last executing test programs:

6.536865184s ago: executing program 0 (id=1517):
r0 = socket$inet(0x2, 0x3, 0x88)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0)

6.536666826s ago: executing program 0 (id=1518):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000)

6.536450107s ago: executing program 0 (id=1519):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00')

6.500191294s ago: executing program 0 (id=1521):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4", @ANYRESOCT], 0x1, 0x4441, &(0x7f0000010200)="$eJzs3c9vFNcdAPA3Y1NsiqmhHKhUqSsVqVVbWTantkaqMQZjg0tFC4delrW9gJO1F9nrKAcOzg0pp0g5RDmgRMrNJ2QpZ/In5JIjOSMlh1wiRUJxtLOzxjO7GxbLawf0+Rx2PO+3/Z15++YwfnGqdm9prbC0ViitFKoLd9bOFd6pVtaXyyE+IG37P3Jw/dOdXlwnP9fm5/s2ctq5fvHyf2+dC+GLxa+ebW9vb4e6/tDW2K6fv//uwcLuY1Ocq1Nvt31r++X/IYTTLeOq6wshDIQQohDChTRtMj0OhhCG0rxbD96/Xdin0Tx+Wj5ffD73cGv87Ozmo63Ov3sUwseV3/3t7vI3f+wb//ov+9Q9AAAAAAAAAAAAAAAAAACvuekb12/+Z3QsPIlC/2bU+r7udHrs9H7s9j4YSlr5Q+9/WQAAAAAAAAAAAAAAAAAAAPiFevH+fyE61eb9/6n0ONGh/va/ej9Gemfm39enLo2Opfu/Ry35f0+Tvr3QF0622fc9v//7hVz99vu/t/azV83xNfsdDlE8kjmP45GRED5NN34/Ex2LK9W12l/vVNdXFvdtGK+tbPwbu/dnopNu6N9l/OPJXPu93///ty1XU/389v5dYm+0bPz7Opb77L2oq/v/Yq7eQcSfvcvGvz9JG9xdYKIxAdTj/0F/Pu59LfGfyrXfq/ifCAOhENXHWsjMAPU1TD2903qFrGz8jyRpmakz/UN2uv9/yMX/Uq79w5r/N/JfRLSVjf+vkrSBTImjyWcS//jl8//lXPuHEf/6+Dd8/3clG/9GrEN/pkjyl2w//7fGfzrXfsf4H21N2n6Fcd+M03GeiDJXwGbUSO/0/+rIysZ/oCX/xfNf3NX670qu/kE9/zX7bT7/Naf/P0eN5z/ay8Z/sGO5bu//mVy9Xs//E8n6j73Kxv9YkpZdOw8nn93GfzbXfq/inzyVDDTj/2I++fFoI/0T67+uZOP/60ZivLvERvKZrP+il6//r+baP4z1X338G3Fve31TZON/vGO5evy/7OL7/1quXu/jH8Kotf6eZeM/1LFccv8PvDz+c7l6vY7/n3rZOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBrYDI9DocoHsmcx/HISAgX0/Mz4Vg0X1oszleqC2+vhTCVphfCqehupTpfqhSXVqqL5WKpUqkuhHApzT8dBqK1SrVWXC7dv7zT1mB0r1xarc2XS7UQwnSa/vsw1Gxrfqm2XLofQriyk/ebuLp6/15ppbi4tPrP0dHR0TCzM4aTUfndWnml1ui9kRvC7E7d4WjX4JLsqztjOR69VV1fXSlVkvRru+pUqgulyq46c2neh+FkVFtdX1ko1crFSvVus7/DNJEep2Zu/O/GtbGW/NtR4zh5sMMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BU9Gf/HRyGE/sZZHEKYaP4QtSv/+Gn5fPH53MOt8bOzm4+2nnUqBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzEDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbpHzWBIIoD8JsJ5E+XY6Raki7thkBIimwIeAI9hofRo3gJ72BhYWshguyirruwIHbf1zyYHzPvwTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY5uu/Gv29vkWkeNw9RCwmy9Vp/lPX2Uf3/buhje6vm5Pb+P6tPo9/mC7y9/poXeZDut1Mx9FRG/PWnrT36bzPU+9cffvWN1/T9zlSLiKirPOXlHNRDHsLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANizAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRd8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvwIAAP//gmMaYw==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa8)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
ioctl$FITRIM(r0, 0x40046f01, &(0x7f0000000500)={0x7fffffff, 0x2, 0x401})

6.272581504s ago: executing program 0 (id=1524):
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x19, 0x2, "f3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

5.984980878s ago: executing program 0 (id=1530):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1400010000000000f00000000000ffff81"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

5.85676162s ago: executing program 32 (id=1530):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1400010000000000f00000000000ffff81"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

1.952951703s ago: executing program 2 (id=1596):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYRES32=0x0], 0xfe, 0x1222, &(0x7f00000024c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x116)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000))

1.834980671s ago: executing program 2 (id=1601):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000240), &(0x7f0000000340)=r4}, 0x20)

1.316425941s ago: executing program 1 (id=1611):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

1.316237146s ago: executing program 1 (id=1612):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)

1.31595096s ago: executing program 1 (id=1613):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff7fe}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f00000270c0)=""/102368, 0x18fe0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_dev$I2C(0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x9, 0xeeb5, 0x1, 0x8, 0x6, 0x400, 0x7fffffffffffffff}, &(0x7f0000000200)={0x80000001, 0x200, 0x9, 0x4, 0x34e, 0x1, 0x4, 0xffffffff}, &(0x7f0000000240)={0x9, 0x3, 0xc1f6, 0x4, 0x7, 0x9, 0x6, 0x4}, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={[0xfbd]}, 0x8})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in6=@mcast2, 0x4e25, 0x0, 0x0, 0x0, 0x2}, {0x2, 0x53, 0xfff, 0x8, 0xfffffffffffffffc, 0x1e6, 0x2, 0x8004}, {0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in6=@private0, 0x0, 0x32}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4, 0x2, 0x0, 0x2, 0x2, 0x9}}, 0xe8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {0x3e000000, 0x0, 0x3e000000}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6})
ioctl$TCSETS(r4, 0x40384708, 0x0)
mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x40, 0x31, &(0x7f0000000480)={0x18, 0x3, 0x7, 0x200000004})
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0)

966.62512ms ago: executing program 3 (id=1614):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @private=0xa010101}, 0x10)
shutdown(r0, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x8, 0x7, 0x2, 0x0, 0x6c6d, 0x8, 0x0, 0xff}, 0x20)

862.910847ms ago: executing program 3 (id=1615):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000100)="520003000100b8", 0x7)

862.687971ms ago: executing program 2 (id=1616):
unshare(0xa020480)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f00000003c0)=@ethtool_cmd={0xc, 0x5, 0x5, 0xdca2, 0x7, 0x0, 0x3, 0xfc, 0x0, 0x1, 0xfffff729, 0x2, 0x9030, 0xfb, 0x0, 0x45, [0x5, 0x8000003]}})

716.316068ms ago: executing program 2 (id=1617):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r2, 0x0, 0x7a6, 0xffe7, &(0x7f0000000500)="0ec67ba17264d20f00000000000000", 0x4})

716.119561ms ago: executing program 3 (id=1618):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1)
sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x54)

643.778929ms ago: executing program 2 (id=1619):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
truncate(&(0x7f0000000000)='./file1\x00', 0x8000)

585.116243ms ago: executing program 3 (id=1620):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f00000024c0)={0x20, r1, 0x1, 0x0, &(0x7f0000004c40)=[{}]})

526.692386ms ago: executing program 3 (id=1621):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ptrace(0x10, 0x0)
syz_pidfd_open(0x0, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000000), 0x4, 0x982a, &(0x7f0000009b80)="$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")

416.650896ms ago: executing program 2 (id=1622):
syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x9, 0x4, 0x3, 0x8, 0x4}, 0x0, 0x0})
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0xf8)

106.20166ms ago: executing program 1 (id=1623):
r0 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10}, 0x1c)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000005c0), 0x10)

106.040052ms ago: executing program 1 (id=1624):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x629, 0x2, 0x401, 0x2, 0xcc7, 0xfff, 0x5c952399, 0xd, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x80000000, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0x2]})

105.849857ms ago: executing program 1 (id=1625):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB="64697361626c655f726f6c6c5f666f72776172642c71756f74612c6772706a71756f74613d06bb8dda88c6b810723db4f81c1258d8d63ba020d1b5a390ff5e08451bfcf713e4123513083063d1a6348e838d9528c380ed63c7e825b53c1672748b808b924f19ccddbafbe0210fa3dde3ad5a2bc72c6e6f71756f74612c66617374626f6f742c6e6f757365725f78617474722c70726a6a71756f74613d2d8b91d2cea119d7c4187a2c6a71666d743d7666737631000000000000000565722c636865636b706f696e743d656e61626c652c00"], 0x1, 0x5504, &(0x7f0000002340)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

0s ago: executing program 3 (id=1626):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xa2cc, @local, 0xf}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000080)='\\', 0x1}], 0x1}}], 0x2, 0x4000840)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000980)={0x0, 0x5}, &(0x7f00000009c0)=0x8)

kernel console output (not intermixed with test programs):

