last executing test programs:

2m51.297863538s ago: executing program 0 (id=271):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x4, 0x4, 0x2, 0x2020, 0x1}, 0x50)

2m51.236843638s ago: executing program 0 (id=272):
r0 = fanotify_init(0x8, 0x80000)
write$binfmt_elf64(r0, 0x0, 0x18)

2m51.236466753s ago: executing program 0 (id=273):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
unshare(0x22020600)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

2m51.130280679s ago: executing program 0 (id=275):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)

2m50.979769035s ago: executing program 0 (id=276):
r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0)

2m50.670366283s ago: executing program 0 (id=278):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000b00000700000009000100737905000000000014000000020a01010000000000000000000000002c000000180a05000000000000000000070000010900010073797a30000000000c0005"], 0x392c}}, 0x0)

2m50.564642971s ago: executing program 32 (id=278):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000b00000700000009000100737905000000000014000000020a01010000000000000000000000002c000000180a05000000000000000000070000010900010073797a30000000000c0005"], 0x392c}}, 0x0)

2m6.314711593s ago: executing program 1 (id=707):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004)
sendmmsg$alg(r1, &(0x7f0000002a00)=[{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000440)="4a8b", 0x2}], 0x1, &(0x7f0000002b00)=ANY=[], 0x1f0, 0x80}], 0x1, 0x84)

2m6.176887459s ago: executing program 1 (id=708):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000709fefffffffcffffff017c00000400428014000180060006008035000006000c00bd0a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800)

2m6.176579172s ago: executing program 1 (id=709):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
ioctl$SIOCAX25DELUID(r0, 0x8918, 0x0)

2m6.085571968s ago: executing program 1 (id=711):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f0000000140)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@utf8}, {@shortname_winnt}, {@fat=@discard}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@utf8}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x28b, &(0x7f0000000a80)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

2m6.06809559s ago: executing program 1 (id=713):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000007f000014001a80100005800c000680080001"], 0x34}, 0x1, 0x0, 0x0, 0x40040d8}, 0x0)

2m5.81136431s ago: executing program 1 (id=715):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)

2m5.340183409s ago: executing program 33 (id=715):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)

39.297293631s ago: executing program 2 (id=1604):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4)
recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x3}], 0x1, 0x40010022, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0)

39.238662937s ago: executing program 2 (id=1608):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0xa, 0x3, {0x0, 0x9000000, 0x1}}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28)

39.167638037s ago: executing program 2 (id=1610):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0)
syz_open_dev$vim2m(0x0, 0x7, 0x2)

37.578962386s ago: executing program 2 (id=1628):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0505405, 0x0)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@checkpoint_diasble}, {@jqfmt_vfsold}, {@disable_ext_identify}, {@noinline_dentry}, {@fault_injection={'fault_injection', 0x3d, 0x1f}}, {@noinline_dentry}, {@prjjquota={'prjjquota', 0x3d, '&\x00\x00\x00\x00\x00\x00\xdd\xff\x00\x89\xc5\xa8+\xc9X\x15\xa0\n\xebU\xd4K\x96'}}, {}, {@discard_unit_segment}, {@test_dummy_encryption_v1}, {@lfs_mode}, {@noinline_xattr}, {@four_active_logs}, {@compress_cache}]}, 0xfd, 0x5529, &(0x7f0000000600)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0)
lseek(r0, 0x8, 0x3)

37.260275547s ago: executing program 2 (id=1631):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x48c2, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x4030582a, 0x0)

36.61932239s ago: executing program 2 (id=1634):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x4, 0x2, 0x0, 0x46})

36.482928923s ago: executing program 34 (id=1634):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x4, 0x2, 0x0, 0x46})

4.976915908s ago: executing program 4 (id=2037):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
creat(&(0x7f0000000200)='./cgroup\x00', 0x80)

4.781949509s ago: executing program 4 (id=2038):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "051000"}, @local=@item_012={0x1, 0x2, 0x9, "d3"}]}}, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x40, 0x18, 0x4, "0666bc5b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.693686136s ago: executing program 4 (id=2060):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xfff1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.605154899s ago: executing program 4 (id=2062):
r0 = socket$inet6(0xa, 0x3, 0x4)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0x134d3b0ef085c40c, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mlock(&(0x7f00006ee000/0x4000)=nil, 0x4000)
syz_emit_ethernet(0xf8, &(0x7f0000000780)=ANY=[], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001f40)={0x9, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff8}}}, 0x108)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x1335f0a6)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)=ANY=[], 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

2.502491003s ago: executing program 3 (id=2064):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e25, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xd4}, 0x1c)

2.236657479s ago: executing program 3 (id=2065):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100)=0x2, 0x4)

1.295825241s ago: executing program 3 (id=2071):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)={0x32}, 0x8)
sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0)

1.266985492s ago: executing program 4 (id=2072):
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, &(0x7f00000004c0)={0x0}, 0x1)

1.175672424s ago: executing program 4 (id=2073):
syz_usb_connect(0x3, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0xcd, 0x27, 0x42, 0x10, 0xeb1a, 0x2710, 0x839c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x60, 0x3, [{{0x9, 0x4, 0x33, 0xd, 0x0, 0x1, 0x40, 0x83, 0x40}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0})

343.762441ms ago: executing program 5 (id=2082):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000040)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c080}, 0x4000891)
write(r0, &(0x7f00000000c0)="6c1c", 0x2)
shutdown(r0, 0x1)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7d, &(0x7f0000000280), &(0x7f0000000180)=0x8)

328.979363ms ago: executing program 3 (id=2083):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}}, 0x0)

225.091138ms ago: executing program 3 (id=2084):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79", 0x6b}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706a", 0x26}], 0x2, 0x0, 0x0, 0x40880}], 0x1, 0x4814)
recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0d}], 0x2, 0x2001, 0x0)

224.89641ms ago: executing program 5 (id=2085):
modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10)
modify_ldt$write2(0x11, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)

224.450571ms ago: executing program 3 (id=2086):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x108c8, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x0, 0x446b, &(0x7f0000004480)="$eJzs3cFvI1cZAPBvJuk2u3RLtrRSkZCwRCUQoCjbUyGVSLLZTZNuWBRohbh4ncTdDTjxKnEQhx7CrRInJA6IQ1UkOOVU7YFr+RO4cOBQThwq6AEJISFVGHk8zmYmduOWOFG2v98h43lv3psv/sbjN5ZmXppr3d/crWzuVmrbleb6G7svVn7abOxt1SM9I333/8TZ7Z/hjOI4Oe9j77Pszo1b33/9xYg/bvz5g3a73Y6O8ejr+pHX//7nm+tHlz1pqU2n3/69nZYfRcSzx+LqGIuIH/4hIomIubxsPl9ejoir0a17/c1f3K2cUjTvvl9/ufrRylsPZ15YPnj74eD/PYn4TeOL37y39Y+vjM389esf02VySqEBAAAAAAAAAAAAAAAAAHABLK7eee1709fjvSTGD5Lj9+su5stB98e2T82XB8b49/JNxQAAAAAAAAAAAAAAAAAAAPCYeXT/fyV5ps/9/wv5cnZA+/Z3Rh8jo7P03TsLN6ev5/O/H59q/KW86MO5sbjWZ9738vzvc6X2/ed/P70pzXvx9fY7GUk6VVhP06mpiN/mE78/n1xJG83d1jfeaO5tb5xaGBdWMf/dB20UspM/e2PY/M+X+h/9/P9fOHY0ddbvmjV/KMX8jw3c7nc/T4bK/41Su7PI/yflcTKPFPM/npVdPrrBbPfd6uT/l+Mn53+h1P+o8v90RFSSTqyVwhmgM4bplA8ar1BUzP8TWVnh1Jm/kYM+//8p5f9mqf/zOv/vl7+I6KuY/0tZ2URhizTaT3ZfXftX/qiuj/n83yr1fx7578S/nxWu/n60+774ivnPEz1e2CR7J4c9/y8Wml4akP/2/x33a2ke59NJ4Qg4SLrlg55XR1Ex/xPH6l/qfiXEh3PpUOO/V0rtz+r6r7ffyYjs+q93+v9a0r3+o79i/i+Xq//yXH4hNeznf6nUwajP/7PZ+I9Pq5j/K1lZcew8mf0dNv/Lpf7L+f/b504n7uyqZKKX/0fnk/8+2S1/x/hvKMX858lJj/4OsJ/9zcb/ycnj/1dL/Z/H+K9zcOyXLvIvjTaIC6uY/6fK1c/N5C86+f/TEN//t0sdjD7/EdN+6/vUivm/OnC77PM/cXL+V0rtRp3/r55QX/4+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjczOfLyUjSqcJ6mk5NRdzI15+PK8labaO61miu/2Q3YiEvr8Qzyb1Gc63WqG5uNzfq1Vqj0VyPuJnXPxsTyW6j2apu1R7cOuzrcnK/XttprdVrrYhYzMu/FFd7fa1ttrZqDyLilcO6z6fNnQf3a9vVjc2db09PT0/H0mEM15L6z1r17VZ3793aiOXDtpPJkeCy6lcPY3kq+XFzb2e71sjKbx9p02iu1xpH2qzkdb+Ka0lrZ297vdaqVxvNe739nafZGMuWC0urP1i9ff1Y/d2ku5w/68AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+ETem/nWryNivLuWRsRs70XSb/t336+/XP1o5a2HMy8sH7z9zgeDtgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2KVjlIiBKAzAb8Ymdh7DKiSdbUQRLYwInkCP4WH0KF7CO1hY2FoJ7gws2Qlss1t9X/MgP+E9mB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP3cPM5PD8MYkaLLEfHx8vm1nd+V+XbZ/v/kCDdyOLf389X1MJZ3Tzv5Rfn0PeX/9Pfn9Tkas3pf9GTZp42653T1rlbfukbZ6n1171mk3EfEVPLzlHPfr64BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhjBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86i64NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAWQEAAP//Gfko3w==")
lsetxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000002980)=ANY=[@ANYBLOB='security.b'], 0x0, 0x0, 0x1)

131.033841ms ago: executing program 5 (id=2087):
r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$apparmor_current(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff)

130.839783ms ago: executing program 5 (id=2088):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

52.713555ms ago: executing program 5 (id=2089):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000044000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 5 (id=2090):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)

kernel console output (not intermixed with test programs):

