last executing test programs:

2m25.608012478s ago: executing program 0 (id=1065):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4c71, 0x5, 0x7, 0x6b8, 0x7, 0x10, 0xb357]}}]}]}]}, 0x40}}, 0x0)

2m25.529330671s ago: executing program 0 (id=1070):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@grpjquota}, {@debug}, {@noload}, {@jqfmt_vfsv1}, {@noblock_validity}, {@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@usrjquota}]}, 0xfe, 0x487, &(0x7f0000001240)="$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")

2m25.31513773s ago: executing program 0 (id=1074):
mknodat(0xffffffffffffffff, 0x0, 0x40, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000001000)={0x3000a212})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xad, 0xae, 0x6c, 0x40, 0xbfd, 0x12, 0xccc0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x47, 0x0, 0x2, 0x69, 0xb5, 0x62, 0x0, [], [{{0x9, 0x5, 0x7, 0x2, 0x400, 0x9, 0xd, 0x2}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x2, 0x1}}]}}]}}]}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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")
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
close(r4)
preadv(r4, &(0x7f00000000c0)=[{&(0x7f00000009c0)=""/162, 0xa2}], 0x1, 0x1, 0x10001)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
fallocate(r2, 0x8, 0x4000, 0x4211)
rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0)
r5 = socket(0x200000000000011, 0x2, 0x1)
bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0xfdef, &(0x7f0000005440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffc35, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f000001aa40)=""/102400, 0x19000)
r7 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$read(0xb, r7, 0x0, 0x0)
syz_open_pts(r1, 0x80)

2m22.036076653s ago: executing program 0 (id=1105):
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205)
move_mount(r1, 0x0, r0, 0x0, 0x46)

2m21.810174415s ago: executing program 0 (id=1107):
syz_mount_image$affs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x2014000, &(0x7f0000000740)={[{@reserved={'reserved', 0x3d, 0x4}}, {@root={'root', 0x3d, 0x1}}, {@verbose}, {@bs={'bs', 0x3d, 0x200}}, {@mufs}, {@mufs}, {@bs={'bs', 0x3d, 0x1000}}]}, 0x1, 0x9dc3, &(0x7f0000009ec0)="$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")

2m21.540426334s ago: executing program 0 (id=1111):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="18dba0454bf37357e5fcf9f43951c69f23b20899723c19ab270a9032a6d510b7239971962df24f67f45e0c8fbd3d00cb9e62f00e0adfff4b61315110be6c9a11bc709c6e63a275b609ca4a5ad09a0b3f24eb00", 0x53}, {&(0x7f00000004c0)="99cf548bc23352f0f1906077891fffc5b5814e8d5a87c5951a4ded032653c2fe1a7de9395faf179d7260caeb63e8ff7eaa2a6767869ab5232511c6c0c0996cfd96645de43e50c58e8d506c0c1ae21fc27c13d212c337cabfe1605e0c7dcae86a7bc790c10d77bd6fb810bb7f4d9aa76acbe1f9f412d1ac5dd13fc2bb1501c4df155c698088bb5239d98990a75afa71cb66642bcb922c251cd902c587afde417e64824cdafdd43860d72b6609b519678bedc58395f4a299b837a08527a469bd0871de0dac3943594cd21e42bc369f5a0d2381063a55c5ba0befd3b72a187b05e957818e3b89cbb3b66d7f91847c226aa5528278f5967c", 0xf6}, {&(0x7f0000000180)="4fd3d9cc64f41f1f36898f", 0xb}, {&(0x7f0000000200)="9e25a5209ba5143fe96840eb00020000d0958fd866d32dabf99c01b8e073631d1ae9244ea8839fe5d0c9c75af981144b0bd44176ae", 0x35}, {&(0x7f00000005c0)="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", 0x26f}], 0x5)

2m21.336740472s ago: executing program 32 (id=1111):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="18dba0454bf37357e5fcf9f43951c69f23b20899723c19ab270a9032a6d510b7239971962df24f67f45e0c8fbd3d00cb9e62f00e0adfff4b61315110be6c9a11bc709c6e63a275b609ca4a5ad09a0b3f24eb00", 0x53}, {&(0x7f00000004c0)="99cf548bc23352f0f1906077891fffc5b5814e8d5a87c5951a4ded032653c2fe1a7de9395faf179d7260caeb63e8ff7eaa2a6767869ab5232511c6c0c0996cfd96645de43e50c58e8d506c0c1ae21fc27c13d212c337cabfe1605e0c7dcae86a7bc790c10d77bd6fb810bb7f4d9aa76acbe1f9f412d1ac5dd13fc2bb1501c4df155c698088bb5239d98990a75afa71cb66642bcb922c251cd902c587afde417e64824cdafdd43860d72b6609b519678bedc58395f4a299b837a08527a469bd0871de0dac3943594cd21e42bc369f5a0d2381063a55c5ba0befd3b72a187b05e957818e3b89cbb3b66d7f91847c226aa5528278f5967c", 0xf6}, {&(0x7f0000000180)="4fd3d9cc64f41f1f36898f", 0xb}, {&(0x7f0000000200)="9e25a5209ba5143fe96840eb00020000d0958fd866d32dabf99c01b8e073631d1ae9244ea8839fe5d0c9c75af981144b0bd44176ae", 0x35}, {&(0x7f00000005c0)="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", 0x26f}], 0x5)

55.206837228s ago: executing program 2 (id=1982):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000210a011d29"], 0x38}}, 0x0)

55.069245354s ago: executing program 2 (id=1983):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0xffa1, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee622", 0x2e}], 0x1}, 0x24000044)

54.939503118s ago: executing program 2 (id=1984):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x3}, 0x18)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0x40, 0x15, 0xa0, 0x9, 0x0, 0x7, 0x0})

54.879738896s ago: executing program 2 (id=1986):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)

54.797404978s ago: executing program 2 (id=1987):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8005, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x205171f, 0x2, @discrete={0xc, 0xfffffffc}})

54.48832299s ago: executing program 2 (id=1992):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0)

54.31370879s ago: executing program 33 (id=1992):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0)

918.340555ms ago: executing program 1 (id=2484):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0)

859.159111ms ago: executing program 1 (id=2486):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4f}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d)

809.675471ms ago: executing program 1 (id=2488):
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, 0x0, 0x5c, 0x0)
close(0xffffffffffffffff)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sysinfo(0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000001c0)={[{@grpid}, {@auto_da_alloc}, {@minixdf}, {@noinit_itable}, {@init_itable}]}, 0xff, 0x52e, &(0x7f0000000640)="$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")

613.884999ms ago: executing program 1 (id=2493):
syz_open_dev$vim2m(&(0x7f00000000c0), 0x253, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)

538.660445ms ago: executing program 3 (id=2495):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
writev(r1, &(0x7f0000000640)=[{&(0x7f00000000c0)="a6", 0x1}], 0x1)

418.78743ms ago: executing program 1 (id=2496):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000540)={'vlan1\x00', 0x7ff})

418.380125ms ago: executing program 3 (id=2497):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)="25108a32c7d4bdc542b8c9df6ceb70b094f1e124718e5504a6e20a2895b019f167c9c90e183174336e9df0dec10458f6dae623de224d1419522327262183f661e5c8531eac5b457ac2259030eb2539a1bb2b826d88", 0x55}], 0x1}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[], 0x20}, 0x41)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r0}, 0x38)

418.041075ms ago: executing program 4 (id=2498):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff)
r1 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)

417.77748ms ago: executing program 1 (id=2499):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$eJzs3b9vHFkdAPA3Y4fYIQE7pAgSEisRCQTIslMFHAnHceLYiQkKJEI0m7W9SQxrb2SvEUUK00WiQqJAFBFIdK4iF7ThT6ChzNWR7opr7nRSdD7tzqy9M96V96xd+5L7fIqdnfdrnvc78+ZNMX5xqvZkZaOwslEorRWqS482Lhf+WK1srpZDfEzaHv/U8R2f7vTjPDnpc+/r7O71m79+cDmE/y7//83u7u5uqBsMbU20fP/k42dLrdumOFen3m425Vb7xo/sdyGECwf6VTcQQvjtf0KIQgjX0rTpdDscQjgXkrwHz/7ysNCj3rx8Xb5afLvwfGfy0vz2i503HQtGIfyj8t2fPl798AcDkx/8uEeHBwAAAAAAAAAAAAAAAADgHTd77+79X41PhFdRGNyODr6vO5tuO70fu9sz3+//HwsAAAAAAAAAAAAAAAAAAABfUfvv/xei823e/59Jt1Md6u/+ov99pH/mfnl35sb4RLr+e3Qg/0qa9NG1gTDaZt33/Prv13L1D67/HtJV13vjShRlVqsfCVE81tKPkRDHY2Mh/Ctd+P1idCauVDdqP3lU3Vxb7lk33lnZ+Cer92eiky7o3238p3Ptt49/L33nwNlU33/Yu1PsvZaN/0DHcv/+c9RV/K/n6h1H/Dm6bPyToXS4tcBUMgDU4//XwcPjP5Nrvz/xP7X3bTgUMiNAfQ5TiDrPV8jKxj/5XTNDZ/pDdrr+P8vF/0au/ZMa/7fyNyLaysb/G420oUyJ/et/ND78+r+Za/8k4l/v/5b7f1ey8T+dJGZm1MnP2+34P5trvyX+n/ay3/fjtJ/fijJnwHaUpHf6f3VkZeM/dCB///kv7mr+dytXv//Pf9njNp//msP/j6Lk+Y/2svEf7liu2+t/Llev3+P/VGP+x1Fl43+mkdacOyd3/pHGZ7fxn8+136/4N/o21Iz//njy+ekk/Z/mf13Jxv+bSWLcWmKr8dmY/0WHz/9v59o/iflfvf9bcX+P+r7Ixv9sx3L1+P+vi/v/nVy9/sc/hHFz/SPLxv9cx3KN63/o8Pgv5Or1O/4/7GfjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+A6XQ7EqJ4LLMfx2NjIVxP9y+GM9Fiabm4WKku/WEjhJk0vRDOR48r1cVSpbiyVl0uF0uVSnUphBtp/oUwFG1UqrXiaunpzb22hqMn5dJ6bbFcqoUQZtP074VzzbYWV2qrpachhFt7ed+Oq+tPn5TWissr6z8fHx8fD3N7fRiNyn+qlddqydGT3BDm9+qORC2da2Tf3uvL2ej31c31tVKlkX6npU6lulSqtNRZSPP+Fkaj2vrm2lKpVi5Wqo+bxztJU+l2Zu7eb+7dmTiQ/zBKttPH2y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvqRXkz/7ewhhMNmLQwhTzS9Ru/IvX5evFt8uPN+ZvDS//WLnzanj7S4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBfswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYZf+URoIojgAvxkL/1Qew2rZ7WxXFNHCFcET6DE8jB7FS3gHCwtbCwkkMyRsspAmKcL3NY/dHzPvwTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgINz+zQ8P7ZdRIqT/+OIz9ev79X8vtT3q83nj/YwI7tz9zBc37Rdefe0ll+WXz99nqd/v28vsaxn9bv6GO3JeJ8Wap/Tybmm9m1qvtr3PFJuIqIv+UXKuWm2uwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBk7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZR9G0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/AgAA///+NR/5")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0x470)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

