last executing test programs:

31.94707168s ago: executing program 2 (id=897):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000000)='./file2\x00', 0x2000002, &(0x7f0000000040)=ANY=[], 0x1, 0x5eda, &(0x7f00000064c0)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x6, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)

30.232006752s ago: executing program 2 (id=911):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001c40)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,time_offset=0x0000000000000003,fmask=00000000000000000000005,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1548, &(0x7f0000000380)="$eJzs3AuYTdX7OPD3XWvtMSSdJrkMa613c5LLMkmSS5JckiRJktwSkib5SkJiyC1pSEJyGZLLEJLLxKRxv98vCU2SJklCckvW/1H8fftVv++lvl/P85v38zz7sd6z9rv22vOeM2fvdZz5psvQmo1rVWtIRPCn4C//JAFALAAMBIBrACAAgHJx5eIu9OeUmPTnDsL+Wg+lXukZsCuJ65+9cf2zN65/9sb1z964/tkb1z974/pnb1x/xrKzzdMLXstb9t14/T874/f//0OySo/9Ym3p67sCxPyzKVz/7I3r/39W8M/sxPXP3rj+2VXslZ4A+yvN/vfS+PWfHeT4wx6uf/bG9WcsO/t5HTgnXPF16Cu1QSR7fwZypZ9/jDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcayh9P+MgUAl9pXel6MMcYYY4wxxhj76/gcV3oGjDHGGGOMMcYY+89DECBBQQAxkANiISfkAgEAV0MeuAYicC3EwXWQF66HfJAfCkBBiIdCUBg0GLBAEEIRKApRuAGKwY1QHEpASSgFDkpDAtwEZeBmKAu3QDm4FcrDbVABKkIlqAy3QxW4A6rCnVAN7oLqUANqQi24G2rDPVAH7oW6cB/Ug/uhPjwADeBBaAgPQSN4GBrDI9AEHoWm0AyaQwto+W/lvwA94EXoCb0gCXpDH3gJ+kI/6A8DYCC8DIPgFRgMr0IyDIGh8BoMg9dhOLwBI2AkjII3YTS8BWNgLIyD8ZACE2AivA2T4B2YDFNgKkyDVJgOM+BdmAmzYDa8B3PgfZgL82A+LIA0+AAWwiJIhw9hMXwEGbAElsIyWA4rYCWsgtWwBtbCuh/7wgbYCJtgM2yBrbANtsMO2Akfwy74BHbDntfnAUAmfPZH+bD+d/NPXcqHvfApZEJXBAQUKFChwhiMwViMxVyYC3NjbsyDeTCCEYzDOMyLeTEf5sMCWADjMR4LY2E0aJCQsAgWwShGsRgWw+JYHEtiSXToMAETsAzejGWxLJbDclgey2MFrIgVsTJWxipYBatiVayG1bA6VseaWBPvxruxN9bBOlgX62I9rHdpeQobYkNshI2wMTbGJtgEm2JTbI7NsSW2xFbYCltja2yLbbEdtsP22B4TMRE7YAfsiB2xE3bCztgZu2AX7IrdsFvWCzkAX8QXsRdWF72xD/bBvpicoz8OwAH4Mg7CV/AVfBWTcQgOxdfwNXwdh+NJHIEjcRSOwiriLRyDY5HEeEzBFJyIE3ESTsLJOAWn4DRMxek4A2fgTJyFs/A9nIPv4/s4D+fhAkzDNFyIizAd03ExnsIMXIJLcRkuxxW4HFfhalyFa3EdrsUNuAE34SbcgltwG27DHbgDP0YFgJ/gHtyDyZiJmbgP9+F+3I8H8ABmYRYexIN4CA/hYTyMR/AIHsVjeByP4Qk8gSfxFJ7G03gWz+I5fC7+q0Yfl1iTDOICJZSIETEiVsSKXCKXyC1yizwij4iIiIgTcSKvyCvyiXyigCgg4kW8KCwKCyOMIBHGAICIiqgoJoqJ4qK4KClKCiecSBAJoowoI8qKsqKcuFWUF7eJCqKiaOMqi8qiimjrqoo7RTVRTVQXNURNUUvUErVFbVFH1BF1RV1RT9QT9cUDooHojf3xIXGhMo3FEGwihmJT0UzIi7/BWonh2Fq0EW3FE2IkjsD2opVLFE+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo7XqKXmIy9hZ9xDTsK/qJ/mKAmIk1xHs4J2dN8apIFkPEUPGaWICvi+HiDTFCjBSjxJtitHhLjBFjxTgxXqSICWKieFtMEu+IyWKKmCqmiVQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJNfCAWikUiXXwoFouPRIZYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lORKT4T+8TnYr/4QhwQX4os8ZU4KL4Wh8Q34rD4VhwR34mj4pg4Lr4XJ8QP4qQ4JU6LM+Ks+FGcEz+J88ILkCiFlFLJQMbIHDJW5pS55FUytwwu/nSvlXHyOplXXi/zyfyygCwo42UhWVhqaaSVJENZRBaVUXmDLCZvlMVlCVlSlpJOlpYJ8iZZRt4sy8pbZDl5qywvb5MVZEVZSVaWt8sq8g4JkV+OUV3WkDVlLXm3TIJ7ZB15r6wr75P15P2yvnxANpAPyobyIdlIPiwby0dkE/mobCqbyeayhWwpH5Ot5OOytWwj28onZDv5pGwvn5KJ8mnZQfqLT5FnZWf5nOwin5ddZTfZXf4kz0sve8peEnqD7CNfkn1lP9lfDpAD5ctykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZTpFT5TSZKqfL/hdHmi3lP8x/+3fyB/989E1ys9wit8ptcrvcIXfKj+UuuUvulrvlXrlXZspMuU/uk/vlfnlAHpBZMkselAflIXlIHpaH5RF5RB6Vx+QZ+b08IX+QJ+UpeUqekWflWXnu4s8AFCqhpFIqUDEqh4pVOVUudZXKra5WedQ1KqKuVXHqOpVXXa/yqfyqgCqo4lUhVVhpZZRVpEJVRBVVUXUDXnzCqJKqlHKqtEpQN/0r+aqYulEVVyV+lX9pfkl/ML+WqqVqpVqp1qq1aqvaqnaqnWqv2qtElag6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKkklqT7qJdVX9VP91QA1UL2sBqlBarAarJJVshqqhqphapgaroarEWqEGqVGqdFqtBqjxqhxapxKUSlqopqoJqlJarKarKaqqSpVpaoZaoaaqWaq2Wq2mqPmqLlqrpqv5qs0laYWqoUqXaWrxWqxylBL1BK1TC1TK9QKtUqtUmvUGrVOrVMb1AaVoTarzWqr2qq2q+1qp9qpdqldarfarfaqvSpTZap9ap/ar/arA+qAylJZ6qA6qA6pQ+qwOqyOqCPqqDqqjqvj6oQ6oU6qk+q0Oq3OqrPqnDqnzqvzFy77AhGIQAUqiAligtggNsgV5ApyB7mDPEGeIBJEgrggLsgbXB/kC/IHBYKCQXxQKCgc6MAENhAXix4NbgiKBTcGxYMSQcmgVOCC0kFCzMXO4JagXHBrUD64LagQVAwqBZWD24MqwR1B1eDOoFpwV1A9qBHUDGoFdwe1g3uCOsG9Qd3gvqBecH9QP3ggaBA8GDQMHgoaBQ8HjYNHgibBo0HToFnQPGgRtAxuDsr+ZeN7fzL/466n7qWTdG/dR7+k++p+ur8eoAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erKeoqfqaTpVT9cz9Lt6pp6lZ+v39Bz9vp6r5+n5eoFO0x/ohXqRTtcf6sX6I52hl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q536J36Y71Lf6J36z16r/5UZ+rP9D79ud6vv9AH9Jc6S3+lD+qv9SH9jT6sv9VH9Hf6qD6mj+vv9Qn9gz6pT+nT+ow+q3/U5/RP+rz2Fy7uL7y9G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emr8lr8pl8poApYOJNvClsCpsLyJApYoqYqImaYqaYKW6Km5KmpHHGmQSTYMqYMqasKWvKmXKmvClvKpgKppKpZG43t5s7zB3mTnOnucvcZWqYGqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqapqa5aW5ampamlWllWpvWpq1pa9qZdqa9aW8STaLpYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6miSTZPqYPqav6Wv6m/5moBloBplBZrAZbJJNshlqhpphZpgZboabEWakGXXhQtW8ZcaYsWacGW9STIqZaCaaSWaSmWwmm6lmqkk1qWaGmWFmmplmtplt5pg5Zq6Za+ab+SbNpJmFZqFJN+lmsVlsMkyGWWqWmuVmuVlpVprVZrVZa9aa9bDebDQbzWaz2Ww1W812s93sNDvNLrPL7Da7zV6z12SaTLPP7DP7zX5zwBwwWSbLHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81Zk//i+6U3sTanzWWvsrnt1TaPvcb+z7iALWjjbSFb2Gqbz+b/VWystcVtCVvSlrLOlrYJ9qbfxBVsRVvJVra32yr2Dlv1N3Fte4+tY++1de19tpa9+1dxPXu/rW8fsQ0QAWwz28i2sI3tI7aJfdQ2tc1sc9vCtrNP2vb2KZton7Yd7DO/iRfaRXa1XWPX2nV2t91jT9sz9pD9xp61P9qetpcdaF+2g+wrdrB91SbbIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk210+0M+66daWf9Jk6zH9g5Nt3OtfPsfLvg5/jCnNLth3ax/chm2ACW2mV2uV1hV9pV/3+uy+wGu9FusrvsJ3ar3Wa32x1256ULYbvH7rWf2kz7mT1ov7b77Rf2gD1ss+xXP8cXzu+w/dYesd/Zo/aYPW6/tyfsD+pS9oVz/97+ZM9bb4GQgCQpCiiGclAs5aRcdBXlpqspD11DEbqW4ug6ykvXUz7KTwWoIMVTISpMmgxZIgqpCBWlKN1Al6ZXkkqRo9KUQDdRGbqZytItVI5upfJ0G1WgilSJKtPtVIXuoKp0J1Wju6g61aCaVIvuptp0D9Whe6ku3Uf16H6qTw9QA3qQGtJD1Igepsb0CDWhR6kpNaPm1IJa0mPUih6n1tSG2tIT1I6epPb0FCXS09SBnqGO9DfqRM9SZ3qOutDz1JW6UXd6gXrQi9STelES9aY+9BL1pX7UnwbQQHqZBtErNJhepWQaQkPpNRpGr9NweoNG0EgaRW/SaHqLxtBYGkfjKYUm0ER6mybROzSZptBUmkapNJ1m0Ls0k2bRbHqP5tD7NJfm0XxaQGn0AS2kRZROH9Ji+ogyaAktpWW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO+ph20Se0m/bQXvqUMukz2kef0376gg7Ql5RFX9FB+poO0Td0mL71veg7OkrH6Dh9TyfoBzpJp+g0naGz9COdo5/oPHmCEEMRylCFQRgT5ghjw5xhrvCqMHd4dZgnvCaMhNeGceF1Yd7w+jBfmD8sEBYM48NCYeFQhya0IYVhWCQsGkbDG8Ji4Y1h8bBEWDIsFbqwdJgQ3hSWCW8Oy4a3hOXCW8Py4W1hhbBi+Mh9lcPbwyrhHWHV8M6wWnhXWD2sEdYMa4V3h7XDe8I64b1h3fC+sGx4f1g/fCBsED4YNgwfChuFD4eNw0fCJuGjYdOwWdg8bBG2DB8LW4WPh63DNmHb8ImwXfhk2D58KkwMnw47hM/83H//oj/uTwp7h33Cl8KXQu/vlfOjC6Jp0Q+iC6OLounRD6OLox9FM6JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18oBDp1w0ikXuBiXw8W6nC6Xu8rldle7PO4aF3HXujh3ncvrrnf5XH5XwBV08a6QK+y0M846cqEr4oq6qLvBFXM3uuKuhCvpSjnnSrsE18K1dC1dK/e4a+3auLbuCfeEe9I96Z5yT7mnXQf3jOvo/uY6uWddZ/ece84977q6bq67e8H1cBPy/PKaTHJ9XB/X1/V1/V1/N9ANdIPcIDfYDXbJLtkNdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOpbgUN9FNdJPcJDfZTXZT3VSX6lLdDDfDzXQzXZVZvxxlrpvr5rv5Ls2luYXuwjVjulvsFrsMl+GWuqVuuVvuVrqVbrVb7da6tW69W+82uo1us9vstrqtbrvb7na6nW6X2+V2+2t+GdRlun1un9vv9rsD7kuX5b5yB93X7pD7xh1237oj7jt31B1zx9337oT7wZ10p9xpd8addT+6c+4nd955lxKZEJkYeTsyKfJOZHJkSmRqZFokNTI9MiPybmRmZFZkduS9yJzI+5G5kXmR+ZEFkbTIB5GFkUWR9MiHkcWRjyIZkSWRpZFlkeWRFRHvC20NfRFf1Ef9Db6Yv9EX9yV8SV/KO1/aJ/ibfBl/sy/rb/Hl/K2+vL/NV/AVfSX/qG/qm/nmvoVv6R/zrfzjvrVv49v6J3w7/6Rv75/yif5p38E/4zv6v/lO/lnf2T/nu/jnfVffzXf3L/ge/kXf0/fySb637+Nf8n19P9/fD/AD/ct+kH/FD/av+mQ/xA/1r/lh/nU/3L/hR/iRflTMm370pVtkGO9T/AQ/0b/tJ/l3/GQ/xU/103yqn+5n+Hf9TD/Lz/bv+Tn+fT/Xz/Pz/QKf5j/wC/0in+4/9Iv9Rz7DL7m0qOxX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u9/hd/qP/S7/id/t9/i9/lOf6T/z+/znfr//wh/wX/os/5U/6L/2h/w3/rD/1h/x3/mj/pg/7r/3J/wP/qQ/5U/7M/6s/9Gf8z/58/ydNcYYY4yxf8qEy03x655flvN7/06O+Lud+wDA1dsKZv19/4UryvX5fmn3E/HtIgDwdK8uD13aqldPSkq6uG+GhKDoPIBLnwRd8POy8cV4CbSFJyER2kCZ351/P9HtLP2D8aO3AuT6u5xYuBxfHv9zAEz6nfEfe2LUwvLh6bj/Zfx5AMWLXs7JCZfjJdD25/WVNlD2D+afv9U/mH/OL1IAWv9dTm64HF+efwI8Ds9A4q/2ZIwxxhhjjDHGftFPVOp06f7z0v/4/L3783h1OScHXI7/0f05Y4wxxhhjjDHGrrxnu3V/6rFL39x7LDGxTaefH/lnGlX/lZ3/9UYT+E+NzI3fbXgPcOkRBQB/ckCACw353zyLLf+VYyVffLX8z67lZ3wA3Ytd/NLjX3fQ2D9fi3+ncaV+IzHGGGOMMcb+Uy5f9P/6cXWlJsQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjGVD/40/J3alz5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi70v5fAAAA//8XnvpB")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000001f80)=""/4096, 0x1000)

29.837938299s ago: executing program 2 (id=916):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
syz_mount_image$ocfs2(&(0x7f0000004840), &(0x7f00000001c0)='./bus\x00', 0x8c0, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x7, 0x4430, &(0x7f0000000240)="$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")
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
unshare(0x26020480)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r1, 0x6, 0x8, &(0x7f00000000c0)="59ff63cc", 0x4)

29.658827925s ago: executing program 2 (id=917):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