96578][   T29]  ? __pfx_kthread+0x10/0x10
[  195.696595][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  195.696614][   T29]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.696625][   T29]  ? __pfx_kthread+0x10/0x10
[  195.696642][   T29]  ret_from_fork+0x439/0x7d0
[  195.696658][   T29]  ? __pfx_ret_from_fork+0x10/0x10
[  195.696676][   T29]  ? __switch_to_asm+0x39/0x70
[  195.696690][   T29]  ? __switch_to_asm+0x33/0x70
[  195.696705][   T29]  ? __pfx_kthread+0x10/0x10
[  195.696722][   T29]  ret_from_fork_asm+0x1a/0x30
[  195.696750][   T29]  </TASK>
[  195.821938][   T29] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  196.109927][ T9106] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1192'.
[  196.113536][ T9106] tipc: Started in network mode
[  196.115586][ T9106] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711
[  196.123951][ T9106] tipc: Enabled bearer <udp:syz0>, priority 10
[  196.200929][ T9111] capability: warning: `syz.2.1194' uses deprecated v2 capabilities in a way that may be insecure
[  196.433092][ T9118] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  196.470778][ T9118] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  196.568839][ T9107] loop3: detected capacity change from 0 to 32768
[  196.576296][ T9107] ocfs2: Bad value for 'localalloc'
[  197.106981][ T5986] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  197.237003][  T792] tipc: Node number set to 4269801514
[  197.307135][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  197.314151][ T5986] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  197.323063][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  197.329483][ T5986] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  197.332858][ T5986] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  197.336037][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.342129][ T5986] usb 4-1: config 0 descriptor??
[  197.580885][ T5986] hdpvr 4-1:0.0: firmware version 0x1e dated 
[  197.730528][ T9134] macvtap0: refused to change device tx_queue_len
[  197.785145][ T5986] hdpvr 4-1:0.0: device init failed
[  197.788204][ T5986] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[  197.793657][ T5986] usb 4-1: USB disconnect, device number 9
[  197.808981][ T9139] netlink: 'syz.2.1206': attribute type 6 has an invalid length.
[  197.841448][ T9141] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  197.972544][ T9149] loop2: detected capacity change from 0 to 4096
[  197.975397][ T9149] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  198.004662][ T9149] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  198.012575][ T9149] ntfs3(loop2): Failed to load root (-22).
[  198.128176][ T9162] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1217'.
[  198.951157][ T9183] loop4: detected capacity change from 0 to 1024
[  198.989852][ T9183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  199.003797][ T9183] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.037009][ T9183] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  199.123738][ T7807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  199.321056][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  199.324272][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  199.820979][ T9171] loop2: detected capacity change from 0 to 65536
[  199.839293][ T9171] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  199.854114][ T9171] XFS (loop2): Ending clean mount
[  199.875305][ T9201] loop4: detected capacity change from 0 to 32768
[  199.878941][ T9201] bcachefs (/dev/loop4): error reading superblock: Not a bcachefs superblock (got magic 00000000-0000-0000-0000-000000000000)
[  199.883344][ T9201] bcachefs: bch2_fs_get_tree() error: invalid_sb_magic
[  199.886839][ T5986] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  199.942350][ T9167] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  199.945987][ T9167] XFS (loop2): Unmount and run xfs_repair
[  199.948085][ T9167] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  199.952268][ T9167] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  199.955312][ T9167] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  199.959143][ T9167] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  199.962182][ T9167] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  199.965798][ T9167] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  199.969621][ T9167] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  199.972531][ T9167] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  199.975468][ T9167] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  199.978965][ T9167] XFS (loop2): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  199.990251][ T9167] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  199.995098][ T9167] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  200.051852][ T9211] loop4: detected capacity change from 0 to 2048
[  200.060336][ T9211] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=4096, location=4096
[  200.065250][ T9211] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  200.070132][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.073756][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.077174][ T9211] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  200.080944][ T9211] UDF-fs: Scanning with blocksize 512 failed
[  200.084046][ T5986] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  200.087681][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.090354][ T9211] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  200.090372][ T9211] UDF-fs: Scanning with blocksize 1024 failed
[  200.094221][ T5986] usb 4-1: config 0 descriptor??
[  200.101438][ T9211] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  200.105366][ T9211] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  200.109646][ T9211] UDF-fs: Scanning with blocksize 2048 failed
[  200.112207][ T9211] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  200.119162][ T9211] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  200.122630][ T9211] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  200.125550][ T9211] UDF-fs: Scanning with blocksize 4096 failed
[  200.128407][ T9211] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  200.264276][ T9215] netlink: 'syz.4.1236': attribute type 34 has an invalid length.
[  200.366762][ T5986] usbhid 4-1:0.0: can't add hid device: -71
[  200.368923][ T5986] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  200.375607][ T5986] usb 4-1: USB disconnect, device number 10
[  200.824246][ T5922] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  201.566707][ T5920] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  201.737507][ T9259] loop3: detected capacity change from 0 to 4096
[  201.742960][ T5920] usb 3-1: Using ep0 maxpacket: 16
[  201.762281][ T5920] usb 3-1: config 254 has an invalid interface number: 235 but max is 0
[  201.788229][ T9259] trusted_key: encrypted_key: insufficient parameters specified
[  201.801955][ T5920] usb 3-1: config 254 has no interface number 0
[  201.804538][ T5920] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 237, changing to 7
[  201.819573][ T5920] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 42803, setting to 1024
[  201.838667][ T5920] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  201.844323][ T5920] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  201.848560][ T5920] usb 3-1: config 254 interface 235 has no altsetting 0
[  201.854275][ T5920] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  201.858536][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.861933][ T5920] usb 3-1: Product: syz
[  201.863783][ T5920] usb 3-1: Manufacturer: syz
[  201.865778][ T5920] usb 3-1: SerialNumber: syz
[  201.934215][ T9261] loop3: detected capacity change from 0 to 1024
[  202.055200][ T9263] loop3: detected capacity change from 0 to 256
[  202.060447][ T9263] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  202.067936][ T9263] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  202.090177][ T5920] usbtest 3-1:254.235: Linux gadget zero
[  202.092481][ T5920] usbtest 3-1:254.235: high-speed {control in/out bulk-in iso-out} tests (+alt)
[  202.199588][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1259'.
[  202.290604][ T5965] usb 3-1: USB disconnect, device number 16
[  202.496706][ T5920] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  202.669728][ T5920] usb 4-1: config index 0 descriptor too short (expected 8192, got 36)
[  202.676662][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  202.680939][ T5920] usb 4-1: config 0 has no interfaces?
[  202.683388][ T5920] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  202.696630][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.705170][ T5920] usb 4-1: config 0 descriptor??
[  202.815476][ T9271] loop4: detected capacity change from 0 to 40427
[  202.822413][ T9271] F2FS-fs (loop4): invalid crc value
[  202.892102][ T9271] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  202.901596][ T9271] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  202.905132][ T9278] loop2: detected capacity change from 0 to 1024
[  202.928659][ T5920] usb 4-1: USB disconnect, device number 11
[  202.932567][ T9271] syz.4.1261: attempt to access beyond end of device
[  202.932567][ T9271] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  202.947941][ T9271] syz.4.1261: attempt to access beyond end of device
[  202.947941][ T9271] loop4: rw=2049, sector=53256, nr_sectors = 128 limit=40427
[  202.957881][ T9271] syz.4.1261: attempt to access beyond end of device
[  202.957881][ T9271] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  202.994176][ T7807] syz-executor: attempt to access beyond end of device
[  202.994176][ T7807] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.004206][   T29] hfsplus: b-tree write err: -5, ino 4
[  203.013054][ T7807] CPU: 0 UID: 0 PID: 7807 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  203.013091][ T7807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  203.013100][ T7807] Call Trace:
[  203.013107][ T7807]  <TASK>
[  203.013115][ T7807]  dump_stack_lvl+0x189/0x250
[  203.013141][ T7807]  ? __pfx_dump_stack_lvl+0x10/0x10
[  203.013157][ T7807]  ? __pfx_queue_work_on+0x10/0x10
[  203.013170][ T7807]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  203.013209][ T7807]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  203.013239][ T7807]  f2fs_handle_critical_error+0x37c/0x540
[  203.013264][ T7807]  f2fs_write_end_io+0x886/0xb60
[  203.013317][ T7807]  __submit_merged_bio+0x27a/0x6a0
[  203.013344][ T7807]  __submit_merged_write_cond+0x255/0x530
[  203.013368][ T7807]  f2fs_write_data_pages+0x261d/0x3000
[  203.013409][ T7807]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  203.013435][ T7807]  ? is_bpf_text_address+0x26/0x2b0
[  203.013476][ T7807]  ? check_path+0x21/0x40
[  203.013490][ T7807]  ? check_noncircular+0xe0/0x160
[  203.013543][ T7807]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  203.013559][ T7807]  do_writepages+0x32e/0x550
[  203.013586][ T7807]  ? do_raw_spin_unlock+0x4d/0x240
[  203.013604][ T7807]  filemap_fdatawrite+0x199/0x240
[  203.013624][ T7807]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  203.013679][ T7807]  ? do_raw_spin_unlock+0x4d/0x240
[  203.013701][ T7807]  f2fs_sync_dirty_inodes+0x31f/0x830
[  203.013728][ T7807]  f2fs_write_checkpoint+0x95a/0x1df0
[  203.013762][ T7807]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  203.013814][ T7807]  ? kill_f2fs_super+0x298/0x6c0
[  203.013834][ T7807]  kill_f2fs_super+0x2c3/0x6c0
[  203.013855][ T7807]  ? __pfx_kill_f2fs_super+0x10/0x10
[  203.013869][ T7807]  ? radix_tree_delete_item+0x2b6/0x400
[  203.013888][ T7807]  ? shrinker_free+0x2ce/0x3e0
[  203.013906][ T7807]  deactivate_locked_super+0xbc/0x130
[  203.013925][ T7807]  cleanup_mnt+0x425/0x4c0
[  203.013942][ T7807]  ? lockdep_hardirqs_on+0x9c/0x150
[  203.013958][ T7807]  task_work_run+0x1d4/0x260
[  203.013977][ T7807]  ? __pfx_task_work_run+0x10/0x10
[  203.013993][ T7807]  ? __x64_sys_umount+0x122/0x160
[  203.014022][ T7807]  ? exit_to_user_mode_loop+0x40/0x110
[  203.014046][ T7807]  exit_to_user_mode_loop+0xec/0x110
[  203.014065][ T7807]  do_syscall_64+0x2bd/0x3b0
[  203.014081][ T7807]  ? lockdep_hardirqs_on+0x9c/0x150
[  203.014095][ T7807]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.014109][ T7807]  ? exc_page_fault+0x9f/0xf0
[  203.014124][ T7807]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.014136][ T7807] RIP: 0033:0x7f40e658fed7
[  203.014151][ T7807] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  203.014164][ T7807] RSP: 002b:00007ffd05ac3a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  203.014179][ T7807] RAX: 0000000000000000 RBX: 00007f40e6611c05 RCX: 00007f40e658fed7
[  203.014189][ T7807] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd05ac3b00
[  203.014198][ T7807] RBP: 00007ffd05ac3b00 R08: 0000000000000000 R09: 0000000000000000
[  203.014205][ T7807] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd05ac4b90
[  203.014214][ T7807] R13: 00007f40e6611c05 R14: 0000000000031865 R15: 00007ffd05ac4bd0
[  203.014237][ T7807]  </TASK>
[  203.014245][ T7807] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  203.293668][ T9289] loop2: detected capacity change from 0 to 4096
[  203.313912][ T9290] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.423342][ T9294] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1264'.
[  203.714756][ T9292] loop2: detected capacity change from 0 to 32768
[  203.750081][ T9292] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  203.757660][ T9292] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  203.815853][ T5922] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  204.259501][ T9325] loop2: detected capacity change from 0 to 128
[  204.262380][ T9325] EXT4-fs (loop2): Test dummy encryption mode enabled
[  204.270277][ T9325] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  204.274883][ T9325] ext4 filesystem being mounted at /413/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  204.978806][ T9330] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  205.307807][ T5922] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  205.647790][ T9353] loop3: detected capacity change from 0 to 4096
[  205.658285][ T9353] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  205.662491][ T9353] ntfs3(loop3): try to read out of volume at offset 0x103000
[  205.665511][ T9353] ntfs3(loop3): Failed to load $Volume (-5).
[  205.695302][ T9356] loop4: detected capacity change from 0 to 8192
[  205.901155][ T9363] Bluetooth: hci0: invalid length 0, exp 2 for type 12
[  206.158321][ T9357] loop2: detected capacity change from 0 to 131072
[  206.163037][ T9357] F2FS-fs (loop2): invalid crc value
[  206.335122][ T9357] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  206.398687][ T9357] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  206.436881][ T9377] netlink: 'syz.3.1300': attribute type 9 has an invalid length.
[  207.006204][ T9384] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  207.189165][ T9388] loop4: detected capacity change from 0 to 2048
[  207.203575][ T9388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.237075][ T7807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.273444][ T9393] loop4: detected capacity change from 0 to 512
[  207.282249][ T9393] EXT4-fs: Ignoring removed i_version option
[  207.284533][ T9393] EXT4-fs: inline encryption not supported
[  207.295080][ T9393] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1307: bg 0: block 131: padding at end of block bitmap is not set
[  207.303810][ T9393] EXT4-fs (loop4): Remounting filesystem read-only
[  207.306872][ T9393] EXT4-fs (loop4): 1 truncate cleaned up
[  207.310165][ T9393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.344791][ T7807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.371540][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'.
[  207.580441][ T9403] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  207.898249][ T5920] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  207.946801][ T5986] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  207.986655][ T5982] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  208.049262][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.053747][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.058736][ T5920] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  208.062475][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.069072][ T5920] usb 5-1: config 0 descriptor??
[  208.100797][ T5986] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  208.104937][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.111091][ T5986] usb 3-1: config 0 descriptor??
[  208.115515][ T5986] cp210x 3-1:0.0: cp210x converter detected
[  208.146694][ T5982] usb 4-1: Using ep0 maxpacket: 32
[  208.150334][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.154606][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.159012][ T5982] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  208.163403][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.172483][ T5982] usb 4-1: config 0 descriptor??
[  208.485363][ T5920] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  208.488088][ T5920] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  208.490518][ T5920] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  208.493027][ T5920] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  208.495470][ T5920] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  208.498258][ T5920] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  208.500903][ T5920] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  208.507032][ T5920] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  208.521650][ T5986] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  208.595680][ T5982] hid-led 0003:27B8:01ED.0007: item fetching failed at offset 0/2
[  208.600169][ T5982] hid-led 0003:27B8:01ED.0007: probe with driver hid-led failed with error -22
[  208.683383][ T5920] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00