278.606824ms ago: executing program 3 (id=2500):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, 0x0)

278.039273ms ago: executing program 4 (id=2501):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14241313560608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})

219.902363ms ago: executing program 3 (id=2502):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040))

219.691843ms ago: executing program 4 (id=2503):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040200000000806c010000150010001800feffffff09000d2000000401a80074efc22bb31ad49f50a03cb4d92706000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e67c20b278d56cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x0)

150.123608ms ago: executing program 3 (id=2504):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2})

79.689689ms ago: executing program 4 (id=2505):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000002c0)=0x56, r1, 0x0, 0x0, 0x1}}, 0x20)

79.326599ms ago: executing program 3 (id=2506):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0xff, 0x6, 0x7fef, 0x8d5}, 0x24, [0x10400, 0xeba, 0x1, 0xe6c, 0x8, 0x1, 0x5, 0xfff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x26, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x5, 0x7, 0x9, 0xf, 0x7, 0x9, 0x80000000, 0xd, 0xb50, 0x0, 0x800, 0x3, 0x40, 0x2, 0xfffffffe, 0x5, 0x1, 0x24, 0x9, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x5], [0x66ac, 0xfffffff6, 0x4, 0x1, 0x8e, 0x7, 0x80000001, 0x8, 0x2004, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x8000, 0x43, 0x2, 0x5, 0xb, 0x7ff, 0x7ff, 0x5, 0xb, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x3ff, 0x9, 0x6, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x5, 0x81, 0x4b, 0x7d, 0xfffffc2c, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x7], [0x8392, 0x7, 0x10000, 0xd, 0x8000, 0x1, 0x9, 0xe, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfffffff7, 0x4, 0xe, 0x464b, 0x7, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x9, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c7879, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x1, 0x1fc1, 0x9, 0x1, 0x1], [0x10000010, 0x8007, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffbfffd, 0xfffffff8, 0xdaa, 0x4, 0x13, 0x103, 0x10, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x8, 0x6eaf, 0x0, 0x8, 0x5e02, 0x2, 0x7, 0x2, 0x400]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xe)

210.987µs ago: executing program 4 (id=2507):
r0 = semget$private(0x0, 0x7, 0x180)
setresuid(0xee00, 0xee01, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)

0s ago: executing program 4 (id=2508):
r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00')
lseek(r0, 0xff, 0x0)
getdents64(r0, 0xffffffffffffffff, 0x18)

kernel console output (not intermixed with test programs):