 ports (0x0 cabled) and 2 rx sensors (0x3e active)
[  114.226606][   T51] usb 1-1: Using ep0 maxpacket: 8
[  114.238676][   T51] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  114.242277][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.247569][   T51] usb 1-1: config 0 descriptor??
[  114.282792][ T5890] usb 3-1: USB disconnect, device number 17
[  114.352609][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'.
[  114.507729][ T8295] netlink: 'syz.1.916': attribute type 10 has an invalid length.
[  114.511271][ T8295] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  114.554298][ T8295] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  114.671112][ T8299] loop1: detected capacity change from 0 to 32768
[  114.676359][ T8299] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  114.697160][ T8299] XFS (loop1): Ending clean mount
[  114.699798][ T8299] XFS (loop1): Quotacheck needed: Please wait.
[  114.705767][ T8299] XFS (loop1): Quotacheck: Done.
[  114.725006][   T33] audit: type=1804 audit(1756146873.192:44): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.918" name="/newroot/310/file0/file1" dev="loop1" ino=9286 res=1 errno=0
[  114.737275][ T5848] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  114.815161][ T8311] openvswitch: netlink: IP tunnel dst address not specified
[  114.975598][ T8327] loop2: detected capacity change from 0 to 16
[  114.979865][ T8327] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  115.059096][   T51] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  115.063112][   T51] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  115.086857][   T51] asix 1-1:0.0: probe with driver asix failed with error -71
[  115.094968][   T51] usb 1-1: USB disconnect, device number 18
[  115.466625][ T5890] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  115.616715][ T5890] usb 2-1: Using ep0 maxpacket: 32
[  115.621327][ T5890] usb 2-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe
[  115.624480][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.627666][ T5890] usb 2-1: Product: syz
[  115.629113][ T5890] usb 2-1: Manufacturer: syz
[  115.630795][ T5890] usb 2-1: SerialNumber: syz
[  115.633255][ T5890] usb 2-1: config 0 descriptor??
[  115.661851][ T8331] loop0: detected capacity change from 0 to 1024
[  115.668847][ T8331] hfsplus: bad catalog entry type
[  115.677465][ T6245] hfsplus: b-tree write err: -5, ino 4
[  115.742517][ T8337] loop0: detected capacity change from 0 to 1764
[  115.894634][   T51] usb 2-1: USB disconnect, device number 23
[  116.326213][ T8361] erspan1: entered allmulticast mode
[  116.605448][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'.
[  116.611343][ T5991] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  116.730678][ T8370] netlink: 592 bytes leftover after parsing attributes in process `syz.1.946'.
[  116.791459][ T5991] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  116.798291][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.807669][ T5991] usb 3-1: Product: syz
[  116.814756][ T5991] usb 3-1: Manufacturer: syz
[  116.820996][ T5991] usb 3-1: SerialNumber: syz
[  116.826860][ T5991] usb 3-1: config 0 descriptor??
[  116.912975][ T8385] loop0: detected capacity change from 0 to 32768
[  116.921642][ T8385] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  116.941507][ T8385] XFS (loop0): Ending clean mount
[  116.944355][ T8385] XFS (loop0): Quotacheck needed: Please wait.
[  116.949380][ T8385] XFS (loop0): Quotacheck: Done.
[  116.990443][ T5853] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  117.032801][ T5991] hso 3-1:0.0: Failed to find BULK IN ep
[  117.046295][ T5991] usb-storage 3-1:0.0: USB Mass Storage device detected
[  117.238946][ T6208] usb 3-1: USB disconnect, device number 18
[  118.341255][ T8426] loop1: detected capacity change from 0 to 8192
[  118.716625][ T5883] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  118.787562][ T5991] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  118.866710][ T5883] usb 2-1: Using ep0 maxpacket: 8
[  118.870432][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.874719][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  118.879758][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  118.884227][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  118.888246][ T5883] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7
[  118.891884][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.896185][ T5883] usb 2-1: config 0 descriptor??
[  118.899813][ T5883] metro_usb 2-1:0.0: Metrologic USB to Serial converter detected
[  118.904333][ T5883] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  118.946658][ T5991] usb 1-1: Using ep0 maxpacket: 32
[  118.950274][ T5991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.954641][ T5991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.958640][ T5991] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[  118.962374][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.966791][ T5991] usb 1-1: config 0 descriptor??
[  119.101942][   T51] usb 2-1: USB disconnect, device number 24
[  119.105288][   T51] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  119.111744][   T51] metro_usb 2-1:0.0: device disconnected
[  119.291108][ T8440] loop2: detected capacity change from 0 to 128
[  119.294745][ T8440] adfs: Bad value for 'ftsuffix'
[  119.375379][ T5991] hid_parser_main: 202 callbacks suppressed
[  119.375420][ T5991] glorious 0003:258A:0033.000E: unknown main item tag 0x1
[  119.381076][ T5991] glorious 0003:258A:0033.000E: item fetching failed at offset 2/3
[  119.384542][ T5991] glorious 0003:258A:0033.000E: probe with driver glorious failed with error -22
[  119.575932][ T5991] usb 1-1: USB disconnect, device number 19
[  119.662749][   T51] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  119.681233][ T8454] loop1: detected capacity change from 0 to 4096
[  119.689976][ T8455] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.739031][ T8459] netlink: 45 bytes leftover after parsing attributes in process `syz.1.982'.
[  119.816742][   T51] usb 3-1: Using ep0 maxpacket: 32
[  119.820194][   T51] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  119.823113][   T51] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  119.826088][   T51] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  119.829897][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  119.832900][   T51] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  119.836046][   T51] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  119.845814][   T51] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  119.848900][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.855221][   T51] usb 3-1: config 0 descriptor??
[  120.030041][ T8469] loop1: detected capacity change from 0 to 32768
[  120.033865][ T8469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.987 (8469)
[  120.044081][ T8469] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.050075][ T8469] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  120.062839][   T51] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  120.093563][ T8469] BTRFS info (device loop1): enabling ssd optimizations
[  120.099051][ T8469] BTRFS info (device loop1): enabling free space tree
[  120.102013][ T8469] BTRFS info (device loop1): enabling auto defrag
[  120.104816][ T8469] BTRFS info (device loop1): use zlib compression, level 3
[  120.109359][ T8469] BTRFS info (device loop1): max_inline set to 0
[  120.120458][   T33] audit: type=1804 audit(1756146878.592:45): pid=8469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.987" name="/newroot/336/file1/file1" dev="loop1" ino=260 res=1 errno=0
[  120.143292][ T5848] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.267027][ T5991] usb 3-1: USB disconnect, device number 19
[  120.273732][ T5991] usblp0: removed
[  120.303868][ T8491] loop1: detected capacity change from 0 to 40427
[  120.309460][ T8491] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  120.312349][ T8491] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  120.339138][ T8491] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  120.343465][ T8491] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  120.346417][ T8491] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  120.380348][ T5848] syz-executor: attempt to access beyond end of device
[  120.380348][ T5848] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  120.389043][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  120.389062][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.389069][ T5848] Call Trace:
[  120.389074][ T5848]  <TASK>
[  120.389078][ T5848]  dump_stack_lvl+0x189/0x250
[  120.389098][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.389113][ T5848]  ? __pfx_queue_work_on+0x10/0x10
[  120.389125][ T5848]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  120.389142][ T5848]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.389158][ T5848]  f2fs_handle_critical_error+0x37c/0x540
[  120.389175][ T5848]  f2fs_write_end_io+0x886/0xb60
[  120.389191][ T5848]  __submit_merged_bio+0x27a/0x6a0
[  120.389207][ T5848]  __submit_merged_write_cond+0x255/0x530
[  120.389223][ T5848]  f2fs_write_data_pages+0x261d/0x3000
[  120.389251][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.389269][ T5848]  ? exc_page_fault+0x9f/0xf0
[  120.389287][ T5848]  ? exc_page_fault+0x9f/0xf0
[  120.389310][ T5848]  ? lock_release+0x4b/0x3e0
[  120.389326][ T5848]  ? bpf_probe_read_compat_str+0x155/0x180
[  120.389341][ T5848]  ? bpf_trace_run4+0x322/0x4a0
[  120.389357][ T5848]  ? rcu_is_watching+0x15/0xb0
[  120.389395][ T5848]  ? do_raw_spin_lock+0x121/0x290
[  120.389416][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  120.389429][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.389447][ T5848]  do_writepages+0x32e/0x550
[  120.389462][ T5848]  ? rcu_is_watching+0x15/0xb0
[  120.389473][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  120.389487][ T5848]  filemap_fdatawrite+0x199/0x240
[  120.389504][ T5848]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  120.389532][ T5848]  ? rcu_is_watching+0x15/0xb0
[  120.389544][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  120.389558][ T5848]  f2fs_sync_dirty_inodes+0x31f/0x830
[  120.389575][ T5848]  f2fs_write_checkpoint+0x95a/0x1df0
[  120.389603][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  120.389627][ T5848]  ? rcu_is_watching+0x15/0xb0
[  120.389639][ T5848]  ? kill_f2fs_super+0x298/0x6c0
[  120.389652][ T5848]  kill_f2fs_super+0x2c3/0x6c0
[  120.389665][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[  120.389675][ T5848]  ? radix_tree_delete_item+0x2b6/0x400
[  120.389693][ T5848]  ? shrinker_free+0x2ce/0x3e0
[  120.389705][ T5848]  deactivate_locked_super+0xbc/0x130
[  120.389718][ T5848]  cleanup_mnt+0x425/0x4c0
[  120.389730][ T5848]  task_work_run+0x1d4/0x260
[  120.389745][ T5848]  ? __pfx_task_work_run+0x10/0x10
[  120.389757][ T5848]  ? __x64_sys_umount+0x122/0x160
[  120.389771][ T5848]  ? __pfx___x64_sys_umount+0x10/0x10
[  120.389788][ T5848]  ? rcu_is_watching+0x15/0xb0
[  120.389800][ T5848]  exit_to_user_mode_loop+0xec/0x110
[  120.389817][ T5848]  do_syscall_64+0x2bd/0x3b0
[  120.389832][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.389842][ T5848]  ? exc_page_fault+0x9f/0xf0
[  120.389857][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.389869][ T5848] RIP: 0033:0x7f033c38ff17
[  120.389879][ T5848] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  120.389890][ T5848] RSP: 002b:00007ffeca8c5d28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  120.389905][ T5848] RAX: 0000000000000000 RBX: 00007f033c411c05 RCX: 00007f033c38ff17
[  120.389912][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeca8c5de0
[  120.389919][ T5848] RBP: 00007ffeca8c5de0 R08: 0000000000000000 R09: 0000000000000000
[  120.389925][ T5848] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeca8c6e70
[  120.389932][ T5848] R13: 00007f033c411c05 R14: 000000000001d5b3 R15: 00007ffeca8c6eb0
[  120.389946][ T5848]  </TASK>
[  120.389951][ T5848] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  120.704479][ T8500] loop1: detected capacity change from 0 to 4096
[  120.709049][ T8500] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  120.726727][ T8500] ntfs3(loop1): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  120.738896][ T8500] ntfs3(loop1): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  121.087645][ T8511] loop0: detected capacity change from 0 to 32768
[  121.090570][ T8511] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.998 (8511)
[  121.095486][ T8517] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  121.104683][ T8511] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  121.109097][ T8511] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  121.206438][ T8511] BTRFS info (device loop0): enabling ssd optimizations
[  121.208919][ T8511] BTRFS info (device loop0): enabling free space tree
[  121.229536][ T5853] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  121.253865][ T8524] loop1: detected capacity change from 0 to 32768
[  121.258148][ T8524] (syz.1.1001,8524,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  121.262870][ T8524] (syz.1.1001,8524,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  121.278253][ T8524] JBD2: Ignoring recovery information on journal
[  121.291357][ T8524] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  121.294757][   T33] audit: type=1326 audit(1756146879.762:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.0.1002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba258ebe9 code=0x7ffc0000
[  121.304298][   T33] audit: type=1326 audit(1756146879.762:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.0.1002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba258ebe9 code=0x7ffc0000
[  121.313675][   T33] audit: type=1326 audit(1756146879.782:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.0.1002" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f3ba258ebe9 code=0x7ffc0000
[  121.334732][   T33] audit: type=1326 audit(1756146879.782:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.0.1002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba258ebe9 code=0x7ffc0000
[  121.343350][   T33] audit: type=1326 audit(1756146879.782:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.0.1002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba258ebe9 code=0x7ffc0000
[  121.361001][   T33] audit: type=1326 audit(1756146879.792:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.0.1002" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ba258ebe9 code=0x7ffc0000
[  121.368881][   T33] audit: type=1326 audit(1756146879.792:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.0.1002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba258ebe9 code=0x7ffc0000
[  121.372603][ T5848] ocfs2: Unmounting device (7,1) on (node local)
[  121.380419][   T33] audit: type=1326 audit(1756146879.792:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.0.1002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba258ebe9 code=0x7ffc0000
[  121.389861][   T33] audit: type=1326 audit(1756146879.792:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.0.1002" exe="/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f3ba258ebe9 code=0x7ffc0000
[  121.445879][ T8546] loop0: detected capacity change from 0 to 1024
[  121.831720][ T8558] wg1 speed is unknown, defaulting to 1000
[  121.836705][ T8558] wg1 speed is unknown, defaulting to 1000
[  121.841904][ T8558] wg1 speed is unknown, defaulting to 1000
[  121.851874][ T8558] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  121.863758][ T8558] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  121.898063][ T8558] wg1 speed is unknown, defaulting to 1000
[  121.905874][ T8558] wg1 speed is unknown, defaulting to 1000
[  121.927535][ T8558] wg1 speed is unknown, defaulting to 1000
[  123.016663][ T8560] comedi comedi2: reset error (fatal)
[  123.191070][ T8574] mmap: syz.0.1017 (8574) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  123.281804][ T8576] loop0: detected capacity change from 0 to 512
[  123.307831][ T8576] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  123.324119][ T8576] EXT4-fs (loop0): orphan cleanup on readonly fs
[  123.337646][ T8576] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  123.347181][ T8576] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  123.350710][ T8576] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.1018: casefold flag without casefold feature
[  123.357673][ T8576] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1018: couldn't read orphan inode 16 (err -117)
[  123.365718][ T8576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  123.416936][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.629666][ T8589] binder: 8588:8589 unknown command 0