[  208.730309][ T5986] usb 3-1: cp210x converter now attached to ttyUSB0
[  208.795852][ T5986] usb 4-1: USB disconnect, device number 12
[  208.931947][ T5966] usb 3-1: USB disconnect, device number 17
[  208.938665][ T5966] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  208.944480][ T5966] cp210x 3-1:0.0: device disconnected
[  209.286329][ T5920] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71
[  209.292396][ T5920] usb 5-1: USB disconnect, device number 7
[  209.779497][ T9426] loop2: detected capacity change from 0 to 32768
[  209.787476][ T9426] 
[  209.787476][ T9426]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  209.787476][ T9426] 
[  209.821309][   T27] ERROR: (device loop2): diWrite: ixpxd invalid
[  209.821309][   T27] 
[  209.832558][   T27] ERROR: (device loop2): txCommit: 
[  209.832558][   T27] 
[  209.836102][   T27] jfs_write_inode: jfs_commit_inode failed!
[  209.839020][ T5922] 
[  209.839020][ T5922]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  209.839020][ T5922] 
[  209.850972][ T5922] 
[  209.850972][ T5922]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  209.850972][ T5922] 
[  209.957387][ T5966] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  210.286719][ T5966] usb 4-1: Using ep0 maxpacket: 16
[  210.294486][ T5920] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  210.295026][ T5966] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  210.301606][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.304737][ T5966] usb 4-1: Product: syz
[  210.306430][ T5966] usb 4-1: Manufacturer: syz
[  210.309496][ T5966] usb 4-1: SerialNumber: syz
[  210.313307][ T5966] usb 4-1: config 0 descriptor??
[  210.318209][ T5966] usb 4-1: Found UVC 0.00 device syz (046d:0721)
[  210.320822][ T5966] usb 4-1: No valid video chain found.
[  210.450275][ T5920] usb 3-1: config 5 has an invalid interface number: 42 but max is 0
[  210.453046][ T5920] usb 3-1: config 5 has no interface number 0
[  210.455637][ T5920] usb 3-1: config 5 interface 42 has no altsetting 0
[  210.461979][ T5920] usb 3-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice= 0.15
[  210.464978][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.468487][ T5920] usb 3-1: Product: syz
[  210.470296][ T5920] usb 3-1: Manufacturer: syz
[  210.472005][ T5920] usb 3-1: SerialNumber: syz
[  210.531808][ T5965] usb 4-1: USB disconnect, device number 13
[  210.687591][ T5920] dvb-usb: found a 'PCTV HDTV USB' in warm state.
[  210.689973][ T5920] pctv452e: pctv452e_power_ctrl: 1
[  210.689973][ T5920] 
[  210.692992][ T5920] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  210.692992][ T5920] 
[  210.696899][ T5920] dvb-usb: bulk message failed: -22 (5/0)
[  210.703342][ T5920] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  210.709486][ T5920] dvb-usb: PCTV HDTV USB error while loading driver (-19)
[  210.713719][ T5920] usb 3-1: USB disconnect, device number 18
[  210.824605][ T9444] loop4: detected capacity change from 0 to 128
[  210.834655][ T9444] FAT-fs (loop4): Directory bread(block 32) failed
[  210.838715][ T9444] FAT-fs (loop4): Directory bread(block 33) failed
[  210.841605][ T9444] FAT-fs (loop4): Directory bread(block 34) failed
[  210.844291][ T9444] FAT-fs (loop4): Directory bread(block 35) failed
[  210.848267][ T9444] FAT-fs (loop4): Directory bread(block 36) failed
[  210.851117][ T9444] FAT-fs (loop4): Directory bread(block 37) failed
[  210.853960][ T9444] FAT-fs (loop4): Directory bread(block 38) failed
[  210.856745][ T9444] FAT-fs (loop4): Directory bread(block 39) failed
[  210.859397][ T9444] FAT-fs (loop4): Directory bread(block 40) failed
[  210.861893][ T9444] FAT-fs (loop4): Directory bread(block 41) failed
[  211.290465][ T9474] netlink: 'syz.4.1344': attribute type 7 has an invalid length.
[  211.292868][ T9474] netlink: 'syz.4.1344': attribute type 3 has an invalid length.
[  211.295421][ T9474] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1344'.
[  211.425747][ T9486] loop3: detected capacity change from 0 to 1024
[  211.471272][ T9486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.476401][ T9486] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.487367][   T33] audit: type=1800 audit(1757958996.233:53): pid=9486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1350" name="file1" dev="loop3" ino=15 res=0 errno=0
[  211.503448][ T9486] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  211.539396][ T6535] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.706655][ T5966] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  211.755908][ T9494] loop2: detected capacity change from 0 to 32768
[  211.760361][ T9494] bcachefs (/dev/loop2): error reading default superblock: checksum error, type crc32c_nonzero: got 3ca1c84a should be 00000000
[  211.766731][ T9494] bcachefs (/dev/loop2): error validating superblock: Bad sb offset (got 288230376151715840, read from 4096)
[  211.771376][ T9494] bcachefs: bch2_fs_get_tree() error: invalid_sb_offset
[  211.849686][ T9506] input: syz0 as /devices/virtual/input/input10
[  211.857560][ T5966] usb 5-1: Using ep0 maxpacket: 32
[  211.872699][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.876279][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.884280][ T5966] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  211.890800][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.896291][ T5966] usb 5-1: config 0 descriptor??
[  212.047367][ T9512] 8021q: adding VLAN 0 to HW filter on device bond1
[  212.180765][ T9521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1364'.
[  212.184707][ T9521] unsupported nlmsg_type 40
[  212.255254][ T9525] loop2: detected capacity change from 0 to 64
[  212.299579][ T9525] Trying to free block not in datazone
[  212.319839][ T5966] ft260 0003:0403:6030.0008: unknown main item tag 0x7
[  212.516457][ T5966] ft260 0003:0403:6030.0008: chip code: 6424 8183
[  212.719651][ T5966] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0
[  212.921204][ T5966] ft260 0003:0403:6030.0008: failed to retrieve status: -71, no wakeup
[  212.929557][ T5966] ft260 0003:0403:6030.0008: failed to retrieve status: -71
[  212.935611][ T5966] ft260 0003:0403:6030.0008: failed to reset I2C controller: -71
[  212.944883][ T5966] usb 5-1: USB disconnect, device number 8
[  213.124269][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'.
[  213.562805][ T9568] loop3: detected capacity change from 0 to 256
[  213.585118][   T33] audit: type=1800 audit(1757958998.323:54): pid=9568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1387" name="file1" dev="loop3" ino=1048669 res=0 errno=0
[  213.596423][ T9568] FAT-fs (loop3): error, clusters badly computed (0 != 128)
[  213.600349][ T9568] FAT-fs (loop3): Filesystem has been set read-only
[  213.603011][ T9568] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  213.603033][ T9567] bridge: RTM_NEWNEIGH with invalid state 0x0
[  213.607600][ T9568] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  213.732977][ T9579] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  214.854628][   T33] audit: type=1326 audit(1757958999.593:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9603 comm="syz.4.1402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e658eba9 code=0x7ffc0000
[  214.864442][   T33] audit: type=1326 audit(1757958999.593:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9603 comm="syz.4.1402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e658eba9 code=0x7ffc0000
[  214.875240][   T33] audit: type=1326 audit(1757958999.613:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9603 comm="syz.4.1402" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40e658eba9 code=0x7ffc0000
[  214.907452][   T33] audit: type=1326 audit(1757958999.613:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9603 comm="syz.4.1402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e658eba9 code=0x7ffc0000
[  214.917726][   T33] audit: type=1326 audit(1757958999.613:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9603 comm="syz.4.1402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e658eba9 code=0x7ffc0000
[  214.942417][   T33] audit: type=1326 audit(1757958999.623:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9603 comm="syz.4.1402" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40e658eba9 code=0x7ffc0000
[  214.956822][   T33] audit: type=1326 audit(1757958999.623:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9603 comm="syz.4.1402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e658eba9 code=0x7ffc0000
[  214.973592][   T33] audit: type=1326 audit(1757958999.623:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9603 comm="syz.4.1402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e658eba9 code=0x7ffc0000
[  215.028424][ T9612] loop4: detected capacity change from 0 to 1024
[  215.038139][ T9612] syz.4.1405: attempt to access beyond end of device
[  215.038139][ T9612] loop4: rw=0, sector=4294967366, nr_sectors = 2 limit=1024
[  215.043911][ T9612] Buffer I/O error on dev loop4, logical block 2147483683, async page read
[  215.053952][ T9612] syz.4.1405: attempt to access beyond end of device
[  215.053952][ T9612] loop4: rw=0, sector=4294967368, nr_sectors = 2 limit=1024
[  215.068244][ T9612] Buffer I/O error on dev loop4, logical block 2147483684, async page read
[  215.077377][ T9612] syz.4.1405: attempt to access beyond end of device
[  215.077377][ T9612] loop4: rw=0, sector=4294967370, nr_sectors = 2 limit=1024
[  215.082623][ T9612] Buffer I/O error on dev loop4, logical block 2147483685, async page read
[  215.086373][ T9612] syz.4.1405: attempt to access beyond end of device
[  215.086373][ T9612] loop4: rw=0, sector=4294967372, nr_sectors = 2 limit=1024
[  215.104225][ T9612] Buffer I/O error on dev loop4, logical block 2147483686, async page read
[  215.109045][ T9612] hfsplus: failed to load attributes file
[  215.153732][ T9615] loop2: detected capacity change from 0 to 512
[  215.159088][ T9615] EXT4-fs: Ignoring removed orlov option
[  215.161846][ T9615] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  215.173530][ T9615] EXT4-fs (loop2): 1 truncate cleaned up
[  215.177408][ T9615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.222488][ T5922] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.291835][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'.
[  215.353084][ T9625] loop3: detected capacity change from 0 to 1024
[  215.375305][ T9625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  215.382098][ T9625] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.398464][ T9631] netlink: 'syz.2.1412': attribute type 10 has an invalid length.
[  215.405181][ T9631] team0: Device hsr_slave_0 failed to register rx_handler
[  215.414558][ T6535] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  215.495067][ T9633] loop3: detected capacity change from 0 to 2048
[  215.502918][ T9633] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.542889][ T9635] loop2: detected capacity change from 0 to 4096
[  215.572218][ T9635] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  215.614252][ T5922] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22.
[  215.713927][ T9643] pim6reg9: entered allmulticast mode
[  215.753687][ T9647] netlink: 'syz.2.1421': attribute type 1 has an invalid length.
[  215.757958][ T9647] netlink: 'syz.2.1421': attribute type 4 has an invalid length.
[  215.763268][ T9647] netlink: 15586 bytes leftover after parsing attributes in process `syz.2.1421'.
[  215.818390][ T5965] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  215.968461][ T5965] usb 4-1: Using ep0 maxpacket: 8
[  215.974910][ T5965] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  215.983742][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.988957][ T5965] usb 4-1: Product: syz
[  215.990696][ T5965] usb 4-1: Manufacturer: syz
[  215.992504][ T5965] usb 4-1: SerialNumber: syz
[  216.005944][ T5965] usb 4-1: config 0 descriptor??
[  216.011758][ T5965] gspca_main: sq905-2.14.0 probing 2770:9120
[  216.197354][ T9660] loop4: detected capacity change from 0 to 32768
[  216.221431][ T9660] JBD2: Ignoring recovery information on journal
[  216.265737][ T9660] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  216.326464][ T7807] ocfs2: Unmounting device (7,4) on (node local)
[  216.844499][ T5966] kernel write not supported for file /dsp1 (pid: 5966 comm: kworker/0:3)
[  217.033029][ T5965] gspca_sq905: sq905_read_data: usb_control_msg failed (-71)
[  217.039552][ T5965] sq905 4-1:0.0: probe with driver sq905 failed with error -71
[  217.051085][ T5965] usb 4-1: USB disconnect, device number 14
[  217.175907][ T9688] loop4: detected capacity change from 0 to 256
[  217.181419][ T9688] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001)
[  217.185842][ T9688] exFAT-fs (loop4): failed to count the number of clusters in root
[  217.189919][ T9688] exFAT-fs (loop4): failed to recognize exfat type
[  218.068993][ T9719] loop3: detected capacity change from 0 to 32768
[  218.080896][ T9719] (syz.3.1453,9719,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  218.091699][ T9719] (syz.3.1453,9719,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  218.113329][ T9719] JBD2: Ignoring recovery information on journal
[  218.185509][ T9719] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  218.363544][ T6535] ocfs2: Unmounting device (7,3) on (node local)
[  218.638338][ T9736] loop4: detected capacity change from 0 to 1024
[  218.653617][ T9736] hfsplus: bad catalog entry type
[  218.672696][   T88] hfsplus: b-tree write err: -5, ino 4
[  218.885778][ T9748] loop2: detected capacity change from 0 to 256
[  218.891216][ T9748] vfat: Bad value for 'shortname'
[  219.056856][ T5965] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  219.216668][ T5965] usb 5-1: Using ep0 maxpacket: 8
[  219.222369][ T5965] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  219.225656][ T5965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.230138][ T5965] usb 5-1: config 0 has no interface number 0
[  219.233030][ T5965] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  219.237807][ T5965] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  219.243013][ T5965] usb 5-1: config 0 interface 52 has no altsetting 0
[  219.251175][ T5965] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  219.255162][ T5965] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  219.258636][ T5965] usb 5-1: Manufacturer: syz
[  219.271197][ T5965] usb 5-1: config 0 descriptor??
[  219.279762][ T5965] hub 5-1:0.52: bad descriptor, ignoring hub
[  219.282553][ T5965] hub 5-1:0.52: probe with driver hub failed with error -5
[  219.549688][ T5965] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input13
[  219.554966][ T9753] kAFS: No cell specified
[  219.888022][ T5965] usb 5-1: USB disconnect, device number 9
[  220.254376][ T9764] block nbd2: Attempted send on invalid socket
[  220.262218][ T9764] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  220.560486][ T5966] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  220.593921][ T9766] loop3: detected capacity change from 0 to 32768
[  220.950988][ T9774] loop4: detected capacity change from 0 to 2048
[  220.999698][ T9766] Dev loop3 SGI disklabel: csum bad, label corrupted
[  221.068825][ T5966] usb 3-1: Using ep0 maxpacket: 8
[  221.080851][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.087197][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.090740][ T5966] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  221.093656][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.116911][ T5966] usb 3-1: config 0 descriptor??
[  221.475687][ T9793] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  221.592473][ T9789] loop4: detected capacity change from 0 to 40427
[  221.600565][ T9789] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  221.603041][ T9789] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  221.607053][ T9789] F2FS-fs (loop4): invalid crc value
[  221.610141][ T5966] lenovo 0003:17EF:6009.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.2-1/input0
[  221.650868][ T9789] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  221.660603][ T9789] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  221.663530][ T9789] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  221.674491][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1489'.
[  221.700637][ T9805] loop3: detected capacity change from 0 to 256
[  221.718387][ T9805] FAT-fs (loop3): Directory bread(block 64) failed
[  221.721200][ T9805] FAT-fs (loop3): Directory bread(block 65) failed
[  221.724298][ T9805] FAT-fs (loop3): Directory bread(block 66) failed
[  221.730425][ T9805] FAT-fs (loop3): Directory bread(block 67) failed
[  221.733187][ T9805] FAT-fs (loop3): Directory bread(block 68) failed
[  221.735971][ T9805] FAT-fs (loop3): Directory bread(block 69) failed
[  221.739307][ T9805] FAT-fs (loop3): Directory bread(block 70) failed
[  221.742134][ T9805] FAT-fs (loop3): Directory bread(block 71) failed
[  221.744974][ T9805] FAT-fs (loop3): Directory bread(block 72) failed
[  221.750816][ T9805] FAT-fs (loop3): Directory bread(block 73) failed
[  221.781016][ T5965] usb 3-1: USB disconnect, device number 19
[  221.963493][ T9811] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.1492'.
[  222.690613][ T9825] netlink: 'syz.2.1499': attribute type 21 has an invalid length.
[  222.693856][ T9825] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1499'.
[  222.698331][ T9825] netlink: 'syz.2.1499': attribute type 4 has an invalid length.
[  222.701413][ T9825] netlink: 'syz.2.1499': attribute type 3 has an invalid length.
[  222.704459][ T9825] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1499'.
[  222.802149][ T9829] loop3: detected capacity change from 0 to 512
[  222.806438][ T9829] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  222.885408][ T9829] EXT4-fs (loop3): failed to open journal device unknown-block(4,3) -6
[  222.968025][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'.
[  222.972819][ T9845] loop2: detected capacity change from 0 to 64
[  223.762461][ T9847] loop4: detected capacity change from 0 to 40427