0 00 07 00 00 00 01  .....;%.........
[  284.647449][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  284.647461][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  284.647472][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  284.647482][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  284.648342][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  284.690175][ T1090] XFS (loop1): Unmount and run xfs_repair
[  284.692922][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  284.696441][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  284.700017][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  284.703898][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  284.707603][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  284.723036][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  284.726641][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  284.730041][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  284.733353][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  284.737787][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  284.742058][ T1090] XFS (loop1): Unmount and run xfs_repair
[  284.744335][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  284.786230][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  284.789472][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  284.816015][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  284.821957][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  284.829839][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  284.833296][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  284.854483][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  284.866101][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  284.874180][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  284.883228][ T1090] XFS (loop1): Unmount and run xfs_repair
[  284.885802][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  284.891584][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  284.895088][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  284.902220][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  284.905717][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  284.913264][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  284.919174][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  284.922934][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  284.931550][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  284.956351][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  284.960753][ T1090] XFS (loop1): Unmount and run xfs_repair
[  284.962986][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  284.973984][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  284.985845][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  284.989421][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  284.993003][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  285.005201][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  285.030622][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.034129][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.049436][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.110637][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  285.114118][ T1090] XFS (loop1): Unmount and run xfs_repair
[  285.115814][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  285.120628][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  285.123455][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  285.128555][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  285.144245][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  285.156592][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  285.160221][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.163133][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.168221][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.171675][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  285.175536][ T1090] XFS (loop1): Unmount and run xfs_repair
[  285.181354][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  285.184181][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  285.190451][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  285.193752][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  285.199150][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  285.203355][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  285.209217][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.212354][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.220705][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.226233][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  285.230521][ T1090] XFS (loop1): Unmount and run xfs_repair
[  285.232769][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  285.235664][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  285.252285][T11776] loop3: detected capacity change from 0 to 1024
[  285.255585][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  285.268697][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  285.287052][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  285.290502][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  285.293811][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.298021][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.341211][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.355585][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  285.361178][ T1090] XFS (loop1): Unmount and run xfs_repair
[  285.363393][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  285.366281][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  285.373348][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  285.384667][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  285.388455][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  285.392530][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  285.398352][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.402045][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.409901][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.413903][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  285.418501][ T1090] XFS (loop1): Unmount and run xfs_repair
[  285.421186][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  285.423832][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  285.428350][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  285.432263][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  285.437722][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  285.443133][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  285.448367][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.452199][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.457411][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.462064][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  285.467310][ T1090] XFS (loop1): Unmount and run xfs_repair
[  285.469594][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  285.475760][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  285.479973][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  285.492205][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  285.506266][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  285.510038][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  285.513879][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.522493][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.526071][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.530102][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  285.555552][ T1090] XFS (loop1): Unmount and run xfs_repair
[  285.578497][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  285.583585][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  285.629450][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  285.633531][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  285.638485][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  285.642461][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  285.646300][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.655407][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.664322][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.668961][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  285.686939][ T1090] XFS (loop1): Unmount and run xfs_repair
[  285.700096][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  285.705158][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  285.713306][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  285.729115][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  285.732893][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  285.738946][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  285.742646][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.746246][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.749930][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.762819][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  285.767268][ T1090] XFS (loop1): Unmount and run xfs_repair
[  285.769499][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  285.772670][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  285.777240][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  285.781142][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  285.784898][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  285.806060][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  285.822689][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.828287][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.831738][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.839451][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  285.843949][ T1090] XFS (loop1): Unmount and run xfs_repair
[  285.848716][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  285.851798][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  285.855295][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  285.859249][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  285.862667][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  285.866352][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  285.870185][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.873936][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.886316][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.900426][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  285.904956][ T1090] XFS (loop1): Unmount and run xfs_repair
[  285.907642][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  285.911764][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  285.915156][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  285.919976][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  285.922794][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  285.927027][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  285.929952][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.932849][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.937130][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.944054][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  285.949004][ T1090] XFS (loop1): Unmount and run xfs_repair
[  285.950937][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  285.953383][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  285.958095][ T5890] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  285.960709][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  285.970118][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  285.973223][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  285.976172][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  285.979127][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.982271][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.985287][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  285.989715][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  285.993227][ T1090] XFS (loop1): Unmount and run xfs_repair
[  285.995074][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  285.999186][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.002129][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.004998][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.008091][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.010940][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.014315][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.017404][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.020644][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.028863][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.032570][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.034441][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.038268][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.041249][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.044476][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.047985][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.051155][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.056906][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.060346][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.063191][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.068944][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.072678][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.074528][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.077014][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.080052][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.082927][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.085935][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.088894][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.091985][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.094735][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.098931][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.103956][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.108194][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.110617][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.113557][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.121120][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.128422][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.132268][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.132719][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short
[  286.136554][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.142723][ T5890] usb 5-1: not running at top speed; connect to a high speed hub
[  286.142790][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.147634][ T5890] usb 5-1: config 253 has an invalid interface number: 153 but max is 0
[  286.149842][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.153480][ T5890] usb 5-1: config 253 has no interface number 0
[  286.157615][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.166452][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.171672][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.172963][ T5890] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=56.96
[  286.174132][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.174151][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.174163][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.180184][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.188170][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.193187][ T5890] usb 5-1: Product: syz
[  286.195695][ T5890] usb 5-1: Manufacturer: syz
[  286.198882][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.204032][ T5890] usb 5-1: SerialNumber: syz
[  286.216899][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.228763][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.233252][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.237184][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.242659][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.247282][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.249664][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.252679][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.256521][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.260276][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.263923][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.268339][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.271877][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.275548][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.280098][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.285258][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.291825][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.294323][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.297771][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.301661][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.309068][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.312769][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.316811][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.320146][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.323383][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.327106][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.333161][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.339349][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.341729][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.344700][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.348309][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.351844][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.355347][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.359761][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.363364][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.367438][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.371075][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.376261][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.381187][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.383777][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.387250][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.391131][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.395297][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.400671][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.404307][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.411227][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.415397][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.419600][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.431942][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.447101][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.449654][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.454098][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.456309][ T5890] usbhid 5-1:253.153: couldn't find an input interrupt endpoint
