last executing test programs:

3m11.967032796s ago: executing program 3 (id=1178):
syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x8010, &(0x7f0000000040), 0x4, 0x9863, &(0x7f00000133c0)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00')

3m10.890227195s ago: executing program 3 (id=1191):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
migrate_pages(r0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272)

3m10.134571091s ago: executing program 3 (id=1195):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f00000003c0)={[{@shortname_win95}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@fat=@nfs_stale_rw}, {@fat=@nocase}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlate}]}, 0x82, 0x350, &(0x7f0000000580)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)

3m9.534716549s ago: executing program 3 (id=1197):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x14084, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x483, &(0x7f00000006c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x8010, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

3m8.591530478s ago: executing program 3 (id=1203):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x3d, 0x0, 0x3, 0x4}, {}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {0x6}]})

3m7.779050505s ago: executing program 3 (id=1215):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x50, r1, 0x511, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40850}, 0x0)

3m7.409794587s ago: executing program 32 (id=1215):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x50, r1, 0x511, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40850}, 0x0)

3m7.403823468s ago: executing program 1 (id=1218):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r1, 0xc048aec8, &(0x7f00000001c0)={0x1, 0xffffffffffffffff, 0x1})

3m7.132065015s ago: executing program 1 (id=1222):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)

3m6.891207619s ago: executing program 1 (id=1223):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161440, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0)

3m6.581201944s ago: executing program 1 (id=1224):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x800800, &(0x7f0000000580)=ANY=[@ANYBLOB='fmask=00000000000000000001000,iocharset=cp857,iocharset=macgreek,errors=continue,namecase=1,iocharset=macgaelic,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e616d65636173653d312c6572726f72733d636f6e74696e75652c666d61736b3d30303030303030303030303030303030303030303030372c696f636861727365743d6d616363656e746575726f2c000207e62f701eac0510b4e7d03388821904cfbbbfb6c4fceff4691745eae321f9"], 0x1, 0x152e, &(0x7f0000003e40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)

3m6.071249711s ago: executing program 1 (id=1226):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "85e14e18"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}]}}, 0x0}, 0x0)

3m4.694240919s ago: executing program 1 (id=1234):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c05, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3d7, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002207000000a9"], 0x0}, 0x0)

3m4.070183386s ago: executing program 33 (id=1234):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c05, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3d7, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002207000000a9"], 0x0}, 0x0)

8.200299459s ago: executing program 2 (id=2783):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
utime(0x0, 0x0)

6.698591595s ago: executing program 0 (id=2791):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001880)={[{@dmask={'dmask', 0x3d, 0x8}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@gid={'gid', 0x3d, 0xee01}}, {@errors_remount}, {@keep_last_dots}, {@keep_last_dots}, {@keep_last_dots}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$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")
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
chdir(&(0x7f0000000100)='./file0\x00')
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f)

6.3261246s ago: executing program 0 (id=2794):
io_setup(0x6, &(0x7f00000003c0)=<r0=>0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}])
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x9, @SEQ_NOTEON=@note=0x16})

6.098927869s ago: executing program 0 (id=2795):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x18}}], 0x1, 0x4000040)

5.996756952s ago: executing program 0 (id=2796):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f00000002c0), 0x1, 0x55ae, &(0x7f0000005600)="$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")
lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x6)

5.979753974s ago: executing program 2 (id=2797):
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(0x0, &(0x7f00000000c0)=[{0x1, 0x0, 0x800}, {0x2, 0x0, 0x1400}], 0x2)
semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x0, 0x800}, {0x4, 0x5}], 0x2, 0x0)

5.838273607s ago: executing program 2 (id=2798):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000400)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@max_inline={'max_inline', 0x3d, [0x30, 0x30, 0x31, 0x74, 0x39, 0x0]}}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x32]}}, {@barrier}, {@nospace_cache}], [{@smackfsdef}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1618c2, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x4, 0x7, 0xa}}, 0x28)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x4020940d, &(0x7f0000000440)={0x4})

4.314217446s ago: executing program 0 (id=2804):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f0000000180)={[{@nodiscard}, {@nocheckpoint_merge}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@errors_remount}, {@noflush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@fastboot}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@grpjquota}, {@checkpoint_diasble}]}, 0x5, 0x550e, &(0x7f00000020c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DKJjT9WPRWdRc/sEtZ9eBJ0ySN2U0ypUnT2pMHj+LB/0QUPHn0b/Dg2Zt4ULwJSmYmul0VhE0bu/39YPLM++bNM88bloVnpiSAM2s++fXnUlyLSxExGxFXI7LzUnFk1vPwXERcj4iZh45SMf/nxPmIuBwR10bJ85yl4q3Pbw5vrP305i/ffHfh3JUvvv5+ersGpu35iOju5Of73TymrTzeL+Zrw3YWu6vDIuZvdB8U4zSP+82tLMN+bbyulsWVVr4+3dnrj+J2p1YfxVZ7O5vf6eUX7A9b4zzZB+7XdrNxo7mVxXY/zWLrMK/r4DD/v+2wP8jzNIp8H2XpYzAYx3y+edDM97PzIIv13qCYz/OmjebBKA6LWFwu6mmnkdWx9Tjf9P/bW+3e3kEybO7222kvWatUX6xUb5Wru2mjOWiulmvdxq3VZKHVGS0rD5q17norTVudZqWedheThVa9Xq5Wk4Xbza12rZdUq5WVylJ5bbE4u5m8dvfdpNNIFkbxlXZvb9Du9JPtdDfJP7GYLFdWXlpMblSTtzc2k817d+5sbL7z/u337r688carxaK/lfVCLC8tL5erS+Xl6uIZ2v8nRdHJwsT2D4+lNO0CAE4f/T8wDcfX/+/eizj+/j/0/xNxqvrfcVmP9L8fnvH9w9To/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzqwf5r58PTuZz8dXivmniqlninEpImYi4vd/MBvnj+ScLfLM/cv6uUdq+LYUWYbRNS4Ux+WIWC+O354+7m8BAAAAnlxffXz9s7xbz1/mp10QJym/aTNz9YMJ5StFxNz8jxPKNjN6eXZCybJ/3+fiYELZshtYFyeULL/ldm5S2f6T2SPh4kOhlIeZEy0HAAA4EUc7gZPtQgAAADhJn067AKajFONHmeNnwdlf3v/1QPDSkREAAABwCpWmXQAAAABw7LL+3+//AQAAwJMt//0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/Gzwwv7TotXet5W9QRlbwh73GFFAmqCAHEgLaYAayC0lRBDhcQhEHCJ5bCvR90nOZCzz4w2Cw8xIAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpvlovbq9+X7fN2e3byTMaAAAA4JJttV7U/8xS/2tz/3tz62fTLyKijIhLc/dRfDrLHDU51cvzN6fPV69quIuoEw7vMWmuLxHxp7kef3T9KQAAAMDHtVmu5mm2nv7Mhi6IPqVFm/Lb30x5RURUs4dMaeUh71emsPr7PY7/mdLqBaxpprC05DbOlfYm9c/9uGo3PWmK1JQXX3YsMtvYAQCAHo3Omn5nIQAAAPTp39AFMIwinrcyj1uBk9Q023ufz3oAAADAO1QMXQAAAADQuXr+39P5f3vn/wEAAMAw0vl/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdGlbrReb5WreNme3byfPaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4In9eUeBEAiDMNi7vjOZ+x9WGjQ1NakC4eNvDAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADe/O4v/yemxplk7rWx9DySrJ0aW6fG3rlx9Ifx9WsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvbnJQVCIAiiYM7430nf/7CSoGcQIQIaHlXUogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC/63S//J6bGmWTutLF0PJKsXTW2rhp7DxpHD8bbvwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbu5zWOKg4A+JudnU1bFdcqe4iIggcFsdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/oecWcom3HPYQwbMyv3YnP8D118wm+XzgzfvuMMz7vlkI+c57CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl8dvTOE4P3TxuFece7d5bSfvH+/rUg42txbSlcVRn0kfDC9UPUW8S7jaRDAAAACdDXNb3IYTtZHMp7VvdrP5PymvSmv/bp/K4rOf31/1lX9b+afvl553nJgN183HSm15bHQ3PH0yl/f/Ncr49/ZdXtLMnn717ibMvpPXe+rPjJHue0dcPH77TycKFOrIFAP6Jc2VfBOXvQ2k/aDIxAE6MdqXwLuv/uNtsTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1GK+HJ8o4CiEstqdx6vHuvZXD+gcbW4tlu3z//kb4cnrP9BZJCOHa6mh4vtbZzLfbd+7eWB6NhrfqD14MITQ1+lvF9G98MMPFITTyfAT/TfDHQvFlz0k+RyRo8IcSAADHUlK0tK7fTjaX0nPRayGE7/bW/69U4jBj/b/z4eVH1bGq9f+gthnOv/7azU/7t+/cfX315vL14fXhx29cGLw5uHjl0qUr/exdSd8bEwAAAP6dTtGq9X/r7MH1/zOVOMxY/3/2zeCL6lix+n+vU3k3XfRrOiEAAICT7ZmXfv8tOuR81OmEz5fX1m4N8uPk84X82ECqf9tC0ar1f3y26awAAACAOozXoz3r/1crcZhx/f/J75//sXrPOIRwulj/P7fyyehqfdOZa3X8OXHTcwQAAKBZp4tWXf9Psv3/rcmWh1YI4dWX87j4N4Az1f/xu1/9UB2ruv//Yn1TnEutXv48sr4XQrvXdEYAAAAcZ6eKlhb7vyabSx/9dOb9jv3/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHX7MwAA//8Wtz96")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x10000, 0x20000)
fallocate(r0, 0x10, 0xc04, 0x4)

4.05892322s ago: executing program 2 (id=2805):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xeff, 0x7, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.142948343s ago: executing program 5 (id=2810):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@user_xattr}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x44d, &(0x7f0000000cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)=ANY=[])

2.985471318s ago: executing program 2 (id=2812):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c)
sendto$inet6(r0, &(0x7f00000005c0)="ecf839f3bd", 0x5, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x7, 0x1, 0x9, 0xe, 0x3, 0x3ff, 0xe, {0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x6, 0x2, 0x9, 0x7, 0x9}}, &(0x7f0000000080)=0xb0)

2.673459639s ago: executing program 5 (id=2814):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x40000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)

2.624644659s ago: executing program 6 (id=2815):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2.34712871s ago: executing program 4 (id=2817):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x316575}})

2.105085912s ago: executing program 2 (id=2818):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xdf)

2.093948943s ago: executing program 4 (id=2819):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x16)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.079970241s ago: executing program 5 (id=2820):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}]}, 0x3c}}, 0x0)

2.030280917s ago: executing program 0 (id=2821):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f00000002c0)={[{@datacow}, {@rescan_uuid_tree}, {@compress_force}, {@space_cache_v2}, {@ssd}, {}, {@clear_cache}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1f7)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

1.801010018s ago: executing program 5 (id=2822):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14)

1.79689421s ago: executing program 4 (id=2823):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

1.572191766s ago: executing program 4 (id=2824):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000380)="f23f", 0x2, 0x4040881, &(0x7f0000000200)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)

1.474743408s ago: executing program 6 (id=2825):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000440)=0xb8)

1.473889052s ago: executing program 5 (id=2826):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000d, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)

1.395904382s ago: executing program 4 (id=2827):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0xffffff3f, 0x5, 0x7}, @NL80211_ATTR_MESH_ID]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004084}, 0x0)

1.264191987s ago: executing program 6 (id=2828):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x2000000, 0x6a, 0x0, &(0x7f00000009c0)="000035b1d44d1de88000000000000082012200ffdae2b349d07a51c9e3ec6c7dfcf095c3106d028e04fb826d545d2ba75e653ccdc0fe123cf9593681e817bb88b7ad3ce6134a9378880071f1d1f8558237910ec8bc8963d672966b05a90c6e74e66876198dacb5f9ca3b", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x3c)

1.132487577s ago: executing program 4 (id=2829):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000001c0)='P')

1.055918242s ago: executing program 6 (id=2830):
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f0000000340)={[{@creator={'creator', 0x3d, "0448dc1a"}}, {@barrier}, {@gid}, {@uid}, {}, {@part={'part', 0x3d, 0x2}}, {@gid}, {@type={'type', 0x3d, "0da5b329"}}, {@nobarrier}, {@nobarrier}]}, 0x20, 0x6fe, &(0x7f0000000c00)="$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")
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

856.290803ms ago: executing program 6 (id=2831):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000084}]})

599.262109ms ago: executing program 5 (id=2832):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000140)={[{@nojournal_checksum}, {@user_xattr}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@mblk_io_submit}, {}]}, 0x1, 0x784, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x800, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0xfff, 0x7fffffff800, 0x1, 0x2})

435.237388ms ago: executing program 6 (id=2833):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, 0x0, 0x0)

0s ago: executing program 34 (id=2833):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