[  223.767834][ T9847] F2FS-fs (loop4): build fault injection rate: 14
[  223.770266][ T9847] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  223.775152][ T9847] F2FS-fs (loop4): invalid crc value
[  223.780959][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  223.793423][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  223.851212][ T9847] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  223.854892][ T9847] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  223.861681][ T9847] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  223.878528][ T9847] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  223.910071][ T7807] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  223.919404][ T7807] F2FS-fs (loop4): inconsistent node block, node_type:0, nid:12, node_footer[nid:12,ino:3,ofs:707190,cpver:0,blkaddr:0]
[  223.945164][    C1] F2FS-fs (loop4): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[  223.950179][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  223.950202][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  223.950212][    C1] Call Trace:
[  223.950219][    C1]  <TASK>
[  223.950226][    C1]  dump_stack_lvl+0x189/0x250
[  223.950252][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.950270][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  223.950285][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  223.950308][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  223.950331][    C1]  ? f2fs_hw_is_readonly+0x39b/0x470
[  223.950356][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  223.950382][    C1]  f2fs_write_end_io+0x886/0xb60
[  223.950411][    C1]  blk_update_request+0x57e/0xe60
[  223.950442][    C1]  blk_mq_end_request+0x3e/0x70
[  223.950462][    C1]  blk_flush_complete_seq+0x678/0xcc0
[  223.950491][    C1]  flush_end_io+0xbaf/0xe60
[  223.950521][    C1]  __blk_mq_end_request+0x46a/0x630
[  223.950578][    C1]  blk_done_softirq+0x10a/0x160
[  223.950600][    C1]  handle_softirqs+0x286/0x870
[  223.950616][    C1]  ? run_ksoftirqd+0x9b/0x100
[  223.950636][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  223.950652][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  223.950668][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  223.950682][    C1]  run_ksoftirqd+0x9b/0x100
[  223.950698][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  223.950720][    C1]  smpboot_thread_fn+0x542/0xa60
[  223.950736][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  223.950758][    C1]  kthread+0x711/0x8a0
[  223.950779][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  223.950793][    C1]  ? __pfx_kthread+0x10/0x10
[  223.950812][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  223.950833][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.950847][    C1]  ? __pfx_kthread+0x10/0x10
[  223.950866][    C1]  ret_from_fork+0x439/0x7d0
[  223.950883][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  223.950903][    C1]  ? __switch_to_asm+0x39/0x70
[  223.950920][    C1]  ? __switch_to_asm+0x33/0x70
[  223.950937][    C1]  ? __pfx_kthread+0x10/0x10
[  223.950955][    C1]  ret_from_fork_asm+0x1a/0x30
[  223.950987][    C1]  </TASK>
[  223.950993][    C1] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  224.034375][    C1] vkms_vblank_simulate: vblank timer overrun
[  224.069946][ T7807] F2FS-fs (loop4): do_checkpoint failed err:-5, stop checkpoint
[  224.240134][ T9873] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1518'.
[  224.562300][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1521'.
[  224.995944][ T9897] loop3: detected capacity change from 0 to 64
[  225.000225][ T9897] bfs: Unknown parameter ''
[  225.287343][ T9901] loop4: detected capacity change from 0 to 40427
[  225.298822][ T9901] F2FS-fs (loop4): invalid crc value
[  225.349376][ T9901] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  225.353602][ T9901] F2FS-fs (loop4): Start checkpoint disabled!
[  225.362824][ T9901] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  225.374638][ T9910] netlink: 'syz.2.1533': attribute type 21 has an invalid length.
[  225.384861][ T9910] netlink: 'syz.2.1533': attribute type 1 has an invalid length.
[  225.428394][ T6049] kworker/u9:5: attempt to access beyond end of device
[  225.428394][ T6049] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  225.433955][ T6049] CPU: 0 UID: 0 PID: 6049 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  225.433973][ T6049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.433982][ T6049] Workqueue: writeback wb_workfn (flush-7:4)
[  225.434003][ T6049] Call Trace:
[  225.434010][ T6049]  <TASK>
[  225.434016][ T6049]  dump_stack_lvl+0x189/0x250
[  225.434038][ T6049]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.434054][ T6049]  ? __pfx_queue_work_on+0x10/0x10
[  225.434067][ T6049]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  225.434086][ T6049]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  225.434113][ T6049]  f2fs_handle_critical_error+0x37c/0x540
[  225.434147][ T6049]  f2fs_write_end_io+0x886/0xb60
[  225.434172][ T6049]  __submit_merged_bio+0x27a/0x6a0
[  225.434190][ T6049]  ? up_write+0x1c4/0x420
[  225.434208][ T6049]  __submit_merged_write_cond+0x44c/0x530
[  225.434231][ T6049]  f2fs_sync_node_pages+0x1479/0x15e0
[  225.434263][ T6049]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  225.434281][ T6049]  ? __percpu_counter_sum+0x1c2/0x1e0
[  225.434324][ T6049]  ? rcu_is_watching+0x15/0xb0
[  225.434338][ T6049]  ? blk_start_plug+0x52/0x1b0
[  225.434354][ T6049]  f2fs_write_node_pages+0x303/0x6e0
[  225.434377][ T6049]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  225.434399][ T6049]  ? __lock_acquire+0xab9/0xd20
[  225.434463][ T6049]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  225.434481][ T6049]  do_writepages+0x32e/0x550
[  225.434503][ T6049]  ? reacquire_held_locks+0x127/0x1d0
[  225.434517][ T6049]  ? writeback_sb_inodes+0x384/0x1010
[  225.434540][ T6049]  __writeback_single_inode+0x145/0xff0
[  225.434556][ T6049]  ? do_raw_spin_unlock+0x4d/0x240
[  225.434574][ T6049]  writeback_sb_inodes+0x6c7/0x1010
[  225.434609][ T6049]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  225.434656][ T6049]  ? rcu_is_watching+0x15/0xb0
[  225.434675][ T6049]  wb_writeback+0x43b/0xaf0
[  225.434697][ T6049]  ? queue_io+0x351/0x590
[  225.434715][ T6049]  ? __pfx_wb_writeback+0x10/0x10
[  225.434736][ T6049]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.434758][ T6049]  wb_workfn+0x409/0xef0
[  225.434785][ T6049]  ? __pfx_wb_workfn+0x10/0x10
[  225.434801][ T6049]  ? __lock_acquire+0xab9/0xd20
[  225.434827][ T6049]  ? process_scheduled_works+0x9ef/0x17b0
[  225.434847][ T6049]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.434865][ T6049]  ? process_scheduled_works+0x9ef/0x17b0
[  225.434876][ T6049]  ? process_scheduled_works+0x9ef/0x17b0
[  225.434890][ T6049]  process_scheduled_works+0xae1/0x17b0
[  225.434922][ T6049]  ? __pfx_process_scheduled_works+0x10/0x10
[  225.434947][ T6049]  worker_thread+0x8a0/0xda0
[  225.434981][ T6049]  kthread+0x711/0x8a0
[  225.435001][ T6049]  ? __pfx_worker_thread+0x10/0x10
[  225.435014][ T6049]  ? __pfx_kthread+0x10/0x10
[  225.435032][ T6049]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.435051][ T6049]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.435063][ T6049]  ? __pfx_kthread+0x10/0x10
[  225.435081][ T6049]  ret_from_fork+0x439/0x7d0
[  225.435098][ T6049]  ? __pfx_ret_from_fork+0x10/0x10
[  225.435143][ T6049]  ? __switch_to_asm+0x39/0x70
[  225.435160][ T6049]  ? __switch_to_asm+0x33/0x70
[  225.435176][ T6049]  ? __pfx_kthread+0x10/0x10
[  225.435193][ T6049]  ret_from_fork_asm+0x1a/0x30
[  225.435224][ T6049]  </TASK>
[  225.436371][ T6049] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  225.502291][ T9915] input: syz1 as /devices/virtual/input/input14
[  225.503080][ T6049] CPU: 0 UID: 0 PID: 6049 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  225.503099][ T6049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.503109][ T6049] Workqueue: writeback wb_workfn (flush-7:4)
[  225.503139][ T6049] Call Trace:
[  225.503144][ T6049]  <TASK>
[  225.503148][ T6049]  dump_stack_lvl+0x189/0x250
[  225.503163][ T6049]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.503173][ T6049]  ? __pfx_queue_work_on+0x10/0x10
[  225.503181][ T6049]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  225.503194][ T6049]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  225.503212][ T6049]  f2fs_handle_critical_error+0x37c/0x540
[  225.503228][ T6049]  f2fs_write_end_io+0x886/0xb60
[  225.503245][ T6049]  __submit_merged_bio+0x27a/0x6a0
[  225.503256][ T6049]  ? up_write+0x1c4/0x420
[  225.503268][ T6049]  __submit_merged_write_cond+0x44c/0x530
[  225.503283][ T6049]  f2fs_sync_node_pages+0x1479/0x15e0
[  225.503304][ T6049]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  225.503315][ T6049]  ? __percpu_counter_sum+0x1c2/0x1e0
[  225.503345][ T6049]  ? rcu_is_watching+0x15/0xb0
[  225.503353][ T6049]  ? blk_start_plug+0x52/0x1b0
[  225.503363][ T6049]  f2fs_write_node_pages+0x303/0x6e0
[  225.503377][ T6049]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  225.503392][ T6049]  ? __lock_acquire+0xab9/0xd20
[  225.503442][ T6049]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  225.503454][ T6049]  do_writepages+0x32e/0x550
[  225.503468][ T6049]  ? reacquire_held_locks+0x127/0x1d0
[  225.503476][ T6049]  ? writeback_sb_inodes+0x384/0x1010
[  225.503491][ T6049]  __writeback_single_inode+0x145/0xff0
[  225.503501][ T6049]  ? do_raw_spin_unlock+0x4d/0x240
[  225.503514][ T6049]  writeback_sb_inodes+0x6c7/0x1010
[  225.503538][ T6049]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  225.503570][ T6049]  ? rcu_is_watching+0x15/0xb0
[  225.503583][ T6049]  wb_writeback+0x43b/0xaf0
[  225.503597][ T6049]  ? queue_io+0x351/0x590
[  225.503608][ T6049]  ? __pfx_wb_writeback+0x10/0x10
[  225.503623][ T6049]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.503637][ T6049]  wb_workfn+0x409/0xef0
[  225.503654][ T6049]  ? __pfx_wb_workfn+0x10/0x10
[  225.503665][ T6049]  ? __lock_acquire+0xab9/0xd20
[  225.503682][ T6049]  ? process_scheduled_works+0x9ef/0x17b0
[  225.503693][ T6049]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.503704][ T6049]  ? process_scheduled_works+0x9ef/0x17b0
[  225.503711][ T6049]  ? process_scheduled_works+0x9ef/0x17b0
[  225.503720][ T6049]  process_scheduled_works+0xae1/0x17b0
[  225.503743][ T6049]  ? __pfx_process_scheduled_works+0x10/0x10
[  225.503760][ T6049]  worker_thread+0x8a0/0xda0
[  225.503783][ T6049]  kthread+0x711/0x8a0
[  225.503795][ T6049]  ? __pfx_worker_thread+0x10/0x10
[  225.503802][ T6049]  ? __pfx_kthread+0x10/0x10
[  225.503813][ T6049]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.503824][ T6049]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.503831][ T6049]  ? __pfx_kthread+0x10/0x10
[  225.503841][ T6049]  ret_from_fork+0x439/0x7d0
[  225.503852][ T6049]  ? __pfx_ret_from_fork+0x10/0x10
[  225.503863][ T6049]  ? __switch_to_asm+0x39/0x70
[  225.503873][ T6049]  ? __switch_to_asm+0x33/0x70
[  225.503882][ T6049]  ? __pfx_kthread+0x10/0x10
[  225.503895][ T6049]  ret_from_fork_asm+0x1a/0x30
[  225.503913][ T6049]  </TASK>
[  225.503918][ T6049] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  225.893011][ T9923] loop2: detected capacity change from 0 to 512
[  225.907712][ T9923] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent
[  226.122005][ T9926] loop4: detected capacity change from 0 to 512
[  226.165644][ T9926] EXT4-fs: Ignoring removed mblk_io_submit option
[  226.215705][ T9926] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  226.312313][   T33] kauditd_printk_skb: 7 callbacks suppressed
[  226.312642][   T33] audit: type=1326 audit(1757959010.933:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9922 comm="syz.2.1540" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3d598eba9 code=0x0
[  226.370210][ T9921] loop3: detected capacity change from 0 to 32768
[  226.480119][ T9921] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section members_v2: device 0: invalid btree_bitmap_shift 248
[  226.480119][ T9921] members_v2 (size 152):
[  226.480119][ T9921] Device:                        0
[  226.480119][ T9921]   Label:                       (none)
[  226.480119][ T9921]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  226.480119][ T9921]   Size:                        16777216
[  226.480119][ T9921]   read errors:                 0
[  226.480119][ T9921]   write errors:                0
[  226.480119][ T9921]   checksum errors:             0
[  226.480119][ T9921]   seqread iops:                0
[  226.480119][ T9921]   seqwrite iops:               0
[  226.480119][ T9921]   randread iops:               0
[  226.480119][ T9921]   randwrite iops:              0
[  226.480119][ T9921]   Bucket size:                 131072
[  226.480119][ T9921]   First bucket:                0
[  226.480119][ T9921]   Buckets:                     128
[  226.480119][ T9921]   Last mount:                  1714681267
[  226.480119][ T9921]   Last superblock write:       42
[  226.480119][ T9921]   State:                       rw
[  226.480119][ T9921]   Data allowed:                journal,btree,user
[  226.480119][ T9921]   Has data:                    (none)
[  226.480119][ T9921]   Btree allocated bitmap blocksize:(invalid shift 248)
[  226.480119][ T9921]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  226.480119][ T9921]  
[  226.480280][ T9921] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  226.537793][ T9926] EXT4-fs (loop4): 1 truncate cleaned up
[  226.540969][ T9926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.561238][ T9926] EXT4-fs (loop4): resizing filesystem from 256 to 1 blocks
[  226.564780][ T9926] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  226.621222][ T7807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.899469][ T9942] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1545'.
[  227.897089][ T9957] binder: 9949:9957 ioctl c018620b 0 returned -14
[  228.201953][ T9960] block nbd4: Attempted send on invalid socket
[  228.204912][ T9960] I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  228.210918][ T9960] gfs2: error -5 reading superblock
[  228.251048][   T33] audit: type=1326 audit(1757959012.993:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.2.1555" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3d598eba9 code=0x0
[  228.395209][ T9974] loop4: detected capacity change from 0 to 4096
[  228.415146][ T9974] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  228.420903][ T9974] ntfs3(loop4): Failed to load $Extend (-2).
[  228.423447][ T9974] ntfs3(loop4): Failed to initialize $Extend.
[  228.440459][ T9974] ntfs3(loop4): ino=1b, "file0" ntfs_readdir
[  228.536792][ T5966] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  228.554980][ T9978] can0: slcan on ttynull.
[  228.627853][ T9977] can0 (unregistered): slcan off ttynull.
[  228.710531][ T5966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.718522][ T5966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.723111][ T5966] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  228.730170][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.737038][ T5966] usb 4-1: config 0 descriptor??
[  229.026875][ T5982] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  229.152529][ T5966] cm6533_jd 0003:0D8C:0022.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  229.186791][ T5982] usb 5-1: Using ep0 maxpacket: 32
[  229.192274][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  229.195984][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  229.199332][ T5982] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  229.203064][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  229.206479][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  229.211925][ T5982] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  229.214803][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.218414][ T5982] usb 5-1: Product: syz
[  229.219745][ T5982] usb 5-1: Manufacturer: syz
[  229.221247][ T5982] usb 5-1: SerialNumber: syz
[  229.224989][ T5982] usb 5-1: config 0 descriptor??
[  229.230668][ T5982] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15
[  229.366609][   T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  229.440421][ T5966] usb 5-1: USB disconnect, device number 10
[  229.516661][   T10] usb 3-1: Using ep0 maxpacket: 16
[  229.521121][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.524375][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  229.528028][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  229.531484][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  229.534898][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  229.541653][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  229.545584][   T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  229.550125][   T10] usb 3-1: Manufacturer: syz
[  229.553935][   T10] usb 3-1: config 0 descriptor??
[  229.816788][   T10] rc_core: IR keymap rc-hauppauge not found
[  229.819097][   T10] Registered IR keymap rc-empty
[  229.821519][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  229.838130][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  229.860171][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  229.865833][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16
[  229.881243][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  229.906803][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  229.926689][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  229.946995][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  229.966905][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  229.986775][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  230.006698][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  230.026805][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  230.046731][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  230.066884][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  230.089686][   T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  230.092920][   T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  230.407051][   T10] usb 3-1: USB disconnect, device number 20