[  123.631913][ T8589] binder: 8588:8589 ioctl c0306201 200000000080 returned -22
[  124.376700][ T6208] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  124.550754][ T6208] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  124.555516][ T6208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.563609][ T6208] usb 2-1: config 0 descriptor??
[  124.993113][ T6208] [drm:udl_init] *ERROR* Selecting channel failed
[  125.005104][ T6208] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3
[  125.008924][ T6208] [drm] Initialized udl on minor 3
[  125.012835][ T6208] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  125.016224][ T6208] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  125.023186][ T6208] usb 2-1: USB disconnect, device number 25
[  125.026496][   T51] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  125.105462][ T8609] loop2: detected capacity change from 0 to 2048
[  125.141652][ T8610] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.151666][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  125.151731][   T33] audit: type=1800 audit(1756146883.622:57): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1033" name="file2" dev="loop2" ino=16 res=0 errno=0
[  125.160941][ T8610] NILFS (loop2): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  125.167549][ T8610] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16)
[  125.171910][ T8610] Remounting filesystem read-only
[  125.175412][ T8609] NILFS (loop2): error -2 truncating bmap (ino=16)
[  125.194293][ T5857] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  125.227727][ T8612] loop2: detected capacity change from 0 to 512
[  125.231117][ T8612] EXT4-fs: Ignoring removed nomblk_io_submit option
[  125.233938][ T8612] EXT4-fs (loop2): Test dummy encryption mode enabled
[  125.241862][ T8612] EXT4-fs (loop2): 1 truncate cleaned up
[  125.244572][ T8612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.734710][ T8624] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.737747][ T8624] bridge_slave_1: left allmulticast mode
[  125.739604][ T8624] bridge_slave_1: left promiscuous mode
[  125.741945][ T8624] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.747344][ T8624] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  126.088833][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.126338][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'.
[  126.202616][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.210425][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.262553][ T8647] netlink: 'syz.2.1049': attribute type 21 has an invalid length.
[  126.265338][ T8647] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1049'.
[  126.774813][ T8665] loop0: detected capacity change from 0 to 8
[  126.783709][ T8665] SQUASHFS error: xz decompression failed, data probably corrupt
[  126.786584][ T8665] SQUASHFS error: Failed to read block 0x108: -5
[  126.789099][ T8665] SQUASHFS error: Unable to read metadata cache entry [106]
[  126.792020][ T8665] SQUASHFS error: Unable to read inode 0x11f
[  126.820932][ T8667] new mount options do not match the existing superblock, will be ignored
[  126.824591][ T8667] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  127.361843][ T8683] loop2: detected capacity change from 0 to 32768
[  127.366234][ T8683] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1065 (8683)
[  127.372494][ T8683] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  127.375949][ T8683] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  127.404442][ T8683] BTRFS info (device loop2): enabling ssd optimizations
[  127.407095][ T8683] BTRFS info (device loop2): enabling free space tree
[  127.429965][ T5857] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  127.460721][ T8701] loop2: detected capacity change from 0 to 1024
[  127.463936][ T8701] EXT4-fs: Ignoring removed oldalloc option
[  127.467164][ T8701] EXT4-fs: Ignoring removed orlov option
[  127.470232][ T8701] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled
[  127.483936][ T8701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.503067][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.544646][ T8708] overlay: Bad value for 'upperdir'
[  127.726753][   T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  127.873403][ T8722] GUP no longer grows the stack in syz.0.1074 (8722): 200000005000-200000008000 (200000004000)
[  127.887212][ T8722] CPU: 0 UID: 0 PID: 8722 Comm: syz.0.1074 Not tainted syzkaller #0 PREEMPT(full) 
[  127.887233][ T8722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.887241][ T8722] Call Trace:
[  127.887246][ T8722]  <TASK>
[  127.887252][ T8722]  dump_stack_lvl+0x189/0x250
[  127.887273][ T8722]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.887288][ T8722]  ? __pfx__printk+0x10/0x10
[  127.887329][ T8722]  ? find_vma+0xe7/0x160
[  127.887350][ T8722]  fixup_user_fault+0x661/0x720
[  127.887367][ T8722]  fault_in_user_writeable+0x72/0xe0
[  127.887383][ T8722]  futex_lock_pi+0x773/0xa90
[  127.887402][ T8722]  ? __pfx_futex_lock_pi+0x10/0x10
[  127.887417][ T8722]  ? futex_private_hash_get+0x43/0x290
[  127.887439][ T8722]  ? __pfx_futex_wake_mark+0x10/0x10
[  127.887465][ T8722]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[  127.887485][ T8722]  do_futex+0x292/0x420
[  127.887501][ T8722]  ? __pfx_do_futex+0x10/0x10
[  127.887515][ T8722]  ? __vm_munmap+0x301/0x3d0
[  127.887531][ T8722]  __se_sys_futex+0x36f/0x400
[  127.887548][ T8722]  ? __pfx___se_sys_futex+0x10/0x10
[  127.887567][ T8722]  ? rcu_is_watching+0x15/0xb0
[  127.887581][ T8722]  ? __x64_sys_futex+0x21/0xf0
[  127.887598][ T8722]  do_syscall_64+0xfa/0x3b0
[  127.887617][ T8722]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.887628][ T8722]  ? exc_page_fault+0x9f/0xf0
[  127.887644][ T8722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.887657][ T8722] RIP: 0033:0x7f3ba258ebe9
[  127.887668][ T8722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.887699][ T8722] RSP: 002b:00007f3ba3387038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  127.887713][ T8722] RAX: ffffffffffffffda RBX: 00007f3ba27b5fa0 RCX: 00007f3ba258ebe9
[  127.887723][ T8722] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[  127.887731][ T8722] RBP: 00007f3ba2611e19 R08: 0000000000000000 R09: 0000000000000000
[  127.887739][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.887747][ T8722] R13: 00007f3ba27b6038 R14: 00007f3ba27b5fa0 R15: 00007fff377f3808
[  127.887761][ T8722]  </TASK>
[  128.148712][ T8724] loop1: detected capacity change from 0 to 32768
[  128.152347][ T8724] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1075 (8724)
[  128.159419][ T8724] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  128.163705][ T8724] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  128.204127][ T8732] netlink: 'syz.0.1078': attribute type 10 has an invalid length.
[  128.213793][ T8732] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1078'.
[  128.486012][ T8724] BTRFS info (device loop1): enabling ssd optimizations
[  128.490188][ T8724] BTRFS info (device loop1): enabling free space tree
[  128.492812][ T8724] BTRFS info (device loop1): use zstd compression, level 3
[  128.506720][ T5991] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  128.543561][ T5848] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  128.632997][ T8764] cgroup: Name too long
[  128.676601][ T5991] usb 1-1: Using ep0 maxpacket: 8
[  128.684492][ T5991] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  128.688960][ T5991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.691720][ T5991] usb 1-1: Product: syz
[  128.693064][ T5991] usb 1-1: Manufacturer: syz
[  128.695552][ T5991] usb 1-1: SerialNumber: syz
[  128.906635][ T6208] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  128.948926][ T8772] loop1: detected capacity change from 0 to 32768
[  128.958608][ T8772] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  128.958608][ T8772] clean (size 2912):
[  128.958608][ T8772] flags:          0
[  128.958608][ T8772] journal_seq:    10
[  128.958608][ T8772] usage: type=inodes v=8
[  128.958608][ T8772] usage: type=key_version v=0
[  128.958608][ T8772] btree_keys: 
[  128.958608][ T8772] usage: type=reserved v=0
[  128.958608][ T8772] usage: type=reserved v=0
[  128.958608][ T8772] usage: type=reserved v=0
[  128.958608][ T8772] data_usage: btree: 1/1 [0]=2816
[  128.958608][ T8772] data_usage: journal: 1/1 [0]=0
[  128.958608][ T8772] data_usage: user: 1/1 [0]=16
[  128.958608][ T8772] dev_usage: dev=0  
[  128.958608][ T8772]   free: buckets=83 sectors=0 fragmented=0
[  128.958608][ T8772]   sb: buckets=25 sectors=6152 fragmented=248
[  128.958608][ T8772]   journal: buckets=8 sectors=2048 fragmented=0
[  128.958608][ T8772]   btree: buckets=11 sectors=2816 fragmented=0
[  128.958608][ T8772]   user: buckets=1 sectors=16 fragmented=240
[  128.958608][ T8772]   cached: buckets=0 sectors=0 fragmented=13565952
[  128.958608][ T8772]   parity: buckets=0 sectors=0 fragmented=0
[  128.958608][ T8772]   stripe: buckets=0 sectors=0 fragmented=0
[  128.958608][ T8772]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  128.958608][ T8772]   need_discard: buckets=0 sectors=0 fragmented=0
[  128.958608][ T8772] clock: read=0
[  128.958608][ T8772] clock: write=1280
[  128.958608][ T8772] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c0
[  128.958749][ T8772] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  129.098268][ T6208] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  129.101879][ T6208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.105814][ T6208] usb 3-1: config 0 descriptor??
[  129.111190][ T5991] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4)
[  129.111865][ T6208] cp210x 3-1:0.0: cp210x converter detected
[  129.114526][ T5991] mxuport 1-1:254.0: probe with driver mxuport failed with error -5
[  129.280440][ T8780] loop1: detected capacity change from 0 to 40427
[  129.285941][ T8780] F2FS-fs (loop1): build fault injection rate: 14
[  129.288407][ T8780] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  129.291634][ T8780] F2FS-fs (loop1): invalid crc value
[  129.294569][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  129.300198][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  129.317844][ T8780] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  129.321238][ T8780] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  129.325565][ T8780] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  129.329481][ T5991] usb 1-1: USB disconnect, device number 20
[  129.349710][ T8780] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  129.354536][   T33] audit: type=1800 audit(1756146887.822:58): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1093" name="file1" dev="loop1" ino=10 res=0 errno=0
[  129.363162][ T8780] F2FS-fs (loop1): inject dquot initialize in f2fs_dquot_initialize of f2fs_symlink+0x23a/0x880
[  129.380142][ T5848] syz-executor: attempt to access beyond end of device
[  129.380142][ T5848] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  129.384820][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  129.384837][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.384843][ T5848] Call Trace:
[  129.384848][ T5848]  <TASK>
[  129.384852][ T5848]  dump_stack_lvl+0x189/0x250
[  129.384890][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.384906][ T5848]  ? __pfx_queue_work_on+0x10/0x10
[  129.384917][ T5848]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.384934][ T5848]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.384953][ T5848]  f2fs_handle_critical_error+0x37c/0x540
[  129.384973][ T5848]  f2fs_write_end_io+0x886/0xb60
[  129.384989][ T5848]  __submit_merged_bio+0x27a/0x6a0
[  129.385005][ T5848]  __submit_merged_write_cond+0x255/0x530
[  129.385022][ T5848]  f2fs_write_data_pages+0x261d/0x3000
[  129.385050][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.385080][ T5848]  ? kernel_text_address+0xa5/0xe0
[  129.385095][ T5848]  ? __kernel_text_address+0xd/0x40
[  129.385110][ T5848]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  129.385129][ T5848]  ? stack_trace_save+0x9c/0xe0
[  129.385144][ T5848]  ? stack_depot_save_flags+0x40/0x860
[  129.385160][ T5848]  ? do_raw_spin_lock+0x121/0x290
[  129.385178][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  129.385191][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.385208][ T5848]  do_writepages+0x32e/0x550
[  129.385224][ T5848]  ? rcu_is_watching+0x15/0xb0
[  129.385238][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  129.385253][ T5848]  filemap_fdatawrite+0x199/0x240
[  129.385268][ T5848]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  129.385322][ T5848]  ? rcu_is_watching+0x15/0xb0
[  129.385335][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  129.385350][ T5848]  f2fs_sync_dirty_inodes+0x31f/0x830
[  129.385366][ T5848]  f2fs_write_checkpoint+0x95a/0x1df0
[  129.385385][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  129.385413][ T5848]  ? kill_f2fs_super+0x298/0x6c0
[  129.385426][ T5848]  kill_f2fs_super+0x2c3/0x6c0
[  129.385440][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[  129.385456][ T5848]  ? radix_tree_delete_item+0x2b6/0x400
[  129.385474][ T5848]  ? shrinker_free+0x2ce/0x3e0
[  129.385488][ T5848]  deactivate_locked_super+0xbc/0x130
[  129.385501][ T5848]  cleanup_mnt+0x425/0x4c0
[  129.385515][ T5848]  task_work_run+0x1d4/0x260
[  129.385531][ T5848]  ? __pfx_task_work_run+0x10/0x10
[  129.385544][ T5848]  ? __x64_sys_umount+0x122/0x160
[  129.385559][ T5848]  ? __pfx___x64_sys_umount+0x10/0x10
[  129.385575][ T5848]  ? rcu_is_watching+0x15/0xb0
[  129.385587][ T5848]  exit_to_user_mode_loop+0xec/0x110
[  129.385603][ T5848]  do_syscall_64+0x2bd/0x3b0
[  129.385620][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.385632][ T5848]  ? exc_page_fault+0x9f/0xf0
[  129.385648][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.385659][ T5848] RIP: 0033:0x7f033c38ff17
[  129.385670][ T5848] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  129.385680][ T5848] RSP: 002b:00007ffeca8c5d28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  129.385694][ T5848] RAX: 0000000000000000 RBX: 00007f033c411c05 RCX: 00007f033c38ff17
[  129.385702][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeca8c5de0
[  129.385709][ T5848] RBP: 00007ffeca8c5de0 R08: 0000000000000000 R09: 0000000000000000
[  129.385716][ T5848] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeca8c6e70
[  129.385721][ T5848] R13: 00007f033c411c05 R14: 000000000001f8dd R15: 00007ffeca8c6eb0
[  129.385730][ T5848]  </TASK>
[  129.385985][ T5848] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  129.531751][ T6208] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  129.737659][ T6208] usb 3-1: cp210x converter now attached to ttyUSB0
[  129.741145][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1097'.
[  129.769852][ T8793] loop1: detected capacity change from 0 to 16
[  129.777648][ T8793] erofs (device loop1): mounted with root inode @ nid 36.
[  129.814128][ T8795] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  129.816869][ T8795] PKCS7: Only support pkcs7_signedData type
[  129.865130][ T8797] loop0: detected capacity change from 0 to 4096
[  129.878162][ T8798] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.889161][ T8797] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.'
[  129.899174][ T8797] Remounting filesystem read-only
[  129.938762][ T5890] usb 3-1: USB disconnect, device number 20
[  129.948182][ T5890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  129.955832][ T5890] cp210x 3-1:0.0: device disconnected
[  130.075366][ T8813] input: syz0 as /devices/virtual/input/input14
[  130.097157][   T54] Bluetooth: hci2: link tx timeout
[  130.099434][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  130.255007][ T8817] loop0: detected capacity change from 0 to 32768
[  130.287593][ T8817] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  130.297709][ T8817] XFS (loop0): Ending clean mount
[  130.307751][ T5853] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  130.400147][ T8831] loop0: detected capacity change from 0 to 8192
[  130.403646][ T8831] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  130.410487][ T8831] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[  130.413061][ T8831] FAT-fs (loop0): Filesystem has been set read-only
[  130.424587][ T5853] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[  130.568402][ T8845] overlayfs: upper fs does not support tmpfile.
[  130.766245][ T8849] loop0: detected capacity change from 0 to 65536
[  130.801505][ T8849] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  130.808399][ T8849] XFS (loop0): Ending clean mount