: Read-only file system
[  312.424046][    C0] vcan0: j1939_tp_rxtimer: 0xffff888055341c00: rx timeout, send abort
[  312.435659][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055341c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  312.510910][T12655] loop5: detected capacity change from 0 to 40427
[  312.539786][T11398] udevd[11398]: symlink '../../loop6' '/dev/disk/by-diskseq/820.tmp-b7:6' failed: Read-only file system
[  312.572389][T12655] F2FS-fs (loop5): build fault injection rate: 771
[  312.605977][T12655] F2FS-fs (loop5): invalid crc value
[  312.634129][T12683] netlink: 'syz.0.2289': attribute type 1 has an invalid length.
[  312.647692][T12683] netlink: 'syz.0.2289': attribute type 2 has an invalid length.
[  312.681019][ T6189] udevd[6189]: symlink '../../loop0' '/dev/disk/by-diskseq/816.tmp-b7:0' failed: Read-only file system
[  312.686014][T12683] netlink: 16074 bytes leftover after parsing attributes in process `syz.0.2289'.
[  312.708141][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/817.tmp-b7:4' failed: Read-only file system
[  312.824046][ T5838] udevd[5838]: symlink '../../loop2' '/dev/disk/by-diskseq/810.tmp-b7:2' failed: Read-only file system
[  312.843657][T11398] udevd[11398]: symlink '../../loop5' '/dev/disk/by-diskseq/821.tmp-b7:5' failed: Read-only file system
[  312.881498][T12655] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  312.922481][T11398] udevd[11398]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system
[  312.981185][T12655] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  313.179143][T12704] loop4: detected capacity change from 0 to 128
[  313.229998][T12704] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  313.263918][T12704] hpfs: filesystem error: improperly stopped
[  313.269974][T12704] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  313.382534][T12704] hpfs: You really don't want any checks? You are crazy...
[  313.417484][T12704] hpfs: hpfs_map_sector(): read error
[  313.423798][T12704] hpfs: code page support is disabled
[  313.442830][T12704] hpfs: hpfs_map_4sectors(): unaligned read
[  313.465466][T12704] hpfs: hpfs_map_4sectors(): unaligned read
[  313.474125][T12704] hpfs: filesystem error: unable to find root dir
[  313.494575][T12710] loop0: detected capacity change from 0 to 1024
[  313.542254][T12710] EXT4-fs (loop0): bad geometry: block count 4294901760 exceeds size of device (512 blocks)
[  313.815895][T12722] loop6: detected capacity change from 0 to 256
[  313.887175][T12722] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d)
[  314.521513][T12743] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2307'.
[  314.699522][T12721] loop4: detected capacity change from 0 to 32768
[  314.754288][T12721] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2299 (12721)
[  314.817911][T12721] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  314.870486][T12721] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm
[  314.990020][T12769] loop5: detected capacity change from 0 to 256
[  315.015284][T12769] exfat: Deprecated parameter 'utf8'
[  315.030697][T12769] exfat: Deprecated parameter 'namecase'
[  315.048235][T12721] BTRFS info (device loop4): enabling ssd optimizations
[  315.085029][T12769] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  315.090717][T12721] BTRFS info (device loop4): turning on async discard
[  315.144395][T12769] exFAT-fs (loop5): failed to test first cluster bit of root dir(5)
[  315.173521][T12721] BTRFS info (device loop4): enabling free space tree
[  315.504322][ T5827] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  315.570068][T12794] loop6: detected capacity change from 0 to 128
[  315.649012][T12794] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  315.665046][T12794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  316.873888][   T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  317.058231][   T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  317.084082][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.109466][   T24] usb 3-1: Product: syz
[  317.123807][   T24] usb 3-1: Manufacturer: syz
[  317.132878][   T24] usb 3-1: SerialNumber: syz
[  317.178035][   T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  317.195533][ T5834] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  317.265635][ T6189] udevd[6189]: symlink '../../loop4' '/dev/disk/by-diskseq/833.tmp-b7:4' failed: Read-only file system
[  317.296207][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.382699][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/833.tmp-b7:4' failed: Read-only file system
[  317.414147][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  317.528568][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/833.tmp-b7:4' failed: Read-only file system
[  317.564188][T12834] loop6: detected capacity change from 0 to 40427
[  317.576515][T12834] F2FS-fs (loop6): invalid crc value
[  317.584712][    T9] usb 6-1: Using ep0 maxpacket: 32
[  317.592986][T12844] loop4: detected capacity change from 0 to 16
[  317.606985][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  317.625612][T12844] erofs (device loop4): mounted with root inode @ nid 36.
[  317.644037][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  317.658875][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  317.689431][   T30] audit: type=1800 audit(317.631:122): pid=12844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2346" name="file1" dev="loop4" ino=86 res=0 errno=0
[  317.690990][ T6189] udevd[6189]: symlink '../../loop4' '/dev/disk/by-diskseq/836.tmp-b7:4' failed: Read-only file system
[  317.714282][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  317.734094][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  317.751378][    T9] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  317.760946][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.772823][    T9] usb 6-1: Product: syz
[  317.779707][ T6189] udevd[6189]: symlink '../../loop4' '/dev/disk/by-uuid/de08ee7d-c14c-4657-8f5d-a5ca07e02e09.tmp-b7:4' failed: Read-only file system
[  317.797191][    T9] usb 6-1: Manufacturer: syz
[  317.801834][    T9] usb 6-1: SerialNumber: syz
[  317.814632][    T9] usb 6-1: config 0 descriptor??
[  317.825357][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/835.tmp-b7:6' failed: Read-only file system
[  317.849277][T12834] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  317.862242][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:6' failed: Read-only file system
[  317.887197][T12834] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  317.896202][ T6189] udevd[6189]: symlink '../../loop4' '/dev/disk/by-diskseq/836.tmp-b7:4' failed: Read-only file system
[  317.941221][T12851] /dev/nullb0: Can't open blockdev
[  317.966885][ T6189] udevd[6189]: symlink '../../loop4' '/dev/disk/by-diskseq/836.tmp-b7:4' failed: Read-only file system
[  317.975797][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/835.tmp-b7:6' failed: Read-only file system
[  317.991286][   T30] audit: type=1800 audit(317.941:123): pid=12834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2341" name="bus" dev="loop6" ino=10 res=0 errno=0
[  318.019163][T12848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.041551][    T9] iforce 6-1:0.0: usb_submit_urb failed: -32
[  318.048597][T12848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.057530][    T9] iforce 6-1:0.0: usb_submit_urb failed: -32
[  318.211686][ T9337] syz-executor: attempt to access beyond end of device
[  318.211686][ T9337] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  318.231175][ T9337] CPU: 0 UID: 0 PID: 9337 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  318.231204][ T9337] Tainted: [L]=SOFTLOCKUP
[  318.231211][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  318.231221][ T9337] Call Trace:
[  318.231229][ T9337]  <TASK>
[  318.231240][ T9337]  dump_stack_lvl+0x189/0x250
[  318.231267][ T9337]  ? __pfx_dump_stack_lvl+0x10/0x10
[  318.231287][ T9337]  ? __pfx_queue_work_on+0x10/0x10
[  318.231304][ T9337]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  318.231327][ T9337]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  318.231361][ T9337]  f2fs_handle_critical_error+0x37c/0x540
[  318.231386][ T9337]  f2fs_write_end_io+0x886/0xb60
[  318.231423][ T9337]  __submit_merged_bio+0x256/0x660
[  318.231448][ T9337]  __submit_merged_write_cond+0x269/0x530
[  318.231472][ T9337]  f2fs_write_data_pages+0x2756/0x3290
[  318.231524][ T9337]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  318.231596][ T9337]  ? is_bpf_text_address+0x292/0x2b0
[  318.231612][ T9337]  ? is_bpf_text_address+0x26/0x2b0
[  318.231631][ T9337]  ? __lock_acquire+0x6b6/0x2cf0
[  318.231664][ T9337]  ? __lock_acquire+0x6b6/0x2cf0
[  318.231691][ T9337]  ? do_raw_spin_lock+0x121/0x290
[  318.231723][ T9337]  ? do_raw_spin_unlock+0x122/0x240
[  318.231745][ T9337]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  318.231766][ T9337]  do_writepages+0x32e/0x550
[  318.231799][ T9337]  ? do_raw_spin_unlock+0x122/0x240
[  318.231823][ T9337]  filemap_fdatawrite+0x199/0x240
[  318.231843][ T9337]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  318.231906][ T9337]  ? do_raw_spin_unlock+0x122/0x240
[  318.231931][ T9337]  f2fs_sync_dirty_inodes+0x30f/0x810
[  318.231968][ T9337]  f2fs_write_checkpoint+0x935/0x2430
[  318.232014][ T9337]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  318.232096][ T9337]  kill_f2fs_super+0x2d2/0x6c0
[  318.232124][ T9337]  ? __pfx_kill_f2fs_super+0x10/0x10
[  318.232160][ T9337]  ? shrinker_free+0x2ce/0x3e0
[  318.232182][ T9337]  deactivate_locked_super+0xbc/0x130
[  318.232206][ T9337]  cleanup_mnt+0x425/0x4c0
[  318.232229][ T9337]  ? lockdep_hardirqs_on+0x98/0x140
[  318.232249][ T9337]  task_work_run+0x1d4/0x260
[  318.232272][ T9337]  ? __pfx_task_work_run+0x10/0x10
[  318.232298][ T9337]  ? exit_to_user_mode_loop+0x55/0x4f0
[  318.232317][ T9337]  exit_to_user_mode_loop+0xff/0x4f0
[  318.232333][ T9337]  ? rcu_is_watching+0x15/0xb0
[  318.232356][ T9337]  do_syscall_64+0x2e3/0xf80
[  318.232372][ T9337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.232389][ T9337]  ? clear_bhb_loop+0x60/0xb0
[  318.232409][ T9337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.232423][ T9337] RIP: 0033:0x7f5609390a77
[  318.232439][ T9337] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  318.232453][ T9337] RSP: 002b:00007ffdef665168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  318.232470][ T9337] RAX: 0000000000000000 RBX: 00007f5609413d7d RCX: 00007f5609390a77
[  318.232480][ T9337] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdef665220
[  318.232490][ T9337] RBP: 00007ffdef665220 R08: 0000000000000000 R09: 0000000000000000
[  318.232498][ T9337] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdef6662b0
[  318.232508][ T9337] R13: 00007f5609413d7d R14: 000000000004da60 R15: 00007ffdef6662f0
[  318.232538][ T9337]  </TASK>
[  318.232636][ T9337] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  318.265287][ T5834] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  318.265507][ T5834] ath9k_htc: Failed to initialize the device
[  318.272020][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  318.308340][ T5834] usb 3-1: ath9k_htc: USB layer deinitialized
[  318.334446][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  318.549095][ T5834] usb 3-1: USB disconnect, device number 12
[  318.678192][T12857] loop0: detected capacity change from 0 to 16
[  318.699019][T12857] erofs (device loop0): mounted with root inode @ nid 36.
[  318.733317][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  318.748431][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  318.764866][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  318.771701][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  318.801016][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  318.815945][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  318.842726][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  318.860733][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  318.885151][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  318.908724][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  318.917298][T12859] erspan0: entered promiscuous mode
[  318.932921][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  318.955962][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  318.972589][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  319.002992][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  319.026528][    T9] iforce 6-1:0.0: usb_submit_urb failed: -71
[  319.032603][    T9] input input14: Timeout waiting for response from device.
[  319.079158][T12855] loop4: detected capacity change from 0 to 32768
[  319.093518][    T9] usb 6-1: USB disconnect, device number 7
[  319.135280][T12855] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2349 (12855)
[  319.207062][T12855] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  319.245049][T12855] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  319.298057][T12861] program syz.5.2353 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  319.516732][T12886] loop5: detected capacity change from 0 to 128
[  319.544444][T12855] BTRFS info (device loop4): enabling ssd optimizations
[  319.593912][T12855] BTRFS info (device loop4): turning on async discard
[  319.600735][T12855] BTRFS info (device loop4): enabling free space tree
[  319.776603][ T5827] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  320.206475][T12869] loop2: detected capacity change from 0 to 32768
[  320.242131][T12869] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2355 (12869)
[  320.315420][T12869] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  320.376639][T12869] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  320.520676][T12869] BTRFS info (device loop2): enabling ssd optimizations
[  320.537548][T12869] BTRFS info (device loop2): turning on async discard
[  320.553914][T12869] BTRFS info (device loop2): enabling free space tree
[  320.580374][T12869] BTRFS info (device loop2): use lzo compression, level 1
[  320.640817][T12890] loop6: detected capacity change from 0 to 32768
[  320.688823][T12890] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2359 (12890)
[  320.753084][T12890] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  320.783887][T12890] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  320.787937][T12869] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4)
[  320.981536][T12890] BTRFS info (device loop6): rebuilding free space tree
[  321.083575][T12890] BTRFS info (device loop6): disabling free space tree
[  321.129271][ T5836] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  321.140010][T12890] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  321.140642][T12896] loop4: detected capacity change from 0 to 40427
[  321.164152][T12896] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  321.181747][T12896] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  321.194888][T12896] F2FS-fs (loop4): invalid crc value
[  321.199141][T12940] 8021q: adding VLAN 0 to HW filter on device bond1
[  321.210359][T12890] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  321.270081][T12890] BTRFS info (device loop6): setting nodatasum
[  321.288117][T12940] bond0: (slave bond1): Enslaving as an active interface with an up link
[  321.302940][T12890] BTRFS info (device loop6): setting nodatacow
[  321.347571][T12890] BTRFS info (device loop6): turning off barriers
[  321.376074][T12890] BTRFS info (device loop6): force clearing of disk cache
[  321.455752][T12896] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  321.476076][T12896] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  321.506125][T12896] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  321.678188][T12896] syz.4.2361: attempt to access beyond end of device
[  321.678188][T12896] loop4: rw=8390659, sector=36912, nr_sectors = 8152 limit=40427
[  321.712778][ T9337] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  321.766520][T12896] syz.4.2361: attempt to access beyond end of device
[  321.766520][T12896] loop4: rw=8390659, sector=45096, nr_sectors = 85976 limit=40427
[  322.076308][T12896] F2FS-fs (loop4): Issue discard(4614, 4614, 1019) failed, ret: -5
[  322.107448][T12896] F2FS-fs (loop4): Issue discard(5637, 5637, 10747) failed, ret: -5
[  322.391281][T12958] loop2: detected capacity change from 0 to 4096
[  322.417337][ T5838] udevd[5838]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  322.472550][T12958] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  322.481440][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/847.tmp-b7:4' failed: Read-only file system
[  322.509846][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/847.tmp-b7:4' failed: Read-only file system
[  322.530281][T12958] ntfs3(loop2): Failed to load $Extend (-22).
[  322.536631][T12958] ntfs3(loop2): Failed to initialize $Extend.
[  322.570181][ T8255] udevd[8255]: symlink '../../loop6' '/dev/disk/by-diskseq/849.tmp-b7:6' failed: Read-only file system
[  322.609265][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/850.tmp-b7:4' failed: Read-only file system
[  322.626847][ T6189] udevd[6189]: symlink '../../loop2' '/dev/disk/by-diskseq/851.tmp-b7:2' failed: Read-only file system
[  322.677012][ T6189] udevd[6189]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  322.726718][ T6189] udevd[6189]: symlink '../../loop2' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:2' failed: Read-only file system
[  322.838225][T12966] loop6: detected capacity change from 0 to 256
[  322.839556][ T5838] udevd[5838]: symlink '../../loop0' '/dev/disk/by-diskseq/839.tmp-b7:0' failed: Read-only file system
[  322.897602][T12966] FAT-fs (loop6): Directory bread(block 64) failed
[  322.923707][ T8255] udevd[8255]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  322.947334][T12966] FAT-fs (loop6): Directory bread(block 65) failed
[  322.995052][T12966] FAT-fs (loop6): Directory bread(block 66) failed
[  323.001632][T12966] FAT-fs (loop6): Directory bread(block 67) failed
[  323.079280][T12973] loop4: detected capacity change from 0 to 512
[  323.119804][T12966] FAT-fs (loop6): Directory bread(block 68) failed