[  230.596617][ T5982] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  230.766683][ T5982] usb 5-1: Using ep0 maxpacket: 8
[  230.771135][ T5982] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  230.777094][ T5982] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  230.781661][ T5982] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  230.785838][ T5982] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  230.792742][ T5982] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  230.796219][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.009228][ T5982] usb 5-1: GET_CAPABILITIES returned 0
[  231.020070][ T5982] usbtmc 5-1:16.0: can't read capabilities
[  231.306713][ T5966] usb 4-1: reset high-speed USB device number 15 using dummy_hcd
[  231.338531][T10003] loop7: detected capacity change from 0 to 16384
[  231.457501][ T5966] usb 4-1: device firmware changed
[  231.477939][ T5920] usb 4-1: USB disconnect, device number 15
[  231.592532][T10025] loop7: detected capacity change from 16384 to 0
[  231.610805][T10024] loop2: detected capacity change from 0 to 32768
[  231.614167][T10024] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1582 (10024)
[  231.622792][T10024] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  231.627131][T10024] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  231.636766][ T5920] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  231.660546][T10024] BTRFS info (device loop2): enabling ssd optimizations
[  231.663225][T10024] BTRFS info (device loop2): enabling free space tree
[  231.707556][ T5922] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  231.817734][ T5920] usb 4-1: config 1 has an invalid interface number: 13 but max is 0
[  231.827030][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.835945][ T5920] usb 4-1: config 1 has no interface number 0
[  231.840853][ T5920] usb 4-1: config 1 interface 13 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0
[  231.849336][ T5920] usb 4-1: config 1 interface 13 altsetting 6 bulk endpoint 0xE has invalid maxpacket 0
[  231.864815][ T5920] usb 4-1: config 1 interface 13 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  231.870924][ T5920] usb 4-1: config 1 interface 13 has no altsetting 0
[  231.889745][ T5920] usb 4-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=4c.2b
[  231.893095][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.896792][ T5920] usb 4-1: Product: syz
[  231.898555][ T5920] usb 4-1: Manufacturer: syz
[  231.900933][ T5920] usb 4-1: SerialNumber: syz
[  231.915030][T10044] wg1: entered promiscuous mode
[  231.917058][T10044] wg1: entered allmulticast mode
[  232.117688][ T5920] s2255 4-1:1.13: Could not find bulk-in endpoint
[  232.120526][ T5920] Sensoray 2255 driver load failed: 0xfffffff4
[  232.123186][ T5920] s2255 4-1:1.13: probe with driver s2255 failed with error -12
[  232.141079][ T5920] usb 4-1: USB disconnect, device number 16
[  232.892971][T10064] program syz.3.1592 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  232.975042][T10066] loop3: detected capacity change from 0 to 4096
[  232.992999][T10067] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.474805][ T5920] usb 5-1: USB disconnect, device number 11
[  233.940882][T10079] loop3: detected capacity change from 0 to 32768
[  233.963880][T10079] (syz.3.1599,10079,0):ocfs2_journal_init:961 ERROR: Journal file size (0) is too small!
[  233.968639][T10079] (syz.3.1599,10079,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  233.973288][T10079] (syz.3.1599,10079,0):ocfs2_check_volume:2432 ERROR: status = -22
[  233.977129][T10079] (syz.3.1599,10079,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  233.999524][T10079] (syz.3.1599,10079,0):ocfs2_fill_super:1177 ERROR: status = -22
[  234.047535][T10088] netlink: 209832 bytes leftover after parsing attributes in process `syz.4.1602'.
[  234.358665][T10104] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1609'.
[  234.422498][T10110] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609)
[  234.428048][T10110] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  234.596866][ T5982] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  234.747616][ T5982] usb 3-1: Using ep0 maxpacket: 16
[  234.751722][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.756304][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.760734][ T5982] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  234.765729][ T5982] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  234.770476][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.776163][ T5982] usb 3-1: config 0 descriptor??
[  234.833673][T10115] loop3: detected capacity change from 0 to 1024
[  234.875319][T10115] hfsplus: xattr searching failed
[  234.879122][   T33] audit: type=1800 audit(1757959019.623:72): pid=10115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1614" name="file1" dev="loop3" ino=2 res=0 errno=0
[  234.942735][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1615'.
[  235.200138][ T5982] microsoft 0003:045E:07DA.000B: unknown main item tag 0x2
[  235.203240][ T5982] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  235.206095][ T5982] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  235.209397][ T5982] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  235.212495][ T5982] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  235.215832][ T5982] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  235.220335][ T5982] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  235.223539][ T5982] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  235.228314][ T5982] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  235.251407][ T5982] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input17
[  235.268804][ T5982] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  235.422966][ T5982] usb 3-1: USB disconnect, device number 21
[  235.473822][T10132] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  235.476740][T10132] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  235.480290][T10126] loop3: detected capacity change from 0 to 40427
[  235.485736][T10126] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  235.486005][T10132] vhci_hcd vhci_hcd.0: Device attached
[  235.490168][T10126] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  235.498434][T10126] F2FS-fs (loop3): invalid crc value
[  235.534239][T10126] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  235.538830][T10126] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  235.541255][T10126] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  235.666812][ T5965] vhci_hcd: vhci_device speed not set
[  235.728291][ T5965] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  235.736854][ T5920] usb 5-1: new low-speed USB device number 12 using dummy_hcd
[  235.888464][T10147] binder: 10146:10147 ioctl c018620c 0 returned -14
[  235.901641][ T5920] usb 5-1: config 0 has no interfaces?
[  235.903980][ T5920] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  235.908034][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.913663][ T5920] usb 5-1: config 0 descriptor??
[  236.126052][ T5986] usb 5-1: USB disconnect, device number 12
[  236.131087][T10133] vhci_hcd: cannot find the pending unlink 0
[  236.133453][T10133] vhci_hcd: connection reset by peer
[  236.142225][ T5931] vhci_hcd: stop threads
[  236.144834][ T5931] vhci_hcd: release socket
[  236.150655][ T5931] vhci_hcd: disconnect device
[  236.153316][T10151] loop2: detected capacity change from 0 to 40427
[  236.157646][T10151] F2FS-fs (loop2): build fault injection rate: 25
[  236.161743][T10151] F2FS-fs (loop2): invalid crc value
[  236.196252][T10151] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  236.199941][T10151] F2FS-fs (loop2): Start checkpoint disabled!
[  236.203755][T10151] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  236.248285][   T33] audit: type=1800 audit(1757959020.993:73): pid=10151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1628" name="file1" dev="overlay" ino=22 res=0 errno=0
[  236.278615][ T5922] syz-executor: attempt to access beyond end of device
[  236.278615][ T5922] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  236.291616][ T5922] syz-executor: attempt to access beyond end of device
[  236.291616][ T5922] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  236.335260][ T6049] kworker/u9:5: attempt to access beyond end of device
[  236.335260][ T6049] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  236.341116][ T6049] CPU: 0 UID: 0 PID: 6049 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  236.341136][ T6049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  236.341146][ T6049] Workqueue: writeback wb_workfn (flush-7:2)
[  236.341170][ T6049] Call Trace:
[  236.341176][ T6049]  <TASK>
[  236.341184][ T6049]  dump_stack_lvl+0x189/0x250
[  236.341206][ T6049]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.341229][ T6049]  ? __pfx_queue_work_on+0x10/0x10
[  236.341242][ T6049]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  236.341263][ T6049]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  236.341292][ T6049]  f2fs_handle_critical_error+0x37c/0x540
[  236.341317][ T6049]  f2fs_write_end_io+0x886/0xb60
[  236.341348][ T6049]  __submit_merged_bio+0x27a/0x6a0
[  236.341372][ T6049]  __submit_merged_write_cond+0x255/0x530
[  236.341398][ T6049]  f2fs_write_data_pages+0x261d/0x3000
[  236.341437][ T6049]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  236.341490][ T6049]  ? rcu_read_lock_sched_held+0x89/0x100
[  236.341505][ T6049]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[  236.341545][ T6049]  ? rcu_is_watching+0x15/0xb0
[  236.341581][ T6049]  ? __lock_acquire+0xab9/0xd20
[  236.341613][ T6049]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  236.341629][ T6049]  do_writepages+0x32e/0x550
[  236.341651][ T6049]  ? reacquire_held_locks+0x127/0x1d0
[  236.341661][ T6049]  ? writeback_sb_inodes+0x384/0x1010
[  236.341686][ T6049]  __writeback_single_inode+0x145/0xff0
[  236.341705][ T6049]  ? do_raw_spin_unlock+0x4d/0x240
[  236.341722][ T6049]  writeback_sb_inodes+0x6c7/0x1010
[  236.341764][ T6049]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  236.341816][ T6049]  ? rcu_is_watching+0x15/0xb0
[  236.341838][ T6049]  wb_writeback+0x43b/0xaf0
[  236.341863][ T6049]  ? queue_io+0x351/0x590
[  236.341881][ T6049]  ? __pfx_wb_writeback+0x10/0x10
[  236.341905][ T6049]  ? _raw_spin_unlock_irq+0x23/0x50
[  236.341929][ T6049]  wb_workfn+0x409/0xef0
[  236.341959][ T6049]  ? __pfx_wb_workfn+0x10/0x10
[  236.341977][ T6049]  ? __lock_acquire+0xab9/0xd20
[  236.342003][ T6049]  ? process_scheduled_works+0x9ef/0x17b0
[  236.342021][ T6049]  ? _raw_spin_unlock_irq+0x23/0x50
[  236.342040][ T6049]  ? process_scheduled_works+0x9ef/0x17b0
[  236.342053][ T6049]  ? process_scheduled_works+0x9ef/0x17b0
[  236.342069][ T6049]  process_scheduled_works+0xae1/0x17b0
[  236.342104][ T6049]  ? __pfx_process_scheduled_works+0x10/0x10
[  236.342135][ T6049]  worker_thread+0x8a0/0xda0
[  236.342170][ T6049]  kthread+0x711/0x8a0
[  236.342189][ T6049]  ? __pfx_worker_thread+0x10/0x10
[  236.342201][ T6049]  ? __pfx_kthread+0x10/0x10
[  236.342219][ T6049]  ? _raw_spin_unlock_irq+0x23/0x50
[  236.342244][ T6049]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.342256][ T6049]  ? __pfx_kthread+0x10/0x10
[  236.342272][ T6049]  ret_from_fork+0x439/0x7d0
[  236.342288][ T6049]  ? __pfx_ret_from_fork+0x10/0x10
[  236.342304][ T6049]  ? __switch_to_asm+0x39/0x70
[  236.342319][ T6049]  ? __switch_to_asm+0x33/0x70
[  236.342333][ T6049]  ? __pfx_kthread+0x10/0x10
[  236.342350][ T6049]  ret_from_fork_asm+0x1a/0x30
[  236.342383][ T6049]  </TASK>
[  236.342390][ T6049] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  236.467370][ T6049] CPU: 0 UID: 0 PID: 6049 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  236.467383][ T6049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  236.467390][ T6049] Workqueue: writeback wb_workfn (flush-7:2)
[  236.467405][ T6049] Call Trace:
[  236.467409][ T6049]  <TASK>
[  236.467414][ T6049]  dump_stack_lvl+0x189/0x250
[  236.467428][ T6049]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.467438][ T6049]  ? __pfx_queue_work_on+0x10/0x10
[  236.467447][ T6049]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  236.467460][ T6049]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  236.467478][ T6049]  f2fs_handle_critical_error+0x37c/0x540
[  236.467493][ T6049]  f2fs_write_end_io+0x886/0xb60
[  236.467541][ T6049]  __submit_merged_bio+0x27a/0x6a0
[  236.467557][ T6049]  __submit_merged_write_cond+0x255/0x530
[  236.467572][ T6049]  f2fs_write_data_pages+0x261d/0x3000
[  236.467598][ T6049]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  236.467629][ T6049]  ? rcu_read_lock_sched_held+0x89/0x100
[  236.467639][ T6049]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[  236.467648][ T6049]  ? rcu_is_watching+0x15/0xb0
[  236.467671][ T6049]  ? __lock_acquire+0xab9/0xd20
[  236.467691][ T6049]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  236.467699][ T6049]  do_writepages+0x32e/0x550
[  236.467713][ T6049]  ? reacquire_held_locks+0x127/0x1d0
[  236.467721][ T6049]  ? writeback_sb_inodes+0x384/0x1010
[  236.467735][ T6049]  __writeback_single_inode+0x145/0xff0
[  236.467746][ T6049]  ? do_raw_spin_unlock+0x4d/0x240
[  236.467757][ T6049]  writeback_sb_inodes+0x6c7/0x1010
[  236.467782][ T6049]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  236.467814][ T6049]  ? rcu_is_watching+0x15/0xb0
[  236.467827][ T6049]  wb_writeback+0x43b/0xaf0
[  236.467841][ T6049]  ? queue_io+0x351/0x590
[  236.467853][ T6049]  ? __pfx_wb_writeback+0x10/0x10
[  236.467867][ T6049]  ? _raw_spin_unlock_irq+0x23/0x50
[  236.467881][ T6049]  wb_workfn+0x409/0xef0
[  236.467898][ T6049]  ? __pfx_wb_workfn+0x10/0x10
[  236.467909][ T6049]  ? __lock_acquire+0xab9/0xd20
[  236.467926][ T6049]  ? process_scheduled_works+0x9ef/0x17b0
[  236.467954][ T6049]  ? _raw_spin_unlock_irq+0x23/0x50
[  236.467964][ T6049]  ? process_scheduled_works+0x9ef/0x17b0
[  236.467971][ T6049]  ? process_scheduled_works+0x9ef/0x17b0
[  236.467979][ T6049]  process_scheduled_works+0xae1/0x17b0
[  236.468002][ T6049]  ? __pfx_process_scheduled_works+0x10/0x10
[  236.468019][ T6049]  worker_thread+0x8a0/0xda0
[  236.468041][ T6049]  kthread+0x711/0x8a0
[  236.468052][ T6049]  ? __pfx_worker_thread+0x10/0x10
[  236.468060][ T6049]  ? __pfx_kthread+0x10/0x10
[  236.468070][ T6049]  ? _raw_spin_unlock_irq+0x23/0x50
[  236.468081][ T6049]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.468088][ T6049]  ? __pfx_kthread+0x10/0x10
[  236.468098][ T6049]  ret_from_fork+0x439/0x7d0
[  236.468108][ T6049]  ? __pfx_ret_from_fork+0x10/0x10
[  236.468120][ T6049]  ? __switch_to_asm+0x39/0x70
[  236.468129][ T6049]  ? __switch_to_asm+0x33/0x70
[  236.468137][ T6049]  ? __pfx_kthread+0x10/0x10
[  236.468147][ T6049]  ret_from_fork_asm+0x1a/0x30
[  236.468165][ T6049]  </TASK>
[  236.468174][ T6049] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  236.966688][ T5920] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  237.121222][ T5920] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  237.130531][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.134318][ T5920] usb 5-1: Product: syz
[  237.136248][ T5920] usb 5-1: Manufacturer: syz
[  237.146969][ T5920] usb 5-1: SerialNumber: syz
[  237.152510][ T5920] usb 5-1: config 0 descriptor??
[  237.334552][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  237.341965][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  237.346360][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  237.351847][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  237.355664][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  237.363528][ T5920] airspy 5-1:0.0: usb_control_msg() failed -71 request 09
[  237.368751][ T5920] airspy 5-1:0.0: Could not detect board
[  237.370835][ T5920] airspy 5-1:0.0: probe with driver airspy failed with error -71
[  237.374902][ T5920] usb 5-1: USB disconnect, device number 13
[  237.446740][   T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  237.507668][T10173] chnl_net:caif_netlink_parms(): no params data found
[  237.594950][T10173] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.597873][T10173] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.601779][T10173] bridge_slave_0: entered allmulticast mode
[  237.604340][   T10] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  237.608454][T10173] bridge_slave_0: entered promiscuous mode
[  237.611117][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.614475][   T10] usb 4-1: config 0 has no interface number 0
[  237.618303][T10173] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.620704][T10173] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.623331][T10173] bridge_slave_1: entered allmulticast mode
[  237.626431][T10173] bridge_slave_1: entered promiscuous mode
[  237.632169][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  237.635694][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.638789][   T10] usb 4-1: Product: syz
[  237.640197][   T10] usb 4-1: Manufacturer: syz
[  237.641669][   T10] usb 4-1: SerialNumber: syz
[  237.644814][   T10] usb 4-1: config 0 descriptor??
[  237.658947][   T10] usb 4-1: Found UVC 0.00 device syz (046d:0823)
[  237.661230][   T10] usb 4-1: No valid video chain found.
[  237.681099][T10173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.686386][T10173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.710680][T10173] team0: Port device team_slave_0 added
[  237.714366][T10173] team0: Port device team_slave_1 added
[  237.737130][T10173] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.740097][T10173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.749642][T10173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.755177][T10173] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.758479][T10173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.768795][T10173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.802477][T10173] hsr_slave_0: entered promiscuous mode