[  130.812133][ T8849] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  130.815878][ T8849] XFS (loop0): Unmount and run xfs_repair
[  130.817877][ T8849] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  130.820317][ T8849] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  130.823147][ T8849] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  130.826090][ T8849] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04  ................
[  130.829118][ T8849] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  130.832358][ T8849] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  130.835658][ T8849] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  130.839059][ T8849] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  130.842187][ T8849] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  130.845142][ T8849] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  130.848902][ T8849] XFS (loop0): page discard on page ffffea0000d25640, inode 0x26, pos 3072.
[  130.852229][ T5883] loop0: writeback error on inode 38, offset 0, sector 22
[  130.859355][ T5853] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  130.865440][ T5853] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  130.907426][ T5890] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  130.986781][ T6208] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  131.044016][ T8877] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  131.046467][ T8877] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  131.049732][ T8877] vhci_hcd vhci_hcd.0: Device attached
[  131.056651][ T5890] usb 3-1: Using ep0 maxpacket: 8
[  131.059773][ T5890] usb 3-1: config 0 has an invalid interface number: 130 but max is 0
[  131.063100][ T5890] usb 3-1: config 0 has no interface number 0
[  131.068122][ T5890] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56
[  131.071412][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.074007][ T5890] usb 3-1: Product: syz
[  131.075454][ T5890] usb 3-1: Manufacturer: syz
[  131.077608][ T5890] usb 3-1: SerialNumber: syz
[  131.080525][ T5890] usb 3-1: config 0 descriptor??
[  131.084995][ T5890] as10x_usb: device has been detected
[  131.087189][ T5890] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e))
[  131.094832][ T5890] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))...
[  131.101912][ T5890] as10x_usb: error during firmware upload part1
[  131.104227][ T5890] Registered device PCTV Systems picoStick (74e)
[  131.147112][ T6208] usb 2-1: Using ep0 maxpacket: 16
[  131.153524][ T6208] usb 2-1: config index 0 descriptor too short (expected 65, got 36)
[  131.156386][ T6208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.161530][ T6208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.165473][ T6208] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  131.171146][ T6208] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  131.175828][ T6208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.180955][ T6208] usb 2-1: config 0 descriptor??
[  131.188238][ T6208] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15
[  131.193471][ T5279] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  131.196989][ T5279] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  131.201168][ T5279] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  131.204326][ T5279] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  131.211714][ T5279] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  131.214963][ T5852] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  131.220862][ T5279] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  131.224875][ T5279] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  131.236973][ T5883] vhci_hcd: vhci_device speed not set
[  131.292529][ T6208] usb 3-1: USB disconnect, device number 21
[  131.300060][ T6208] Unregistered device PCTV Systems picoStick (74e)
[  131.300478][ T6208] as10x_usb: device has been disconnected
[  131.306639][ T5991] usb 1-1: new low-speed USB device number 21 using dummy_hcd
[  131.309457][ T5883] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  131.412033][   T51] usb 2-1: USB disconnect, device number 26
[  131.478682][ T5991] usb 1-1: config 0 has no interfaces?
[  131.480487][ T5991] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  131.483485][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.487251][ T5991] usb 1-1: config 0 descriptor??
[  131.693902][ T8878] usbip_core: unknown command
[  131.695909][ T8878] vhci_hcd: unknown pdu 0
[  131.697928][ T8878] usbip_core: unknown command
[  131.706972][   T12] vhci_hcd: stop threads
[  131.708713][   T12] vhci_hcd: release socket
[  131.710619][   T12] vhci_hcd: disconnect device
[  131.841416][ T8877] loop0: detected capacity change from 0 to 40427
[  131.845377][ T5883] vhci_hcd: vhci_device speed not set
[  131.857863][ T8877] F2FS-fs (loop0): invalid crc value
[  131.884015][ T8877] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  131.888988][ T8877] F2FS-fs (loop0): Start checkpoint disabled!
[  131.892725][ T8877] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  132.045863][ T8891] loop2: detected capacity change from 0 to 32768
[  132.059710][ T8891] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  132.064740][ T8891] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  132.136805][ T5235] Bluetooth: hci2: command 0x0405 tx timeout
[  132.193205][ T6208] usb 1-1: USB disconnect, device number 21
[  132.201211][ T8891] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74)
[  132.208360][ T8891] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  132.212541][ T8891] OCFS2: File system is now read-only.
[  132.214594][ T8891] (syz.2.1135,8891,1):ocfs2_search_one_group:1738 ERROR: status = -30
[  132.218822][ T8891] (syz.2.1135,8891,1):ocfs2_claim_suballoc_bits:1989 ERROR: status = -30
[  132.221458][ T8891] (syz.2.1135,8891,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  132.224324][ T8891] (syz.2.1135,8891,1):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  132.228984][ T8891] (syz.2.1135,8891,1):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  132.232453][ T8891] (syz.2.1135,8891,1):ocfs2_mknod_locked:641 ERROR: status = -30
[  132.235863][ T8891] (syz.2.1135,8891,1):ocfs2_mknod:388 ERROR: status = -30
[  132.239510][ T8891] (syz.2.1135,8891,1):ocfs2_mknod:505 ERROR: status = -30
[  132.241946][ T8891] (syz.2.1135,8891,1):ocfs2_create:678 ERROR: status = -30
[  132.255882][ T5857] ocfs2: Unmounting device (7,2) on (node local)
[  132.306801][ T5890] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  132.458518][ T5890] usb 2-1: config 0 has an invalid interface number: 95 but max is 0
[  132.461078][ T5890] usb 2-1: config 0 has no interface number 0
[  132.463164][ T5890] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64
[  132.466981][ T5890] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0xD has invalid maxpacket 16
[  132.472012][ T5890] usb 2-1: New USB device found, idVendor=10b5, idProduct=ac70, bcdDevice=27.ee
[  132.475208][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.478634][ T5890] usb 2-1: Product: syz
[  132.480057][ T5890] usb 2-1: Manufacturer: syz
[  132.481696][ T5890] usb 2-1: SerialNumber: syz
[  132.484146][ T5890] usb 2-1: config 0 descriptor??
[  132.486955][ T8889] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  132.489592][ T8889] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  132.493061][ T5890] cp210x 2-1:0.95: cp210x converter detected
[  132.688895][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.700377][ T5890] cp210x 2-1:0.95: failed to get vendor val 0x370b size 1: -71
[  132.704812][ T5890] cp210x 2-1:0.95: querying part number failed
[  132.709041][ T5890] usb 2-1: cp210x converter now attached to ttyUSB0
[  132.713555][ T6245] kworker/u9:5: attempt to access beyond end of device
[  132.713555][ T6245] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  132.722168][ T5890] usb 2-1: USB disconnect, device number 27
[  132.726084][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  132.726102][ T6245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.726109][ T6245] Workqueue: writeback wb_workfn (flush-7:0)
[  132.726131][ T6245] Call Trace:
[  132.726136][ T6245]  <TASK>
[  132.726141][ T6245]  dump_stack_lvl+0x189/0x250
[  132.726158][ T6245]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.726171][ T6245]  ? __pfx_queue_work_on+0x10/0x10
[  132.726183][ T6245]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  132.726199][ T6245]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  132.726216][ T6245]  f2fs_handle_critical_error+0x37c/0x540
[  132.726235][ T6245]  f2fs_write_end_io+0x886/0xb60
[  132.726279][ T6245]  __submit_merged_bio+0x27a/0x6a0
[  132.726297][ T6245]  __submit_merged_write_cond+0x255/0x530
[  132.726314][ T6245]  f2fs_write_data_pages+0x261d/0x3000
[  132.726339][ T6245]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.726359][ T6245]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  132.726380][ T6245]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  132.726397][ T6245]  ? trace_f2fs_writepages+0x7f/0x200
[  132.726413][ T6245]  ? f2fs_write_node_pages+0x478/0x6e0
[  132.726428][ T6245]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  132.726444][ T6245]  ? f2fs_update_inode+0x13d9/0x2620
[  132.726459][ T6245]  ? f2fs_write_inode+0x3fb/0x5f0
[  132.726474][ T6245]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  132.726489][ T6245]  ? cmp_ex_search+0x1e/0x80
[  132.726524][ T6245]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.726543][ T6245]  do_writepages+0x32e/0x550
[  132.726558][ T6245]  ? __pfx_search_extable+0x10/0x10
[  132.726573][ T6245]  ? unwind_next_frame+0xa5/0x2390
[  132.726590][ T6245]  __writeback_single_inode+0x145/0xff0
[  132.726605][ T6245]  ? do_raw_spin_unlock+0x4d/0x240
[  132.726620][ T6245]  writeback_sb_inodes+0x6c7/0x1010
[  132.726638][ T6245]  ? fprop_reflect_period_percpu+0x6b/0x330
[  132.726655][ T6245]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  132.726680][ T6245]  ? rcu_is_watching+0x15/0xb0
[  132.726694][ T6245]  wb_writeback+0x43b/0xaf0
[  132.726716][ T6245]  ? queue_io+0x341/0x590
[  132.726730][ T6245]  ? __pfx_wb_writeback+0x10/0x10
[  132.726746][ T6245]  ? rcu_is_watching+0x15/0xb0
[  132.726759][ T6245]  wb_workfn+0x409/0xef0
[  132.726773][ T6245]  ? __pfx_wb_workfn+0x10/0x10
[  132.726783][ T6245]  ? rcu_is_watching+0x15/0xb0
[  132.726794][ T6245]  ? rcu_is_watching+0x15/0xb0
[  132.726806][ T6245]  ? process_scheduled_works+0x9ef/0x17b0
[  132.726817][ T6245]  ? rcu_is_watching+0x15/0xb0
[  132.726827][ T6245]  ? lock_acquire+0x5f/0x360
[  132.726843][ T6245]  ? rcu_is_watching+0x15/0xb0
[  132.726853][ T6245]  ? process_scheduled_works+0x9ef/0x17b0
[  132.726863][ T6245]  ? process_scheduled_works+0x9ef/0x17b0
[  132.726874][ T6245]  process_scheduled_works+0xae1/0x17b0
[  132.726892][ T6245]  ? __pfx_process_scheduled_works+0x10/0x10
[  132.726908][ T6245]  worker_thread+0x8a0/0xda0
[  132.726920][ T6245]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  132.726937][ T6245]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  132.726951][ T6245]  ? __kthread_parkme+0x7b/0x200
[  132.726965][ T6245]  kthread+0x711/0x8a0
[  132.726979][ T6245]  ? __pfx_worker_thread+0x10/0x10
[  132.726990][ T6245]  ? __pfx_kthread+0x10/0x10
[  132.727004][ T6245]  ? rcu_is_watching+0x15/0xb0
[  132.727014][ T6245]  ? __pfx_kthread+0x10/0x10
[  132.727028][ T6245]  ret_from_fork+0x3fc/0x770
[  132.727041][ T6245]  ? __pfx_ret_from_fork+0x10/0x10
[  132.727054][ T6245]  ? __switch_to_asm+0x39/0x70
[  132.727069][ T6245]  ? __switch_to_asm+0x33/0x70
[  132.727082][ T6245]  ? __pfx_kthread+0x10/0x10
[  132.727096][ T6245]  ret_from_fork_asm+0x1a/0x30
[  132.727114][ T6245]  </TASK>
[  132.874821][ T5890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  132.877638][ T6208] kernel read not supported for file /dsp1 (pid: 6208 comm: kworker/1:5)
[  132.878845][ T5890] cp210x 2-1:0.95: device disconnected
[  132.885413][ T6245] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  133.041396][ T8906] loop2: detected capacity change from 0 to 256
[  133.045215][ T8906] FAT-fs (loop2): Directory bread(block 1285) failed
[  133.096416][ T8910] tmpfs: Cannot disable swap on remount
[  133.148027][ T8916] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  133.175797][ T8920] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1148'.
[  133.306306][ T8932] loop0: detected capacity change from 0 to 512
[  133.331168][ T8932] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1154: casefold flag without casefold feature
[  133.336303][ T8932] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1154: couldn't read orphan inode 15 (err -117)
[  133.341700][ T8932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.369623][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.437733][ T6208] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  133.489931][ T8952] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1163'.
[  133.528619][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'.
[  133.532313][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'.
[  133.589228][ T6208] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  133.592133][ T6208] usb 3-1: config 0 has no interface number 0
[  133.601283][ T6208] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  133.604347][ T6208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.608215][ T6208] usb 3-1: Product: syz
[  133.609997][ T6208] usb 3-1: Manufacturer: syz
[  133.611828][ T6208] usb 3-1: SerialNumber: syz
[  133.614223][ T6208] usb 3-1: config 0 descriptor??
[  133.682678][ T8966] capability: warning: `syz.1.1170' uses 32-bit capabilities (legacy support in use)
[  133.716315][ T8970] netlink: 'syz.0.1171': attribute type 11 has an invalid length.
[  133.719854][ T8970] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1171'.
[  133.827331][ T6208] usb 3-1: Found UVC 0.08 device syz (046d:0823)
[  133.829903][ T6208] usb 3-1: No valid video chain found.
[  133.839195][ T6208] usb 3-1: USB disconnect, device number 22
[  133.933772][ T8987] loop0: detected capacity change from 0 to 8192
[  133.940327][ T8987] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  133.982558][ T8991] : entered promiscuous mode
[  133.997564][ T5890] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  134.045669][ T8997] netlink: 'syz.0.1184': attribute type 11 has an invalid length.
[  134.105319][ T9001] overlayfs: empty lowerdir
[  134.148227][ T5890] usb 2-1: Using ep0 maxpacket: 16
[  134.152336][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.157220][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.162909][ T5890] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  134.166731][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.170322][ T5890] usb 2-1: Product: syz
[  134.172120][ T5890] usb 2-1: Manufacturer: syz
[  134.173739][ T9005] loop0: detected capacity change from 0 to 4096
[  134.174117][ T5890] usb 2-1: SerialNumber: syz
[  134.182222][ T9005] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  134.388895][ T5890] usb 2-1: 0:2 : does not exist
[  134.397486][ T5890] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  134.429993][ T5890] usb 2-1: USB disconnect, device number 28
[  134.459927][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.456795][ T6208] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  135.606797][ T6208] usb 2-1: Using ep0 maxpacket: 8
[  135.614053][ T6208] usb 2-1: unable to get BOS descriptor or descriptor too short
[  135.620601][ T6208] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  135.625290][ T6208] usb 2-1: config 7 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  135.629558][ T6208] usb 2-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  135.640526][ T6208] usb 2-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  135.644456][ T6208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.648066][ T6208] usb 2-1: Product: syz
[  135.649887][ T6208] usb 2-1: Manufacturer: syz
[  135.652023][ T6208] usb 2-1: SerialNumber: syz
[  135.750866][ T9030] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  135.836666][   T51] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  135.871904][ T6208] usb 2-1: USB disconnect, device number 29
[  135.918884][ T9032] loop0: detected capacity change from 0 to 32768
[  135.924788][ T9032] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.939611][ T9032] XFS (loop0): Ending clean mount
[  135.964041][ T5853] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.986601][   T51] usb 3-1: Using ep0 maxpacket: 32