[  323.156885][T12966] FAT-fs (loop6): Directory bread(block 69) failed
[  323.163541][T12966] FAT-fs (loop6): Directory bread(block 70) failed
[  323.233101][T12966] FAT-fs (loop6): Directory bread(block 71) failed
[  323.243916][T12966] FAT-fs (loop6): Directory bread(block 72) failed
[  323.250474][T12966] FAT-fs (loop6): Directory bread(block 73) failed
[  323.396437][ T5911] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0
[  323.411221][ T5911] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0
[  323.432378][ T5911] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0
[  323.471456][ T5911] hid-generic 0006:0004:0009.001A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  323.626751][T12978] fido_id[12978]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  323.666926][T12980] sctp: [Deprecated]: syz.4.2382 (pid 12980) Use of int in max_burst socket option.
[  323.666926][T12980] Use struct sctp_assoc_value instead
[  323.884784][T12969] loop0: detected capacity change from 0 to 32768
[  323.990855][T12969] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  324.069090][T12969] XFS (loop0): Ending clean mount
[  324.094281][T12969] XFS (loop0): Quotacheck needed: Please wait.
[  324.238313][T12969] XFS (loop0): Quotacheck: Done.
[  324.445261][ T5828] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  324.575231][T13011] loop5: detected capacity change from 0 to 256
[  324.634279][T13011] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012064, chksum : 0xb4f3aa4f, utbl_chksum : 0xe619d30d)
[  325.273908][ T5911] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  325.443873][ T5911] usb 7-1: Using ep0 maxpacket: 32
[  325.461481][ T5911] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  325.503943][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.543086][T13039] sctp: [Deprecated]: syz.0.2404 (pid 13039) Use of int in max_burst socket option.
[  325.543086][T13039] Use struct sctp_assoc_value instead
[  325.545114][ T5911] usb 7-1: config 0 descriptor??
[  325.690613][T13019] loop4: detected capacity change from 0 to 32768
[  325.724962][T13019] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2396 (13019)
[  325.798070][T13019] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  325.809542][ T5911] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  325.824385][T13019] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  325.875421][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  325.930047][ T5911] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  325.956620][ T5911] usb 7-1: media controller created
[  325.990526][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  326.009553][T13060] loop0: detected capacity change from 0 to 512
[  326.068568][ T5911] az6027: usb out operation failed. (-71)
[  326.078522][ T5911] az6027: usb out operation failed. (-71)
[  326.080538][T13019] BTRFS info (device loop4): enabling ssd optimizations
[  326.093872][ T5911] stb0899_attach: Driver disabled by Kconfig
[  326.101428][ T5911] az6027: no front-end attached
[  326.101428][ T5911] 
[  326.109910][ T5911] az6027: usb out operation failed. (-71)
[  326.115962][ T5911] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  326.136771][ T5911] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input15
[  326.138545][T13060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.158716][ T5911] dvb-usb: schedule remote query interval to 400 msecs.
[  326.168946][ T5911] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  326.186718][T13019] BTRFS info (device loop4): turning on async discard
[  326.193627][T13019] BTRFS info (device loop4): enabling free space tree
[  326.258397][T13027] loop2: detected capacity change from 0 to 32768
[  326.279597][ T5911] usb 7-1: USB disconnect, device number 8
[  326.332673][T13055] loop5: detected capacity change from 0 to 8192
[  326.401041][T13055] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  326.440867][T13055] UDF-fs: Scanning with blocksize 512 failed
[  326.445460][ T5911] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  326.470418][T13027] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  326.480038][T13055] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  326.509770][T13055] UDF-fs: Scanning with blocksize 1024 failed
[  326.555208][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.570588][T13055] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  326.594447][T13027] XFS (loop2): Ending clean mount
[  326.649110][T13055] UDF-fs: Scanning with blocksize 2048 failed
[  326.718854][T13027] XFS (loop2): Quotacheck needed: Please wait.
[  326.737205][ T5827] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  326.766467][T13055] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  326.899258][T13027] XFS (loop2): Quotacheck: Done.
[  326.911280][   T30] audit: type=1800 audit(326.861:124): pid=13055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2408" name="file1" dev="loop5" ino=818 res=0 errno=0
[  326.989857][T13090] loop6: detected capacity change from 0 to 256
[  326.999123][T13027] XFS (loop2): User initiated shutdown received.
[  327.043286][T13027] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:472).  Shutting down filesystem.
[  327.067905][T13090] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  327.092002][   T30] audit: type=1800 audit(326.931:125): pid=13055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2408" name="file1" dev="loop5" ino=818 res=0 errno=0
[  327.166356][T13027] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  327.247988][T13090] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  327.290447][T13097] loop0: detected capacity change from 0 to 128
[  327.311311][T13090] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  327.329774][ T5836] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  327.369178][T13090] UDF-fs: Scanning with blocksize 512 failed
[  327.396689][T13097] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  327.429493][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/866.tmp-b7:6' failed: Read-only file system
[  327.455659][T13090] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  327.491845][T13004] udevd[13004]: symlink '../../loop5' '/dev/disk/by-diskseq/864.tmp-b7:5' failed: Read-only file system
[  327.508414][T13090] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  327.518910][ T8255] udevd[8255]: symlink '../../loop2' '/dev/disk/by-diskseq/863.tmp-b7:2' failed: Read-only file system
[  327.559721][ T6189] udevd[6189]: symlink '../../loop0' '/dev/disk/by-diskseq/867.tmp-b7:0' failed: Read-only file system
[  327.599168][T13004] udevd[13004]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system
[  327.627317][ T5838] udevd[5838]: symlink '../../loop2' '/dev/disk/by-diskseq/863.tmp-b7:2' failed: Read-only file system
[  327.705894][T13004] udevd[13004]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system
[  327.767539][ T5838] udevd[5838]: symlink '../../loop2' '/dev/disk/by-diskseq/868.tmp-b7:2' failed: Read-only file system
[  327.782024][ T6189] udevd[6189]: symlink '../../loop0' '/dev/disk/by-diskseq/867.tmp-b7:0' failed: Read-only file system
[  327.878772][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/866.tmp-b7:6' failed: Read-only file system
[  329.265267][T13144] kvm: kvm [13143]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x7ff
[  329.742539][T13150] loop4: detected capacity change from 0 to 4096
[  329.766828][T13135] loop6: detected capacity change from 0 to 32768
[  329.868393][T13135] JBD2: Ignoring recovery information on journal
[  330.048150][T13135] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  330.096136][T13150] ntfs3(loop4): failed to convert "0000" to cp949
[  330.246403][T13147] loop5: detected capacity change from 0 to 32768
[  330.301498][ T9337] ocfs2: Unmounting device (7,6) on (node local)
[  330.353431][T13147] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  330.401980][T13147] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  330.557421][T13147] XFS (loop5): Ending clean mount
[  330.587317][T13169] loop2: detected capacity change from 0 to 7
[  330.634236][T13147] XFS (loop5): Quotacheck needed: Please wait.
[  330.693977][T13169] Dev loop2: unable to read RDB block 7
[  330.716930][T13169]  loop2: AHDI p1 p2 p3
[  330.721479][T13171] loop4: detected capacity change from 0 to 4096
[  330.727072][T13169] loop2: partition table partially beyond EOD, truncated
[  330.749968][T13147] XFS (loop5): Quotacheck: Done.
[  330.784030][T13169] loop2: p1 start 1601398130 is beyond EOD, truncated
[  330.791440][T13169] loop2: p2 start 1702059890 is beyond EOD, truncated
[  330.816496][T13172] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  330.912666][T13147] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  331.168758][T13179] loop0: detected capacity change from 0 to 2048
[  331.253453][T13179] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  331.438758][ T9264] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  331.670239][T13182] loop4: detected capacity change from 0 to 1024
[  331.760683][T13182] EXT4-fs: Ignoring removed nobh option
[  331.931433][T13182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.064287][T13180] loop6: detected capacity change from 0 to 131072
[  332.076693][T13180] F2FS-fs (loop6): Test dummy encryption mode enabled
[  332.093323][T13180] F2FS-fs (loop6): invalid crc value
[  332.239776][T13180] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  332.271091][T13180] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  332.450176][ T5848] udevd[5848]: symlink '../../loop0' '/dev/disk/by-diskseq/883.tmp-b7:0' failed: Read-only file system
[  332.481601][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/885.tmp-b7:6' failed: Read-only file system
[  332.532230][T13004] udevd[13004]: symlink '../../loop2' '/dev/disk/by-diskseq/880.tmp-b7:2' failed: Read-only file system
[  332.545383][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:6' failed: Read-only file system
[  332.548709][T13204] netlink: 'syz.0.2444': attribute type 9 has an invalid length.
[  332.581566][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'.
[  332.612643][T13204] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  332.622310][T13204] macvlan2: entered promiscuous mode
[  332.628836][T13204] macvlan2: entered allmulticast mode
[  332.634843][T13204] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  332.640532][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.787085][T13004] udevd[13004]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  332.827824][ T5838] udevd[5838]: symlink '../../loop2' '/dev/disk/by-diskseq/880.tmp-b7:2' failed: Read-only file system
[  332.865367][T13004] udevd[13004]: symlink '../../loop4' '/dev/disk/by-diskseq/884.tmp-b7:4' failed: Read-only file system
[  332.892758][T13210] loop4: detected capacity change from 0 to 764
[  332.908369][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/885.tmp-b7:6' failed: Read-only file system
[  332.949774][ T5838] udevd[5838]: symlink '../../loop5' '/dev/disk/by-diskseq/886.tmp-b7:5' failed: Read-only file system
[  332.953796][ T6189] udevd[6189]: symlink '../../loop0' '/dev/disk/by-diskseq/883.tmp-b7:0' failed: Read-only file system
[  333.001229][T13210] rock: directory entry would overflow storage
[  333.034523][T13210] rock: sig=0x5850, size=36, remaining=7
[  333.350127][T13223] loop0: detected capacity change from 0 to 4096
[  333.392737][T13223] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  333.413950][ T5834] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  333.519264][T13223] ntfs3(loop0): ino=19, mi_enum_attr
[  333.555075][T13223] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  333.590603][ T5834] usb 7-1: unable to get BOS descriptor or descriptor too short
[  333.612984][ T5834] usb 7-1: not running at top speed; connect to a high speed hub
[  333.672853][T13232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2457'.
[  333.672941][ T5834] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  333.723600][ T5834] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  333.756440][ T5834] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  333.777960][ T5834] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  333.804019][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.853766][ T5834] usb 7-1: Product: syz
[  333.858804][ T5834] usb 7-1: Manufacturer: syz
[  333.863505][ T5834] usb 7-1: SerialNumber: syz
[  334.203861][T13226] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  334.249589][T13226] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  334.294001][T13226] F2FS-fs (loop4): invalid crc value
[  334.682563][T13246] EXT4-fs: Ignoring removed nomblk_io_submit option
[  334.726416][ T5834] usb 7-1: 0:2 : does not exist
[  334.753102][T13246] EXT4-fs: Ignoring removed oldalloc option
[  334.827887][T13246] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.2462: Parent and EA inode have the same ino 15
[  334.960622][T13246] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.2462: Parent and EA inode have the same ino 15
[  334.979124][T13246] EXT4-fs (loop5): 1 orphan inode deleted
[  335.001588][T13246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.017246][T13226] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  335.030154][ T5912] usb 7-1: USB disconnect, device number 9
[  335.060923][T13226] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  335.083360][T13226] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  335.112479][ T9264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.153119][T13240] set_capacity_and_notify: 2 callbacks suppressed
[  335.153138][T13240] loop0: detected capacity change from 0 to 32768
[  335.264404][T13240] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  335.360122][T13240] XFS (loop0): Ending clean mount
[  335.399554][T13266] loop5: detected capacity change from 0 to 4096
[  335.554140][ T5828] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  335.702248][   T30] audit: type=1800 audit(335.651:126): pid=13266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2466" name="file1" dev="loop5" ino=33 res=0 errno=0
[  335.737607][T13273] loop2: detected capacity change from 0 to 2048
[  335.850568][T13273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.889871][T13273] EXT4-fs error (device loop2): ext4_xattr_block_find:1878: inode #15: comm syz.2.2471: corrupted xattr block 128: invalid ea_ino
[  336.076974][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.604426][T13302] loop5: detected capacity change from 0 to 1764
[  337.346912][T13298] loop6: detected capacity change from 0 to 32768
[  337.405930][T13298] JBD2: Ignoring recovery information on journal
[  337.457175][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/905.tmp-b7:6' failed: Read-only file system
[  337.472178][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-uuid/805fce0c-ac78-492f-ad66-cd1bf6eb4f90.tmp-b7:6' failed: Read-only file system
[  337.519789][T13004] udevd[13004]: symlink '../../loop5' '/dev/disk/by-diskseq/904.tmp-b7:5' failed: Read-only file system
[  337.530320][T13322] loop5: detected capacity change from 0 to 256
[  337.578293][T13298] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  337.687452][ T5838] udevd[5838]: symlink '../../loop0' '/dev/disk/by-diskseq/899.tmp-b7:0' failed: Read-only file system
[  337.701362][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/905.tmp-b7:6' failed: Read-only file system
[  337.704487][ T6189] udevd[6189]: symlink '../../loop2' '/dev/disk/by-diskseq/902.tmp-b7:2' failed: Read-only file system
[  337.717100][T13004] udevd[13004]: symlink '../../loop5' '/dev/disk/by-diskseq/906.tmp-b7:5' failed: Read-only file system
[  337.769617][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.778202][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-uuid/805fce0c-ac78-492f-ad66-cd1bf6eb4f90.tmp-b7:6' failed: Read-only file system
[  337.831752][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/900.tmp-b7:4' failed: Read-only file system
[  337.836094][T13004] udevd[13004]: symlink '../../loop0' '/dev/disk/by-diskseq/899.tmp-b7:0' failed: Read-only file system
[  337.955175][ T9337] ocfs2: Unmounting device (7,6) on (node local)
[  338.370044][T13334] loop5: detected capacity change from 0 to 32768
[  338.409071][T13334] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  338.417781][T13334] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  338.435180][T13334] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  338.449166][ T9753] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  338.458248][ T9753] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  338.567256][ T9753] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 109ms
[  338.625470][ T9753] gfs2: fsid=syz:syz.0: jid=0: Done
[  338.632282][T13334] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  338.667205][T13334] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[  338.677830][T13334] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[  338.693420][T13334] gfs2: fsid=syz:syz.0: G:  s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[  338.703795][T13334] gfs2: fsid=syz:syz.0:  H: s:SH f:H e:0 p:13334 [syz.5.2493] __gfs2_lookup+0x8f/0x270
[  338.714175][T13334] gfs2: fsid=syz:syz.0:  I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[  338.722618][T13334] CPU: 0 UID: 0 PID: 13334 Comm: syz.5.2493 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  338.722646][T13334] Tainted: [L]=SOFTLOCKUP
[  338.722653][T13334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  338.722664][T13334] Call Trace:
[  338.722672][T13334]  <TASK>
[  338.722678][T13334]  dump_stack_lvl+0x189/0x250
[  338.722709][T13334]  ? __pfx_dump_stack_lvl+0x10/0x10
[  338.722735][T13334]  ? __pfx__printk+0x10/0x10
[  338.722766][T13334]  gfs2_withdraw+0xc3/0x1b0
[  338.722791][T13334]  gfs2_dirent_scan+0x545/0x690
[  338.722809][T13334]  ? __pfx_gfs2_dirent_find+0x10/0x10
[  338.722830][T13334]  gfs2_dirent_search+0x2cb/0x710
[  338.722849][T13334]  ? __pfx_gfs2_dirent_find+0x10/0x10
[  338.722866][T13334]  ? __pfx___might_resched+0x10/0x10
[  338.722885][T13334]  ? __pfx_gfs2_dirent_search+0x10/0x10
[  338.722902][T13334]  ? __pfx_gfs2_permission+0x10/0x10
[  338.722929][T13334]  gfs2_dir_search+0x4c/0x220