29.418200801s ago: executing program 2 (id=918):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006a0047562cbd7000fddbdf25000000040000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000)

29.106436796s ago: executing program 2 (id=922):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r0, 0x8916, 0x0)

28.96114988s ago: executing program 32 (id=922):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r0, 0x8916, 0x0)

1.724103313s ago: executing program 3 (id=1150):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000400000791210000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

1.42291762s ago: executing program 3 (id=1151):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)={[{@noquota}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nolazytime}]}, 0xfe, 0x26d, &(0x7f0000001100)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0xfc, 0x0, &(0x7f0000000140))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.346657713s ago: executing program 3 (id=1152):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x0, {0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd)
ioctl$FIBMAP(r2, 0x401070c9, &(0x7f0000000000))

1.07073225s ago: executing program 0 (id=1153):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x1, 0x2}, 0x10)

963.282933ms ago: executing program 3 (id=1154):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0)

865.24832ms ago: executing program 0 (id=1155):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000000000000d6000000000000080001"], 0x20}}, 0x4000000)

834.131771ms ago: executing program 0 (id=1156):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x11, 0x7fffffff}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x86, &(0x7f00000001c0)=""/134, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd)

747.74726ms ago: executing program 3 (id=1157):
unshare(0x48060600)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
close(0x3)

685.229888ms ago: executing program 1 (id=1158):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r2, 0xff06, 0x110c2300fe)

684.934669ms ago: executing program 0 (id=1159):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0)
fallocate(r0, 0x10, 0x17e, 0x1000f)
lseek(r0, 0x1, 0x4)

539.825372ms ago: executing program 1 (id=1160):
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000)={0x12, {{0x29, 0x0, 0xb000000, @empty}}}, 0x88)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

403.331287ms ago: executing program 1 (id=1161):
syz_emit_ethernet(0x66, &(0x7f0000002040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x30, 0x2b, 0x0, @private2, @local, {[@hopopts={0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x10}, @calipso={0x7, 0x8, {0x1, 0x0, 0x4, 0x6}}]}], {0x0, 0x0, 0x8}}}}}}, 0x0)

402.575057ms ago: executing program 0 (id=1162):
unshare(0x20000400)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
sync_file_range(r0, 0xe, 0x0, 0x5)

402.334008ms ago: executing program 1 (id=1163):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010000000000a657e73e1d877cfb08000300", @ANYRES32=r2], 0x1c}}, 0x0)

264.538876ms ago: executing program 1 (id=1164):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000280)="39000000140081ae0000dc676f97daf01effffff0521018701546fabca1b4e8a06a6580e88370200c5090000009c40ebb3734b49bbc51245e7", 0x39}], 0x1}, 0x0)

264.077417ms ago: executing program 0 (id=1165):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f0000004480)="$eJzs3b1PHGcaAPB3BnwGfx32ufBJJ91KZ+k+hcDV3WHpMMbGYHOOnNhFmvUCa5tkYS1YohQuSGcpVaQUUQorkdJRWUhp0jh/QpqUTm0pKdJEimSFaHdnMTPsmg3ZhWD9fsXOzvv5wLMzvGNp/caJyr355dz8cq6wmCvP3lk+l3unXFpZKIZ4jzSd/9DezU97uvE5edmYn3cscpq5fvHy67fOhfDl3NfPNjY2NkJVb2hqeMv7H75/MLv12BBn+lTHbTLUoeYz7MabIYTT2+Kq6gkh9IUQohDChaRsLDn2hxCOJ3W3Hrx/O9ehaB4/LZ7PP59+uD5ydmrt0Xqzn70uCuHj0h//dXfh27/0jHzzj9YjfnG0Q6EBAAAAAAAAAAAAAAAAAHAATNy4fvO1oeHwJAq9a9H27+tOJMcW34/t3eiYP78szL+f6NyPDAAAAAAAAAAAAAAAAAAAAL85L77/n4tONfn+/3hyHG3Rf+N/3Y+R7pn8//XxS0PDyf7v0bb6fydF313oCSeb7Pue3f/9QqZ/8/3ft8+zW434GvMOhCgeTJ3H8eBgCJ8mG7+fiY7EpfJy5Z93yiuLcx0L48BK57++e38qO8mG/m3mPx7LjN9i//8O+sO2T1P1/HbnPmKvtHT+e1q2++y9qK3r/2Km317kn91L57+3Vta/tcFo/QZQzf8HvTvnfzwzfrfyfyKEkIuqseZSd4DqGqZa3mq9Qlo6/4dqZalbZ/KLbHX9/5jJ/6XM+Pt1/1/N/iGiqXT+f1cr60u1OFx7reU/3vn6v5wZfz/yX41/tV640d25D750/uu5Dr2pJrXfZLv3/4nM+C3zf/jXxX0zTuI8EaU+AWtRvbzF/1dHRjr/fdvqXzz/xW2t/65k+u/V819j3sbzX+P2/7eo/vxHc+n897ds1+71P5np1+37/2ht/cdupfN/pFaWXjsP1F7bzf9UZvxu5b/2VNLXyP+L+8lPh+vln1j/tSWd/6P1wnhri9Xaa239F+28/r+aGX8/1n/V+Ffj7s76qkjn/1jLdtX8f9XG3/9rmX7dz38IQ/6tb9fS+T/esl3t+u/bOf/Tm+/qY3U7/3/t5uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8BYchwIUTyYOo/jwcEQLibnZ8KRaKYwl58plWffXg5hPCnPhVPR3VJ5plDKzy+W54r5QqlUng3hUlJ/OvRFy6VyJb9QuH95c6z+6F6xsFSZKRYqIYSJpPxP4XhjrJn5ykLhfgjhymbd7+Py0v17hcX83PzSf4eGhobC5GYMJ6Piu5XiYqU+e702hKnNvgPRluBq1Vc3YzkWvVVeWVoslGrl17b0KZVnC6UtfaaTug/DyaiytLI4W6gU86Xy3cZ8+2k0OY5P3njjxrXhbfW3o/pxbG/DAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAXejLyn49CCL31sziEMNp4EzVr//hp8Xz++fTD9ZGzU2uP1p+1agcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DM7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2KVj1ASCKAzAbyZFki7HSLUkXdoNgZAU2SB4Aj2Gh9GjeAnvYGFhayGC7KKuu7CNVt/XPJifmfdgHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw3yPqvH/23tEiqf9Y8Ryulqf5791nX9233+4w4zczs9f9XX6w3SVf9RHmzIf0912NomO2li09qS9T5d9nnvn6tu3vvmavi+RchERZZ2/ppyLYthbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGAHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqKvg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BUAAP//hkEdVg==")
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xa0)
syz_io_uring_setup(0xbc4, 0x0, 0x0, 0x0)

204.921999ms ago: executing program 1 (id=1166):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 3 (id=1167):
syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000006240)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0x1, 0x5f2d, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003, 0x4000})

kernel console output (not intermixed with test programs):