[  237.805071][T10173] hsr_slave_1: entered promiscuous mode
[  237.807792][T10173] debugfs: 'hsr0' already exists in 'hsr'
[  237.809849][T10173] Cannot create hsr debugfs directory
[  237.867006][ T5920] usb 4-1: USB disconnect, device number 17
[  237.970311][T10173] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  237.979290][T10173] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  237.987370][T10173] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  237.993189][T10173] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  238.072628][T10173] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.089654][T10173] 8021q: adding VLAN 0 to HW filter on device team0
[  238.105688][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.109050][ T6049] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.114315][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.117284][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.292753][T10173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.507811][T10173] veth0_vlan: entered promiscuous mode
[  238.518906][T10173] veth1_vlan: entered promiscuous mode
[  238.551548][T10173] veth0_macvtap: entered promiscuous mode
[  238.561018][T10173] veth1_macvtap: entered promiscuous mode
[  238.581610][T10173] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.591607][T10173] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.600809][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.604388][ T5931] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.613441][ T5931] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.618637][ T5931] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.720061][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.723236][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.758038][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.762608][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.833593][T10207] loop5: detected capacity change from 0 to 1024
[  238.881136][   T36] hfsplus: b-tree write err: -5, ino 4
[  238.931470][T10213] loop5: detected capacity change from 0 to 512
[  238.939103][T10213] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  238.942709][T10213] System zones: 0-7
[  238.947186][T10213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.040095][T10173] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.245903][T10224] loop5: detected capacity change from 0 to 512
[  239.255161][T10224] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[  239.315893][T10226] netlink: 'syz.5.1651': attribute type 1 has an invalid length.
[  239.319403][T10226] netlink: 630 bytes leftover after parsing attributes in process `syz.5.1651'.
[  239.481454][   T54] Bluetooth: hci1: command tx timeout
[  239.617918][T10232] loop5: detected capacity change from 0 to 32768
[  239.622354][T10232] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1652 (10232)
[  239.639367][T10232] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  239.642826][T10232] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  239.666904][  T791] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  239.698818][T10232] BTRFS info (device loop5): enabling ssd optimizations
[  239.701795][T10232] BTRFS info (device loop5): enabling free space tree
[  239.740758][T10173] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  239.840112][  T791] usb 4-1: Using ep0 maxpacket: 16
[  239.845112][  T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.858624][  T791] usb 4-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00
[  239.880790][  T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.898611][  T791] usb 4-1: config 0 descriptor??
[  240.358931][  T791] hid-alps 0003:044E:121E.000C: hidraw0: USB HID v0.03 Device [HID 044e:121e] on usb-dummy_hcd.3-1/input0
[  240.376951][T10203] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  240.529315][T10203] usb 6-1: config 0 has an invalid interface number: 3 but max is 0
[  240.532520][T10203] usb 6-1: config 0 has no interface number 0
[  240.535374][T10203] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  240.539822][T10203] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  240.544572][T10203] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  240.549999][T10203] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  240.556804][T10203] usb 6-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[  240.561262][T10203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.568328][ T5920] usb 4-1: USB disconnect, device number 18
[  240.569977][T10203] usb 6-1: config 0 descriptor??
[  240.579902][T10203] hub 6-1:0.3: bad descriptor, ignoring hub
[  240.582252][T10203] hub 6-1:0.3: probe with driver hub failed with error -5
[  240.586119][T10203] sierra 6-1:0.3: Sierra USB modem converter detected
[  240.792078][T10203] usb 6-1: Sierra USB modem converter now attached to ttyUSB0
[  240.802352][T10203] usb 6-1: Sierra USB modem converter now attached to ttyUSB1
[  240.827265][ T5965] vhci_hcd: vhci_device speed not set
[  240.827571][T10203] usb 6-1: USB disconnect, device number 2
[  240.839637][T10203] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  240.845775][T10203] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  240.850168][T10203] sierra 6-1:0.3: device disconnected
[  241.555753][   T33] audit: type=1326 audit(1757959026.293:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.5.1672" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  241.571551][   T54] Bluetooth: hci1: command tx timeout
[  241.579345][   T33] audit: type=1326 audit(1757959026.313:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.5.1672" exe="/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  241.587720][T10297] tipc: Cannot configure node identity twice
[  241.591761][   T33] audit: type=1326 audit(1757959026.313:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.5.1672" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  241.603985][   T33] audit: type=1326 audit(1757959026.313:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.5.1672" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  241.613845][   T33] audit: type=1326 audit(1757959026.313:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.5.1672" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  241.624187][   T33] audit: type=1326 audit(1757959026.313:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.5.1672" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  241.636069][   T33] audit: type=1326 audit(1757959026.313:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.5.1672" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  241.650008][   T33] audit: type=1326 audit(1757959026.313:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.5.1672" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  241.661917][   T33] audit: type=1326 audit(1757959026.313:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.5.1672" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  241.670921][   T33] audit: type=1326 audit(1757959026.313:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10294 comm="syz.5.1672" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb09b18d510 code=0x7ffc0000
[  242.688792][T10316] loop3: detected capacity change from 0 to 512
[  242.699432][T10316] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  242.703120][T10316] UDF-fs: Scanning with blocksize 512 failed
[  242.711667][T10316] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  242.715145][T10316] UDF-fs: Scanning with blocksize 1024 failed
[  242.721627][T10316] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  242.724767][T10316] UDF-fs: Scanning with blocksize 2048 failed
[  242.730282][T10316] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  242.741651][T10316] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  243.045307][T10321] qrtr: Invalid version 0
[  243.160211][T10334] loop5: detected capacity change from 0 to 256
[  243.167137][T10334] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  243.205011][   T88] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  243.384405][T10350] loop5: detected capacity change from 0 to 4096
[  243.387979][T10350] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  243.408189][T10350] ntfs3(loop5): ino=5, "/" ntfs_readdir
[  243.491251][T10355] loop3: detected capacity change from 0 to 764
[  243.499038][  T792] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  243.506470][T10355] Symlink component flag not implemented
[  243.511237][T10355] Symlink component flag not implemented
[  243.518742][T10355] Symlink component flag not implemented (129)
[  243.521393][T10355] Symlink component flag not implemented (6)
[  243.568620][T10360] loop3: detected capacity change from 0 to 128
[  243.578581][T10360] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  243.584618][T10360] ext4 filesystem being mounted at /491/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  243.595074][T10360] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 7 (only 1 groups)
[  243.621337][ T6535] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  243.639793][   T54] Bluetooth: hci1: command tx timeout
[  243.660236][  T792] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  243.671612][  T792] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  243.676045][  T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.686664][  T792] usb 5-1: Product: syz
[  243.688332][  T792] usb 5-1: Manufacturer: syz
[  243.689772][  T792] usb 5-1: SerialNumber: syz
[  243.695932][  T792] usb 5-1: config 0 descriptor??
[  243.699767][  T792] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  243.897228][T10364] loop5: detected capacity change from 0 to 32768
[  243.902352][T10364] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1700 (10364)
[  243.905750][   T10] usb 5-1: USB disconnect, device number 14
[  243.916855][T10364] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  243.921174][T10364] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  244.000721][T10364] BTRFS info (device loop5): enabling ssd optimizations
[  244.004960][T10364] BTRFS info (device loop5): turning off barriers
[  244.012658][T10364] BTRFS info (device loop5): enabling free space tree
[  244.081035][T10173] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  244.361293][T10401] loop5: detected capacity change from 0 to 256
[  244.368263][T10401] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  244.372541][T10401] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  244.385185][T10401] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d)
[  244.503140][T10399] loop3: detected capacity change from 0 to 32768
[  244.549938][T10407] mac80211_hwsim hwsim13 4: renamed from wlan1 (while UP)
[  245.346426][   T10] kernel write not supported for file /amidi2 (pid: 10 comm: kworker/0:1)
[  245.373443][T10421] loop4: detected capacity change from 0 to 32768
[  245.377044][T10421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1718 (10421)
[  245.387651][T10421] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  245.390762][T10421] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  245.433148][T10421] BTRFS info (device loop4): setting nodatasum
[  245.436133][T10421] BTRFS info (device loop4): enabling ssd optimizations
[  245.439445][T10421] BTRFS info (device loop4): enabling free space tree
[  245.439478][T10421] BTRFS info (device loop4): enabling auto defrag
[  245.439494][T10421] BTRFS info (device loop4): max_inline set to 0
[  245.610698][ T7807] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  245.720376][   T54] Bluetooth: hci1: command tx timeout
[  245.882678][T10453] loop3: detected capacity change from 0 to 32768
[  245.997412][T10455] loop5: detected capacity change from 0 to 32768
[  246.000279][T10455] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1726 (10455)
[  246.009375][T10455] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  246.026453][T10455] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  246.090549][T10455] BTRFS info (device loop5): enabling ssd optimizations
[  246.093534][T10455] BTRFS info (device loop5): enabling free space tree
[  246.170502][T10481] befs: (nullb0): No write support. Marking filesystem read-only
[  246.189259][T10481] befs: (nullb0): invalid magic header
[  246.244314][T10481] loop4: detected capacity change from 0 to 128
[  246.286226][T10173] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  246.788121][T10483] loop3: detected capacity change from 0 to 40427
[  246.819019][T10483] F2FS-fs: heap/no_heap options were deprecated
[  246.842558][T10483] F2FS-fs (loop3): invalid crc value
[  247.069277][T10483] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  247.075763][T10483] F2FS-fs (loop3): Start checkpoint disabled!
[  247.083721][T10483] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  247.342192][T10483] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  247.529697][   T36] kworker/u10:1: attempt to access beyond end of device
[  247.529697][   T36] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  247.550583][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  247.550621][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  247.550627][   T36] Workqueue: writeback wb_workfn (flush-7:3)
[  247.550644][   T36] Call Trace:
[  247.550648][   T36]  <TASK>
[  247.550653][   T36]  dump_stack_lvl+0x189/0x250
[  247.550666][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  247.550675][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  247.550683][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  247.550696][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  247.550712][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  247.550727][   T36]  f2fs_write_end_io+0x886/0xb60
[  247.550744][   T36]  __submit_merged_bio+0x27a/0x6a0
[  247.550757][   T36]  __submit_merged_write_cond+0x255/0x530
[  247.550772][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  247.550794][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  247.550836][   T36]  ? f2fs_write_meta_pages+0x357/0x450
[  247.550848][   T36]  ? __lock_acquire+0xab9/0xd20
[  247.550861][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  247.550869][   T36]  do_writepages+0x32e/0x550
[  247.550882][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  247.550890][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  247.550904][   T36]  __writeback_single_inode+0x145/0xff0
[  247.550914][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  247.550925][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  247.550947][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  247.550975][   T36]  ? rcu_is_watching+0x15/0xb0
[  247.550988][   T36]  wb_writeback+0x43b/0xaf0
[  247.551001][   T36]  ? queue_io+0x351/0x590
[  247.551012][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  247.551025][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  247.551045][   T36]  wb_workfn+0x409/0xef0
[  247.551060][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  247.551070][   T36]  ? __lock_acquire+0xab9/0xd20
[  247.551086][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  247.551096][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  247.551107][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  247.551113][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  247.551121][   T36]  process_scheduled_works+0xae1/0x17b0
[  247.551142][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  247.551157][   T36]  worker_thread+0x8a0/0xda0
[  247.551176][   T36]  kthread+0x711/0x8a0
[  247.551188][   T36]  ? __pfx_worker_thread+0x10/0x10
[  247.551195][   T36]  ? __pfx_kthread+0x10/0x10
[  247.551205][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  247.551215][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.551222][   T36]  ? __pfx_kthread+0x10/0x10
[  247.551232][   T36]  ret_from_fork+0x439/0x7d0
[  247.551242][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  247.551252][   T36]  ? __switch_to_asm+0x39/0x70
[  247.551261][   T36]  ? __switch_to_asm+0x33/0x70
[  247.551270][   T36]  ? __pfx_kthread+0x10/0x10
[  247.551279][   T36]  ret_from_fork_asm+0x1a/0x30
[  247.551296][   T36]  </TASK>
[  247.551349][   T36] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  247.575105][T10493] loop5: detected capacity change from 0 to 32768
[  247.579697][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  247.579711][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  247.579717][   T36] Workqueue: writeback wb_workfn (flush-7:3)
[  247.579733][   T36] Call Trace:
[  247.579737][   T36]  <TASK>
[  247.579742][   T36]  dump_stack_lvl+0x189/0x250
[  247.579761][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  247.579774][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  247.579786][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  247.579805][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  247.579823][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  247.579844][   T36]  f2fs_write_end_io+0x886/0xb60
[  247.579869][   T36]  __submit_merged_bio+0x27a/0x6a0
[  247.579890][   T36]  __submit_merged_write_cond+0x255/0x530
[  247.579914][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  247.579953][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  247.580038][   T36]  ? f2fs_write_meta_pages+0x357/0x450
[  247.580060][   T36]  ? __lock_acquire+0xab9/0xd20
[  247.580082][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  247.580096][   T36]  do_writepages+0x32e/0x550
[  247.580121][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  247.580133][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  247.580150][   T36]  __writeback_single_inode+0x145/0xff0
[  247.580160][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  247.580172][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  247.580209][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  247.580265][   T36]  ? rcu_is_watching+0x15/0xb0
[  247.580288][   T36]  wb_writeback+0x43b/0xaf0
[  247.580338][   T36]  ? queue_io+0x351/0x590