[  338.722951][T13334]  gfs2_lookupi+0x3d9/0x5a0
[  338.722976][T13334]  ? __pfx_gfs2_lookupi+0x10/0x10
[  338.722996][T13334]  ? __gfs2_lookup+0x8f/0x270
[  338.723012][T13334]  ? d_alloc_parallel+0x14ac/0x1610
[  338.723047][T13334]  __gfs2_lookup+0x8f/0x270
[  338.723071][T13334]  ? __pfx___gfs2_lookup+0x10/0x10
[  338.723096][T13334]  ? __pfx_d_alloc_parallel+0x10/0x10
[  338.723130][T13334]  gfs2_atomic_open+0x9d/0x200
[  338.723153][T13334]  ? __pfx_gfs2_atomic_open+0x10/0x10
[  338.723170][T13334]  path_openat+0x11f8/0x3dd0
[  338.723217][T13334]  ? getname_flags+0xb8/0x540
[  338.723238][T13334]  ? __pfx_path_openat+0x10/0x10
[  338.723270][T13334]  do_filp_open+0x1fa/0x410
[  338.723288][T13334]  ? __pfx_do_filp_open+0x10/0x10
[  338.723325][T13334]  ? _raw_spin_unlock+0x28/0x50
[  338.723348][T13334]  ? alloc_fd+0x64c/0x6c0
[  338.723382][T13334]  do_sys_openat2+0x121/0x200
[  338.723409][T13334]  ? __pfx_do_sys_openat2+0x10/0x10
[  338.723440][T13334]  ? rcu_is_watching+0x15/0xb0
[  338.723467][T13334]  __x64_sys_openat+0x138/0x170
[  338.723495][T13334]  do_syscall_64+0xfa/0xf80
[  338.723513][T13334]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.723530][T13334]  ? clear_bhb_loop+0x60/0xb0
[  338.723552][T13334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.723570][T13334] RIP: 0033:0x7f601d98f749
[  338.723587][T13334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  338.723603][T13334] RSP: 002b:00007f601e907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  338.723622][T13334] RAX: ffffffffffffffda RBX: 00007f601dbe5fa0 RCX: 00007f601d98f749
[  338.723637][T13334] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c
[  338.723650][T13334] RBP: 00007f601da13f91 R08: 0000000000000000 R09: 0000000000000000
[  338.723662][T13334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  338.723674][T13334] R13: 00007f601dbe6038 R14: 00007f601dbe5fa0 R15: 00007ffc12bb33f8
[  338.723710][T13334]  </TASK>
[  339.011796][T13334] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  339.038535][ T5931] gfs2: fsid=syz:syz.0: file system withdrawn
[  339.178797][T13340] loop2: detected capacity change from 0 to 32768
[  339.187609][T13340] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2498 (13340)
[  339.226103][T13340] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  339.236581][T13340] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  339.274137][ T5834] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  339.340139][T13340] BTRFS info (device loop2): turning on async discard
[  339.351475][T13340] BTRFS info (device loop2): enabling free space tree
[  339.367431][T13340] BTRFS info (device loop2): enabling auto defrag
[  339.378826][T13340] BTRFS info (device loop2): max_inline set to 0
[  339.440963][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  339.465652][ T5834] usb 5-1: config 0 has no interfaces?
[  339.480320][ T5834] usb 5-1: New USB device found, idVendor=054c, idProduct=8df2, bcdDevice= 0.00
[  339.511912][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.567900][ T5834] usb 5-1: config 0 descriptor??
[  339.630142][T13340] BTRFS warning (device loop2): failed to trim 1 device(s), last error -512
[  339.693700][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'.
[  339.758346][ T5836] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  339.832157][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'.
[  339.833261][ T5834] usb 5-1: USB disconnect, device number 9
[  340.317970][T13386] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2510'.
[  340.355604][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2510'.
[  340.460739][T13390] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2512'.
[  340.738786][T13405] bond0: entered promiscuous mode
[  340.756934][T13405] bond_slave_0: entered promiscuous mode
[  340.773057][T13405] bond_slave_1: entered promiscuous mode
[  341.491724][T13434] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2532'.
[  342.333149][T13453] loop2: detected capacity change from 0 to 128
[  342.428976][T13453] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  342.455813][T13438] loop0: detected capacity change from 0 to 32768
[  342.465893][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/913.tmp-b7:2' failed: Read-only file system
[  342.479679][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:2' failed: Read-only file system
[  342.509676][T13453] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes
[  342.539185][T13438] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  342.568245][T13440] loop6: detected capacity change from 0 to 40427
[  342.590807][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/913.tmp-b7:2' failed: Read-only file system
[  342.594710][T13438] XFS (loop0): Ending clean mount
[  342.607644][ T5836] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  342.615804][T13440] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  342.668923][T13438] XFS (loop0): Quotacheck needed: Please wait.
[  342.699391][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:2' failed: Read-only file system
[  342.714536][T13440] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  342.716628][T13470] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2543'.
[  342.755926][T13440] F2FS-fs (loop6): invalid crc value
[  342.779634][ T6189] udevd[6189]: symlink '../../loop5' '/dev/disk/by-diskseq/910.tmp-b7:5' failed: Read-only file system
[  342.791612][T13004] udevd[13004]: symlink '../../loop0' '/dev/disk/by-diskseq/914.tmp-b7:0' failed: Read-only file system
[  342.813421][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/913.tmp-b7:2' failed: Read-only file system
[  342.857944][T13438] XFS (loop0): Quotacheck: Done.
[  342.865330][T13004] udevd[13004]: symlink '../../loop0' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:0' failed: Read-only file system
[  342.894823][   T30] audit: type=1326 audit(342.821:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bc58f749 code=0x7ffc0000
[  342.936376][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/915.tmp-b7:6' failed: Read-only file system
[  342.947378][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/913.tmp-b7:2' failed: Read-only file system
[  342.973503][   T30] audit: type=1326 audit(342.821:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bc58f749 code=0x7ffc0000
[  343.024569][   T30] audit: type=1326 audit(342.821:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f41bc58f749 code=0x7ffc0000
[  343.113827][   T30] audit: type=1326 audit(342.821:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bc58f749 code=0x7ffc0000
[  343.155590][T13440] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  343.164470][   T30] audit: type=1326 audit(342.821:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bc58f749 code=0x7ffc0000
[  343.207027][T13440] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  343.218657][   T30] audit: type=1326 audit(342.821:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41bc58df90 code=0x7ffc0000
[  343.222251][T13440] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  343.284257][   T30] audit: type=1326 audit(342.841:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41bc58df90 code=0x7ffc0000
[  343.324845][   T30] audit: type=1326 audit(342.841:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bc58f749 code=0x7ffc0000
[  343.356766][ T5828] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  343.394047][   T30] audit: type=1326 audit(342.901:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bc58f749 code=0x7ffc0000
[  343.431156][   T30] audit: type=1326 audit(342.901:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f41bc58f749 code=0x7ffc0000
[  344.109196][T13496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2546'.
[  344.145714][T13501] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2546'.
[  344.174670][T13496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2546'.
[  344.242535][T13505] loop4: detected capacity change from 0 to 128
[  344.316056][T13505] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  344.370754][T13505] hpfs: filesystem error: improperly stopped
[  344.373809][  T184] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  344.390966][T13505] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  344.411209][T13505] hpfs: You really don't want any checks? You are crazy...
[  344.434320][T13505] hpfs: hpfs_map_sector(): read error
[  344.453839][T13505] hpfs: code page support is disabled
[  344.459829][T13505] hpfs: hpfs_map_4sectors(): unaligned read
[  344.485588][T13505] hpfs: hpfs_map_4sectors(): unaligned read
[  344.491570][T13505] hpfs: filesystem error: unable to find root dir
[  344.554634][T13505] hpfs: hpfs_map_4sectors(): unaligned read
[  344.564539][  T184] usb 7-1: Using ep0 maxpacket: 32
[  344.570332][T13505] hpfs: hpfs_map_sector(): read error
[  344.581833][  T184] usb 7-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  344.604354][T13505] hpfs: hpfs_map_sector(): read error
[  344.609859][  T184] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.648370][  T184] usb 7-1: config 0 descriptor??
[  344.901484][T13517] loop4: detected capacity change from 0 to 24
[  344.918855][T13517] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  344.959871][T13517] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  344.996384][T13503] loop2: detected capacity change from 0 to 32768
[  345.053216][T13503] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2555 (13503)
[  345.112206][T13503] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  345.128033][  T184] elecom 0003:056E:00FC.001B: unknown main item tag 0x0
[  345.136222][  T184] elecom 0003:056E:00FC.001B: unknown main item tag 0x0
[  345.143332][  T184] elecom 0003:056E:00FC.001B: unknown main item tag 0x0
[  345.151450][T13503] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  345.157230][T13507] loop0: detected capacity change from 0 to 32768
[  345.165907][  T184] elecom 0003:056E:00FC.001B: unknown main item tag 0x0
[  345.174853][  T184] elecom 0003:056E:00FC.001B: unknown main item tag 0x0
[  345.182017][  T184] elecom 0003:056E:00FC.001B: unknown main item tag 0x0
[  345.214469][  T184] elecom 0003:056E:00FC.001B: unknown main item tag 0x0
[  345.248656][  T184] elecom 0003:056E:00FC.001B: unknown main item tag 0x0
[  345.263859][  T184] elecom 0003:056E:00FC.001B: unknown main item tag 0x0
[  345.281131][  T184] elecom 0003:056E:00FC.001B: unknown main item tag 0x0
[  345.347538][T13507] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  345.360209][  T184] elecom 0003:056E:00FC.001B: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.6-1/input0
[  345.387742][  T184] usb 7-1: USB disconnect, device number 10
[  345.468311][T13503] BTRFS info (device loop2): enabling ssd optimizations
[  345.488451][T13543] fido_id[13543]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  345.494579][T13503] BTRFS info (device loop2): turning on async discard
[  345.542918][T13503] BTRFS info (device loop2): enabling free space tree
[  345.571214][T13507] XFS (loop0): Ending clean mount
[  345.711600][T13551] loop5: detected capacity change from 0 to 4096
[  345.742678][ T5836] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  345.765791][T13551] ntfs3(loop5): ino=3, Correct links count -> 2.
[  345.791899][ T5828] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  346.301145][T13565] loop0: detected capacity change from 0 to 64
[  346.950440][T13555] loop4: detected capacity change from 0 to 32768
[  346.960670][T13555] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2568 (13555)
[  346.986455][T13555] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  347.024169][T13555] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  347.265638][T13555] BTRFS info (device loop4): rebuilding free space tree
[  347.277736][T13594] hub 1-0:1.0: USB hub found
[  347.310958][T13594] hub 1-0:1.0: 1 port detected
[  347.333084][T13555] BTRFS info (device loop4): enabling ssd optimizations
[  347.366935][T13555] BTRFS info (device loop4): turning off barriers
[  347.403905][T13555] BTRFS info (device loop4): disabling tree log
[  347.433864][T13555] BTRFS info (device loop4): turning on flush-on-commit
[  347.441103][T13555] BTRFS info (device loop4): enabling free space tree
[  347.449703][T13567] loop2: detected capacity change from 0 to 32768
[  347.476996][T13555] BTRFS info (device loop4): force clearing of disk cache
[  347.495970][T13555] BTRFS info (device loop4): max_inline set to 0
[  347.517255][ T5848] udevd[5848]: symlink '../../loop4' '/dev/disk/by-diskseq/931.tmp-b7:4' failed: Read-only file system
[  347.620826][ T5848] udevd[5848]: symlink '../../loop4' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:4' failed: Read-only file system
[  347.637396][ T6189] udevd[6189]: symlink '../../loop6' '/dev/disk/by-diskseq/918.tmp-b7:6' failed: Read-only file system
[  347.651414][ T5838] udevd[5838]: symlink '../../loop5' '/dev/disk/by-diskseq/929.tmp-b7:5' failed: Read-only file system
[  347.712032][ T8255] udevd[8255]: symlink '../../loop0' '/dev/disk/by-diskseq/930.tmp-b7:0' failed: Read-only file system
[  347.733629][T13004] udevd[13004]: symlink '../../loop2' '/dev/disk/by-diskseq/932.tmp-b7:2' failed: Read-only file system
[  347.765318][T13004] udevd[13004]: symlink '../../loop2' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:2' failed: Read-only file system
[  347.879371][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/918.tmp-b7:6' failed: Read-only file system
[  347.978475][T13004] udevd[13004]: symlink '../../loop2' '/dev/disk/by-diskseq/932.tmp-b7:2' failed: Read-only file system
[  348.003444][T13605] loop5: detected capacity change from 0 to 4096
[  348.076548][ T5838] udevd[5838]: symlink '../../loop0' '/dev/disk/by-diskseq/930.tmp-b7:0' failed: Read-only file system
[  348.171518][ T5827] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  348.198752][T13616] loop0: detected capacity change from 0 to 128
[  348.245161][T13616] EXT4-fs: Ignoring removed nobh option
[  348.350704][T13616] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  348.478426][T13616] fscrypt (loop0, inode 12): Sub-block data units not yet supported with IV_INO_LBLK_32
[  348.739722][ T5828] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  349.079102][T13644] loop0: detected capacity change from 0 to 1024
[  349.126858][T13650] loop5: detected capacity change from 0 to 256
[  349.157307][T13644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  349.246407][T13654] loop4: detected capacity change from 0 to 1024
[  349.298802][T13654] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  349.340282][T13654] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  349.348669][T13644] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.2597: lblock 3 mapped to illegal pblock 3 (length 3)
[  349.361266][T13650] FAT-fs (loop5): Directory bread(block 64) failed
[  349.377000][T13654] EXT4-fs (loop4): orphan cleanup on readonly fs
[  349.389808][T13654] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.2604: Invalid inode table block 0 in block_group 0
[  349.393485][T13644] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  349.423551][T13654] EXT4-fs (loop4): Remounting filesystem read-only
[  349.430719][T13654] __quota_error: 2 callbacks suppressed
[  349.430736][T13654] Quota error (device loop4): write_blk: dquota write failed
[  349.442106][T13650] FAT-fs (loop5): Directory bread(block 65) failed
[  349.460147][T13654] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  349.469718][T13650] FAT-fs (loop5): Directory bread(block 66) failed
[  349.471005][T13654] EXT4-fs (loop4): 1 truncate cleaned up
[  349.482756][T13659] syz_tun: entered allmulticast mode
[  349.490934][T13658] syz_tun: left allmulticast mode
[  349.500810][T13644] EXT4-fs (loop0): This should not happen!! Data will be lost
[  349.500810][T13644] 
[  349.502454][T13654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  349.533771][T13650] FAT-fs (loop5): Directory bread(block 67) failed
[  349.537698][T13660] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.2597: Freeing blocks not in datazone - block = 3, count = 3
[  349.549902][T13650] FAT-fs (loop5): Directory bread(block 68) failed
[  349.566409][T13650] FAT-fs (loop5): Directory bread(block 69) failed
[  349.573065][T13650] FAT-fs (loop5): Directory bread(block 70) failed
[  349.593853][T13650] FAT-fs (loop5): Directory bread(block 71) failed
[  349.616684][T13660] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.2597: Freeing blocks not in datazone - block = 0, count = 16
[  349.630437][T13650] FAT-fs (loop5): Directory bread(block 72) failed
[  349.638523][T13650] FAT-fs (loop5): Directory bread(block 73) failed
[  349.647290][T13654] EXT4-fs (loop4): shut down requested (1)
[  349.700017][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.717722][T13662] netlink: 'syz.6.2607': attribute type 25 has an invalid length.
[  349.728678][ T4288] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:12: bg 0: block 112: padding at end of block bitmap is not set
[  349.760718][T13662] netlink: 'syz.6.2607': attribute type 7 has an invalid length.
[  349.775355][ T4288] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 28
[  349.810193][ T4288] EXT4-fs (loop0): This should not happen!! Data will be lost
[  349.810193][ T4288] 
[  349.820600][ T4288] EXT4-fs (loop0): Total free blocks count 0
[  349.826995][ T4288] EXT4-fs (loop0): Free/Dirty block details
[  349.832908][ T4288] EXT4-fs (loop0): free_blocks=0
[  349.838152][ T4288] EXT4-fs (loop0): dirty_blocks=48
[  349.843326][ T4288] EXT4-fs (loop0): Block reservation details
[  350.275743][T13676] vcan0: entered allmulticast mode
[  350.294172][T13676] vcan0: left allmulticast mode
[  350.426536][T13656] loop2: detected capacity change from 0 to 32768
[  350.433181][T13686] loop0: detected capacity change from 0 to 256
[  350.496345][T13686] exFAT-fs (loop0): failed to test first cluster bit of root dir(5)
[  350.533795][  T184] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  350.734844][  T184] usb 7-1: Using ep0 maxpacket: 8
[  350.743415][  T184] usb 7-1: config 0 has an invalid interface number: 218 but max is 0
[  350.772262][  T184] usb 7-1: config 0 has no interface number 0