 8 using dummy_hcd
[  107.047452][ T6010] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config
[  107.051300][ T6010] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  107.055704][ T6010] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0
[  107.059789][ T6010] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x8 has an invalid bInterval 0, changing to 7
[  107.063871][ T6010] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0
[  107.067190][ T6010] usb 2-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  107.071001][ T6010] usb 2-1: config 48 interface 0 has no altsetting 0
[  107.076336][ T6010] usb 2-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f
[  107.079541][ T6010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.082301][ T6010] usb 2-1: Product: syz
[  107.083812][ T6010] usb 2-1: Manufacturer: syz
[  107.085345][ T6010] usb 2-1: SerialNumber: syz
[  107.169332][    T9] usb 3-1: Using ep0 maxpacket: 16
[  107.177519][    T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  107.180628][    T9] usb 3-1: config 0 has no interface number 0
[  107.183132][    T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  107.202838][    T9] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[  107.212742][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.216197][    T9] usb 3-1: Product: syz
[  107.217776][    T9] usb 3-1: Manufacturer: syz
[  107.219562][    T9] usb 3-1: SerialNumber: syz
[  107.234849][    T9] usb 3-1: config 0 descriptor??
[  107.240862][    T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  107.279966][    T9] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -2
[  107.289407][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  107.309928][ T6010] usb 2-1: USB disconnect, device number 7
[  107.451964][ T5312] usb 3-1: USB disconnect, device number 8
[  107.517743][ T7152] loop0: detected capacity change from 0 to 16
[  107.526175][ T7152] erofs (device loop0): mounted with root inode @ nid 36.
[  107.790873][ T7154] erofs (device loop0): readahead error at folio 2 @ nid 89
[  107.797736][ T7154] erofs (device loop0): readahead error at folio 1 @ nid 89
[  107.800606][ T7154] erofs (device loop0): readahead error at folio 0 @ nid 89
[  107.804206][ T7154] syz.0.414: attempt to access beyond end of device
[  107.804206][ T7154] loop0: rw=524288, sector=524296, nr_sectors = 8 limit=16
[  107.810410][ T7154] erofs (device loop0): read error -117 @ 0 of nid 89
[  107.816179][   T33] audit: type=1800 audit(1755625769.254:22): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.414" name="file2" dev="loop0" ino=89 res=0 errno=0
[  108.687951][ T7175] loop2: detected capacity change from 0 to 32768
[  108.718894][ T7188] block nbd0: shutting down sockets
[  108.748432][ T7175] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  108.748456][ T7175]   allowing incompatible features above 0.0: (unknown version)
[  108.748464][ T7175]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  108.766707][ T7175] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  108.769723][ T7175] bcachefs (loop2): initializing new filesystem
[  108.785070][ T5312] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  108.791451][ T7175] bcachefs (loop2): going read-write
[  108.813249][ T7175] bcachefs (loop2): marking superblocks
[  108.833089][ T7175] bcachefs (loop2): initializing freespace
[  108.842512][ T7175] bcachefs (loop2): done initializing freespace
[  108.849700][ T7175] bcachefs (loop2): reading snapshots table
[  108.851744][ T7175] bcachefs (loop2): reading snapshots done
[  108.876856][ T7175] bcachefs (loop2): done starting filesystem
[  108.945954][ T5312] usb 2-1: Using ep0 maxpacket: 8
[  108.954552][ T5312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  108.960697][ T5312] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  108.966005][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.971038][ T5312] usb 2-1: config 0 descriptor??
[  109.007263][ T7175] syz.2.423 (7175) used greatest stack depth: 15384 bytes left
[  109.028420][ T5856] bcachefs (loop2): shutting down
[  109.031441][ T5856] bcachefs (loop2): going read-only
[  109.034171][ T5856] bcachefs (loop2): finished waiting for writes to stop
[  109.047941][ T5856] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  109.088695][ T5856] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  109.093542][ T5856] bcachefs (loop2): clean shutdown complete, journal seq 4
[  109.097150][ T5856] bcachefs (loop2): marking filesystem clean
[  109.101742][ T7203] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.119039][ T5856] bcachefs (loop2): shutdown complete
[  109.127545][ T7203] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  109.185920][ T5312] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  109.217972][ T5693] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  109.335164][ T5693] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  109.388759][ T5312] usb 2-1: USB disconnect, device number 8
[  109.908428][ T7203] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  110.244007][ T7213] loop1: detected capacity change from 0 to 2048
[  110.300378][ T7221] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.341659][ T7209] loop0: detected capacity change from 0 to 32768
[  110.347097][ T7209] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.434 (7209)
[  110.364322][ T7209] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.373171][ T7209] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  110.383380][ T7209] BTRFS info (device loop0): using free-space-tree
[  110.406428][ T7223] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  110.623097][ T5849] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.215678][   T54] Bluetooth: hci0: command 0x080f tx timeout
[  111.396759][ T7274] loop1: detected capacity change from 0 to 128
[  111.421196][ T7274] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  111.433014][ T7274] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.462255][ T7274] EXT4-fs error (device loop1): ext4_check_dx_root:2203: inode #2: comm syz.1.453: Corrupt dir, invalid name for '.', running e2fsck is recommended
[  111.510889][ T5845] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  111.640519][ T7273] loop0: detected capacity change from 0 to 32768
[  111.649471][ T7273] bcachefs: bch2_fs_parse_param() Error parsing option background_compression: option_value
[  111.801962][ T7289] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000007
[  112.066008][ T7310] loop1: detected capacity change from 0 to 512
[  112.080597][ T7310] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001)
[  112.090603][ T7310] FAT-fs (loop1): Filesystem has been set read-only
[  112.299032][ T7308] loop2: detected capacity change from 0 to 32768
[  112.339267][ T7308] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  112.339267][ T7308] 
[  112.347090][ T7308] ERROR: (device loop2): remounting filesystem as read-only
[  112.351306][ T7308] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  112.351306][ T7308] 
[  112.364781][ T7312] loop0: detected capacity change from 0 to 32768
[  112.374699][ T7312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.471 (7312)
[  112.387710][ T7312] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  112.392207][ T7312] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  112.397775][ T7312] BTRFS info (device loop0): using free-space-tree
[  112.448620][   T33] audit: type=1800 audit(1755625773.894:23): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.471" name="file0" dev="loop0" ino=258 res=0 errno=0
[  112.473454][ T7312] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4)
[  112.491570][   T33] audit: type=1800 audit(1755625773.934:24): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.471" name="file0" dev="loop0" ino=258 res=0 errno=0
[  112.568168][ T5849] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  113.116598][ T7373] loop2: detected capacity change from 0 to 8
[  113.131787][ T7373] squashfs image failed sanity check
[  113.174391][ T7377] loop1: detected capacity change from 0 to 512
[  113.221599][ T7377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  113.228605][ T7377] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.255726][ T7377] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  113.259526][ T7377] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  113.262726][ T7377] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.489: Failed to acquire dquot type 0
[  113.282341][   T33] audit: type=1326 audit(1755625774.724:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c27d8ebe9 code=0x7ffc0000
[  113.301545][   T33] audit: type=1326 audit(1755625774.724:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c27d8ebe9 code=0x7ffc0000
[  113.301781][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  113.308358][   T33] audit: type=1326 audit(1755625774.724:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.492" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1c27d8ebe9 code=0x7ffc0000
[  113.321716][   T33] audit: type=1326 audit(1755625774.724:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c27d8ebe9 code=0x7ffc0000
[  113.328730][   T33] audit: type=1326 audit(1755625774.724:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c27d8ebe9 code=0x7ffc0000
[  113.336778][   T33] audit: type=1326 audit(1755625774.724:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.492" exe="/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f1c27d8ebe9 code=0x7ffc0000
[  113.343983][   T33] audit: type=1326 audit(1755625774.724:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c27d8ebe9 code=0x7ffc0000
[  113.355014][   T33] audit: type=1326 audit(1755625774.724:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c27d8ebe9 code=0x7ffc0000
[  113.414239][ T7397] loop1: detected capacity change from 0 to 1024
[  113.462732][   T36] hfsplus: b-tree write err: -5, ino 4
[  113.523697][ T7402] netlink: 'syz.1.499': attribute type 3 has an invalid length.
[  113.527224][ T7402] netlink: 'syz.1.499': attribute type 1 has an invalid length.
[  113.529835][ T7402] netlink: 198116 bytes leftover after parsing attributes in process `syz.1.499'.
[  113.542404][ T7404] loop0: detected capacity change from 0 to 1024
[  113.996711][ T7420] loop2: detected capacity change from 0 to 8
[  115.012491][ T7431] warning: `syz.0.512' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  115.237423][ T7433] loop0: detected capacity change from 0 to 512
[  115.242577][ T7433] EXT4-fs: Ignoring removed bh option
[  115.270453][ T7433] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  115.278385][ T7433] EXT4-fs (loop0): invalid journal inode
[  115.280779][ T7433] EXT4-fs (loop0): can't get journal size
[  115.300289][ T7433] EXT4-fs (loop0): 1 truncate cleaned up
[  115.309848][ T7433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.323687][ T7425] loop1: detected capacity change from 0 to 32768
[  115.332248][ T7433] Device name not specified.
[  115.332248][ T7433] 
[  115.394877][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.589511][ T7446] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  116.429058][ T7459] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only
[  116.434237][ T7459] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  116.599669][ T7461] loop2: detected capacity change from 0 to 4096
[  116.610977][ T7463] loop1: detected capacity change from 0 to 8
[  116.626333][ T7463] SQUASHFS error: lzo decompression failed, data probably corrupt
[  116.638993][ T7463] SQUASHFS error: Failed to read block 0x91: -5
[  116.641695][ T7463] SQUASHFS error: Unable to read metadata cache entry [8f]
[  116.659650][ T7463] SQUASHFS error: Unable to read inode 0x11f
[  116.721130][ T7461] ntfs3(loop2): ino=b, mi_enum_attr
[  116.731254][ T7461] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  116.747572][ T7461] ntfs3(loop2): Failed to load $Extend (-22).
[  116.753320][ T7461] ntfs3(loop2): Failed to initialize $Extend.
[  117.047817][ T7467] netlink: 'syz.2.527': attribute type 2 has an invalid length.
[  117.250572][ T7483] netlink: 'syz.0.535': attribute type 2 has an invalid length.
[  117.307260][ T7486] netlink: 'syz.0.538': attribute type 2 has an invalid length.
[  117.311982][ T7486] netlink: 'syz.0.538': attribute type 1 has an invalid length.
[  117.368317][ T7489] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  117.473041][ T7478] loop1: detected capacity change from 0 to 32768
[  117.477753][ T7478] XFS: attr2 mount option is deprecated.
[  117.525960][ T7478] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  117.529923][ T7478] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.543288][ T7478] XFS (loop1): Ending clean mount
[  117.547300][ T7478] XFS (loop1): Quotacheck needed: Please wait.
[  117.572741][ T7478] XFS (loop1): Quotacheck: Done.
[  117.597820][ T5845] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.598226][ T7505] loop0: detected capacity change from 0 to 128
[  117.622000][ T7505] affs: Unknown parameter 'smackfsroot'
[  117.657165][ T7491] loop2: detected capacity change from 0 to 32768
[  117.675258][ T7491] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.540 (7491)
[  117.760022][ T7491] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.774622][ T7491] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  117.779100][ T7491] BTRFS info (device loop2): using free-space-tree
[  117.791487][ T7519] loop1: detected capacity change from 0 to 64
[  118.128312][ T5856] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.228068][ T7529] loop1: detected capacity change from 0 to 1024
[  118.270341][ T7529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  118.274192][ T7529] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.335950][ T7529] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.547: Freeing blocks not in datazone - block = 0, count = 16
[  118.357563][ T7529] EXT4-fs (loop1): Remounting filesystem read-only
[  118.395326][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  118.591294][ T7546] netlink: 'syz.1.552': attribute type 4 has an invalid length.
[  118.593733][ T7546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.552'.
[  118.608027][ T7553] loop2: detected capacity change from 0 to 512
[  118.621311][ T7553] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.556: casefold flag without casefold feature
[  118.629384][ T7553] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.556: couldn't read orphan inode 15 (err -117)
[  118.634220][ T7553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.657264][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'.
[  118.726154][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.825855][ T7568] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  118.972604][ T7562] loop0: detected capacity change from 0 to 32768
[  118.988578][ T7562] (syz.0.560,7562,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  119.000552][ T7562] (syz.0.560,7562,1):ocfs2_read_locked_inode:597 ERROR: status = -12
[  119.004499][ T7562] (syz.0.560,7562,1):_ocfs2_get_system_file_inode:144 ERROR: status = -12
[  119.028487][ T7562] (syz.0.560,7562,0):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=8, slot=0
[  119.032428][ T7562] (syz.0.560,7562,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  119.035934][ T7562] (syz.0.560,7562,0):ocfs2_mount_volume:1758 ERROR: status = -22
[  119.041811][ T7562] (syz.0.560,7562,0):ocfs2_fill_super:1177 ERROR: status = -22
[  119.287848][ T7589] loop2: detected capacity change from 0 to 4096
[  119.313504][ T7592] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.436460][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'.
[  119.995523][ T7634] mmap: syz.0.588 (7634) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  121.045055][ T5312] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  121.145605][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  121.195131][ T5312] usb 1-1: Using ep0 maxpacket: 16
[  121.201200][ T5312] usb 1-1: unable to get BOS descriptor or descriptor too short
[  121.210979][ T5312] usb 1-1: config 13 has an invalid interface number: 50 but max is 0
[  121.213765][ T5312] usb 1-1: config 13 has an invalid descriptor of length 158, skipping remainder of the config
[  121.224976][ T5312] usb 1-1: config 13 has no interface number 0
[  121.228045][ T5312] usb 1-1: config 13 interface 50 altsetting 167 endpoint 0x8 has an invalid bInterval 101, changing to 7
[  121.232897][ T5312] usb 1-1: config 13 interface 50 altsetting 167 endpoint 0x8 has invalid maxpacket 26047, setting to 1024
[  121.238294][ T5312] usb 1-1: config 13 interface 50 has no altsetting 0
[  121.243580][ T5312] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  121.249258][ T5312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.252449][ T5312] usb 1-1: Product: syz
[  121.254267][ T5312] usb 1-1: Manufacturer: syz
[  121.258509][ T5312] usb 1-1: SerialNumber: syz
[  121.319968][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.329032][    T9] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  121.333354][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.340690][    T9] usb 3-1: Product: syz
[  121.342422][    T9] usb 3-1: Manufacturer: syz
[  121.343974][    T9] usb 3-1: SerialNumber: syz
[  121.350327][    T9] usb 3-1: config 0 descriptor??
[  121.652378][   T51] usb 3-1: USB disconnect, device number 9
[  121.839802][ T5312] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  121.842102][ T5312] usb 1-1: MIDIStreaming interface descriptor not found
[  121.868595][ T5312] usb 1-1: USB disconnect, device number 8
[  122.834739][ T7676] sctp: [Deprecated]: syz.0.601 (pid 7676) Use of int in max_burst socket option deprecated.
[  122.834739][ T7676] Use struct sctp_assoc_value instead
[  122.889572][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'.
[  123.355399][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  123.484498][ T7680] loop0: detected capacity change from 0 to 32768
[  123.500355][ T7680] (syz.0.603,7680,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  123.519178][ T7680] (syz.0.603,7680,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  123.525364][    T9] usb 2-1: Using ep0 maxpacket: 8
[  123.537855][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  123.545460][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  123.554770][    T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.40
[  123.564492][ T7680] JBD2: Ignoring recovery information on journal
[  123.565084][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.572755][    T9] usb 2-1: Product: syz
[  123.576090][    T9] usb 2-1: Manufacturer: syz
[  123.577919][    T9] usb 2-1: SerialNumber: syz
[  123.680919][ T7680] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  123.828665][    T9] usbhid 2-1:1.0: can't add hid device: -71
[  123.831476][    T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  123.849628][    T9] usb 2-1: USB disconnect, device number 9
[  124.110095][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[  125.400433][ T7708] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  125.403474][ T7708] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  125.496839][ T7712] loop2: detected capacity change from 0 to 4096
[  125.500805][ T7712] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  125.685023][ T5880] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  125.704565][ T7722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.847176][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  125.851960][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  125.855396][ T6010] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  125.856972][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  125.865348][ T5880] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  125.868895][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.872168][ T5880] usb 1-1: Product: syz
[  125.873961][ T5880] usb 1-1: Manufacturer: syz
[  125.875938][ T5880] usb 1-1: SerialNumber: syz
[  125.884634][ T5880] usb 1-1: config 0 descriptor??
