last executing test programs:

3m1.519301146s ago: executing program 2 (id=305):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5, 0x4, 0x1}, @IFLA_BRPORT_STATE={0x5}]}}}]}, 0x4c}}, 0x0)

3m1.422656275s ago: executing program 2 (id=307):
syz_read_part_table(0x4089, &(0x7f0000000000)="$eJzszz1Ow0AQBeDnOP4JIQEhagRUVAg6qkgcItdBiBNwjpwSRRvHhhoEQt9X7Mzs2yk2/Kp+bKvJOdYks2RxHC5K6Uq5HoJ6yOdJ2twleU7y8JjmpARtKa9n88PLZbLdffd/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv6tL3rvJPEvWpWuS1Ifbxde1/cXLJk+nSb9ff6vTbK6qXCY391mVR22SqrT95/Xt7md+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8U22SVbIe5ttlP4bnx676YH8OTgCEYSiARrBQlxC8OIZbOJGbuGikKsUFvL13SsJPIPm4m7PGsc1DqRHL2gaflRaZep353ig9MMaeP/4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbggAQAAABA0P/X7QgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYKAAA//+auBfU")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000640), &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'sha1-ni\x00'}}, 0x0, 0x0)

3m0.134670493s ago: executing program 2 (id=329):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000180)={0x4, 0x9}, 0x2)

2m58.330342787s ago: executing program 2 (id=339):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

2m58.188821858s ago: executing program 2 (id=343):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x841}, 0x84)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x4040)

2m57.421300269s ago: executing program 2 (id=346):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0xd, {{0xa, 0x4e21, 0x638, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, 0x1}, 0x90)

2m56.77315267s ago: executing program 32 (id=346):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0xd, {{0xa, 0x4e21, 0x638, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, 0x1}, 0x90)

2m46.521538679s ago: executing program 1 (id=426):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2m44.752657084s ago: executing program 1 (id=439):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = dup(r1)
ioctl$PTP_EXTTS_REQUEST2(r2, 0x40043d0d, 0x0)

2m44.698586942s ago: executing program 1 (id=440):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x8, 0x91, "6ef77157"}]]}, 0x6c}}, 0x0)

2m44.591220605s ago: executing program 1 (id=442):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200010e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@data_journal}, {@test_dummy_encryption}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=')

2m44.399659434s ago: executing program 1 (id=443):
r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}})

2m44.086587855s ago: executing program 1 (id=444):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@ifindex, 0xffffffffffffffff, 0xf, 0x4}, 0x20)

2m43.912428376s ago: executing program 33 (id=444):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@ifindex, 0xffffffffffffffff, 0xf, 0x4}, 0x20)

2m24.475754172s ago: executing program 3 (id=576):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x884, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@delalloc}, {@sysvgroups}, {@noblock_validity}], [{@context={'context', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, '[@.\x95}\xb0!'}}, {@dont_hash}, {@dont_measure}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'staff_u'}}]}, 0x1, 0x24c, &(0x7f0000000900)="$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")
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$kcm(0x23, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x98, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x180, 0xffffffff, 0xffffffff, 0x180, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffff00, 0x0, 'vxcan1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0xc, 0x0, 0x29}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x932, 0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x426}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228)
sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc})
r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m23.879152026s ago: executing program 3 (id=578):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d", 0x6a}, {&(0x7f0000006b40)="49e0bf75c5c367035df86a00002756b72d089fedc8743327885910d5e5d41a6b36b4c0d060ca478a227b4a278f369e0178f2c7029d1a8a9aea990f303bf1f46f6d0022bce74b0e22dbf4e7a98dd6085acf3f83526b8328aec8899b95cf9197e549de36947b7e57", 0x67}], 0x2, 0x0, 0x0, 0x40880}], 0x1, 0x4814)
recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f00000003c0)=""/243, 0xf3}], 0x2}, 0x2}], 0x2, 0x2001, 0x0)

2m23.644058214s ago: executing program 3 (id=583):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x2480)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000180))

2m23.579458749s ago: executing program 3 (id=585):
r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@s={0x5, @generic=0x2, 0xa, 0x1e})

2m23.500675949s ago: executing program 3 (id=587):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40800, 0x0)
read$FUSE(r3, &(0x7f0000002ac0)={0x2020}, 0x2020)

2m23.440640968s ago: executing program 3 (id=591):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8000, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}]}})

2m7.619316418s ago: executing program 34 (id=591):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8000, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}]}})

2m6.997550082s ago: executing program 0 (id=729):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)

2m6.9286345s ago: executing program 0 (id=730):
socket$rxrpc(0x21, 0x2, 0xa)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x4000c95a, 0x80f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x35800, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff03, 0x6, 0x8, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x10005, 0x5, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x1, 0x407, 0x5, 0xfffffff7, 0x8, 0x4006, 0x6, 0x7, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x9, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012b, 0x8004, 0x5, 0x6, 0x129432e2, 0x1, 0xf9, 0xe, 0x10, 0x6c7, 0xa, 0xfffffffc, 0x80000003, 0x203, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xa1, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ff, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x401, 0x101, 0x8, 0x2, 0x9, 0x3, 0x8000, 0x1, 0xfdffffff, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x74c, 0x9, 0x250, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x404, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xddd5c997, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x5, 0x2, 0x5, 0x6, 0x401, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0xf8c000, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x9, 0xdfe, 0xa2, 0x7, 0xa9, 0x6, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x40, 0x0, 0x7ff, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x0, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x7, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xfffb, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0xfffffff9, 0xc8, 0x9, 0xfffff000, 0x7, 0x10003, 0x7e, 0x100, 0x9602, 0x1ff, 0xaf, 0xfffffff9, 0x6, 0x226, 0x5, 0x7, 0x8, 0x3ff, 0xa21, 0x1000f40, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0xffef, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x40fff]}, 0x45c)
unshare(0x2040400)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2m6.879210183s ago: executing program 0 (id=731):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x1, r2})
close_range(r0, 0xffffffffffffffff, 0x0)

2m6.826927386s ago: executing program 0 (id=732):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x61, 0x0, 0x0, 0x7fff0000}]})

2m6.746791854s ago: executing program 0 (id=733):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000010140)={0x237, 0x7d, 0x0, {{0x500, 0xf6, 0x0, 0xfffffffa, {}, 0x1b300000, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvf\x8ex%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\v\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x17, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x0fX\x05\x02\xb6n\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x05\x00\x00\x00\x00\x00\x00\x00\xc2g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237)

2m6.697495632s ago: executing program 0 (id=734):
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)

1m51.70823466s ago: executing program 35 (id=734):
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)

18.058250398s ago: executing program 6 (id=1666):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file1\x00', 0x4000000, &(0x7f0000000800)={[{@filestreams}, {@noquota}, {@discard}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@attr2}, {@largeio}]}, 0x1, 0x979b, &(0x7f0000009780)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x6, 0x5, 0x0, 0x2000000, 0x9, 0x0, 0x7529, 0xf53e, 0x4040c405})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)

17.454112688s ago: executing program 6 (id=1670):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa6, 0x9b, 0xbc, 0x10, 0x954f, 0x4199, 0xf76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x33, 0x2, 0x2, 0x2, 0xc, 0x7, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

15.298180302s ago: executing program 6 (id=1680):
socket(0x2c, 0x3, 0xe7)

15.19335151s ago: executing program 6 (id=1683):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@init_itable_val}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_nolock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
unlink(&(0x7f0000000180)='./file1\x00')

15.031065934s ago: executing program 6 (id=1684):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_discard_blocks\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@journal_dev={'journal_dev', 0x3d, 0xd353}}, {@auto_da_alloc}]}, 0x0, 0x512, &(0x7f0000000380)="$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")

13.953429471s ago: executing program 6 (id=1688):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
copy_file_range(r2, &(0x7f0000000000)=0x2, r0, &(0x7f0000000080)=0x3, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r1, 0x25, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0)

13.781872737s ago: executing program 36 (id=1688):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
copy_file_range(r2, &(0x7f0000000000)=0x2, r0, &(0x7f0000000080)=0x3, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r1, 0x25, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0)

4.189958778s ago: executing program 7 (id=1716):
syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB="73325bb9629cd81d63ae646d452628", @ANYBLOB="3cbed6e52efe7e5218c0f9829b", @ANYRES32], 0x9f, 0x1a4, &(0x7f0000000840)="$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")

4.132717174s ago: executing program 7 (id=1717):
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0)

4.051683883s ago: executing program 7 (id=1718):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@commit={'commit', 0x3d, 0x4}}, {@heartbeat_none}, {@localflocks}, {@intr}, {@dir_resv_level}, {@noacl}, {@resv_level={'resv_level', 0x3d, 0x1}}, {@journal_async_commit}, {@commit={'commit', 0x3d, 0xf9}}]}, 0x9, 0x442b, &(0x7f0000004480)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3, 0x0, 0x7fffffff, 0x0, 0x2})

3.349762322s ago: executing program 7 (id=1720):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000480))

3.002156378s ago: executing program 5 (id=1727):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0)

2.909656622s ago: executing program 7 (id=1729):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000280)=0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1)
write$P9_RSTATu(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="750000007d020000005f000900020000000803000000040000000000000000005400080000000c000000050000402c2a2d2b5b214025295c5e5b1e00626c6b696f2e6266712e696f5f6d65726765645f72656375727369766500000001000001"], 0x75)
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'devices'}]}, 0x9)

2.85963059s ago: executing program 5 (id=1730):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x0, 0x0, 0x52424752, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x800, 0x8}]}})

2.682595104s ago: executing program 5 (id=1732):
unshare(0x2040400)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7a, 0x0)

2.270062255s ago: executing program 5 (id=1733):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
close(r0)

1.991695585s ago: executing program 5 (id=1735):
r0 = socket(0x10, 0x80003, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.690510632s ago: executing program 4 (id=1736):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000003340)='bbr\x00', 0x4)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000000))

1.62189553s ago: executing program 7 (id=1737):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0x28, 0x1, {0x22, 0x19}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x0, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0x13, 0x1, "fc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.621653996s ago: executing program 4 (id=1738):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800)

1.461669402s ago: executing program 4 (id=1739):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)

1.325663532s ago: executing program 4 (id=1740):
r0 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000002000))

1.143185489s ago: executing program 4 (id=1741):
syz_emit_ethernet(0x4e, &(0x7f00000056c0)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "f6cec5", 0x18, 0x0, 0xff, @local, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0x3a, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x2}]}]}}}}}, 0x0)

1.083529334s ago: executing program 4 (id=1742):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x219}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
syz_open_procfs$namespace(0x0, 0x0)

0s ago: executing program 5 (id=1743):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3b, 0x6b, 0xc0, 0x40, 0xb95, 0x772b, 0xa24c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x81, 0x38, 0x7f}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000280)={0x20, 0x0, 0x2, "f6c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001280)={0x10, &(0x7f00000011c0)=ANY=[@ANYBLOB=' \t\t'], 0x0, 0x0})

kernel console output (not intermixed with test programs):

