, device number 14
[  302.750605][   T33] audit: type=1800 audit(1790309088.740:74): pid=10096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1540" name="file1" dev="loop0" ino=10 res=0 errno=0
[  302.843997][ T7091] syz-executor: attempt to access beyond end of device
[  302.843997][ T7091] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  302.875090][ T7091] CPU: 0 UID: 0 PID: 7091 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  302.875112][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  302.875120][ T7091] Call Trace:
[  302.875125][ T7091]  <TASK>
[  302.875131][ T7091]  dump_stack_lvl+0xe8/0x150
[  302.875155][ T7091]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  302.875179][ T7091]  f2fs_write_end_bio+0xda7/0x11c0
[  302.875205][ T7091]  __submit_merged_bio+0x258/0x6a0
[  302.875217][ T7091]  ? rcu_is_watching+0x16/0xb0
[  302.875238][ T7091]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  302.875259][ T7091]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  302.875292][ T7091]  f2fs_write_data_pages+0x2a13/0x36e0
[  302.875327][ T7091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  302.875339][ T7091]  ? is_bpf_text_address+0x26/0x2b0
[  302.875358][ T7091]  ? arch_stack_walk+0xfb/0x150
[  302.875389][ T7091]  ? add_lock_to_list+0xc7/0x100
[  302.875407][ T7091]  ? lockdep_unlock+0x5c/0xd0
[  302.875420][ T7091]  ? __lock_acquire+0x1511/0x2de0
[  302.875451][ T7091]  ? do_raw_spin_lock+0x12b/0x2f0
[  302.875469][ T7091]  ? do_raw_spin_unlock+0xf5/0x200
[  302.875482][ T7091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  302.875496][ T7091]  do_writepages+0x338/0x560
[  302.875515][ T7091]  ? do_raw_spin_unlock+0xf5/0x200
[  302.875530][ T7091]  filemap_fdatawrite+0x1e9/0x2f0
[  302.875545][ T7091]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  302.875584][ T7091]  ? do_raw_spin_unlock+0xf5/0x200
[  302.875599][ T7091]  f2fs_sync_dirty_inodes+0x471/0x970
[  302.875623][ T7091]  f2fs_write_checkpoint+0x860/0x24d0
[  302.875659][ T7091]  kill_f2fs_super+0x2dc/0x700
[  302.875677][ T7091]  ? rcu_do_enqueue+0x616/0x870
[  302.875691][ T7091]  ? lockdep_hardirqs_on+0x7b/0x110
[  302.875708][ T7091]  ? __pfx_kill_f2fs_super+0x10/0x10
[  302.875732][ T7091]  ? __pfx_call_rcu+0x10/0x10
[  302.875753][ T7091]  ? shrinker_free+0x2a7/0x3b0
[  302.875768][ T7091]  deactivate_locked_super+0xbe/0x110
[  302.875782][ T7091]  cleanup_mnt+0x3d3/0x460
[  302.875801][ T7091]  task_work_run+0x1d9/0x260
[  302.875819][ T7091]  ? __pfx_task_work_run+0x10/0x10
[  302.875840][ T7091]  exit_to_user_mode_loop+0x204/0x770
[  302.875856][ T7091]  ? rcu_is_watching+0x16/0xb0
[  302.875875][ T7091]  do_syscall_64+0x328/0x520
[  302.875888][ T7091]  ? trace_irq_disable+0x3b/0x140
[  302.875903][ T7091]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.875915][ T7091]  ? clear_bhb_loop+0x70/0xc0
[  302.875930][ T7091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.875942][ T7091] RIP: 0033:0x7fe16ef9f397
[  302.875954][ T7091] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  302.875965][ T7091] RSP: 002b:00007ffcd4d3bf88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  302.875980][ T7091] RAX: 0000000000000000 RBX: 00007fe16f0344bb RCX: 00007fe16ef9f397
[  302.875989][ T7091] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd4d3c040
[  302.875996][ T7091] RBP: 00007ffcd4d3c040 R08: 00007ffcd4d3d040 R09: 00000000ffffffff
[  302.876004][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd4d3d0d0
[  302.876012][ T7091] R13: 00007fe16f0344bb R14: 0000000000049e3d R15: 00007ffcd4d3d110
[  302.876038][ T7091]  </TASK>
[  302.983963][ T7091] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  303.800312][   T61] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  303.800338][   T61] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.157468][T10143] loop0: detected capacity change from 0 to 2048
[  304.191354][T10143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  304.236567][T10145] jffs2: notice: (10145) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  304.316882][T10148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1560'.
[  304.995044][T10161] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  305.834430][T10184] loop1: detected capacity change from 0 to 1024
[  305.859819][T10184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.923508][   T33] audit: type=1800 audit(1790309091.920:75): pid=10184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1576" name="file1" dev="loop1" ino=15 res=0 errno=0
[  305.983798][T10184] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.1576: missing EA_INODE flag
[  305.987018][T10184] EXT4-fs (loop1): Remounting filesystem read-only
[  306.138247][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.282657][T10197] loop2: detected capacity change from 0 to 512
[  306.304189][T10197] EXT4-fs (loop2): Test dummy encryption mode enabled
[  306.304209][T10197] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  306.341893][T10197] EXT4-fs (loop2): 1 truncate cleaned up
[  306.343019][T10197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.397343][T10195] pim6reg: entered allmulticast mode
[  306.512775][T10194] pim6reg: left allmulticast mode
[  306.565315][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.763634][T10208] loop2: detected capacity change from 0 to 1024
[  307.215902][T10186] loop0: detected capacity change from 0 to 40427
[  307.319196][T10206] hub 1-0:1.0: USB hub found
[  307.319885][T10206] hub 1-0:1.0: 1 port detected
[  307.343076][T10186] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  307.343100][T10186] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  307.349558][T10186] F2FS-fs (loop0): Image doesn't support compression
[  307.376962][T10186] F2FS-fs (loop0): invalid crc value
[  307.666950][T10214] vlan0: entered allmulticast mode
[  307.666968][T10214] bond0: entered allmulticast mode
[  307.725177][T10186] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  307.866166][T10186] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[  307.866187][T10186] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  307.866208][T10186] F2FS-fs (loop0): Start checkpoint disabled!
[  307.975216][T10216] loop2: detected capacity change from 0 to 4096
[  308.042057][T10216] NILFS (loop2): invalid segment: Checksum error in segment payload
[  308.042078][T10216] NILFS (loop2): trying rollback from an earlier position
[  308.133573][T10216] NILFS (loop2): recovery complete
[  308.165654][T10223] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  308.198767][T10186] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[  308.211752][T10186] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  308.211772][T10186] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  308.288892][T10216] NILFS (loop2): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  308.316504][T10226] loop3: detected capacity change from 0 to 512
[  308.317318][T10226] EXT4-fs: Ignoring removed bh option
[  308.382624][T10226] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.1591: corrupted in-inode xattr: e_value size too large
[  308.382650][T10226] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  308.397111][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  308.397131][    C0] EXT4-fs (loop3): initial error at time 1790309094: ext4_iget_extra_inode:5210: inode 15
[  308.397149][    C0] EXT4-fs (loop3): last error at time 1790309094: ext4_iget_extra_inode:5210: inode 15
[  308.397294][T10226] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1591: couldn't read orphan inode 15 (err -117)
[  308.397313][T10226] loop3: lost filesystem error report for type 5 error -117
[  308.399535][T10226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.745655][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.068346][T10239] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1595'.