[  247.580358][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  247.580384][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  247.580409][   T36]  wb_workfn+0x409/0xef0
[  247.580438][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  247.580457][   T36]  ? __lock_acquire+0xab9/0xd20
[  247.580486][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  247.580506][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  247.580523][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  247.580535][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  247.580550][   T36]  process_scheduled_works+0xae1/0x17b0
[  247.580616][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  247.580648][   T36]  worker_thread+0x8a0/0xda0
[  247.580686][   T36]  kthread+0x711/0x8a0
[  247.580706][   T36]  ? __pfx_worker_thread+0x10/0x10
[  247.580720][   T36]  ? __pfx_kthread+0x10/0x10
[  247.580737][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  247.580753][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.580766][   T36]  ? __pfx_kthread+0x10/0x10
[  247.580783][   T36]  ret_from_fork+0x439/0x7d0
[  247.580801][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  247.580820][   T36]  ? __switch_to_asm+0x39/0x70
[  247.580836][   T36]  ? __switch_to_asm+0x33/0x70
[  247.580851][   T36]  ? __pfx_kthread+0x10/0x10
[  247.580866][   T36]  ret_from_fork_asm+0x1a/0x30
[  247.580896][   T36]  </TASK>
[  247.581164][   T36] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  247.610966][T10493] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  247.869590][T10493] XFS (loop5): Ending clean mount
[  247.881375][T10493] XFS (loop5): Quotacheck needed: Please wait.
[  247.918903][T10504] loop4: detected capacity change from 0 to 256
[  247.952395][T10493] XFS (loop5): Quotacheck: Done.
[  247.973507][T10504] FAT-fs (loop4): Directory bread(block 64) failed
[  247.975935][T10504] FAT-fs (loop4): Directory bread(block 65) failed
[  247.997005][T10504] FAT-fs (loop4): Directory bread(block 66) failed
[  247.999309][T10504] FAT-fs (loop4): Directory bread(block 67) failed
[  248.009316][T10504] FAT-fs (loop4): Directory bread(block 68) failed
[  248.012098][T10504] FAT-fs (loop4): Directory bread(block 69) failed
[  248.017159][T10504] FAT-fs (loop4): Directory bread(block 70) failed
[  248.020013][T10504] FAT-fs (loop4): Directory bread(block 71) failed
[  248.031062][T10173] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  248.034130][T10504] FAT-fs (loop4): Directory bread(block 72) failed
[  248.039180][T10504] FAT-fs (loop4): Directory bread(block 73) failed
[  248.287516][ T5965] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  248.540844][ T5965] usb 4-1: Using ep0 maxpacket: 16
[  248.558183][ T5965] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  248.589133][T10524] random: crng reseeded on system resumption
[  248.695164][ T5965] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  248.722579][ T5965] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  248.744303][ T5965] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  248.813470][ T5965] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  248.836598][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  248.839100][ T5965] usb 4-1: SerialNumber: syz
[  248.843054][T10506] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  249.054658][ T5965] usb 4-1: USB disconnect, device number 19
[  249.239768][T10541] loop4: detected capacity change from 0 to 512
[  249.252325][T10541] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  249.255837][T10541] EXT4-fs (loop4): orphan cleanup on readonly fs
[  249.276008][T10541] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1753: corrupted inode contents
[  249.281067][T10541] EXT4-fs (loop4): Remounting filesystem read-only
[  249.284241][T10541] EXT4-fs (loop4): 1 truncate cleaned up
[  249.317527][   T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  249.323148][   T36] __quota_error: 28 callbacks suppressed
[  249.323160][   T36] Quota error (device loop4): write_blk: dquota write failed
[  249.331580][   T36] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries
[  249.335633][   T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  249.340195][   T36] Quota error (device loop4): write_blk: dquota write failed
[  249.342568][   T36] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list
[  249.347199][   T36] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  249.351752][   T36] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  249.355863][   T36] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  249.364100][T10541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  249.399330][ T7807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.662406][T10565] loop3: detected capacity change from 0 to 8
[  249.702789][T10565] cramfs: Error -3 while decompressing!
[  249.705243][T10565] cramfs: ffffffff99bf2668(26)->ffff888011b49000(4096)
[  249.712777][T10565] cramfs: Error -3 while decompressing!
[  249.715852][T10565] cramfs: ffffffff99bf2682(26)->ffff888011b4a000(4096)
[  249.720627][T10565] cramfs: Error -3 while decompressing!
[  249.722964][T10565] cramfs: ffffffff99bf269c(16)->ffff888011b4b000(4096)
[  249.725602][T10565] cramfs: Error -3 while decompressing!
[  249.730737][T10565] cramfs: ffffffff99bf2668(26)->ffff888011b49000(4096)
[  249.764684][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1767'.
[  249.773342][T10571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1767'.
[  250.113721][T10599] bridge_slave_0: invalid flags given to default FDB implementation
[  250.144049][T10602] macsec0: entered promiscuous mode
[  250.146366][T10602] macsec0: entered allmulticast mode
[  250.148679][T10602] veth1_macvtap: entered allmulticast mode
[  250.154428][T10602] batman_adv: batadv0: Adding interface: macsec0
[  250.159902][T10602] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.169458][T10602] batman_adv: batadv0: Interface activated: macsec0
[  250.329332][T10612] overlayfs: failed to resolve './file1': -2
[  251.003993][T10622] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1790'.
[  251.366404][T10641] overlayfs: failed to resolve './file2': -2
[  251.794445][T10657] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  252.162087][T10676] loop3: detected capacity change from 0 to 256
[  252.172619][T10676] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  252.645745][T10711] loop3: detected capacity change from 0 to 512
[  252.650668][T10711] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  252.663436][T10711] EXT4-fs (loop3): invalid journal inode
[  252.666078][T10711] EXT4-fs (loop3): can't get journal size
[  252.672809][T10711] EXT4-fs (loop3): orphan cleanup on readonly fs
[  252.676484][T10711] EXT4-fs (loop3): 1 truncate cleaned up
[  252.681466][T10711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  252.710391][ T6535] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.156819][ T5920] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  253.306640][ T5920] usb 4-1: Using ep0 maxpacket: 32
[  253.314240][ T5920] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  253.326254][ T5920] usb 4-1: config 0 has no interface number 0
[  253.336674][ T5920] usb 4-1: config 0 interface 12 has no altsetting 0
[  253.345002][ T5920] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  253.352090][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.355294][ T5920] usb 4-1: Product: syz
[  253.360337][ T5920] usb 4-1: Manufacturer: syz
[  253.362472][ T5920] usb 4-1: SerialNumber: syz
[  253.367460][ T5920] usb 4-1: config 0 descriptor??
[  254.143219][ T5920] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  254.150639][ T5920] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  254.153605][ T5920] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  254.157157][ T5920] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  254.163856][ T5920] usb 4-1: USB disconnect, device number 20
[  255.108216][ T5920] usb 4-1: new low-speed USB device number 21 using dummy_hcd
[  255.272916][ T5920] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  255.279340][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.285169][ T5920] usb 4-1: config 0 descriptor??
[  255.302494][T10781] loop4: detected capacity change from 0 to 256
[  255.317063][T10781] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d)
[  255.425335][T10787] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1862'.
[  255.436979][T10787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1862'.
[  256.445234][T10800] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  256.449205][T10818] 9pnet_fd: Insufficient options for proto=fd
[  256.880946][ T5965] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  256.922604][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1887'.
[  257.056584][ T5965] usb 5-1: Using ep0 maxpacket: 8
[  257.060498][ T5965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.064741][ T5965] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  257.069085][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.073561][ T5965] usb 5-1: config 0 descriptor??
[  257.079056][ T5965] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22
[  257.283437][ T5965] usb 5-1: USB disconnect, device number 15
[  257.528497][ T5920] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  257.533066][ T5920] asix 4-1:0.0: probe with driver asix failed with error -71
[  257.538964][ T5920] usb 4-1: USB disconnect, device number 21
[  257.695379][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1894'.
[  257.880396][T10870] tmpfs: Cannot retroactively limit inodes
[  258.037659][T10880] netlink: 'syz.4.1905': attribute type 2 has an invalid length.
[  258.189473][T10889] loop3: detected capacity change from 0 to 2048
[  258.193265][T10889] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=26504, location=26504
[  258.211230][T10889] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  258.875410][T10909] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  259.344099][T10917] loop4: detected capacity change from 0 to 16
[  259.352846][T10917] erofs (device loop4): mounted with root inode @ nid 36.
[  259.905922][T10923] loop4: detected capacity change from 0 to 32768
[  259.935386][T10923] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  259.981949][T10923] XFS (loop4): Ending clean mount
[  260.000735][T10946] loop3: detected capacity change from 0 to 512
[  260.010244][T10946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  260.015969][ T7807] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.058500][ T6535] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.372508][T10963] netlink: 'syz.3.1938': attribute type 29 has an invalid length.
[  260.420734][T10965] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1939'.
[  260.420808][T10961] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1932'.
[  260.455805][T10968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1940'.
[  260.494728][T10970] fuse: Invalid rootmode
[  260.697422][T10972] Invalid ELF header type: 0 != 1
[  260.749058][T10977] netlink: 'syz.4.1944': attribute type 21 has an invalid length.
[  260.827839][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  260.830232][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  260.862354][T10977] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1944'.
[  261.569311][T11003] loop3: detected capacity change from 0 to 2048
[  261.592480][T11007] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  261.614823][T11003] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0
[  261.631947][T11003] Remounting filesystem read-only
[  261.637255][T11003] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0
[  261.652518][T11003] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0
[  261.661834][T11003] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0
[  261.672409][T11003] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0
[  262.355646][T11023] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1963'.
[  262.373890][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1963'.
[  262.379699][T11025] loop4: detected capacity change from 0 to 16
[  262.385502][T11023] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1963'.
[  262.395000][T11025] erofs (device loop4): EXPERIMENTAL 48-bit layout support in use. Use at your own risk!
[  262.417699][T11025] erofs (device loop4): unsupported i_format 65280 of nid 255
[  262.601204][T11017] loop3: detected capacity change from 0 to 131072
[  262.620953][T11017] F2FS-fs (loop3): Test dummy encryption mode enabled
[  262.626336][T11017] F2FS-fs (loop3): invalid crc value
[  262.766718][T11017] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  262.771423][T11017] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  263.183054][T11029] loop4: detected capacity change from 0 to 131072
[  263.188506][T11029] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name
[  263.191684][T11029] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name
[  263.196753][T11029] F2FS-fs (loop4): invalid crc value
[  263.244873][T11029] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  263.248643][T11029] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955
[  263.594306][T11043] loop3: detected capacity change from 0 to 1024
[  263.915289][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'.
[  263.981978][T11060] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1979'.
[  264.088779][T11072] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  264.397949][T11087] loop4: detected capacity change from 0 to 4096
[  264.401325][T11087] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  264.413270][T11087] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  264.419056][T11087] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  264.422737][T11089] netlink: 'syz.3.1993': attribute type 27 has an invalid length.
[  264.426269][T11089] netlink: 'syz.3.1993': attribute type 4 has an invalid length.
[  264.429886][T11089] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1993'.
[  264.801292][T11094] loop3: detected capacity change from 0 to 512
[  264.809492][T11094] EXT4-fs (loop3): Test dummy encryption mode enabled
[  264.812692][T11094] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  264.818736][T11094] EXT4-fs (loop3): SIPHASH is not a valid default hash value
[  265.618367][T11102] vivid-006: disconnect
[  265.623259][T11101] vivid-006: reconnect
[  265.810805][T11103] [U] 
[  266.283844][T11127] sctp: [Deprecated]: syz.4.2011 (pid 11127) Use of int in maxseg socket option.
[  266.283844][T11127] Use struct sctp_assoc_value instead
[  266.577060][T10203] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  266.751101][T10203] usb 5-1: config 8 has an invalid interface number: 223 but max is 0
[  266.755242][T10203] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  266.759664][T10203] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  266.766159][T10203] usb 5-1: config 8 has no interface number 0
[  266.778968][T10203] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[  266.784068][T10203] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  266.793083][T10203] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  266.806875][T10203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.810427][T10203] usb 5-1: Product: syz
[  266.812056][T10203] usb 5-1: Manufacturer: syz
[  266.813970][T10203] usb 5-1: SerialNumber: syz
[  267.311417][  T792] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  267.320930][T10203] usb 5-1: USB disconnect, device number 16
[  267.471066][  T792] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  267.475769][  T792] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  267.481482][  T792] usb 4-1: config 0 interface 0 has no altsetting 0
[  267.484350][  T792] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  267.489371][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.495192][  T792] usb 4-1: config 0 descriptor??
[  267.498238][T11145] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  267.915768][  T792] elo 0003:04E7:0030.000D: unknown main item tag 0x0
[  267.918899][  T792] elo 0003:04E7:0030.000D: item fetching failed at offset 3/5
[  267.922570][  T792] elo 0003:04E7:0030.000D: parse failed
[  267.925111][  T792] elo 0003:04E7:0030.000D: probe with driver elo failed with error -22
[  268.055423][T11169] loop4: detected capacity change from 0 to 512
[  268.087648][T11169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.115174][ T5965] usb 4-1: USB disconnect, device number 22
[  268.129750][ T7807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.436107][T11177] loop4: detected capacity change from 0 to 32768
[  268.458058][   T33] audit: type=1800 audit(1757959053.203:112): pid=11177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2032" name="file1" dev="loop4" ino=7 res=0 errno=0
[  268.648895][T11188] loop4: detected capacity change from 0 to 64
[  268.742314][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2036'.
[  269.067775][T11193] loop3: detected capacity change from 0 to 2048
[  269.077700][T11193] NILFS (loop3): invalid segment: Inconsistency found
[  269.083886][T11193] NILFS (loop3): trying rollback from an earlier position
[  269.096163][T11193] NILFS (loop3): recovery complete
[  269.165159][T11195] loop3: detected capacity change from 0 to 256
[  269.187380][T11195] FAT-fs (loop3): Directory bread(block 64) failed
[  269.190155][T11195] FAT-fs (loop3): Directory bread(block 65) failed
[  269.193985][T11195] FAT-fs (loop3): Directory bread(block 66) failed
[  269.197526][T11195] FAT-fs (loop3): Directory bread(block 67) failed
[  269.200529][T11195] FAT-fs (loop3): Directory bread(block 68) failed
[  269.203348][T11195] FAT-fs (loop3): Directory bread(block 69) failed
[  269.206156][T11195] FAT-fs (loop3): Directory bread(block 70) failed
[  269.210738][T11195] FAT-fs (loop3): Directory bread(block 71) failed
[  269.213651][T11195] FAT-fs (loop3): Directory bread(block 72) failed
[  269.216440][T11195] FAT-fs (loop3): Directory bread(block 73) failed