[  125.891628][ T5880] iguanair 1-1:0.0: probe with driver iguanair failed with error -12
[  126.007474][ T6010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  126.012412][ T6010] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  126.017414][ T6010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  126.024229][ T6010] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  126.028753][ T6010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.031821][ T6010] usb 3-1: Product: syz
[  126.033640][ T6010] usb 3-1: Manufacturer: syz
[  126.035685][ T6010] usb 3-1: SerialNumber: syz
[  126.043144][ T6010] usb 3-1: config 0 descriptor??
[  126.047373][ T7716] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  126.050632][ T7716] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  126.054788][ T6010] usb 3-1: ucan: probing device on interface #0
[  126.101409][ T5880] usb 1-1: USB disconnect, device number 9
[  126.253285][ T7724] loop1: detected capacity change from 0 to 128
[  126.261254][ T7724] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  126.272805][ T7724] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.326850][ T7726] loop1: detected capacity change from 0 to 512
[  126.352786][ T7726] EXT4-fs (loop1): 1 orphan inode deleted
[  126.358181][ T7726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.363959][ T7726] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.368818][ T1088] __quota_error: 1 callbacks suppressed
[  126.368831][ T1088] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  126.379726][ T1088] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u10:3: Failed to release dquot type 1
[  126.386214][ T7726] netlink: 52 bytes leftover after parsing attributes in process `syz.1.621'.
[  126.389559][ T7726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.422937][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.469610][ T6010] usb 3-1: ucan: device reported invalid device info
[  126.472675][ T6010] usb 3-1: ucan: probe failed; try to update the device firmware
[  126.672517][ T5880] usb 3-1: USB disconnect, device number 10
[  126.911260][ T7745] loop0: detected capacity change from 0 to 32768
[  126.973669][ T7745] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow
[  126.973685][ T7745]   allowing incompatible features above 0.0: (unknown version)
[  126.973690][ T7745]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  126.989193][ T7745] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  126.991692][ T7745] bcachefs (loop0): initializing new filesystem
[  126.998525][ T7745] bcachefs (loop0): going read-write
[  127.004107][ T7745] bcachefs (loop0): marking superblocks
[  127.016064][ T7745] bcachefs (loop0): initializing freespace
[  127.022992][ T7745] bcachefs (loop0): done initializing freespace
[  127.029248][ T7745] bcachefs (loop0): reading snapshots table
[  127.031180][ T7745] bcachefs (loop0): reading snapshots done
[  127.045653][ T7745] bcachefs (loop0):  loop0: Superblock write was silently dropped! (seq 0 expected 42)
[  127.049266][ T7745] bcachefs (loop0): done starting filesystem
[  127.131453][ T5849] bcachefs (loop0): shutting down
[  127.133529][ T5849] bcachefs (loop0): going read-only
[  127.135815][ T5849] bcachefs (loop0): finished waiting for writes to stop
[  127.138968][ T5849] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  127.164803][ T5849] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  127.171390][ T5849] bcachefs (loop0): clean shutdown complete, journal seq 5
[  127.175508][ T5849] bcachefs (loop0): marking filesystem clean
[  127.216130][ T5849] bcachefs (loop0): shutdown complete
[  127.860482][ T7769] netlink: 'syz.1.636': attribute type 27 has an invalid length.
[  127.862948][ T7769] netlink: 'syz.1.636': attribute type 3 has an invalid length.
[  127.865847][ T7769] netlink: 132 bytes leftover after parsing attributes in process `syz.1.636'.
[  128.369930][ T7777] loop1: detected capacity change from 0 to 32768
[  128.380323][ T7786] loop2: detected capacity change from 0 to 1024
[  128.411845][ T7777] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.640 (7777)
[  128.453962][ T7786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.456388][ T7777] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.485357][ T7777] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  128.489104][ T7777] BTRFS info (device loop1): disk space caching is enabled
[  128.627900][ T7777] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  128.969519][ T7777] BTRFS info (device loop1): rebuilding free space tree
[  129.014763][ T7777] BTRFS info (device loop1): disabling free space tree
[  129.027264][ T7777] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  129.042698][ T7777] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  129.234121][ T5845] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.236484][ T7810] loop0: detected capacity change from 0 to 128
[  129.254564][ T7810] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  129.260503][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.270864][ T7810] System zones: 1-3, 19-19, 35-36
[  129.296765][ T7810] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  129.313027][ T7810] ext4 filesystem being mounted at /204/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  129.351633][   T33] audit: type=1800 audit(1755625790.794:34): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.644" name="file0" dev="loop0" ino=12 res=0 errno=0
[  129.355432][ T7813] loop2: detected capacity change from 0 to 16
[  129.361329][   T33] audit: type=1800 audit(1755625790.794:35): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.644" name="file0" dev="loop0" ino=12 res=0 errno=0
[  129.395746][ T7813] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 26000)
[  129.442846][ T5849] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  129.795156][   T51] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  129.947367][   T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.951956][   T51] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  129.957079][   T51] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  129.960524][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.966864][   T51] usb 1-1: config 0 descriptor??
[  130.391240][   T51] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  130.410194][   T51] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  130.637952][ T7837] syz.2.656: attempt to access beyond end of device
[  130.637952][ T7837] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0
[  130.653856][ T5312] usb 1-1: USB disconnect, device number 10
[  130.955132][   T51] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  131.107250][   T51] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  131.111460][   T51] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  131.116076][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64
[  131.120598][   T51] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  131.129168][   T51] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  131.132788][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.136066][   T51] usb 2-1: Product: syz
[  131.137949][   T51] usb 2-1: Manufacturer: syz
[  131.139770][   T51] usb 2-1: SerialNumber: syz
[  131.144058][   T51] usb 2-1: config 0 descriptor??
[  131.151582][ T7839] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  131.225250][   T51] rc_core: IR keymap rc-imon-rsc not found
[  131.235315][   T51] Registered IR keymap rc-empty
[  131.239199][   T51] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  131.244459][   T51] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11
[  131.373435][   T51] usb 2-1: USB disconnect, device number 10
[  131.435410][ T5880] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  131.587314][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.591524][ T5880] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53
[  131.595344][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.600727][ T5880] usb 3-1: config 0 descriptor??
[  131.606901][ T5880] option 3-1:0.0: GSM modem (1-port) converter detected
[  131.808250][ T5880] usb 3-1: USB disconnect, device number 11
[  131.818546][ T5880] option 3-1:0.0: device disconnected
[  131.944149][ T7852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.661'.
[  131.948330][ T7852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.661'.
[  132.137080][ T7854] loop0: detected capacity change from 0 to 32768
[  132.207173][ T7854] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  132.207189][ T7854]   allowing incompatible features above 0.0: (unknown version)
[  132.207195][ T7854]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  132.225879][ T7854] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  132.229121][ T7854] bcachefs (loop0): initializing new filesystem
[  132.236868][ T7854] bcachefs (loop0): going read-write
[  132.251317][ T7854] bcachefs (loop0): marking superblocks
[  132.263244][ T7854] bcachefs (loop0): initializing freespace
[  132.269939][ T7854] bcachefs (loop0): done initializing freespace
[  132.275732][ T7854] bcachefs (loop0): reading snapshots table
[  132.281216][ T7854] bcachefs (loop0): reading snapshots done
[  132.298661][ T7854] bcachefs (loop0): done starting filesystem
[  132.328736][ T5849] bcachefs (loop0): shutting down
[  132.330376][ T5849] bcachefs (loop0): going read-only
[  132.334536][ T5849] bcachefs (loop0): finished waiting for writes to stop
[  132.338732][ T5849] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  132.378352][ T5849] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  132.382027][ T5849] bcachefs (loop0): clean shutdown complete, journal seq 4
[  132.386662][ T5849] bcachefs (loop0): marking filesystem clean
[  132.410067][ T5849] bcachefs (loop0): shutdown complete
[  132.622475][ T7887] loop2: detected capacity change from 0 to 2048
[  132.643667][ T7887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.670033][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.739251][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.741727][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.845868][ T5880] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  133.009120][ T7896] loop2: detected capacity change from 0 to 40427
[  133.015953][ T7896] F2FS-fs (loop2): build fault injection rate: 690
[  133.020483][ T5880] usb 2-1: unable to get BOS descriptor or descriptor too short
[  133.024164][ T7896] F2FS-fs (loop2): invalid crc value
[  133.026849][ T5880] usb 2-1: config 1 interface 1 has no altsetting 0
[  133.031759][ T5880] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  133.034618][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.041141][ T5880] usb 2-1: Product: syz
[  133.042850][ T5880] usb 2-1: Manufacturer: syz
[  133.044675][ T5880] usb 2-1: SerialNumber: syz
[  133.089796][ T7896] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  133.093995][ T7896] F2FS-fs (loop2): Start checkpoint disabled!
[  133.102540][ T7896] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  133.141069][ T6979] kworker/u9:13: attempt to access beyond end of device
[  133.141069][ T6979] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  133.150318][ T6979] CPU: 0 UID: 0 PID: 6979 Comm: kworker/u9:13 Not tainted syzkaller #0 PREEMPT(full) 
[  133.150341][ T6979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.150351][ T6979] Workqueue: writeback wb_workfn (flush-7:2)
[  133.150374][ T6979] Call Trace:
[  133.150381][ T6979]  <TASK>
[  133.150388][ T6979]  dump_stack_lvl+0x189/0x250
[  133.150411][ T6979]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.150427][ T6979]  ? __pfx_queue_work_on+0x10/0x10
[  133.150468][ T6979]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  133.150487][ T6979]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  133.150532][ T6979]  f2fs_handle_critical_error+0x37c/0x540
[  133.150560][ T6979]  f2fs_write_end_io+0x886/0xb60
[  133.150591][ T6979]  __submit_merged_bio+0x27a/0x6a0
[  133.150617][ T6979]  __submit_merged_write_cond+0x255/0x530
[  133.150643][ T6979]  f2fs_write_data_pages+0x261d/0x3000
[  133.150702][ T6979]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.150736][ T6979]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  133.150783][ T6979]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  133.150803][ T6979]  ? look_up_lock_class+0x74/0x170
[  133.150831][ T6979]  ? trace_f2fs_writepages+0x7f/0x200
[  133.150851][ T6979]  ? f2fs_write_node_pages+0x478/0x6e0
[  133.150875][ T6979]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  133.150907][ T6979]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.150928][ T6979]  do_writepages+0x32e/0x550
[  133.150953][ T6979]  ? reacquire_held_locks+0x127/0x1d0
[  133.150967][ T6979]  ? writeback_sb_inodes+0x384/0x1010
[  133.150993][ T6979]  __writeback_single_inode+0x145/0xff0
[  133.151012][ T6979]  ? do_raw_spin_unlock+0x4d/0x240
[  133.151033][ T6979]  writeback_sb_inodes+0x6c7/0x1010
[  133.151076][ T6979]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  133.151133][ T6979]  ? rcu_is_watching+0x15/0xb0
[  133.151157][ T6979]  wb_writeback+0x43b/0xaf0
[  133.151183][ T6979]  ? queue_io+0x361/0x590
[  133.151204][ T6979]  ? __pfx_wb_writeback+0x10/0x10
[  133.151230][ T6979]  ? _raw_spin_unlock_irq+0x23/0x50
[  133.151252][ T6979]  wb_workfn+0x409/0xef0
[  133.151282][ T6979]  ? __pfx_wb_workfn+0x10/0x10
[  133.151302][ T6979]  ? __lock_acquire+0xab9/0xd20
[  133.151333][ T6979]  ? process_scheduled_works+0x9ef/0x17b0
[  133.151353][ T6979]  ? _raw_spin_unlock_irq+0x23/0x50
[  133.151369][ T6979]  ? process_scheduled_works+0x9ef/0x17b0
[  133.151381][ T6979]  ? process_scheduled_works+0x9ef/0x17b0
[  133.151397][ T6979]  process_scheduled_works+0xae1/0x17b0
[  133.151459][ T6979]  ? __pfx_process_scheduled_works+0x10/0x10
[  133.151491][ T6979]  worker_thread+0x8a0/0xda0
[  133.151530][ T6979]  kthread+0x711/0x8a0
[  133.151550][ T6979]  ? __pfx_worker_thread+0x10/0x10
[  133.151564][ T6979]  ? __pfx_kthread+0x10/0x10
[  133.151583][ T6979]  ? _raw_spin_unlock_irq+0x23/0x50
[  133.151599][ T6979]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.151616][ T6979]  ? __pfx_kthread+0x10/0x10
[  133.151634][ T6979]  ret_from_fork+0x3fc/0x770
[  133.151652][ T6979]  ? __pfx_ret_from_fork+0x10/0x10
[  133.151683][ T6979]  ? __switch_to_asm+0x39/0x70
[  133.151699][ T6979]  ? __switch_to_asm+0x33/0x70
[  133.151715][ T6979]  ? __pfx_kthread+0x10/0x10
[  133.151733][ T6979]  ret_from_fork_asm+0x1a/0x30
[  133.151767][ T6979]  </TASK>
[  133.152871][ T6979] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  133.276379][ T5880] usb 2-1: found format II with max.bitrate = 2418, frame size=7
[  133.278725][ T5880] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  133.303969][ T5880] usb 2-1: USB disconnect, device number 11
[  133.660746][ T7906] loop2: detected capacity change from 0 to 16
[  134.330446][ T7917] netlink: 'syz.1.685': attribute type 4 has an invalid length.
[  134.748854][   T33] audit: type=1326 audit(1755625796.194:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.1.686" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334a78ebe9 code=0x7ffc0000
[  134.776902][   T33] audit: type=1326 audit(1755625796.204:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.1.686" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334a78ebe9 code=0x7ffc0000
[  134.791773][   T33] audit: type=1326 audit(1755625796.204:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.1.686" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f334a78ebe9 code=0x7ffc0000
[  134.805155][   T33] audit: type=1326 audit(1755625796.214:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.1.686" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334a78ebe9 code=0x7ffc0000
[  134.820712][   T33] audit: type=1326 audit(1755625796.214:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.1.686" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334a78ebe9 code=0x7ffc0000
[  134.838490][   T33] audit: type=1326 audit(1755625796.224:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.1.686" exe="/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f334a78ebe9 code=0x7ffc0000
[  134.850527][   T33] audit: type=1326 audit(1755625796.224:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.1.686" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334a78ebe9 code=0x7ffc0000
[  134.873002][   T33] audit: type=1326 audit(1755625796.224:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.1.686" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334a78ebe9 code=0x7ffc0000
[  134.892794][ T7912] loop2: detected capacity change from 0 to 32768
[  134.981715][ T7912] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.066097][ T7912] XFS (loop2): Ending clean mount
[  135.078621][ T7912] XFS (loop2): Quotacheck needed: Please wait.
[  135.144179][ T7912] XFS (loop2): Quotacheck: Done.
[  135.201717][ T7945] random: crng reseeded on system resumption
[  135.243341][ T5856] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.383775][ T7951] loop2: detected capacity change from 0 to 1024
[  135.434853][ T7951] syz.2.697: attempt to access beyond end of device
[  135.434853][ T7951] loop2: rw=2049, sector=5778, nr_sectors = 2 limit=1024
[  135.442071][ T7951] Buffer I/O error on dev loop2, logical block 2889, lost async page write
[  135.755352][ T5880] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  135.783173][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'.
[  135.910748][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short
[  135.915223][ T5880] usb 3-1: config 84 has an invalid interface number: 111 but max is 0
[  135.925108][ T5880] usb 3-1: config 84 has no interface number 0
[  135.939585][ T5880] usb 3-1: config 84 interface 111 has no altsetting 0
[  135.945290][ T5880] usb 3-1: language id specifier not provided by device, defaulting to English
[  135.970553][ T5880] usb 3-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=33.f0
[  135.974229][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.998984][ T5880] usb 3-1: Product: Ъ
[  136.000653][ T5880] usb 3-1: SerialNumber: 麡珏גּ줺귮癲ꋧ⌗컹야髰蹏铏܎䖎鯫湼샘婜ꁤ齯Ἑᢱ벗/￭蠾쬯ꃯ▋뵻薱⾡䴢㒟瀪慠欗삅탯睌࢔קּ狴
[  136.127040][ T7990] loop0: detected capacity change from 0 to 2048
[  136.146822][ T7990] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.236408][ T5880] usb 3-1: bad CDC descriptors
[  136.259267][ T5880] usb 3-1: USB disconnect, device number 12
[  136.885019][   T51] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  137.035060][   T51] usb 2-1: Using ep0 maxpacket: 16
[  137.040595][   T51] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  137.043860][   T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.049433][   T51] usb 2-1: config 0 has no interface number 0
[  137.051676][   T51] usb 2-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b
[  137.054596][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.063587][   T51] usb 2-1: config 0 descriptor??
[  137.071251][   T51] usb 2-1: Found UVC 0.00 device <unnamed> (0bd3:05f4)
[  137.073647][   T51] usb 2-1: No valid video chain found.
[  137.105147][ T8013] loop2: detected capacity change from 0 to 32768
[  137.108371][ T8013] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.724 (8013)
[  137.135796][ T8013] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  137.139845][ T8013] BTRFS error (device loop2): unsupported checksum algorithm: 5
[  137.142727][ T8013] BTRFS error (device loop2): open_ctree failed: -22
[  137.269844][   T51] usb 2-1: USB disconnect, device number 12
[  137.369551][ T8020] loop2: detected capacity change from 0 to 32768
[  137.373200][ T8020] (syz.2.727,8020,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  137.378448][ T8020] (syz.2.727,8020,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  137.388861][ T8020] JBD2: Ignoring recovery information on journal
[  137.410958][ T8020] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  137.446962][ T6010] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  137.497367][ T5856] ocfs2: Unmounting device (7,2) on (node local)