[  136.006486][   T51] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  136.010918][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.014404][   T51] usb 3-1: Product: syz
[  136.016118][   T51] usb 3-1: Manufacturer: syz
[  136.020783][   T51] usb 3-1: SerialNumber: syz
[  136.027281][   T51] usb 3-1: config 0 descriptor??
[  136.185100][ T9052] loop0: detected capacity change from 0 to 4096
[  136.322081][ T9062] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3946
[  136.342410][ T9064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1211'.
[  136.346252][ T9064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1211'.
[  136.415828][ T9072] netlink: 'syz.1.1215': attribute type 1 has an invalid length.
[  136.423154][ T9072] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1215'.
[  136.437034][   T51] airspy 3-1:0.0: Board ID: 00
[  136.438731][   T51] airspy 3-1:0.0: Firmware version: 
[  136.444625][ T9076] netlink: 'syz.0.1217': attribute type 13 has an invalid length.
[  136.454804][ T9076] gretap0: refused to change device tx_queue_len
[  136.468521][ T9076] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  136.508122][ T9080] syz.0.1219 (9080): drop_caches: 0
[  136.746663][ T5883] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  136.898168][ T5883] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  136.901540][ T5883] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  136.904870][ T5883] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  136.908871][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.114414][ T5883] usb 1-1: USB disconnect, device number 22
[  137.440069][   T51] airspy 3-1:0.0: usb_control_msg() failed -71 request 10
[  137.446219][   T51] airspy 3-1:0.0: Registered as swradio24
[  137.448995][ T9092] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1223'.
[  137.452651][ T9092] netlink: 'syz.1.1223': attribute type 1 has an invalid length.
[  137.458727][   T51] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  137.463657][   T51] usb 3-1: USB disconnect, device number 23
[  137.594250][ T9095] loop1: detected capacity change from 0 to 32768
[  137.597945][ T9095] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1224 (9095)
[  137.605961][ T9095] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  137.610308][ T9095] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  137.624653][ T9095] BTRFS info (device loop1): rebuilding free space tree
[  137.630634][ T9095] BTRFS info (device loop1): setting nodatasum
[  137.633173][ T9095] BTRFS info (device loop1): allowing degraded mounts
[  137.636044][ T9095] BTRFS info (device loop1): enabling ssd optimizations
[  137.639439][ T9095] BTRFS info (device loop1): enabling free space tree
[  137.642139][ T9095] BTRFS info (device loop1): force clearing of disk cache
[  137.645021][ T9095] BTRFS info (device loop1): doing ref verification
[  137.647865][ T9095] BTRFS info (device loop1): force zlib compression, level 3
[  137.684822][ T5848] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  138.187761][ T9135] loop2: detected capacity change from 0 to 128
[  138.200546][ T9135] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  138.205803][ T9135] ext4 filesystem being mounted at /412/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  138.228815][ T5857] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  138.261332][ T9139] loop2: detected capacity change from 0 to 8192
[  138.289143][ T9131] loop1: detected capacity change from 0 to 32768
[  138.292131][ T9131] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section members_v1: too many devices for section size
[  138.292131][ T9131] members_v1 (size 40):
[  138.292131][ T9131] nr_devices mismatch: have 0 entries, should be 1
[  138.303476][ T9131] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  138.668999][ T9159] overlayfs: failed to resolve './file1': -2
[  139.556586][   T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  139.676881][ T5890] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  139.721063][   T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  139.724451][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.727207][   T24] usb 1-1: Product: syz
[  139.728615][   T24] usb 1-1: Manufacturer: syz
[  139.730159][   T24] usb 1-1: SerialNumber: syz
[  139.837084][ T5890] usb 2-1: Using ep0 maxpacket: 16
[  139.847589][ T5890] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  139.851603][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  139.855993][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[  139.860958][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7
[  139.865421][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024
[  139.870312][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  139.877464][ T5890] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  139.881216][ T5890] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  139.884311][ T5890] usb 2-1: Manufacturer: syz
[  139.889528][ T5890] usb 2-1: config 0 descriptor??
[  139.987303][ T9174] loop2: detected capacity change from 0 to 512
[  140.004910][ T9174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.011325][ T9174] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.026296][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.079017][ T9180] tipc: Started in network mode
[  140.081007][ T9180] tipc: Node identity 9232166d34ff, cluster identity 4711
[  140.083672][ T9180] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.089196][ T9180] tipc: Disabling bearer <eth:syzkaller0>
[  140.103329][ T5890] usb 2-1: USB disconnect, device number 30
[  140.141388][   T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  140.156646][   T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  140.161238][   T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  140.165835][   T24] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  140.170990][   T24] usb 1-1: USB disconnect, device number 23
[  140.406816][ T5883] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  140.556627][ T5883] usb 3-1: Using ep0 maxpacket: 32
[  140.562511][ T5883] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02
[  140.566446][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.570313][ T5883] usb 3-1: Product: syz
[  140.572136][ T5883] usb 3-1: Manufacturer: syz
[  140.574081][ T5883] usb 3-1: SerialNumber: syz
[  140.577346][ T5883] usb 3-1: config 0 descriptor??
[  140.581335][ T5883] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG
[  140.636045][ T9184] netlink: 'syz.1.1255': attribute type 3 has an invalid length.
[  140.639511][ T9184] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1255'.
[  140.750777][ T9191] netlink: 'syz.1.1258': attribute type 4 has an invalid length.
[  140.760387][ T9191] netlink: 'syz.1.1258': attribute type 4 has an invalid length.
[  140.789217][ T5883] usb 3-1: USB disconnect, device number 24
[  140.811447][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1260'.
[  140.825417][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1260'.
[  141.106586][ T5890] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  141.268560][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short
[  141.272540][ T5890] usb 1-1: config 3 has an invalid interface number: 8 but max is 3
[  141.275654][ T5890] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  141.279648][ T5890] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 4
[  141.283361][ T5890] usb 1-1: config 3 has no interface number 0
[  141.285795][ T5890] usb 1-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  141.290389][ T5890] usb 1-1: config 3 interface 8 altsetting 6 endpoint 0x82 has invalid wMaxPacketSize 0
[  141.294310][ T5890] usb 1-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  141.299576][ T5890] usb 1-1: config 3 interface 8 has no altsetting 0
[  141.305113][ T5890] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be
[  141.309112][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.312175][ T5890] usb 1-1: Product: syz
[  141.313881][ T5890] usb 1-1: Manufacturer: syz
[  141.315861][ T5890] usb 1-1: SerialNumber: syz
[  141.376113][ T9204] loop2: detected capacity change from 0 to 128
[  141.379567][ T9204] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  141.384574][ T9204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.458687][ T9210] trusted_key: syz.2.1267 sent an empty control message without MSG_MORE.
[  141.526393][ T5890] appledisplay 1-1:3.8: Submitting URB failed
[  141.530910][ T5890] appledisplay 1-1:3.8: probe with driver appledisplay failed with error -5
[  141.539618][ T5890] usb 1-1: USB disconnect, device number 24
[  141.684124][ T9229] sctp: [Deprecated]: syz.1.1272 (pid 9229) Use of int in max_burst socket option.
[  141.684124][ T9229] Use struct sctp_assoc_value instead
[  142.063947][ T9246] netlink: 'syz.2.1278': attribute type 10 has an invalid length.
[  142.073427][ T9246] netlink: 'syz.2.1278': attribute type 10 has an invalid length.
[  142.076367][ T9246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1278'.
[  142.080537][ T9246] batadv0: entered promiscuous mode
[  142.082546][ T9246] batadv0: entered allmulticast mode
[  142.088909][ T9246] bond0: (slave batadv0): Releasing backup interface
[  142.096585][ T9246] bridge0: port 3(batadv0) entered blocking state
[  142.099081][ T9246] bridge0: port 3(batadv0) entered disabled state
[  142.546778][ T5876] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  142.549737][ T5876] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  142.589378][ T9260] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1284'.
[  142.611388][ T9257] loop2: detected capacity change from 0 to 32768
[  142.632035][ T9257] (syz.2.1283,9257,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  142.663721][ T9257] (syz.2.1283,9257,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  142.688254][ T9257] (syz.2.1283,9257,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x579603b0. Applying ECC.
[  142.702945][ T9257] (syz.2.1283,9257,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x656d756e, computed 0x47e4d898
[  142.708624][ T9257] (syz.2.1283,9257,1):ocfs2_validate_dir_block:452 ERROR: Checksum failed for dinode 288
[  142.713848][ T9257] (syz.2.1283,9257,1):ocfs2_read_virt_blocks:1029 ERROR: status = -5
[  142.719502][ T9257] (syz.2.1283,9257,1):ocfs2_read_dir_block:511 ERROR: status = -5
[  142.722637][ T9257] (syz.2.1283,9257,1):ocfs2_find_entry_el:728 ERROR: reading directory 18, offset 0
[  142.727937][ T9257] (syz.2.1283,9257,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  142.731275][ T9257] (syz.2.1283,9257,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  142.731288][ T9257] (syz.2.1283,9257,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  142.740385][ T9257] (syz.2.1283,9257,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  142.743556][ T9257] (syz.2.1283,9257,1):ocfs2_fill_super:1177 ERROR: status = -22
[  143.137569][ T9265] loop1: detected capacity change from 0 to 32768
[  143.147326][ T9265] 
[  143.147326][ T9265]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.147326][ T9265] 
[  143.153691][ T9265] JFS: metapage_get_blocks failed
[  143.155502][ T9265] ERROR: (device loop1): release_metapage: metapage_write_one() failed
[  143.155502][ T9265] 
[  143.159728][ T9265] ERROR: (device loop1): diWrite: ixpxd invalid
[  143.159728][ T9265] 
[  143.167049][ T9265] ERROR: (device loop1): txCommit: 
[  143.167049][ T9265] 
[  143.172411][ T9265] ERROR: (device loop1): diWrite: ixpxd invalid
[  143.172411][ T9265] 
[  143.186384][ T9265] ERROR: (device loop1): txCommit: 
[  143.186384][ T9265] 
[  143.199217][ T5848] 
[  143.199217][ T5848]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.199217][ T5848] 
[  143.203312][ T5848] 
[  143.203312][ T5848]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.203312][ T5848] 
[  143.275468][ T9280] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1293'.
[  143.496635][   T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  143.647060][   T24] usb 1-1: Using ep0 maxpacket: 8
[  143.664961][   T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  143.673837][   T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  143.684090][   T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  143.691269][   T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  143.699255][   T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  143.702525][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.906416][ T9298] loop2: detected capacity change from 0 to 128
[  143.911978][   T24] usb 1-1: GET_CAPABILITIES returned 0
[  143.919560][   T24] usbtmc 1-1:16.0: can't read capabilities
[  144.115301][   T24] usb 1-1: USB disconnect, device number 25
[  144.344277][ T9327] loop1: detected capacity change from 0 to 256
[  144.597180][   T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  144.682621][ T9335] loop0: detected capacity change from 0 to 512
[  144.691309][ T9335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  144.694697][ T9335] System zones: 1-12
[  144.697384][ T9335] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1318: corrupted in-inode xattr: e_value size too large
[  144.703314][ T9335] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1318: couldn't read orphan inode 15 (err -117)
[  144.710314][ T9335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.723888][ T9335] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1318: corrupted in-inode xattr: e_value size too large
[  144.742988][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.746757][   T24] usb 2-1: Using ep0 maxpacket: 8
[  144.750661][   T24] usb 2-1: config 128 has an invalid interface number: 25 but max is 0
[  144.753881][   T24] usb 2-1: config 128 has no interface number 0
[  144.758678][   T24] usb 2-1: New USB device found, idVendor=0cf2, idProduct=76f6, bcdDevice=9b.f5
[  144.762391][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.765773][   T24] usb 2-1: Product: syz
[  144.767910][   T24] usb 2-1: Manufacturer: syz
[  144.769832][   T24] usb 2-1: SerialNumber: syz
[  144.775807][   T24] usb-storage 2-1:128.25: USB Mass Storage device detected
[  144.809008][ T9343] loop0: detected capacity change from 0 to 512
[  144.813745][ T9343] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  144.817815][ T9343] EXT4-fs (loop0): orphan cleanup on readonly fs
[  144.822833][ T9343] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  144.830207][ T9343] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  144.833296][ T9343] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.1320: iget: immutable or append flags not allowed on symlinks
[  144.840851][ T9343] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1320: couldn't read orphan inode 16 (err -117)
[  144.846205][ T9343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  144.869891][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.982500][   T24] usb 2-1: USB disconnect, device number 31
[  145.191378][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1332'.
[  145.195324][ T9368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1332'.
[  145.200691][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1332'.
[  145.204451][ T9368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1332'.
[  145.267106][ T6208] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  145.287170][ T9376] loop2: detected capacity change from 0 to 1024
[  145.314221][   T27] hfsplus: b-tree write err: -5, ino 3
[  145.336051][ T9377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.419342][ T6208] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  145.422517][ T6208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.425161][ T6208] usb 1-1: Product: syz
[  145.427500][ T6208] usb 1-1: Manufacturer: syz
[  145.429233][ T6208] usb 1-1: SerialNumber: syz
[  145.432198][ T6208] usb 1-1: config 0 descriptor??
[  145.435560][ T6208] gspca_main: sq930x-2.14.0 probing 2770:930c
[  145.505014][ T9380] loop1: detected capacity change from 0 to 256
[  145.512857][ T9380] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1f7c91f3, utbl_chksum : 0xe619d30d)
[  145.615311][ T9380] exFAT-fs (loop1): valid_size(100667392) is greater than size(4096)
[  145.871156][ T9386] loop1: detected capacity change from 0 to 32768
[  145.908735][ T9386] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  145.923860][ T9386] XFS (loop1): Ending clean mount
[  145.950078][ T5848] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  146.117174][   T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  146.249443][ T6208] gspca_sq930x: ucbus_write failed -71
[  146.276882][   T24] usb 3-1: Using ep0 maxpacket: 16
[  146.280774][   T24] usb 3-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.285367][   T24] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96