97]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  201.969366][ T1097]  ? __kthread_parkme+0x7b/0x200
[  201.969381][ T1097]  kthread+0x711/0x8a0
[  201.969392][ T1097]  ? __pfx_worker_thread+0x10/0x10
[  201.969399][ T1097]  ? __pfx_kthread+0x10/0x10
[  201.969410][ T1097]  ? _raw_spin_unlock_irq+0x23/0x50
[  201.969418][ T1097]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.969428][ T1097]  ? __pfx_kthread+0x10/0x10
[  201.969438][ T1097]  ret_from_fork+0x3fc/0x770
[  201.969449][ T1097]  ? __pfx_ret_from_fork+0x10/0x10
[  201.969460][ T1097]  ? __switch_to_asm+0x39/0x70
[  201.969470][ T1097]  ? __switch_to_asm+0x33/0x70
[  201.969478][ T1097]  ? __pfx_kthread+0x10/0x10
[  201.969488][ T1097]  ret_from_fork_asm+0x1a/0x30
[  201.969506][ T1097]  </TASK>
[  201.969511][ T1097] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  202.558074][ T9644] loop4: detected capacity change from 0 to 512
[  202.566049][   T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  202.571498][ T9644] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  202.588089][ T9644] EXT4-fs (loop4): 1 truncate cleaned up
[  202.590841][ T9644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.627463][ T7220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.691109][ T9635] loop6: detected capacity change from 0 to 40427
[  202.697594][ T9635] F2FS-fs (loop6): build fault injection rate: 771
[  202.701958][ T9635] F2FS-fs (loop6): invalid crc value
[  202.760780][ T9635] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  202.765351][ T9635] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  202.796261][ T8636] CPU: 1 UID: 0 PID: 8636 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  202.796284][ T8636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  202.796293][ T8636] Call Trace:
[  202.796300][ T8636]  <TASK>
[  202.796307][ T8636]  dump_stack_lvl+0x189/0x250
[  202.796332][ T8636]  ? __pfx_dump_stack_lvl+0x10/0x10
[  202.796348][ T8636]  ? __pfx_queue_work_on+0x10/0x10
[  202.796361][ T8636]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  202.796379][ T8636]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  202.796407][ T8636]  f2fs_handle_critical_error+0x37c/0x540
[  202.796433][ T8636]  f2fs_write_end_io+0x886/0xb60
[  202.796461][ T8636]  __submit_merged_bio+0x27a/0x6a0
[  202.796486][ T8636]  __submit_merged_write_cond+0x255/0x530
[  202.796512][ T8636]  f2fs_write_data_pages+0x261d/0x3000
[  202.796563][ T8636]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  202.796633][ T8636]  ? folios_put_refs+0x559/0x640
[  202.796660][ T8636]  ? __lock_acquire+0xab9/0xd20
[  202.796686][ T8636]  ? do_raw_spin_lock+0x121/0x290
[  202.796712][ T8636]  ? do_raw_spin_unlock+0x4d/0x240
[  202.796729][ T8636]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  202.796750][ T8636]  do_writepages+0x32e/0x550
[  202.796779][ T8636]  ? do_raw_spin_unlock+0x4d/0x240
[  202.796824][ T8636]  filemap_fdatawrite+0x199/0x240
[  202.796845][ T8636]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  202.796907][ T8636]  ? do_raw_spin_unlock+0x4d/0x240
[  202.796928][ T8636]  f2fs_sync_dirty_inodes+0x31f/0x830
[  202.796957][ T8636]  f2fs_write_checkpoint+0x95a/0x1df0
[  202.796993][ T8636]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  202.797061][ T8636]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  202.797082][ T8636]  ? kfree+0x18e/0x440
[  202.797099][ T8636]  ? kill_f2fs_super+0x298/0x6c0
[  202.797118][ T8636]  kill_f2fs_super+0x2c3/0x6c0
[  202.797138][ T8636]  ? __pfx_kill_f2fs_super+0x10/0x10
[  202.797148][ T8636]  ? radix_tree_delete_item+0x2b6/0x400
[  202.797173][ T8636]  ? shrinker_free+0x2ce/0x3e0
[  202.797192][ T8636]  deactivate_locked_super+0xbc/0x130
[  202.797210][ T8636]  cleanup_mnt+0x425/0x4c0
[  202.797225][ T8636]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.797245][ T8636]  task_work_run+0x1d4/0x260
[  202.797266][ T8636]  ? __pfx_task_work_run+0x10/0x10
[  202.797281][ T8636]  ? __x64_sys_umount+0x122/0x160
[  202.797304][ T8636]  ? exit_to_user_mode_loop+0x40/0x110
[  202.797325][ T8636]  exit_to_user_mode_loop+0xec/0x110
[  202.797343][ T8636]  do_syscall_64+0x2bd/0x3b0
[  202.797361][ T8636]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.797377][ T8636]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.797391][ T8636]  ? exc_page_fault+0x9f/0xf0
[  202.797410][ T8636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.797423][ T8636] RIP: 0033:0x7fa8ab38ff17
[  202.797437][ T8636] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  202.797448][ T8636] RSP: 002b:00007ffef9def458 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  202.797464][ T8636] RAX: 0000000000000000 RBX: 00007fa8ab411c05 RCX: 00007fa8ab38ff17
[  202.797472][ T8636] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef9def510
[  202.797480][ T8636] RBP: 00007ffef9def510 R08: 0000000000000000 R09: 0000000000000000
[  202.797488][ T8636] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef9df05a0
[  202.797497][ T8636] R13: 00007fa8ab411c05 R14: 0000000000031974 R15: 00007ffef9df05e0
[  202.797523][ T8636]  </TASK>
[  202.800424][ T8636] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  202.835906][   T10] usb 6-1: Using ep0 maxpacket: 16
[  202.942128][   T10] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  202.951989][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.955248][   T10] usb 6-1: Product: syz
[  202.956705][   T10] usb 6-1: Manufacturer: syz
[  202.958510][   T10] usb 6-1: SerialNumber: syz
[  202.981938][   T10] usb 6-1: config 0 descriptor??
[  203.083153][ T9654] netlink: 'syz.4.1209': attribute type 5 has an invalid length.
[  203.207413][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1211'.
[  203.207836][   T10] speedtch 6-1:0.0: speedtch_bind: data interface not found!
[  203.214072][   T10] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[  203.409669][    T9] usb 6-1: USB disconnect, device number 13
[  203.581387][   T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  203.739191][ T9678] loop6: detected capacity change from 0 to 32768
[  203.742062][   T10] usb 5-1: Using ep0 maxpacket: 8
[  203.753227][ T9678] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1220 (9678)
[  203.757385][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  203.761132][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  203.768362][   T10] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  203.777734][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.780460][   T10] usb 5-1: Product: syz
[  203.782176][   T10] usb 5-1: Manufacturer: syz
[  203.783651][   T10] usb 5-1: SerialNumber: syz
[  203.786903][   T10] usb 5-1: config 0 descriptor??
[  203.793385][ T9678] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  203.799316][ T9678] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  203.803034][ T9678] BTRFS info (device loop6): using free-space-tree
[  203.881399][ T8636] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  204.200634][    T9] usb 5-1: USB disconnect, device number 23
[  204.271893][ T9698] loop5: detected capacity change from 0 to 32768
[  204.426162][ T9698] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  204.426177][ T9698]   allowing incompatible features above 0.0: (unknown version)
[  204.426182][ T9698]   features: 
[  204.443251][ T9698] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  204.447263][ T9698] bcachefs (loop5): initializing new filesystem
[  204.462168][ T9698] bcachefs (loop5): going read-write
[  204.481946][ T9698] bcachefs (loop5): marking superblocks
[  204.515996][ T9698] bcachefs (loop5): initializing freespace
[  204.527540][ T9698] bcachefs (loop5): done initializing freespace
[  204.540586][ T9698] bcachefs (loop5): reading snapshots table
[  204.543210][ T9698] bcachefs (loop5): reading snapshots done
[  204.586539][ T9698] bcachefs (loop5): done starting filesystem
[  204.655379][ T9698] syz.5.1222 (9698) used greatest stack depth: 17272 bytes left
[  204.690714][ T8247] bcachefs (loop5): shutting down
[  204.692850][ T8247] bcachefs (loop5): going read-only
[  204.696552][ T8247] bcachefs (loop5): finished waiting for writes to stop
[  204.711622][ T8247] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3
[  204.838249][ T8247] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  204.857621][ T8247] bcachefs (loop5): clean shutdown complete, journal seq 4
[  204.861413][ T9702] loop6: detected capacity change from 0 to 131072
[  204.861506][ T8247] bcachefs (loop5): marking filesystem clean
[  204.864504][ T9702] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0)
[  204.869343][ T9702] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  204.874573][ T9702] F2FS-fs (loop6): invalid crc value
[  204.905114][ T9715] loop4: detected capacity change from 0 to 4096
[  204.941749][ T9715] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  204.949987][ T9702] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  204.956061][ T9702] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  204.959177][ T9702] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  204.988908][ T9715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.000638][ T8247] bcachefs (loop5): shutdown complete
[  206.084557][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1227'.
[  206.102780][ T9726] erspan0: entered promiscuous mode
[  206.105897][ T9726] macvtap1: entered promiscuous mode
[  206.108261][ T9726] macvtap1: entered allmulticast mode
[  206.110377][ T9726] erspan0: entered allmulticast mode
[  206.134635][ T9726] erspan0: left allmulticast mode
[  206.137211][ T9726] erspan0: left promiscuous mode
[  206.268394][ T9728] loop6: detected capacity change from 0 to 2048
[  206.269143][ T7220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.279675][ T9728] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  206.396749][ T9731] loop4: detected capacity change from 0 to 1024
[  206.423857][ T9731] hfsplus: bad catalog entry type
[  206.438339][  T185] hfsplus: b-tree write err: -5, ino 4
[  206.507891][ T9734] loop4: detected capacity change from 0 to 1024
[  206.578851][  T185] hfsplus: b-tree write err: -5, ino 4
[  206.662954][    T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  206.844689][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.852397][    T9] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  206.855980][    T9] usb 7-1: config 1 has no interface number 1
[  206.858435][    T9] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  206.872601][    T9] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  206.876907][ T2200] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  206.886725][    T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  206.890312][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.893652][    T9] usb 7-1: Product: syz
[  206.895357][    T9] usb 7-1: Manufacturer: syz
[  206.897164][    T9] usb 7-1: SerialNumber: syz
[  206.902466][ T9732] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  206.996769][ T9744] loop4: detected capacity change from 0 to 32768
[  207.031343][ T9744] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  207.042111][ T2200] usb 6-1: Using ep0 maxpacket: 8
[  207.050890][ T2200] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13
[  207.058644][ T2200] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  207.061499][ T2200] usb 6-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  207.068180][ T2200] usb 6-1: Product: syz
[  207.069612][ T2200] usb 6-1: Manufacturer: syz
[  207.072235][ T2200] usb 6-1: SerialNumber: syz
[  207.078713][ T2200] usb 6-1: config 0 descriptor??
[  207.087153][ T2200] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  207.091102][ T7220] ocfs2: Unmounting device (7,4) on (node local)
[  207.133943][    T9] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[  207.142239][    T9] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[  207.185788][    T9] usb 7-1: USB disconnect, device number 12
[  207.235425][ T6837] udevd[6837]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  207.314389][ T9750] loop4: detected capacity change from 0 to 512
[  207.318929][ T9750] EXT4-fs: Ignoring removed oldalloc option
[  207.334773][ T9750] EXT4-fs (loop4): 1 truncate cleaned up
[  207.337435][ T9750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.352605][   T33] audit: type=1800 audit(1755250988.466:66): pid=9750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1237" name="file1" dev="loop4" ino=15 res=0 errno=0
[  207.387382][ T7220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.518643][ T9757] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  207.521020][ T9757] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  207.525407][ T9757] vhci_hcd vhci_hcd.0: Device attached
[  207.536341][ T9757] loop4: detected capacity change from 0 to 1024
[  207.539879][ T9757] EXT4-fs: Ignoring removed nobh option
[  207.548356][ T9757] EXT4-fs: Ignoring removed bh option
[  207.567664][ T9757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.586964][ T9758] vhci_hcd: cannot find a urb of seqnum 7510 max seqnum 1
[  207.592114][   T12] vhci_hcd: stop threads
[  207.593778][   T12] vhci_hcd: release socket
[  207.595535][   T12] vhci_hcd: disconnect device
[  207.894147][ T2200] gspca_zc3xx: reg_w_i err -71
[  207.979811][ T5887] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  208.105524][ T7220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.143233][ T5887] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  208.148744][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.164967][ T5887] usb 7-1: config 0 descriptor??
[  208.174904][ T5887] gspca_main: cpia1-2.14.0 probing 0813:0001
[  208.405516][ T9779] loop4: detected capacity change from 0 to 128
[  208.414288][ T9779] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  208.423523][ T9779] hpfs: filesystem error: improperly stopped
[  208.427323][ T9779] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  208.431950][ T9779] hpfs: You really don't want any checks? You are crazy...
[  208.434930][ T9779] hpfs: hpfs_map_sector(): read error
[  208.437152][ T9779] hpfs: code page support is disabled
[  208.441287][ T9779] hpfs: hpfs_map_sector(): read error
[  208.447022][ T9779] hpfs: hpfs_map_sector(): read error
[  208.450341][ T9779] hpfs: filesystem error: unable to find root dir
[  208.478779][ T2200] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  208.481332][ T2200] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  208.496115][ T2200] usb 6-1: USB disconnect, device number 14
[  208.542741][ T9783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1251'.
[  208.549662][ T9783] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1251'.
[  208.553584][ T9783] netlink: 'syz.4.1251': attribute type 10 has an invalid length.
[  208.573914][ T5887] cpia1 7-1:0.0: unexpected state after lo power cmd: 00
[  208.844145][ T5887] gspca_cpia1: usb_control_msg 01, error -32
[  208.851550][ T5887] gspca_cpia1: usb_control_msg 01, error -32
[  208.881017][ T5887] gspca_cpia1: usb_control_msg 01, error -71
[  208.882880][ T5887] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0)
[  208.892853][ T5887] usb 7-1: USB disconnect, device number 13
[  209.609172][ T9799] syz.5.1254 (9799): drop_caches: 2
[  209.678232][ T9801] tap0: tun_chr_ioctl cmd 1074025677
[  209.680535][ T9801] tap0: linktype set to 780
[  209.708204][   T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  209.902559][ T9808] loop6: detected capacity change from 0 to 1024
[  210.186713][   T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  210.189132][   T24] usb 5-1: config 0 has an invalid interface number: 4 but max is 0
[  210.194771][ T3914] hfsplus: b-tree write err: -5, ino 4
[  210.202880][   T24] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  210.206259][   T24] usb 5-1: config 0 has no interface number 0
[  210.209327][   T24] usb 5-1: config 0 has no interface number 1
[  210.216457][   T24] usb 5-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f
[  210.228812][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.231332][   T24] usb 5-1: Product: syz
[  210.232804][   T24] usb 5-1: Manufacturer: syz
[  210.234474][   T24] usb 5-1: SerialNumber: syz
[  210.246972][   T24] usb 5-1: config 0 descriptor??
[  210.257469][   T24] cdc_acm 5-1:0.51: probe with driver cdc_acm failed with error -22
[  210.457406][   T24] usb 5-1: USB disconnect, device number 24
[  210.857600][ T9815] loop5: detected capacity change from 0 to 32768
[  211.039819][ T9817] loop4: detected capacity change from 0 to 128
[  211.186620][ T9821] loop4: detected capacity change from 0 to 8
[  211.260884][ T9821] SQUASHFS error: lzo decompression failed, data probably corrupt
[  211.267775][ T9821] SQUASHFS error: Failed to read block 0x0: -5
[  211.276838][ T9821] SQUASHFS error: lzo decompression failed, data probably corrupt
[  211.281830][ T9821] SQUASHFS error: Failed to read block 0x0: -5
[  211.289396][   T33] audit: type=1800 audit(1755250992.414:67): pid=9821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1268" name="file2" dev="loop4" ino=3 res=0 errno=0
[  211.370155][ T9828] loop5: detected capacity change from 0 to 16
[  211.396112][ T9828] erofs (device loop5): mounted with root inode @ nid 36.
[  211.417602][ T9828] erofs (device loop5): bogus lookback distance 0 @ lcn 1 of nid 89
[  211.422128][ T9828] erofs (device loop5): readahead error at folio 2 @ nid 89
[  211.427719][ T9828] erofs (device loop5): bogus lookback distance 0 @ lcn 1 of nid 89