[  350.792360][  T184] usb 7-1: config 0 interface 218 has no altsetting 0
[  350.814795][  T184] usb 7-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=b3.4b
[  350.851530][  T184] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.891927][  T184] usb 7-1: Product: syz
[  350.906548][  T184] usb 7-1: Manufacturer: syz
[  350.920241][  T184] usb 7-1: SerialNumber: syz
[  350.942921][  T184] usb 7-1: config 0 descriptor??
[  351.191751][  T184] keyspan 7-1:0.218: Keyspan 1 port adapter converter detected
[  351.230046][  T184] keyspan 7-1:0.218: found no endpoint descriptor for endpoint 84
[  351.260852][  T184] keyspan 7-1:0.218: found no endpoint descriptor for endpoint 81
[  351.290261][  T184] keyspan 7-1:0.218: found no endpoint descriptor for endpoint 82
[  351.304441][  T184] keyspan 7-1:0.218: found no endpoint descriptor for endpoint 1
[  351.312378][  T184] keyspan 7-1:0.218: found no endpoint descriptor for endpoint 2
[  351.335201][  T184] keyspan 7-1:0.218: found no endpoint descriptor for endpoint 83
[  351.343141][  T184] keyspan 7-1:0.218: found no endpoint descriptor for endpoint 3
[  351.362988][  T184] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  351.390034][  T184] usb 7-1: USB disconnect, device number 11
[  351.428217][  T184] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  351.465707][  T184] keyspan 7-1:0.218: device disconnected
[  351.600008][T13701] loop0: detected capacity change from 0 to 32768
[  351.629692][T13701] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2625 (13701)
[  351.693415][T13701] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  351.711517][T13701] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  351.994626][T13701] BTRFS info (device loop0): enabling ssd optimizations
[  352.001656][T13701] BTRFS info (device loop0): turning on async discard
[  352.065952][T13701] BTRFS info (device loop0): enabling free space tree
[  352.275826][ T5828] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  352.436856][T13740] syz.4.2636 (13740) used greatest stack depth: 18080 bytes left
[  352.604765][T13712] loop2: detected capacity change from 0 to 40427
[  352.633320][T13712] F2FS-fs: heap/no_heap options were deprecated
[  352.675139][T13712] F2FS-fs (loop2): Invalid segment/section count (24 != 3 * 1)
[  352.682739][T13712] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  352.687294][T13715] loop5: detected capacity change from 0 to 32768
[  352.693455][T13712] F2FS-fs (loop2): Image doesn't support compression
[  352.755708][T13712] F2FS-fs (loop2): invalid crc value
[  352.762211][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-diskseq/942.tmp-b7:4' failed: Read-only file system
[  352.817719][T13004] udevd[13004]: symlink '../../loop2' '/dev/disk/by-diskseq/951.tmp-b7:2' failed: Read-only file system
[  352.908793][T13004] udevd[13004]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system
[  352.944664][T13737] loop6: detected capacity change from 0 to 32768
[  352.953403][T13715] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  352.962613][T13737] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2635 (13737)
[  352.999201][T13737] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  353.020272][T13737] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  353.054228][ T6189] udevd[6189]: symlink '../../loop5' '/dev/disk/by-diskseq/952.tmp-b7:5' failed: Read-only file system
[  353.061973][ T5848] udevd[5848]: symlink '../../loop0' '/dev/disk/by-diskseq/949.tmp-b7:0' failed: Read-only file system
[  353.069033][ T6189] udevd[6189]: symlink '../../loop5' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:5' failed: Read-only file system
[  353.114895][ T5848] udevd[5848]: symlink '../../loop0' '/dev/disk/by-diskseq/949.tmp-b7:0' failed: Read-only file system
[  353.170944][T13712] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  353.182875][T13712] F2FS-fs (loop2): Start checkpoint disabled!
[  353.213391][T13715] XFS (loop5): Ending clean mount
[  353.245901][T13712] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  353.256630][T13712] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  353.268153][T13715] XFS (loop5): Quotacheck needed: Please wait.
[  353.274138][T13712] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  353.331258][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/953.tmp-b7:6' failed: Read-only file system
[  353.365446][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:6' failed: Read-only file system
[  353.372073][T13715] XFS (loop5): Quotacheck: Done.
[  353.396275][T13737] BTRFS info (device loop6): enabling ssd optimizations
[  353.406029][T13737] BTRFS info (device loop6): turning on async discard
[  353.412843][T13737] BTRFS info (device loop6): enabling free space tree
[  353.447850][   T60] kworker/u8:4: attempt to access beyond end of device
[  353.447850][   T60] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  353.486857][ T5848] udevd[5848]: symlink '../../loop4' '/dev/disk/by-diskseq/942.tmp-b7:4' failed: Read-only file system
[  353.524751][   T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  353.524801][   T60] Tainted: [L]=SOFTLOCKUP
[  353.524813][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  353.524832][   T60] Workqueue: writeback wb_workfn (flush-7:2)
[  353.524867][   T60] Call Trace:
[  353.524875][   T60]  <TASK>
[  353.524884][   T60]  dump_stack_lvl+0x189/0x250
[  353.524910][   T60]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.524931][   T60]  ? __pfx_queue_work_on+0x10/0x10
[  353.524949][   T60]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  353.524973][   T60]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  353.525007][   T60]  f2fs_handle_critical_error+0x37c/0x540
[  353.525033][   T60]  f2fs_write_end_io+0x886/0xb60
[  353.525072][   T60]  __submit_merged_bio+0x256/0x660
[  353.525097][   T60]  __submit_merged_write_cond+0x269/0x530
[  353.525123][   T60]  f2fs_write_data_pages+0x2756/0x3290
[  353.525183][   T60]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  353.525217][   T60]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  353.525270][   T60]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  353.525317][   T60]  ? __lock_acquire+0x6b6/0x2cf0
[  353.525340][   T60]  ? __lock_acquire+0x6b6/0x2cf0
[  353.525363][   T60]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  353.525385][   T60]  do_writepages+0x32e/0x550
[  353.525412][   T60]  ? reacquire_held_locks+0x121/0x1c0
[  353.525428][   T60]  ? writeback_sb_inodes+0x3bd/0x1870
[  353.525452][   T60]  __writeback_single_inode+0x133/0x1240
[  353.525471][   T60]  ? do_raw_spin_unlock+0x122/0x240
[  353.525495][   T60]  writeback_sb_inodes+0x93a/0x1870
[  353.525518][   T60]  ? rcu_is_watching+0x15/0xb0
[  353.525553][   T60]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  353.525615][   T60]  ? rcu_is_watching+0x15/0xb0
[  353.525645][   T60]  wb_writeback+0x42b/0xaa0
[  353.525673][   T60]  ? queue_io+0x1f1/0x450
[  353.525695][   T60]  ? __pfx_wb_writeback+0x10/0x10
[  353.525723][   T60]  ? _raw_spin_unlock_irq+0x23/0x50
[  353.525751][   T60]  wb_workfn+0x3f9/0xed0
[  353.525791][   T60]  ? __pfx_wb_workfn+0x10/0x10
[  353.525834][   T60]  ? process_one_work+0x868/0x15a0
[  353.525859][   T60]  ? _raw_spin_unlock_irq+0x23/0x50
[  353.525885][   T60]  ? process_one_work+0x868/0x15a0
[  353.525901][   T60]  process_one_work+0x93a/0x15a0
[  353.525942][   T60]  ? __pfx_process_one_work+0x10/0x10
[  353.525970][   T60]  ? assign_work+0x3a1/0x410
[  353.525993][   T60]  worker_thread+0x9b0/0xee0
[  353.526038][   T60]  kthread+0x711/0x8a0
[  353.526062][   T60]  ? __pfx_worker_thread+0x10/0x10
[  353.526080][   T60]  ? __pfx_kthread+0x10/0x10
[  353.526103][   T60]  ? _raw_spin_unlock_irq+0x23/0x50
[  353.526125][   T60]  ? lockdep_hardirqs_on+0x98/0x140
[  353.526141][   T60]  ? __pfx_kthread+0x10/0x10
[  353.526174][   T60]  ret_from_fork+0x599/0xb30
[  353.526194][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[  353.526223][   T60]  ? __switch_to_asm+0x39/0x70
[  353.526243][   T60]  ? __switch_to_asm+0x33/0x70
[  353.526262][   T60]  ? __pfx_kthread+0x10/0x10
[  353.526284][   T60]  ret_from_fork_asm+0x1a/0x30
[  353.526321][   T60]  </TASK>
[  353.526330][   T60] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  353.568415][T13742] loop0: detected capacity change from 0 to 32768
[  353.719056][T13775] loop4: detected capacity change from 0 to 1764
[  353.861781][ T9264] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  353.912987][ T9337] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  355.192904][T13797] loop0: detected capacity change from 0 to 1024
[  355.221143][T13797] EXT4-fs: Ignoring removed nobh option
[  355.245344][T13797] EXT4-fs: inline encryption not supported
[  355.290055][T13797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.328550][T13797] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2644: Allocating blocks 385-513 which overlap fs metadata
[  355.381649][T13796] EXT4-fs (loop0): pa ffff888055e001d0: logic 16, phys. 129, len 24
[  355.390868][T13796] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8
[  355.478383][T13807] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2653'.
[  355.499755][T13807] openvswitch: netlink: Missing key (keys=40, expected=100)
[  355.516484][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.828848][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2657'.
[  355.845417][T13817] loop6: detected capacity change from 0 to 1024
[  355.862059][T13819] loop5: detected capacity change from 0 to 64
[  355.868835][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2657'.
[  355.874737][T13817] EXT4-fs: inline encryption not supported
[  355.891776][T13817] EXT4-fs: Ignoring removed orlov option
[  355.926314][T13817] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  355.979179][T13817] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  356.024637][T13817] System zones: 0-1, 3-12
[  356.030962][T13817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.127499][T13824] loop2: detected capacity change from 0 to 128
[  356.155315][T13824] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  356.296496][T13824] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  356.321235][ T9337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.431480][T13811] loop0: detected capacity change from 0 to 32768
[  356.541602][T13811] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  356.692012][T13811] XFS (loop0): Ending clean mount
[  356.941423][ T5828] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  357.056614][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2672'.
[  357.637423][T13831] set_capacity_and_notify: 1 callbacks suppressed
[  357.637441][T13831] loop5: detected capacity change from 0 to 32768
[  357.762666][T13831] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  357.788185][ T5848] udevd[5848]: symlink '../../loop0' '/dev/disk/by-diskseq/970.tmp-b7:0' failed: Read-only file system
[  357.810639][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/968.tmp-b7:6' failed: Read-only file system
[  357.886088][T13831] XFS (loop5): Ending clean mount
[  357.931629][T13831] XFS (loop5): Quotacheck needed: Please wait.
[  357.959770][T13004] udevd[13004]: symlink '../../loop5' '/dev/disk/by-diskseq/972.tmp-b7:5' failed: Read-only file system
[  357.993304][T13004] udevd[13004]: symlink '../../loop5' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:5' failed: Read-only file system
[  358.027628][T13831] XFS (loop5): Quotacheck: Done.
[  358.147919][T13004] udevd[13004]: symlink '../../loop2' '/dev/disk/by-diskseq/973.tmp-b7:2' failed: Read-only file system
[  358.185312][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-diskseq/972.tmp-b7:5' failed: Read-only file system
[  358.221174][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/968.tmp-b7:6' failed: Read-only file system
[  358.227631][ T9264] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  358.240183][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:5' failed: Read-only file system
[  358.390029][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-diskseq/972.tmp-b7:5' failed: Read-only file system
[  358.438257][T13004] udevd[13004]: symlink '../../loop6' '/dev/disk/by-diskseq/968.tmp-b7:6' failed: Read-only file system
[  358.836815][T13911] loop5: detected capacity change from 0 to 256
[  358.921126][T13915] loop6: detected capacity change from 0 to 512
[  358.998288][T13915] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  359.078137][   T30] audit: type=1800 audit(359.021:139): pid=13915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2695" name="file2" dev="loop6" ino=16 res=0 errno=0
[  359.228010][ T9337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.387060][T13920] pim6reg: entered allmulticast mode
[  359.406567][T13919] pim6reg: left allmulticast mode
[  359.797904][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2703'.
[  359.844522][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2703'.
[  360.033188][T13945] loop5: detected capacity change from 0 to 1024
[  360.057359][T13944] loop0: detected capacity change from 0 to 1024
[  360.073879][ T5911] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  360.163250][T13945] hfsplus: xattr searching failed
[  360.221820][T13945] hfsplus: xattr searching failed
[  360.233829][ T5911] usb 3-1: Using ep0 maxpacket: 32
[  360.268038][ T5911] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  360.306039][ T5911] usb 3-1: config 0 has no interface number 0
[  360.312198][ T5911] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  360.370650][ T5911] usb 3-1: config 0 interface 85 has no altsetting 0
[  360.387780][ T5911] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  360.405180][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.413468][ T5911] usb 3-1: Product: syz
[  360.418296][ T5911] usb 3-1: Manufacturer: syz
[  360.422916][ T5911] usb 3-1: SerialNumber: syz
[  360.441189][ T5911] usb 3-1: config 0 descriptor??
[  361.124238][ T5911] appletouch 3-1:0.85: Geyser mode initialized.
[  361.132789][ T5911] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input16
[  361.262758][T13957] loop4: detected capacity change from 0 to 32768
[  361.311620][T13957] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2712 (13957)
[  361.321018][ T5911] usb 3-1: USB disconnect, device number 13
[  361.414945][T13957] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  361.430052][ T5911] appletouch 3-1:0.85: input: appletouch disconnected
[  361.458380][T13980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2722'.
[  361.463990][T13957] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  361.826518][T13957] BTRFS info (device loop4): enabling ssd optimizations
[  361.834664][T13957] BTRFS info (device loop4): turning on async discard
[  361.844465][T13957] BTRFS info (device loop4): enabling free space tree
[  361.945889][T13957] BTRFS error (device loop4): target device  is invalid!
[  362.013378][ T5827] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  362.202710][T13980] team0 (unregistering): Port device team_slave_0 removed
[  362.340109][T13980] team0 (unregistering): Port device team_slave_1 removed
[  362.630410][T14015] loop5: detected capacity change from 0 to 1024
[  362.732311][T14015] hfsplus: found bad thread record in catalog
[  362.753527][T14015] hfsplus: found bad thread record in catalog
[  362.815304][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/978.tmp-b7:6' failed: Read-only file system
[  362.834074][T13248] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  362.853123][ T3433] hfsplus: found bad thread record in catalog
[  362.875416][ T3433] hfsplus: found bad thread record in catalog
[  362.954332][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-diskseq/985.tmp-b7:5' failed: Read-only file system
[  363.000175][T14028] loop0: detected capacity change from 0 to 256
[  363.017846][T13248] usb 5-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.019937][T13004] udevd[13004]: symlink '../../loop6' '/dev/disk/by-diskseq/978.tmp-b7:6' failed: Read-only file system
[  363.049460][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-diskseq/985.tmp-b7:5' failed: Read-only file system
[  363.063995][T13248] usb 5-1: config 0 interface 0 has no altsetting 0
[  363.076096][T14007] loop2: detected capacity change from 0 to 32768
[  363.076096][T14030] loop6: detected capacity change from 0 to 2048
[  363.089341][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-diskseq/985.tmp-b7:5' failed: Read-only file system
[  363.114871][T13248] usb 5-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00
[  363.124505][T14030] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  363.131421][ T5838] udevd[5838]: symlink '../../loop0' '/dev/disk/by-diskseq/981.tmp-b7:0' failed: Read-only file system
[  363.136480][T13248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.161606][T14007] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2728 (14007)
[  363.179402][T13004] udevd[13004]: incorrect nilfs2 checksum on /dev/loop6
[  363.191580][T13248] usb 5-1: config 0 descriptor??
[  363.198269][T14028] FAT-fs (loop0): Directory bread(block 64) failed
[  363.209856][T13004] udevd[13004]: symlink '../../loop6' '/dev/disk/by-diskseq/989.tmp-b7:6' failed: Read-only file system
[  363.223004][T14028] FAT-fs (loop0): Directory bread(block 65) failed
[  363.230350][T14031] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  363.255907][   T30] audit: type=1800 audit(363.211:140): pid=14030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2738" name="file1" dev="loop6" ino=15 res=0 errno=0
[  363.258681][T14028] FAT-fs (loop0): Directory bread(block 66) failed
[  363.294108][T14007] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  363.321394][T14030] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  363.333328][T14007] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  363.342842][T14028] FAT-fs (loop0): Directory bread(block 67) failed
[  363.353852][T14028] FAT-fs (loop0): Directory bread(block 68) failed
[  363.362742][ T8255] udevd[8255]: symlink '../../loop5' '/dev/disk/by-diskseq/986.tmp-b7:5' failed: Read-only file system
[  363.381998][T14030] Remounting filesystem read-only