[  286.460869][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.465010][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.469292][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.473695][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.480730][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.484832][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.490045][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.490586][ T5890] usb 5-1: USB disconnect, device number 3
[  286.494630][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.502433][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.504881][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.519780][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.525222][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.530198][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.534077][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.539070][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.562282][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.568944][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.572670][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.584475][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.589371][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.591864][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.595024][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.599110][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.602881][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.606684][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.615336][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.621520][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.625305][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.629377][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.635843][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.640306][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.642705][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.646821][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.650601][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.654091][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.657929][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.661581][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.665315][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.669443][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.673034][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.678485][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.683406][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.686139][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.689183][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.692932][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.704754][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.708850][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.724165][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.730965][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.734760][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.746054][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.753356][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.759401][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.761686][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.764375][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.769878][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.772728][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.777090][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.780179][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.783320][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.786689][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.790465][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.795382][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.800118][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.802495][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.805420][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.810210][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.814054][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.822766][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.826881][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.830465][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.834000][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.838898][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.845263][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.852666][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.858664][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.866967][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.870669][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.874172][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.878930][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.882870][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.886884][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.891170][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.894957][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.905956][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.910562][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.913260][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.919367][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.923174][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.927235][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.931003][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.934719][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.938938][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.942610][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.946583][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.953308][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  286.958395][ T1090] XFS (loop1): Unmount and run xfs_repair
[  286.960840][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.963797][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  286.967564][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  286.971207][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  286.974865][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  286.978897][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  286.982550][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.986441][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.990048][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.996789][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  287.006129][ T1090] XFS (loop1): Unmount and run xfs_repair
[  287.008648][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  287.011580][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  287.016429][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  287.023299][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  287.027486][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  287.031077][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  287.036305][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.040835][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.044552][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.054652][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  287.061080][ T1090] XFS (loop1): Unmount and run xfs_repair
[  287.063403][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  287.066444][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  287.069709][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  287.072909][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  287.077836][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  287.081029][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  287.084201][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.089067][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.092872][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.101940][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  287.105969][ T1090] XFS (loop1): Unmount and run xfs_repair
[  287.108203][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  287.110942][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  287.114075][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  287.123807][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  287.129729][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  287.133387][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  287.142323][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.146300][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.150028][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.158906][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  287.163568][ T1090] XFS (loop1): Unmount and run xfs_repair
[  287.167045][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  287.170672][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  287.174359][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  287.178675][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  287.182370][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  287.186277][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  287.189956][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.193535][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.197358][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.201876][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  287.206789][ T1090] XFS (loop1): Unmount and run xfs_repair
[  287.209201][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  287.212187][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  287.215973][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  287.219577][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  287.223307][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  287.230718][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  287.234449][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.240616][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.245209][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.250225][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  287.253958][ T1090] XFS (loop1): Unmount and run xfs_repair
[  287.256685][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  287.259790][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  287.263043][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  287.266327][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  287.269611][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  287.273006][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  287.276560][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.279905][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.283222][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.292882][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  287.303837][ T1090] XFS (loop1): Unmount and run xfs_repair
[  287.307656][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  287.310716][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  287.314696][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  287.333474][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  287.347334][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  287.350935][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  287.354591][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.370127][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.373747][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.396431][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  287.401134][ T1090] XFS (loop1): Unmount and run xfs_repair
[  287.403560][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  287.407385][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  287.410849][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  287.414778][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  287.418773][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  287.422211][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  287.427550][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.445794][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.449385][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.460878][ T1090] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  287.477390][ T1090] XFS (loop1): Unmount and run xfs_repair
[  287.479748][ T1090] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  287.482783][ T1090] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  287.486673][ T1090] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  287.490287][ T1090] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  287.493958][ T1090] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  287.498573][ T1090] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  287.502063][ T1090] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.505857][ T1090] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.508912][ T1090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.518740][ T5859] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  287.535180][ T5859] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  287.855811][ T5890] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  288.035643][   T10] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  288.036295][ T5890] usb 5-1: Using ep0 maxpacket: 8
[  288.058883][ T5890] usb 5-1: config 64 has an invalid interface number: 45 but max is 0
[  288.070116][ T5890] usb 5-1: config 64 has no interface number 0
[  288.073227][ T5890] usb 5-1: config 64 interface 45 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  288.082961][ T5890] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 0.a1
[  288.087782][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.091104][ T5890] usb 5-1: Product: syz
[  288.092874][ T5890] usb 5-1: Manufacturer: syz
[  288.094866][ T5890] usb 5-1: SerialNumber: syz
[  288.192149][   T10] usb 2-1: config index 0 descriptor too short (expected 61256, got 72)
[  288.199411][   T10] usb 2-1: config 1 has an invalid interface number: 0 but max is -1
[  288.203354][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  288.208174][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 0
[  288.211720][   T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  288.218739][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  288.221669][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  288.224217][   T10] usb 2-1: SerialNumber: syz
[  288.237289][   T10] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  288.240101][   T10] cdc_acm 2-1:1.0: This needs exactly 3 endpoints
[  288.242449][   T10] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22
[  288.330618][ T5890] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2
[  288.338786][ T5890] usb 5-1: USB disconnect, device number 4
[  288.449593][   T24] usb 2-1: USB disconnect, device number 36
[  289.118853][T11805] loop4: detected capacity change from 0 to 32768
[  289.225306][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'.
[  289.256519][T11805] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  289.256543][T11805]   allowing incompatible features above 0.0: (unknown version)
[  289.256553][T11805]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  289.299488][T11805] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  289.303072][T11805] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  289.306701][T11805] bcachefs (loop4): Version upgrade required:
[  289.306701][T11805] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  289.306701][T11805] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  289.306701][T11805]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  289.335812][    C1] vkms_vblank_simulate: vblank timer overrun
[  289.357785][T11805] bcachefs (loop4): dropping and reconstructing all alloc info
[  289.394909][T11805] bcachefs (loop4): accounting_read... done
[  289.404004][T11805] bcachefs (loop4): alloc_read... done
[  289.415175][T11805] bcachefs (loop4): snapshots_read...
[  289.415958][T11834] comedi comedi0: dac02: I/O port conflict (0xee,8)
[  289.429282][T11805]  done
[  289.430390][T11805] bcachefs (loop4): check_allocations... done
[  289.472580][T11805] bcachefs (loop4): going read-write
[  289.474553][T11805] bcachefs (loop4): insufficient writeable journal devices available: have 0, need 1
[  289.474553][T11805] rw journal devs:
[  289.520825][T11805] bcachefs (loop4): done starting filesystem
[  289.659070][T11457] bcachefs (loop4): shutting down
[  289.662721][T11457] bcachefs (loop4): going read-only
[  289.666722][T11457] bcachefs (loop4): finished waiting for writes to stop
[  289.682637][T11457] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10
[  289.695728][T11457] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10
[  289.714030][T11457] bcachefs (loop4): unclean shutdown complete, journal seq 10
[  289.723721][T11457] bcachefs (loop4): done going read-only, filesystem not clean
[  289.805775][T11457] bcachefs (loop4): shutdown complete
[  290.285498][   T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  290.438004][   T24] usb 4-1: Using ep0 maxpacket: 16
[  290.447459][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  290.452185][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  290.459958][   T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  290.463735][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.467534][   T24] usb 4-1: Product: syz
[  290.469348][   T24] usb 4-1: Manufacturer: syz
[  290.471215][   T24] usb 4-1: SerialNumber: syz
[  290.476173][   T24] usb 4-1: config 0 descriptor??