[  211.430232][ T9828] erofs (device loop5): readahead error at folio 1 @ nid 89
[  211.447579][ T9828] erofs (device loop5): bogus lookback distance 0 @ lcn 1 of nid 89
[  211.449992][ T9828] erofs (device loop5): bogus lookback distance 0 @ lcn 1 of nid 89
[  211.455427][ T9828] erofs (device loop5): read error -117 @ 1 of nid 89
[  211.458717][   T33] audit: type=1800 audit(1755250992.585:68): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1271" name="file3" dev="loop5" ino=89 res=0 errno=0
[  211.536263][ T9838] loop5: detected capacity change from 0 to 128
[  211.553969][ T9838] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  211.556440][ T9838] System zones: 1-3, 19-19, 35-36
[  211.564332][ T9838] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  211.576568][ T9838] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  211.595659][ T9838] EXT4-fs warning (device loop5): ext4_group_extend:1891: can't read last block, resize aborted
[  211.622026][ T8247] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  211.779822][ T9850] block nbd0: Unsupported socket: shutdown callout must be supported.
[  211.791386][ T9848] loop4: detected capacity change from 0 to 2048
[  211.835590][ T9852] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1279'.
[  211.843094][ T9848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.847828][ T9848] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.914667][ T9858] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.1282'.
[  211.921438][ T7220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.926640][ T9858] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.1282'.
[  212.017065][ T9862] loop4: detected capacity change from 0 to 4096
[  212.042484][ T9862] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  212.050981][ T9868] trusted_key: syz.6.1286 sent an empty control message without MSG_MORE.
[  212.064016][ T9862] ntfs3(loop4): Failed to load $Extend (-22).
[  212.066291][ T9862] ntfs3(loop4): Failed to initialize $Extend.
[  212.409635][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1293'.
[  212.413301][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1293'.
[  213.112748][ T5887] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  213.261167][ T5887] usb 6-1: Using ep0 maxpacket: 8
[  213.265250][ T5887] usb 6-1: unable to get BOS descriptor or descriptor too short
[  213.271372][ T5887] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  213.278079][ T5887] usb 6-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  213.285981][ T5887] usb 6-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  213.293064][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.299637][ T5887] usb 6-1: Product: syz
[  213.302847][ T5887] usb 6-1: Manufacturer: syz
[  213.304652][ T5887] usb 6-1: SerialNumber: syz
[  213.574945][ T5887] usb 6-1: USB disconnect, device number 15
[  213.746212][ T9911] loop6: detected capacity change from 0 to 1024
[  213.755797][ T9911] hfsplus: failed to load root directory
[  214.201552][ T9914] loop6: detected capacity change from 0 to 32768
[  214.210109][ T9914] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  214.220426][ T9914] XFS (loop6): Ending clean mount
[  214.229176][ T9914] XFS (loop6): Quotacheck needed: Please wait.
[  214.253883][ T9914] XFS (loop6): Quotacheck: Done.
[  214.305689][ T8636] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  214.353052][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1309'.
[  214.772528][ T9936] loop6: detected capacity change from 0 to 32768
[  214.785759][ T9936] JBD2: journal file too short 1,0
[  214.787603][ T9936] (syz.6.1308,9936,1):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  214.790250][ T9936] (syz.6.1308,9936,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  214.792996][ T9936] (syz.6.1308,9936,1):ocfs2_check_volume:2432 ERROR: status = -22
[  214.795592][ T9936] (syz.6.1308,9936,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  214.802104][ T9936] (syz.6.1308,9936,1):ocfs2_fill_super:1177 ERROR: status = -22
[  215.044381][ T9951] No buffer was provided with the request
[  216.085772][   T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  216.265618][   T10] usb 6-1: Using ep0 maxpacket: 16
[  216.277458][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.281480][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  216.289232][   T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  216.292680][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.306481][   T10] usb 6-1: config 0 descriptor??
[  216.351132][ T9960] loop4: detected capacity change from 0 to 32768
[  216.460045][ T9960] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  216.480789][ T9960] XFS (loop4): Ending clean mount
[  216.550944][ T9978] netlink: 'syz.6.1324': attribute type 3 has an invalid length.
[  216.554127][ T9978] netlink: 'syz.6.1324': attribute type 3 has an invalid length.
[  216.575646][ T9978] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1324'.
[  216.801647][ T7220] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  216.896199][   T10] usbhid 6-1:0.0: can't add hid device: -71
[  216.898638][   T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  216.907789][   T10] usb 6-1: USB disconnect, device number 16
[  217.178181][ T9985] could not allocate digest TFM handle sm3
[  217.340259][ T9995] loop4: detected capacity change from 0 to 1024
[  217.365460][ T9995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  217.504548][   T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  217.519644][T10001] loop4: detected capacity change from 0 to 64
[  217.548473][T10001] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  217.650573][T10005] netlink: 'syz.4.1336': attribute type 1 has an invalid length.
[  217.663552][T10005] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1336'.
[  217.665485][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[  217.669438][   T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  217.672144][   T10] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  217.689568][   T10] usb 7-1: config 1 interface 0 has no altsetting 1
[  217.694324][   T10] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  217.697678][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.700422][   T10] usb 7-1: Product: syz
[  217.734377][   T10] usb 7-1: Manufacturer: syz
[  217.736141][   T10] usb 7-1: SerialNumber: syz
[  217.755202][   T10] smsusb:smsusb_probe: board id=8, interface number 0
[  217.868544][T10007] loop5: detected capacity change from 0 to 32768
[  217.871867][T10007] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  217.871867][T10007] clean (size 40):
[  217.871867][T10007] flags:          9
[  217.871867][T10007] journal_seq:    7
[  217.871867][T10007] 
[  217.881211][T10007] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  217.955749][   T10] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[  217.958477][   T10] smsusb 7-1:1.0: probe with driver smsusb failed with error -71
[  217.975668][   T10] usb 7-1: USB disconnect, device number 14
[  217.977434][T10015] loop5: detected capacity change from 0 to 2048
[  217.991036][T10015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  218.067304][T10017] loop5: detected capacity change from 0 to 1024
[  218.110194][ T8767] hfsplus: b-tree write err: -5, ino 4
[  218.372564][ T2200] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  218.525968][ T2200] usb 6-1: not running at top speed; connect to a high speed hub
[  218.530076][ T2200] usb 6-1: config 95 has an invalid interface number: 1 but max is 0
[  218.533641][ T2200] usb 6-1: config 95 has no interface number 0
[  218.536193][ T2200] usb 6-1: config 95 interface 1 has no altsetting 0
[  218.541082][ T2200] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79
[  218.545177][ T2200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.547669][ T2200] usb 6-1: Product: syz
[  218.549144][ T2200] usb 6-1: Manufacturer: syz
[  218.550535][ T2200] usb 6-1: SerialNumber: syz
[  218.762402][   T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  218.820814][ T2200] usb 6-1: USB disconnect, device number 17
[  218.866798][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  218.883156][T10023] loop4: detected capacity change from 0 to 32768
[  218.891670][T10023] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1345 (10023)
[  218.906298][T10023] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  218.909723][T10023] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  218.913158][T10023] BTRFS info (device loop4): disk space caching is enabled
[  218.915638][T10023] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  218.942410][   T10] usb 7-1: Using ep0 maxpacket: 32
[  218.950479][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[  218.955972][   T10] usb 7-1: config 0 has an invalid interface number: 223 but max is 0
[  218.959705][   T10] usb 7-1: config 0 has no interface number 0
[  218.965065][   T10] usb 7-1: config 0 interface 223 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  218.969467][   T10] usb 7-1: config 0 interface 223 altsetting 2 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  218.978045][   T10] usb 7-1: config 0 interface 223 has no altsetting 0
[  218.983654][   T10] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=86.21
[  219.001699][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.004930][   T10] usb 7-1: Product: syz
[  219.006817][   T10] usb 7-1: Manufacturer: syz
[  219.008702][   T10] usb 7-1: SerialNumber: syz
[  219.016950][   T10] usb 7-1: config 0 descriptor??
[  219.039881][   T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  219.093374][T10023] BTRFS info (device loop4): rebuilding free space tree
[  219.117158][T10023] BTRFS info (device loop4): disabling free space tree
[  219.119825][T10023] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  219.134774][T10023] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  219.187024][ T6837] udevd[6837]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.223/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  219.216142][T10023] BTRFS info (device loop4): balance: start -d -m
[  219.243434][T10023] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata
[  219.254747][ T2200] usb 7-1: USB disconnect, device number 15
[  219.293978][T10023] BTRFS info (device loop4): balance: paused
[  219.340772][ T7220] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  219.561350][   T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  219.711202][   T10] usb 6-1: Using ep0 maxpacket: 8
[  219.720617][   T10] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  219.726018][   T10] usb 6-1: config 179 has no interface number 0
[  219.728193][   T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  219.732521][   T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  219.740382][   T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  219.745583][   T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  219.759471][   T10] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  219.785275][   T10] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  219.817561][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.909070][T10045] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  220.225222][   T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input19
[  220.459195][T10055] loop6: detected capacity change from 0 to 40427
[  220.466743][T10055] F2FS-fs (loop6): invalid crc value
[  220.491947][T10045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.518284][T10045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.578723][T10055] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  220.612978][T10055] F2FS-fs (loop6): Start checkpoint disabled!
[  220.633649][T10055] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  220.658924][T10061] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  220.662513][T10061] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  220.664304][   T33] audit: type=1800 audit(1755251001.797:69): pid=10055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1350" name="file1" dev="loop6" ino=10 res=0 errno=0
[  220.665581][T10061] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  220.675543][T10061] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  220.678701][T10061] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  220.681913][T10061] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  220.684911][T10061] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  220.687910][T10061] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  220.691167][T10061] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  220.694365][T10061] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  220.714897][  T147] bio_check_eod: 177 callbacks suppressed
[  220.714910][  T147] kworker/u9:2: attempt to access beyond end of device
[  220.714910][  T147] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  220.729048][  T147] CPU: 0 UID: 0 PID: 147 Comm: kworker/u9:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  220.729065][  T147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.729074][  T147] Workqueue: writeback wb_workfn (flush-7:6)
[  220.729100][  T147] Call Trace:
[  220.729107][  T147]  <TASK>
[  220.729114][  T147]  dump_stack_lvl+0x189/0x250
[  220.729137][  T147]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.729154][  T147]  ? __pfx_queue_work_on+0x10/0x10
[  220.729166][  T147]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  220.729176][  T147]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  220.729195][  T147]  f2fs_handle_critical_error+0x37c/0x540
[  220.729223][  T147]  f2fs_write_end_io+0x886/0xb60
[  220.729252][  T147]  __submit_merged_bio+0x27a/0x6a0
[  220.729278][  T147]  __submit_merged_write_cond+0x255/0x530
[  220.729303][  T147]  f2fs_write_data_pages+0x261d/0x3000
[  220.729346][  T147]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  220.729380][  T147]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  220.729423][  T147]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  220.729437][  T147]  ? look_up_lock_class+0x74/0x170
[  220.729465][  T147]  ? trace_f2fs_writepages+0x7f/0x200
[  220.729484][  T147]  ? f2fs_write_node_pages+0x478/0x6e0
[  220.729525][  T147]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  220.729545][  T147]  do_writepages+0x32e/0x550
[  220.729562][  T147]  ? reacquire_held_locks+0x127/0x1d0
[  220.729575][  T147]  ? writeback_sb_inodes+0x384/0x1010
[  220.729601][  T147]  __writeback_single_inode+0x145/0xff0
[  220.729619][  T147]  ? do_raw_spin_unlock+0x4d/0x240
[  220.729640][  T147]  writeback_sb_inodes+0x6c7/0x1010
[  220.729656][  T147]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.729688][  T147]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  220.729768][  T147]  ? rcu_is_watching+0x15/0xb0
[  220.729794][  T147]  wb_writeback+0x43b/0xaf0
[  220.729820][  T147]  ? queue_io+0x3c1/0x590
[  220.729839][  T147]  ? __pfx_wb_writeback+0x10/0x10
[  220.729858][  T147]  ? _raw_spin_unlock_irq+0x23/0x50
[  220.729879][  T147]  wb_workfn+0x409/0xef0
[  220.729909][  T147]  ? __pfx_wb_workfn+0x10/0x10
[  220.729922][  T147]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.729949][  T147]  ? __lock_acquire+0xab9/0xd20
[  220.729970][  T147]  ? process_scheduled_works+0x9ef/0x17b0
[  220.729991][  T147]  ? _raw_spin_unlock_irq+0x23/0x50
[  220.730006][  T147]  ? process_scheduled_works+0x9ef/0x17b0
[  220.730019][  T147]  ? process_scheduled_works+0x9ef/0x17b0
[  220.730034][  T147]  process_scheduled_works+0xae1/0x17b0
[  220.730067][  T147]  ? __pfx_process_scheduled_works+0x10/0x10
[  220.730099][  T147]  worker_thread+0x8a0/0xda0
[  220.730139][  T147]  kthread+0x711/0x8a0
[  220.730160][  T147]  ? __pfx_worker_thread+0x10/0x10
[  220.730172][  T147]  ? __pfx_kthread+0x10/0x10
[  220.730183][  T147]  ? _raw_spin_unlock_irq+0x23/0x50
[  220.730198][  T147]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.730213][  T147]  ? __pfx_kthread+0x10/0x10
[  220.730231][  T147]  ret_from_fork+0x3fc/0x770
[  220.730248][  T147]  ? __pfx_ret_from_fork+0x10/0x10
[  220.730269][  T147]  ? __switch_to_asm+0x39/0x70
[  220.730285][  T147]  ? __switch_to_asm+0x33/0x70
[  220.730299][  T147]  ? __pfx_kthread+0x10/0x10
[  220.730311][  T147]  ret_from_fork_asm+0x1a/0x30
[  220.730342][  T147]  </TASK>
[  220.889674][  T147] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  221.060080][T10031] Bluetooth: hci1: command 0x0406 tx timeout
[  221.078446][T10031] Bluetooth: hci2: command 0x0406 tx timeout
[  221.122744][T10070] loop6: detected capacity change from 0 to 256
[  221.129628][ T1270] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  221.142114][T10070] FAT-fs (loop6): Directory bread(block 64) failed
[  221.144678][T10070] FAT-fs (loop6): Directory bread(block 65) failed
[  221.147262][T10070] FAT-fs (loop6): Directory bread(block 66) failed
[  221.151638][T10070] FAT-fs (loop6): Directory bread(block 67) failed
[  221.153681][T10070] FAT-fs (loop6): Directory bread(block 68) failed
[  221.156237][T10070] FAT-fs (loop6): Directory bread(block 69) failed
[  221.158591][T10070] FAT-fs (loop6): Directory bread(block 70) failed
[  221.162017][T10070] FAT-fs (loop6): Directory bread(block 71) failed
[  221.164309][T10070] FAT-fs (loop6): Directory bread(block 72) failed
[  221.166234][T10070] FAT-fs (loop6): Directory bread(block 73) failed
[  221.265353][   T24] usb 6-1: USB disconnect, device number 18