[  309.794504][T10261] loop1: detected capacity change from 0 to 128
[  310.143810][T10269] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  310.143826][T10269] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  310.195852][T10271] loop1: detected capacity change from 0 to 22
[  310.196502][T10271] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  310.379902][T10271] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  310.536331][T10280] loop0: detected capacity change from 0 to 8
[  311.001659][T10280] SQUASHFS error: lzo decompression failed, data probably corrupt
[  311.001700][T10280] SQUASHFS error: Failed to read block 0x0: -5
[  311.001942][T10280] SQUASHFS error: lzo decompression failed, data probably corrupt
[  311.001962][T10280] SQUASHFS error: Failed to read block 0x0: -5
[  311.003774][   T33] audit: type=1800 audit(1790309097.000:76): pid=10280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1609" name="file2" dev="loop0" ino=3 res=0 errno=0
[  311.120353][T10276] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  311.120383][T10276] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4
[  311.120394][T10276] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s
[  311.195089][T10294] loop1: detected capacity change from 0 to 256
[  311.215234][T10294] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  311.258559][   T33] audit: type=1800 audit(1790309097.250:77): pid=10294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1612" name="file1" dev="loop1" ino=145 res=0 errno=0
[  311.313959][   T33] audit: type=1800 audit(1790309097.310:78): pid=10294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1612" name="file1" dev="loop1" ino=145 res=0 errno=0
[  311.400320][T10296] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  311.400342][T10296] FAT-fs (loop1): Filesystem has been set read-only
[  311.400379][T10296] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  311.523739][T10300] jffs2: notice: (10300) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  311.739090][T10274] loop3: detected capacity change from 0 to 32768
[  311.819315][T10274] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  311.852844][T10274] JBD2: Ignoring recovery information on journal
[  311.992281][T10274] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  312.026773][T10276] syz.4.1607 (10276) used greatest stack depth: 17888 bytes left
[  312.603907][ T5611] ocfs2: Unmounting device (7,3) on (node local)
[  312.761500][T10325] loop4: detected capacity change from 0 to 2048
[  313.888594][T10349] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  314.455790][T10346] loop4: detected capacity change from 0 to 32768
[  314.495691][T10346] JBD2: Ignoring recovery information on journal
[  314.580440][T10346] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  314.857911][ T5612] ocfs2: Unmounting device (7,4) on (node local)
[  314.887078][T10351] loop3: detected capacity change from 0 to 32768
[  314.967848][T10351] JBD2: Ignoring recovery information on journal
[  315.065558][T10351] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  315.069902][T10374] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  315.581363][ T5611] ocfs2: Unmounting device (7,3) on (node local)
[  316.224394][T10402] loop2: detected capacity change from 0 to 512
[  316.277470][T10402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.498836][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.235726][T10432] loop1: detected capacity change from 0 to 512
[  317.332722][T10432] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  317.332743][T10432] EXT4-fs (loop1): inodes count not valid: 32 vs 800
[  317.436587][T10439] loop0: detected capacity change from 0 to 512
[  317.461480][T10439] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  317.485929][T10439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  317.486021][T10439] System zones: 1-12
[  317.486172][T10439] EXT4-fs (loop0): orphan cleanup on readonly fs
[  317.533831][T10439] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.1664: attempt to clear invalid blocks 1024 len 1
[  317.533858][T10439] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  317.540091][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  317.540109][    C0] EXT4-fs (loop0): initial error at time 1790309103: ext4_clear_blocks:876: inode 11
[  317.540128][    C0] EXT4-fs (loop0): last error at time 1790309103: ext4_clear_blocks:876: inode 11
[  317.635128][T10439] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.1664: bg 0: block 361: padding at end of block bitmap is not set
[  317.635154][T10439] loop0: lost filesystem error report for type 5 error -117
[  317.656578][T10439] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  317.656598][T10439] loop0: lost filesystem error report for type 5 error -117
[  317.673636][T10439] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1664: invalid indirect mapped block 1811939328 (level 0)
[  317.673662][T10439] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  317.699846][T10439] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1664: invalid indirect mapped block 2 (level 2)
[  317.699873][T10439] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  317.728644][T10439] EXT4-fs (loop0): 1 truncate cleaned up
[  317.729764][T10439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  317.744253][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  317.744292][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  317.844582][T10432] loop1: detected capacity change from 0 to 4096
[  317.859531][T10432] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  317.972630][ T7091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  318.119330][T10445] device-mapper: ioctl: name not supplied when creating device
[  318.449998][T10451] loop4: detected capacity change from 0 to 256
[  318.468241][T10451] exfat: Deprecated parameter 'utf8'
[  318.468278][T10451] exfat: Deprecated parameter 'namecase'
[  318.468338][T10451] exfat: Deprecated parameter 'namecase'
[  318.468352][T10451] exfat: Deprecated parameter 'utf8'
[  318.528787][T10451] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  318.528991][T10451] exFAT-fs (loop4): failed to test first cluster bit of root dir(5)
[  318.597376][T10451] exFAT-fs (loop4): start_clu is invalid cluster(0x400)
[  318.992344][T10463] loop0: detected capacity change from 0 to 512
[  319.040514][   T33] audit: type=1400 audit(1790309105.030:79): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=10462 comm="syz.3.1673" name="p" offset=58
[  319.073418][T10463] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.1674: iget: bad i_size value: 38620345925642
[  319.073444][T10463] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  319.086410][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  319.086430][    C0] EXT4-fs (loop0): initial error at time 1790309105: ext4_orphan_get:1403: inode 15
[  319.086449][    C0] EXT4-fs (loop0): last error at time 1790309105: ext4_orphan_get:1403: inode 15
[  319.104875][T10463] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1674: couldn't read orphan inode 15 (err -117)
[  319.104899][T10463] loop0: lost filesystem error report for type 5 error -117
[  319.148950][T10463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.363309][   T45] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm kworker/u8:2: bg 0: block 5: invalid block bitmap
[  319.408005][   T45] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 1 with error 28
[  319.408029][   T45] EXT4-fs (loop0): This should not happen!! Data will be lost
[  319.408029][   T45] 
[  319.408038][   T45] EXT4-fs (loop0): Total free blocks count 0
[  319.408047][   T45] EXT4-fs (loop0): Free/Dirty block details
[  319.408080][   T45] EXT4-fs (loop0): free_blocks=0
[  319.408099][   T45] EXT4-fs (loop0): dirty_blocks=1
[  319.408107][   T45] EXT4-fs (loop0): Block reservation details
[  319.408118][   T45] EXT4-fs (loop0): i_reserved_data_blocks=1
[  319.488552][ T7091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.782619][T10477] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  320.102807][T10486] overlayfs: overlapping lowerdir path
[  320.566916][T10499] loop4: detected capacity change from 0 to 128
[  320.586714][T10499] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  320.586752][T10499] hpfs: filesystem error: improperly stopped
[  320.586761][T10499] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  320.586769][T10499] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  320.586775][T10499] hpfs: You really don't want any checks? You are crazy...
[  320.586977][T10499] hpfs: hpfs_map_sector(): read error
[  320.586984][T10499] hpfs: code page support is disabled
[  320.669166][T10499] hpfs: hpfs_map_4sectors(): unaligned read
[  320.669256][T10499] hpfs: hpfs_map_4sectors(): unaligned read
[  320.669263][T10499] hpfs: filesystem error: unable to find root dir
[  322.139110][T10530] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  322.139110][T10530] The task syz.0.1701 (10530) triggered the difference, watch for misbehavior.
[  322.862976][T10538] loop2: detected capacity change from 0 to 32768
[  322.925110][T10538] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  323.069677][T10540] loop3: detected capacity change from 0 to 32768
[  323.106256][T10540] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2'
[  323.149371][T10540] JBD2: Ignoring recovery information on journal
[  323.243885][T10540] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  323.480469][T10542] loop1: detected capacity change from 0 to 32768
[  323.481196][T10542] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  323.486209][T10542] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1707 (10542)
[  323.575352][T10542] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  323.575398][T10542] BTRFS info (device loop1): using crc32c checksum algorithm
[  323.717723][T10542] BTRFS info (device loop1): rebuilding free space tree
[  323.739414][T10538] (syz.2.1705,10538,0):ocfs2_double_lock:1197 ERROR: status = -2
[  323.739440][T10538] (syz.2.1705,10538,0):ocfs2_rename:1306 ERROR: status = -2
[  323.739453][T10538] (syz.2.1705,10538,0):ocfs2_rename:1706 ERROR: status = -2
[  323.834415][T10534] loop4: detected capacity change from 0 to 32768
[  323.859433][T10542] BTRFS info (device loop1): disabling free space tree
[  323.859480][T10542] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  323.859494][T10542] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  323.931879][T10534] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  323.947149][T10542] BTRFS info (device loop1): enabling ssd optimizations
[  323.947168][T10542] BTRFS info (device loop1): turning on async discard
[  323.947178][T10542] BTRFS info (device loop1): force clearing of disk cache
[  323.947189][T10542] BTRFS info (device loop1): use zstd compression, level 3
[  324.026132][T10534] XFS (loop4): Ending clean mount
[  324.094578][T10546] loop0: detected capacity change from 0 to 32768
[  324.407147][ T5611] ocfs2: Unmounting device (7,3) on (node local)
[  324.526868][ T5612] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  324.617738][   T33] audit: type=1800 audit(1790309110.610:80): pid=10542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1707" name="file1" dev="loop1" ino=260 res=0 errno=0
[  324.925589][ T5610] ocfs2: Unmounting device (7,2) on (node local)
[  325.340783][ T5614] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  325.560907][T10580] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  325.861895][ T5733] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  325.892492][T10590] loop2: detected capacity change from 0 to 256
[  326.022236][ T5733] usb 1-1: New USB device found: idVendor=046d, idProduct=c71f, bcdDevice=0.00
[  326.027611][ T5733] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  326.027629][ T5733] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  326.027651][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.064399][ T5733] usb 1-1: config 0 descriptor??