[  146.290150][   T24] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8
[  146.294167][   T24] usb 3-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  146.300165][   T24] usb 3-1: config 1 interface 0 has no altsetting 0
[  146.303921][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  146.306696][ T5890] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  146.307959][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  146.313552][   T24] usb 3-1: SerialNumber: syz
[  146.317610][ T9388] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  146.320583][ T9388] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  146.456640][ T5890] usb 2-1: Using ep0 maxpacket: 8
[  146.460488][ T5890] usb 2-1: config 3 has an invalid interface number: 45 but max is 0
[  146.463685][ T5890] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  146.467680][ T5890] usb 2-1: config 3 has no interface number 0
[  146.470132][ T5890] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  146.475214][ T5890] usb 2-1: config 3 interface 45 has no altsetting 0
[  146.481157][ T5890] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  146.484462][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.486577][ T6208] gspca_sq930x: Sensor ov9630 not yet treated
[  146.487323][ T5890] usb 2-1: Product: syz
[  146.489912][ T6208] sq930x 1-1:0.0: probe with driver sq930x failed with error -22
[  146.490966][ T5890] usb 2-1: Manufacturer: syz
[  146.490980][ T5890] usb 2-1: SerialNumber: syz
[  146.499507][ T6208] usb 1-1: USB disconnect, device number 26
[  146.705174][ T5890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  146.718939][ T5890] usb 2-1: USB disconnect, device number 32
[  146.745457][ T6369] udevd[6369]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  146.832182][ T9410] loop0: detected capacity change from 0 to 512
[  146.837897][ T9410] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1348: bad orphan inode 15
[  146.842431][ T9410] ext4_test_bit(bit=14, block=18) = 1
[  146.844889][ T9410] is_bad_inode(inode)=0
[  146.847519][ T9410] NEXT_ORPHAN(inode)=1023
[  146.849840][ T9410] max_ino=32
[  146.851185][ T9410] i_nlink=0
[  146.852768][ T9410] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.1348: corrupted xattr block 19: invalid header
[  146.858673][ T9410] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[  146.863064][ T9410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  146.869589][ T9410] ext4 filesystem being mounted at /446/qY3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  146.891777][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  146.947700][ T9415] __nla_validate_parse: 1 callbacks suppressed
[  146.947714][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'.
[  147.004459][ T9419] loop0: detected capacity change from 0 to 136
[  147.172990][ T9429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1356'.
[  147.200016][ T9431] netlink: 'syz.0.1357': attribute type 3 has an invalid length.
[  147.279358][ T9422] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  147.282209][ T9422] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  147.486715][ T5883] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  147.494789][ T9460] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1362'.
[  147.646665][ T5883] usb 2-1: Using ep0 maxpacket: 8
[  147.678287][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.684527][ T5883] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  147.689586][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.693197][ T5883] usb 2-1: Product: syz
[  147.695029][ T5883] usb 2-1: Manufacturer: syz
[  147.697380][ T5883] usb 2-1: SerialNumber: syz
[  147.701400][ T5883] usb 2-1: config 0 descriptor??
[  147.710811][ T5883] gspca_main: stk014-2.14.0 probing 05e1:0893
[  147.713453][ T5883] usb 2-1: selecting invalid altsetting 1
[  147.911169][ T5883] gspca_stk014: reg_r err -71
[  147.913345][ T5883] stk014 2-1:0.0: probe with driver stk014 failed with error -71
[  147.922751][ T5883] usb 2-1: USB disconnect, device number 33
[  148.274373][ T9470] loop0: detected capacity change from 0 to 16
[  148.279739][ T9470] erofs (device loop0): mounted with root inode @ nid 36.
[  148.636632][ T9495] loop0: detected capacity change from 0 to 64
[  148.678677][   T33] audit: type=1800 audit(1756146907.152:59): pid=9495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1377" name="file1" dev="loop0" ino=5 res=0 errno=0
[  148.823684][ T9499] loop0: detected capacity change from 0 to 2048
[  148.832464][ T9499] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359
[  148.854303][ T9499] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.896785][   T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  148.924398][   T24] usb 3-1: USB disconnect, device number 25
[  150.372621][ T9550] openvswitch: netlink: IP tunnel dst address not specified
[  150.376610][ T5883] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  150.480815][   T33] audit: type=1326 audit(1756146908.952:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.2.1402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431778ebe9 code=0x7ffc0000
[  150.494570][   T33] audit: type=1326 audit(1756146908.952:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.2.1402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431778ebe9 code=0x7ffc0000
[  150.506901][   T33] audit: type=1326 audit(1756146908.962:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.2.1402" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f431778ebe9 code=0x7ffc0000
[  150.518089][   T33] audit: type=1326 audit(1756146908.962:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.2.1402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431778ebe9 code=0x7ffc0000
[  150.526107][   T33] audit: type=1326 audit(1756146908.962:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.2.1402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431778ebe9 code=0x7ffc0000
[  150.540477][ T5883] usb 1-1: config 5 has an invalid interface number: 123 but max is 0
[  150.553606][ T5883] usb 1-1: config 5 has no interface number 0
[  150.555918][ T5883] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  150.562898][ T5883] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0x16, changing to 0x6
[  150.570123][ T5883] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0
[  150.576901][ T5883] usb 1-1: config 5 interface 123 has no altsetting 0
[  150.589841][ T5883] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  150.592899][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.608180][ T5883] usb 1-1: Product: syz
[  150.609993][ T5883] usb 1-1: Manufacturer: syz
[  150.611998][ T5883] usb 1-1: SerialNumber: syz
[  150.831026][ T5883] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device.
[  150.839983][ T5883] usb 1-1: USB disconnect, device number 27
[  151.146630][ T5991] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  151.298510][ T5991] usb 3-1: config 201 has an invalid interface number: 249 but max is 0
[  151.301822][ T5991] usb 3-1: config 201 has no interface number 0
[  151.304419][ T5991] usb 3-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[  151.309075][ T5991] usb 3-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  151.313423][ T5991] usb 3-1: config 201 interface 249 has no altsetting 0
[  151.317665][ T5991] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[  151.321027][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.324406][ T5991] usb 3-1: Product: syz
[  151.326171][ T5991] usb 3-1: Manufacturer: syz
[  151.329737][ T5991] usb 3-1: SerialNumber: syz
[  151.545567][ T5991] ath6kl: Failed to submit usb control message: -71
[  151.548411][ T5991] ath6kl: unable to send the bmi data to the device: -71
[  151.550855][ T5991] ath6kl: Unable to send get target info: -71
[  151.553096][ T5991] ath6kl: Failed to init ath6kl core: -71
[  151.556342][ T5991] ath6kl_usb 3-1:201.249: probe with driver ath6kl_usb failed with error -71
[  151.563168][ T5991] usb 3-1: USB disconnect, device number 26
[  151.596877][   T51] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  151.746623][   T51] usb 1-1: Using ep0 maxpacket: 16
[  151.750839][   T51] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.757293][   T51] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.761397][   T51] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  151.766606][   T51] usb 1-1: config 0 interface 0 has no altsetting 0
[  151.769365][   T51] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  151.773144][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.778721][   T51] usb 1-1: config 0 descriptor??
[  152.194566][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.199291][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.319890][ T9600] loop2: detected capacity change from 0 to 512
[  152.339187][ T9600] EXT4-fs error (device loop2): ext4_quota_enable:7124: comm syz.2.1420: Bad quota inum: 1, type: 2
[  152.342870][ T9600] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix.
[  152.350761][ T9600] EXT4-fs (loop2): mount failed
[  152.417964][   T51] usb 1-1: USB disconnect, device number 28
[  152.825969][ T9611] loop2: detected capacity change from 0 to 1024
[  152.831434][ T9611] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  152.869412][ T9611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.992605][ T9611] EXT4-fs (loop2): shut down requested (1)
[  153.011456][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.125663][ T9624] loop2: detected capacity change from 0 to 1024
[  153.168890][ T9624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.173817][ T9624] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.188900][ T9624] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  153.195370][ T9624] EXT4-fs (loop2): Remounting filesystem read-only
[  153.209977][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.216718][  T973] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  153.330291][   T54] Bluetooth: hci2: unexpected cc 0x0402 length: 61 > 1
[  153.333304][   T54] Bluetooth: hci2: Ignoring error of Inquiry Cancel command
[  153.336374][   T54] Bluetooth: hci2: unexpected event for opcode 0x0402
[  153.341790][ T9632] loop2: detected capacity change from 0 to 64
[  153.368143][  T973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.372266][  T973] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  153.375887][  T973] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  153.394984][  T973] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  153.399601][  T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.403511][  T973] usb 1-1: Product: syz
[  153.405410][  T973] usb 1-1: Manufacturer: syz
[  153.408369][  T973] usb 1-1: SerialNumber: syz
[  153.411391][  T973] usb 1-1: config 0 descriptor??
[  153.602076][ T9638] loop1: detected capacity change from 0 to 32768
[  153.605787][ T9638] 
[  153.605787][ T9638]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  153.605787][ T9638] 
[  153.611730][ T9638] 
[  153.611730][ T9638]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  153.611730][ T9638] 
[  153.615077][ T9638] 
[  153.615077][ T9638]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  153.615077][ T9638] 
[  153.620912][ T9638] 
[  153.620912][ T9638]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  153.620912][ T9638] 
[  153.623678][  T973] usb 1-1: Found UVC 34.00 device syz (8086:0b5b)
[  153.628698][  T114] 
[  153.628698][  T114]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  153.628698][  T114] 
[  153.633561][  T973] usb 1-1: No valid video chain found.
[  153.643529][  T973] usb 1-1: USB disconnect, device number 29
[  153.646902][ T9638] ERROR: (device loop1): diWrite: ixpxd invalid
[  153.646902][ T9638] 
[  153.651525][ T9638] ERROR: (device loop1): txCommit: 
[  153.651525][ T9638] 
[  153.673860][ T5848] 
[  153.673860][ T5848]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  153.673860][ T5848] 
[  153.679117][ T5848] 
[  153.679117][ T5848]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  153.679117][ T5848] 
[  154.182246][ T9658] loop1: detected capacity change from 0 to 32768
[  154.191005][ T9658] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1444 (9658)
[  154.212098][ T9658] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.222508][ T9658] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  154.226246][ T9658] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  154.599124][ T9670] loop0: detected capacity change from 0 to 32768
[  154.602559][ T9670] XFS: ikeep mount option is deprecated.
[  154.684041][ T9670] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  154.693006][ T9658] BTRFS info (device loop1): rebuilding free space tree
[  154.706934][ T9658] BTRFS info (device loop1): disabling free space tree
[  154.709629][ T9658] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  154.713313][ T9658] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  154.722862][ T9658] BTRFS info (device loop1): enabling ssd optimizations
[  154.725786][ T9658] BTRFS info (device loop1): enabling disk space caching
[  154.729161][ T9658] BTRFS info (device loop1): force clearing of disk cache
[  154.731944][ T9658] BTRFS info (device loop1): force zstd compression, level 3
[  154.746766][ T9670] XFS (loop0): Ending clean mount
[  154.752676][ T9670] XFS (loop0): Quotacheck needed: Please wait.
[  154.762136][   T28] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  154.772910][   T28] XFS (loop0): Unmount and run xfs_repair
[  154.775138][   T28] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  154.779898][   T28] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  154.783304][   T28] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  154.787750][   T28] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  154.794984][   T28] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  154.802402][ T9658] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.802476][   T28] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  154.814611][   T28] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  154.819102][   T28] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  154.822742][   T28] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  154.826128][   T28] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x14 len 4 error 74
[  154.834524][   T28] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  154.844511][   T28] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  154.855974][ T9670] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  154.860545][ T9670] XFS (loop0): Error -5 reserving per-AG metadata reserve pool.
[  155.278293][ T9700] loop1: detected capacity change from 0 to 128
[  155.516630][  T973] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  155.526711][   T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  155.649767][ T9713] random: crng reseeded on system resumption
[  155.690336][ T5890] IPVS: starting estimator thread 0...
[  155.769069][   T24] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  155.771864][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.776210][   T24] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  155.779729][ T9715] IPVS: using max 131 ests per chain, 314400 per kthread
[  155.782277][   T24] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  155.785879][   T24] usb 1-1: Manufacturer: syz
[  155.789896][   T24] usb 1-1: config 0 descriptor??
[  155.836636][   T24] rc_core: IR keymap rc-hauppauge not found
[  155.839178][  T973] usb 3-1: Using ep0 maxpacket: 16
[  155.841919][   T24] Registered IR keymap rc-empty
[  155.844636][   T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  155.850150][   T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16
[  155.857432][  T973] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2
[  155.867904][  T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.871439][  T973] usb 3-1: Product: syz
[  155.873098][  T973] usb 3-1: Manufacturer: syz
[  155.875324][  T973] usb 3-1: SerialNumber: syz
[  155.881106][  T973] usb 3-1: config 0 descriptor??
[  155.887870][  T973] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  155.897874][  T973] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2
[  155.910813][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  156.099749][ T5890] usb 3-1: USB disconnect, device number 27
[  156.406730][ T5883] usb 1-1: USB disconnect, device number 30
[  156.469513][ T9721] loop1: detected capacity change from 0 to 32768
[  156.473184][ T9721] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1459 (9721)
[  156.479959][ T9721] BTRFS error: invalid seeding and uuid-changed device detected
[  156.719380][ T9729] loop2: detected capacity change from 0 to 32768