[  221.265442][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  221.273154][    C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending?
[  221.294495][ T1270] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  221.298002][ T1270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.322078][ T1270] usb 5-1: config 0 descriptor??
[  221.342545][ T1270] usb 5-1: bad CDC descriptors
[  221.489398][ T1270] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  221.542261][   T47] usb 5-1: USB disconnect, device number 25
[  221.646369][ T1270] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  221.654217][ T1270] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.657303][ T1270] usb 7-1: Product: syz
[  221.658881][ T1270] usb 7-1: Manufacturer: syz
[  221.669190][ T1270] usb 7-1: SerialNumber: syz
[  221.680603][ T1270] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  221.711310][   T24] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  221.787822][T10084] loop5: detected capacity change from 0 to 32768
[  221.803269][T10084] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  221.853499][T10084] XFS (loop5): Ending clean mount
[  221.862523][T10084] XFS (loop5): Quotacheck needed: Please wait.
[  221.904197][T10084] XFS (loop5): Quotacheck: Done.
[  221.927861][ T8247] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  221.931738][    C1] usb 7-1: ath: unknown panic pattern!
[  222.134385][   T10] usb 7-1: USB disconnect, device number 16
[  222.156373][T10095] input: syz1 as /devices/virtual/input/input20
[  222.340832][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1367'.
[  222.353476][T10096] loop4: detected capacity change from 0 to 32768
[  222.455810][T10096] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,read_only,version_upgrade=none
[  222.455833][T10096]   allowing incompatible features above 0.0: (unknown version)
[  222.455842][T10096]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  222.476744][T10096] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  222.483023][T10096] bcachefs (loop4): recovering from clean shutdown, journal seq 13
[  222.506667][T10106] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1369'.
[  222.509758][T10106] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1369'.
[  222.512860][T10106] netlink: 'syz.5.1369': attribute type 4 has an invalid length.
[  222.553848][T10096] bcachefs (loop4): accounting_read... done
[  222.573090][T10096] bcachefs (loop4): alloc_read... done
[  222.575219][T10096] bcachefs (loop4): snapshots_read... done
[  222.590882][T10096] bcachefs (loop4): journal_replay... done
[  222.596652][T10096] bcachefs (loop4): resume_logged_ops... done
[  222.602171][T10096] bcachefs (loop4): delete_dead_inodes... done
[  222.609177][T10096] bcachefs (loop4): done starting filesystem
[  222.627365][T10112] loop5: detected capacity change from 0 to 256
[  222.645277][T10112] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  222.664073][ T7220] bcachefs (loop4): shutting down
[  222.680475][T10112] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  222.709951][ T7220] bcachefs (loop4): shutdown complete
[  222.738186][   T24] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  222.740753][   T24] ath9k_htc: Failed to initialize the device
[  222.744178][   T10] usb 7-1: ath9k_htc: USB layer deinitialized
[  222.868633][T10116] loop5: detected capacity change from 0 to 1024
[  222.884330][T10116] EXT4-fs: Ignoring removed nobh option
[  222.886175][T10116] EXT4-fs: inline encryption not supported
[  222.901889][T10116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.912829][T10116] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1375: Allocating blocks 385-513 which overlap fs metadata
[  222.921685][T10116] EXT4-fs (loop5): pa ffff88802a72f910: logic 16, phys. 129, len 24
[  222.922885][T10114] loop6: detected capacity change from 0 to 32768
[  222.924848][T10116] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  222.951402][T10114] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  222.951716][T10116] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[  222.963292][T10114] XFS (loop6): Ending clean mount
[  222.971472][T10116] EXT4-fs (loop5): This should not happen!! Data will be lost
[  222.971472][T10116] 
[  222.977716][T10116] EXT4-fs (loop5): Total free blocks count 0
[  222.996081][T10116] EXT4-fs (loop5): Free/Dirty block details
[  222.999769][T10116] EXT4-fs (loop5): free_blocks=128
[  223.005257][T10116] EXT4-fs (loop5): dirty_blocks=0
[  223.005697][ T8636] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  223.007299][T10116] EXT4-fs (loop5): Block reservation details
[  223.007313][T10116] EXT4-fs (loop5): i_reserved_data_blocks=0
[  223.977121][   T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  224.144421][   T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  224.155484][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.165983][   T24] usb 5-1: config 0 descriptor??
[  224.174041][T10148] loop5: detected capacity change from 0 to 512
[  224.179258][   T24] cp210x 5-1:0.0: cp210x converter detected
[  224.188195][T10148] EXT4-fs: Ignoring removed orlov option
[  224.193977][T10148] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  224.220238][T10148] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  224.234417][T10148] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.1383: corrupted in-inode xattr: e_value size too large
[  224.243388][T10148] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1383: couldn't read orphan inode 15 (err -117)
[  224.264323][T10148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.626256][   T24] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  224.778162][   T24] usb 5-1: cp210x converter now attached to ttyUSB0
[  224.922571][   T24] usb 5-1: USB disconnect, device number 26
[  225.051361][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  225.399258][ T8247] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.466372][   T24] cp210x 5-1:0.0: device disconnected
[  225.556170][T10166] : renamed from bridge_slave_0 (while UP)
[  225.649320][T10174] loop5: detected capacity change from 0 to 64
[  225.676147][T10174] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  225.756300][T10177] loop4: detected capacity change from 0 to 4096
[  225.771787][T10177] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  225.792260][T10177] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  225.810954][T10177] ntfs3(loop4): ino=1e, mi_enum_attr
[  225.828042][T10177] ntfs3(loop4): ino=1e, mi_enum_attr
[  225.895193][T10184] tmpfs: Cannot change global quota limit on remount
[  226.008195][T10178] loop6: detected capacity change from 0 to 32768
[  226.012418][T10178] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1395 (10178)
[  226.054976][T10178] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  226.062232][T10178] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  226.072443][T10178] BTRFS info (device loop6): using free-space-tree
[  226.076816][   T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  226.153152][T10186] loop4: detected capacity change from 0 to 32768
[  226.159890][T10186] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1399 (10186)
[  226.205695][T10186] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  226.227495][T10186] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  226.230972][T10186] BTRFS info (device loop4): using free-space-tree
[  226.234008][   T10] usb 6-1: Using ep0 maxpacket: 16
[  226.251632][   T10] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  226.255161][   T10] usb 6-1: config 0 has no interface number 0
[  226.276537][   T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  226.279946][   T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  226.301464][   T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  226.304771][   T10] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  226.326189][   T10] usb 6-1: Product: syz
[  226.331908][   T10] usb 6-1: SerialNumber: syz
[  226.360982][   T10] usb 6-1: config 0 descriptor??
[  226.371346][ T8636] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  226.377454][   T10] cm109 6-1:0.8: invalid payload size 0, expected 4
[  226.414029][   T10] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input21
[  226.511167][ T7220] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  226.581090][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  226.610986][ T6839] udevd[6839]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [10221] terminated by signal 33 (Unknown signal 33)
[  226.796875][   T24] usb 6-1: USB disconnect, device number 19
[  226.818278][   T24] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  227.636365][T10242] loop4: detected capacity change from 0 to 2048
[  227.682364][T10245] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  227.977372][   T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  228.124373][   T10] usb 6-1: Using ep0 maxpacket: 32
[  228.129166][   T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  228.132092][   T10] usb 6-1: config 0 has no interface number 0
[  228.135572][   T10] usb 6-1: config 0 interface 12 has no altsetting 0
[  228.140685][   T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  228.143990][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.149204][   T10] usb 6-1: Product: syz
[  228.150943][   T10] usb 6-1: Manufacturer: syz
[  228.152767][   T10] usb 6-1: SerialNumber: syz
[  228.160762][   T10] usb 6-1: config 0 descriptor??
[  228.195582][ T5908] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  228.224133][   T24] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  228.346496][ T5908] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01
[  228.349609][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.353481][ T5908] usb 5-1: config 0 descriptor??
[  228.360426][ T5908] ums-jumpshot 5-1:0.0: USB Mass Storage device detected
[  228.366480][ T5908] ums-jumpshot 5-1:0.0: Quirks match for vid 05dc pid 0001: 2
[  228.382580][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  228.386834][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  228.390985][   T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  228.397892][   T24] usb 7-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  228.401049][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.405585][   T24] usb 7-1: config 0 descriptor??
[  228.414681][T10262] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  228.573480][ T5908] usb 5-1: USB disconnect, device number 27
[  228.838252][   T24] aureal 0003:0755:2626.000C: unknown main item tag 0x6
[  228.841100][   T24] aureal 0003:0755:2626.000C: report_id 29495 is invalid
[  228.844115][   T24] aureal 0003:0755:2626.000C: item 0 2 1 8 parsing failed
[  228.847496][   T24] aureal 0003:0755:2626.000C: probe with driver aureal failed with error -22
[  229.039045][   T24] usb 7-1: USB disconnect, device number 17
[  229.132462][T10268] loop4: detected capacity change from 0 to 64
[  229.772816][   T10] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  229.779669][   T10] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  229.782523][   T10] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  229.785674][   T10] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  229.797022][   T10] usb 6-1: USB disconnect, device number 20
[  230.195339][T10285] loop4: detected capacity change from 0 to 1024
[  230.210118][T10285] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  230.256533][T10285] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1425: Invalid block bitmap block 0 in block_group 0
[  230.267158][T10285] Quota error (device loop4): write_blk: dquota write failed
[  230.269849][T10285] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  230.277094][T10285] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1425: Failed to acquire dquot type 0
[  230.284930][T10285] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1425: Freeing blocks not in datazone - block = 0, count = 4096
[  230.292135][T10285] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1425: Invalid inode bitmap blk 0 in block_group 0
[  230.310139][T10285] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  230.316722][T10285] EXT4-fs (loop4): 1 orphan inode deleted
[  230.319824][T10285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.322291][ T3067] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7
[  230.336762][ T3067] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u10:4: Failed to release dquot type 0
[  230.379112][ T7220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.688724][T10297] loop6: detected capacity change from 0 to 40427
[  230.696900][T10297] F2FS-fs (loop6): Image doesn't support compression
[  230.715647][T10297] F2FS-fs (loop6): invalid crc value
[  230.800823][T10297] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  230.823543][T10297] F2FS-fs (loop6): Start checkpoint disabled!
[  230.830593][T10297] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  230.886260][T10297] F2FS-fs (loop6): Image doesn't support compression
[  230.962498][T10299] loop4: detected capacity change from 0 to 131072
[  230.966022][T10299] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  230.968890][T10299] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  230.993392][T10299] F2FS-fs (loop4): invalid crc value
[  231.027941][T10299] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  231.031980][T10299] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  231.034603][T10299] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  231.542592][   T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  231.702355][   T10] usb 7-1: Using ep0 maxpacket: 16
[  231.706474][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.710786][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.726201][   T10] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  231.730485][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.743669][   T10] usb 7-1: config 0 descriptor??
[  231.829618][T10318] loop4: detected capacity change from 0 to 64
[  232.177088][   T10] corsair 0003:1B1C:1B02.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0
[  232.326316][T10338] loop5: detected capacity change from 0 to 2048
[  232.342246][T10338] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  232.365627][T10339] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  232.377687][   T10] corsair 0003:1B1C:1B02.000D: Read invalid backlight brightness: 50.
[  232.407068][T10326] loop4: detected capacity change from 0 to 32768
[  232.421935][T10326] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1440 (10326)
[  232.437455][T10326] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  232.441550][T10326] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  232.446708][T10326] BTRFS info (device loop4): using free-space-tree
[  232.526708][   T33] audit: type=1800 audit(1755251013.666:70): pid=10326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1440" name="file1" dev="loop4" ino=260 res=0 errno=0
[  232.560554][ T7220] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  232.586423][   T10] usb 7-1: USB disconnect, device number 18
[  232.772194][T10363] bridge0: Device is already in use.
[  232.869928][T10367] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  232.872623][T10367] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  232.880178][T10367] vhci_hcd vhci_hcd.0: Device attached
[  232.886126][T10367] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  232.907459][T10367] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7)
[  232.909559][T10367] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  232.927470][T10367] vhci_hcd vhci_hcd.0: Device attached
[  232.930611][T10367] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  232.947289][T10367] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  232.983617][T10367] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  232.988765][T10367] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(15)
[  232.990819][T10367] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  233.007373][T10367] vhci_hcd vhci_hcd.0: Device attached
[  233.011054][T10367] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(17)
[  233.013085][T10367] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  233.027659][T10367] vhci_hcd vhci_hcd.0: Device attached
[  233.030567][T10368] vhci_hcd: connection closed
[  233.030585][T10370] vhci_hcd: connection closed
[  233.030702][T10376] vhci_hcd: connection closed
[  233.033896][   T13] vhci_hcd: stop threads
[  233.036662][   T13] vhci_hcd: release socket
[  233.043356][   T13] vhci_hcd: disconnect device
[  233.045063][   T13] vhci_hcd: stop threads
[  233.046404][   T13] vhci_hcd: release socket
[  233.047981][   T13] vhci_hcd: disconnect device
[  233.049676][   T13] vhci_hcd: stop threads
[  233.051046][   T13] vhci_hcd: release socket
[  233.051162][T10378] vhci_hcd: connection closed
[  233.055707][   T13] vhci_hcd: disconnect device
[  233.063562][   T13] vhci_hcd: stop threads
[  233.064226][   T24] vhci_hcd: vhci_device speed not set
[  233.065321][   T13] vhci_hcd: release socket
[  233.069300][   T13] vhci_hcd: disconnect device
[  233.221863][ T5908] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  233.371491][ T5908] usb 6-1: Using ep0 maxpacket: 32
[  233.375492][ T5908] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.379262][ T5908] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.383016][ T5887] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  233.387156][ T5908] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  233.390327][ T5908] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  233.394587][ T5908] usb 6-1: Product: syz