[  326.491772][T10601] loop4: detected capacity change from 0 to 512
[  326.543758][T10601] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1718: inode has both inline data and extents flags
[  326.543784][T10601] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  326.544005][T10601] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1718: couldn't read orphan inode 15 (err -117)
[  326.544044][T10601] loop4: lost filesystem error report for type 5 error -117
[  326.550096][    C0] EXT4-fs (loop4): error count since last fsck: 2
[  326.550114][    C0] EXT4-fs (loop4): initial error at time 1790309112: ext4_orphan_get:1403: inode 15
[  326.550133][    C0] EXT4-fs (loop4): last error at time 1790309112: ext4_orphan_get:1408
[  326.625559][T10601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.049742][T10614] loop3: detected capacity change from 0 to 512
[  327.064098][ T5733] usb 1-1: string descriptor 0 read error: -71
[  327.066856][ T5733] usb 1-1: USB disconnect, device number 12
[  327.091042][T10614] EXT4-fs error (device loop3): ext4_get_journal_inode:5927: comm syz.3.1721: inode #2147418112: comm syz.3.1721: iget: illegal inode #
[  327.091065][T10614] loop3: lost filesystem error report for type 5 error -117
[  327.109919][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  327.109937][    C0] EXT4-fs (loop3): initial error at time 1790309113: ext4_get_journal_inode:5927
[  327.109952][    C0] EXT4-fs (loop3): last error at time 1790309113: ext4_get_journal_inode:5927
[  327.154207][T10614] EXT4-fs (loop3): no journal found
[  327.154222][T10614] EXT4-fs (loop3): can't get journal size
[  327.206728][T10614] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  327.207096][T10614] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  327.208223][T10614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.296733][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.462862][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.817969][T10628] loop2: detected capacity change from 0 to 4096
[  327.858897][T10628] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  328.003735][T10628] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  328.006991][T10628] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  328.103194][T10637] loop4: detected capacity change from 0 to 2048
[  328.162210][T10637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.227239][T10628] ntfs3(loop2): ino=1e, mi_enum_attr
[  328.415313][ T3291] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5172: inode #15: block 16: len 1: ext4_map_blocks returned -28
[  328.415376][ T3291] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss!  (inode 15, error -28)
[  328.597003][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'.
[  328.671061][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.284520][T10669] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  329.795911][T10683] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1749'.
[  330.018204][T10690] loop1: detected capacity change from 0 to 1024
[  330.098349][T10693] kvm [10691]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x39
[  330.414098][T10702] Falling back ldisc for ttyS3.
[  330.656328][T10708] loop2: detected capacity change from 0 to 512
[  330.714965][T10708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.715042][T10708] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  330.759425][T10711] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  330.802062][T10716] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  330.842419][T10716] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  330.936019][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.360150][ T5726] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  331.517043][ T5726] usb 3-1: not running at top speed; connect to a high speed hub
[  331.517068][ T5726] usb 3-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00
[  331.542098][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.542118][ T5726] usb 3-1: Product: syz
[  331.542126][ T5726] usb 3-1: Manufacturer: syz
[  331.542134][ T5726] usb 3-1: SerialNumber: syz
[  331.586747][ T5726] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected
[  331.635386][ T5726] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  331.637934][T10737] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  331.637954][T10737] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  331.696573][ T5726] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  331.725674][ T5726] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  331.749879][ T5726] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  332.410164][ T5734] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  332.564131][ T5734] usb 5-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  332.580380][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  332.580400][ T5734] usb 5-1: Product: syz
[  332.580408][ T5734] usb 5-1: SerialNumber: syz
[  332.613588][ T5734] usb 5-1: config 0 descriptor??
[  332.693854][T10759] loop0: detected capacity change from 0 to 164
[  332.866694][ T5734] hso 5-1:0.0: Failed to find BULK eps
[  333.112465][ T5726] usb 5-1: USB disconnect, device number 17
[  333.407180][T10777] loop1: detected capacity change from 0 to 736
[  333.809303][T10784] loop3: detected capacity change from 0 to 128
[  333.846865][T10784] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  333.875758][T10784] ext4 filesystem being mounted at /373/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  334.079937][ T5611] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  334.279958][ T5734] usb 3-1: USB disconnect, device number 16
[  334.372310][T10783] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  334.372338][T10783] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  334.372361][T10783] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  334.511950][ T5734] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  334.551642][T10783] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  334.591875][T10797] loop2: detected capacity change from 0 to 1024
[  334.595946][ T5734] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  334.647818][ T5734] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  334.665990][T10797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.693111][ T5734] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  334.695597][ T5734] keyspan 3-1:1.0: device disconnected
[  334.727647][T10783] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98
[  334.879403][T10785] loop1: detected capacity change from 0 to 32768
[  334.941419][T10785] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  334.984506][T10785] XFS (loop1): Ending clean mount
[  335.350938][ T5614] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  335.382495][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.844315][T10834] loop0: detected capacity change from 0 to 32768
[  336.921527][T10834] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  336.995791][T10834] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 4294901792
[  336.995840][T10834] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  336.995846][T10834] OCFS2: File system is now read-only.
[  336.995855][T10834] (syz.0.1810,10834,0):ocfs2_search_chain:1935 ERROR: status = -30
[  336.995870][T10834] (syz.0.1810,10834,0):ocfs2_search_chain:2058 ERROR: status = -30
[  336.995883][T10834] (syz.0.1810,10834,0):ocfs2_claim_suballoc_bits:2145 ERROR: status = -30
[  336.995895][T10834] (syz.0.1810,10834,0):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30
[  336.995914][T10834] (syz.0.1810,10834,0):__ocfs2_claim_clusters:2579 ERROR: status = -30
[  336.995927][T10834] (syz.0.1810,10834,0):__ocfs2_claim_clusters:2587 ERROR: status = -30
[  336.995938][T10834] (syz.0.1810,10834,0):ocfs2_block_group_alloc_contig:553 ERROR: status = -30
[  336.995950][T10834] (syz.0.1810,10834,0):ocfs2_block_group_alloc:827 ERROR: status = -30
[  336.996011][T10834] (syz.0.1810,10834,0):ocfs2_block_group_alloc:880 ERROR: status = -30
[  336.996023][T10834] (syz.0.1810,10834,0):ocfs2_reserve_suballoc_bits:955 ERROR: status = -30
[  336.996035][T10834] (syz.0.1810,10834,0):ocfs2_reserve_suballoc_bits:972 ERROR: status = -30
[  336.996047][T10834] (syz.0.1810,10834,0):ocfs2_reserve_new_metadata_blocks:1112 ERROR: status = -30
[  336.996071][T10834] (syz.0.1810,10834,0):ocfs2_reserve_new_metadata_blocks:1135 ERROR: status = -30
[  336.996083][T10834] (syz.0.1810,10834,0):ocfs2_expand_inline_dir:2985 ERROR: status = -30
[  336.996095][T10834] (syz.0.1810,10834,0):ocfs2_extend_dir:3349 ERROR: status = -30
[  336.996107][T10834] (syz.0.1810,10834,0):ocfs2_prepare_dir_for_insert:4467 ERROR: status = -30
[  336.996119][T10834] (syz.0.1810,10834,0):ocfs2_mknod:303 ERROR: status = -30
[  336.996132][T10834] (syz.0.1810,10834,0):ocfs2_mknod:508 ERROR: status = -30
[  336.996143][T10834] (syz.0.1810,10834,0):ocfs2_mkdir:664 ERROR: status = -30
[  337.454645][ T7091] ocfs2: Unmounting device (7,0) on (node local)
[  337.563476][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1823'.
[  337.563499][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1823'.
[  337.597341][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'.