[  363.415603][T14028] FAT-fs (loop0): Directory bread(block 69) failed
[  363.417728][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/988.tmp-b7:2' failed: Read-only file system
[  363.434872][T14028] FAT-fs (loop0): Directory bread(block 70) failed
[  363.476863][T14028] FAT-fs (loop0): Directory bread(block 71) failed
[  363.486403][T14028] FAT-fs (loop0): Directory bread(block 72) failed
[  363.493121][T14028] FAT-fs (loop0): Directory bread(block 73) failed
[  363.566908][T14007] BTRFS info (device loop2): enabling ssd optimizations
[  363.603867][T14007] BTRFS info (device loop2): turning on async discard
[  363.626343][T14007] BTRFS info (device loop2): enabling free space tree
[  363.700694][T13248] hid_parser_main: 1 callbacks suppressed
[  363.700716][T13248] asus 0003:0B05:1A30.001C: unknown main item tag 0x0
[  363.759614][T13248] asus 0003:0B05:1A30.001C: unknown main item tag 0x0
[  363.786949][T13248] asus 0003:0B05:1A30.001C: unknown main item tag 0x0
[  363.815936][T13248] asus 0003:0B05:1A30.001C: unknown main item tag 0x0
[  363.858214][T13248] asus 0003:0B05:1A30.001C: unknown main item tag 0x0
[  363.874988][T13248] asus 0003:0B05:1A30.001C: unknown main item tag 0x0
[  363.910004][T13248] asus 0003:0B05:1A30.001C: unknown main item tag 0x0
[  363.944833][T13248] asus 0003:0B05:1A30.001C: unknown main item tag 0x0
[  363.967527][ T5836] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  363.988557][T13248] asus 0003:0B05:1A30.001C: unknown main item tag 0x0
[  364.012409][T13248] asus 0003:0B05:1A30.001C: unknown main item tag 0x0
[  364.053370][T13248] asus 0003:0B05:1A30.001C: unexpected long global item
[  364.088236][T13248] asus 0003:0B05:1A30.001C: Asus hid parse failed: -22
[  364.131087][T14059] loop0: detected capacity change from 0 to 2048
[  364.142727][T13248] asus 0003:0B05:1A30.001C: probe with driver asus failed with error -22
[  364.163043][T14059] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  364.196959][T13248] usb 5-1: USB disconnect, device number 10
[  364.254629][T14065] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  364.321212][T14063] loop6: detected capacity change from 0 to 2048
[  364.389407][T14063] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  364.443399][T14063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  364.543454][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2749'.
[  364.553472][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2749'.
[  364.773272][T14075] loop4: detected capacity change from 0 to 1024
[  364.858109][T14075] EXT4-fs: Ignoring removed nobh option
[  364.920980][T14075] EXT4-fs: Ignoring removed bh option
[  365.023408][T14075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  365.257270][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.634566][T14094] loop4: detected capacity change from 0 to 4096
[  365.703496][T14101] loop6: detected capacity change from 0 to 512
[  365.771402][T14101] EXT4-fs: Ignoring removed nobh option
[  365.778323][T14094] ntfs3(loop4): ino=18, mi_enum_attr
[  365.808997][T14094] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  365.832041][T14101] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2760: iget: bad i_size value: 38620345925642
[  365.858502][T14094] ntfs3(loop4): ino=1a, mi_enum_attr
[  365.866287][T14101] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2760: couldn't read orphan inode 15 (err -117)
[  365.900540][T14073] loop2: detected capacity change from 0 to 40427
[  365.909006][T14073] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  365.944714][T14073] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  365.961671][T14101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.001506][T14073] F2FS-fs (loop2): invalid crc value
[  366.097758][T14101] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2760: bg 0: block 5: invalid block bitmap
[  366.206981][T14101] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 44 with error 28
[  366.272024][T14101] EXT4-fs (loop6): This should not happen!! Data will be lost
[  366.272024][T14101] 
[  366.301195][T14073] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  366.313926][T14101] EXT4-fs (loop6): Total free blocks count 0
[  366.320362][T14101] EXT4-fs (loop6): Free/Dirty block details
[  366.328907][T14101] EXT4-fs (loop6): free_blocks=0
[  366.335460][T14073] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  366.345601][T14101] EXT4-fs (loop6): dirty_blocks=44
[  366.350819][T14101] EXT4-fs (loop6): Block reservation details
[  366.361122][T14073] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  366.368797][T14101] EXT4-fs (loop6): i_reserved_data_blocks=44
[  366.450566][ T9337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.497724][T14073] syz.2.2750: attempt to access beyond end of device
[  366.497724][T14073] loop2: rw=8390659, sector=36912, nr_sectors = 8152 limit=40427
[  366.525099][T14073] syz.2.2750: attempt to access beyond end of device
[  366.525099][T14073] loop2: rw=8390659, sector=45096, nr_sectors = 85976 limit=40427
[  366.663734][T14073] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5
[  366.692288][T14073] F2FS-fs (loop2): Issue discard(5637, 5637, 10747) failed, ret: -5
[  366.759743][T14100] loop0: detected capacity change from 0 to 32768
[  366.837157][T14100] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  366.948586][T14100] XFS (loop0): Ending clean mount
[  366.999950][T14100] XFS (loop0): Quotacheck needed: Please wait.
[  367.124868][T14100] XFS (loop0): Quotacheck: Done.
[  367.320959][ T5828] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  367.536454][T14109] gfs2: fsid=noquota: Trying to join cluster "lock_nolock", "noquota"
[  367.551867][T14109] gfs2: fsid=noquota: Now mounting FS (format 0)...
[  367.726241][T14109] gfs2: fsid=noquota.s: journal 0 mapped with 5 extents in 7ms
[  367.894583][T14141] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2772: inode has both inline data and extents flags
[  368.076392][T14141] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2772: couldn't read orphan inode 15 (err -117)
[  368.121147][T14109] gfs2: fsid=noquota.s: first mount done, others may mount
[  368.138310][T14141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  368.158611][ T5838] udevd[5838]: symlink '../../loop2' '/dev/disk/by-diskseq/1005.tmp-b7:2' failed: Read-only file system
[  368.167118][T14125] ialloc: diAlloc returned -5!
[  368.218978][T14146] ialloc: diAlloc returned -5!
[  368.230876][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-diskseq/1007.tmp-b7:5' failed: Read-only file system
[  368.262364][T13004] udevd[13004]: symlink '../../loop4' '/dev/disk/by-diskseq/1009.tmp-b7:4' failed: Read-only file system
[  368.295735][T13004] udevd[13004]: symlink '../../loop4' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:4' failed: Read-only file system
[  368.337117][ T9337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.410292][ T5848] udevd[5848]: symlink '../../loop4' '/dev/disk/by-diskseq/1009.tmp-b7:4' failed: Read-only file system
[  368.509006][ T5848] udevd[5848]: symlink '../../loop4' '/dev/disk/by-diskseq/1009.tmp-b7:4' failed: Read-only file system
[  368.543444][ T5838] udevd[5838]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  368.560500][T13004] udevd[13004]: symlink '../../loop2' '/dev/disk/by-diskseq/1005.tmp-b7:2' failed: Read-only file system
[  368.622659][ T5848] udevd[5848]: symlink '../../loop4' '/dev/disk/by-diskseq/1010.tmp-b7:4' failed: Read-only file system
[  368.633269][ T5838] udevd[5838]: symlink '../../loop6' '/dev/disk/by-diskseq/1008.tmp-b7:6' failed: Read-only file system
[  368.943349][T14145] set_capacity_and_notify: 3 callbacks suppressed
[  368.943366][T14145] loop0: detected capacity change from 0 to 40427
[  369.016346][T14145] F2FS-fs (loop0): invalid crc value
[  369.284282][T14145] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  369.335950][T14145] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  369.435774][   T30] audit: type=1800 audit(369.391:141): pid=14145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2770" name="bus" dev="loop0" ino=10 res=0 errno=0
[  369.519610][T14152] loop6: detected capacity change from 0 to 40427
[  369.555322][T14152] F2FS-fs (loop6): Small segment_count (9 < 1 * 24)
[  369.557075][T14153] loop2: detected capacity change from 0 to 40427
[  369.575504][T14152] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  369.634160][T14153] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0)
[  369.656023][T14153] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  369.696206][T14153] F2FS-fs (loop2): invalid crc value
[  369.697047][ T5828] syz-executor: attempt to access beyond end of device
[  369.697047][ T5828] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  369.767351][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  369.767381][ T5828] Tainted: [L]=SOFTLOCKUP
[  369.767388][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  369.767403][ T5828] Call Trace:
[  369.767411][ T5828]  <TASK>
[  369.767419][ T5828]  dump_stack_lvl+0x189/0x250
[  369.767450][ T5828]  ? __pfx_dump_stack_lvl+0x10/0x10
[  369.767472][ T5828]  ? __pfx_queue_work_on+0x10/0x10
[  369.767490][ T5828]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  369.767516][ T5828]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  369.767552][ T5828]  f2fs_handle_critical_error+0x37c/0x540
[  369.767581][ T5828]  f2fs_write_end_io+0x886/0xb60
[  369.767624][ T5828]  __submit_merged_bio+0x256/0x660
[  369.767652][ T5828]  __submit_merged_write_cond+0x269/0x530
[  369.767681][ T5828]  f2fs_write_data_pages+0x2756/0x3290
[  369.767701][ T5828]  ? __lock_acquire+0x6b6/0x2cf0
[  369.767759][ T5828]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  369.767838][ T5828]  ? __mod_zone_page_state+0xd7/0x140
[  369.767869][ T5828]  ? __lock_acquire+0x6b6/0x2cf0
[  369.767907][ T5828]  ? __lock_acquire+0x6b6/0x2cf0
[  369.767937][ T5828]  ? do_raw_spin_lock+0x121/0x290
[  369.767974][ T5828]  ? do_raw_spin_unlock+0x122/0x240
[  369.767997][ T5828]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  369.768020][ T5828]  do_writepages+0x32e/0x550
[  369.768056][ T5828]  ? do_raw_spin_unlock+0x122/0x240
[  369.768085][ T5828]  filemap_fdatawrite+0x199/0x240
[  369.768107][ T5828]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  369.768188][ T5828]  ? do_raw_spin_unlock+0x122/0x240
[  369.768216][ T5828]  f2fs_sync_dirty_inodes+0x30f/0x810
[  369.768256][ T5828]  f2fs_write_checkpoint+0x935/0x2430
[  369.768315][ T5828]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  369.768405][ T5828]  kill_f2fs_super+0x2d2/0x6c0
[  369.768434][ T5828]  ? __pfx_kill_f2fs_super+0x10/0x10
[  369.768478][ T5828]  ? shrinker_free+0x2ce/0x3e0
[  369.768503][ T5828]  deactivate_locked_super+0xbc/0x130
[  369.768530][ T5828]  cleanup_mnt+0x425/0x4c0
[  369.768554][ T5828]  ? lockdep_hardirqs_on+0x98/0x140
[  369.768576][ T5828]  task_work_run+0x1d4/0x260
[  369.768602][ T5828]  ? __pfx_task_work_run+0x10/0x10
[  369.768632][ T5828]  ? exit_to_user_mode_loop+0x55/0x4f0
[  369.768656][ T5828]  exit_to_user_mode_loop+0xff/0x4f0
[  369.768674][ T5828]  ? rcu_is_watching+0x15/0xb0
[  369.768701][ T5828]  do_syscall_64+0x2e3/0xf80
[  369.768720][ T5828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.768737][ T5828]  ? clear_bhb_loop+0x60/0xb0
[  369.768759][ T5828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.768780][ T5828] RIP: 0033:0x7f1a02d90a77
[  369.768802][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  369.768817][ T5828] RSP: 002b:00007ffd1f642088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  369.768836][ T5828] RAX: 0000000000000000 RBX: 00007f1a02e13d7d RCX: 00007f1a02d90a77
[  369.768848][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1f642140
[  369.768859][ T5828] RBP: 00007ffd1f642140 R08: 0000000000000000 R09: 0000000000000000
[  369.768871][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd1f6431d0
[  369.768883][ T5828] R13: 00007f1a02e13d7d R14: 000000000005a32c R15: 00007ffd1f643210
[  369.768919][ T5828]  </TASK>
[  369.768927][ T5828] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  369.911352][T14152] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  370.133642][T14153] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  370.147408][T14152] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  370.156579][T14152] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  370.186034][T14153] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  370.193111][T14153] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  370.259639][T14158] loop5: detected capacity change from 0 to 40427
[  370.308296][T14158] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  370.334376][T14158] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  370.355614][   T30] audit: type=1800 audit(370.311:142): pid=14152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2774" name="file1" dev="loop6" ino=10 res=0 errno=0
[  370.357202][T14158] F2FS-fs (loop5): invalid crc value
[  370.398248][T14152] syz.6.2774: attempt to access beyond end of device
[  370.398248][T14152] loop6: rw=8423425, sector=53248, nr_sectors = 128 limit=40427
[  370.442615][T14153] syz.2.2776: attempt to access beyond end of device
[  370.442615][T14153] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  370.490287][T14153] CPU: 0 UID: 0 PID: 14153 Comm: syz.2.2776 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  370.490316][T14153] Tainted: [L]=SOFTLOCKUP
[  370.490324][T14153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  370.490336][T14153] Call Trace:
[  370.490344][T14153]  <TASK>
[  370.490354][T14153]  dump_stack_lvl+0x189/0x250
[  370.490384][T14153]  ? __pfx_dump_stack_lvl+0x10/0x10
[  370.490416][T14153]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  370.490444][T14153]  ? __pfx_queue_work_on+0x10/0x10
[  370.490467][T14153]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  370.490491][T14153]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  370.490517][T14153]  ? f2fs_hw_is_readonly+0x39b/0x470
[  370.490542][T14153]  f2fs_handle_critical_error+0x37c/0x540
[  370.490569][T14153]  f2fs_write_end_io+0x886/0xb60
[  370.490609][T14153]  __submit_merged_bio+0x256/0x660
[  370.490636][T14153]  f2fs_submit_page_write+0xd62/0x21a0
[  370.490689][T14153]  do_write_page+0x40f/0xac0
[  370.490714][T14153]  ? f2fs_encrypt_one_page+0xaf/0x940
[  370.490737][T14153]  f2fs_outplace_write_data+0x11a/0x220
[  370.490765][T14153]  f2fs_do_write_data_page+0x113e/0x1650
[  370.490795][T14153]  ? f2fs_write_single_data_page+0xaa9/0x1740
[  370.490816][T14153]  ? f2fs_write_single_data_page+0x1057/0x1740
[  370.490837][T14153]  ? __pfx_f2fs_do_write_data_page+0x10/0x10
[  370.490867][T14153]  ? __lock_acquire+0x6b6/0x2cf0
[  370.490896][T14153]  f2fs_write_single_data_page+0xaa9/0x1740
[  370.490934][T14153]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  370.490974][T14153]  ? folio_clear_dirty_for_io+0x573/0x710
[  370.490998][T14153]  ? folio_clear_dirty_for_io+0x1d4/0x710
[  370.491024][T14153]  f2fs_write_data_pages+0x1a2b/0x3290
[  370.491082][T14153]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  370.491148][T14153]  ? __x64_sys_fallocate+0xc0/0x110
[  370.491166][T14153]  ? do_syscall_64+0xfa/0xf80
[  370.491181][T14153]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.491223][T14153]  ? __lock_acquire+0x6b6/0x2cf0
[  370.491260][T14153]  ? lockdep_hardirqs_on+0x98/0x140
[  370.491285][T14153]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  370.491306][T14153]  do_writepages+0x32e/0x550
[  370.491340][T14153]  ? do_raw_spin_unlock+0x122/0x240
[  370.491368][T14153]  filemap_write_and_wait_range+0x21f/0x320
[  370.491403][T14153]  ? __pfx_filemap_write_and_wait_range+0x10/0x10
[  370.491468][T14153]  ? down_write+0x162/0x1f0
[  370.491486][T14153]  ? __pfx_down_write+0x10/0x10
[  370.491507][T14153]  ? up_write+0x1ac/0x410
[  370.491536][T14153]  f2fs_insert_range+0x433/0x490
[  370.491566][T14153]  f2fs_fallocate+0x58a/0x970
[  370.491599][T14153]  vfs_fallocate+0x669/0x7e0
[  370.491618][T14153]  ? __fget_files+0x2a/0x420
[  370.491644][T14153]  ? __pfx_vfs_fallocate+0x10/0x10
[  370.491660][T14153]  ? __fget_files+0x3a0/0x420
[  370.491680][T14153]  ? __fget_files+0x2a/0x420
[  370.491710][T14153]  __x64_sys_fallocate+0xc0/0x110
[  370.491734][T14153]  do_syscall_64+0xfa/0xf80
[  370.491753][T14153]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.491770][T14153]  ? clear_bhb_loop+0x60/0xb0
[  370.491792][T14153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.491810][T14153] RIP: 0033:0x7f41bc58f749
[  370.491828][T14153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  370.491843][T14153] RSP: 002b:00007f41bd3c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  370.491862][T14153] RAX: ffffffffffffffda RBX: 00007f41bc7e5fa0 RCX: 00007f41bc58f749
[  370.491876][T14153] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000004
[  370.491887][T14153] RBP: 00007f41bc613f91 R08: 0000000000000000 R09: 0000000000000000
[  370.491898][T14153] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000
[  370.491910][T14153] R13: 00007f41bc7e6038 R14: 00007f41bc7e5fa0 R15: 00007ffc34257918
[  370.491944][T14153]  </TASK>
[  370.491953][T14153] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  370.566013][T14172] loop4: detected capacity change from 0 to 32768
[  370.828728][T14158] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  370.844379][T14153] syz.2.2776: attempt to access beyond end of device
[  370.844379][T14153] loop2: rw=2049, sector=53264, nr_sectors = 8 limit=40427
[  370.847189][ T9337] syz-executor: attempt to access beyond end of device
[  370.847189][ T9337] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  370.891238][T14153] CPU: 1 UID: 0 PID: 14153 Comm: syz.2.2776 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  370.891269][T14153] Tainted: [L]=SOFTLOCKUP
[  370.891277][T14153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  370.891289][T14153] Call Trace:
[  370.891298][T14153]  <TASK>
[  370.891308][T14153]  dump_stack_lvl+0x189/0x250
[  370.891339][T14153]  ? __pfx_dump_stack_lvl+0x10/0x10
[  370.891362][T14153]  ? __pfx_queue_work_on+0x10/0x10