[  290.482199][   T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  290.486523][   T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  290.657169][T11871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2107'.
[  290.693102][T11871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2107'.
[  290.888967][T11875] netlink: 'syz.1.2109': attribute type 1 has an invalid length.
[  290.892425][T11875] netlink: 'syz.1.2109': attribute type 4 has an invalid length.
[  290.896155][T11875] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2109'.
[  291.087949][   T24] em28xx 4-1:0.0: chip ID is em2874
[  291.236076][ T5919] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  291.264003][T11884] loop4: detected capacity change from 0 to 256
[  291.274999][T11884] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  291.286612][T11884] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  291.298953][   T24] usb 4-1: USB disconnect, device number 11
[  291.302748][T11884] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  291.306341][   T24] em28xx 4-1:0.0: Disconnecting em28xx
[  291.339410][   T24] em28xx 4-1:0.0: Freeing device
[  291.413522][ T5919] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.422509][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0
[  291.428309][ T5919] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  291.438130][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.454583][ T5919] usb 2-1: config 0 descriptor??
[  291.610765][   T33] audit: type=1326 audit(1755079891.424:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11893 comm="syz.4.2117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f518ebe9 code=0x7ffc0000
[  291.622128][   T33] audit: type=1326 audit(1755079891.424:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11893 comm="syz.4.2117" exe="/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f99f518ebe9 code=0x7ffc0000
[  291.634762][   T33] audit: type=1326 audit(1755079891.424:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11893 comm="syz.4.2117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f518ebe9 code=0x7ffc0000
[  291.648755][   T33] audit: type=1326 audit(1755079891.424:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11893 comm="syz.4.2117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f518ebe9 code=0x7ffc0000
[  291.693442][T11896] team_slave_0: entered promiscuous mode
[  291.695962][T11896] team_slave_1: entered promiscuous mode
[  291.942230][ T5919] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.000E/input/input15
[  292.199180][ T5919] sony 0003:054C:03D5.000E: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0
[  292.225631][ T5919] usb 2-1: USB disconnect, device number 37
[  293.230251][T11945] loop1: detected capacity change from 0 to 1764
[  293.377052][T11934] loop4: detected capacity change from 0 to 32768
[  293.402223][T11934] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2129 (11934)
[  293.426363][T11934] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  293.429615][T11934] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  293.544722][T11934] BTRFS info (device loop4): rebuilding free space tree
[  293.598389][T11934] BTRFS info (device loop4): disabling free space tree
[  293.602588][T11934] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  293.615175][T11934] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  293.647705][T11981] loop3: detected capacity change from 0 to 128
[  293.669236][   T33] audit: type=1800 audit(1755079893.484:51): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2139" name="file2" dev="loop3" ino=1048682 res=0 errno=0
[  293.679130][T11981] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  293.683201][T11981] FAT-fs (loop3): Filesystem has been set read-only
[  293.705844][   T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  293.708855][T11981] syz.3.2139: attempt to access beyond end of device
[  293.708855][T11981] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  293.720096][T11981] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  293.723682][T11981] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  293.738265][T11981] syz.3.2139: attempt to access beyond end of device
[  293.738265][T11981] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  293.749961][T11457] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  293.765198][T11981] syz.3.2139: attempt to access beyond end of device
[  293.765198][T11981] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  293.789662][T11981] syz.3.2139: attempt to access beyond end of device
[  293.789662][T11981] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  293.867243][   T10] usb 2-1: Using ep0 maxpacket: 32
[  293.873431][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  293.882105][   T10] usb 2-1: config 5 has an invalid interface number: 114 but max is 0
[  293.896726][T11981] syz.3.2139: attempt to access beyond end of device
[  293.896726][T11981] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  293.902540][T11981] syz.3.2139: attempt to access beyond end of device
[  293.902540][T11981] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  293.908324][   T10] usb 2-1: config 5 has no interface number 0
[  293.910964][   T10] usb 2-1: config 5 interface 114 has no altsetting 0
[  293.946198][T11981] syz.3.2139: attempt to access beyond end of device
[  293.946198][T11981] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  293.951423][T11981] syz.3.2139: attempt to access beyond end of device
[  293.951423][T11981] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  293.957224][   T10] usb 2-1: New USB device found, idVendor=1b3d, idProduct=9316, bcdDevice=28.00
[  293.960893][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.963984][   T10] usb 2-1: Product: syz
[  293.977808][   T10] usb 2-1: Manufacturer: syz
[  293.979778][   T10] usb 2-1: SerialNumber: syz
[  294.006513][T11981] syz.3.2139: attempt to access beyond end of device
[  294.006513][T11981] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  294.017271][T11983] syz.3.2139: attempt to access beyond end of device
[  294.017271][T11983] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128
[  294.045513][T11983] Buffer I/O error on dev loop3, logical block 2065, async page read
[  294.057440][T11983] Buffer I/O error on dev loop3, logical block 2066, async page read
[  294.067644][T11983] Buffer I/O error on dev loop3, logical block 2067, async page read
[  294.082441][T11983] Buffer I/O error on dev loop3, logical block 2068, async page read
[  294.092614][T11983] Buffer I/O error on dev loop3, logical block 2069, async page read
[  294.114613][T11983] Buffer I/O error on dev loop3, logical block 2070, async page read
[  294.125234][T11983] Buffer I/O error on dev loop3, logical block 2071, async page read
[  294.133137][T11983] Buffer I/O error on dev loop3, logical block 2072, async page read
[  294.187077][T11981] Buffer I/O error on dev loop3, logical block 2065, async page read
[  294.205931][T11981] Buffer I/O error on dev loop3, logical block 2066, async page read
[  294.232950][   T10] ftdi_sio 2-1:5.114: FTDI USB Serial Device converter detected
[  294.245738][   T10] usb 2-1: Detected FT2233HP
[  294.248093][   T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  294.251283][   T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  294.256589][   T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  294.281380][   T10] usb 2-1: USB disconnect, device number 38
[  294.287808][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  294.293872][   T10] ftdi_sio 2-1:5.114: device disconnected
[  294.510635][T12001] loop4: detected capacity change from 0 to 512
[  294.604111][T12001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  294.635917][T12008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2144'.
[  294.652674][T12008] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  294.699183][T11457] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.870515][T12020] netlink: 'syz.1.2147': attribute type 2 has an invalid length.
[  295.227247][ T5313] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  295.252804][T12045] loop4: detected capacity change from 0 to 1024
[  295.266628][T12045] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  295.302419][T12045] hfsplus: filesystem is marked journaled, leaving read-only.
[  295.387959][ T5313] usb 4-1: Using ep0 maxpacket: 32
[  295.412287][ T5313] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  295.418479][ T5313] usb 4-1: config 0 has no interface number 0
[  295.428518][ T5313] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  295.432142][ T5313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.452842][ T5313] usb 4-1: Product: syz
[  295.454585][ T5313] usb 4-1: Manufacturer: syz
[  295.457437][ T5313] usb 4-1: SerialNumber: syz
[  295.467860][ T5313] usb 4-1: config 0 descriptor??
[  295.485260][ T5313] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  295.622251][T12053] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2162'.
[  295.689122][ T5313] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  295.697026][ T5313] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  295.894787][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  295.960048][T12057] loop1: detected capacity change from 0 to 32768
[  296.048908][   T24] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  296.052521][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.067147][   T24] usb 5-1: Product: syz
[  296.074687][   T24] usb 5-1: Manufacturer: syz
[  296.076640][   T24] usb 5-1: SerialNumber: syz
[  296.083135][   T24] usb 5-1: config 0 descriptor??
[  296.092268][   T24] gspca_main: sunplus-2.14.0 probing 055f:c230
[  296.095585][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  296.099103][ T5313] usb 4-1: USB disconnect, device number 12
[  296.115111][ T5313] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  296.136062][ T5313] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  296.156491][ T5313] quatech2 4-1:0.51: device disconnected
[  296.426347][T12069] loop1: detected capacity change from 0 to 256
[  296.437897][T12069] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  296.794018][T12083] loop1: detected capacity change from 0 to 512
[  296.833767][T12083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.847709][T12083] ext4 filesystem being mounted at /735/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.910833][ T5859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.111074][   T24] usb 5-1: USB disconnect, device number 5
[  297.134608][ T5313] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  297.283441][T12097] loop1: detected capacity change from 0 to 32768
[  297.297286][T12097] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt
[  297.297286][T12097] 
[  297.297427][ T5313] usb 4-1: config 0 has an invalid interface number: 237 but max is 0
[  297.305133][   T33] audit: type=1800 audit(1755079897.105:52): pid=12097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2178" name="file1" dev="loop1" ino=4 res=0 errno=0
[  297.306285][T12097] ERROR: (device loop1): remounting filesystem as read-only
[  297.315315][T12097] xtLookup: xtSearch returned -5
[  297.326883][T12097] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt
[  297.326883][T12097] 
[  297.330120][ T5313] usb 4-1: config 0 has no interface number 0
[  297.330695][T12097] xtLookup: xtSearch returned -5
[  297.332643][ T5313] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  297.337002][T12097] ERROR: (device loop1): xtTruncate: xt_getpage: xtree page corrupt
[  297.337002][T12097] 
[  297.346386][ T5313] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  297.351167][ T5313] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  297.356066][ T5313] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  297.362110][ T5313] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[  297.366590][ T5313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.370361][ T5313] usb 4-1: Product: syz
[  297.372319][ T5313] usb 4-1: Manufacturer: syz
[  297.376377][ T5313] usb 4-1: SerialNumber: syz
[  297.386599][ T5313] usb 4-1: config 0 descriptor??
[  297.416047][ T5313] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  297.422192][ T5313] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input16
[  297.640104][ T5313] usb 4-1: USB disconnect, device number 13
[  297.727735][T12107] loop4: detected capacity change from 0 to 512
[  297.753226][T12107] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2183: bg 0: block 5: invalid block bitmap
[  297.780012][T12107] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  297.790579][T12107] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2183: invalid indirect mapped block 3 (level 2)
[  297.800560][T12107] EXT4-fs (loop4): 1 orphan inode deleted
[  297.802976][T12107] EXT4-fs (loop4): 1 truncate cleaned up
[  297.809004][T12107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.809259][T12112] lo speed is unknown, defaulting to 1000
[  297.824892][T12112] lo speed is unknown, defaulting to 1000
[  297.831564][T12112] lo speed is unknown, defaulting to 1000
[  297.847786][T12112] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  297.856186][T12112] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  297.868118][T11457] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.916284][T12112] lo speed is unknown, defaulting to 1000
[  297.929582][T12112] lo speed is unknown, defaulting to 1000
[  297.947523][T12112] lo speed is unknown, defaulting to 1000
[  298.302885][ T9064] cgroup: fork rejected by pids controller in /syz3
[  298.598967][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.683500][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.747632][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.853172][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.075025][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  299.083844][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  299.087998][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  299.093769][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  299.098354][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  299.137434][   T13] bridge0: port 3(batadv0) entered disabled state
[  299.141440][   T13] bridge_slave_1: left allmulticast mode
[  299.154301][   T13] bridge_slave_1: left promiscuous mode
[  299.157759][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.181528][   T13] bridge_slave_0: left allmulticast mode
[  299.183738][   T13] bridge_slave_0: left promiscuous mode
[  299.188243][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.470680][T12160] loop4: detected capacity change from 0 to 40427
[  299.567272][T12160] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  299.575604][T12160] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  299.902040][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2212'.
[  299.906283][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2212'.
[  300.026646][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.035051][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.040550][   T13] bond0 (unregistering): Released all slaves
[  300.200280][   T13] bond1 (unregistering): (slave batadv1): Releasing active interface
[  300.207935][   T13] bond1 (unregistering): Released all slaves
[  300.340157][   T13] IPVS: stopping master sync thread 11459 ...
[  300.664209][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  300.710939][   T13] hsr_slave_0: left promiscuous mode
[  300.715065][   T13] hsr_slave_1: left promiscuous mode
[  300.717926][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.720803][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.727018][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.729903][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.752874][   T13] veth1_macvtap: left promiscuous mode
[  300.755725][   T13] veth0_macvtap: left promiscuous mode
[  300.758118][   T13] veth1_vlan: left promiscuous mode
[  300.760363][   T13] veth0_vlan: left promiscuous mode
[  300.814092][   T10] usb 5-1: Using ep0 maxpacket: 8
[  300.826474][   T10] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  300.829831][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  300.841869][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  300.846132][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  300.850586][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  300.875146][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  300.881080][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  300.885237][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.100956][   T10] usb 5-1: GET_CAPABILITIES returned 0
[  301.103355][   T10] usbtmc 5-1:16.0: can't read capabilities
[  301.159849][   T55] Bluetooth: hci1: command tx timeout
[  301.324357][    C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  301.341797][T12187] usbtmc 5-1:16.0: Unable to send data, error -71
[  301.350146][   T10] usb 5-1: USB disconnect, device number 6
[  301.381929][T12202] loop1: detected capacity change from 0 to 1024
[  301.391514][T12202] hfsplus: failed to load root directory
[  301.558036][   T13] team0 (unregistering): Port device team_slave_1 removed
[  301.630078][   T13] team0 (unregistering): Port device team_slave_0 removed
[  302.331404][T12161] chnl_net:caif_netlink_parms(): no params data found
[  302.376653][T12217] trusted_key: encrypted_key: key trusted:syz not found
[  302.607531][T12161] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.627035][T12161] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.644018][T12161] bridge_slave_0: entered allmulticast mode
[  302.666465][T12161] bridge_slave_0: entered promiscuous mode
[  302.678701][T12161] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.702686][T12161] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.711758][T12161] bridge_slave_1: entered allmulticast mode
[  302.722826][T12161] bridge_slave_1: entered promiscuous mode
[  302.811842][T12161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.834660][T12161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.883415][T12233] nr0: tun_chr_ioctl cmd 1074554389
[  302.950889][T12161] team0: Port device team_slave_0 added