[  338.344203][T10883] loop0: detected capacity change from 0 to 512
[  338.364714][T10883] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.1832: iget: bad extended attribute block 134217728
[  338.364739][T10883] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  338.378279][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  338.378299][    C0] EXT4-fs (loop0): initial error at time 1790309124: ext4_orphan_get:1403: inode 15
[  338.378317][    C0] EXT4-fs (loop0): last error at time 1790309124: ext4_orphan_get:1403: inode 15
[  338.382050][T10883] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1832: couldn't read orphan inode 15 (err -117)
[  338.382084][T10883] loop0: lost filesystem error report for type 5 error -117
[  338.435220][T10883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.497905][   T33] audit: type=1800 audit(1790309124.490:81): pid=10883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1832" name="file0" dev="loop0" ino=13 res=0 errno=0
[  338.522173][T10883] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1832: invalid indirect mapped block 234881024 (level 0)
[  338.591785][T10883] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1832: invalid indirect mapped block 768 (level 1)
[  338.606576][ T5734] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  338.657385][ T7091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.750305][ T5734] usb 3-1: Using ep0 maxpacket: 32
[  338.753567][ T5734] usb 3-1: unable to get BOS descriptor or descriptor too short
[  338.753602][ T5734] usb 3-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13
[  338.754397][ T5734] usb 3-1: config 14 has an invalid interface number: 57 but max is 0
[  338.754412][ T5734] usb 3-1: config 14 has no interface number 0
[  338.754429][ T5734] usb 3-1: config 14 interface 57 has no altsetting 0
[  338.756044][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.756059][ T5734] usb 3-1: Product: syz
[  338.756068][ T5734] usb 3-1: Manufacturer: syz
[  338.756076][ T5734] usb 3-1: SerialNumber: syz
[  338.859127][T10890] loop0: detected capacity change from 0 to 256
[  338.859921][T10890] exfat: Deprecated parameter 'utf8'
[  338.876105][T10890] exfat: Deprecated parameter 'namecase'
[  338.908399][T10890] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  339.172538][T10894] loop0: detected capacity change from 0 to 4096
[  339.210141][T10897] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  339.252783][ T5734] legousbtower 3-1:14.57: interrupt endpoints not found
[  339.270345][ T5734] usb 3-1: USB disconnect, device number 17
[  339.420305][    T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  339.464371][   T33] audit: type=1400 audit(35334851.455:82): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=10898 comm="syz.3.1839" name="unknown" offset=16
[  339.468973][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'.
[  339.571497][    T9] usb 5-1: Using ep0 maxpacket: 8
[  339.578243][    T9] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  339.597241][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  339.597275][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  339.597290][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  339.597304][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  339.597329][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.718831][T10904] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  339.840779][    T9] usb 5-1: GET_CAPABILITIES returned 0
[  339.840814][    T9] usbtmc 5-1:16.0: can't read capabilities
[  340.088574][ T5726] usb 5-1: USB disconnect, device number 18
[  340.317557][T10905] loop0: detected capacity change from 0 to 32768
[  340.354394][T10905] JBD2: Ignoring recovery information on journal
[  340.445124][T10905] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  340.728577][ T7091] ocfs2: Unmounting device (7,0) on (node local)
[  341.089667][T10934] sctp: [Deprecated]: syz.1.1855 (pid 10934) Use of int in max_burst socket option deprecated.
[  341.089667][T10934] Use struct sctp_assoc_value instead
[  341.151023][T10935] dvmrp1: tun_chr_ioctl cmd 1074025681
[  341.641534][T10950] loop3: detected capacity change from 0 to 7
[  341.642403][T10950] Dev loop3: unable to read RDB block 7
[  341.642424][T10950]  loop3: AHDI p1 p2
[  341.642439][T10950] loop3: partition table partially beyond EOD, truncated
[  341.642565][T10950] loop3: p1 start 1702000233 is beyond EOD, truncated
[  341.706404][T10955] loop2: detected capacity change from 0 to 256
[  341.720915][T10955] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  341.736680][T10955] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  341.973612][T10931] loop3: detected capacity change from 0 to 32768
[  342.038854][T10931] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  342.129597][T10931] XFS (loop3): Ending clean mount
[  342.299896][T10931] XFS (loop3): Quotacheck needed: Please wait.
[  342.606744][ T3291] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  342.775552][T10931] XFS (loop3): Quotacheck: Done.
[  343.044695][T10994] loop4: detected capacity change from 0 to 64
[  343.187442][T10996] ieee802154 phy0 wpan0: encryption failed: -22
[  343.399943][T11001] loop0: detected capacity change from 0 to 16
[  343.419426][T11001] erofs (device loop0): mounted with root inode @ nid 36.
[  343.534392][ T5611] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  343.717795][ T5734] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  343.902935][ T5734] usb 5-1: not running at top speed; connect to a high speed hub
[  343.902961][ T5734] usb 5-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  343.928007][ T5734] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  343.951299][ T5734] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  343.951323][ T5734] usb 5-1: Product: syz
[  343.951336][ T5734] usb 5-1: Manufacturer: syz
[  344.030481][ T5734] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4)
[  344.030534][ T5734] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770.
[  344.192684][T10998] loop2: detected capacity change from 0 to 32768
[  344.228837][ T5734] usb 5-1: USB disconnect, device number 19
[  344.263552][T10998] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  344.359099][T10998] XFS (loop2): Ending clean mount
[  344.370800][T11018] loop1: detected capacity change from 0 to 512
[  344.438500][T11017] pim6reg0: tun_chr_ioctl cmd 1074025677
[  344.438699][T11017] pim6reg0: linktype set to 823
[  344.478965][T11018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.734611][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.768365][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'.
[  344.768383][T11031] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1886'.
[  344.845014][   T33] audit: type=1800 audit(35334856.845:83): pid=11027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1878" name="file1" dev="loop2" ino=4422 res=0 errno=0
[  345.084841][ T5610] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  345.302930][T11044] loop0: detected capacity change from 0 to 256
[  345.303585][T11044] exfat: Deprecated parameter 'utf8'
[  345.345146][T11044] exfat: Deprecated parameter 'namecase'
[  345.345214][T11044] exfat: Deprecated parameter 'namecase'
[  345.345228][T11044] exfat: Deprecated parameter 'utf8'
[  345.388885][T11044] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  345.389088][T11044] exFAT-fs (loop0): failed to test first cluster bit of root dir(5)
[  345.440614][T11046] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  345.440735][T11046] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  345.724107][T11050] program syz.3.1896 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  346.466062][   T33] audit: type=1400 audit(35334858.455:84): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=11067 comm="syz.2.1903" name="p" offset=58
[  346.649695][T11075] loop4: detected capacity change from 0 to 128
[  346.660768][T11075] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  346.814062][   T33] audit: type=1400 audit(35334858.805:85): apparmor="STATUS" info="unsupported interface version" error=-93 profile="unconfined" pid=11078 comm="syz.0.1908" offset=16
[  347.069141][T11087] loop0: detected capacity change from 0 to 256
[  347.320855][T11089] loop3: detected capacity change from 0 to 2048
[  347.358315][T11089] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  347.508961][T11098] loop0: detected capacity change from 0 to 1024
[  347.956972][T11108] loop2: detected capacity change from 0 to 8
[  348.087619][T11112] loop4: detected capacity change from 0 to 512
[  348.106450][T11112] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  348.139088][T11112] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.1924: bad orphan inode 131083
[  348.139111][T11112] loop4: lost filesystem error report for type 5 error -117
[  348.150007][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  348.150049][    C0] EXT4-fs (loop4): initial error at time 35334860: ext4_orphan_get:1429
[  348.150065][    C0] EXT4-fs (loop4): last error at time 35334860: ext4_orphan_get:1429
[  348.155349][T11112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.218594][T11113] loop3: detected capacity change from 0 to 128
[  348.264533][T11113] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  348.474875][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.629606][ T5611] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  348.747439][T11123] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  348.889660][T11103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1919 (11103)
[  348.940413][T11103] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  348.940437][T11103] BTRFS info (device loop1): using crc32c checksum algorithm
[  349.112753][T11103] BTRFS info (device loop1): enabling ssd optimizations
[  349.112774][T11103] BTRFS info (device loop1): turning on flush-on-commit
[  349.112784][T11103] BTRFS info (device loop1): enabling free space tree
[  349.112793][T11103] BTRFS info (device loop1): enabling auto defrag
[  349.112803][T11103] BTRFS info (device loop1): use lzo compression, level 1
[  349.112815][T11103] BTRFS info (device loop1): max_inline set to 4096
[  349.438703][ T5614] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  349.873012][T11158] gfs2: path_lookup on c::: returned error -2
[  350.058334][T11162] set_capacity_and_notify: 2 callbacks suppressed
[  350.058351][T11162] loop0: detected capacity change from 0 to 4096
[  350.132771][T11165] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  350.294736][T11147] loop3: detected capacity change from 0 to 32768
[  350.409228][T11147] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  351.029202][ T5611] ocfs2: Unmounting device (7,3) on (node local)
[  351.366383][T11178] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma?