[  370.891379][T14153]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  370.891413][T14153]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  370.891452][T14153]  f2fs_handle_critical_error+0x37c/0x540
[  370.891482][T14153]  f2fs_write_end_io+0x886/0xb60
[  370.891525][T14153]  __submit_merged_bio+0x256/0x660
[  370.891553][T14153]  __submit_merged_write_cond+0x471/0x530
[  370.891582][T14153]  f2fs_write_single_data_page+0x1269/0x1740
[  370.891625][T14153]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  370.891666][T14153]  ? folio_clear_dirty_for_io+0x573/0x710
[  370.891691][T14153]  ? folio_clear_dirty_for_io+0x1d4/0x710
[  370.891717][T14153]  f2fs_write_data_pages+0x1a2b/0x3290
[  370.891780][T14153]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  370.891853][T14153]  ? __x64_sys_fallocate+0xc0/0x110
[  370.891870][T14153]  ? do_syscall_64+0xfa/0xf80
[  370.891885][T14153]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.891930][T14153]  ? __lock_acquire+0x6b6/0x2cf0
[  370.891970][T14153]  ? lockdep_hardirqs_on+0x98/0x140
[  370.891996][T14153]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  370.892017][T14153]  do_writepages+0x32e/0x550
[  370.892052][T14153]  ? do_raw_spin_unlock+0x122/0x240
[  370.892082][T14153]  filemap_write_and_wait_range+0x21f/0x320
[  370.892110][T14153]  ? __pfx_filemap_write_and_wait_range+0x10/0x10
[  370.892180][T14153]  ? down_write+0x162/0x1f0
[  370.892199][T14153]  ? __pfx_down_write+0x10/0x10
[  370.892219][T14153]  ? up_write+0x1ac/0x410
[  370.892247][T14153]  f2fs_insert_range+0x433/0x490
[  370.892278][T14153]  f2fs_fallocate+0x58a/0x970
[  370.892310][T14153]  vfs_fallocate+0x669/0x7e0
[  370.892329][T14153]  ? __fget_files+0x2a/0x420
[  370.892355][T14153]  ? __pfx_vfs_fallocate+0x10/0x10
[  370.892372][T14153]  ? __fget_files+0x3a0/0x420
[  370.892397][T14153]  ? __fget_files+0x2a/0x420
[  370.892429][T14153]  __x64_sys_fallocate+0xc0/0x110
[  370.892453][T14153]  do_syscall_64+0xfa/0xf80
[  370.892473][T14153]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.892490][T14153]  ? clear_bhb_loop+0x60/0xb0
[  370.892513][T14153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.892530][T14153] RIP: 0033:0x7f41bc58f749
[  370.892549][T14153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  370.892564][T14153] RSP: 002b:00007f41bd3c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  370.892583][T14153] RAX: ffffffffffffffda RBX: 00007f41bc7e5fa0 RCX: 00007f41bc58f749
[  370.892598][T14153] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000004
[  370.892609][T14153] RBP: 00007f41bc613f91 R08: 0000000000000000 R09: 0000000000000000
[  370.892621][T14153] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000
[  370.892632][T14153] R13: 00007f41bc7e6038 R14: 00007f41bc7e5fa0 R15: 00007ffc34257918
[  370.892668][T14153]  </TASK>
[  370.892677][T14153] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  370.984917][T14172] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2780 (14172)
[  371.000799][T14158] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  371.046574][T14172] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  371.073780][T14158] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  371.127323][T14172] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm
[  371.140184][ T9337] CPU: 1 UID: 0 PID: 9337 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  371.140214][ T9337] Tainted: [L]=SOFTLOCKUP
[  371.140220][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  371.140231][ T9337] Call Trace:
[  371.140238][ T9337]  <TASK>
[  371.140246][ T9337]  dump_stack_lvl+0x189/0x250
[  371.140269][ T9337]  ? __pfx_dump_stack_lvl+0x10/0x10
[  371.140283][ T9337]  ? __pfx_queue_work_on+0x10/0x10
[  371.140298][ T9337]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  371.140323][ T9337]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  371.140361][ T9337]  f2fs_handle_critical_error+0x37c/0x540
[  371.140389][ T9337]  f2fs_write_end_io+0x886/0xb60
[  371.140436][ T9337]  __submit_merged_bio+0x256/0x660
[  371.140463][ T9337]  __submit_merged_write_cond+0x269/0x530
[  371.140490][ T9337]  f2fs_write_data_pages+0x2756/0x3290
[  371.140508][ T9337]  ? __lock_acquire+0x6b6/0x2cf0
[  371.140564][ T9337]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  371.140633][ T9337]  ? __mod_zone_page_state+0xd7/0x140
[  371.140667][ T9337]  ? folios_put_refs+0x58b/0x670
[  371.140701][ T9337]  ? __lock_acquire+0x6b6/0x2cf0
[  371.140729][ T9337]  ? __lock_acquire+0x6b6/0x2cf0
[  371.140764][ T9337]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  371.140785][ T9337]  do_writepages+0x32e/0x550
[  371.140820][ T9337]  ? do_raw_spin_unlock+0x122/0x240
[  371.140848][ T9337]  filemap_fdatawrite+0x199/0x240
[  371.140870][ T9337]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  371.140946][ T9337]  ? do_raw_spin_unlock+0x122/0x240
[  371.140974][ T9337]  f2fs_sync_dirty_inodes+0x30f/0x810
[  371.141013][ T9337]  f2fs_write_checkpoint+0x935/0x2430
[  371.141070][ T9337]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  371.141089][ T9337]  ? kasan_record_aux_stack+0xbd/0xd0
[  371.141178][ T9337]  kill_f2fs_super+0x2d2/0x6c0
[  371.141206][ T9337]  ? __pfx_kill_f2fs_super+0x10/0x10
[  371.141247][ T9337]  ? shrinker_free+0x2ce/0x3e0
[  371.141270][ T9337]  deactivate_locked_super+0xbc/0x130
[  371.141295][ T9337]  cleanup_mnt+0x425/0x4c0
[  371.141318][ T9337]  ? lockdep_hardirqs_on+0x98/0x140
[  371.141338][ T9337]  task_work_run+0x1d4/0x260
[  371.141364][ T9337]  ? __pfx_task_work_run+0x10/0x10
[  371.141393][ T9337]  ? exit_to_user_mode_loop+0x55/0x4f0
[  371.141421][ T9337]  exit_to_user_mode_loop+0xff/0x4f0
[  371.141439][ T9337]  ? rcu_is_watching+0x15/0xb0
[  371.141465][ T9337]  do_syscall_64+0x2e3/0xf80
[  371.141483][ T9337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.141500][ T9337]  ? clear_bhb_loop+0x60/0xb0
[  371.141521][ T9337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.141537][ T9337] RIP: 0033:0x7f5609390a77
[  371.141554][ T9337] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  371.141569][ T9337] RSP: 002b:00007ffdef665168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  371.141588][ T9337] RAX: 0000000000000000 RBX: 00007f5609413d7d RCX: 00007f5609390a77
[  371.141600][ T9337] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdef665220
[  371.141611][ T9337] RBP: 00007ffdef665220 R08: 0000000000000000 R09: 0000000000000000
[  371.141622][ T9337] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdef6662b0
[  371.141633][ T9337] R13: 00007f5609413d7d R14: 000000000005a6e3 R15: 00007ffdef6662f0
[  371.141667][ T9337]  </TASK>
[  371.143769][ T9337] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  371.315413][   T30] audit: type=1800 audit(371.261:143): pid=14184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2777" name="file1" dev="loop5" ino=10 res=0 errno=0
[  371.524596][T14187] loop0: detected capacity change from 0 to 128
[  371.949953][T14172] BTRFS info (device loop4): enabling ssd optimizations
[  371.983774][T14172] BTRFS info (device loop4): turning on async discard
[  372.013843][T14172] BTRFS info (device loop4): enabling free space tree
[  372.020661][T14172] BTRFS info (device loop4): use lzo compression, level 1
[  372.195597][T14172] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4)
[  372.388285][ T5827] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  372.729656][T14218] loop0: detected capacity change from 0 to 256
[  372.826334][T14218] exfat: Deprecated parameter 'namecase'
[  372.832124][T14218] exfat: Deprecated parameter 'namecase'
[  372.894686][T13248] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  372.911577][T14218] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  372.938717][T14218] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  373.133871][T13248] usb 7-1: Using ep0 maxpacket: 16
[  373.140533][T13248] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  373.174285][T13248] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  373.193826][ T5834] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  373.207896][T13248] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  373.219043][T13248] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.227426][T13248] usb 7-1: Product: syz
[  373.231712][T13248] usb 7-1: Manufacturer: syz
[  373.236698][T13248] usb 7-1: SerialNumber: syz
[  373.250613][T13248] usb 7-1: config 0 descriptor??
[  373.259605][T13248] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  373.271722][T13248] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  373.317000][T13004] udevd[13004]: symlink '../../loop0' '/dev/disk/by-diskseq/1026.tmp-b7:0' failed: Read-only file system
[  373.354070][ T5834] usb 6-1: device descriptor read/64, error -71
[  373.409872][T13004] udevd[13004]: symlink '../../loop0' '/dev/disk/by-diskseq/1026.tmp-b7:0' failed: Read-only file system
[  373.453538][ T5838] udevd[5838]: symlink '../../loop2' '/dev/disk/by-diskseq/1021.tmp-b7:2' failed: Read-only file system
[  373.584250][T13004] udevd[13004]: symlink '../../loop2' '/dev/disk/by-diskseq/1021.tmp-b7:2' failed: Read-only file system
[  373.598543][T14224] loop4: detected capacity change from 0 to 32768
[  373.618150][ T5834] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  373.681544][T14224] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  373.746376][T14224] XFS (loop4): Ending clean mount
[  373.776645][T13004] udevd[13004]: symlink '../../loop4' '/dev/disk/by-diskseq/1027.tmp-b7:4' failed: Read-only file system
[  373.806505][T13004] udevd[13004]: symlink '../../loop4' '/dev/disk/by-uuid/ed37bf6e-74ea-4e01-afba-5fee274b0f3a.tmp-b7:4' failed: Read-only file system
[  373.808494][ T5834] usb 6-1: device descriptor read/64, error -71
[  373.836684][ T5827] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  373.892251][T13248] em28xx 7-1:0.0: chip ID is em2860
[  373.965485][T13004] udevd[13004]: symlink '../../loop4' '/dev/disk/by-diskseq/1027.tmp-b7:4' failed: Read-only file system
[  373.999488][ T5834] usb usb6-port1: attempt power cycle
[  374.015420][T13004] udevd[13004]: symlink '../../loop4' '/dev/disk/by-uuid/ed37bf6e-74ea-4e01-afba-5fee274b0f3a.tmp-b7:4' failed: Read-only file system
[  374.096834][T13248] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  374.114817][T13248] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[  374.123167][T13248] em28xx 7-1:0.0: No AC97 audio processor
[  374.167438][T13248] usb 7-1: USB disconnect, device number 12
[  374.184907][T13248] em28xx 7-1:0.0: Disconnecting em28xx
[  374.212798][T13248] em28xx 7-1:0.0: Freeing device
[  374.216352][T14247] loop4: detected capacity change from 0 to 1024
[  374.254081][T14233] loop0: detected capacity change from 0 to 32768
[  374.276181][T14233] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2796 (14233)
[  374.306633][T14233] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  374.328355][T14247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.330497][T14233] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  374.355905][T14236] loop2: detected capacity change from 0 to 32768
[  374.385213][T14247] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.2800: missing EA_INODE flag
[  374.394077][ T5834] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  374.404787][T14236] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 8e7aea9b-31fc-4b2c-995e-4525bc4b7777
[  374.405324][T14247] EXT4-fs (loop4): Remounting filesystem read-only
[  374.422479][T14236] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2798 (14236)
[  374.444741][ T5834] usb 6-1: device descriptor read/8, error -71
[  374.462808][ T5848] udevd[5848]: symlink '../../loop4' '/dev/disk/by-diskseq/1027.tmp-b7:4' failed: Read-only file system
[  374.487739][ T5838] udevd[5838]: symlink '../../loop0' '/dev/disk/by-diskseq/1030.tmp-b7:0' failed: Read-only file system
[  374.499952][T14236] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  374.531189][T14236] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  374.632449][T14233] BTRFS info (device loop0): enabling ssd optimizations
[  374.685840][T14233] BTRFS info (device loop0): turning on async discard
[  374.692666][T14233] BTRFS info (device loop0): enabling free space tree
[  374.718216][ T5834] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  374.737828][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.795227][ T5834] usb 6-1: device descriptor read/8, error -71
[  374.904321][ T5834] usb usb6-port1: unable to enumerate USB device
[  374.971105][T14236] BTRFS info (device loop2): enabling ssd optimizations
[  374.984216][T14236] BTRFS info (device loop2): turning on async discard
[  374.991038][T14236] BTRFS info (device loop2): enabling free space tree
[  375.030424][T14236] BTRFS info (device loop2): enabling auto defrag
[  375.055932][T14236] BTRFS info (device loop2): max_inline set to 4096
[  375.119844][ T5828] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  375.426586][ T5836] BTRFS info (device loop2): last unmount of filesystem 8e7aea9b-31fc-4b2c-995e-4525bc4b7777
[  375.766233][T14286] loop6: detected capacity change from 0 to 32768
[  375.815051][T14286] (syz.6.2803,14286,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  375.855107][T14286] (syz.6.2803,14286,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  375.926123][T14286] (syz.6.2803,14286,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  375.970363][T14286] JBD2: Ignoring recovery information on journal
[  376.128864][T14286] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  376.338672][T14286] (syz.6.2803,14286,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  376.370838][T14305] loop5: detected capacity change from 0 to 512
[  376.406406][T14305] EXT4-fs: Ignoring removed mblk_io_submit option
[  376.422604][T14305] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  376.456023][T14305] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2810: inode has both inline data and extents flags
[  376.501421][T14291] loop0: detected capacity change from 0 to 40427
[  376.509644][T14305] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2810: couldn't read orphan inode 15 (err -117)
[  376.533322][T14305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  376.543990][T14291] F2FS-fs (loop0): Image doesn't support compression
[  376.548625][T14286] (syz.6.2803,14286,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  376.567716][T14286] (syz.6.2803,14286,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  376.580938][T14286] (syz.6.2803,14286,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  376.591465][T14286] (syz.6.2803,14286,0):ocfs2_quota_read:201 ERROR: status = -5
[  376.599569][T14286] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 5
[  376.609214][T14286] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  376.613004][T14291] F2FS-fs (loop0): build fault injection rate: 690
[  376.618675][T14286] (syz.6.2803,14286,0):ocfs2_acquire_dquot:890 ERROR: status = -5
[  376.620954][T14286] (syz.6.2803,14286,0):ocfs2_mknod:318 ERROR: status = -5
[  376.641458][T14286] (syz.6.2803,14286,0):ocfs2_mknod:506 ERROR: status = -5
[  376.649579][T14286] (syz.6.2803,14286,0):ocfs2_create:679 ERROR: status = -5
[  376.674646][T14291] F2FS-fs (loop0): build fault injection type: 0x35f7
[  376.710490][T14291] F2FS-fs (loop0): invalid crc value
[  376.721635][ T9264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.753255][T14286] syz.6.2803 (14286) used greatest stack depth: 17816 bytes left
[  376.893423][ T9337] ocfs2: Unmounting device (7,6) on (node local)
[  377.074942][T14291] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  377.116209][T14291] F2FS-fs (loop0): Start checkpoint disabled!
[  377.146456][T14291] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  377.164645][T14291] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  377.369235][ T3456] kworker/u8:8: attempt to access beyond end of device
[  377.369235][ T3456] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  377.422224][ T3456] kworker/u8:8: attempt to access beyond end of device
[  377.422224][ T3456] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  377.439872][ T3456] CPU: 1 UID: 0 PID: 3456 Comm: kworker/u8:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  377.439902][ T3456] Tainted: [L]=SOFTLOCKUP
[  377.439909][ T3456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  377.439927][ T3456] Workqueue: writeback wb_workfn (flush-7:0)
[  377.439966][ T3456] Call Trace:
[  377.439974][ T3456]  <TASK>
[  377.439983][ T3456]  dump_stack_lvl+0x189/0x250
[  377.440010][ T3456]  ? __pfx_dump_stack_lvl+0x10/0x10
[  377.440032][ T3456]  ? __pfx_queue_work_on+0x10/0x10
[  377.440051][ T3456]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  377.440076][ T3456]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  377.440114][ T3456]  f2fs_handle_critical_error+0x37c/0x540
[  377.440143][ T3456]  f2fs_write_end_io+0x886/0xb60
[  377.440186][ T3456]  __submit_merged_bio+0x256/0x660
[  377.440214][ T3456]  __submit_merged_write_cond+0x269/0x530
[  377.440243][ T3456]  f2fs_write_data_pages+0x2756/0x3290
[  377.440306][ T3456]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  377.440345][ T3456]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  377.440411][ T3456]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  377.440466][ T3456]  ? __lock_acquire+0x6b6/0x2cf0
[  377.440492][ T3456]  ? __lock_acquire+0x6b6/0x2cf0
[  377.440517][ T3456]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  377.440540][ T3456]  do_writepages+0x32e/0x550
[  377.440571][ T3456]  ? reacquire_held_locks+0x121/0x1c0
[  377.440590][ T3456]  ? writeback_sb_inodes+0x3bd/0x1870
[  377.440621][ T3456]  __writeback_single_inode+0x133/0x1240
[  377.440642][ T3456]  ? do_raw_spin_unlock+0x122/0x240
[  377.440671][ T3456]  writeback_sb_inodes+0x93a/0x1870
[  377.440702][ T3456]  ? rcu_is_watching+0x15/0xb0
[  377.440744][ T3456]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  377.440817][ T3456]  ? rcu_is_watching+0x15/0xb0
[  377.440851][ T3456]  wb_writeback+0x42b/0xaa0
[  377.440881][ T3456]  ? queue_io+0x1f1/0x450
[  377.440906][ T3456]  ? __pfx_wb_writeback+0x10/0x10
[  377.440937][ T3456]  ? _raw_spin_unlock_irq+0x23/0x50