[  302.966105][T12161] team0: Port device team_slave_1 added
[  302.987519][T12227] loop1: detected capacity change from 0 to 32768
[  303.008211][T12227] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  303.038773][T12161] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.041021][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.049179][T12161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.055172][ T5859] (syz-executor,5859,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  303.055755][T12161] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.065615][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.077013][T12161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.078321][ T5859] ocfs2: Unmounting device (7,1) on (node local)
[  303.235047][   T55] Bluetooth: hci1: command tx timeout
[  303.235630][T12161] hsr_slave_0: entered promiscuous mode
[  303.243445][T12161] hsr_slave_1: entered promiscuous mode
[  303.246888][T12161] debugfs: 'hsr0' already exists in 'hsr'
[  303.249183][T12161] Cannot create hsr debugfs directory
[  303.289813][T12249] loop1: detected capacity change from 0 to 512
[  303.330767][T12249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.339644][T12249] ext4 filesystem being mounted at /772/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  303.365033][ T5919] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  303.392326][ T5859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.525116][ T5919] usb 5-1: Using ep0 maxpacket: 32
[  303.532909][ T5919] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  303.540429][ T5919] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  303.554921][ T5919] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  303.558533][ T5919] usb 5-1: config 1 has no interface number 0
[  303.561000][ T5919] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  303.576612][ T5919] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  303.581619][ T5919] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  303.595050][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.621899][ T5919] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  303.841734][ T5919] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  304.079791][T12242] loop4: detected capacity change from 0 to 1024
[  304.082883][T12242] EXT4-fs: Ignoring removed mblk_io_submit option
[  304.129986][T12242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.135759][T12161] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  304.162366][T12161] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  304.178077][T12161] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  304.190339][T12161] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  304.278542][T12161] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.304977][T12161] 8021q: adding VLAN 0 to HW filter on device team0
[  304.313533][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.316576][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.330669][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.333791][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.370758][ T5904] usb 5-1: USB disconnect, device number 7
[  304.402417][ T5904] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  304.405843][ T5313] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  304.545497][T12161] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.558553][ T5313] usb 2-1: Using ep0 maxpacket: 8
[  304.565738][ T5313] usb 2-1: config index 0 descriptor too short (expected 1821, got 853)
[  304.571397][ T5313] usb 2-1: config 0 has an invalid interface number: 103 but max is 2
[  304.582271][ T5313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  304.585855][ T5313] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  304.589182][ T5313] usb 2-1: config 0 has no interface number 1
[  304.591116][ T5313] usb 2-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  304.602484][T12161] veth0_vlan: entered promiscuous mode
[  304.605118][ T5313] usb 2-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  304.608965][ T5313] usb 2-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x8, skipping
[  304.618131][T12161] veth1_vlan: entered promiscuous mode
[  304.625866][ T5313] usb 2-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[  304.629815][ T5313] usb 2-1: config 0 interface 103 has no altsetting 0
[  304.641445][ T5313] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4
[  304.654753][T12161] veth0_macvtap: entered promiscuous mode
[  304.659406][ T5313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.662607][ T5313] usb 2-1: Product: syz
[  304.665620][ T5313] usb 2-1: Manufacturer: syz
[  304.667485][ T5313] usb 2-1: SerialNumber: syz
[  304.673448][T12161] veth1_macvtap: entered promiscuous mode
[  304.686339][ T5313] usb 2-1: config 0 descriptor??
[  304.718041][T12161] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.732955][T12161] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.758927][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.762680][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.775832][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.780576][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.961122][ T5313] videodev: could not get a free minor
[  304.963437][ T5313] dsbr100 2-1:0.0: couldn't register video device
[  304.972515][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.977197][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.983064][T11457] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.999400][ T5313] dsbr100 2-1:0.0: probe with driver dsbr100 failed with error -23
[  305.035975][ T5313] usb 2-1: USB disconnect, device number 39
[  305.078711][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.081741][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.182537][T12314] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2241'.
[  305.206712][T12314] loop4: detected capacity change from 0 to 512
[  305.255794][T12314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.259905][T12314] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.287437][T11457] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.308163][T12322] netlink: 376 bytes leftover after parsing attributes in process `syz.3.2242'.
[  305.315350][   T55] Bluetooth: hci1: command tx timeout
[  305.423348][T12328] loop4: detected capacity change from 0 to 2048
[  305.456485][T12331] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  305.500732][T12331] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  305.523033][T12331] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  305.532288][T12334] loop1: detected capacity change from 0 to 4096
[  305.544857][T12337] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  305.567028][T12331] Remounting filesystem read-only
[  305.572925][   T33] audit: type=1800 audit(1755079905.386:53): pid=12334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2248" name="file1" dev="loop1" ino=15 res=0 errno=0
[  305.605956][   T33] audit: type=1326 audit(1755079905.426:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.3.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690d98ebe9 code=0x7ffc0000
[  305.625632][T11457] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  305.647851][   T33] audit: type=1326 audit(1755079905.436:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.3.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690d98ebe9 code=0x7ffc0000
[  305.690069][   T33] audit: type=1326 audit(1755079905.436:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.3.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f690d98ebe9 code=0x7ffc0000
[  305.717238][   T33] audit: type=1326 audit(1755079905.436:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.3.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690d98ebe9 code=0x7ffc0000
[  305.732278][   T33] audit: type=1326 audit(1755079905.436:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.3.2249" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690d98ebe9 code=0x7ffc0000
[  305.919622][T12348] loop3: detected capacity change from 0 to 128
[  305.952103][T12348] qnx6: superblock #1 checksum error
[  306.145710][T12362] loop4: detected capacity change from 0 to 2048
[  306.200890][T12362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.260072][T11457] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.265737][ T5313] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  306.415285][ T5313] usb 4-1: config 0 has an invalid interface number: 57 but max is 0
[  306.417955][ T5313] usb 4-1: config 0 has no interface number 0
[  306.419997][ T5313] usb 4-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63
[  306.428109][ T5313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.439312][ T5313] usb 4-1: config 0 descriptor??
[  306.457484][ T5313] gspca_main: mr97310a-2.14.0 probing 093a:010f
[  306.471287][ T5313] gspca_mr97310a: reg write [21] error -22
[  306.474493][ T5313] mr97310a 4-1:0.57: probe with driver mr97310a failed with error -22
[  306.495861][T12366] loop1: detected capacity change from 0 to 32768
[  306.504677][T12366] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2261 (12366)
[  306.522396][T12366] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  306.528409][T12366] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  306.532100][T12366] BTRFS info (device loop1): using free-space-tree
[  306.602418][T12368] loop4: detected capacity change from 0 to 32768
[  306.606898][T12368] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry user: 1/255 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 3 3 4 5 5 5 5 5 5 6 6 6 6 8 8 10 11 32 33 83 108]
[  306.606898][T12368] replicas_v0 (size 24):
[  306.606898][T12368] btree: 1 [0] journal: 1 [0] user: 255 [0 0 0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 2 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 0 0 0 2 
[  306.606994][T12368] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  306.658230][  T793] usb 4-1: USB disconnect, device number 14
[  306.728024][ T5859] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  306.836192][T12386] loop4: detected capacity change from 0 to 2048
[  306.876672][T12388] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  306.906795][T12386] tmpfs: Unknown parameter 'usrquota0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  306.906795][T12386] 0
[  307.393432][   T55] Bluetooth: hci1: command tx timeout
[  307.506330][T12392] loop1: detected capacity change from 0 to 32768
[  307.971299][T12392] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  307.971322][T12392]   allowing incompatible features above 0.0: (unknown version)
[  307.971332][T12392]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  307.989883][T12392] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  307.993423][T12392] bcachefs (loop1): initializing new filesystem
[  308.007269][T12392] bcachefs (loop1): going read-write
[  308.012120][T12400] loop3: detected capacity change from 0 to 32768
[  308.016371][T12400] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2269 (12400)
[  308.024771][T12392] bcachefs (loop1): marking superblocks
[  308.051500][T12400] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  308.069578][T12400] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  308.075801][T12392] bcachefs (loop1): initializing freespace
[  308.083530][T12400] BTRFS info (device loop3): using free-space-tree
[  308.090942][T12392] bcachefs (loop1): done initializing freespace
[  308.104809][T12392] bcachefs (loop1): reading snapshots table
[  308.107298][T12392] bcachefs (loop1): reading snapshots done
[  308.147897][T12392] bcachefs (loop1): done starting filesystem
[  308.230744][ T5859] bcachefs (loop1): shutting down
[  308.232966][ T5859] bcachefs (loop1): going read-only
[  308.235171][ T5859] bcachefs (loop1): finished waiting for writes to stop
[  308.300015][ T5859] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  308.348693][T12436] kernel write not supported for file /22/attr/exec (pid: 12436 comm: syz.3.2269)
[  308.368809][T12435] loop4: detected capacity change from 0 to 2048
[  308.379313][T12435] hpfs: hpfs_map_sector(): read error
[  308.430723][T12161] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  308.431004][ T5859] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  308.448495][ T5859] bcachefs (loop1): clean shutdown complete, journal seq 4
[  308.451157][ T5859] bcachefs (loop1): marking filesystem clean
[  308.522665][ T5859] bcachefs (loop1): shutdown complete
[  308.845402][T12442] loop4: detected capacity change from 0 to 40427
[  308.855506][T12442] F2FS-fs (loop4): build fault injection rate: 690
[  308.861196][T12442] F2FS-fs (loop4): invalid crc value
[  308.909218][T12442] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  308.913070][T12442] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  308.935238][T12442] bio_check_eod: 1255 callbacks suppressed
[  308.935249][T12442] syz.4.2277: attempt to access beyond end of device
[  308.935249][T12442] loop4: rw=34817, sector=77824, nr_sectors = 880 limit=40427
[  308.955377][T11457] syz-executor: attempt to access beyond end of device
[  308.955377][T11457] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  308.960734][T11457] CPU: 1 UID: 0 PID: 11457 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  308.960754][T11457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  308.960763][T11457] Call Trace:
[  308.960775][T11457]  <TASK>
[  308.960782][T11457]  dump_stack_lvl+0x189/0x250
[  308.960808][T11457]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.960826][T11457]  ? __pfx_queue_work_on+0x10/0x10
[  308.960839][T11457]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  308.960857][T11457]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  308.960883][T11457]  f2fs_handle_critical_error+0x37c/0x540
[  308.960907][T11457]  f2fs_write_end_io+0x886/0xb60
[  308.960975][T11457]  __submit_merged_bio+0x27a/0x6a0
[  308.961001][T11457]  __submit_merged_write_cond+0x255/0x530
[  308.961024][T11457]  f2fs_write_data_pages+0x261d/0x3000
[  308.961075][T11457]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  308.961134][T11457]  ? __mod_zone_page_state+0xd7/0x140
[  308.961164][T11457]  ? folios_put_refs+0x560/0x640
[  308.961192][T11457]  ? __lock_acquire+0xab9/0xd20
[  308.961220][T11457]  ? do_raw_spin_lock+0x121/0x290
[  308.961247][T11457]  ? do_raw_spin_unlock+0x4d/0x240
[  308.961265][T11457]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  308.961285][T11457]  do_writepages+0x32e/0x550
[  308.961314][T11457]  ? do_raw_spin_unlock+0x4d/0x240
[  308.961335][T11457]  filemap_fdatawrite+0x199/0x240
[  308.961354][T11457]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  308.961418][T11457]  ? do_raw_spin_unlock+0x4d/0x240
[  308.961439][T11457]  f2fs_sync_dirty_inodes+0x31f/0x830
[  308.961475][T11457]  f2fs_write_checkpoint+0x95a/0x1df0
[  308.961518][T11457]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  308.961577][T11457]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  308.961597][T11457]  ? kfree+0x18e/0x440
[  308.961615][T11457]  ? kill_f2fs_super+0x298/0x6c0
[  308.961639][T11457]  kill_f2fs_super+0x2c3/0x6c0
[  308.961665][T11457]  ? __pfx_kill_f2fs_super+0x10/0x10
[  308.961682][T11457]  ? radix_tree_delete_item+0x2b6/0x400
[  308.961706][T11457]  ? shrinker_free+0x2ce/0x3e0
[  308.961724][T11457]  deactivate_locked_super+0xbc/0x130
[  308.961744][T11457]  cleanup_mnt+0x425/0x4c0
[  308.961760][T11457]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.961785][T11457]  task_work_run+0x1d4/0x260
[  308.961808][T11457]  ? __pfx_task_work_run+0x10/0x10
[  308.961824][T11457]  ? __x64_sys_umount+0x122/0x160
[  308.961847][T11457]  ? exit_to_user_mode_loop+0x40/0x110
[  308.961871][T11457]  exit_to_user_mode_loop+0xec/0x110
[  308.961891][T11457]  do_syscall_64+0x2bd/0x3b0
[  308.961906][T11457]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.961923][T11457]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.961961][T11457]  ? exc_page_fault+0x9f/0xf0
[  308.961981][T11457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.961995][T11457] RIP: 0033:0x7f99f518ff17
[  308.962008][T11457] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  308.962021][T11457] RSP: 002b:00007ffdff12be48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  308.962037][T11457] RAX: 0000000000000000 RBX: 00007f99f5211c05 RCX: 00007f99f518ff17
[  308.962047][T11457] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdff12bf00
[  308.962055][T11457] RBP: 00007ffdff12bf00 R08: 0000000000000000 R09: 0000000000000000
[  308.962064][T11457] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdff12cf90
[  308.962073][T11457] R13: 00007f99f5211c05 R14: 000000000004b662 R15: 00007ffdff12cfd0
[  308.962100][T11457]  </TASK>
[  308.962107][T11457] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  309.000239][T12444] loop3: detected capacity change from 0 to 32768
[  309.114859][T12444] (syz.3.2274,12444,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  309.119144][T12444] (syz.3.2274,12444,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  309.127147][T12444] (syz.3.2274,12444,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0xb6b5285. Applying ECC.
[  309.132669][T12444] (syz.3.2274,12444,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xcde76f4d, computed 0x2b8ee4d5
[  309.138326][T12444] (syz.3.2274,12444,0):ocfs2_validate_inode_block:1455 ERROR: Checksum failed for dinode 21
[  309.142217][T12444] (syz.3.2274,12444,0):ocfs2_read_locked_inode:597 ERROR: status = -5
[  309.147064][T12444] (syz.3.2274,12444,0):_ocfs2_get_system_file_inode:144 ERROR: status = -5
[  309.153853][T12444] (syz.3.2274,12444,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  309.157711][T12444] (syz.3.2274,12444,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs?
[  309.157737][T12444] (syz.3.2274,12444,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  309.167030][T12444] (syz.3.2274,12444,0):ocfs2_initialize_super:2198 ERROR: status = -22
[  309.179110][T12444] (syz.3.2274,12444,0):ocfs2_fill_super:1177 ERROR: status = -22
[  309.348570][T12449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2278'.
[  309.449991][T12455] dvmrp0: entered allmulticast mode