[  351.583379][   T33] audit: type=1400 audit(35334863.575:86): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=11185 comm="syz.3.1944" name="unknown" offset=16
[  351.921569][ T5733] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  352.034389][T11202] loop1: detected capacity change from 0 to 4096
[  352.072323][ T5733] usb 3-1: New USB device found: idVendor=5543, idProduct=0064, bcdDevice=0.00
[  352.079680][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  352.079714][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.121172][ T5733] usb 3-1: config 0 descriptor??
[  352.121735][T11190] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  352.305548][T11208] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  352.353848][T11190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  352.354183][T11190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.388353][T11209] loop3: detected capacity change from 0 to 256
[  352.414306][T11209] exFAT-fs (loop3): error, no upcase table entry. Please run fsck
[  352.414322][T11209] exFAT-fs (loop3): Filesystem has been set read-only
[  352.414464][T11209] exFAT-fs (loop3): failed to test first cluster bit of root dir(5)
[  352.669982][ T5733] hid_parser_main: 45 callbacks suppressed
[  352.693260][ T5733] uclogic 0003:5543:0064.000D: unknown main item tag 0x0
[  352.693297][ T5733] uclogic 0003:5543:0064.000D: unknown main item tag 0x0
[  352.693312][ T5733] uclogic 0003:5543:0064.000D: unknown main item tag 0x0
[  352.693327][ T5733] uclogic 0003:5543:0064.000D: unknown main item tag 0x0
[  352.693341][ T5733] uclogic 0003:5543:0064.000D: unknown main item tag 0x0
[  352.693356][ T5733] uclogic 0003:5543:0064.000D: unknown main item tag 0x0
[  352.693370][ T5733] uclogic 0003:5543:0064.000D: unknown main item tag 0x0
[  352.693385][ T5733] uclogic 0003:5543:0064.000D: unknown main item tag 0x0
[  352.693398][ T5733] uclogic 0003:5543:0064.000D: unknown main item tag 0x0
[  352.693413][ T5733] uclogic 0003:5543:0064.000D: unknown main item tag 0x0
[  352.810582][ T5733] uclogic 0003:5543:0064.000D: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0
[  352.903542][ T5733] usb 3-1: USB disconnect, device number 18
[  352.966771][T11197] loop4: detected capacity change from 0 to 32768
[  353.028823][T11217] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  353.093026][T11212] fido_id[11212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  353.200624][T11197] jfs_rmdir: dtDelete returned -2
[  353.220988][ T5734] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  353.380561][ T5734] usb 4-1: Using ep0 maxpacket: 16
[  353.381710][ T5734] usb 4-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  353.382537][ T5734] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  353.382555][ T5734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  353.388725][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.388743][ T5734] usb 4-1: Product: syz
[  353.388751][ T5734] usb 4-1: Manufacturer: syz
[  353.388759][ T5734] usb 4-1: SerialNumber: syz
[  353.459990][ T5734] usb 4-1: config 0 descriptor??
[  353.479001][ T5734] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  353.479025][ T5734] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  354.109563][ T5734] em28xx 4-1:0.0: chip ID is em2870
[  354.160134][ T5733] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  354.310612][ T5733] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  354.311555][ T5733] usb 5-1: config 1 has an invalid interface number: 144 but max is 1
[  354.311572][ T5733] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  354.311582][ T5733] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  354.311594][ T5733] usb 5-1: config 1 has no interface number 2
[  354.311630][ T5733] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.311652][ T5733] usb 5-1: config 1 interface 144 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  354.311684][ T5733] usb 5-1: config 1 interface 144 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  354.311705][ T5733] usb 5-1: config 1 interface 144 has no altsetting 0
[  354.314217][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.314232][ T5733] usb 5-1: Product: syz
[  354.314241][ T5733] usb 5-1: Manufacturer: syz
[  354.314249][ T5733] usb 5-1: SerialNumber: syz
[  354.354246][ T5733] usb 5-1: selecting invalid altsetting 1
[  359.412259][ T5733] cdc_ncm 5-1:1.0: bind() failure
[  359.425721][ T5733] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  359.425752][ T5733] cdc_ncm 5-1:1.1: bind() failure
[  360.770459][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  379.173189][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  379.173230][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  440.613287][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  440.613327][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  502.051200][   T34] INFO: task kworker/u8:9:3291 blocked in I/O wait for more than 143 seconds.
[  502.051222][   T34]       Not tainted syzkaller #0
[  502.051229][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  502.051235][   T34] task:kworker/u8:9    state:D stack:20488 pid:3291  tgid:3291  ppid:2      task_flags:0x4248160 flags:0x00080000
[  502.051271][   T34] Workqueue: writeback wb_workfn (flush-8:0)
[  502.051363][   T34] Call Trace:
[  502.051404][   T34]  <TASK>
[  502.051463][   T34]  __schedule+0x1b47/0x5c60
[  502.051566][   T34]  ? blk_mq_flush_plug_list+0x415/0x540
[  502.051670][   T34]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  502.051692][   T34]  ? pte_offset_map_lock+0x13d/0x210
[  502.051724][   T34]  ? __blk_flush_plug+0x416/0x4d0
[  502.051769][   T34]  ? __pfx___schedule+0x10/0x10
[  502.051786][   T34]  ? schedule+0x90/0x2b0
[  502.051799][   T34]  schedule+0x164/0x2b0
[  502.051812][   T34]  io_schedule+0x7f/0xd0
[  502.051825][   T34]  rq_qos_wait+0x266/0x360
[  502.051854][   T34]  ? __pfx_wbt_inflight_cb+0x10/0x10
[  502.051889][   T34]  ? __pfx_wbt_cleanup_cb+0x10/0x10
[  502.051907][   T34]  ? __pfx_rq_qos_wait+0x10/0x10
[  502.051923][   T34]  ? __pfx_rq_qos_wake_function+0x10/0x10
[  502.051938][   T34]  ? __pfx_wbt_inflight_cb+0x10/0x10
[  502.051963][   T34]  wbt_wait+0x326/0x550
[  502.051982][   T34]  ? __pfx_wbt_wait+0x10/0x10
[  502.051998][   T34]  ? __pfx_dd_bio_merge+0x10/0x10
[  502.052030][   T34]  ? __pfx_wbt_wait+0x10/0x10
[  502.052046][   T34]  __rq_qos_throttle+0x6b/0xb0
[  502.052060][   T34]  blk_mq_submit_bio+0x165d/0x2bb0
[  502.052081][   T34]  ? blk_mq_submit_bio+0x308/0x2bb0
[  502.052101][   T34]  ? __pfx_blk_mq_submit_bio+0x10/0x10
[  502.052118][   T34]  ? blk_cgroup_bio_start+0x5d7/0x670
[  502.052146][   T34]  ? __pfx_blk_cgroup_bio_start+0x10/0x10