[  233.396299][ T5908] usb 6-1: Manufacturer: syz
[  233.406859][ T5908] hub 6-1:4.0: USB hub found
[  233.546971][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  233.551926][ T5887] usb 7-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00
[  233.556219][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.576406][ T5887] usb 7-1: config 0 descriptor??
[  233.579327][T10381] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  233.612128][ T5908] hub 6-1:4.0: 2 ports detected
[  234.350822][ T5887] apple 0003:05AC:025B.000E: unknown main item tag 0x0
[  234.358194][ T5887] apple 0003:05AC:025B.000E: item fetching failed at offset 3/5
[  234.362605][ T5887] apple 0003:05AC:025B.000E: parse failed
[  234.365055][ T5887] apple 0003:05AC:025B.000E: probe with driver apple failed with error -22
[  234.378085][ T5887] usb 7-1: USB disconnect, device number 19
[  234.636158][T10391] mkiss: ax0: crc mode is auto.
[  234.972639][ T5887] hub 6-1:4.0: activate --> -90
[  235.497817][ T5908] usb 6-1: USB disconnect, device number 21
[  235.600797][T10403] loop6: detected capacity change from 0 to 32768
[  235.604044][T10403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1463 (10403)
[  235.610293][T10403] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  235.614935][T10403] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  235.617681][T10403] BTRFS info (device loop6): using free-space-tree
[  235.824069][ T8636] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  236.420166][ T5236] Bluetooth: hci0: command 0x0406 tx timeout
[  236.550433][ T2200] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  236.710460][ T2200] usb 5-1: Using ep0 maxpacket: 16
[  236.750755][ T2200] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  236.766523][ T2200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.785810][ T2200] usb 5-1: Product: syz
[  236.792741][ T2200] usb 5-1: Manufacturer: syz
[  236.795443][ T2200] usb 5-1: SerialNumber: syz
[  236.811045][ T2200] usb 5-1: config 0 descriptor??
[  236.829832][ T2200] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  237.147781][T10441] loop5: detected capacity change from 0 to 1024
[  237.177941][T10441] hfsplus: bad catalog entry type
[  237.227799][ T3067] hfsplus: b-tree write err: -5, ino 4
[  237.436015][T10445] loop6: detected capacity change from 0 to 256
[  237.455554][T10445] exfat: Deprecated parameter 'namecase'
[  237.457828][T10445] exfat: Deprecated parameter 'utf8'
[  237.479915][T10445] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  237.501641][ T2200] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71
[  237.511631][ T2200] usb 5-1: USB disconnect, device number 28
[  237.614245][T10443] loop5: detected capacity change from 0 to 32768
[  237.617645][T10443] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1474 (10443)
[  237.627353][T10443] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  237.639771][T10443] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  237.643234][T10443] BTRFS info (device loop5): using free-space-tree
[  237.710138][T10443] BTRFS info (device loop5): rebuilding free space tree
[  237.806791][ T8247] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  237.920107][   T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  238.083795][   T10] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  238.086844][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.091429][   T10] usb 7-1: Product: syz
[  238.093617][   T10] usb 7-1: Manufacturer: syz
[  238.095228][   T10] usb 7-1: SerialNumber: syz
[  238.106972][   T10] usb 7-1: config 0 descriptor??
[  238.117355][   T10] gspca_main: sunplus-2.14.0 probing 055f:c230
[  238.126202][T10477] netlink: 'syz.4.1482': attribute type 9 has an invalid length.
[  238.129397][T10477] netlink: 147436 bytes leftover after parsing attributes in process `syz.4.1482'.
[  239.357917][T10492] netlink: 'syz.4.1489': attribute type 1 has an invalid length.
[  239.360593][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1489'.
[  239.731388][   T10] gspca_sunplus: reg_r err -71
[  239.737313][   T10] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  239.751544][   T10] usb 7-1: USB disconnect, device number 20
[  239.820351][T10501] bridge: RTM_NEWNEIGH with invalid state 0x0
[  240.404257][T10522] loop6: detected capacity change from 0 to 1024
[  240.433154][T10522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.507770][ T8636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.691730][T10535] loop6: detected capacity change from 0 to 4096
[  240.829526][T10533] loop5: detected capacity change from 0 to 32768
[  240.882768][T10533] jfs_lookup: iget failed on inum 32
[  240.909984][T10533] jfs_lookup: iget failed on inum 32
[  241.149479][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1511'.
[  241.218331][T10539] loop6: detected capacity change from 0 to 32768
[  241.225372][T10539] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1509 (10539)
[  241.242903][T10539] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  241.246856][T10539] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  241.253323][T10539] BTRFS info (device loop6): using free-space-tree
[  241.359785][ T5887] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  241.409938][ T8636] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  241.521620][ T5887] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  241.524282][ T5887] usb 5-1: config 0 has no interface number 0
[  241.526185][ T5887] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  241.530478][ T5887] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  241.571913][ T5887] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  241.574626][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.577104][ T5887] usb 5-1: Product: syz
[  241.580607][ T5887] usb 5-1: Manufacturer: syz
[  241.582193][ T5887] usb 5-1: SerialNumber: syz
[  241.591223][ T5887] usb 5-1: config 0 descriptor??
[  241.612227][T10545] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  241.628163][ T5887] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  241.645050][ T5887] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  242.061793][ T5908] usb 5-1: USB disconnect, device number 29
[  242.072936][ T5908] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  242.081919][ T5908] cyberjack 5-1:0.69: device disconnected
[  242.701788][T10625] loop4: detected capacity change from 0 to 512
[  242.716971][T10625] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  242.733896][T10625] EXT4-fs (loop4): 1 truncate cleaned up
[  242.737175][T10625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.752747][T10625] fscrypt (loop4, inode 18): Direct key flag not allowed with different contents and filenames modes
[  242.784056][ T7220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.948045][T10640] loop4: detected capacity change from 0 to 256
[  242.998948][T10640] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  244.269199][ T5887] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  244.394639][T10652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1552'.
[  244.397581][T10652] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1552'.
[  244.428399][ T5887] usb 7-1: Using ep0 maxpacket: 8
[  244.432105][ T5887] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  244.435495][ T5887] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  244.443011][ T5887] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  244.446125][ T5887] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  244.456363][ T5887] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  244.460296][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.462879][ T5887] usb 7-1: Product: syz
[  244.464414][ T5887] usb 7-1: Manufacturer: syz
[  244.465889][ T5887] usb 7-1: SerialNumber: syz
[  244.478440][ T5887] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22
[  244.481509][ T5887] usbtest 7-1:1.0: Linux user mode ISO test driver
[  244.483549][ T5887] usbtest 7-1:1.0: high-speed {control bulk-out iso-in} tests (+alt)
[  244.542523][T10659] loop4: detected capacity change from 0 to 512
[  244.548692][T10659] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  244.566621][T10659] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  244.571978][T10659] System zones: 1-12
[  244.576963][T10659] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1555: corrupted in-inode xattr: e_value size too large
[  244.584250][T10659] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1555: couldn't read orphan inode 15 (err -117)
[  244.593389][T10659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.642652][ T7220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.687069][ T5908] usb 7-1: USB disconnect, device number 21
[  244.816013][T10660] loop5: detected capacity change from 0 to 32768
[  244.826208][T10660] XFS: ikeep mount option is deprecated.
[  244.828969][T10660] XFS: noikeep mount option is deprecated.
[  244.867653][T10660] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  244.911948][T10660] XFS (loop5): Ending clean mount
[  244.923980][T10660] XFS (loop5): Quotacheck needed: Please wait.
[  244.967065][T10660] XFS (loop5): Quotacheck: Done.
[  245.011741][ T8247] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  245.157579][T10685] net_ratelimit: 44 callbacks suppressed
[  245.157594][T10685] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  245.345789][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'.
[  245.447770][ T5908] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  245.520659][   T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  245.599961][ T5908] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  245.604149][ T5908] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  245.610566][ T5908] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  245.614418][ T5908] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  245.621318][ T5908] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  245.624837][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.642252][ T5908] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  245.645983][ T5908] usb 6-1: invalid MIDI out EP 0
[  245.683078][   T10] usb 7-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7
[  245.700854][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.721508][   T10] usb 7-1: config 0 descriptor??
[  245.738437][   T10] gspca_main: mars-2.14.0 probing 093a:050f
[  245.759949][ T6842] udevd[6842]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  245.787825][ T5908] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[  245.840990][ T5908] usb 6-1: USB disconnect, device number 22
[  245.941233][ T2200] usb 7-1: USB disconnect, device number 22
[  246.660632][T10717] loop4: detected capacity change from 0 to 8192
[  246.826378][T10707] loop5: detected capacity change from 0 to 40427
[  246.839963][T10707] F2FS-fs (loop5): build fault injection rate: 14
[  246.842598][T10707] F2FS-fs (loop5): build fault injection type: 0x7
[  246.863316][T10707] F2FS-fs (loop5): invalid crc value
[  246.866914][T10707] F2FS-fs (loop5): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4429/0x6ff0
[  246.872598][T10707] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-12)
[  247.022546][T10731] veth3: entered promiscuous mode
[  247.283371][T10723] loop6: detected capacity change from 0 to 40427
[  247.288271][T10723] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  247.291313][T10723] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  247.318335][T10723] F2FS-fs (loop6): invalid crc value
[  247.396345][T10723] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  247.402095][T10723] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  247.404640][T10723] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  247.441428][ T8771] kworker/u10:10: attempt to access beyond end of device
[  247.441428][ T8771] loop6: rw=1, sector=45096, nr_sectors = 16 limit=40427
[  247.681787][T10747] loop4: detected capacity change from 0 to 32768
[  247.718782][T10747] (syz.4.1589,10747,1):ocfs2_read_blocks:239 ERROR: status = -12
[  247.722225][T10747] (syz.4.1589,10747,1):ocfs2_read_virt_blocks:1029 ERROR: status = -12
[  247.723576][T10745] loop5: detected capacity change from 0 to 32768
[  247.725709][T10747] (syz.4.1589,10747,1):ocfs2_read_dir_block:511 ERROR: status = -12
[  247.741119][T10747] (syz.4.1589,10747,1):ocfs2_read_blocks:239 ERROR: status = -12
[  247.744220][T10747] (syz.4.1589,10747,1):ocfs2_read_virt_blocks:1029 ERROR: status = -12
[  247.756995][T10745] bcachefs (/dev/loop5): error validating superblock: Invalid superblock: member info area missing
[  247.764789][T10745] bcachefs: bch2_fs_get_tree() error: invalid_sb_members_missing
[  247.771333][T10747] (syz.4.1589,10747,1):ocfs2_read_dir_block:511 ERROR: status = -12
[  247.774487][T10747] (syz.4.1589,10747,1):ocfs2_read_blocks:239 ERROR: status = -12
[  247.800465][T10747] (syz.4.1589,10747,1):ocfs2_read_virt_blocks:1029 ERROR: status = -12
[  247.803615][T10747] (syz.4.1589,10747,1):ocfs2_read_dir_block:511 ERROR: status = -12
[  247.806839][T10747] (syz.4.1589,10747,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  247.820250][T10747] (syz.4.1589,10747,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  247.820282][T10747] (syz.4.1589,10747,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  247.831748][T10747] (syz.4.1589,10747,0):ocfs2_initialize_super:2198 ERROR: status = -22
[  247.839284][T10747] (syz.4.1589,10747,0):ocfs2_fill_super:1177 ERROR: status = -22
[  247.877313][T10752] usb usb1: usbfs: process 10752 (syz.6.1590) did not claim interface 6 before use
[  248.247230][ T5908] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  248.430453][T10764] loop4: detected capacity change from 0 to 16
[  248.463252][T10764] erofs (device loop4): mounted with root inode @ nid 36.
[  248.523170][ T5908] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  248.569315][ T5908] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  248.600425][ T5908] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  248.683033][ T5908] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  248.705264][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  248.734635][ T5908] usb 7-1: SerialNumber: syz
[  248.999763][ T5908] usbtest 7-1:1.0: Linux user mode ISO test driver
[  249.002198][ T5908] usbtest 7-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  249.015001][ T5908] usb 7-1: USB disconnect, device number 23
[  249.407097][   T24] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  249.563172][   T24] usb 6-1: not running at top speed; connect to a high speed hub
[  249.577128][   T24] usb 6-1: config 95 has an invalid interface number: 1 but max is 0
[  249.581493][   T24] usb 6-1: config 95 has no interface number 0
[  249.583802][   T24] usb 6-1: config 95 interface 1 has no altsetting 0
[  249.591723][   T24] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f
[  249.594750][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.599172][   T24] usb 6-1: Product: syz
[  249.601264][   T24] usb 6-1: Manufacturer: syz
[  249.607275][   T24] usb 6-1: SerialNumber: syz
[  249.879004][   T24] usb 6-1: USB disconnect, device number 23
[  249.955181][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  249.996982][ T5908] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  250.151158][ T5908] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.154987][ T5908] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  250.170519][ T5908] usb 7-1: config 0 interface 0 has no altsetting 0
[  250.173158][ T5908] usb 7-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00
[  250.176652][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.181776][T10798] loop4: detected capacity change from 0 to 512
[  250.185595][T10798] EXT4-fs: Ignoring removed bh option
[  250.185924][ T5908] usb 7-1: config 0 descriptor??
[  250.210275][T10798] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  250.223525][T10798] EXT4-fs (loop4): 1 truncate cleaned up
[  250.227345][T10798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.403132][ T5908] usb 7-1: string descriptor 0 read error: -71
[  250.416544][ T5908] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input22
[  250.449090][ T5281] bcm5974 7-1:0.0: could not read from device
[  250.462198][ T5281] bcm5974 7-1:0.0: could not read from device
[  250.692681][   T33] audit: type=1800 audit(1755251031.791:71): pid=10802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1611" name="bus" dev="loop4" ino=18 res=0 errno=0
[  250.799366][ T5908] usb 7-1: USB disconnect, device number 24
[  250.805149][ T5281] bcm5974 7-1:0.0: could not read from device
[  250.813585][ T5281] bcm5974 7-1:0.0: could not read from device
[  250.844542][ T6839] udevd[6839]: Error opening device "/dev/input/event3": No such file or directory
[  250.854681][ T6839] udevd[6839]: Unable to EVIOCGABS device "/dev/input/event3"
[  250.860998][ T6839] udevd[6839]: Unable to EVIOCGABS device "/dev/input/event3"
[  250.863436][ T6839] udevd[6839]: Unable to EVIOCGABS device "/dev/input/event3"
[  250.865914][ T6839] udevd[6839]: Unable to EVIOCGABS device "/dev/input/event3"
[  251.084818][ T7220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.142706][T10813] loop4: detected capacity change from 0 to 256