[  137.611656][ T8026] loop2: detected capacity change from 0 to 1024
[  137.615356][ T6010] usb 1-1: Using ep0 maxpacket: 8
[  137.622289][ T6010] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2
[  137.627696][ T6010] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  137.633993][ T6010] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  137.640277][ T6010] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  137.643471][ T6010] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.679198][ T1088] hfsplus: b-tree write err: -5, ino 4
[  137.871053][ T6010] usb 1-1: string descriptor 0 read error: -71
[  137.905439][ T6010] usb 1-1: USB disconnect, device number 11
[  137.974480][ T8028] loop2: detected capacity change from 0 to 32768
[  138.152713][ T8036] loop2: detected capacity change from 0 to 2048
[  138.177395][ T8037] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  138.232580][ T8037] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  138.237698][ T8037] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  138.244902][ T8037] Remounting filesystem read-only
[  138.247549][ T5856] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  138.284330][ T5312] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  138.434814][ T5312] usb 2-1: Using ep0 maxpacket: 8
[  138.444673][ T5312] usb 2-1: unable to get BOS descriptor or descriptor too short
[  138.454319][ T5312] usb 2-1: config 7 has an invalid interface number: 67 but max is 0
[  138.457578][ T5312] usb 2-1: config 7 has no interface number 0
[  138.473617][ T5312] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  138.477592][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.481424][ T5312] usb 2-1: Product: syz
[  138.483085][ T5312] usb 2-1: Manufacturer: syz
[  138.494604][ T5312] usb 2-1: SerialNumber: syz
[  138.530562][ T8048] loop2: detected capacity change from 0 to 512
[  138.538937][ T8048] vfat: Unknown parameter 'UVvS+ &;Sw//S 0xRCk̕.'
[  138.671356][ T8046] loop0: detected capacity change from 0 to 32768
[  138.687664][ T8046] (syz.0.738,8046,1):ocfs2_initialize_super:2087 ERROR: couldn't mount because of unsupported optional features (4).
[  138.691678][ T8046] (syz.0.738,8046,1):ocfs2_fill_super:1177 ERROR: status = -22
[  138.735067][ T5312] usb 2-1: USB disconnect, device number 13
[  139.019455][ T8064] loop0: detected capacity change from 0 to 1024
[  139.031407][ T8064] EXT4-fs: Ignoring removed nobh option
[  139.034199][ T8064] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  139.037972][ T8064] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  139.041945][ T8064] JBD2: no valid journal superblock found
[  139.044596][ T8064] EXT4-fs (loop0): Could not load journal inode
[  139.085433][ T8066] loop0: detected capacity change from 0 to 128
[  139.282737][ T8057] loop2: detected capacity change from 0 to 32768
[  139.383251][ T8072] serio: Serial port ptm0
[  139.387064][ T8068] loop0: detected capacity change from 0 to 32768
[  139.443186][ T8068] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow
[  139.443208][ T8068]   allowing incompatible features above 0.0: (unknown version)
[  139.443219][ T8068]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  139.458481][ T8068] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  139.461052][ T8068] bcachefs (loop0): initializing new filesystem
[  139.468608][ T8068] bcachefs (loop0): going read-write
[  139.476112][ T8068] bcachefs (loop0): marking superblocks
[  139.487787][ T8068] bcachefs (loop0): initializing freespace
[  139.493196][ T8068] bcachefs (loop0): done initializing freespace
[  139.500033][ T8068] bcachefs (loop0): reading snapshots table
[  139.502204][ T8068] bcachefs (loop0): reading snapshots done
[  139.518955][ T8068] bcachefs (loop0):  loop0: Superblock write was silently dropped! (seq 0 expected 42)
[  139.522254][ T8068] bcachefs (loop0): done starting filesystem
[  139.577910][ T5849] bcachefs (loop0): shutting down
[  139.579570][ T5849] bcachefs (loop0): going read-only
[  139.581273][ T5849] bcachefs (loop0): finished waiting for writes to stop
[  139.584449][ T5849] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  139.609762][ T5849] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  139.615942][ T5849] bcachefs (loop0): clean shutdown complete, journal seq 5
[  139.619211][ T5849] bcachefs (loop0): marking filesystem clean
[  139.631665][ T5849] bcachefs (loop0): shutdown complete
[  140.372515][ T5880] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  140.407954][ T8094] loop1: detected capacity change from 0 to 32768
[  140.414040][ T8094] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.758 (8094)
[  140.422900][ T8094] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  140.426349][ T8094] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  140.429885][ T8094] BTRFS info (device loop1): using free-space-tree
[  140.532323][ T5880] usb 3-1: Using ep0 maxpacket: 16
[  140.557550][ T5880] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  140.561079][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.567179][ T5880] usb 3-1: config 0 has no interface number 0
[  140.572877][ T5880] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  140.580197][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.584005][ T5880] usb 3-1: Product: syz
[  140.585706][ T5880] usb 3-1: Manufacturer: syz
[  140.587612][ T5880] usb 3-1: SerialNumber: syz
[  140.591622][ T5845] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  140.596603][ T5880] usb 3-1: config 0 descriptor??
[  140.605412][ T5880] uvcvideo 3-1:0.105: probe with driver uvcvideo failed with error -22
[  140.783862][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.753'.
[  140.811324][ T5312] usb 3-1: USB disconnect, device number 13
[  141.004553][ T8128] loop0: detected capacity change from 0 to 256
[  141.009228][ T8128] exfat: Bad value for 'allow_utime'
[  141.059171][ T8132] loop1: detected capacity change from 0 to 512
[  141.063776][ T8132] EXT4-fs (loop1): Test dummy encryption mode enabled
[  141.066140][ T8132] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  141.075515][ T8132] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.768: bad orphan inode 131083
[  141.080079][ T8132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.140605][ T8132] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  141.172744][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.296555][ T8144] loop1: detected capacity change from 0 to 2048
[  141.308070][ T8144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.370344][   T32] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  141.379364][   T32] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  141.391845][   T32] EXT4-fs (loop1): This should not happen!! Data will be lost
[  141.391845][   T32] 
[  141.395666][   T32] EXT4-fs (loop1): Total free blocks count 0
[  141.397990][   T32] EXT4-fs (loop1): Free/Dirty block details
[  141.401032][   T32] EXT4-fs (loop1): free_blocks=4096
[  141.403767][   T32] EXT4-fs (loop1): dirty_blocks=528
[  141.405467][   T32] EXT4-fs (loop1): Block reservation details
[  141.407352][   T32] EXT4-fs (loop1): i_reserved_data_blocks=33
[  141.410312][   T32] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 5 with error 28
[  141.488873][ T8151] loop1: detected capacity change from 0 to 256
[  141.506796][ T8151] exfat: Deprecated parameter 'namecase'
[  141.516172][ T8151] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  141.536189][   T33] audit: type=1326 audit(1755628380.978:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.2.775" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c27d8ebe9 code=0x7ffc0000
[  141.563595][   T33] audit: type=1326 audit(1755628380.978:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.2.775" exe="/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f1c27d8ebe9 code=0x7ffc0000
[  141.575797][   T33] audit: type=1326 audit(1755628380.978:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.2.775" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c27d8ebe9 code=0x7ffc0000
[  141.607047][   T33] audit: type=1326 audit(1755628380.978:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.2.775" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c27d8ebe9 code=0x7ffc0000
[  141.616606][ T8159] loop1: detected capacity change from 0 to 24
[  141.925052][ T8166] loop1: detected capacity change from 0 to 32768
[  141.942615][ T8173] loop0: detected capacity change from 0 to 2048
[  141.948187][ T8173] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  141.954421][ T8166] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.955778][ T8173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.378935][ T8166] XFS (loop1): Ending clean mount
[  142.394924][ T8166] XFS (loop1): Quotacheck needed: Please wait.
[  142.474844][ T8166] XFS (loop1): Quotacheck: Done.
[  142.524216][ T5845] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  142.580819][   T33] audit: type=1326 audit(1755628382.029:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.786" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f890652add9 code=0x7ffc0000
[  142.602708][   T33] audit: type=1326 audit(1755628382.039:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.786" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f890652add9 code=0x7ffc0000
[  142.627307][   T33] audit: type=1326 audit(1755628382.039:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890658ebe9 code=0x7ffc0000
[  142.740031][   T33] audit: type=1326 audit(1755628382.039:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890658ebe9 code=0x7ffc0000
[  142.751124][   T33] audit: type=1326 audit(1755628382.039:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890658ebe9 code=0x7ffc0000
[  142.759991][   T33] audit: type=1326 audit(1755628382.039:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890658ebe9 code=0x7ffc0000
[  142.807923][ T8192] loop1: detected capacity change from 0 to 1024
[  142.828831][ T8193] 9pnet: bogus RREAD count (69 > 41)
[  142.856428][ T8192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.882574][ T8192] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.787: bg 0: block 88: padding at end of block bitmap is not set
[  142.897597][ T8192] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  142.959412][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.342871][ T8207] loop2: detected capacity change from 0 to 512
[  143.347163][ T8207] EXT4-fs: Ignoring removed i_version option
[  143.358347][ T8207] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  143.368122][ T8207] EXT4-fs (loop2): 1 truncate cleaned up
[  143.379022][ T8207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.498782][ T8205] loop1: detected capacity change from 0 to 32768
[  143.520534][ T8205] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  143.535631][ T8205] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  143.644615][ T8205] XFS (loop1): Starting recovery (logdev: internal)
[  143.827790][ T8205] XFS (loop1): Ending recovery (logdev: internal)
[  143.892309][ T5845] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  144.254899][ T8235] loop1: detected capacity change from 0 to 4096
[  144.264157][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.280138][ T8235] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  144.436155][ T8239] loop2: detected capacity change from 0 to 2048
[  144.464571][ T8242] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.217793][ T8276] loop0: detected capacity change from 0 to 32768
[  145.681236][ T8304] loop1: detected capacity change from 0 to 4096
[  145.706175][ T8302] loop0: detected capacity change from 0 to 40427
[  145.709624][ T8302] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  145.712671][ T8302] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  145.723558][ T8302] F2FS-fs (loop0): invalid crc value
[  145.773736][ T8302] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  145.797553][ T8302] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  145.800448][ T8302] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  146.034229][ T8315] loop2: detected capacity change from 0 to 8192
[  146.057059][ T8315] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  146.436521][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  146.506375][ T5312] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  146.596348][    T9] usb 3-1: Using ep0 maxpacket: 8
[  146.599485][    T9] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  146.602326][    T9] usb 3-1: config 0 has no interface number 0
[  146.608851][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  146.612197][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.615333][    T9] usb 3-1: Product: syz
[  146.618546][    T9] usb 3-1: Manufacturer: syz
[  146.620336][    T9] usb 3-1: SerialNumber: syz
[  146.627694][    T9] usb 3-1: config 0 descriptor??
[  146.679176][ T5312] usb 1-1: config 0 interface 0 has no altsetting 0
[  146.681796][ T5312] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  146.684896][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.689851][ T5312] usb 1-1: config 0 descriptor??
[  146.838684][    T9] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[  146.841143][    T9] usb 3-1: No valid video chain found.
[  146.850078][    T9] usb 3-1: USB disconnect, device number 14
[  146.857838][ T5927] udevd[5927]: setting mode of /dev/bus/usb/003/014 to 020664 failed: No such file or directory
[  146.861508][ T5927] udevd[5927]: setting owner of /dev/bus/usb/003/014 to uid=0, gid=0 failed: No such file or directory
[  146.890875][ T8339] loop1: detected capacity change from 0 to 512
[  146.898175][ T8339] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  146.902702][ T8339] EXT4-fs (loop1): blocks per group (42) and clusters per group (32768) inconsistent
[  146.985248][ T8341] loop1: detected capacity change from 0 to 2048
[  147.021018][ T8341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.057341][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.115462][ T5312] zeroplus 0003:0C12:0005.0007: item fetching failed at offset 0/3
[  147.124576][ T5312] zeroplus 0003:0C12:0005.0007: parse failed
[  147.134741][ T5312] zeroplus 0003:0C12:0005.0007: probe with driver zeroplus failed with error -22
[  147.319928][ T5880] usb 1-1: USB disconnect, device number 12
[  147.684531][ T8377] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  147.699295][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.703855][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.825643][ T8387] loop2: detected capacity change from 0 to 128
[  147.915440][ T8390] syz.2.867: attempt to access beyond end of device
[  147.915440][ T8390] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[  147.919703][ T8390] syz.2.867: attempt to access beyond end of device
[  147.919703][ T8390] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[  147.948181][ T8390] syz.2.867: attempt to access beyond end of device
[  147.948181][ T8390] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[  147.953625][ T8390] syz.2.867: attempt to access beyond end of device
[  147.953625][ T8390] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[  147.974537][ T8389] loop1: detected capacity change from 0 to 32768
[  147.979433][ T8389] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.868 (8389)
[  147.996271][ T8389] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  147.999254][ T8389] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  148.002200][ T8389] BTRFS info (device loop1): using free-space-tree
[  148.005541][ T8390] syz.2.867: attempt to access beyond end of device
[  148.005541][ T8390] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[  148.010733][ T8390] syz.2.867: attempt to access beyond end of device
[  148.010733][ T8390] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[  148.016232][ T8390] syz.2.867: attempt to access beyond end of device
[  148.016232][ T8390] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[  148.021042][ T8390] syz.2.867: attempt to access beyond end of device
[  148.021042][ T8390] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[  148.026868][ T8390] syz.2.867: attempt to access beyond end of device
[  148.026868][ T8390] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128
[  148.031758][ T8390] syz.2.867: attempt to access beyond end of device
[  148.031758][ T8390] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128
[  148.065762][ T8392] loop0: detected capacity change from 0 to 8
[  148.216428][ T8415] loop2: detected capacity change from 0 to 16
[  148.232858][ T8415] erofs (device loop2): mounted with root inode @ nid 36.
[  148.430199][ T8419] tipc: Started in network mode
[  148.433183][ T8419] tipc: Node identity @, cluster identity 4711
[  148.597307][ T8419] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  148.728065][ T8423] futex_wake_op: syz.0.874 tries to shift op by 32; fix this program
[  148.818849][ T5845] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  149.193820][ T5312] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  149.644746][ T5312] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.648101][ T5312] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  149.652123][ T5312] usb 1-1: config 1 has no interface number 0
[  149.655027][ T5312] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  149.662509][ T5312] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  149.673328][ T5312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.676628][ T5312] usb 1-1: Product: syz
[  149.678298][ T5312] usb 1-1: Manufacturer: syz
[  149.680107][ T5312] usb 1-1: SerialNumber: syz
[  149.696495][ T5312] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing
[  149.699317][ T5312] cdc_ncm 1-1:1.1: bind() failure
[  149.723582][ T8452] loop1: detected capacity change from 0 to 4096
[  149.728308][ T8452] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  149.745743][ T8452] ntfs3(loop1): ino=19, mi_enum_attr
[  149.747815][ T8452] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  149.762418][ T8452] ntfs3(loop1): failed to convert "c46c" to cp852
[  149.767791][ T8452] ntfs3(loop1): ino=20, mi_enum_attr
[  149.903405][   T51] usb 1-1: USB disconnect, device number 13
[  149.931385][ T8458] netlink: 25 bytes leftover after parsing attributes in process `syz.1.890'.
[  150.051754][ T8464] loop1: detected capacity change from 0 to 512
[  150.078588][ T8464] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  150.125475][ T5845] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  150.256847][ T8467] loop2: detected capacity change from 0 to 32768
[  150.375099][ T8467] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  150.375116][ T8467]   allowing incompatible features above 0.0: (unknown version)
[  150.375121][ T8467]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  150.389051][ T8467] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  150.391940][ T8467] bcachefs (loop2): initializing new filesystem
[  150.399415][ T8467] bcachefs (loop2): going read-write
[  150.405490][ T8467] bcachefs (loop2): marking superblocks
[  150.411619][ T8467] bcachefs (loop2): initializing freespace
[  150.415290][ T8467] bcachefs (loop2): done initializing freespace
[  150.418443][ T8467] bcachefs (loop2): reading snapshots table
[  150.420491][ T8467] bcachefs (loop2): reading snapshots done
[  150.441164][ T8467] bcachefs (loop2): done starting filesystem
[  150.484176][ T8470] loop1: detected capacity change from 0 to 32768
[  150.491707][ T8470] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.895 (8470)
[  150.503478][ T8470] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  150.506733][ T8470] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  150.509918][ T8470] BTRFS info (device loop1): using free-space-tree
[  150.548569][ T5856] bcachefs (loop2): shutting down
[  150.551059][ T5856] bcachefs (loop2): going read-only
[  150.557438][ T5856] bcachefs (loop2): finished waiting for writes to stop