[  502.052162][   T34]  ? __submit_bio+0x7e/0x340
[  502.052175][   T34]  submit_bio_noacct_nocheck+0x2f4/0xa40
[  502.052196][   T34]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  502.052225][   T34]  ext4_bio_write_folio+0x101a/0x18c0
[  502.052264][   T34]  mpage_process_page_bufs+0x6bd/0x8a0
[  502.052287][   T34]  mpage_prepare_extent_to_map+0xf8d/0x1880
[  502.052302][   T34]  ? process_scheduled_works+0xc3d/0x1630
[  502.052357][   T34]  ? __pfx_mpage_prepare_extent_to_map+0x10/0x10
[  502.052387][   T34]  ? kmem_cache_alloc_noprof+0x31a/0x600
[  502.052409][   T34]  ? ext4_init_io_end+0x29/0x130
[  502.052426][   T34]  ? kmem_cache_alloc_noprof+0x151/0x600
[  502.052438][   T34]  ? ext4_init_io_end+0x29/0x130
[  502.052460][   T34]  ext4_do_writepages+0xb8a/0x4770
[  502.052487][   T34]  ? __lock_acquire+0x747/0x2de0
[  502.052528][   T34]  ? __pfx_ext4_do_writepages+0x10/0x10
[  502.052540][   T34]  ? __lock_acquire+0x747/0x2de0
[  502.052558][   T34]  ? __lock_acquire+0x747/0x2de0
[  502.052994][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  502.053031][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  502.054666][   T34]  ? __lock_acquire+0x747/0x2de0
[  502.054695][   T34]  ? lock_acquire+0x115/0x350
[  502.054722][   T34]  ext4_writepages+0x1fe/0x4e0
[  502.054741][   T34]  ? __pfx_ext4_writepages+0x10/0x10
[  502.054766][   T34]  ? do_raw_spin_unlock+0xf5/0x200
[  502.054779][   T34]  ? __pfx_ext4_writepages+0x10/0x10
[  502.054795][   T34]  do_writepages+0x338/0x560
[  502.054847][   T34]  ? reacquire_held_locks+0x117/0x1a0
[  502.054864][   T34]  ? writeback_sb_inodes+0x450/0x1af0
[  502.054880][   T34]  __writeback_single_inode+0x136/0x1220
[  502.054895][   T34]  ? do_raw_spin_unlock+0xf5/0x200
[  502.054910][   T34]  writeback_sb_inodes+0x9de/0x1af0
[  502.054927][   T34]  ? __lock_acquire+0x747/0x2de0
[  502.054954][   T34]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  502.054987][   T34]  ? __pfx_down_read_trylock+0x10/0x10
[  502.055014][   T34]  __writeback_inodes_wb+0x114/0x240
[  502.055032][   T34]  wb_writeback+0x42f/0xad0
[  502.055046][   T34]  ? queue_io+0x2a1/0x470
[  502.055062][   T34]  ? __pfx_wb_writeback+0x10/0x10
[  502.055073][   T34]  ? do_raw_spin_lock+0x12b/0x2f0
[  502.055095][   T34]  wb_workfn+0xc92/0x10f0
[  502.055122][   T34]  ? __pfx_wb_workfn+0x10/0x10
[  502.055153][   T34]  ? lock_acquire+0x115/0x350
[  502.055172][   T34]  ? rcu_is_watching+0x16/0xb0
[  502.055201][   T34]  ? process_scheduled_works+0x97a/0x1630
[  502.055219][   T34]  process_scheduled_works+0xc3d/0x1630
[  502.055255][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  502.055276][   T34]  ? assign_work+0x3cf/0x5d0
[  502.055296][   T34]  worker_thread+0xa47/0xfb0
[  502.055330][   T34]  kthread+0x38b/0x480
[  502.055345][   T34]  ? __pfx_worker_thread+0x10/0x10
[  502.055361][   T34]  ? __pfx_kthread+0x10/0x10
[  502.055376][   T34]  ret_from_fork+0x514/0xb70
[  502.055395][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  502.055407][   T34]  ? __switch_to+0xc78/0x1410
[  502.055451][   T34]  ? __pfx_kthread+0x10/0x10
[  502.055466][   T34]  ret_from_fork_asm+0x1a/0x30
[  502.055503][   T34]  </TASK>
[  502.055543][   T34] INFO: task syz-executor:5599 blocked in I/O wait for more than 143 seconds.
[  502.055554][   T34]       Not tainted syzkaller #0
[  502.055561][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  502.055566][   T34] task:syz-executor    state:D stack:22472 pid:5599  tgid:5599  ppid:5598   task_flags:0x440100 flags:0x00080000
[  502.055881][   T34] Call Trace:
[  502.055887][   T34]  <TASK>
[  502.055895][   T34]  __schedule+0x1b47/0x5c60
[  502.055929][   T34]  ? __pfx___schedule+0x10/0x10
[  502.055947][   T34]  ? schedule+0x90/0x2b0
[  502.055960][   T34]  schedule+0x164/0x2b0
[  502.055973][   T34]  io_schedule+0x7f/0xd0
[  502.055986][   T34]  bit_wait_io+0x13/0x110
[  502.056000][   T34]  __wait_on_bit+0xac/0x300
[  502.056013][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  502.056028][   T34]  out_of_line_wait_on_bit+0x13b/0x190
[  502.056042][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  502.056054][   T34]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  502.056069][   T34]  ? __pfx_wake_bit_function+0x10/0x10
[  502.056093][   T34]  do_get_write_access+0x658/0x10c0
[  502.056156][   T34]  jbd2_journal_get_write_access+0x1d7/0x230
[  502.056174][   T34]  __ext4_journal_get_write_access+0xec/0x620
[  502.056193][   T34]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  502.056208][   T34]  ? trace_kmem_cache_alloc+0x29/0xe0
[  502.056220][   T34]  ? jbd2__journal_start+0x145/0x5d0
[  502.056239][   T34]  ext4_reserve_inode_write+0x294/0x360
[  502.056263][   T34]  __ext4_mark_inode_dirty+0x141/0x7b0
[  502.056288][   T34]  ext4_dirty_inode+0xd0/0x110
[  502.056303][   T34]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  502.056317][   T34]  __mark_inode_dirty+0x3a8/0x13b0
[  502.056338][   T34]  file_update_time_flags+0x399/0x440
[  502.056364][   T34]  ext4_page_mkwrite+0x21f/0x12c0
[  502.056379][   T34]  ? reacquire_held_locks+0x117/0x1a0
[  502.056404][   T34]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  502.056417][   T34]  ? __lock_acquire+0x747/0x2de0
[  502.056444][   T34]  do_page_mkwrite+0x147/0x310
[  502.056465][   T34]  do_wp_page+0x1a85/0x4b60
[  502.056493][   T34]  ? __pfx_do_wp_page+0x10/0x10
[  502.056508][   T34]  ? do_raw_spin_lock+0x12b/0x2f0
[  502.056522][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  502.056541][   T34]  handle_mm_fault+0x15d7/0x3750
[  502.056565][   T34]  ? handle_mm_fault+0xf1/0x3750
[  502.056589][   T34]  ? __pfx_handle_mm_fault+0x10/0x10
[  502.056605][   T34]  ? lock_vma_under_rcu+0x45a/0x500
[  502.056626][   T34]  ? __pfx_set_user_sigmask+0x10/0x10
[  502.056656][   T34]  do_user_addr_fault+0xb35/0x1480
[  502.056682][   T34]  ? trace_page_fault_user+0x84/0x1e0
[  502.056697][   T34]  exc_page_fault+0x6a/0xc0
[  502.056728][   T34]  asm_exc_page_fault+0x26/0x30
[  502.056758][   T34] RIP: 0033:0x7f6a86a7c6e2
[  502.056770][   T34] RSP: 002b:00007ffe02b49580 EFLAGS: 00010202
[  502.056801][   T34] RAX: 00007f6a84bbc000 RBX: 000055556b5b3770 RCX: 0000000000000001
[  502.056811][   T34] RDX: 0000000000001c39 RSI: 000055556b618580 RDI: 0000000000000002
[  502.056819][   T34] RBP: 00007ffe02b49a80 R08: 000055556b618728 R09: 00000000000000a0
[  502.056827][   T34] R10: 0000000000400000 R11: 0000000000000001 R12: 00007ffe02b498c0
[  502.056836][   T34] R13: 00007ffe02b496b0 R14: 585858582e7a7973 R15: 00007ffe02b49600
[  502.056856][   T34]  </TASK>
[  502.056877][   T34] INFO: task syz.3.1960:11211 blocked in I/O wait for more than 143 seconds.