[  251.153482][T10813] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001)
[  251.217251][ T2200] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  251.383288][ T2200] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  251.386319][ T2200] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  251.398755][ T2200] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  251.402210][ T2200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.408754][ T2200] usb 6-1: Product: syz
[  251.410454][ T2200] usb 6-1: Manufacturer: syz
[  251.416878][ T2200] usb 6-1: SerialNumber: syz
[  251.535389][T10833] loop4: detected capacity change from 0 to 4096
[  251.556394][T10834] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  251.606742][ T5236] Bluetooth: hci4: command 0x0405 tx timeout
[  251.642510][ T2200] usb 6-1: Audio class v2/v3 interfaces need an interface association
[  251.679086][ T2200] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  251.691758][ T2200] usb 6-1: USB disconnect, device number 24
[  251.707896][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  252.172977][T10851] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.1633'.
[  252.351819][T10865] usb usb8: usbfs: process 10865 (syz.4.1639) did not claim interface 2 before use
[  252.518362][T10862] loop6: detected capacity change from 0 to 32768
[  252.529169][   T24] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  252.549555][ T6839]  loop6: p1 p3 < >
[  252.557586][T10862]  loop6: p1 p3 < >
[  252.676061][ T5930] udevd[5930]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  252.676231][ T6839] udevd[6839]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  252.688203][   T24] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[  252.690672][   T24] usb 6-1: config 6 has no interface number 0
[  252.692731][   T24] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  252.698702][   T24] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  252.705140][ T6839] udevd[6839]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  252.705932][ T5930] udevd[5930]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  252.709640][   T24] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  252.723719][   T24] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  252.727793][   T24] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  252.731348][   T24] usb 6-1: Product: syz
[  252.734117][   T24] usb 6-1: Manufacturer: syz
[  252.736009][   T24] usb 6-1: SerialNumber: syz
[  252.744272][   T24] hso 6-1:6.2: Failed to find INT IN ep
[  252.776682][ T2300] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  252.869323][ T5908] usb 7-1: new full-speed USB device number 25 using dummy_hcd
[  252.938615][ T2300] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  252.944798][ T2300] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3
[  252.948982][ T2300] usb 5-1: config 220 interface 0 has no altsetting 0
[  252.958181][ T2300] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  252.961710][   T24] usb 6-1: USB disconnect, device number 25
[  252.961921][ T2300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.969610][ T2300] usb 5-1: Product: syz
[  252.971333][ T2300] usb 5-1: Manufacturer: syz
[  252.974622][ T2300] usb 5-1: SerialNumber: syz
[  253.030876][ T5908] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  253.034389][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.037877][ T5908] usb 7-1: Product: syz
[  253.039570][ T5908] usb 7-1: Manufacturer: syz
[  253.041419][ T5908] usb 7-1: SerialNumber: syz
[  253.045455][ T5908] usb 7-1: config 0 descriptor??
[  253.054376][ T5908] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  253.058723][ T5908] usb 7-1: setting power ON
[  253.060928][ T5908] dvb-usb: bulk message failed: -22 (2/0)
[  253.069318][ T5908] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  253.075718][ T5908] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19)
[  253.079796][ T5908] dvb_usb_cxusb 7-1:0.0: probe with driver dvb_usb_cxusb failed with error -22
[  253.191790][   T33] audit: type=1326 audit(1755251034.341:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.4.1642" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91b78ebe9 code=0x7ffc0000
[  253.198742][   T33] audit: type=1326 audit(1755251034.341:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.4.1642" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91b78ebe9 code=0x7ffc0000
[  253.210075][   T33] audit: type=1326 audit(1755251034.351:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.4.1642" exe="/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd91b78ebe9 code=0x7ffc0000
[  253.215202][ T2300] uvcvideo 5-1:220.0: probe with driver uvcvideo failed with error -22
[  253.219601][   T33] audit: type=1326 audit(1755251034.351:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.4.1642" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91b78ebe9 code=0x7ffc0000
[  253.226689][ T2300] usb 5-1: USB disconnect, device number 30
[  253.230913][   T33] audit: type=1326 audit(1755251034.351:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.4.1642" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91b78ebe9 code=0x7ffc0000
[  253.262393][ T2200] usb 7-1: USB disconnect, device number 25
[  253.742737][T10875] loop5: detected capacity change from 0 to 40427
[  253.757876][T10875] F2FS-fs (loop5): Image doesn't support compression
[  253.760470][T10875] F2FS-fs (loop5): build fault injection rate: 690
[  253.776384][T10875] F2FS-fs (loop5): invalid crc value
[  253.847762][T10881] loop6: detected capacity change from 0 to 1024
[  253.851518][T10881] EXT4-fs: Ignoring removed bh option
[  253.854532][T10881] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  253.868262][T10881] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869)
[  253.882498][T10881] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  253.890340][T10875] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  253.904871][T10875] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  253.959741][ T8247] syz-executor: attempt to access beyond end of device
[  253.959741][ T8247] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  253.965340][ T8247] CPU: 0 UID: 0 PID: 8247 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  253.965366][ T8247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  253.965375][ T8247] Call Trace:
[  253.965382][ T8247]  <TASK>
[  253.965389][ T8247]  dump_stack_lvl+0x189/0x250
[  253.965416][ T8247]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.965437][ T8247]  ? __pfx_queue_work_on+0x10/0x10
[  253.965451][ T8247]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  253.965470][ T8247]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  253.965498][ T8247]  f2fs_handle_critical_error+0x37c/0x540
[  253.965525][ T8247]  f2fs_write_end_io+0x886/0xb60
[  253.965556][ T8247]  __submit_merged_bio+0x27a/0x6a0
[  253.965581][ T8247]  __submit_merged_write_cond+0x255/0x530
[  253.965607][ T8247]  f2fs_write_data_pages+0x261d/0x3000
[  253.965626][ T8247]  ? __lock_acquire+0xab9/0xd20
[  253.965674][ T8247]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  253.965734][ T8247]  ? __mod_zone_page_state+0xd7/0x140
[  253.965763][ T8247]  ? folios_put_refs+0x560/0x640
[  253.965816][ T8247]  ? __lock_acquire+0xab9/0xd20
[  253.965843][ T8247]  ? do_raw_spin_lock+0x121/0x290
[  253.965870][ T8247]  ? do_raw_spin_unlock+0x4d/0x240
[  253.965888][ T8247]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  253.965909][ T8247]  do_writepages+0x32e/0x550
[  253.965939][ T8247]  ? do_raw_spin_unlock+0x4d/0x240
[  253.965960][ T8247]  filemap_fdatawrite+0x199/0x240
[  253.965979][ T8247]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  253.966040][ T8247]  ? do_raw_spin_unlock+0x4d/0x240
[  253.966063][ T8247]  f2fs_sync_dirty_inodes+0x31f/0x830
[  253.966091][ T8247]  f2fs_write_checkpoint+0x95a/0x1df0
[  253.966127][ T8247]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  253.966185][ T8247]  ? kill_f2fs_super+0x298/0x6c0
[  253.966204][ T8247]  kill_f2fs_super+0x2c3/0x6c0
[  253.966224][ T8247]  ? __pfx_kill_f2fs_super+0x10/0x10
[  253.966236][ T8247]  ? radix_tree_delete_item+0x2b6/0x400
[  253.966283][ T8247]  ? shrinker_free+0x2ce/0x3e0
[  253.966302][ T8247]  deactivate_locked_super+0xbc/0x130
[  253.966322][ T8247]  cleanup_mnt+0x425/0x4c0
[  253.966338][ T8247]  ? lockdep_hardirqs_on+0x9c/0x150
[  253.966359][ T8247]  task_work_run+0x1d4/0x260
[  253.966382][ T8247]  ? __pfx_task_work_run+0x10/0x10
[  253.966415][ T8247]  ? __x64_sys_umount+0x122/0x160
[  253.966438][ T8247]  ? exit_to_user_mode_loop+0x40/0x110
[  253.966462][ T8247]  exit_to_user_mode_loop+0xec/0x110
[  253.966481][ T8247]  do_syscall_64+0x2bd/0x3b0
[  253.966499][ T8247]  ? lockdep_hardirqs_on+0x9c/0x150
[  253.966517][ T8247]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.966531][ T8247]  ? exc_page_fault+0x9f/0xf0
[  253.966550][ T8247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.966564][ T8247] RIP: 0033:0x7fb6a538ff17
[  253.966579][ T8247] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  253.966591][ T8247] RSP: 002b:00007ffc5f05a608 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  253.966606][ T8247] RAX: 0000000000000000 RBX: 00007fb6a5411c05 RCX: 00007fb6a538ff17
[  253.966615][ T8247] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5f05a6c0
[  253.966623][ T8247] RBP: 00007ffc5f05a6c0 R08: 0000000000000000 R09: 0000000000000000
[  253.966632][ T8247] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5f05b750
[  253.966641][ T8247] R13: 00007fb6a5411c05 R14: 000000000003e172 R15: 00007ffc5f05b790
[  253.966667][ T8247]  </TASK>
[  254.109416][ T8247] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  254.130925][T10881] EXT4-fs (loop6): failed to open journal device unknown-block(0,5) -6
[  254.148244][T10879] loop4: detected capacity change from 0 to 32768
[  254.178028][T10887] loop6: detected capacity change from 0 to 512
[  254.189131][T10887] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  254.201562][T10887] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6842e02c, mo2=0102]
[  254.203985][T10887] System zones: 1-12
[  254.205406][T10887] EXT4-fs (loop6): orphan cleanup on readonly fs
[  254.210405][T10887] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1648: invalid indirect mapped block 12 (level 1)
[  254.219029][T10887] EXT4-fs (loop6): Remounting filesystem read-only
[  254.222286][T10887] EXT4-fs (loop6): 1 truncate cleaned up
[  254.225444][T10887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  254.252044][ T8636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  254.341191][T10879] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  254.341205][T10879]   allowing incompatible features above 0.0: (unknown version)
[  254.341210][T10879]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  254.374876][T10879] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  254.379622][T10879] bcachefs (loop4): initializing new filesystem
[  254.390037][T10879] bcachefs (loop4): going read-write
[  254.429632][T10879] bcachefs (loop4): marking superblocks
[  254.445572][T10879] bcachefs (loop4): initializing freespace
[  254.530273][T10879] bcachefs (loop4): done initializing freespace
[  254.540425][T10879] bcachefs (loop4): reading snapshots table
[  254.542854][T10879] bcachefs (loop4): reading snapshots done
[  254.590280][T10879] bcachefs (loop4): done starting filesystem
[  254.642639][T10879] syz.4.1645 (10879) used greatest stack depth: 16056 bytes left
[  254.647781][ T7220] bcachefs (loop4): shutting down
[  254.649938][ T7220] bcachefs (loop4): going read-only
[  254.652019][ T7220] bcachefs (loop4): finished waiting for writes to stop
[  254.665208][ T7220] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  254.687679][T10907] bridge0: entered promiscuous mode
[  254.695775][T10907] bond0: entered promiscuous mode
[  254.698481][T10907] bond_slave_0: entered promiscuous mode
[  254.700790][T10907] bond_slave_1: entered promiscuous mode
[  254.704201][T10907] hsr1: entered allmulticast mode
[  254.715230][ T7220] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  254.716828][T10907] bridge0: entered allmulticast mode
[  254.719920][ T7220] bcachefs (loop4): clean shutdown complete, journal seq 4
[  254.721112][T10907] bond0: entered allmulticast mode
[  254.724547][ T7220] bcachefs (loop4): marking filesystem clean
[  254.726007][T10907] bond_slave_0: entered allmulticast mode
[  254.726025][T10907] bond_slave_1: entered allmulticast mode
[  254.763622][ T7220] bcachefs (loop4): shutdown complete
[  254.809572][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  254.812291][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  254.914912][T10905] loop6: detected capacity change from 0 to 40427
[  254.921639][T10905] F2FS-fs: heap/no_heap options were deprecated
[  254.929054][T10905] F2FS-fs (loop6): invalid crc value
[  254.981414][T10905] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  254.985262][T10905] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  255.371581][T10924] loop6: detected capacity change from 0 to 1024
[  255.405389][T10924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.415305][T10924] EXT4-fs error (device loop6): __ext4_new_inode:1073: comm syz.6.1660: reserved inode found cleared - inode=2
[  255.421250][T10924] EXT4-fs (loop6): Remounting filesystem read-only
[  255.443747][ T8636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.500123][T10929] mmap: syz.6.1661 (10929) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  255.930408][T10941] loop5: detected capacity change from 0 to 1024
[  255.933477][T10941] EXT4-fs: inline encryption not supported
[  255.935295][T10941] EXT4-fs: Ignoring removed i_version option
[  255.985190][T10939] loop6: detected capacity change from 0 to 32768
[  255.988678][T10941] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  255.994800][T10939] XFS: attr2 mount option is deprecated.
[  256.032043][T10939] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  256.035345][T10939] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  256.128108][T10939] XFS (loop6): Ending clean mount
[  256.150508][T10939] XFS (loop6): Quotacheck needed: Please wait.
[  256.224397][T10939] XFS (loop6): Quotacheck: Done.
[  256.228499][T10956] loop4: detected capacity change from 0 to 512
[  256.271372][T10956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.294150][T10956] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.375161][ T8636] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  257.176225][ T5908] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  257.287632][ T7220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.326317][ T5908] usb 7-1: Using ep0 maxpacket: 16
[  257.346397][ T5908] usb 7-1: config 4 has an invalid interface number: 51 but max is 0
[  257.349850][ T5908] usb 7-1: config 4 has no interface number 0
[  257.352347][ T5908] usb 7-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[  257.381029][ T5908] usb 7-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  257.384842][ T5908] usb 7-1: config 4 interface 51 has no altsetting 0
[  257.398656][T10968] Bluetooth: MGMT ver 1.23
[  257.402228][ T5908] usb 7-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  257.402327][T10968] Bluetooth: hci0: invalid length 0, exp 2 for type 3
[  257.405824][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.417718][ T5908] usb 7-1: Product: syz
[  257.419346][ T5908] usb 7-1: Manufacturer: syz
[  257.421149][ T5908] usb 7-1: SerialNumber: syz
[  257.448022][T10962] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  257.450965][T10962] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  257.488123][   T33] audit: type=1326 audit(1755251038.631:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.5.1674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a538ebe9 code=0x7ffc0000
[  257.526817][   T33] audit: type=1326 audit(1755251038.631:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.5.1674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a538ebe9 code=0x7ffc0000
[  257.535242][   T33] audit: type=1326 audit(1755251038.641:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.5.1674" exe="/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fb6a538ebe9 code=0x7ffc0000
[  257.550889][   T33] audit: type=1326 audit(1755251038.641:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.5.1674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a538ebe9 code=0x7ffc0000
[  257.554703][T10974] cgroup: fork rejected by pids controller in 
[  257.561974][   T33] audit: type=1326 audit(1755251038.641:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.5.1674" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb6a538ebe9 code=0x7ffc0000
[  257.562537][T10974] /syz5
[  257.564607][   T33] audit: type=1326 audit(1755251038.641:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.5.1674" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a538ebe9 code=0x7ffc0000
[  257.571934][T10974] 
[  257.679474][T10962] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  257.681759][T10962] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  257.730092][ T5908] cdc_eem 7-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.6-1, CDC EEM Device, ee:02:34:ae:4e:1f
[  257.903930][ T5908] usb 7-1: USB disconnect, device number 26
[  257.923394][ T5908] cdc_eem 7-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.6-1, CDC EEM Device