[  156.727417][ T9729] JBD2: Ignoring recovery information on journal
[  156.741139][ T9729] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  156.771515][ T5857] ocfs2: Unmounting device (7,2) on (node local)
[  156.776778][   T24] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  156.954744][   T24] usb 2-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=3b.70
[  156.960829][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.967955][   T24] usb 2-1: config 0 descriptor??
[  156.974400][ T9733] loop2: detected capacity change from 0 to 32768
[  156.985726][ T9733] XFS: attr2 mount option is deprecated.
[  157.004903][ T9738] Illegal XDP return value 4294967294 on prog  (id 110) dev N/A, expect packet loss!
[  157.014024][ T9733] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  157.018066][ T9733] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  157.031423][ T9733] XFS (loop2): Ending clean mount
[  157.034712][ T9733] XFS (loop2): Quotacheck needed: Please wait.
[  157.043687][ T9733] XFS (loop2): Quotacheck: Done.
[  157.096019][ T5857] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  157.184247][ T5883] usb 2-1: USB disconnect, device number 34
[  157.195817][ T9747] loop0: detected capacity change from 0 to 32768
[  157.204755][ T9747] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1467 (9747)
[  157.215586][ T9747] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  157.220201][ T9747] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  157.224141][ T9747] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  157.242444][ T9747] BTRFS info (device loop0): rebuilding free space tree
[  157.246670][ T9747] BTRFS info (device loop0): disabling free space tree
[  157.249455][ T9747] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  157.253241][ T9747] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  157.258618][ T9747] BTRFS info (device loop0): setting nodatasum
[  157.261168][ T9747] BTRFS info (device loop0): allowing degraded mounts
[  157.263560][ T9747] BTRFS info (device loop0): enabling disk space caching
[  157.265721][ T9747] BTRFS info (device loop0): force clearing of disk cache
[  157.269071][ T9747] BTRFS info (device loop0): force zlib compression, level 3
[  157.273790][ T9747] BTRFS error (device loop0): balance: mixed groups data and metadata options must be the same
[  157.284497][ T5853] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  157.406612][ T5991] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  157.411335][ T9774] warning: `syz.0.1472' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  157.556676][ T5991] usb 3-1: Using ep0 maxpacket: 16
[  157.560402][ T5991] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.565146][ T5991] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.569361][ T5991] usb 3-1: config 0 interface 0 has no altsetting 0
[  157.572541][ T5991] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  157.576194][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.580945][ T5991] usb 3-1: config 0 descriptor??
[  157.676597][ T5883] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  157.832220][ T9790] netlink: 'syz.1.1480': attribute type 1 has an invalid length.
[  157.834657][ T9790] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1480'.
[  157.838346][ T9790] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1480'.
[  157.847634][ T5883] usb 1-1: Using ep0 maxpacket: 16
[  157.853379][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  157.858587][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  157.866174][ T5883] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  157.871447][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.876893][ T5883] usb 1-1: Product: syz
[  157.878761][ T5883] usb 1-1: Manufacturer: syz
[  157.880836][ T5883] usb 1-1: SerialNumber: syz
[  157.884590][ T5883] usb 1-1: config 0 descriptor??
[  157.890286][ T5883] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  157.894393][ T5883] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  157.999100][ T5991] hid (null): invalid report_size 42190
[  158.002772][ T5991] hid (null): report_id 4263223746 is invalid
[  158.005415][ T5991] hid (null): unknown global tag 0xe
[  158.008125][ T5991] hid (null): global environment stack underflow
[  158.010874][ T5991] hid (null): global environment stack underflow
[  158.014262][ T5991] hid (null): global environment stack underflow
[  158.018905][ T5991] hid (null): report_id 0 is invalid
[  158.021244][ T5991] hid (null): unknown global tag 0xc
[  158.023598][ T5991] hid (null): unknown global tag 0xd
[  158.028505][ T5991] hid (null): unknown global tag 0xc
[  158.030752][ T5991] hid (null): global environment stack underflow
[  158.033504][ T5991] hid (null): bogus close delimiter
[  158.083379][ T9802] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1486'.
[  158.087433][ T9802] netlink: 380 bytes leftover after parsing attributes in process `syz.1.1486'.
[  158.091217][ T9802] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1486'.
[  158.117899][ T9804] netlink: 'syz.1.1487': attribute type 2 has an invalid length.
[  158.121040][ T9804] netlink: 'syz.1.1487': attribute type 1 has an invalid length.
[  158.224327][   T24] usb 3-1: USB disconnect, device number 28
[  158.367852][ T9810] netlink: 'syz.1.1489': attribute type 10 has an invalid length.
[  158.375045][ T9810] team0: Device hsr_slave_0 failed to register rx_handler
[  158.504414][ T5883] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  158.509442][ T5883] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  158.780468][ T9828] netlink: 79 bytes leftover after parsing attributes in process `syz.2.1498'.
[  158.806673][ T5991] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  158.950047][ T9838] loop2: detected capacity change from 0 to 128
[  158.972685][ T9838] overlayfs: upper fs needs to support d_type.
[  158.975864][ T9838] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  158.978449][ T5991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  158.978479][ T5991] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  158.978493][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.988421][ T5991] usb 2-1: config 0 descriptor??
[  158.991061][ T9838] overlayfs: failed to set xattr on upper
[  158.993145][ T9838] overlayfs: ...falling back to redirect_dir=nofollow.
[  158.995830][ T9838] overlayfs: ...falling back to index=off.
[  158.998438][ T9838] overlayfs: ...falling back to uuid=null.
[  159.120674][ T5883] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[  159.329126][ T5883] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  159.334162][ T5883] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  159.336739][ T5883] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  159.339728][ T5883] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  159.342391][ T5883] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  159.348928][ T5883] usb 1-1: USB disconnect, device number 31
[  159.424195][ T5991] logitech 0003:046D:CA03.0011: ignoring exceeding usage max
[  159.427601][ T5991] logitech 0003:046D:CA03.0011: unbalanced delimiter at end of report description
[  159.430989][ T5991] logitech 0003:046D:CA03.0011: parse failed
[  159.434188][ T5991] logitech 0003:046D:CA03.0011: probe with driver logitech failed with error -22
[  159.634652][ T5883] usb 2-1: USB disconnect, device number 35
[  159.924629][ T9852] loop0: detected capacity change from 0 to 16
[  159.928897][ T9852] erofs (device loop0): mounted with root inode @ nid 36.
[  159.962675][ T9856] netlink: 'syz.2.1511': attribute type 46 has an invalid length.
[  159.965310][ T9856] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1511'.
[  160.043668][   T27] Bluetooth: hci3: Frame reassembly failed (-84)
[  160.047493][   T28] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0
[  160.301594][ T9876] loop0: detected capacity change from 0 to 32768
[  160.314128][ T9876] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  160.331031][ T9876] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  160.362517][ T9876] loop0: detected capacity change from 32768 to 0
[  160.366719][ T9876] syz.0.1521: attempt to access beyond end of device
[  160.366719][ T9876] loop0: rw=0, sector=2, nr_sectors = 1 limit=0
[  160.371940][ T9876] (syz.0.1521,9876,0):ocfs2_update_super_and_backups:233 ERROR: status = -5
[  160.375854][ T9876] ocfs2: Failed to update super blocks on 7,0 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it
[  160.402656][ T5853] syz-executor: attempt to access beyond end of device
[  160.402656][ T5853] loop0: rw=0, sector=17057, nr_sectors = 1 limit=0
[  160.408817][ T5853] (syz-executor,5853,0):ocfs2_read_locked_inode:597 ERROR: status = -5
[  160.412653][ T5853] syz-executor: attempt to access beyond end of device
[  160.412653][ T5853] loop0: rw=0, sector=17057, nr_sectors = 1 limit=0
[  160.418618][ T5853] (syz-executor,5853,0):ocfs2_read_locked_inode:597 ERROR: status = -5
[  160.449558][ T9879] jbd2/loop0-75: attempt to access beyond end of device
[  160.449558][ T9879] loop0: rw=38913, sector=640, nr_sectors = 1 limit=0
[  160.455258][ T9879] Buffer I/O error on dev loop0, logical block 640, lost sync page write
[  160.460007][ T9879] JBD2: I/O error when updating journal superblock for loop0-75.
[  160.465456][ T9879] Aborting journal on device loop0-75.
[  160.468509][ T9879] jbd2/loop0-75: attempt to access beyond end of device
[  160.468509][ T9879] loop0: rw=38913, sector=640, nr_sectors = 1 limit=0
[  160.474035][ T9879] Buffer I/O error on dev loop0, logical block 640, lost sync page write
[  160.480270][ T9879] JBD2: I/O error when updating journal superblock for loop0-75.
[  160.484053][ T9879] journal_release_journal_head: freeing b_committed_data
[  160.487904][ T6140] (syz.0.90,6140,1):ocfs2_start_trans:379 ERROR: status = -30
[  160.492309][ T6140] OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal
[  160.498425][ T6140] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  160.502335][ T6140] OCFS2: File system is now read-only.
[  160.504656][ T6140] (syz.0.90,6140,1):ocfs2_shutdown_local_alloc:419 ERROR: status = -30
[  160.509845][ T6140] syz.0.90: attempt to access beyond end of device
[  160.509845][ T6140] loop0: rw=1, sector=17024, nr_sectors = 1 limit=0
[  160.515270][ T6140] Buffer I/O error on dev loop0, logical block 17024, lost sync page write
[  160.518948][ T6140] (syz.0.90,6140,1):ocfs2_write_block:78 ERROR: status = -5
[  160.521988][ T6140] (syz.0.90,6140,1):ocfs2_update_disk_slot:199 ERROR: status = -5
[  160.525261][ T6140] (syz.0.90,6140,1):ocfs2_put_slot:517 ERROR: status = -5
[  160.528679][ T6140] (syz.0.90,6140,1):ocfs2_journal_shutdown:1107 ERROR: status = -5
[  160.537474][ T6140] ocfs2: Unmounting device (7,0) on (node local)
[  160.761509][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.906100][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.980247][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.029388][ T9899] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  161.032428][ T9899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  161.035422][ T9899] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  161.040250][ T9899] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  161.043449][ T9899] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  161.059974][   T12] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.073196][ T9897] wg1 speed is unknown, defaulting to 1000
[  161.170749][   T12] bridge_slave_0: left allmulticast mode
[  161.173089][   T12] bridge_slave_0: left promiscuous mode
[  161.175499][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.271021][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.276043][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.283408][   T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  161.288802][   T12] bond0 (unregistering): Released all slaves
[  161.300222][ T9897] chnl_net:caif_netlink_parms(): no params data found
[  161.341880][ T9897] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.344984][ T9897] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.349062][ T9897] bridge_slave_0: entered allmulticast mode
[  161.352245][ T9897] bridge_slave_0: entered promiscuous mode
[  161.355595][   T12] : left promiscuous mode
[  161.360206][ T9897] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.363251][ T9897] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.366445][ T9897] bridge_slave_1: entered allmulticast mode
[  161.370247][ T9897] bridge_slave_1: entered promiscuous mode
[  161.386457][ T9897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.391991][   T12] IPVS: stopping master sync thread 9030 ...
[  161.392275][ T9897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.420047][ T9897] team0: Port device team_slave_0 added
[  161.423930][ T9897] team0: Port device team_slave_1 added
[  161.435220][ T5991] wg1 speed is unknown, defaulting to 1000
[  161.441420][ T5991] syz0: Port: 1 Link DOWN
[  161.442365][ T9897] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.446242][ T9897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.459329][ T9897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.467225][ T9897] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.471826][ T9897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.481619][ T9897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.520508][ T9897] hsr_slave_0: entered promiscuous mode
[  161.523194][ T9897] hsr_slave_1: entered promiscuous mode
[  161.525866][ T9897] debugfs: 'hsr0' already exists in 'hsr'
[  161.528765][ T9897] Cannot create hsr debugfs directory
[  161.609135][   T12] hsr_slave_0: left promiscuous mode
[  161.616619][   T12] hsr_slave_1: left promiscuous mode
[  161.619370][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.622488][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.658712][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.664262][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.665229][ T9921] loop1: detected capacity change from 0 to 4096
[  161.673037][ T9921] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  161.690242][   T12] veth1_macvtap: left promiscuous mode
[  161.692492][   T12] veth0_macvtap: left promiscuous mode
[  161.694862][   T12] veth1_vlan: left promiscuous mode
[  161.703683][   T12] veth0_vlan: left promiscuous mode
[  161.811324][   T12] team0 (unregistering): Port device team_slave_1 removed
[  161.818176][   T12] team0 (unregistering): Port device team_slave_0 removed
[  161.899063][ T5910] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  161.940095][ T5910] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  161.943896][ T5910] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  161.951368][ T5910] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  161.965118][ T9897] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  161.985102][ T9897] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  161.991644][ T9897] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  161.997526][ T9897] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  162.045815][ T9897] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.048797][ T5235] Bluetooth: hci3: command 0x1003 tx timeout
[  162.048829][   T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  162.072752][ T9897] 8021q: adding VLAN 0 to HW filter on device team0
[  162.097491][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.100422][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.104367][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.107376][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.187250][ T5991] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  162.215580][ T9948] loop2: detected capacity change from 0 to 128
[  162.229729][ T9948] EXT4-fs: Ignoring removed nobh option
[  162.249783][ T9948] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  162.255638][ T9948] ext4 filesystem being mounted at /533/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  162.265904][ T9948] EXT4-fs (loop2): shut down requested (0)
[  162.272928][ T9897] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.279659][ T9948] syz.2.1538 (pid 9948) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  162.300393][ T9897] veth0_vlan: entered promiscuous mode
[  162.309779][ T5857] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  162.311085][ T9897] veth1_vlan: entered promiscuous mode
[  162.323186][ T9897] veth0_macvtap: entered promiscuous mode
[  162.326153][ T9897] veth1_macvtap: entered promiscuous mode