[  269.256666][T10203] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  269.391036][T11200] loop3: detected capacity change from 0 to 16
[  269.429286][T10203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.440259][T10203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  269.444084][T10203] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  269.458744][T10203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.474533][T10203] usb 5-1: config 0 descriptor??
[  269.506843][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2046'.
[  269.631018][T11200] erofs (device loop3): mounted with root inode @ nid 36.
[  269.899128][T10203] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[  269.904629][T10203] arvo 0003:1E7D:30D4.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0
[  270.301019][T10203] usb 5-1: USB disconnect, device number 17
[  270.579786][   T33] audit: type=1326 audit(1757959055.323:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.5.2055" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  270.587172][   T33] audit: type=1326 audit(1757959055.323:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.5.2055" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  270.594620][   T33] audit: type=1326 audit(1757959055.333:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.5.2055" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  270.604268][   T33] audit: type=1326 audit(1757959055.333:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.5.2055" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  270.612919][   T33] audit: type=1326 audit(1757959055.333:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.5.2055" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  270.623614][   T33] audit: type=1326 audit(1757959055.333:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.5.2055" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  270.632792][   T33] audit: type=1326 audit(1757959055.333:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.5.2055" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb09b18eba9 code=0x7ffc0000
[  270.688257][T11231] loop3: detected capacity change from 0 to 128
[  270.690937][T11231] EXT4-fs: Ignoring removed nobh option
[  270.699419][T11231] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  270.704623][T11231] ext4 filesystem being mounted at /615/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  270.722951][T11231] fscrypt (loop3, inode 12): Unsupported log2_data_unit_size in encryption policy: 179
[  270.744724][ T6535] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  270.844292][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2060'.
[  270.979050][T11246] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  270.983119][T11246] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  272.260441][T11265] loop3: detected capacity change from 0 to 2048
[  272.286400][T11265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.846879][ T5982] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  273.019978][ T5982] usb 5-1: Using ep0 maxpacket: 16
[  273.025554][ T5982] usb 5-1: unable to get BOS descriptor or descriptor too short
[  273.030476][ T5982] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  273.033764][ T5982] usb 5-1: config 0 has no interface number 0
[  273.036148][ T5982] usb 5-1: config 0 interface 51 has no altsetting 0
[  273.041691][ T5982] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2710, bcdDevice=83.9c
[  273.045347][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.050003][ T5982] usb 5-1: Product: syz
[  273.051793][ T5982] usb 5-1: Manufacturer: syz
[  273.053692][ T5982] usb 5-1: SerialNumber: syz
[  273.058876][ T5982] usb 5-1: config 0 descriptor??
[  273.209084][ T6535] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.278074][ T5982] em28xx 5-1:0.51: audio device (eb1a:2710): interface 51, class 1
[  273.282256][ T5982] usb 5-1: USB disconnect, device number 18
[  273.510737][T11302] loop3: detected capacity change from 0 to 32768
[  273.523032][T11302] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  273.534810][   T12] (kworker/u8:0,12,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  273.543606][T11302] 
[  273.544528][T11302] ======================================================
[  273.546694][T11302] WARNING: possible circular locking dependency detected
[  273.548902][T11302] syzkaller #0 Not tainted
[  273.550666][T11302] ------------------------------------------------------
[  273.554355][T11302] syz.3.2086/11302 is trying to acquire lock:
[  273.556728][T11302] ffff88802cb1a6c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  273.561902][T11302] 
[  273.561902][T11302] but task is already holding lock:
[  273.564660][T11302] ffff88802cb1c0f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  273.568467][T11302] 
[  273.568467][T11302] which lock already depends on the new lock.
[  273.568467][T11302] 
[  273.572783][T11302] 
[  273.572783][T11302] the existing dependency chain (in reverse order) is:
[  273.576335][T11302] 
[  273.576335][T11302] -> #5 (&oi->ip_xattr_sem){++++}-{4:4}:
[  273.579428][T11302]        lock_acquire+0x120/0x360
[  273.581420][T11302]        down_read+0x46/0x2e0
[  273.583180][T11302]        ocfs2_init_acl+0x2f9/0x720
[  273.584778][T11302]        ocfs2_mknod+0x1321/0x2050
[  273.586651][T11302]        ocfs2_create+0x1a5/0x440
[  273.588416][T11302]        path_openat+0x14f4/0x3830
[  273.590111][T11302]        do_filp_open+0x1fa/0x410
[  273.591898][T11302]        do_sys_openat2+0x121/0x1c0
[  273.593795][T11302]        __x64_sys_openat+0x138/0x170
[  273.595621][T11302]        do_syscall_64+0xfa/0x3b0
[  273.597252][T11302]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.599297][T11302] 
[  273.599297][T11302] -> #4 (jbd2_handle){++++}-{0:0}:
[  273.601581][T11302]        lock_acquire+0x120/0x360
[  273.603293][T11302]        start_this_handle+0x1fa7/0x21c0
[  273.605373][T11302]        jbd2__journal_start+0x2c1/0x5b0
[  273.607223][T11302]        jbd2_journal_start+0x2a/0x40
[  273.609267][T11302]        ocfs2_start_trans+0x376/0x6d0
[  273.611375][T11302]        ocfs2_mknod+0xe93/0x2050
[  273.613224][T11302]        ocfs2_create+0x1a5/0x440
[  273.615213][T11302]        path_openat+0x14f4/0x3830
[  273.616904][T11302]        do_filp_open+0x1fa/0x410
[  273.618499][T11302]        do_sys_openat2+0x121/0x1c0
[  273.620390][T11302]        __x64_sys_openat+0x138/0x170
[  273.622563][T11302]        do_syscall_64+0xfa/0x3b0
[  273.624607][T11302]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.627048][T11302] 
[  273.627048][T11302] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  273.630308][T11302]        lock_acquire+0x120/0x360
[  273.632372][T11302]        down_read+0x46/0x2e0
[  273.634232][T11302]        ocfs2_start_trans+0x36a/0x6d0
[  273.636407][T11302]        ocfs2_mknod+0xe93/0x2050
[  273.638471][T11302]        ocfs2_create+0x1a5/0x440
[  273.640389][T11302]        path_openat+0x14f4/0x3830
[  273.642468][T11302]        do_filp_open+0x1fa/0x410
[  273.644507][T11302]        do_sys_openat2+0x121/0x1c0
[  273.646471][T11302]        __x64_sys_openat+0x138/0x170
[  273.648426][T11302]        do_syscall_64+0xfa/0x3b0
[  273.650225][T11302]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.652920][T11302] 
[  273.652920][T11302] -> #2 (sb_internal#4){.+.+}-{0:0}:
[  273.656012][T11302]        lock_acquire+0x120/0x360
[  273.658032][T11302]        ocfs2_start_trans+0x26b/0x6d0
[  273.660237][T11302]        ocfs2_mknod+0xe93/0x2050
[  273.662218][T11302]        ocfs2_create+0x1a5/0x440
[  273.664302][T11302]        path_openat+0x14f4/0x3830
[  273.666244][T11302]        do_filp_open+0x1fa/0x410
[  273.667895][T11302]        do_sys_openat2+0x121/0x1c0
[  273.669534][T11302]        __x64_sys_openat+0x138/0x170
[  273.671719][T11302]        do_syscall_64+0xfa/0x3b0
[  273.673629][T11302]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.676110][T11302] 
[  273.676110][T11302] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  273.679650][T11302]        lock_acquire+0x120/0x360
[  273.681460][T11302]        down_write+0x96/0x1f0
[  273.683074][T11302]        ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  273.685468][T11302]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  273.687686][T11302]        ocfs2_mknod+0xe32/0x2050
[  273.689541][T11302]        ocfs2_create+0x1a5/0x440
[  273.691611][T11302]        path_openat+0x14f4/0x3830
[  273.693888][T11302]        do_filp_open+0x1fa/0x410
[  273.695646][T11302]        do_sys_openat2+0x121/0x1c0
[  273.697389][T11302]        __x64_sys_openat+0x138/0x170
[  273.699184][T11302]        do_syscall_64+0xfa/0x3b0
[  273.700911][T11302]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.703047][T11302] 
[  273.703047][T11302] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  273.706652][T11302]        validate_chain+0xb9b/0x2140
[  273.708211][T11302]        __lock_acquire+0xab9/0xd20
[  273.710181][T11302]        lock_acquire+0x120/0x360
[  273.712098][T11302]        down_write+0x96/0x1f0
[  273.713827][T11302]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  273.716365][T11302]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  273.719164][T11302]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  273.721567][T11302]        ocfs2_xattr_set+0xb70/0x11f0
[  273.723776][T11302]        __vfs_setxattr+0x43c/0x480
[  273.725889][T11302]        __vfs_setxattr_noperm+0x12d/0x660
[  273.728244][T11302]        vfs_setxattr+0x16b/0x2f0
[  273.730211][T11302]        filename_setxattr+0x274/0x600
[  273.732298][T11302]        path_setxattrat+0x364/0x3a0
[  273.734349][T11302]        __x64_sys_lsetxattr+0xbf/0xe0
[  273.736467][T11302]        do_syscall_64+0xfa/0x3b0
[  273.738556][T11302]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.741194][T11302] 
[  273.741194][T11302] other info that might help us debug this:
[  273.741194][T11302] 
[  273.745340][T11302] Chain exists of:
[  273.745340][T11302]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  273.745340][T11302] 
[  273.751564][T11302]  Possible unsafe locking scenario:
[  273.751564][T11302] 
[  273.754575][T11302]        CPU0                    CPU1
[  273.756626][T11302]        ----                    ----
[  273.758788][T11302]   lock(&oi->ip_xattr_sem);
[  273.760674][T11302]                                lock(jbd2_handle);
[  273.763318][T11302]                                lock(&oi->ip_xattr_sem);
[  273.765711][T11302]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  273.768349][T11302] 
[  273.768349][T11302]  *** DEADLOCK ***
[  273.768349][T11302] 
[  273.771643][T11302] 3 locks held by syz.3.2086/11302:
[  273.773756][T11302]  #0: ffff88801d2c8428 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  273.777087][T11302]  #1: ffff88802cb1c3c0 (&type->i_mutex_dir_key#14){++++}-{4:4}, at: vfs_setxattr+0x144/0x2f0
[  273.780385][T11302]  #2: ffff88802cb1c0f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  273.784412][T11302] 
[  273.784412][T11302] stack backtrace:
[  273.786891][T11302] CPU: 1 UID: 0 PID: 11302 Comm: syz.3.2086 Not tainted syzkaller #0 PREEMPT(full) 
[  273.786910][T11302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  273.786920][T11302] Call Trace:
[  273.786927][T11302]  <TASK>
[  273.786934][T11302]  dump_stack_lvl+0x189/0x250
[  273.786956][T11302]  ? __pfx_dump_stack_lvl+0x10/0x10
[  273.786971][T11302]  ? __pfx__printk+0x10/0x10
[  273.786991][T11302]  ? print_lock_name+0xde/0x100
[  273.787010][T11302]  print_circular_bug+0x2ee/0x310
[  273.787028][T11302]  check_noncircular+0x134/0x160
[  273.787045][T11302]  validate_chain+0xb9b/0x2140
[  273.787055][T11302]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  273.787065][T11302]  ? look_up_lock_class+0x74/0x170
[  273.787073][T11302]  ? register_lock_class+0x51/0x320
[  273.787086][T11302]  __lock_acquire+0xab9/0xd20
[  273.787098][T11302]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  273.787107][T11302]  lock_acquire+0x120/0x360
[  273.787117][T11302]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  273.787128][T11302]  down_write+0x96/0x1f0
[  273.787136][T11302]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  273.787146][T11302]  ? __pfx_down_write+0x10/0x10
[  273.787162][T11302]  ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  273.787175][T11302]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  273.787187][T11302]  ? lockdep_hardirqs_on+0x9c/0x150
[  273.787195][T11302]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  273.787206][T11302]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  273.787218][T11302]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  273.787227][T11302]  ? stack_depot_save_flags+0x41b/0x860
[  273.787240][T11302]  ? kasan_save_track+0x4f/0x80
[  273.787249][T11302]  ? kasan_save_track+0x3e/0x80
[  273.787257][T11302]  ? __kasan_kmalloc+0x93/0xb0
[  273.787265][T11302]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  273.787275][T11302]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  273.787284][T11302]  ? ocfs2_init_xattr_set_ctxt+0x307/0x700
[  273.787293][T11302]  ? ocfs2_xattr_set+0xb70/0x11f0
[  273.787302][T11302]  ? __vfs_setxattr+0x43c/0x480
[  273.787312][T11302]  ? __vfs_setxattr_noperm+0x12d/0x660
[  273.787322][T11302]  ? vfs_setxattr+0x16b/0x2f0
[  273.787332][T11302]  ? filename_setxattr+0x274/0x600
[  273.787338][T11302]  ? path_setxattrat+0x364/0x3a0
[  273.787345][T11302]  ? __x64_sys_lsetxattr+0xbf/0xe0
[  273.787351][T11302]  ? do_syscall_64+0xfa/0x3b0
[  273.787359][T11302]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.787374][T11302]  ? __kasan_kmalloc+0x93/0xb0
[  273.787383][T11302]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  273.787393][T11302]  ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  273.787403][T11302]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  273.787411][T11302]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  273.787449][T11302]  ? __lock_acquire+0xab9/0xd20
[  273.787463][T11302]  ocfs2_init_xattr_set_ctxt+0x307/0x700
[  273.787475][T11302]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  273.787486][T11302]  ? ocfs2_xattr_set+0xb36/0x11f0
[  273.787496][T11302]  ? up_write+0x1c4/0x420
[  273.787504][T11302]  ? ocfs2_xattr_set+0x334/0x11f0
[  273.787514][T11302]  ocfs2_xattr_set+0xb70/0x11f0
[  273.787528][T11302]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  273.787542][T11302]  ? look_up_lock_class+0x74/0x170
[  273.787550][T11302]  ? register_lock_class+0x51/0x320
[  273.787562][T11302]  ? posix_xattr_acl+0x93/0xc0
[  273.787571][T11302]  ? evm_protect_xattr+0x4d4/0xa90
[  273.787580][T11302]  ? apparmor_capable+0x137/0x1b0
[  273.787589][T11302]  ? __pfx_evm_protect_xattr+0x10/0x10
[  273.787600][T11302]  ? __pfx_ocfs2_xattr_security_set+0x10/0x10
[  273.787616][T11302]  __vfs_setxattr+0x43c/0x480
[  273.787636][T11302]  __vfs_setxattr_noperm+0x12d/0x660
[  273.787648][T11302]  vfs_setxattr+0x16b/0x2f0
[  273.787659][T11302]  ? __pfx_vfs_setxattr+0x10/0x10
[  273.787669][T11302]  ? mnt_get_write_access+0x223/0x2a0
[  273.787679][T11302]  filename_setxattr+0x274/0x600
[  273.787687][T11302]  ? __pfx_filename_setxattr+0x10/0x10
[  273.787694][T11302]  ? getname_flags+0x1e5/0x540
[  273.787707][T11302]  path_setxattrat+0x364/0x3a0
[  273.787725][T11302]  ? __pfx_path_setxattrat+0x10/0x10
[  273.787735][T11302]  ? do_futex+0x333/0x420
[  273.787749][T11302]  ? rcu_is_watching+0x15/0xb0
[  273.787757][T11302]  __x64_sys_lsetxattr+0xbf/0xe0
[  273.787765][T11302]  do_syscall_64+0xfa/0x3b0
[  273.787772][T11302]  ? lockdep_hardirqs_on+0x9c/0x150
[  273.787779][T11302]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.787790][T11302]  ? exc_page_fault+0x9f/0xf0
[  273.787803][T11302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.787816][T11302] RIP: 0033:0x7fb0b658eba9
[  273.787829][T11302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  273.787837][T11302] RSP: 002b:00007fb0b745d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  273.787847][T11302] RAX: ffffffffffffffda RBX: 00007fb0b67d5fa0 RCX: 00007fb0b658eba9
[  273.787853][T11302] RDX: 0000000000000000 RSI: 0000200000002980 RDI: 0000200000000080
[  273.787858][T11302] RBP: 00007fb0b6611e19 R08: 0000000000000001 R09: 0000000000000000
[  273.787863][T11302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  273.787869][T11302] R13: 00007fb0b67d6038 R14: 00007fb0b67d5fa0 R15: 00007ffd55e40068
[  273.787884][T11302]  </TASK>
[  273.968107][    C1] vkms_vblank_simulate: vblank timer overrun
[  273.989074][T11315] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  273.996263][ T6535] (syz-executor,6535,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 70
[  274.001148][ T6535] (syz-executor,6535,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  274.007249][ T6535] ocfs2: Unmounting device (7,3) on (node local)
[  274.007729][T11314] IPVS: stopping master sync thread 11315 ...

VM DIAGNOSIS:
17:57:38  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b461eb RBX=1ffff11026cc7f61 RCX=ffff88801c789cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000176f7e0 RSP=ffffc9000176f660
R8 =ffffffff8fa3a637 R9 =1ffffffff1f474c6 R10=dffffc0000000000 R11=fffffbfff1f474c7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b461d3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb09c0d2fc8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013e5 RDI=00000000000013e6 RBP=00000000000003f8 RSP=ffffc9000354e4b0
R8 =ffff888020948237 R9 =1ffff11004129046 R10=dffffc0000000000 R11=ffffffff854fae30
R12=dffffc0000000000 R13=ffffffff99b008fc R14=ffffffff99df5440 R15=0000000000000000
RIP=ffffffff854faeac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb0b745d6c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002980 CR3=0000000036ff0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb0b67a7498 00007fb0b67a7470 XMM03=00007fb0b67a74a8 00007fb0b67a74a0
XMM04=00007fb0b730d100 00007fb0b67a7460 XMM05=00007fb0b67a7478 00007fb0b67a74c0
XMM06=00007fb0b67a74b8 00007fb0b67a74b0 XMM07=00007fb0b67a74a8 00007fb0b67a74a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fb0b6612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