[  150.564571][ T5856] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  150.594392][ T5856] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  150.598149][ T5856] bcachefs (loop2): clean shutdown complete, journal seq 4
[  150.601118][ T5856] bcachefs (loop2): marking filesystem clean
[  150.657689][ T5856] bcachefs (loop2): shutdown complete
[  150.789577][ T5845] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  151.045752][ T8500] loop0: detected capacity change from 0 to 32768
[  151.100568][ T8500] jbd2_journal_init_inode: Cannot locate journal superblock
[  151.103918][ T8500] (syz.0.898,8500,1):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  151.116536][ T8500] (syz.0.898,8500,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  151.120895][ T8500] (syz.0.898,8500,1):ocfs2_check_volume:2432 ERROR: status = -22
[  151.124023][ T8500] (syz.0.898,8500,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  151.133036][ T8500] (syz.0.898,8500,0):ocfs2_fill_super:1177 ERROR: status = -22
[  151.381227][ T8512] loop0: detected capacity change from 0 to 40427
[  151.386954][ T8512] F2FS-fs (loop0): Image doesn't support compression
[  151.389118][ T8512] F2FS-fs (loop0): build fault injection rate: 690
[  151.393435][ T8512] F2FS-fs (loop0): invalid crc value
[  151.436690][ T8512] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  151.441138][ T8512] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  151.862567][ T8523] loop0: detected capacity change from 0 to 1024
[  151.866799][ T8523] EXT4-fs: Ignoring removed mblk_io_submit option
[  151.877908][ T8523] EXT4-fs: Ignoring removed nomblk_io_submit option
[  151.895119][ T8523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.914426][   T33] kauditd_printk_skb: 103 callbacks suppressed
[  151.914949][   T33] audit: type=1326 audit(1755628391.368:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.1.902" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334a78ebe9 code=0x7fc00000
[  151.929008][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.063341][ T8521] loop2: detected capacity change from 0 to 32768
[  152.433168][ T8542] loop2: detected capacity change from 0 to 256
[  152.439574][ T8542] exfat: Deprecated parameter 'utf8'
[  152.477494][ T8542] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  152.905363][ T8550] loop2: detected capacity change from 0 to 2048
[  152.924328][ T8550] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.984163][ T8550] overlayfs: upper fs needs to support d_type.
[  152.999160][ T8550] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  153.001486][ T8550] overlayfs: failed to set xattr on upper
[  153.003361][ T8550] overlayfs: ...falling back to redirect_dir=nofollow.
[  153.005841][ T8550] overlayfs: ...falling back to index=off.
[  153.007681][ T8550] overlayfs: ...falling back to uuid=null.
[  153.087769][ T8546] loop0: detected capacity change from 0 to 32768
[  153.089364][ T5856] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  153.091909][ T8546] ocfs2: Bad value for 'localalloc'
[  153.103321][ T5856] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  153.632966][ T8563] loop0: detected capacity change from 0 to 128
[  153.653416][ T8563] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  153.670108][ T8563] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  153.697553][ T8563] EXT4-fs (loop0): shut down requested (1)
[  153.700776][ T8563] fscrypt (loop0, inode 12): Error -5 getting encryption context
[  153.750293][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  153.762989][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  153.766663][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  153.768953][ T5849] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  153.779773][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  153.783237][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  154.056556][ T5693] bridge_slave_1: left allmulticast mode
[  154.058906][ T5693] bridge_slave_1: left promiscuous mode
[  154.063908][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.100466][ T5693] bridge_slave_0: left allmulticast mode
[  154.111111][ T5693] bridge_slave_0: left promiscuous mode
[  154.116083][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.123102][ T8579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.931'.
[  154.300682][ T8591] loop1: detected capacity change from 0 to 2048
[  154.328315][ T8591] hpfs: hpfs_map_sector(): read error
[  154.447335][ T8593] loop1: detected capacity change from 0 to 16
[  154.451797][ T8593] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  154.689196][ T5693] tipc: Left network mode
[  154.754627][ T8565] chnl_net:caif_netlink_parms(): no params data found
[  154.830386][ T8605] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.090937][ T6010] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  155.268811][ T6010] usb 1-1: Using ep0 maxpacket: 16
[  155.276644][ T6010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  155.280686][ T6010] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  155.283925][ T6010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  155.287113][ T6010] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  155.298585][ T6010] usb 1-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb
[  155.304520][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.307775][ T6010] usb 1-1: Product: syz
[  155.310155][ T6010] usb 1-1: Manufacturer: syz
[  155.312107][ T6010] usb 1-1: SerialNumber: syz
[  155.312977][ T8565] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.316769][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.319441][ T8565] bridge_slave_0: entered allmulticast mode
[  155.330570][ T6010] usb 1-1: config 0 descriptor??
[  155.337187][ T6010] io_ti 1-1:0.0: required endpoints missing
[  155.343339][ T8565] bridge_slave_0: entered promiscuous mode
[  155.373370][ T8565] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.379094][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.388526][ T8565] bridge_slave_1: entered allmulticast mode
[  155.396655][ T8565] bridge_slave_1: entered promiscuous mode
[  155.446939][ T5693] hsr_slave_0: left promiscuous mode
[  155.453643][ T5693] hsr_slave_1: left promiscuous mode
[  155.457890][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.486136][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.565770][ T5880] usb 1-1: USB disconnect, device number 14
[  155.847546][ T5234] Bluetooth: hci2: command tx timeout
[  156.303810][ T5693] team0 (unregistering): Port device team_slave_1 removed
[  156.399841][ T5693] team0 (unregistering): Port device team_slave_0 removed
[  156.511877][ T8627] loop1: detected capacity change from 0 to 32768
[  156.547490][ T8627] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.593454][ T8627] XFS (loop1): Ending clean mount
[  156.620580][ T8627] XFS (loop1): Quotacheck needed: Please wait.
[  156.687949][ T8627] XFS (loop1): Quotacheck: Done.
[  156.758914][ T5845] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.123039][ T8634] netlink: 32 bytes leftover after parsing attributes in process `syz.0.949'.
[  157.147657][ T8565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.168750][ T8565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.208894][ T8646] loop1: detected capacity change from 0 to 512
[  157.229183][ T8646] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  157.251760][ T8646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  157.255404][ T8646] EXT4-fs (loop1): orphan cleanup on readonly fs
[  157.277119][ T8646] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.951: bad orphan inode 267
[  157.286971][ T8646] EXT4-fs (loop1): Remounting filesystem read-only
[  157.307751][ T8646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  157.327834][ T8646] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.951: dx entry: limit 0 != root limit 125
[  157.335583][ T8646] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.951: Corrupt directory, running e2fsck is recommended
[  157.373767][ T8565] team0: Port device team_slave_0 added
[  157.379276][ T8565] team0: Port device team_slave_1 added
[  157.384460][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  157.474182][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.499887][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.515613][ T8565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.523992][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.541509][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.587495][ T8565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.749141][ T8565] hsr_slave_0: entered promiscuous mode
[  157.754825][ T8565] hsr_slave_1: entered promiscuous mode
[  157.761658][ T8565] debugfs: 'hsr0' already exists in 'hsr'
[  157.763903][ T8565] Cannot create hsr debugfs directory
[  157.782526][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'.
[  157.794946][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.958'.
[  157.870167][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'.
[  157.873701][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.958'.
[  157.917274][ T5234] Bluetooth: hci2: command tx timeout
[  157.928378][   T13] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0
[  157.934364][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.965827][ T8672] loop0: detected capacity change from 0 to 1024
[  158.022530][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  158.043338][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  158.050977][ T8674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.961'.
[  158.067545][ T6979] hfsplus: b-tree write err: -5, ino 4
[  158.139834][   T33] audit: type=1400 audit(1755628397.603:158): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=8676 comm="syz.1.963"
[  158.253420][ T8683] loop0: detected capacity change from 0 to 256
[  158.350938][ T8565] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  158.362286][ T8565] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  158.397829][ T8565] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  158.404505][ T8692] loop0: detected capacity change from 0 to 512
[  158.410274][ T8565] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  158.413302][ T8692] EXT4-fs: Ignoring removed i_version option
[  158.418187][ T8692] EXT4-fs: Ignoring removed bh option
[  158.433298][ T8692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.442897][ T8692] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  158.601292][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.660614][ T8565] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.686980][ T8565] 8021q: adding VLAN 0 to HW filter on device team0
[  158.700253][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.703050][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.721023][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.723906][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.787458][ T8565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.927356][ T8565] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.992652][ T8565] veth0_vlan: entered promiscuous mode
[  159.011434][ T8565] veth1_vlan: entered promiscuous mode
[  159.066272][ T8565] veth0_macvtap: entered promiscuous mode
[  159.072227][ T8565] veth1_macvtap: entered promiscuous mode
[  159.106751][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.128090][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.140080][ T5870] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.144536][ T5870] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.148955][ T5870] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.152694][ T5870] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.162488][ T8707] loop1: detected capacity change from 0 to 32768
[  159.170965][ T8707] 
[  159.170965][ T8707]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  159.170965][ T8707] 
[  159.235316][ T5312] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  159.281600][ T8707] blkno = 0, nblocks = 40
[  159.283168][ T8707] ERROR: (device loop1): dbFree: block to be freed is outside the map
[  159.283168][ T8707] 
[  159.298663][ T6979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.306334][ T6979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.344777][ T5845] 
[  159.344777][ T5845]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  159.344777][ T5845] 
[  159.351092][ T6979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.356571][ T5845] 
[  159.356571][ T5845]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  159.356571][ T5845] 
[  159.358149][ T6979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.402941][ T5312] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  159.424474][ T5312] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184
[  159.434810][ T5312] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  159.438387][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.491060][ T5312] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  159.696587][ T5312] gspca_sn9c2028: read1 error -71
[  159.706137][ T5312] gspca_sn9c2028: read1 error -71
[  159.711354][ T5312] gspca_sn9c2028: read1 error -71
[  159.713383][ T5312] sn9c2028 1-1:220.0: probe with driver sn9c2028 failed with error -71
[  159.740272][ T5312] usb 1-1: USB disconnect, device number 15
[  159.994058][ T5234] Bluetooth: hci2: command tx timeout
[  160.657952][ T8771] loop0: detected capacity change from 0 to 32768
[  160.698224][ T8771] ERROR: (device loop0): dbAlloc: the hint is outside the map
[  160.698224][ T8771] 
[  160.712216][ T8771] ialloc: diAlloc returned -5!
[  160.932240][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.990'.
[  161.020149][ T8796] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12
[  161.278640][ T8808] loop0: detected capacity change from 0 to 512
[  161.281685][ T8808] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  161.435211][ T8815] loop0: detected capacity change from 0 to 1024
[  161.450523][ T8815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.476299][ T8815] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.1000: Abort forced by user
[  161.481950][ T8815] EXT4-fs (loop0): Remounting filesystem read-only
[  161.485593][ T8815] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  161.534550][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.076253][ T5234] Bluetooth: hci2: command tx timeout
[  162.361731][ T8832] loop0: detected capacity change from 0 to 32768
[  162.857281][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'.
[  163.075274][ T8851] tmpfs: Bad value for 'mpol'
[  163.113640][ T8849] loop0: detected capacity change from 0 to 4096
[  163.269859][ T8858] loop1: detected capacity change from 0 to 1024
[  163.309660][   T33] audit: type=1800 audit(1755628402.768:159): pid=8858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1016" name="file1" dev="loop1" ino=20 res=0 errno=0
[  163.409583][ T1225] hfsplus: b-tree write err: -5, ino 4
[  164.309730][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  164.446284][ T8886] loop1: detected capacity change from 0 to 512
[  164.478097][    T9] usb 4-1: Using ep0 maxpacket: 16
[  164.488691][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  164.499547][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  164.509510][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  164.515285][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.518504][    T9] usb 4-1: Product: syz
[  164.521083][    T9] usb 4-1: Manufacturer: syz
[  164.523556][    T9] usb 4-1: SerialNumber: syz
[  164.532909][    T9] usb 4-1: config 0 descriptor??
[  164.553282][ T8886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.561087][    T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  164.565146][    T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  164.573917][ T8886] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.576460][ T8890] netlink: 'syz.0.1028': attribute type 4 has an invalid length.
[  164.763407][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.909141][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  164.981724][ T8900] ubi31: attaching mtd0
[  164.991496][ T8900] ubi31: scanning is finished
[  164.993099][ T8900] ubi31: empty MTD device detected
[  165.099935][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.109737][ T8900] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  165.111617][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  165.112467][ T8900] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  165.119711][ T8900] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  165.123534][ T8900] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  165.139404][   T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  165.143318][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  165.146733][ T8900] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  165.150814][ T8900] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  165.154181][ T8900] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2436606924
[  165.159411][   T10] usb 1-1: SerialNumber: syz
[  165.182123][    T9] em28xx 4-1:0.0: chip ID is em2874
[  165.192023][ T8900] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  165.201490][ T8902] ubi31: background thread "ubi_bgt31d" started, PID 8902
[  165.412276][   T10] usb 1-1: 0:2 : does not exist
[  165.437778][ T5907] usb 4-1: USB disconnect, device number 2
[  165.449649][ T5907] em28xx 4-1:0.0: Disconnecting em28xx
[  165.472091][   T10] usb 1-1: USB disconnect, device number 16
[  165.482809][ T5907] em28xx 4-1:0.0: Freeing device
[  165.594679][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  166.301476][ T8914] netlink: 'syz.1.1036': attribute type 7 has an invalid length.
[  166.306062][ T8914] netlink: 'syz.1.1036': attribute type 8 has an invalid length.
[  166.372353][ T8916] loop1: detected capacity change from 0 to 1024
[  166.420078][ T8916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.450938][ T8916] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.1037: missing EA_INODE flag
[  166.460896][ T8916] EXT4-fs (loop1): Remounting filesystem read-only
[  166.531337][ T8910] loop0: detected capacity change from 0 to 32768
[  166.542850][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.547085][ T8910] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  166.559814][ T8910] OCFS2: ERROR (device loop0): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  166.566676][ T8910] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  166.571194][ T8910] OCFS2: File system is now read-only.
[  166.573070][ T8910] (syz.0.1035,8910,0):ocfs2_find_entry_dx:1037 ERROR: status = -30
[  166.641954][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[  166.712836][ T8928] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  166.721536][ T8928] CIFS mount error: No usable UNC path provided in device string!
[  166.721536][ T8928] 
[  166.725231][ T8928] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  167.058835][ T8932] loop0: detected capacity change from 0 to 2048
[  167.063048][ T8932] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  167.070871][ T5927] udevd[5927]: incorrect nilfs2 checksum on /dev/loop0
[  167.073099][ T8932] NILFS (loop0): mounting unchecked fs
[  167.089677][ T5927] udevd[5927]: incorrect nilfs2 checksum on /dev/loop0
[  167.095392][ T8932] NILFS (loop0): recovery complete
[  167.103285][ T8933] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.155837][ T8929] loop1: detected capacity change from 0 to 32768
[  167.165903][ T8929] XFS: attr2 mount option is deprecated.
[  167.167884][ T8929] XFS: attr2 mount option is deprecated.
[  167.177845][ T8929] XFS (loop1): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  167.247708][ T5845] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.311665][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'.
[  167.314933][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'.
[  167.318272][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'.
[  167.527935][ T8958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.728847][ T8969] use of bytesused == 0 is deprecated and will be removed in the future,