[  502.056887][   T34]       Not tainted syzkaller #0
[  502.056894][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  502.056899][   T34] task:syz.3.1960      state:D stack:25608 pid:11211 tgid:11211 ppid:5611   task_flags:0x440040 flags:0x00080002
[  502.056936][   T34] Call Trace:
[  502.056940][   T34]  <TASK>
[  502.056948][   T34]  __schedule+0x1b47/0x5c60
[  502.056968][   T34]  ? lock_acquire+0x115/0x350
[  502.056990][   T34]  ? __pfx___schedule+0x10/0x10
[  502.057008][   T34]  ? schedule+0x90/0x2b0
[  502.057021][   T34]  schedule+0x164/0x2b0
[  502.057034][   T34]  io_schedule+0x7f/0xd0
[  502.057067][   T34]  bit_wait_io+0x13/0x110
[  502.057082][   T34]  __wait_on_bit+0xac/0x300
[  502.057094][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  502.057109][   T34]  out_of_line_wait_on_bit+0x13b/0x190
[  502.057123][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  502.057135][   T34]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  502.057150][   T34]  ? __pfx_wake_bit_function+0x10/0x10
[  502.057174][   T34]  do_get_write_access+0x658/0x10c0
[  502.057199][   T34]  jbd2_journal_get_write_access+0x1d7/0x230
[  502.057216][   T34]  __ext4_journal_get_write_access+0xec/0x620
[  502.057235][   T34]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  502.057249][   T34]  ? trace_kmem_cache_alloc+0x29/0xe0
[  502.057261][   T34]  ? jbd2__journal_start+0x145/0x5d0
[  502.057280][   T34]  ext4_reserve_inode_write+0x294/0x360
[  502.057323][   T34]  __ext4_mark_inode_dirty+0x141/0x7b0
[  502.057348][   T34]  ext4_dirty_inode+0xd0/0x110
[  502.057363][   T34]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  502.057377][   T34]  __mark_inode_dirty+0x3a8/0x13b0
[  502.057397][   T34]  file_update_time_flags+0x399/0x440
[  502.057416][   T34]  ext4_page_mkwrite+0x21f/0x12c0
[  502.057442][   T34]  ? __pfx_filemap_fault+0x10/0x10
[  502.057461][   T34]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  502.057482][   T34]  do_page_mkwrite+0x147/0x310
[  502.057498][   T34]  do_pte_missing+0x70f/0x3570
[  502.057518][   T34]  ? handle_mm_fault+0xf1/0x3750
[  502.057538][   T34]  handle_mm_fault+0x1a53/0x3750
[  502.057562][   T34]  ? handle_mm_fault+0xf1/0x3750
[  502.057585][   T34]  ? __pfx_handle_mm_fault+0x10/0x10
[  502.057601][   T34]  ? lock_vma_under_rcu+0x45a/0x500
[  502.057638][   T34]  do_user_addr_fault+0xb35/0x1480
[  502.057658][   T34]  ? trace_page_fault_user+0x84/0x1e0
[  502.057672][   T34]  exc_page_fault+0x6a/0xc0
[  502.057685][   T34]  asm_exc_page_fault+0x26/0x30
[  502.057702][   T34] RIP: 0033:0x7f3cdde727a9
[  502.057712][   T34] RSP: 002b:00007fff3a8f08b0 EFLAGS: 00010202
[  502.057723][   T34] RAX: 0000001b33a18000 RBX: ffffffff827ce50b RCX: 0000001b33a17ff8
[  502.057732][   T34] RDX: 0000001b33424220 RSI: 0000000000000008 RDI: 00007f3cded55720
[  502.057740][   T34] RBP: 0000000000000579 R08: 00007f3cde210000 R09: 00007f3cde212000
[  502.057748][   T34] R10: 00000000827ce50f R11: 00000000000000ff R12: 00007f3cde225f40
[  502.057756][   T34] R13: 00000000000052eb R14: ffffffff827ce7ee R15: 00007f3cded55720
[  502.057765][   T34]  ? kernfs_find_ns+0x31e/0x800
[  502.057791][   T34]  ? kernfs_find_ns+0x3b/0x800
[  502.057813][   T34]  </TASK>
[  502.057818][   T34] INFO: task syz.0.1966:11229 blocked in I/O wait for more than 143 seconds.
[  502.057828][   T34]       Not tainted syzkaller #0
[  502.057834][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  502.057839][   T34] task:syz.0.1966      state:D stack:25608 pid:11229 tgid:11229 ppid:7091   task_flags:0x440040 flags:0x00080002
[  502.057871][   T34] Call Trace:
[  502.057875][   T34]  <TASK>
[  502.057882][   T34]  __schedule+0x1b47/0x5c60
[  502.057902][   T34]  ? lock_acquire+0x115/0x350
[  502.057927][   T34]  ? __pfx___schedule+0x10/0x10
[  502.057946][   T34]  ? schedule+0x90/0x2b0
[  502.057959][   T34]  schedule+0x164/0x2b0
[  502.057972][   T34]  io_schedule+0x7f/0xd0
[  502.057984][   T34]  bit_wait_io+0x13/0x110
[  502.057998][   T34]  __wait_on_bit+0xac/0x300
[  502.058010][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  502.058025][   T34]  out_of_line_wait_on_bit+0x13b/0x190
[  502.058038][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  502.058051][   T34]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  502.058065][   T34]  ? __pfx_wake_bit_function+0x10/0x10
[  502.058089][   T34]  do_get_write_access+0x658/0x10c0
[  502.058114][   T34]  jbd2_journal_get_write_access+0x1d7/0x230
[  502.058131][   T34]  __ext4_journal_get_write_access+0xec/0x620
[  502.058149][   T34]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  502.058163][   T34]  ? trace_kmem_cache_alloc+0x29/0xe0
[  502.058175][   T34]  ? jbd2__journal_start+0x145/0x5d0
[  502.058194][   T34]  ext4_reserve_inode_write+0x294/0x360
[  502.058213][   T34]  __ext4_mark_inode_dirty+0x141/0x7b0
[  502.058243][   T34]  ext4_dirty_inode+0xd0/0x110
[  502.058258][   T34]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  502.058271][   T34]  __mark_inode_dirty+0x3a8/0x13b0
[  502.058291][   T34]  file_update_time_flags+0x399/0x440
[  502.058310][   T34]  ext4_page_mkwrite+0x21f/0x12c0
[  502.058330][   T34]  ? __pfx_filemap_fault+0x10/0x10
[  502.058348][   T34]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  502.058369][   T34]  do_page_mkwrite+0x147/0x310
[  502.058385][   T34]  do_pte_missing+0x70f/0x3570
[  502.058404][   T34]  ? handle_mm_fault+0xf1/0x3750
[  502.058430][   T34]  handle_mm_fault+0x1a53/0x3750
[  502.058454][   T34]  ? handle_mm_fault+0xf1/0x3750
[  502.058482][   T34]  ? __pfx_handle_mm_fault+0x10/0x10
[  502.058498][   T34]  ? lock_vma_under_rcu+0x45a/0x500
[  502.058530][   T34]  do_user_addr_fault+0xb35/0x1480
[  502.058549][   T34]  ? trace_page_fault_user+0x84/0x1e0
[  502.058563][   T34]  exc_page_fault+0x6a/0xc0
[  502.058576][   T34]  asm_exc_page_fault+0x26/0x30
[  502.058591][   T34] RIP: 0033:0x7fe16ee727a9
[  502.058601][   T34] RSP: 002b:00007ffcd4d3cdb0 EFLAGS: 00010202
[  502.058615][   T34] RAX: 0000001b2f720000 RBX: ffffffff824ece4a RCX: 0000001b2f71fff8
[  502.058624][   T34] RDX: 0000001b2f124220 RSI: 0000000000000008 RDI: 00007fe16fd55720
[  502.058631][   T34] RBP: 0000000000000191 R08: 00007fe16f210000 R09: 00007fe16f212000
[  502.058640][   T34] R10: 00000000824ece4e R11: 0000000000000003 R12: 00007fe16f226038
[  502.058647][   T34] R13: 0000000000000306 R14: ffffffff824ec661 R15: 00007fe16fd55720
[  502.058656][   T34]  ? alloc_file_pseudo+0x141/0x1e0
[  502.058679][   T34]  ? file_init_path+0x24a/0x5a0
[  502.058697][   T34]  </TASK>
[  502.058702][   T34] INFO: task syz.4.1968:11232 blocked in I/O wait for more than 143 seconds.