[  162.333711][ T9897] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.339269][ T9897] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.343662][ T5910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.350704][ T5910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.353471][ T5910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.356351][ T5910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.375364][ T9959] tmpfs: Cannot enable swap on remount if it was disabled on first mount
[  162.376400][ T5991] usb 2-1: config 0 has no interfaces?
[  162.385362][ T5991] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  162.391322][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  162.394041][ T5991] usb 2-1: Product: syz
[  162.395420][ T5991] usb 2-1: Manufacturer: syz
[  162.399876][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.400780][ T5991] usb 2-1: config 0 descriptor??
[  162.403181][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.428196][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.432000][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.620719][ T5991] usb 2-1: USB disconnect, device number 36
[  162.678037][ T9979] loop2: detected capacity change from 0 to 32768
[  162.682350][ T9979] (syz.2.1546,9979,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len % 4 != 0 - offset=108, inode=18446744073709486150, rec_len=65535, name_len=9
[  162.688869][ T9979] (syz.2.1546,9979,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  162.691904][ T9979] (syz.2.1546,9979,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  162.691923][ T9979] (syz.2.1546,9979,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  162.700718][ T9979] (syz.2.1546,9979,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  162.703602][ T9979] (syz.2.1546,9979,1):ocfs2_fill_super:1177 ERROR: status = -22
[  162.769653][ T9982] loop2: detected capacity change from 0 to 16
[  162.774714][ T9982] erofs (device loop2): mounted with root inode @ nid 36.
[  162.776651][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  162.782080][ T9982] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[  162.785087][ T9982] erofs (device loop2): read error -117 @ 43 of nid 36
[  162.926635][   T24] usb 4-1: Using ep0 maxpacket: 8
[  162.931672][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  162.939720][   T24] usb 4-1: config 4 has an invalid interface number: 147 but max is 0
[  162.943004][   T24] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  162.947165][   T24] usb 4-1: config 4 has no interface number 0
[  162.958867][   T24] usb 4-1: string descriptor 0 read error: -22
[  162.961510][   T24] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  162.965039][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.974822][   T24] usb 4-1: Found UVC 0.02 device <unnamed> (04f2:b746)
[  162.980729][   T24] usb 4-1: No streaming interface found for terminal 6.
[  163.030559][T10000] loop2: detected capacity change from 0 to 2048
[  163.041918][T10000] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  163.048957][T10001] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  163.082180][T10003] loop2: detected capacity change from 0 to 1024
[  163.085528][T10003] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  163.089420][   T54] Bluetooth: hci1: command tx timeout
[  163.093479][T10003] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1557: bg 0: block 10: padding at end of block bitmap is not set
[  163.099674][T10003] Quota error (device loop2): write_blk: dquota write failed
[  163.102159][T10003] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2
[  163.105236][T10003] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  163.109160][T10003] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1557: Failed to acquire dquot type 0
[  163.113365][T10003] Quota error (device loop2): write_blk: dquota write failed
[  163.115838][T10003] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2
[  163.118900][T10003] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  163.121914][T10003] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1557: Failed to acquire dquot type 0
[  163.125477][T10003] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1557: Freeing blocks not in datazone - block = 0, count = 4096
[  163.135408][T10003] Quota error (device loop2): write_blk: dquota write failed
[  163.138723][T10003] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2
[  163.142066][T10003] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  163.145426][T10003] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1557: Failed to acquire dquot type 0
[  163.149672][T10003] EXT4-fs (loop2): 1 orphan inode deleted
[  163.152106][T10003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.164581][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.168150][T10006] overlayfs: invalid redirect ((null))
[  163.186392][T10008] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  163.204369][T10010] netlink: 'syz.2.1561': attribute type 32 has an invalid length.
[  163.206869][ T6208] usb 4-1: USB disconnect, device number 2
[  163.231423][   T33] audit: type=1326 audit(1756146921.702:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.2.1562" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431778ebe9 code=0x50000
[  163.774118][T10030] netlink: 'syz.3.1568': attribute type 29 has an invalid length.
[  163.779887][T10030] netlink: 'syz.3.1568': attribute type 29 has an invalid length.
[  163.783016][T10030] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1568'.
[  163.786373][T10030] unsupported nla_type 58
[  163.902634][T10034] netlink: 'syz.3.1570': attribute type 10 has an invalid length.
[  163.905605][T10034] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.908227][T10034] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.912347][T10034] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.914688][T10034] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.917228][T10034] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.919646][T10034] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.924123][T10034] team0: Port device bridge0 added
[  164.060844][T10036] loop3: detected capacity change from 0 to 32768
[  164.103207][T10038] loop2: detected capacity change from 0 to 256
[  164.154364][T10038] FAT-fs (loop2): Directory bread(block 64) failed
[  164.167394][T10038] FAT-fs (loop2): Directory bread(block 65) failed
[  164.174258][T10038] FAT-fs (loop2): Directory bread(block 66) failed
[  164.180350][T10038] FAT-fs (loop2): Directory bread(block 67) failed
[  164.185215][T10038] FAT-fs (loop2): Directory bread(block 68) failed
[  164.192094][T10038] FAT-fs (loop2): Directory bread(block 69) failed
[  164.194891][T10038] FAT-fs (loop2): Directory bread(block 70) failed
[  164.199152][T10038] FAT-fs (loop2): Directory bread(block 71) failed
[  164.205998][T10038] FAT-fs (loop2): Directory bread(block 72) failed
[  164.212672][T10038] FAT-fs (loop2): Directory bread(block 73) failed
[  164.360295][T10059] loop2: detected capacity change from 0 to 8
[  164.381100][T10059] SQUASHFS error: Failed to read block 0x260685: -5
[  164.393402][T10059] SQUASHFS error: Unable to read metadata cache entry [260685]
[  164.416676][T10059] SQUASHFS error: Unable to read directory block [260685:0]
[  164.461958][T10069] loop1: detected capacity change from 0 to 512
[  164.465064][T10069] EXT4-fs: Ignoring removed oldalloc option
[  164.481032][T10069] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  164.494216][T10069] EXT4-fs (loop1): orphan cleanup on readonly fs
[  164.509613][T10069] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1587: Failed to acquire dquot type 1
[  164.515593][   T54] Bluetooth: hci2: unexpected event for opcode 0x2006
[  164.516062][T10069] EXT4-fs (loop1): 1 truncate cleaned up
[  164.533494][T10069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  164.570945][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.575318][T10076] loop2: detected capacity change from 0 to 4096
[  164.609105][T10080] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.647654][T10083] netlink: 'syz.3.1594': attribute type 10 has an invalid length.
[  164.654166][T10083] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.657713][T10083] team0: Port device bond0 added
[  164.763265][T10091] loop2: detected capacity change from 0 to 8192
[  164.907739][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'.
[  164.911100][T10111] netlink: 66 bytes leftover after parsing attributes in process `syz.1.1605'.
[  165.166750][   T54] Bluetooth: hci1: command tx timeout
[  165.238433][T10118] netlink: 'syz.1.1608': attribute type 4 has an invalid length.
[  165.292546][T10122] loop1: detected capacity change from 0 to 1024
[  165.296106][T10122] EXT4-fs (loop1): Can't support bigalloc feature without extents feature
[  165.296106][T10122] 
[  165.302941][T10122] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  166.041303][T10142] loop2: detected capacity change from 0 to 512
[  166.092863][T10142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.233522][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.376804][   T54] Bluetooth: hci2: unexpected subevent 0x03 length: 244 > 9
[  166.502685][T10148] loop3: detected capacity change from 0 to 32768
[  166.537502][T10148] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  166.557588][T10148] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  166.564788][T10148] XFS (loop3): Starting recovery (logdev: internal)
[  166.572134][T10148] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x8 
[  166.576089][T10148] XFS (loop3): Unmount and run xfs_repair
[  166.579382][T10148] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  166.582280][T10148] 00000000: 41 42 54 42 00 00 00 02 ff ff ff ff ff ff ff ff  ABTB............
[  166.585598][T10148] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  166.588975][T10148] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  166.592142][T10148] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  166.595735][T10148] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  166.599328][T10148] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  166.602590][T10148] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  166.605972][T10148] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  166.609477][T10148] XFS (loop3): Filesystem has been shut down due to log error (0x2).
[  166.612071][T10148] XFS (loop3): Please unmount the filesystem and rectify the problem(s).
[  166.615349][T10148] XFS (loop3): log mount/recovery failed: error -74
[  166.618507][T10148] XFS (loop3): log mount failed
[  166.740683][T10164] loop1: detected capacity change from 0 to 40427
[  166.747472][T10170] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  166.751819][T10170] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  166.756016][T10170] CPU: 0 UID: 0 PID: 10170 Comm: syz.3.1628 Not tainted syzkaller #0 PREEMPT(full) 
[  166.759971][T10170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.763979][T10170] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  166.766269][T10170] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 39 30 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 30 36 f9 4d 8b 24 24 48 83 c3
[  166.774370][T10170] RSP: 0018:ffffc9000633fa60 EFLAGS: 00010206
[  166.776835][T10170] RAX: 0000000000000005 RBX: ffff888106ab8e80 RCX: 0000000000080000
[  166.780092][T10170] RDX: ffffc900038c1000 RSI: 00000000000003b2 RDI: 00000000000003b3
[  166.783506][T10170] RBP: 0000000000000000 R08: ffff888020b7312f R09: 1ffff1100416e625
[  166.786866][T10170] R10: dffffc0000000000 R11: ffffffff88ecbeb0 R12: 0000000000000028
[  166.790257][T10170] R13: dffffc0000000000 R14: ffff888020b73000 R15: dffffc0000000000
[  166.793544][T10170] FS:  00007f205b1b96c0(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  166.797284][T10170] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  166.799872][T10170] CR2: 0000001b2fa23ffc CR3: 0000000027384000 CR4: 00000000000006f0
[  166.803230][T10170] Call Trace:
[  166.804680][T10170]  <TASK>
[  166.805970][T10170]  pcl818_detach+0x66/0xd0
[  166.807922][T10170]  comedi_device_detach_locked+0x178/0x750
[  166.810427][T10170]  ? security_capable+0x7e/0x2e0
[  166.812536][T10170]  comedi_unlocked_ioctl+0xcde/0x1020
[  166.814832][T10170]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  166.817187][T10170]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  166.819651][T10170]  ? do_futex+0x333/0x420
[  166.821531][T10170]  ? lock_release+0x4b/0x3e0
[  166.823270][T10170]  ? __se_sys_futex+0x36f/0x400
[  166.824960][T10170]  ? __fget_files+0x2a/0x420
[  166.826703][T10170]  ? __fget_files+0x3a0/0x420
[  166.828262][T10170]  ? __fget_files+0x2a/0x420
[  166.829875][T10170]  ? bpf_lsm_file_ioctl+0x9/0x20
[  166.831520][T10170]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  166.833359][T10170]  __se_sys_ioctl+0xfc/0x170
[  166.834932][T10170]  do_syscall_64+0xfa/0x3b0
[  166.836413][T10170]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.838491][T10170]  ? exc_page_fault+0x9f/0xf0
[  166.840216][T10170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.842428][T10170] RIP: 0033:0x7f205a38ebe9
[  166.843963][T10170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.850566][T10170] RSP: 002b:00007f205b1b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  166.853374][T10170] RAX: ffffffffffffffda RBX: 00007f205a5b5fa0 RCX: 00007f205a38ebe9
[  166.856276][T10170] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[  166.859133][T10170] RBP: 00007f205a411e19 R08: 0000000000000000 R09: 0000000000000000
[  166.861597][T10170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.864063][T10170] R13: 00007f205a5b6038 R14: 00007f205a5b5fa0 R15: 00007ffc2941c998
[  166.866527][T10170]  </TASK>
[  166.867526][T10170] Modules linked in:
[  166.869227][T10170] ---[ end trace 0000000000000000 ]---
[  166.875815][T10170] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  166.878270][T10170] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 39 30 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 30 36 f9 4d 8b 24 24 48 83 c3
[  166.890454][T10170] RSP: 0018:ffffc9000633fa60 EFLAGS: 00010206
[  166.892796][T10170] RAX: 0000000000000005 RBX: ffff888106ab8e80 RCX: 0000000000080000
[  166.909818][T10164] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  166.913231][T10170] RDX: ffffc900038c1000 RSI: 00000000000003b2 RDI: 00000000000003b3
[  166.915958][T10164] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  166.926596][T10170] RBP: 0000000000000000 R08: ffff888020b7312f R09: 1ffff1100416e625
[  166.929273][T10170] R10: dffffc0000000000 R11: ffffffff88ecbeb0 R12: 0000000000000028
[  166.932045][T10170] R13: dffffc0000000000 R14: ffff888020b73000 R15: dffffc0000000000
[  166.934874][T10170] FS:  00007f205b1b96c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  166.938655][T10170] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  166.940954][T10170] CR2: 000000110c3c5c31 CR3: 0000000027384000 CR4: 00000000000006f0
[  166.943727][T10170] Kernel panic - not syncing: Fatal exception
[  166.946467][T10170] Kernel Offset: disabled
[  166.947912][T10170] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:35:25  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000078 RBX=0000000000000078 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f9f RDI=0000000000000fa0 RBP=00000000000003f8 RSP=ffffc9000633f290
R8 =ffff8881070a0237 R9 =1ffff11020e14046 R10=dffffc0000000000 R11=ffffffff854f1c80
R12=dffffc0000000000 R13=ffffffff99afa90c R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1cfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f205b1b96c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2fa23ffc CR3=0000000027384000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f205a587498 00007f205a587470 XMM03=00007f205a5874a8 00007f205a5874a0
XMM04=00007f205b0ed100 00007f205a587460 XMM05=00007f205a587478 00007f205a5874c0
XMM06=00007f205a5874b8 00007f205a5874b0 XMM07=00007f205a5874a8 00007f205a5874a0
XMM08=0000000000000000 00007f205a412ee7 XMM09=0000000000000000 00007f205a412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff110076b2511 RBX=0000000000000000 RCX=ffff888109423980 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc9000328f9c8 RSP=ffffc9000328f8f8
R8 =ffffffff8fa38337 R9 =1ffffffff1f47066 R10=dffffc0000000000 R11=fffffbfff1f47067
R12=dffffc0000000000 R13=ffff8881133633b0 R14=dffffc0000000000 R15=ffff88803b592880
RIP=ffffffff8243beb8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f54de104c80 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f033c3733e0 CR3=000000010a5b0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000020 0000000000000033
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffff00 XMM09=0000000000000041 0000000000000033
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