[  377.440972][ T3456]  wb_workfn+0x3f9/0xed0
[  377.441017][ T3456]  ? __pfx_wb_workfn+0x10/0x10
[  377.441066][ T3456]  ? process_one_work+0x868/0x15a0
[  377.441093][ T3456]  ? _raw_spin_unlock_irq+0x23/0x50
[  377.441120][ T3456]  ? process_one_work+0x868/0x15a0
[  377.441137][ T3456]  process_one_work+0x93a/0x15a0
[  377.441185][ T3456]  ? __pfx_process_one_work+0x10/0x10
[  377.441216][ T3456]  ? assign_work+0x3a1/0x410
[  377.441242][ T3456]  worker_thread+0x9b0/0xee0
[  377.441296][ T3456]  kthread+0x711/0x8a0
[  377.441323][ T3456]  ? __pfx_worker_thread+0x10/0x10
[  377.441342][ T3456]  ? __pfx_kthread+0x10/0x10
[  377.441366][ T3456]  ? _raw_spin_unlock_irq+0x23/0x50
[  377.441389][ T3456]  ? lockdep_hardirqs_on+0x98/0x140
[  377.441404][ T3456]  ? __pfx_kthread+0x10/0x10
[  377.441428][ T3456]  ret_from_fork+0x599/0xb30
[  377.441450][ T3456]  ? __pfx_ret_from_fork+0x10/0x10
[  377.441484][ T3456]  ? __switch_to_asm+0x39/0x70
[  377.441503][ T3456]  ? __switch_to_asm+0x33/0x70
[  377.441522][ T3456]  ? __pfx_kthread+0x10/0x10
[  377.441547][ T3456]  ret_from_fork_asm+0x1a/0x30
[  377.441591][ T3456]  </TASK>
[  377.441599][ T3456] F2FS-fs (loop0): Remounting filesystem read-only
[  377.454762][T14324] Bluetooth: hci5: Frame reassembly failed (-84)
[  377.491498][T14330] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2815'.
[  378.099712][T14343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2827'.
[  378.329778][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/1039.tmp-b7:6' failed: Read-only file system
[  378.391247][T14351] loop6: detected capacity change from 0 to 1024
[  378.482118][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/1041.tmp-b7:6' failed: Read-only file system
[  378.522595][ T9337] hfsplus: bad catalog entry type
[  378.530473][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system
[  378.567344][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:6' failed: Read-only file system
[  378.594053][ T9753] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  378.638130][T14345] loop0: detected capacity change from 0 to 32768
[  378.663348][T14345] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2821 (14345)
[  378.716979][T14345] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  378.735879][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.770155][ T5848] udevd[5848]: symlink '../../loop0' '/dev/disk/by-diskseq/1042.tmp-b7:0' failed: Read-only file system
[  378.773799][ T9753] usb 5-1: Using ep0 maxpacket: 16
[  378.786055][T14345] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  378.808112][ T9753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.810346][ T5848] udevd[5848]: symlink '../../loop0' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:0' failed: Read-only file system
[  378.840132][T13004] udevd[13004]: symlink '../../loop5' '/dev/disk/by-diskseq/1038.tmp-b7:5' failed: Read-only file system
[  378.853574][ T9753] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  378.863774][ T9753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.880085][ T7001] hfsplus: b-tree write err: -5, ino 4
[  378.901715][ T9753] usb 5-1: config 0 descriptor??
[  378.949346][T14356] loop5: detected capacity change from 0 to 2048
[  378.996958][T14356] EXT4-fs: Ignoring removed mblk_io_submit option
[  379.013255][ T3520] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.046467][T14345] BTRFS info (device loop0): rebuilding free space tree
[  379.069481][T13004] udevd[13004]: symlink '../../loop5' '/dev/disk/by-diskseq/1043.tmp-b7:5' failed: Read-only file system
[  379.083264][T14356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.105885][T14345] BTRFS info (device loop0): checking UUID tree
[  379.107593][T13004] udevd[13004]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  379.136329][T14345] BTRFS info (device loop0): allowing degraded mounts
[  379.152914][T14356] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  379.188687][T14345] BTRFS info (device loop0): enabling ssd optimizations
[  379.205708][T14345] BTRFS info (device loop0): enabling free space tree
[  379.222716][T14345] BTRFS info (device loop0): force clearing of disk cache
[  379.262815][T14356] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  379.275356][T14345] BTRFS info (device loop0): force zlib compression, level 3
[  379.282213][ T3520] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.295546][T14374] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  379.323888][T14356] EXT4-fs (loop5): This should not happen!! Data will be lost
[  379.323888][T14356] 
[  379.350703][ T9753] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  379.353800][T14374] EXT4-fs (loop5): This should not happen!! Data will be lost
[  379.353800][T14374] 
[  379.380985][T14356] EXT4-fs (loop5): Total free blocks count 0
[  379.388691][   T30] audit: type=1800 audit(379.351:144): pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2821" name="file1" dev="loop0" ino=260 res=0 errno=0
[  379.403813][T14356] EXT4-fs (loop5): Free/Dirty block details
[  379.434543][T14374] EXT4-fs (loop5): Total free blocks count 0
[  379.445499][   T52] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  379.451310][ T5840] Bluetooth: hci5: command 0x1003 tx timeout
[  379.479996][T14356] EXT4-fs (loop5): free_blocks=2415919504
[  379.519291][T14374] EXT4-fs (loop5): Free/Dirty block details
[  379.535656][    C0] ==================================================================
[  379.543776][    C0] BUG: KASAN: use-after-free in mcp2221_raw_event+0x106a/0x1240
[  379.551488][    C0] Read of size 1 at addr ffff88804f9d7fff by task kworker/u8:14/6146
[  379.559637][    C0] 
[  379.562005][    C0] CPU: 0 UID: 0 PID: 6146 Comm: kworker/u8:14 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  379.562065][    C0] Tainted: [L]=SOFTLOCKUP
[  379.562090][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  379.562121][    C0] Workqueue: bat_events batadv_mcast_mla_update
[  379.562182][    C0] Call Trace:
[  379.562210][    C0]  <IRQ>
[  379.562221][    C0]  dump_stack_lvl+0x189/0x250
[  379.562293][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  379.562394][    C0]  ? rcu_is_watching+0x15/0xb0
[  379.562478][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  379.562534][    C0]  ? rcu_is_watching+0x15/0xb0
[  379.562634][    C0]  ? lock_release+0x4b/0x3b0
[  379.562671][    C0]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  379.562747][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  379.562822][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  379.562894][    C0]  print_report+0xca/0x240
[  379.562947][    C0]  ? mcp2221_raw_event+0x106a/0x1240
[  379.563019][    C0]  kasan_report+0x118/0x150
[  379.563079][    C0]  ? mcp2221_raw_event+0x106a/0x1240
[  379.563159][    C0]  mcp2221_raw_event+0x106a/0x1240
[  379.563232][    C0]  ? down_trylock+0x50/0xb0
[  379.563271][    C0]  hid_input_report+0x41d/0x580
[  379.563322][    C0]  ? __pfx_mcp2221_raw_event+0x10/0x10
[  379.563393][    C0]  hid_irq_in+0x47e/0x6d0
[  379.563473][    C0]  __usb_hcd_giveback_urb+0x376/0x540
[  379.563533][    C0]  dummy_timer+0x85f/0x45b0
[  379.563627][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  379.563707][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  379.563770][    C0]  ? debug_object_deactivate+0x6d/0x360
[  379.563825][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  379.563896][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  379.563952][    C0]  __hrtimer_run_queues+0x51c/0xc30
[  379.564029][    C0]  ? ktime_get_update_offsets_now+0x67/0x3d0
[  379.564097][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  379.564163][    C0]  ? read_tsc+0x9/0x20
[  379.564237][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  379.564303][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  379.564376][    C0]  handle_softirqs+0x27d/0x850
[  379.564433][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  379.564487][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  379.564543][    C0]  __irq_exit_rcu+0xca/0x1f0
[  379.564604][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  379.564658][    C0]  irq_exit_rcu+0x9/0x30
[  379.564709][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  379.564785][    C0]  </IRQ>
[  379.564793][    C0]  <TASK>
[  379.564824][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  379.564883][    C0] RIP: 0010:lock_acquire+0xd1/0x340
[  379.564922][    C0] Code: 7e 92 83 b8 2c 0b 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 <fa> 48 c7 c7 93 5c 7a 8d e8 a2 f6 bc 09 65 ff 05 2b 5d e0 10 45 31
[  379.564972][    C0] RSP: 0018:ffffc9000b64f7e0 EFLAGS: 00000246
[  379.565022][    C0] RAX: ffff888024e80000 RBX: 0000000000000000 RCX: 91a0b07b8b192700
[  379.565053][    C0] RDX: 0000000000000000 RSI: ffffffff8b2829ff RDI: 1ffffffff1be833c
[  379.565085][    C0] RBP: ffffffff8b282579 R08: 0000000000000000 R09: 0000000000000000
[  379.565114][    C0] R10: dffffc0000000000 R11: ffffed1005fc9ad0 R12: 0000000000000002
[  379.565159][    C0] R13: ffffffff8df419e0 R14: 0000000000000000 R15: 0000000000000246
[  379.565192][    C0]  ? batadv_mcast_mla_update+0x179/0x3600
[  379.565251][    C0]  ? batadv_mcast_mla_update+0x5ff/0x3600
[  379.565325][    C0]  ? batadv_mcast_mla_update+0x179/0x3600
[  379.565380][    C0]  batadv_mcast_mla_update+0x5ff/0x3600
[  379.565435][    C0]  ? batadv_mcast_mla_update+0x179/0x3600
[  379.565504][    C0]  ? batadv_mcast_mla_update+0x179/0x3600
[  379.565567][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  379.565643][    C0]  ? __pfx_batadv_mcast_mla_update+0x10/0x10
[  379.565719][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  379.565793][    C0]  ? process_one_work+0x868/0x15a0
[  379.565861][    C0]  process_one_work+0x93a/0x15a0
[  379.565922][    C0]  ? __pfx_process_one_work+0x10/0x10
[  379.565963][    C0]  ? assign_work+0x3a1/0x410
[  379.566015][    C0]  worker_thread+0x9b0/0xee0
[  379.566081][    C0]  kthread+0x711/0x8a0
[  379.566154][    C0]  ? __pfx_worker_thread+0x10/0x10
[  379.566205][    C0]  ? __pfx_kthread+0x10/0x10
[  379.566279][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  379.566363][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[  379.566397][    C0]  ? __pfx_kthread+0x10/0x10
[  379.566468][    C0]  ret_from_fork+0x599/0xb30
[  379.566507][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  379.566566][    C0]  ? __switch_to_asm+0x39/0x70
[  379.566641][    C0]  ? __switch_to_asm+0x33/0x70
[  379.566710][    C0]  ? __pfx_kthread+0x10/0x10
[  379.566769][    C0]  ret_from_fork_asm+0x1a/0x30
[  379.566847][    C0]  </TASK>
[  379.566873][    C0] 
[  380.015278][    C0] The buggy address belongs to the physical page:
[  380.021699][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x4f9d7
[  380.030463][    C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  380.037598][    C0] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000
[  380.046184][    C0] raw: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  380.054773][    C0] page dumped because: kasan: bad access detected
[  380.061213][    C0] page_owner tracks the page as freed
[  380.066568][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100cc2(GFP_HIGHUSER), pid 8209, tgid 8208 (syz.3.826), ts 157002937792, free_ts 157727453325
[  380.082715][    C0]  post_alloc_hook+0x234/0x290
[  380.087479][    C0]  get_page_from_freelist+0x2365/0x2440
[  380.093016][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  380.098813][    C0]  alloc_pages_mpol+0x232/0x4a0
[  380.103659][    C0]  alloc_pages_noprof+0xa9/0x190
[  380.108591][    C0]  kimage_alloc_pages+0xbd/0x3b0
[  380.113522][    C0]  kimage_alloc_page+0xab/0x8c0
[  380.118373][    C0]  kimage_load_segment+0xbfb/0x1200
[  380.123598][    C0]  do_kexec_load+0x655/0x810
[  380.128728][    C0]  __se_sys_kexec_load+0x134/0x160
[  380.133924][    C0]  do_syscall_64+0xfa/0xf80
[  380.138436][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.144340][    C0] page last free pid 8209 tgid 8208 stack trace:
[  380.150658][    C0]  __free_frozen_pages+0xbc8/0xd30
[  380.155775][    C0]  kimage_free+0x475/0x9e0
[  380.160185][    C0]  do_kexec_load+0x2d2/0x810
[  380.164760][    C0]  __se_sys_kexec_load+0x134/0x160
[  380.169856][    C0]  do_syscall_64+0xfa/0xf80
[  380.174348][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.180233][    C0] 
[  380.182553][    C0] Memory state around the buggy address:
[  380.188177][    C0]  ffff88804f9d7e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  380.196222][    C0]  ffff88804f9d7f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  380.204265][    C0] >ffff88804f9d7f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  380.212321][    C0]                                                                 ^
[  380.220279][    C0]  ffff88804f9d8000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  380.228331][    C0]  ffff88804f9d8080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  380.236409][    C0] ==================================================================
[  380.244472][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  380.251677][    C0] CPU: 0 UID: 0 PID: 6146 Comm: kworker/u8:14 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  380.262780][    C0] Tainted: [L]=SOFTLOCKUP
[  380.267118][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  380.277171][    C0] Workqueue: bat_events batadv_mcast_mla_update
[  380.283422][    C0] Call Trace:
[  380.286695][    C0]  <IRQ>
[  380.289537][    C0]  dump_stack_lvl+0x99/0x250
[  380.294210][    C0]  ? __asan_memcpy+0x40/0x70
[  380.298789][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  380.303981][    C0]  ? __pfx__printk+0x10/0x10
[  380.308573][    C0]  vpanic+0x237/0x6d0
[  380.312552][    C0]  ? __pfx_vpanic+0x10/0x10
[  380.317052][    C0]  panic+0xb9/0xc0
[  380.320765][    C0]  ? __pfx_panic+0x10/0x10
[  380.325184][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  380.331090][    C0]  ? is_module_address+0x17/0xf0
[  380.336020][    C0]  ? mcp2221_raw_event+0x106a/0x1240
[  380.341302][    C0]  check_panic_on_warn+0x89/0xb0
[  380.346243][    C0]  ? mcp2221_raw_event+0x106a/0x1240
[  380.351522][    C0]  end_report+0x6f/0x140
[  380.355769][    C0]  kasan_report+0x129/0x150
[  380.360271][    C0]  ? mcp2221_raw_event+0x106a/0x1240
[  380.365554][    C0]  mcp2221_raw_event+0x106a/0x1240
[  380.370672][    C0]  ? down_trylock+0x50/0xb0
[  380.375172][    C0]  hid_input_report+0x41d/0x580
[  380.380281][    C0]  ? __pfx_mcp2221_raw_event+0x10/0x10
[  380.385735][    C0]  hid_irq_in+0x47e/0x6d0
[  380.390063][    C0]  __usb_hcd_giveback_urb+0x376/0x540
[  380.395435][    C0]  dummy_timer+0x85f/0x45b0
[  380.399942][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  380.405332][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  380.410263][    C0]  ? debug_object_deactivate+0x6d/0x360
[  380.415802][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  380.420735][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  380.425668][    C0]  __hrtimer_run_queues+0x51c/0xc30
[  380.430860][    C0]  ? ktime_get_update_offsets_now+0x67/0x3d0
[  380.436838][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  380.442553][    C0]  ? read_tsc+0x9/0x20
[  380.446617][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  380.452506][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  380.457614][    C0]  handle_softirqs+0x27d/0x850
[  380.462370][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  380.467123][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  380.472398][    C0]  __irq_exit_rcu+0xca/0x1f0
[  380.476981][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  380.482182][    C0]  irq_exit_rcu+0x9/0x30
[  380.486412][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  380.492045][    C0]  </IRQ>
[  380.494961][    C0]  <TASK>
[  380.497913][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  380.503883][    C0] RIP: 0010:lock_acquire+0xd1/0x340
[  380.509071][    C0] Code: 7e 92 83 b8 2c 0b 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 <fa> 48 c7 c7 93 5c 7a 8d e8 a2 f6 bc 09 65 ff 05 2b 5d e0 10 45 31
[  380.528667][    C0] RSP: 0018:ffffc9000b64f7e0 EFLAGS: 00000246
[  380.534734][    C0] RAX: ffff888024e80000 RBX: 0000000000000000 RCX: 91a0b07b8b192700
[  380.542695][    C0] RDX: 0000000000000000 RSI: ffffffff8b2829ff RDI: 1ffffffff1be833c
[  380.550658][    C0] RBP: ffffffff8b282579 R08: 0000000000000000 R09: 0000000000000000
[  380.558711][    C0] R10: dffffc0000000000 R11: ffffed1005fc9ad0 R12: 0000000000000002
[  380.566671][    C0] R13: ffffffff8df419e0 R14: 0000000000000000 R15: 0000000000000246
[  380.574635][    C0]  ? batadv_mcast_mla_update+0x179/0x3600
[  380.580364][    C0]  ? batadv_mcast_mla_update+0x5ff/0x3600
[  380.586085][    C0]  ? batadv_mcast_mla_update+0x179/0x3600
[  380.591807][    C0]  batadv_mcast_mla_update+0x5ff/0x3600
[  380.597343][    C0]  ? batadv_mcast_mla_update+0x179/0x3600
[  380.603096][    C0]  ? batadv_mcast_mla_update+0x179/0x3600
[  380.608830][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  380.614212][    C0]  ? __pfx_batadv_mcast_mla_update+0x10/0x10
[  380.620206][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  380.625404][    C0]  ? process_one_work+0x868/0x15a0
[  380.630609][    C0]  process_one_work+0x93a/0x15a0
[  380.635615][    C0]  ? __pfx_process_one_work+0x10/0x10
[  380.641005][    C0]  ? assign_work+0x3a1/0x410
[  380.645600][    C0]  worker_thread+0x9b0/0xee0
[  380.650203][    C0]  kthread+0x711/0x8a0
[  380.654304][    C0]  ? __pfx_worker_thread+0x10/0x10
[  380.659424][    C0]  ? __pfx_kthread+0x10/0x10
[  380.664035][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  380.669239][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[  380.674439][    C0]  ? __pfx_kthread+0x10/0x10
[  380.679029][    C0]  ret_from_fork+0x599/0xb30
[  380.683612][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  380.688725][    C0]  ? __switch_to_asm+0x39/0x70
[  380.693492][    C0]  ? __switch_to_asm+0x33/0x70
[  380.698248][    C0]  ? __pfx_kthread+0x10/0x10
[  380.702835][    C0]  ret_from_fork_asm+0x1a/0x30
[  380.707598][    C0]  </TASK>
[  380.710986][    C0] Kernel Offset: disabled
[  380.715347][    C0] Rebooting in 86400 seconds..