[  257.944908][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.077169][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.168242][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.234967][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.464625][   T12] bond1: left promiscuous mode
[  258.473470][   T12] bridge0: port 3(bond1) entered disabled state
[  258.494099][   T12] bridge_slave_1: left allmulticast mode
[  258.503688][   T12] bridge_slave_1: left promiscuous mode
[  258.511894][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.521784][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  258.531893][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  258.536859][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  258.550207][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  258.553877][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  258.574658][   T12] : left allmulticast mode
[  258.588577][   T12] : left promiscuous mode
[  258.590033][T11004] loop6: detected capacity change from 0 to 512
[  258.590142][   T12] bridge0: port 1() entered disabled state
[  258.593108][T11004] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  258.611325][T11004] EXT4-fs (loop6): 1 truncate cleaned up
[  258.626826][T11004] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.687576][T11004] loop6: detected capacity change from 512 to 64
[  258.701363][T11004] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -12)
[  258.740216][ T8636] EXT4-fs warning (device loop6): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  258.751217][ T8636] EXT4-fs warning (device loop6): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  258.757262][ T8636] EXT4-fs warning (device loop6): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  258.762812][ T8636] EXT4-fs warning (device loop6): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  258.769995][ T8636] EXT4-fs warning (device loop6): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  258.775582][ T8636] EXT4-fs warning (device loop6): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  258.783937][ T8636] EXT4-fs warning (device loop6): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  258.790021][ T8636] EXT4-fs warning (device loop6): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  258.795348][ T8636] EXT4-fs warning (device loop6): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  259.003187][   T12] bridge0 (unregistering): left promiscuous mode
[  259.241233][   T12] bond0 (unregistering): left promiscuous mode
[  259.243577][   T12] bond_slave_0: left promiscuous mode
[  259.245645][   T12] bond_slave_1: left promiscuous mode
[  259.271926][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.275311][   T12] bond_slave_0: left allmulticast mode
[  259.279551][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.282976][   T12] bond_slave_1: left allmulticast mode
[  259.286979][   T12] bond0 (unregistering): Released all slaves
[  259.513590][   T12] bond1 (unregistering): Released all slaves
[  259.608194][   T12] : left promiscuous mode
[  259.745156][ T8636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.752102][   T12] tipc: Left network mode
[  260.023191][T11018] loop4: detected capacity change from 0 to 32768
[  260.042613][T11018] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.132633][T10999] chnl_net:caif_netlink_parms(): no params data found
[  260.164238][T11018] XFS (loop4): Ending clean mount
[  260.252768][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  260.262639][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  260.268963][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  260.273172][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  260.278171][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  260.361410][   T12] hsr_slave_0: left promiscuous mode
[  260.364115][   T12] hsr_slave_1: left promiscuous mode
[  260.377494][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.380511][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.389974][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  260.392942][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.403975][ T7220] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.442644][   T12] veth1_macvtap: left promiscuous mode
[  260.446084][   T12] veth0_macvtap: left promiscuous mode
[  260.450370][   T12] veth1_vlan: left promiscuous mode
[  260.452899][   T12] veth0_vlan: left promiscuous mode
[  260.647524][ T5844] Bluetooth: hci3: command tx timeout
[  260.720467][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1690'.
[  261.228134][T11058] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  261.539808][T11058] loop4: detected capacity change from 0 to 32768
[  261.574854][T11058] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  261.650274][T11058] XFS (loop4): Ending clean mount
[  261.751800][   T12] team0 (unregistering): Port device team_slave_1 removed
[  261.826275][   T12] team0 (unregistering): Port device team_slave_0 removed
[  262.325885][ T5844] Bluetooth: hci4: command tx timeout
[  262.368663][ T7220] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  262.706397][T11068] input: syz0 as /devices/virtual/input/input24
[  262.734663][ T5844] Bluetooth: hci3: command tx timeout
[  262.883284][T10999] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.889623][T10999] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.892537][T10999] bridge_slave_0: entered allmulticast mode
[  262.895324][T10999] bridge_slave_0: entered promiscuous mode
[  262.936404][T10999] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.939185][T10999] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.942128][T10999] bridge_slave_1: entered allmulticast mode
[  262.950490][T10999] bridge_slave_1: entered promiscuous mode
[  263.022300][T10999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.035027][T10999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.097766][T10999] team0: Port device team_slave_0 added
[  263.103549][T10999] team0: Port device team_slave_1 added
[  263.135858][    T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  263.160586][T10999] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.163169][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.175200][T10999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.196132][T10999] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.205748][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.218181][T10999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  263.293582][T10999] hsr_slave_0: entered promiscuous mode
[  263.296985][T10999] hsr_slave_1: entered promiscuous mode
[  263.299903][T10999] debugfs: 'hsr0' already exists in 'hsr'
[  263.302141][T10999] Cannot create hsr debugfs directory
[  263.310490][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  263.313598][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  263.319509][    T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  263.323134][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  263.334461][    T9] usb 5-1: SerialNumber: syz
[  263.490478][T11036] chnl_net:caif_netlink_parms(): no params data found
[  263.547874][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.552480][    T9] usb 5-1: 0:2 : does not exist
[  263.590885][    T9] usb 5-1: USB disconnect, device number 31
[  263.636766][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  263.688562][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.796541][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.823383][T11036] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.826668][T11036] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.829174][T11036] bridge_slave_0: entered allmulticast mode
[  263.832111][T11036] bridge_slave_0: entered promiscuous mode
[  263.839975][T11036] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.842329][T11036] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.844735][T11036] bridge_slave_1: entered allmulticast mode
[  263.852773][T11036] bridge_slave_1: entered promiscuous mode
[  263.934938][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.014704][T11036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.022371][T11036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.059790][T11036] team0: Port device team_slave_0 added
[  264.120444][T11086] loop4: detected capacity change from 0 to 16
[  264.128268][T11036] team0: Port device team_slave_1 added
[  264.129934][T11086] erofs (device loop4): mounted with root inode @ nid 36.
[  264.143965][   T33] audit: type=1800 audit(1755251045.292:83): pid=11086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1696" name="file1" dev="loop4" ino=86 res=0 errno=0
[  264.272704][T11036] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.275275][T11036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.289745][T11036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.322418][T11036] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.325187][T11036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.345474][T11036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.383498][T11092] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1699'.
[  264.393325][T11092] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1699'.
[  264.415524][ T5844] Bluetooth: hci4: command tx timeout
[  264.530108][T11036] hsr_slave_0: entered promiscuous mode
[  264.533169][T11036] hsr_slave_1: entered promiscuous mode
[  264.546951][T11036] debugfs: 'hsr0' already exists in 'hsr'
[  264.549238][T11036] Cannot create hsr debugfs directory
[  264.553788][   T12] bridge_slave_1: left allmulticast mode
[  264.565554][   T12] bridge_slave_1: left promiscuous mode
[  264.567778][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.572521][   T12] bridge_slave_0: left allmulticast mode
[  264.574669][   T12] bridge_slave_0: left promiscuous mode
[  264.577435][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.801610][T11094] loop4: detected capacity change from 0 to 40427
[  264.805018][T11094] F2FS-fs: heap/no_heap options were deprecated
[  264.812195][ T5844] Bluetooth: hci3: command tx timeout
[  264.818954][T11094] F2FS-fs (loop4): build fault injection rate: 19
[  264.821380][T11094] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  264.833411][T11094] F2FS-fs (loop4): invalid crc value
[  264.859314][T11094] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  264.907705][T11094] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  264.923170][T11094] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  264.940243][T11094] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  264.994421][T11094] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  265.036677][T11094] syz.4.1700: attempt to access beyond end of device
[  265.036677][T11094] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  265.064540][T11094] syz.4.1700: attempt to access beyond end of device
[  265.064540][T11094] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  265.098447][T11099] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  265.103343][T11099] F2FS-fs (loop4): inconsistent node block, node_type:0, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  265.193039][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  265.206625][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  265.222869][   T12] bond0 (unregistering): Released all slaves
[  265.646270][T10999] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  265.689672][   T12] hsr_slave_0: left promiscuous mode
[  265.694723][   T12] hsr_slave_1: left promiscuous mode
[  265.704827][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  265.709666][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  265.713023][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.719014][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  265.741295][   T12] veth1_macvtap: left promiscuous mode
[  265.743343][   T12] veth0_macvtap: left promiscuous mode
[  265.745628][   T12] veth1_vlan: left promiscuous mode
[  265.747581][   T12] veth0_vlan: left promiscuous mode
[  265.926863][T11105] loop4: detected capacity change from 0 to 32768
[  265.967366][T11105] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  265.993505][T11105] XFS (loop4): Ending clean mount
[  266.009343][T11105] XFS (loop4): Quotacheck needed: Please wait.
[  266.092471][T11105] XFS (loop4): Quotacheck: Done.
[  266.140653][ T7220] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  266.495791][ T5844] Bluetooth: hci4: command tx timeout
[  266.584701][T11117] loop4: detected capacity change from 0 to 512
[  266.591582][T11117] EXT4-fs: Ignoring removed oldalloc option
[  266.594899][T11117] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  266.606212][   T12] team0 (unregistering): Port device team_slave_1 removed
[  266.610995][T11117] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.1705: inode #11: comm syz.4.1705: iget: illegal inode #
[  266.620648][T11117] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1705: couldn't read orphan inode 11 (err -117)
[  266.627132][T11117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.679610][T11117] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters
[  266.691091][   T12] team0 (unregistering): Port device team_slave_0 removed
[  266.720274][ T7220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.885679][ T5844] Bluetooth: hci3: command tx timeout
[  267.095444][   T10] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  267.276925][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  267.280650][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  267.284044][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  267.305354][   T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  267.308064][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.310377][   T10] usb 5-1: Product: syz
[  267.311860][   T10] usb 5-1: Manufacturer: syz
[  267.313507][   T10] usb 5-1: SerialNumber: syz
[  267.328488][   T10] usb 5-1: config 0 descriptor??
[  267.330933][T11124] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  267.339248][T11124] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  267.343442][   T10] usb 5-1: ucan: probing device on interface #0
[  267.357699][T10999] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  267.384812][T10999] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  267.399241][T10999] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  267.734152][T11036] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  267.773121][   T10] usb 5-1: ucan: device reported invalid device info
[  267.777877][   T10] usb 5-1: ucan: probe failed; try to update the device firmware
[  267.788836][T10999] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.791930][T11036] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  267.809223][T11036] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  267.839520][T11036] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  267.850630][T10999] 8021q: adding VLAN 0 to HW filter on device team0
[  267.871149][ T8605] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.874056][ T8605] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.901734][ T8605] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.904671][ T8605] bridge0: port 2(bridge_slave_1) entered forwarding state
[  267.969398][T10999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  267.976970][   T10] usb 5-1: USB disconnect, device number 32
[  268.057184][T11036] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.098531][T11036] 8021q: adding VLAN 0 to HW filter on device team0
[  268.116963][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.119719][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  268.126822][ T8605] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.129287][ T8605] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.183515][T11036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  268.229268][T10999] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.372738][T11036] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.521566][T10999] veth0_vlan: entered promiscuous mode
[  268.540449][T10999] veth1_vlan: entered promiscuous mode
[  268.575809][ T5844] Bluetooth: hci4: command tx timeout
[  268.598330][T10999] veth0_macvtap: entered promiscuous mode
[  268.611436][T10999] veth1_macvtap: entered promiscuous mode
[  268.632045][T10999] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.644099][T10999] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.686049][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.689677][ T5872] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.693004][ T5872] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.702664][T11174] loop4: detected capacity change from 0 to 4096
[  268.706305][ T5872] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.720745][T11174] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  268.791381][T11036] veth0_vlan: entered promiscuous mode
[  268.798535][T11036] veth1_vlan: entered promiscuous mode
[  268.937828][T11036] veth0_macvtap: entered promiscuous mode
[  268.941838][  T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.959220][  T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.988924][T11036] veth1_macvtap: entered promiscuous mode
[  269.017655][  T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.021286][  T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.039173][T11036] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.063432][T11036] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.084193][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.128576][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.154621][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1711'.