[  502.058711][   T34]       Not tainted syzkaller #0
[  502.058717][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  502.058722][   T34] task:syz.4.1968      state:D stack:25608 pid:11232 tgid:11232 ppid:5612   task_flags:0x440040 flags:0x00080002
[  502.058755][   T34] Call Trace:
[  502.058758][   T34]  <TASK>
[  502.058765][   T34]  __schedule+0x1b47/0x5c60
[  502.058785][   T34]  ? lock_acquire+0x115/0x350
[  502.058806][   T34]  ? __pfx___schedule+0x10/0x10
[  502.058824][   T34]  ? schedule+0x90/0x2b0
[  502.058837][   T34]  schedule+0x164/0x2b0
[  502.058850][   T34]  io_schedule+0x7f/0xd0
[  502.058863][   T34]  bit_wait_io+0x13/0x110
[  502.058876][   T34]  __wait_on_bit+0xac/0x300
[  502.058889][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  502.058903][   T34]  out_of_line_wait_on_bit+0x13b/0x190
[  502.058917][   T34]  ? __pfx_bit_wait_io+0x10/0x10
[  502.058933][   T34]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  502.058947][   T34]  ? __pfx_wake_bit_function+0x10/0x10
[  502.058974][   T34]  do_get_write_access+0x658/0x10c0
[  502.058999][   T34]  jbd2_journal_get_write_access+0x1d7/0x230
[  502.059016][   T34]  __ext4_journal_get_write_access+0xec/0x620
[  502.059035][   T34]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  502.059049][   T34]  ? trace_kmem_cache_alloc+0x29/0xe0
[  502.059060][   T34]  ? jbd2__journal_start+0x145/0x5d0
[  502.059079][   T34]  ext4_reserve_inode_write+0x294/0x360
[  502.059098][   T34]  __ext4_mark_inode_dirty+0x141/0x7b0
[  502.059122][   T34]  ext4_dirty_inode+0xd0/0x110
[  502.059137][   T34]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  502.059150][   T34]  __mark_inode_dirty+0x3a8/0x13b0
[  502.059170][   T34]  file_update_time_flags+0x399/0x440
[  502.059188][   T34]  ext4_page_mkwrite+0x21f/0x12c0
[  502.059208][   T34]  ? __pfx_filemap_fault+0x10/0x10
[  502.059226][   T34]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  502.059241][   T34]  ? lruvec_stat_mod_folio+0x28e/0x3e0
[  502.059266][   T34]  do_page_mkwrite+0x147/0x310
[  502.059282][   T34]  do_pte_missing+0x70f/0x3570
[  502.059306][   T34]  handle_mm_fault+0x1a53/0x3750
[  502.059330][   T34]  ? handle_mm_fault+0xf1/0x3750
[  502.059353][   T34]  ? __pfx_handle_mm_fault+0x10/0x10
[  502.059369][   T34]  ? lock_vma_under_rcu+0x45a/0x500
[  502.059386][   T34]  ? sched_clock+0x41/0x60
[  502.059416][   T34]  do_user_addr_fault+0xb35/0x1480
[  502.059440][   T34]  ? trace_page_fault_user+0x84/0x1e0
[  502.059455][   T34]  exc_page_fault+0x6a/0xc0
[  502.059468][   T34]  asm_exc_page_fault+0x26/0x30
[  502.059479][   T34] RIP: 0033:0x7f1d55c72809
[  502.059489][   T34] RSP: 002b:00007ffc20060000 EFLAGS: 00010202
[  502.059499][   T34] RAX: 0000001b33b24000 RBX: 0000000000000000 RCX: 00000000005ffde8
[  502.059507][   T34] RDX: 0000001b33b23ffc RSI: 00000000005ffde8 RDI: 00007f1d56b55700
[  502.059515][   T34] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f1d56012000
[  502.059523][   T34] R10: 00007f1d56b55700 R11: 0000000000000000 R12: 0000000000000000
[  502.059530][   T34] R13: 0000000000009aa9 R14: ffffffff816d7400 R15: 00007f1d56b55720
[  502.059539][   T34]  ? fpregs_activate+0x90/0x1e0
[  502.059563][   T34]  </TASK>
[  502.059570][   T34] 
[  502.059570][   T34] Showing all locks held in the system:
[  502.059606][   T34] locks held by khungtaskd/34: 1, last CPU#0:
[  502.059692][   T34]  #0: ffffffff8ed5c2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  502.059810][   T34] locks held by kworker/u8:9/3291: 4, on CPU#0:
[  502.059820][   T34]  #0: ffff888020abd948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  502.059855][   T34]  #1: ffffc9000dcd7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  502.059889][   T34]  #2: ffff88807fe600e8 (&type->s_umount_key#35){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0
[  502.059925][   T34]  #3: ffff88807fe6ec98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0
[  502.112139][   T34] locks held by kworker/u8:10/3320: 3, last CPU#0:
[  502.112151][   T34]  #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  502.112191][   T34]  #1: ffffc9000dc37c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  502.112233][   T34]  #2: ffff88807afc6258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30
[  502.112372][   T34] locks held by klogd/4966: 1, last CPU#0:
[  502.112380][   T34]  #0: ffffffff8eeaf0d0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  502.112439][   T34] locks held by getty/5372: 2, on CPU#0:
[  502.112448][   T34]  #0: ffff88807fddb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  502.112546][   T34]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  502.112593][   T34] locks held by syz-executor/5599: 3, on CPU#0:
[  502.112601][   T34]  #0: ffff8880749c2308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  502.112637][   T34]  #1: ffff88807fe60558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0
[  502.112668][   T34]  #2: ffff88807fe6c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  502.112726][   T34] locks held by syz.3.1960/11211: 3, on CPU#0:
[  502.112735][   T34]  #0: ffff88807fdc2d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  502.112769][   T34]  #1: ffff88807fe60558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0
[  502.112800][   T34]  #2: ffff88807fe6c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  502.112830][   T34] locks held by syz.0.1966/11229: 3, on CPU#0:
[  502.112839][   T34]  #0: ffff8880348816c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  502.112872][   T34]  #1: ffff88807fe60558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0
[  502.112903][   T34]  #2: ffff88807fe6c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  502.112933][   T34] locks held by syz.4.1968/11232: 3, on CPU#0:
[  502.112944][   T34]  #0: ffff888025d53448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  502.112977][   T34]  #1: ffff88807fe60558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0
[  502.113007][   T34]  #2: ffff88807fe6c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  502.113039][   T34] 
[  502.113042][   T34] =============================================
[  502.113042][   T34] 
[  502.113049][   T34] NMI backtrace for cpu 0
[  502.113058][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  502.113071][   T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  502.113078][   T34] Call Trace:
[  502.113084][   T34]  <TASK>
[  502.113091][   T34]  dump_stack_lvl+0xe8/0x150
[  502.113109][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  502.113145][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  502.113166][   T34]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  502.113184][   T34]  sys_info+0x135/0x170
[  502.113215][   T34]  watchdog+0x1058/0x10d0
[  502.113247][   T34]  ? watchdog+0x209/0x10d0
[  502.113265][   T34]  kthread+0x38b/0x480
[  502.113279][   T34]  ? __pfx_watchdog+0x10/0x10
[  502.113292][   T34]  ? __pfx_kthread+0x10/0x10
[  502.113306][   T34]  ret_from_fork+0x514/0xb70
[  502.113320][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  502.113331][   T34]  ? __switch_to+0xc78/0x1410
[  502.113348][   T34]  ? __pfx_kthread+0x10/0x10
[  502.113361][   T34]  ret_from_fork_asm+0x1a/0x30
[  502.113386][   T34]  </TASK>
[  502.113394][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  504.163085][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  504.172289][   T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  504.182337][   T34] Call Trace:
[  504.185611][   T34]  <TASK>
[  504.188537][   T34]  vpanic+0x26f/0x710
[  504.192524][   T34]  panic+0xc5/0xd0
[  504.196244][   T34]  ? __pfx_panic+0x10/0x10
[  504.200655][   T34]  ? nmi_cpu_backtrace+0x2b0/0x2d0
[  504.205781][   T34]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  504.211949][   T34]  watchdog+0x10cc/0x10d0
[  504.216293][   T34]  ? watchdog+0x209/0x10d0
[  504.220715][   T34]  kthread+0x38b/0x480
[  504.224794][   T34]  ? __pfx_watchdog+0x10/0x10
[  504.229465][   T34]  ? __pfx_kthread+0x10/0x10
[  504.234052][   T34]  ret_from_fork+0x514/0xb70
[  504.238648][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  504.243761][   T34]  ? __switch_to+0xc78/0x1410
[  504.248455][   T34]  ? __pfx_kthread+0x10/0x10
[  504.253214][   T34]  ret_from_fork_asm+0x1a/0x30
[  504.257997][   T34]  </TASK>
[  504.261080][   T34] Kernel Offset: disabled
[  504.265397][   T34] Rebooting in 86400 seconds..