[  167.732123][ T8969] use the actual size instead.
[  167.751720][ T8970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1053'.
[  167.752129][ T8964] loop3: detected capacity change from 0 to 32768
[  167.761914][ T8964] (syz.3.1051,8964,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  167.766584][ T8964] (syz.3.1051,8964,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  167.794081][ T8964] JBD2: Ignoring recovery information on journal
[  167.817436][ T8964] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  167.823403][ T8964] (syz.3.1051,8964,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  167.893117][ T8964] (syz.3.1051,8964,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC.
[  167.899031][ T8964] (syz.3.1051,8964,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c
[  167.903734][ T8964] (syz.3.1051,8964,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  167.907655][ T8964] (syz.3.1051,8964,1):ocfs2_quota_read:201 ERROR: status = -5
[  167.910742][ T8964] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota
[  167.914670][ T8964] (syz.3.1051,8964,1):ocfs2_acquire_dquot:890 ERROR: status = -5
[  167.970049][ T8565] ocfs2: Unmounting device (7,3) on (node local)
[  168.240329][ T8988] loop1: detected capacity change from 0 to 4096
[  168.245107][ T8988] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  168.345886][ T1271] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  168.415922][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  168.570728][ T1271] usb 1-1: Using ep0 maxpacket: 32
[  168.590947][ T1271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.667169][ T1271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.694971][ T1271] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  168.714522][ T1271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.767374][ T1271] usb 1-1: config 0 descriptor??
[  168.898219][    T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  168.901939][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.915810][    T9] usb 4-1: config 0 descriptor??
[  168.924685][    T9] gspca_main: sunplus-2.14.0 probing 055f:c420
[  169.257454][ T1271] ft260 0003:0403:6030.0008: unknown main item tag 0x7
[  169.347052][ T8994] syz_tun: entered allmulticast mode
[  169.389411][ T8993] syz_tun: left allmulticast mode
[  169.456592][ T1271] ft260 0003:0403:6030.0008: chip code: 6424 8183
[  169.667297][ T1271] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  169.731133][    T9] gspca_sunplus: reg_w_riv err -71
[  169.733340][    T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  169.753303][    T9] usb 4-1: USB disconnect, device number 3
[  169.801658][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'.
[  169.874588][ T1271] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup
[  169.879652][ T1271] ft260 0003:0403:6030.0008: i2c bus error: 0x22
[  170.084392][ T1271] ft260 0003:0403:6030.0008: failed to reset I2C controller: -71
[  170.116012][ T1271] usb 1-1: USB disconnect, device number 17
[  170.194367][ T5907] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  170.357918][ T5907] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  170.362388][ T5907] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  170.384072][ T5907] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  170.388513][ T5907] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  170.400507][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.412006][ T9002] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  170.566287][ T9010] loop3: detected capacity change from 0 to 32768
[  170.676268][ T9010] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc
[  170.676284][ T9010]   allowing incompatible features above 0.0: (unknown version)
[  170.676289][ T9010]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  170.720073][ T9010] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  170.740111][ T9010] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  170.748634][ T9010] bcachefs (loop3): Version upgrade required:
[  170.748634][ T9010] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  170.748634][ T9010] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  170.748634][ T9010]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  170.777083][    C0] hpet: Lost 1 RTC interrupts
[  170.792508][ T9010] bcachefs (loop3): dropping and reconstructing all alloc info
[  170.821461][ T9010] bcachefs (loop3): btree node read error at btree extents level 0/0
[  170.821519][ T9010]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c0300000000 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
[  170.821532][ T9010]   loop3 node offset 0/16: got wrong btree node: got
[  170.821541][ T9010]   btree=extents level=0 seq c6c25c03258c59c5 1
[  170.821549][ T9010]   min: POS_MIN
[  170.821557][ T9010]   max: SPOS_MAX
[  170.821564][ T9010]   loop3 btree validate error
[  170.821571][ T9010]   flagging btree extents lost data
[  170.821579][ T9010]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  170.821589][ T9010]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  170.821599][ T9010]   running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0)
[  170.821608][ T9010]   ret btree_node_read_err_bad_node
[  170.871580][ T9010] bcachefs (loop3): error reading btree root btree=extents level=0: btree_node_read_error, fixing
[  170.882617][ T9010] bcachefs (loop3): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4099:U32_MAX len 0 ver 0: (unpack error)
[  170.882667][ T9010]   invalid variable length fields, deleting
[  170.935966][ T9010] bcachefs (loop3): check_topology...
[  170.936217][ T9010] bcachefs (loop3): btree root extents unreadable, must recover from scan
[  170.946149][ T9010] bcachefs (loop3): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding
[  170.950709][ T9010] bcachefs (loop3): bch2_check_root(): error restart_recovery
[  170.956325][ T9010] bcachefs (loop3): scan_for_btree_nodes...
[  171.000848][ T9010] bcachefs (loop3): btree node scan found 1 nodes after overwrites
[  171.062925][ T9010]  done
[  171.071919][ T9010] bcachefs (loop3): check_topology...
[  171.076666][ T9010] bcachefs (loop3): btree root extents unreadable, must recover from scan
[  171.118840][ T9010] bcachefs (loop3): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX
[  171.141822][ T9010] bcachefs (loop3): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
[  171.270536][ T9010]  done
[  171.275993][ T9010] bcachefs (loop3): accounting_read... done
[  171.326178][ T9010] bcachefs (loop3): alloc_read... done
[  171.331626][ T9010] bcachefs (loop3): snapshots_read... done
[  171.336192][ T9010] bcachefs (loop3): check_allocations... done
[  171.392566][ T9010] bcachefs (loop3): going read-write
[  171.430360][ T9010] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  171.444750][ T9010] bcachefs (loop3): done starting filesystem
[  171.455527][ T6975] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  171.455569][ T6975]   u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing
[  171.509738][ T6975] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  171.509755][ T6975]   u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing
[  171.538762][ T6975] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  171.538779][ T6975]   u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing
[  171.571625][ T6975] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  171.571643][ T6975]   u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing
[  171.632608][ T8565] bcachefs (loop3): shutting down
[  171.639163][ T8565] bcachefs (loop3): going read-only
[  171.640829][ T8565] bcachefs (loop3): finished waiting for writes to stop
[  171.658038][ T8565] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12
[  171.695605][ T1088] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  171.695622][ T1088]   u64s 5 type deleted 0:40:0 len 0 ver 0, , continuing
[  171.722495][ T8565] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12
[  171.729334][ T8565] bcachefs (loop3): unclean shutdown complete, journal seq 13
[  171.737203][ T8565] bcachefs (loop3): done going read-only, filesystem not clean
[  171.776404][ T8565] bcachefs (loop3): shutdown complete
[  172.010219][ T5907] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  172.021263][ T5907] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input13
[  172.050277][ T5907] usb 2-1: USB disconnect, device number 14
[  172.050366][    C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  172.435814][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'.
[  172.442686][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'.
[  172.446192][ T9069] netlink: 'syz.0.1075': attribute type 15 has an invalid length.
[  172.851742][   T51] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  173.014406][   T51] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.018013][   T51] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  173.019114][ T9095] loop0: detected capacity change from 0 to 8192
[  173.032696][   T51] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  173.035999][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  173.038904][   T51] usb 2-1: SerialNumber: syz
[  173.257990][   T51] usb 2-1: 0:2 : does not exist
[  173.259740][   T51] usb 2-1: unit 5: unexpected type 0x0a
[  173.261399][ T9104] netlink: 'syz.3.1086': attribute type 10 has an invalid length.
[  173.269860][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.275347][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.278815][   T51] usb 2-1: USB disconnect, device number 15
[  173.290863][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.293146][ T9104] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.297290][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.299937][ T9104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.306634][ T9104] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  173.314608][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.435776][ T9109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.784359][ T9105] loop0: detected capacity change from 0 to 32768
[  173.805467][ T9105] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1084 (9105)
[  173.856510][ T9105] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  173.872011][ T9105] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  173.902516][ T9105] BTRFS info (device loop0): using free-space-tree
[  174.204942][ T5849] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  175.038778][ T9146] loop1: detected capacity change from 0 to 1024
[  175.197419][ T9154] loop1: detected capacity change from 0 to 1024
[  175.253432][ T9154] hfsplus: request for non-existent node 16777216 in B*Tree
[  175.264393][ T9154] hfsplus: request for non-existent node 16777216 in B*Tree
[  175.268024][ T9154] hfsplus: request for non-existent node 16777216 in B*Tree
[  175.272300][ T9154] hfsplus: request for non-existent node 16777216 in B*Tree
[  175.575414][ T1225] hfsplus: request for non-existent node 16777216 in B*Tree
[  175.580824][ T1225] hfsplus: request for non-existent node 16777216 in B*Tree
[  175.954940][ T9164] loop1: detected capacity change from 0 to 40427
[  175.969215][ T9164] F2FS-fs (loop1): build fault injection rate: 14
[  175.983346][ T9164] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  176.008672][ T9164] F2FS-fs (loop1): invalid crc value
[  176.018410][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  176.038236][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  176.092622][ T9164] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  176.095811][ T9164] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  176.101709][ T9164] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  176.124932][ T9164] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  176.143298][ T5845] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  176.152674][ T5845] F2FS-fs (loop1): inconsistent node block, node_type:0, nid:13, node_footer[nid:13,ino:3,ofs:191623,cpver:0,blkaddr:0]
[  176.197878][    C1] F2FS-fs (loop1): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[  176.201356][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  176.201368][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.201374][    C1] Call Trace:
[  176.201378][    C1]  <TASK>
[  176.201383][    C1]  dump_stack_lvl+0x189/0x250
[  176.201398][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.201408][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  176.201417][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.201428][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.201443][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  176.201458][    C1]  f2fs_write_end_io+0x886/0xb60
[  176.201472][    C1]  blk_update_request+0x57e/0xe60
[  176.201488][    C1]  blk_mq_end_request+0x3e/0x70
[  176.201524][    C1]  blk_done_softirq+0x10a/0x160
[  176.201534][    C1]  handle_softirqs+0x286/0x870
[  176.201545][    C1]  ? run_ksoftirqd+0x9b/0x100
[  176.201556][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  176.201566][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  176.201575][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  176.201582][    C1]  run_ksoftirqd+0x9b/0x100
[  176.201591][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  176.201603][    C1]  smpboot_thread_fn+0x542/0xa60
[  176.201611][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  176.201623][    C1]  kthread+0x711/0x8a0
[  176.201634][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  176.201642][    C1]  ? __pfx_kthread+0x10/0x10
[  176.201652][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.201662][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.201672][    C1]  ? __pfx_kthread+0x10/0x10
[  176.201682][    C1]  ret_from_fork+0x3fc/0x770
[  176.201693][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  176.201703][    C1]  ? __switch_to_asm+0x39/0x70
[  176.201713][    C1]  ? __switch_to_asm+0x33/0x70
[  176.201722][    C1]  ? __pfx_kthread+0x10/0x10
[  176.201732][    C1]  ret_from_fork_asm+0x1a/0x30
[  176.201749][    C1]  </TASK>
[  176.201753][    C1] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  176.266340][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  176.266353][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.266359][    C1] Call Trace:
[  176.266364][    C1]  <TASK>
[  176.266369][    C1]  dump_stack_lvl+0x189/0x250
[  176.266384][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.266395][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  176.266404][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.266416][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.266431][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  176.266446][    C1]  f2fs_write_end_io+0x886/0xb60
[  176.266461][    C1]  blk_update_request+0x57e/0xe60
[  176.266477][    C1]  blk_mq_end_request+0x3e/0x70
[  176.266506][    C1]  blk_done_softirq+0x10a/0x160
[  176.266523][    C1]  handle_softirqs+0x286/0x870
[  176.266534][    C1]  ? run_ksoftirqd+0x9b/0x100
[  176.266545][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  176.266555][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  176.266565][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  176.266572][    C1]  run_ksoftirqd+0x9b/0x100
[  176.266581][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  176.266593][    C1]  smpboot_thread_fn+0x542/0xa60
[  176.266602][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  176.266613][    C1]  kthread+0x711/0x8a0
[  176.266625][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  176.266633][    C1]  ? __pfx_kthread+0x10/0x10
[  176.266643][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.266653][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.266663][    C1]  ? __pfx_kthread+0x10/0x10
[  176.266674][    C1]  ret_from_fork+0x3fc/0x770
[  176.266684][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  176.266696][    C1]  ? __switch_to_asm+0x39/0x70
[  176.266705][    C1]  ? __switch_to_asm+0x33/0x70
[  176.266715][    C1]  ? __pfx_kthread+0x10/0x10
[  176.266725][    C1]  ret_from_fork_asm+0x1a/0x30
[  176.266742][    C1]  </TASK>
[  176.266746][    C1] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  176.311888][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'.
[  176.312481][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  176.312517][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.312523][    C1] Call Trace:
[  176.312528][    C1]  <TASK>
[  176.312532][    C1]  dump_stack_lvl+0x189/0x250
[  176.312548][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.312558][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  176.312567][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.312578][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.312592][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  176.312608][    C1]  f2fs_write_end_io+0x886/0xb60
[  176.312622][    C1]  blk_update_request+0x57e/0xe60
[  176.312639][    C1]  blk_mq_end_request+0x3e/0x70
[  176.312648][    C1]  blk_done_softirq+0x10a/0x160
[  176.312659][    C1]  handle_softirqs+0x286/0x870
[  176.312669][    C1]  ? run_ksoftirqd+0x9b/0x100
[  176.312681][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  176.312690][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  176.312699][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  176.312707][    C1]  run_ksoftirqd+0x9b/0x100
[  176.312716][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  176.312728][    C1]  smpboot_thread_fn+0x542/0xa60
[  176.312736][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  176.312748][    C1]  kthread+0x711/0x8a0
[  176.312761][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  176.312769][    C1]  ? __pfx_kthread+0x10/0x10
[  176.312779][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.312789][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.312799][    C1]  ? __pfx_kthread+0x10/0x10
[  176.312809][    C1]  ret_from_fork+0x3fc/0x770
[  176.312820][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  176.312831][    C1]  ? __switch_to_asm+0x39/0x70
[  176.312841][    C1]  ? __switch_to_asm+0x33/0x70
[  176.312850][    C1]  ? __pfx_kthread+0x10/0x10
[  176.312860][    C1]  ret_from_fork_asm+0x1a/0x30
[  176.312877][    C1]  </TASK>
[  176.312881][    C1] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  176.403205][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  176.403225][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.403235][    C1] Call Trace:
[  176.403241][    C1]  <TASK>
[  176.403249][    C1]  dump_stack_lvl+0x189/0x250
[  176.403274][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.403291][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  176.403304][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.403322][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.403344][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  176.403370][    C1]  f2fs_write_end_io+0x886/0xb60
[  176.403394][    C1]  blk_update_request+0x57e/0xe60
[  176.403436][    C1]  blk_mq_end_request+0x3e/0x70
[  176.403454][    C1]  blk_done_softirq+0x10a/0x160
[  176.403469][    C1]  handle_softirqs+0x286/0x870
[  176.403582][    C1]  ? run_ksoftirqd+0x9b/0x100
[  176.403600][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  176.403614][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  176.403624][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  176.403631][    C1]  run_ksoftirqd+0x9b/0x100
[  176.403641][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  176.403659][    C1]  smpboot_thread_fn+0x542/0xa60
[  176.403671][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  176.403689][    C1]  kthread+0x711/0x8a0
[  176.403707][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  176.403715][    C1]  ? __pfx_kthread+0x10/0x10
[  176.403726][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.403736][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.403752][    C1]  ? __pfx_kthread+0x10/0x10