[  269.157422][ T5707] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.160952][ T5707] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.274039][  T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.281090][  T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.345634][  T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.348647][  T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.558719][T11214] loop7: detected capacity change from 0 to 8
[  269.567919][T11214] Major/Minor mismatch, older Squashfs 1.0 filesystems are unsupported
[  269.778031][T11201] loop5: detected capacity change from 0 to 32768
[  269.789263][T11201] XFS: attr2 mount option is deprecated.
[  269.839744][T11201] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  269.842682][T11201] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  269.879415][T11201] XFS (loop5): Ending clean mount
[  269.882757][T11201] XFS (loop5): Quotacheck needed: Please wait.
[  269.922217][T11201] XFS (loop5): Quotacheck: Done.
[  269.972463][T10999] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  270.202188][T11221] loop7: detected capacity change from 0 to 32768
[  270.282304][T11221] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  270.419457][T11036] ocfs2: Unmounting device (7,7) on (node local)
[  271.217612][T11272] loop4: detected capacity change from 0 to 32768
[  271.222557][T11272] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1731 (11272)
[  271.235109][T11272] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  271.239302][T11272] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  271.243004][T11272] BTRFS info (device loop4): disk space caching is enabled
[  271.245994][T11272] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  271.246866][T11267] loop7: detected capacity change from 0 to 32768
[  271.299582][T11267] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1729 (11267)
[  271.351838][T11267] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  271.359850][T11267] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  271.362770][T11267] BTRFS info (device loop7): using free-space-tree
[  271.405240][T11272] BTRFS info (device loop4): rebuilding free space tree
[  271.421700][T11272] BTRFS info (device loop4): disabling free space tree
[  271.424365][T11272] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  271.430342][T11272] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  271.500524][T11272] BTRFS info (device loop4): balance: start -d -m
[  271.504586][T11272] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata
[  271.528062][T11272] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata
[  271.591901][T11272] BTRFS info (device loop4): found 9 extents, stage: move data extents
[  271.618290][T11272] BTRFS info (device loop4): found 1 extents, stage: update data pointers
[  271.636835][T11272] BTRFS info (device loop4): balance: ended with status: 0
[  271.700832][   T33] audit: type=1800 audit(1755251052.842:84): pid=11267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1729" name="file1" dev="loop7" ino=260 res=0 errno=0
[  271.751121][ T7220] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  272.095133][ T5908] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  272.136085][T11036] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  272.254625][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.259117][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.262336][ T5908] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  272.286169][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.298167][ T5908] usb 6-1: config 0 descriptor??
[  272.625739][T10389] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  272.755746][ T5908] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0
[  272.799738][ T5908] hid-thrustmaster 0003:044F:B65D.000F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0
[  272.812068][ T5908] hid-thrustmaster 0003:044F:B65D.000F: Wrong number of endpoints?
[  272.830475][T10389] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.837400][T10389] usb 8-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  272.840376][T10389] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.889048][T10389] usb 8-1: config 0 descriptor??
[  273.058944][    C1] hid-thrustmaster 0003:044F:B65D.000F: URB to get model id failed with error -71
[  273.063213][ T5908] usb 6-1: USB disconnect, device number 26
[  273.364589][T10389] nzxt-kraken2 0003:1E71:170E.0010: unexpected long global item
[  273.379302][T10389] nzxt-kraken2 0003:1E71:170E.0010: hid parse failed with -22
[  273.390318][T10389] nzxt-kraken2 0003:1E71:170E.0010: probe with driver nzxt-kraken2 failed with error -22
[  273.572374][ T2200] usb 8-1: USB disconnect, device number 2
[  274.015979][   T34] INFO: task syz-executor:6901 blocked for more than 143 seconds.
[  274.023443][   T34]       Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0
[  274.029892][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  274.033826][   T34] task:syz-executor    state:D stack:21528 pid:6901  tgid:6901  ppid:1      task_flags:0x400140 flags:0x00004004
[  274.039952][   T34] Call Trace:
[  274.041535][   T34]  <TASK>
[  274.043281][   T34]  __schedule+0x1798/0x4cc0
[  274.054362][   T34]  ? do_raw_spin_lock+0x121/0x290
[  274.060714][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.067404][   T34]  ? __pfx___schedule+0x10/0x10
[  274.071226][   T34]  ? schedule+0x91/0x360
[  274.073253][   T34]  schedule+0x165/0x360
[  274.082001][   T34]  v9fs_evict_inode+0x170/0x320
[  274.084283][   T34]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  274.098205][   T34]  ? __pfx_var_wake_function+0x10/0x10
[  274.111334][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  274.124643][   T34]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  274.131597][   T34]  evict+0x504/0x9c0
[  274.133995][   T34]  ? __pfx_evict+0x10/0x10
[  274.140104][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  274.142459][   T34]  ? _raw_spin_unlock+0x28/0x50
[  274.144673][   T34]  ? iput+0x6d8/0x9d0
[  274.146532][ T2200] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  274.159874][   T34]  __dentry_kill+0x209/0x660
[  274.164387][   T34]  ? dput+0x37/0x2b0
[  274.170610][   T34]  dput+0x19f/0x2b0
[  274.172393][   T34]  shrink_dcache_for_umount+0xa0/0x170
[  274.175396][   T34]  generic_shutdown_super+0x67/0x2c0
[  274.177937][   T34]  kill_anon_super+0x3b/0x70
[  274.180424][   T34]  v9fs_kill_super+0x4c/0x90
[  274.182589][   T34]  deactivate_locked_super+0xbc/0x130
[  274.186599][   T34]  cleanup_mnt+0x425/0x4c0
[  274.189228][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.191631][   T34]  task_work_run+0x1d4/0x260
[  274.195689][   T34]  ? __pfx_task_work_run+0x10/0x10
[  274.199044][   T34]  ? __x64_sys_umount+0x122/0x160
[  274.201429][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  274.203846][   T34]  exit_to_user_mode_loop+0xec/0x110
[  274.209021][   T34]  do_syscall_64+0x2bd/0x3b0
[  274.214336][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.229747][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.232537][   T34]  ? exc_page_fault+0x9f/0xf0
[  274.241688][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.248234][   T34] RIP: 0033:0x7f008158ff17
[  274.250638][   T34] RSP: 002b:00007fff7c4f1d78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  274.261806][   T34] RAX: 0000000000000000 RBX: 00007f0081611c05 RCX: 00007f008158ff17
[  274.267393][   T34] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7c4f1e30
[  274.270598][   T34] RBP: 00007fff7c4f1e30 R08: 0000000000000000 R09: 0000000000000000
[  274.273842][   T34] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7c4f2ec0
[  274.279054][   T34] R13: 00007f0081611c05 R14: 000000000001fca5 R15: 00007fff7c4f2f00
[  274.282863][   T34]  </TASK>
[  274.284329][   T34] 
[  274.284329][   T34] Showing all locks held in the system:
[  274.289474][   T34] 1 lock held by khungtaskd/34:
[  274.292008][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  274.297963][   T34] 5 locks held by kworker/0:2/2200:
[  274.300359][   T34]  #0: ffff888104b0f148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  274.311263][   T34]  #1: ffffc9000ad07bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  274.319606][   T34]  #2: 
[  274.329132][ T2200] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  274.333807][ T2200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.338159][   T34] ffff88810a336198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  274.343514][   T34]  #3: ffff88804b039f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  274.348908][ T2200] usb 6-1: Product: syz
[  274.350730][   T34]  #4: ffff88804b024008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  274.358032][ T2200] usb 6-1: Manufacturer: syz
[  274.360060][ T2200] usb 6-1: SerialNumber: syz
[  274.362023][   T34] 2 locks held by getty/5675:
[  274.365807][   T34]  #0: ffff888027f960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  274.371264][ T2200] usb 6-1: config 0 descriptor??
[  274.378247][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  274.382411][   T34] 4 locks held by udevd/5930:
[  274.384305][   T34]  #0: ffff888117c62540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[  274.388009][   T34]  #1: ffff888037721488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0
[  274.391302][   T34]  #2: ffff888023a99878 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0
[  274.394493][   T34]  #3: ffff888043adf198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  274.397751][   T34] 1 lock held by syz-executor/6901:
[  274.399986][   T34]  #0: ffff888021ed60e0 (&type->s_umount_key#117){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
[  274.403428][   T34] 1 lock held by syz-executor/7220:
[  274.406021][   T34]  #0: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  274.409931][   T34] 1 lock held by syz.0.734/8273:
[  274.411785][   T34]  #0: ffff888021ed60e0 (&type->s_umount_key#117){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
[  274.416445][   T34] 
[  274.417332][   T34] =============================================
[  274.417332][   T34] 
[  274.420666][   T34] NMI backtrace for cpu 0
[  274.420679][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  274.420696][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.420704][   T34] Call Trace:
[  274.420710][   T34]  <TASK>
[  274.420716][   T34]  dump_stack_lvl+0x189/0x250
[  274.420758][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.420780][   T34]  ? __pfx__printk+0x10/0x10
[  274.420804][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  274.420821][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  274.420837][   T34]  ? __pfx__printk+0x10/0x10
[  274.420858][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  274.420880][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  274.420897][   T34]  watchdog+0xf93/0xfe0
[  274.420919][   T34]  ? watchdog+0x1de/0xfe0
[  274.420939][   T34]  kthread+0x711/0x8a0
[  274.420956][   T34]  ? __pfx_watchdog+0x10/0x10
[  274.420972][   T34]  ? __pfx_kthread+0x10/0x10
[  274.420988][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.421005][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.421019][   T34]  ? __pfx_kthread+0x10/0x10
[  274.421036][   T34]  ret_from_fork+0x3fc/0x770
[  274.421052][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  274.421070][   T34]  ? __switch_to_asm+0x39/0x70
[  274.421086][   T34]  ? __switch_to_asm+0x33/0x70
[  274.421100][   T34]  ? __pfx_kthread+0x10/0x10
[  274.421117][   T34]  ret_from_fork_asm+0x1a/0x30
[  274.421145][   T34]  </TASK>
[  274.421212][   T34] Sending NMI from CPU 0 to CPUs 1:
[  274.478104][    C1] NMI backtrace for cpu 1
[  274.478121][    C1] CPU: 1 UID: 0 PID: 5772 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  274.478137][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.478146][    C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x31/0x90
[  274.478170][    C1] Code: 24 65 48 8b 0c 25 08 40 a0 92 65 8b 15 28 92 e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00 00 74 4e <8b> 91 18 16 00 00 83 fa 03 75 43 48 8b 91 20 16 00 00 44 8b 89 1c
[  274.478182][    C1] RSP: 0018:ffffc900024dfd98 EFLAGS: 00000246
[  274.478194][    C1] RAX: ffffffff81f561d9 RBX: ffffc900024dfe20 RCX: ffff88801f6db980
[  274.478204][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f9004bc1463
[  274.478212][    C1] RBP: ffffc900024dfec0 R08: ffffc900024dfe3f R09: 0000000000000000
[  274.478221][    C1] R10: ffffc900024dfe20 R11: fffff5200049bfc8 R12: dffffc0000000000
[  274.478230][    C1] R13: ffffc900024dffd8 R14: 00007f9004bc1463 R15: 0000000000000000
[  274.478239][    C1] FS:  000055555ec80500(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  274.478250][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  274.478259][    C1] CR2: 000055feb0f26828 CR3: 00000000272a8000 CR4: 00000000000006f0
[  274.478289][    C1] Call Trace:
[  274.478296][    C1]  <TASK>
[  274.478301][    C1]  __rseq_handle_notify_resume+0x4c9/0x11f0
[  274.478322][    C1]  ? __pfx___rseq_handle_notify_resume+0x10/0x10
[  274.478336][    C1]  ? __se_sys_clock_nanosleep+0x2f1/0x380
[  274.478357][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  274.478377][    C1]  exit_to_user_mode_loop+0xc2/0x110
[  274.478395][    C1]  do_syscall_64+0x2bd/0x3b0
[  274.478413][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.478426][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[  274.478441][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.478453][    C1] RIP: 0033:0x7f9004bc1463
[  274.478464][    C1] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 <f7> d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10
[  274.478475][    C1] RSP: 002b:00007ffe0090c8d8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6
[  274.478488][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9004bc1463
[  274.478496][    C1] RDX: 00007ffe0090c8f0 RSI: 0000000000000000 RDI: 0000000000000000
[  274.478504][    C1] RBP: 0000000000000000 R08: 00000000188d5b1f R09: 7fffffffffffffff
[  274.478512][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe0090cd40
[  274.478520][    C1] R13: 0000000000000004 R14: 00007ffe0090c92c R15: 00007ffe0090c9c0
[  274.478535][    C1]  </TASK>
[  274.490912][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  274.490939][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  274.490950][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.490956][   T34] Call Trace:
[  274.490961][   T34]  <TASK>
[  274.490965][   T34]  dump_stack_lvl+0x99/0x250
[  274.490979][   T34]  ? __asan_memcpy+0x40/0x70
[  274.490990][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.490998][   T34]  ? __pfx__printk+0x10/0x10
[  274.491020][   T34]  vpanic+0x281/0x750
[  274.491030][   T34]  ? __pfx_vpanic+0x10/0x10
[  274.491039][   T34]  ? preempt_schedule+0xae/0xc0
[  274.491050][   T34]  ? preempt_schedule_common+0x83/0xd0
[  274.491062][   T34]  panic+0xb9/0xc0
[  274.491070][   T34]  ? __pfx_panic+0x10/0x10
[  274.491079][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  274.491093][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  274.491103][   T34]  watchdog+0xfd2/0xfe0
[  274.491117][   T34]  ? watchdog+0x1de/0xfe0
[  274.491129][   T34]  kthread+0x711/0x8a0
[  274.491140][   T34]  ? __pfx_watchdog+0x10/0x10
[  274.491150][   T34]  ? __pfx_kthread+0x10/0x10
[  274.491159][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.491169][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.491179][   T34]  ? __pfx_kthread+0x10/0x10
[  274.491188][   T34]  ret_from_fork+0x3fc/0x770
[  274.491198][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  274.491208][   T34]  ? __switch_to_asm+0x39/0x70
[  274.491217][   T34]  ? __switch_to_asm+0x33/0x70
[  274.491226][   T34]  ? __pfx_kthread+0x10/0x10
[  274.491235][   T34]  ret_from_fork_asm+0x1a/0x30
[  274.491251][   T34]  </TASK>
[  274.628026][   T34] Kernel Offset: disabled
[  274.629623][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:44:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffc900031efac0 RCX=0000000000000000 RDX=0000000000000000
RSI=ffffffff8be333e0 RDI=ffffc900031efac0 RBP=0000000000000000 RSP=ffffc90000007f38
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=ffffffff84ffb190
R12=0000000000000000 R13=dffffc0000000000 R14=ffffc900031efa80 R15=dffffc0000000000
RIP=ffffffff84ffb1cc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f716aea7380 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b196379a18 CR3=000000011def2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffff000000 0000000000000000
XMM02=00007fb581b87498 00007fb581b87470 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007fb581b87478 00007fb581b874c0
XMM06=00007fb581b874b8 00007fb581b874b0 XMM07=00007fb581b874a8 00007fb581b874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fb581a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888020a00237 R9 =1ffff11004140046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98d1 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000048000 CR3=0000000036b26000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f5c4be12e53
XMM06=0000000000000000 00007f5c4be12e4d XMM07=0000000000000000 00007f5c4be12e61
XMM08=0000000000000000 00007f5c4be12ee7 XMM09=0000000000000000 00007f5c4be12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