[  309.653453][ T5919] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  309.824935][ T5919] usb 5-1: Using ep0 maxpacket: 16
[  309.826012][T12463] loop3: detected capacity change from 0 to 32768
[  309.832006][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  309.835169][T12463] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2285 (12463)
[  309.845721][ T5919] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  309.857655][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.867866][ T5919] usb 5-1: Product: syz
[  309.869673][ T5919] usb 5-1: Manufacturer: syz
[  309.871711][ T5919] usb 5-1: SerialNumber: syz
[  309.907521][ T5919] usb 5-1: config 0 descriptor??
[  309.921298][ T5919] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  309.931919][ T5919] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  309.933916][T12463] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  309.939046][T12463] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  309.942441][T12463] BTRFS info (device loop3): using free-space-tree
[  310.286715][T12161] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  310.548966][ T5919] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  310.911336][T12496] loop1: detected capacity change from 0 to 32768
[  310.930340][T12496] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  310.936939][T12496] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  310.985543][T12496] XFS (loop1): Ending clean mount
[  311.055912][ T5859] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  311.181279][ T5919] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  311.199903][ T5919] em28xx 5-1:0.0: board has no eeprom
[  311.283405][   T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  311.287196][ T5919] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  311.293554][ T5919] em28xx 5-1:0.0: dvb set to bulk mode.
[  311.299524][ T5890] em28xx 5-1:0.0: Binding DVB extension
[  311.327737][ T5919] usb 5-1: USB disconnect, device number 8
[  311.340944][ T5919] em28xx 5-1:0.0: Disconnecting em28xx
[  311.381294][ T5890] em28xx 5-1:0.0: Registering input extension
[  311.396837][ T5919] em28xx 5-1:0.0: Closing input extension
[  311.439787][ T5919] em28xx 5-1:0.0: Freeing device
[  311.453747][   T24] usb 4-1: Using ep0 maxpacket: 16
[  311.459469][   T24] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  311.487612][   T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  311.492615][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.498131][   T24] usb 4-1: Product: syz
[  311.499864][   T24] usb 4-1: Manufacturer: syz
[  311.501721][   T24] usb 4-1: SerialNumber: syz
[  311.509959][   T24] r8152-cfgselector 4-1: Unknown version 0x0000
[  311.512500][   T24] r8152-cfgselector 4-1: config 0 descriptor??
[  311.640868][T12530] loop1: detected capacity change from 0 to 128
[  311.645515][T12530] ext4: Unknown parameter 'fsname'
[  311.655958][T12530] Invalid option length (1047378) for dns_resolver key
[  311.868427][T12541] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2306'.
[  311.873982][T12538] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2306'.
[  311.949470][T12545] syzkaller1: tun_chr_ioctl cmd 1074025677
[  311.952365][T12545] syzkaller1: linktype set to 774
[  313.346780][T12540] loop1: detected capacity change from 0 to 262144
[  313.411214][T12540] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  313.417981][T12540] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  313.571350][T12575] Bluetooth: MGMT ver 1.23
[  314.065749][ T5313] r8152-cfgselector 4-1: USB disconnect, device number 15
[  314.974187][T12606] netlink: 'syz.4.2334': attribute type 1 has an invalid length.
[  314.976679][T12606] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2334'.
[  315.203420][ T5313] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  315.250444][T12620] loop4: detected capacity change from 0 to 128
[  315.368462][T12624] loop4: detected capacity change from 0 to 1024
[  315.373686][ T5313] usb 2-1: Using ep0 maxpacket: 16
[  315.382647][ T5313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.393893][ T5313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  315.409751][   T33] audit: type=1800 audit(1755079921.220:59): pid=12624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2344" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=25 res=0 errno=0
[  315.426119][ T5313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  315.429830][ T5313] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  315.435020][ T5313] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  315.455036][ T5313] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  315.458723][ T5313] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  315.461948][ T5313] usb 2-1: Manufacturer: syz
[  315.477958][ T5313] usb 2-1: config 0 descriptor??
[  315.565064][   T33] audit: type=1326 audit(1755079921.390:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.3.2346" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f690d985ba7 code=0x0
[  315.633515][ T5862] Bluetooth: hci0: command 0x0c1a tx timeout
[  315.636408][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  315.703428][T12630] nbd0: detected capacity change from 0 to 127
[  315.709765][   T57] block nbd0: Receive control failed (result -32)
[  315.718169][ T6234] block nbd0: Dead connection, failed to find a fallback
[  315.721314][ T6234] block nbd0: shutting down sockets
[  315.725562][ T6234] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  315.729524][ T6234] buffer_io_error: 1246 callbacks suppressed
[  315.729537][ T6234] Buffer I/O error on dev nbd0, logical block 0, async page read
[  315.735724][ T6234] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  315.739669][ T6234] Buffer I/O error on dev nbd0, logical block 1, async page read
[  315.756734][ T6234] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  315.760639][ T6234] Buffer I/O error on dev nbd0, logical block 2, async page read
[  315.766635][ T6234] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  315.770388][ T6234] Buffer I/O error on dev nbd0, logical block 3, async page read
[  315.774030][ T5313] rc_core: IR keymap rc-hauppauge not found
[  315.774044][ T5313] Registered IR keymap rc-empty
[  315.774508][ T5313] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  315.789656][ T6234] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  315.795165][ T6234] Buffer I/O error on dev nbd0, logical block 0, async page read
[  315.798581][ T6234] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  315.802276][ T6234] Buffer I/O error on dev nbd0, logical block 1, async page read
[  315.809831][ T6234] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  315.813953][ T6234] Buffer I/O error on dev nbd0, logical block 2, async page read
[  315.814267][ T5313] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  315.816589][ T6234] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  315.822668][ T6234] Buffer I/O error on dev nbd0, logical block 3, async page read
[  315.827027][ T6234] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  315.830223][ T6234] Buffer I/O error on dev nbd0, logical block 0, async page read
[  315.833555][ T6234] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  315.836427][ T6234] Buffer I/O error on dev nbd0, logical block 1, async page read
[  315.841150][ T6234] ldm_validate_partition_table(): Disk read failed.
[  315.844182][ T5313] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  315.848764][ T6234] Dev nbd0: unable to read RDB block 0
[  315.849683][ T5313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18
[  315.852485][ T6234]  nbd0: unable to read partition table
[  315.859090][ T5313] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  315.868560][ T6234] ldm_validate_partition_table(): Disk read failed.
[  315.873066][ T6234] Dev nbd0: unable to read RDB block 0
[  315.882470][ T6234]  nbd0: unable to read partition table
[  315.883408][ T5313] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  315.906022][ T5313] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  315.933751][ T5313] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  315.963389][ T5313] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  315.983468][ T5313] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  316.003412][ T5313] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  316.023867][ T5313] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  316.043612][ T5313] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  316.061060][T12633] loop4: detected capacity change from 0 to 32768
[  316.074309][ T5313] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  316.077836][T12633] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2348 (12633)
[  316.090578][T12633] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  316.097458][T12633] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  316.102405][T12633] BTRFS info (device loop4): using free-space-tree
[  316.115261][ T5313] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  316.125540][ T5313] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  316.155138][ T5313] usb 2-1: USB disconnect, device number 40
[  316.179869][T12633] BTRFS info (device loop4): rebuilding free space tree
[  316.184383][ T5298] udevd[5298]: worker [6234] terminated by signal 33 (Unknown signal 33)
[  316.204699][ T5298] udevd[5298]: worker [6234] failed while handling '/devices/virtual/block/loop4'
[  316.233633][T11457] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  316.250257][ T5298] udevd[5298]: worker [5864] terminated by signal 33 (Unknown signal 33)
[  316.257600][ T5298] udevd[5298]: worker [5864] failed while handling '/devices/virtual/block/loop4'
[  316.430891][T12653] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2349'.
[  316.435262][T12653] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  316.499593][T12657] tipc: Started in network mode
[  316.502049][T12657] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711
[  316.505815][T12657] tipc: Enabled bearer <eth:bridge0>, priority 10
[  316.506088][T12656] netlink: 'syz.4.2352': attribute type 39 has an invalid length.
[  316.575594][T12659] loop3: detected capacity change from 0 to 2048
[  316.607338][ T5856] Alternate GPT is invalid, using primary GPT.
[  316.609407][ T5856]  loop3: p1 p2 p3
[  316.626142][T12659] Alternate GPT is invalid, using primary GPT.
[  316.628457][T12659]  loop3: p1 p2 p3
[  316.721954][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  316.730132][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  316.737104][ T6235] udevd[6235]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  316.775327][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'.
[  316.792841][T12663] loop3: detected capacity change from 0 to 4096
[  316.824295][T12663] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  316.854641][T12663] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  316.877297][   T33] audit: type=1326 audit(1755079922.700:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.4.2358" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99f518ebe9 code=0x0
[  316.884792][ T6235] udevd[6235]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  316.888842][ T5863] udevd[5863]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  316.892723][T12663] ntfs3(loop3): ino=1e, mi_enum_attr
[  316.918699][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  316.921237][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  317.021392][T12677] loop4: detected capacity change from 0 to 512
[  317.034572][T12677] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  317.074241][T12677] EXT4-fs (loop4): 1 truncate cleaned up
[  317.078420][T12677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.114376][T11457] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.317131][T12698] loop1: detected capacity change from 0 to 2048
[  317.429370][T12698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.560769][T12698] EXT4-fs (loop1): shut down requested (2)
[  317.576635][ T5859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.635601][   T24] tipc: Node number set to 10922666
[  317.817176][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2374'.
[  317.824090][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2374'.
[  318.250171][T12726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2382'.
[  318.263431][T12726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2382'.
[  318.267823][T12714] loop4: detected capacity change from 0 to 32768
[  318.268446][T12726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2382'.
[  318.273595][T12726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2382'.
[  318.295063][T12714] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  318.345374][T12736] kAFS: No cell specified
[  318.347604][T12714] XFS (loop4): Ending clean mount
[  318.465134][T11457] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  318.494059][ T5890] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  318.674485][ T5890] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  318.690067][ T5890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  318.716326][ T5890] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  318.723344][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  318.726666][ T5890] usb 4-1: SerialNumber: syz
[  318.806534][T12746] loop4: detected capacity change from 0 to 256
[  318.872574][T12746] FAT-fs (loop4): Directory bread(block 64) failed
[  318.875805][T12746] FAT-fs (loop4): Directory bread(block 65) failed
[  318.879322][T12746] FAT-fs (loop4): Directory bread(block 66) failed
[  318.882204][T12746] FAT-fs (loop4): Directory bread(block 67) failed
[  318.886263][T12746] FAT-fs (loop4): Directory bread(block 68) failed
[  318.889544][T12746] FAT-fs (loop4): Directory bread(block 69) failed
[  318.892720][T12746] FAT-fs (loop4): Directory bread(block 70) failed
[  318.906136][T12746] FAT-fs (loop4): Directory bread(block 71) failed
[  318.913532][T12746] FAT-fs (loop4): Directory bread(block 72) failed
[  318.918550][T12746] FAT-fs (loop4): Directory bread(block 73) failed
[  318.974467][ T5890] usb 4-1: 0:2 : does not exist
[  319.026674][ T5890] usb 4-1: USB disconnect, device number 16
[  319.172828][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  319.290055][T12750] loop4: detected capacity change from 0 to 2048
[  319.342904][ T5852]  loop4: p1 < > p3
[  319.353937][ T5852] loop4: p3 size 134217728 extends beyond EOD, truncated
[  319.383373][T12750]  loop4: p1 < > p3
[  319.388096][T12750] loop4: p3 size 134217728 extends beyond EOD, truncated
[  320.239835][T12784] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2405'.
[  320.315294][ T5890] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  320.499452][ T5890] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  320.502761][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.509685][ T5890] usb 5-1: config 0 descriptor??
[  320.512234][T12791] loop1: detected capacity change from 0 to 128
[  320.513373][ T5890] gspca_main: spca508-2.14.0 probing 8086:0110
[  320.516194][T12791] EXT4-fs: Ignoring removed nobh option
[  320.531538][T12791] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  320.539833][T12791] ext4 filesystem being mounted at /822/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  320.553427][   T24] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  320.585692][ T5859] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  320.651799][T12795] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2409'.
[  320.720281][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.743458][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  320.751518][ T5890] gspca_spca508: reg_read err -32
[  320.760269][   T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  320.768079][ T5890] gspca_spca508: reg_read err -32
[  320.770987][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.783818][   T24] usb 4-1: config 0 descriptor??
[  320.975613][ T5890] gspca_spca508: reg_read err -71
[  320.980136][T12799] loop1: detected capacity change from 0 to 32768
[  320.980545][ T5890] gspca_spca508: reg_read err -71
[  320.990499][T12799] BTRFS error: device /dev/loop1 has incomplete metadata_uuid change, please use btrfstune to complete
[  320.996061][ T5890] gspca_spca508: reg write: error -71
[  320.998416][ T5890] spca508 5-1:0.0: probe with driver spca508 failed with error -71
[  321.011597][ T5890] usb 5-1: USB disconnect, device number 9
[  321.019349][ T5856] BTRFS error: device /dev/loop1 has incomplete metadata_uuid change, please use btrfstune to complete
[  321.212867][   T24] hid_parser_main: 4 callbacks suppressed
[  321.212886][   T24] lenovo 0003:17EF:6067.000F: unknown main item tag 0x4
[  321.225455][   T24] lenovo 0003:17EF:6067.000F: item fetching failed at offset 10/11
[  321.228240][   T24] lenovo 0003:17EF:6067.000F: hid_parse failed
[  321.230163][   T24] lenovo 0003:17EF:6067.000F: probe with driver lenovo failed with error -22
[  321.332018][T12809] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2416'.
[  321.417904][   T24] usb 4-1: USB disconnect, device number 17
[  321.484483][T12817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2420'.
[  321.578948][T12823] loop4: detected capacity change from 0 to 1024
[  321.603473][T12823] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5
[  321.606321][T12823] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  321.609312][T12823] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2422: Failed to acquire dquot type 0
[  321.615170][T12823] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  321.627499][T12823] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.2422: corrupted inode contents
[  321.641293][T12823] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.2422: mark_inode_dirty error
[  321.647469][T12823] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.2422: corrupted inode contents
[  321.651620][T12823] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.2422: mark_inode_dirty error
[  321.656312][T12823] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.2422: corrupted inode contents
[  321.660513][T12823] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  321.665991][T12823] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.2422: corrupted inode contents