[  176.403769][    C1]  ret_from_fork+0x3fc/0x770
[  176.403787][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  176.403801][    C1]  ? __switch_to_asm+0x39/0x70
[  176.403812][    C1]  ? __switch_to_asm+0x33/0x70
[  176.403821][    C1]  ? __pfx_kthread+0x10/0x10
[  176.403831][    C1]  ret_from_fork_asm+0x1a/0x30
[  176.403849][    C1]  </TASK>
[  176.403855][    C1] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  176.464398][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  176.464411][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.464417][    C1] Call Trace:
[  176.464422][    C1]  <TASK>
[  176.464426][    C1]  dump_stack_lvl+0x189/0x250
[  176.464441][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.464451][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  176.464464][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.464505][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.464519][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  176.464535][    C1]  f2fs_write_end_io+0x886/0xb60
[  176.464556][    C1]  blk_update_request+0x57e/0xe60
[  176.464577][    C1]  blk_mq_end_request+0x3e/0x70
[  176.464591][    C1]  blk_done_softirq+0x10a/0x160
[  176.464606][    C1]  handle_softirqs+0x286/0x870
[  176.464616][    C1]  ? run_ksoftirqd+0x9b/0x100
[  176.464628][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  176.464638][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  176.464647][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  176.464654][    C1]  run_ksoftirqd+0x9b/0x100
[  176.464663][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  176.464675][    C1]  smpboot_thread_fn+0x542/0xa60
[  176.464684][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  176.464696][    C1]  kthread+0x711/0x8a0
[  176.464707][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  176.464715][    C1]  ? __pfx_kthread+0x10/0x10
[  176.464725][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.464737][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.464747][    C1]  ? __pfx_kthread+0x10/0x10
[  176.464757][    C1]  ret_from_fork+0x3fc/0x770
[  176.464767][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  176.464778][    C1]  ? __switch_to_asm+0x39/0x70
[  176.464788][    C1]  ? __switch_to_asm+0x33/0x70
[  176.464797][    C1]  ? __pfx_kthread+0x10/0x10
[  176.464807][    C1]  ret_from_fork_asm+0x1a/0x30
[  176.464824][    C1]  </TASK>
[  176.464828][    C1] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  176.531813][ T5845] F2FS-fs (loop1): do_checkpoint failed err:-5, stop checkpoint
[  176.923309][ T9192] loop3: detected capacity change from 0 to 32768
[  176.956472][ T9192] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  176.968725][ T9192] XFS (loop3): Ending clean mount
[  176.989624][ T8565] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  177.060339][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  177.227757][    T9] usb 1-1: Using ep0 maxpacket: 8
[  177.238045][    T9] usb 1-1: config 0 has no interfaces?
[  177.250676][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  177.253573][    T9] usb 1-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  177.257449][    T9] usb 1-1: Product: syz
[  177.267597][    T9] usb 1-1: Manufacturer: syz
[  177.269459][    T9] usb 1-1: SerialNumber: syz
[  177.276661][    T9] usb 1-1: config 0 descriptor??
[  177.455992][ T9218] loop3: detected capacity change from 0 to 32768
[  177.805802][ T6010] usb 1-1: USB disconnect, device number 18
[  178.272139][ T9227] loop1: detected capacity change from 0 to 32768
[  178.425164][ T9227] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  178.425187][ T9227]   allowing incompatible features above 0.0: (unknown version)
[  178.425196][ T9227]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  178.513214][ T9227] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  178.516398][ T9227] bcachefs (loop1): initializing new filesystem
[  178.535703][ T9227] bcachefs (loop1): going read-write
[  178.548800][ T9227] bcachefs (loop1): marking superblocks
[  178.561328][ T9227] bcachefs (loop1): initializing freespace
[  178.607232][ T9227] bcachefs (loop1): done initializing freespace
[  178.611878][ T9227] bcachefs (loop1): reading snapshots table
[  178.614189][ T9227] bcachefs (loop1): reading snapshots done
[  178.681592][ T9227] bcachefs (loop1): done starting filesystem
[  178.727234][ T5845] bcachefs (loop1): shutting down
[  178.728834][ T5845] bcachefs (loop1): going read-only
[  178.730452][ T5845] bcachefs (loop1): finished waiting for writes to stop
[  178.733133][ T5845] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  178.763551][ T5845] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  178.769897][ T5845] bcachefs (loop1): clean shutdown complete, journal seq 4
[  178.773180][ T5845] bcachefs (loop1): marking filesystem clean
[  178.799138][ T9244] loop0: detected capacity change from 0 to 32768
[  178.803252][ T9244] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry user: 1/255 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 3 3 4 5 5 5 5 5 5 6 6 6 6 8 8 10 11 32 33 83 108]
[  178.803252][ T9244] replicas_v0 (size 24):
[  178.803252][ T9244] btree: 1 [0] journal: 1 [0] user: 255 [0 0 0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 2 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 0 0 0 2 
[  178.803380][ T9244] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  178.861975][ T5845] bcachefs (loop1): shutdown complete
[  179.063942][ T9260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.073688][ T9262] loop0: detected capacity change from 0 to 8
[  180.321182][ T9286] loop0: detected capacity change from 0 to 1024
[  180.326520][ T9286] EXT4-fs: Ignoring removed nobh option
[  180.329010][ T9286] EXT4-fs: Ignoring removed bh option
[  180.362882][ T9286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.419959][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.833449][ T9295] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  180.838534][ T9295] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  181.038485][ T9299] loop3: detected capacity change from 0 to 128
[  181.050154][ T9299] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  181.064577][ T9299] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  181.151991][ T8565] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  181.672058][ T9304] loop1: detected capacity change from 0 to 32768
[  181.693899][ T9304] (syz.1.1133,9304,0):ocfs2_parse_param:1357 ERROR: Invalid cluster_stack option
[  181.849227][ T9317] loop0: detected capacity change from 0 to 4096
[  181.898960][ T9317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.047536][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.404571][ T9334] loop0: detected capacity change from 0 to 32768
[  182.437870][ T9334] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  182.451559][ T9334] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  182.495212][ T9334] 
[  182.496197][ T9334] ======================================================
[  182.498602][ T9334] WARNING: possible circular locking dependency detected
[  182.500790][ T9334] syzkaller #0 Not tainted
[  182.502776][ T9334] ------------------------------------------------------
[  182.506446][ T9334] syz.0.1165/9334 is trying to acquire lock:
[  182.508836][ T9334] ffff88802b59dd60 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x320
[  182.513362][ T9334] 
[  182.513362][ T9334] but task is already holding lock:
[  182.516296][ T9334] ffff88802b59ddf8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  182.520662][ T9334] 
[  182.520662][ T9334] which lock already depends on the new lock.
[  182.520662][ T9334] 
[  182.525120][ T9334] 
[  182.525120][ T9334] the existing dependency chain (in reverse order) is:
[  182.528831][ T9334] 
[  182.528831][ T9334] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  182.532148][ T9334]        lock_acquire+0x120/0x360
[  182.534281][ T9334]        down_read+0x46/0x2e0
[  182.536297][ T9334]        ocfs2_init_acl+0x2f9/0x720
[  182.538508][ T9334]        ocfs2_mknod+0x1321/0x2050
[  182.540634][ T9334]        ocfs2_mkdir+0x191/0x440
[  182.542747][ T9334]        vfs_mkdir+0x306/0x510
[  182.544779][ T9334]        do_mkdirat+0x247/0x590
[  182.546879][ T9334]        __x64_sys_mkdir+0x6c/0x80
[  182.549058][ T9334]        do_syscall_64+0xfa/0x3b0
[  182.551186][ T9334]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.553870][ T9334] 
[  182.553870][ T9334] -> #3 (jbd2_handle){++++}-{0:0}:
[  182.556324][ T9334]        lock_acquire+0x120/0x360
[  182.557986][ T9334]        start_this_handle+0x1fa7/0x21c0
[  182.560106][ T9334]        jbd2__journal_start+0x2c1/0x5b0
[  182.562472][ T9334]        jbd2_journal_start+0x2a/0x40
[  182.564744][ T9334]        ocfs2_start_trans+0x376/0x6d0
[  182.567054][ T9334]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  182.569698][ T9334]        ocfs2_dismount_volume+0x201/0x8d0
[  182.571931][ T9334]        generic_shutdown_super+0x135/0x2c0
[  182.574087][ T9334]        kill_block_super+0x44/0x90
[  182.576013][ T9334]        deactivate_locked_super+0xbc/0x130
[  182.577968][ T9334]        cleanup_mnt+0x425/0x4c0
[  182.579600][ T9334]        task_work_run+0x1d4/0x260
[  182.581295][ T9334]        exit_to_user_mode_loop+0xec/0x110
[  182.583214][ T9334]        do_syscall_64+0x2bd/0x3b0
[  182.584932][ T9334]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.587202][ T9334] 
[  182.587202][ T9334] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  182.589931][ T9334]        lock_acquire+0x120/0x360
[  182.591932][ T9334]        down_read+0x46/0x2e0
[  182.593877][ T9334]        ocfs2_start_trans+0x36a/0x6d0
[  182.595864][ T9334]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  182.597904][ T9334]        ocfs2_dismount_volume+0x201/0x8d0
[  182.599821][ T9334]        generic_shutdown_super+0x135/0x2c0
[  182.602122][ T9334]        kill_block_super+0x44/0x90
[  182.604304][ T9334]        deactivate_locked_super+0xbc/0x130
[  182.606614][ T9334]        cleanup_mnt+0x425/0x4c0
[  182.608287][ T9334]        task_work_run+0x1d4/0x260
[  182.609974][ T9334]        exit_to_user_mode_loop+0xec/0x110
[  182.611929][ T9334]        do_syscall_64+0x2bd/0x3b0
[  182.613595][ T9334]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.615697][ T9334] 
[  182.615697][ T9334] -> #1 (sb_internal#3){.+.+}-{0:0}:
[  182.618221][ T9334]        lock_acquire+0x120/0x360
[  182.619859][ T9334]        ocfs2_start_trans+0x26b/0x6d0
[  182.621632][ T9334]        ocfs2_truncate_file+0x643/0x1420
[  182.623557][ T9334]        ocfs2_setattr+0x1520/0x1b40
[  182.625362][ T9334]        notify_change+0xb36/0xe40
[  182.627047][ T9334]        do_truncate+0x1a4/0x220
[  182.628665][ T9334]        path_openat+0x306c/0x3830
[  182.630347][ T9334]        do_filp_open+0x1fa/0x410
[  182.632058][ T9334]        do_sys_openat2+0x121/0x1c0
[  182.633999][ T9334]        __x64_sys_open+0x11e/0x150
[  182.635693][ T9334]        do_syscall_64+0xfa/0x3b0
[  182.637407][ T9334]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.639497][ T9334] 
[  182.639497][ T9334] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  182.642378][ T9334]        validate_chain+0xb9b/0x2140
[  182.644112][ T9334]        __lock_acquire+0xab9/0xd20
[  182.646082][ T9334]        lock_acquire+0x120/0x360
[  182.648167][ T9334]        down_write+0x96/0x1f0
[  182.650195][ T9334]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  182.652931][ T9334]        ocfs2_truncate_file+0xda0/0x1420
[  182.655326][ T9334]        ocfs2_setattr+0x1520/0x1b40
[  182.657551][ T9334]        notify_change+0xb36/0xe40
[  182.659734][ T9334]        do_truncate+0x1a4/0x220
[  182.661850][ T9334]        path_openat+0x306c/0x3830
[  182.664012][ T9334]        do_filp_open+0x1fa/0x410
[  182.666169][ T9334]        do_sys_openat2+0x121/0x1c0
[  182.668363][ T9334]        __x64_sys_open+0x11e/0x150
[  182.670610][ T9334]        do_syscall_64+0xfa/0x3b0
[  182.672756][ T9334]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.675474][ T9334] 
[  182.675474][ T9334] other info that might help us debug this:
[  182.675474][ T9334] 
[  182.679764][ T9334] Chain exists of:
[  182.679764][ T9334]   &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem
[  182.679764][ T9334] 
[  182.684888][ T9334]  Possible unsafe locking scenario:
[  182.684888][ T9334] 
[  182.687541][ T9334]        CPU0                    CPU1
[  182.689676][ T9334]        ----                    ----
[  182.691764][ T9334]   lock(&oi->ip_xattr_sem);
[  182.693641][ T9334]                                lock(jbd2_handle);
[  182.695843][ T9334]                                lock(&oi->ip_xattr_sem);
[  182.698535][ T9334]   lock(&ocfs2_file_ip_alloc_sem_key);
[  182.700662][ T9334] 
[  182.700662][ T9334]  *** DEADLOCK ***
[  182.700662][ T9334] 
[  182.703713][ T9334] 3 locks held by syz.0.1165/9334:
[  182.705669][ T9334]  #0: ffff888021ac0428 (sb_writers#32){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  182.708782][ T9334]  #1: ffff88802b59e0c0 (&sb->s_type->i_mutex_key#42){+.+.}-{4:4}, at: do_truncate+0x171/0x220
[  182.712323][ T9334]  #2: ffff88802b59ddf8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  182.716385][ T9334] 
[  182.716385][ T9334] stack backtrace:
[  182.718589][ T9334] CPU: 0 UID: 0 PID: 9334 Comm: syz.0.1165 Not tainted syzkaller #0 PREEMPT(full) 
[  182.718607][ T9334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.718615][ T9334] Call Trace:
[  182.718621][ T9334]  <TASK>
[  182.718627][ T9334]  dump_stack_lvl+0x189/0x250
[  182.718649][ T9334]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.718666][ T9334]  ? __pfx__printk+0x10/0x10
[  182.718688][ T9334]  ? print_lock_name+0xde/0x100
[  182.718708][ T9334]  print_circular_bug+0x2ee/0x310
[  182.718725][ T9334]  check_noncircular+0x134/0x160
[  182.718736][ T9334]  validate_chain+0xb9b/0x2140
[  182.718756][ T9334]  __lock_acquire+0xab9/0xd20
[  182.718779][ T9334]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  182.718796][ T9334]  lock_acquire+0x120/0x360
[  182.718815][ T9334]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  182.718828][ T9334]  down_write+0x96/0x1f0
[  182.718850][ T9334]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  182.718867][ T9334]  ? __pfx_down_write+0x10/0x10
[  182.718918][ T9334]  ocfs2_try_remove_refcount_tree+0xb6/0x320
[  182.718930][ T9334]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  182.718940][ T9334]  ? up_write+0x1c4/0x420
[  182.718950][ T9334]  ocfs2_truncate_file+0xda0/0x1420
[  182.718965][ T9334]  ? __pfx_ocfs2_truncate_file+0x10/0x10
[  182.718978][ T9334]  ? do_raw_spin_unlock+0x4d/0x240
[  182.718995][ T9334]  ? _raw_spin_unlock+0x28/0x50
[  182.719011][ T9334]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  182.719030][ T9334]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[  182.719044][ T9334]  ? ocfs2_rw_lock+0x13a/0x240
[  182.719055][ T9334]  ? __pfx___dquot_initialize+0x10/0x10
[  182.719065][ T9334]  ? __pfx_ocfs2_rw_lock+0x10/0x10
[  182.719076][ T9334]  ? setattr_prepare+0x1e7/0xac0
[  182.719095][ T9334]  ? jbd2_journal_begin_ordered_truncate+0xbb/0x150
[  182.719119][ T9334]  ocfs2_setattr+0x1520/0x1b40
[  182.719143][ T9334]  ? __pfx_ocfs2_setattr+0x10/0x10
[  182.719159][ T9334]  ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0
[  182.719175][ T9334]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  182.719196][ T9334]  ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0
[  182.719217][ T9334]  ? current_time+0x222/0x370
[  182.719231][ T9334]  ? evm_inode_setattr+0x1b6/0x7d0
[  182.719246][ T9334]  ? __pfx_current_time+0x10/0x10
[  182.719254][ T9334]  ? try_break_deleg+0x79/0x130
[  182.719269][ T9334]  ? __pfx_ocfs2_setattr+0x10/0x10
[  182.719290][ T9334]  notify_change+0xb36/0xe40
[  182.719311][ T9334]  do_truncate+0x1a4/0x220
[  182.719330][ T9334]  ? __pfx_do_truncate+0x10/0x10
[  182.719348][ T9334]  ? apparmor_file_truncate+0x23e/0x2d0
[  182.719363][ T9334]  path_openat+0x306c/0x3830
[  182.719379][ T9334]  ? arch_stack_walk+0xfc/0x150
[  182.719402][ T9334]  ? stack_depot_save_flags+0x40/0x860
[  182.719425][ T9334]  ? __pfx_path_openat+0x10/0x10
[  182.719440][ T9334]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.719462][ T9334]  do_filp_open+0x1fa/0x410
[  182.719475][ T9334]  ? __lock_acquire+0xab9/0xd20
[  182.719490][ T9334]  ? __pfx_do_filp_open+0x10/0x10
[  182.719514][ T9334]  ? _raw_spin_unlock+0x28/0x50
[  182.719530][ T9334]  ? alloc_fd+0x64c/0x6c0
[  182.719553][ T9334]  do_sys_openat2+0x121/0x1c0
[  182.719564][ T9334]  ? __se_sys_futex+0x36f/0x400
[  182.719577][ T9334]  ? __pfx_do_sys_openat2+0x10/0x10
[  182.719595][ T9334]  ? rcu_is_watching+0x15/0xb0
[  182.719609][ T9334]  __x64_sys_open+0x11e/0x150
[  182.719625][ T9334]  do_syscall_64+0xfa/0x3b0
[  182.719645][ T9334]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.719664][ T9334]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.719673][ T9334]  ? exc_page_fault+0x9f/0xf0
[  182.719687][ T9334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.719701][ T9334] RIP: 0033:0x7f890658ebe9
[  182.719716][ T9334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.719730][ T9334] RSP: 002b:00007f89047f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  182.719745][ T9334] RAX: ffffffffffffffda RBX: 00007f89067b5fa0 RCX: 00007f890658ebe9
[  182.719756][ T9334] RDX: 00000000000000a0 RSI: 000000000014927e RDI: 0000200000000180
[  182.719762][ T9334] RBP: 00007f8906611e19 R08: 0000000000000000 R09: 0000000000000000
[  182.719767][ T9334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.719776][ T9334] R13: 00007f89067b6038 R14: 00007f89067b5fa0 R15: 00007ffe97c46a88
[  182.719793][ T9334]  </TASK>
[  182.878818][    C0] hpet: Lost 23 RTC interrupts
[  182.982191][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[  182.986593][ T9342] loop3: detected capacity change from 0 to 32768
[  182.994490][ T9342] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root
[  182.994490][ T9342] 
[  182.998922][ T9342] ERROR: (device loop3): remounting filesystem as read-only
[  183.048934][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  183.215230][    T9] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  183.218274][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.220829][    T9] usb 2-1: Product: syz
[  183.222287][    T9] usb 2-1: Manufacturer: syz
[  183.223832][    T9] usb 2-1: SerialNumber: syz
[  183.226673][    T9] usb 2-1: config 0 descriptor??
[  183.229832][    T9] gspca_main: sunplus-2.14.0 probing 055f:c230
[  184.038143][    T9] gspca_sunplus: reg_r err -71
[  184.040181][    T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  184.044472][    T9] usb 2-1: USB disconnect, device number 16
[  185.970045][ T5850] Bluetooth: hci0: command 0x080f tx timeout
[  185.972829][ T9343] Bluetooth: hci1: command 0x0406 tx timeout

VM DIAGNOSIS:
17:50:44  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000211a RDI=000000000000211b RBP=00000000000003f8 RSP=ffffc90002afe850
R8 =ffff888108170237 R9 =1ffff1102102e046 R10=dffffc0000000000 R11=ffffffff854f0030
R12=dffffc0000000000 R13=ffffffff99af98d2 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f00ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f89047f66c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000182 CR3=00000000273b4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=f32bce4eeb52bb00 RBX=ffffffff819683a8 RCX=f32bce4eeb52bb00 RDX=0000000000000001
RSI=ffffffff8be332e0 RDI=ffffffff819683a8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020010000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005576adb587e8 CR3=000000002a00e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000000000000000
XMM02=0000555560f10006 0000555560f008e0 XMM03=0000555560ee9b04 0000555560ee9b00
XMM04=0000000000000000 0000555560ee8490 XMM05=0000000000000000 0000555560eeb098
XMM06=0000000000000000 0000555560eee5f8 XMM07=8610000290030010 0002800300040000
XMM08=080001800401c708 00080043d8002e01 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