[  321.670054][T12823] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.2422: mark_inode_dirty error
[  321.674237][T12823] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  321.679277][T12823] EXT4-fs (loop4): 1 truncate cleaned up
[  321.693697][T12823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  321.705428][T12823] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  321.746055][T11457] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.061850][T12848] veth0: entered promiscuous mode
[  322.062194][T12846] loop4: detected capacity change from 0 to 2048
[  322.104365][T12846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.108693][T12846] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.132053][T12848] veth0 (unregistering): left promiscuous mode
[  322.176636][T11457] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.535447][T12877] loop1: detected capacity change from 0 to 4096
[  322.545264][T12877] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  322.752712][ T5313] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  322.889713][T12892] __nla_validate_parse: 3 callbacks suppressed
[  322.889766][T12892] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2452'.
[  322.913918][ T5313] usb 5-1: Using ep0 maxpacket: 32
[  323.009244][ T5313] usb 5-1: config 0 has an invalid interface number: 219 but max is 0
[  323.023256][ T5313] usb 5-1: config 0 has no interface number 0
[  323.025908][ T5313] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  323.041872][ T5313] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  323.046442][ T5313] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  323.050726][ T5313] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  323.056823][ T5313] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  323.060707][ T5313] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  323.065425][ T5313] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  323.072706][ T5313] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  323.078424][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.081557][ T5313] usb 5-1: Product: syz
[  323.083737][ T5313] usb 5-1: Manufacturer: syz
[  323.085609][ T5313] usb 5-1: SerialNumber: syz
[  323.089869][ T5313] usb 5-1: config 0 descriptor??
[  323.092799][T12873] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  323.181973][T12890] loop3: detected capacity change from 0 to 32768
[  323.195411][T12890] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section replicas: no devices in entry need_discard: 0/0 []
[  323.195411][T12890] replicas (size 40):
[  323.195411][T12890] need_discard: 0/0 []
[  323.195411][T12890] 
[  323.208026][T12890] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  323.325830][ T5313] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz)
[  323.557704][ T5313] etas_es58x 5-1:0.219: could not parse product info: '424242424242'
[  323.623554][   T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  323.808685][   T96] usb 5-1: USB disconnect, device number 10
[  323.812857][   T96] etas_es58x 5-1:0.219: Disconnecting syz syz
[  324.133801][   T24] usb 4-1: Using ep0 maxpacket: 16
[  324.140131][   T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  324.142898][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.153264][   T24] usb 4-1: Product: syz
[  324.154634][   T24] usb 4-1: Manufacturer: syz
[  324.156093][   T24] usb 4-1: SerialNumber: syz
[  324.174201][   T24] r8152-cfgselector 4-1: Unknown version 0x0000
[  324.176189][   T24] r8152-cfgselector 4-1: config 0 descriptor??
[  324.389011][   T24] r8152-cfgselector 4-1: Unknown version 0x0000
[  324.390059][T12923] syzkaller1: entered promiscuous mode
[  324.391552][   T24] r8152-cfgselector 4-1: bad CDC descriptors
[  324.395441][T12923] syzkaller1: entered allmulticast mode
[  324.604495][ T5313] r8152-cfgselector 4-1: USB disconnect, device number 18
[  324.665294][T12931] loop1: detected capacity change from 0 to 256
[  324.823953][   T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  324.987734][   T10] usb 5-1: config 131 has an invalid interface number: 242 but max is 0
[  324.991577][   T10] usb 5-1: config 131 has no interface number 0
[  325.001279][   T10] usb 5-1: config 131 interface 242 altsetting 13 endpoint 0x2 has invalid maxpacket 7573, setting to 64
[  325.014308][   T10] usb 5-1: config 131 interface 242 altsetting 13 endpoint 0xC has invalid wMaxPacketSize 0
[  325.018371][   T10] usb 5-1: config 131 interface 242 has no altsetting 0
[  325.031936][   T10] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=19.10
[  325.037260][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5
[  325.040484][   T10] usb 5-1: Product: syz
[  325.042181][   T10] usb 5-1: Manufacturer: syz
[  325.045982][   T10] usb 5-1: SerialNumber: syz
[  325.066671][T12927] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  325.282374][   T10] kvaser_usb 5-1:131.242: error -ENODEV: Cannot get usb endpoint(s)
[  325.305382][   T10] usb 5-1: USB disconnect, device number 11
[  325.677180][T12979] loop1: detected capacity change from 0 to 512
[  325.734998][T12979] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  325.739107][T12979] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  325.744119][T12979] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2488: Failed to acquire dquot type 1
[  325.751128][T12979] EXT4-fs (loop1): 1 truncate cleaned up
[  325.759904][T12979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.766242][T12979] ext4 filesystem being mounted at /869/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.769250][T12988] loop3: detected capacity change from 0 to 4096
[  325.779371][T12988] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  325.791763][T12988] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096)
[  325.795331][T12988] NILFS (loop3): mounting unchecked fs
[  325.795390][ T5856] udevd[5856]: incorrect nilfs2 checksum on /dev/loop3
[  325.798404][T12988] NILFS (loop3): invalid segment: Checksum error in segment payload
[  325.803096][T12988] NILFS (loop3): unable to fall back to spare super block
[  325.806639][T12988] NILFS (loop3): error -22 while searching super root
[  325.830005][ T5859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.837548][ T5856] udevd[5856]: incorrect nilfs2 checksum on /dev/loop3
[  325.930609][T12992] tipc: Started in network mode
[  325.941220][T12992] tipc: Node identity 8e0a76ffafdf, cluster identity 4711
[  325.948361][T12992] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  326.269619][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2503'.
[  326.347286][T13000] loop1: detected capacity change from 0 to 32768
[  326.362319][T13016] input: syz1 as /devices/virtual/input/input19
[  326.374034][T13000] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  326.460623][T13000] 
[  326.461444][T13000] ======================================================
[  326.463609][T13000] WARNING: possible circular locking dependency detected
[  326.465860][T13000] 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 Not tainted
[  326.468513][T13000] ------------------------------------------------------
[  326.471507][T13000] syz.1.2499/13000 is trying to acquire lock:
[  326.473362][T13000] ffff888022086618 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_setattr+0x969/0x1b40
[  326.476047][T13000] 
[  326.476047][T13000] but task is already holding lock:
[  326.478742][T13000] ffff8881251eb1e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_setattr+0x95a/0x1b40
[  326.481896][T13000] 
[  326.481896][T13000] which lock already depends on the new lock.
[  326.481896][T13000] 
[  326.484925][T13000] 
[  326.484925][T13000] the existing dependency chain (in reverse order) is:
[  326.488370][T13000] 
[  326.488370][T13000] -> #4 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  326.491779][T13000]        lock_acquire+0x120/0x360
[  326.493788][T13000]        down_write+0x96/0x1f0
[  326.495673][T13000]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  326.498270][T13000]        ocfs2_xattr_set+0x595/0x11f0
[  326.500216][T13000]        ocfs2_set_acl+0x701/0x7b0
[  326.501903][T13000]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  326.503642][T13000]        vfs_set_acl+0x887/0xb00
[  326.505290][T13000]        filename_setxattr+0x2e0/0x600
[  326.507049][T13000]        path_setxattrat+0x364/0x3a0
[  326.508734][T13000]        __x64_sys_setxattr+0xbc/0xe0
[  326.510444][T13000]        do_syscall_64+0xfa/0x3b0
[  326.511989][T13000]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.514046][T13000] 
[  326.514046][T13000] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}:
[  326.516437][T13000]        lock_acquire+0x120/0x360
[  326.518358][T13000]        down_read+0x46/0x2e0
[  326.520144][T13000]        ocfs2_init_acl+0x2f9/0x720
[  326.522127][T13000]        ocfs2_mknod+0x1321/0x2050
[  326.524096][T13000]        ocfs2_create+0x1a5/0x440
[  326.526085][T13000]        path_openat+0x14f4/0x3830
[  326.527846][T13000]        do_filp_open+0x1fa/0x410
[  326.529417][T13000]        do_sys_openat2+0x121/0x1c0
[  326.531074][T13000]        __x64_sys_openat+0x138/0x170
[  326.532776][T13000]        do_syscall_64+0xfa/0x3b0
[  326.534486][T13000]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.536539][T13000] 
[  326.536539][T13000] -> #2 (jbd2_handle){++++}-{0:0}:
[  326.539274][T13000]        lock_acquire+0x120/0x360
[  326.541182][T13000]        start_this_handle+0x1fa7/0x21c0
[  326.542900][T13000]        jbd2__journal_start+0x2c1/0x5b0
[  326.544656][T13000]        jbd2_journal_start+0x2a/0x40
[  326.546422][T13000]        ocfs2_start_trans+0x376/0x6d0
[  326.548245][T13000]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  326.550167][T13000]        ocfs2_dismount_volume+0x201/0x8d0
[  326.552051][T13000]        generic_shutdown_super+0x135/0x2c0
[  326.554055][T13000]        kill_block_super+0x44/0x90
[  326.555727][T13000]        deactivate_locked_super+0xbc/0x130
[  326.557920][T13000]        cleanup_mnt+0x425/0x4c0
[  326.559895][T13000]        task_work_run+0x1d4/0x260
[  326.561538][T13000]        exit_to_user_mode_loop+0xec/0x110
[  326.563327][T13000]        do_syscall_64+0x2bd/0x3b0
[  326.564912][T13000]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.567123][T13000] 
[  326.567123][T13000] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  326.569664][T13000]        lock_acquire+0x120/0x360
[  326.571555][T13000]        down_read+0x46/0x2e0
[  326.573383][T13000]        ocfs2_start_trans+0x36a/0x6d0
[  326.575496][T13000]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  326.577898][T13000]        ocfs2_dismount_volume+0x201/0x8d0
[  326.580206][T13000]        generic_shutdown_super+0x135/0x2c0
[  326.582566][T13000]        kill_block_super+0x44/0x90
[  326.584616][T13000]        deactivate_locked_super+0xbc/0x130
[  326.586978][T13000]        cleanup_mnt+0x425/0x4c0
[  326.588926][T13000]        task_work_run+0x1d4/0x260
[  326.590927][T13000]        exit_to_user_mode_loop+0xec/0x110
[  326.593251][T13000]        do_syscall_64+0x2bd/0x3b0
[  326.595313][T13000]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.597864][T13000] 
[  326.597864][T13000] -> #0 (sb_internal#4){.+.+}-{0:0}:
[  326.600739][T13000]        validate_chain+0xb9b/0x2140
[  326.602811][T13000]        __lock_acquire+0xab9/0xd20
[  326.604836][T13000]        lock_acquire+0x120/0x360
[  326.606811][T13000]        ocfs2_start_trans+0x26b/0x6d0
[  326.608950][T13000]        ocfs2_setattr+0x969/0x1b40
[  326.610978][T13000]        notify_change+0xb36/0xe40
[  326.613004][T13000]        do_truncate+0x1a4/0x220
[  326.614951][T13000]        vfs_truncate+0x493/0x520
[  326.616961][T13000]        do_sys_truncate+0xdb/0x190
[  326.619049][T13000]        __x64_sys_truncate+0x5b/0x70
[  326.621181][T13000]        do_syscall_64+0xfa/0x3b0
[  326.623168][T13000]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.625665][T13000] 
[  326.625665][T13000] other info that might help us debug this:
[  326.625665][T13000] 
[  326.629337][T13000] Chain exists of:
[  326.629337][T13000]   sb_internal#4 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key
[  326.629337][T13000] 
[  326.634696][T13000]  Possible unsafe locking scenario:
[  326.634696][T13000] 
[  326.637513][T13000]        CPU0                    CPU1
[  326.639552][T13000]        ----                    ----
[  326.641647][T13000]   lock(&ocfs2_file_ip_alloc_sem_key);
[  326.643861][T13000]                                lock(&oi->ip_xattr_sem);
[  326.646650][T13000]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  326.649789][T13000]   rlock(sb_internal#4);
[  326.651505][T13000] 
[  326.651505][T13000]  *** DEADLOCK ***
[  326.651505][T13000] 
[  326.654746][T13000] 3 locks held by syz.1.2499/13000:
[  326.656858][T13000]  #0: ffff888022086428 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  326.660568][T13000]  #1: ffff8881251eb540 (&sb->s_type->i_mutex_key#39){+.+.}-{4:4}, at: do_truncate+0x171/0x220
[  326.664637][T13000]  #2: ffff8881251eb1e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_setattr+0x95a/0x1b40
[  326.668872][T13000] 
[  326.668872][T13000] stack backtrace:
[  326.671246][T13000] CPU: 0 UID: 0 PID: 13000 Comm: syz.1.2499 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  326.671266][T13000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  326.671277][T13000] Call Trace:
[  326.671305][T13000]  <TASK>
[  326.671312][T13000]  dump_stack_lvl+0x189/0x250
[  326.671334][T13000]  ? __pfx_dump_stack_lvl+0x10/0x10
[  326.671351][T13000]  ? __pfx__printk+0x10/0x10
[  326.671371][T13000]  ? print_lock_name+0xde/0x100
[  326.671391][T13000]  print_circular_bug+0x2ee/0x310
[  326.671409][T13000]  check_noncircular+0x134/0x160
[  326.671426][T13000]  validate_chain+0xb9b/0x2140
[  326.671453][T13000]  __lock_acquire+0xab9/0xd20
[  326.671476][T13000]  ? ocfs2_setattr+0x969/0x1b40
[  326.671495][T13000]  lock_acquire+0x120/0x360
[  326.671513][T13000]  ? ocfs2_setattr+0x969/0x1b40
[  326.671534][T13000]  ? do_raw_spin_unlock+0x4d/0x240
[  326.671552][T13000]  ocfs2_start_trans+0x26b/0x6d0
[  326.671567][T13000]  ? ocfs2_setattr+0x969/0x1b40
[  326.671586][T13000]  ? __pfx_ocfs2_start_trans+0x10/0x10
[  326.671600][T13000]  ? setattr_prepare+0x1e7/0xac0
[  326.671619][T13000]  ? inode_newsize_ok+0x182/0x1c0
[  326.671637][T13000]  ocfs2_setattr+0x969/0x1b40
[  326.671658][T13000]  ? __pfx_ocfs2_setattr+0x10/0x10
[  326.671705][T13000]  ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0
[  326.671725][T13000]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  326.671747][T13000]  ? ns_to_timespec64+0x21/0xb0
[  326.671769][T13000]  ? ktime_get_coarse_real_ts64_mg+0x175/0x1e0
[  326.671789][T13000]  ? current_time+0x222/0x370
[  326.671804][T13000]  ? evm_inode_setattr+0x1b6/0x7d0
[  326.671818][T13000]  ? __pfx_current_time+0x10/0x10
[  326.671833][T13000]  ? try_break_deleg+0x79/0x130
[  326.671849][T13000]  ? __pfx_ocfs2_setattr+0x10/0x10
[  326.671866][T13000]  notify_change+0xb36/0xe40
[  326.671887][T13000]  do_truncate+0x1a4/0x220
[  326.671906][T13000]  ? __pfx_do_truncate+0x10/0x10
[  326.671923][T13000]  ? apparmor_path_truncate+0x238/0x2d0
[  326.671940][T13000]  ? mnt_get_write_access+0x223/0x2a0
[  326.671958][T13000]  vfs_truncate+0x493/0x520
[  326.671975][T13000]  ? lockdep_hardirqs_on+0x9c/0x150
[  326.671993][T13000]  ? __pfx_vfs_truncate+0x10/0x10
[  326.672010][T13000]  ? user_path_at+0x44/0x60
[  326.672028][T13000]  do_sys_truncate+0xdb/0x190
[  326.672047][T13000]  ? __pfx_do_sys_truncate+0x10/0x10
[  326.672066][T13000]  ? rcu_is_watching+0x15/0xb0
[  326.672082][T13000]  __x64_sys_truncate+0x5b/0x70
[  326.672101][T13000]  do_syscall_64+0xfa/0x3b0
[  326.672119][T13000]  ? lockdep_hardirqs_on+0x9c/0x150
[  326.672134][T13000]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.672149][T13000]  ? exc_page_fault+0x9f/0xf0
[  326.672165][T13000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.672178][T13000] RIP: 0033:0x7f268358ebe9
[  326.672192][T13000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  326.672206][T13000] RSP: 002b:00007f26843e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  326.672221][T13000] RAX: ffffffffffffffda RBX: 00007f26837b5fa0 RCX: 00007f268358ebe9
[  326.672232][T13000] RDX: 0000000000000000 RSI: 0000000000000470 RDI: 0000200000000000
[  326.672242][T13000] RBP: 00007f2683611e19 R08: 0000000000000000 R09: 0000000000000000
[  326.672252][T13000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  326.672260][T13000] R13: 00007f26837b6038 R14: 00007f26837b5fa0 R15: 00007ffc91e02c78
[  326.672277][T13000]  </TASK>
[  326.803266][    C0] vkms_vblank_simulate: vblank timer overrun
[  326.851692][ T5859] ocfs2: Unmounting device (7,1) on (node local)
[  326.943339][   T10] tipc: Node number set to 567637759

VM DIAGNOSIS:
10:07:50  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001790 RDI=0000000000001791 RBP=00000000000003f8 RSP=ffffc90002eeeed0
R8 =ffff888021170237 R9 =1ffff1100422e046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18ce R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f26843e96c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32a16ff8 CR3=000000012947a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=622d383864342d63 6666352d63333536
XMM06=656431626632785c 646975752d796266 XMM07=32785c6b73696466 32785c2f736b6e69
XMM08=ffffffffffffffff ffffffffffffffff XMM09=0000000000000000 313a37622f396533
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888136632f98 RCX=0ccdb98813ab7600 RDX=ffffffff90404101
RSI=ffffffff8be325e0 RDI=ffffffff8be325a0 RBP=dffffc0000000000 RSP=ffffc900026cf870
R8 =ffffc900026cfa27 R9 =0000000000000000 R10=ffffc900026cfa18 R11=fffff520004d9f45
R12=ffffc900026cfd58 R13=ffffffff8172c195 R14=ffffffff8dbdbd18 R15=dffffc0000000000
RIP=ffffffff81a65dde RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1c468dcc80 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555589e195c8 CR3=000000010fbcc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000021 00003234322e2f33
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffff000000000000 XMM09=313a312d352f312d 352f356273752f34
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
