last executing test programs:

2m10.302472022s ago: executing program 0 (id=22):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5, {0x26, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0xc000, 0x0, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
write$tcp_congestion(r4, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0)

2m10.10198906s ago: executing program 0 (id=24):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00')
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r0, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@ptr={0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x3, 0x1}, {0x10, 0x1}]}]}, {0x0, [0x0, 0x61, 0x5f]}}, 0x0, 0x4d, 0x0, 0x1}, 0x28)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x15, &(0x7f0000000000)=[{0x2, 0x4, 0x7, 0x1}, {0x6, 0x6, 0x3, 0x1}]})

2m9.992070102s ago: executing program 0 (id=25):
timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

2m8.650960174s ago: executing program 0 (id=28):
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$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")
chdir(&(0x7f0000000200)='./file0\x00')
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
creat(&(0x7f00000001c0)='./file0\x00', 0x8)

2m8.512771078s ago: executing program 0 (id=29):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

2m7.500803137s ago: executing program 0 (id=35):
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0), 0x1000)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
preadv2(r0, &(0x7f0000000140), 0x10000000000002dd, 0x10001, 0xa78, 0x0)

2m7.404373863s ago: executing program 32 (id=35):
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0), 0x1000)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
preadv2(r0, &(0x7f0000000140), 0x10000000000002dd, 0x10001, 0xa78, 0x0)

1m22.094202698s ago: executing program 3 (id=680):
r0 = fanotify_init(0x10, 0x101000)
fanotify_mark(r0, 0x80, 0x1000000, 0xffffffffffffffff, 0x0)

1m22.031098953s ago: executing program 3 (id=681):
epoll_create1(0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0)

1m18.966271016s ago: executing program 3 (id=710):
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0)
recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080)
sendmmsg$alg(r2, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}], 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db)
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@nojournal_checksum}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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")
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0)

1m18.497274577s ago: executing program 3 (id=711):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="766f6c756d653d3030303030303030303036332c696f636861727365743d6d6163677265656b2c696f636861727365743d6b6f69382d72752c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c6e6f7672732c6e6f7672732c66696c657365743d30303030303030303030303030303030303030342c646d6f64653d30303030303030303030303030303030303030303131362c007732be3442cd163f564b8a695afa1b16eefc0b9d590fbf9ab8391b97ea4c0cf06c797f1a493380ce6975738b912f61be3a342f9b9ee8b8bee4aa2b525fd11b2212573ec6e7f3235ad950c58d6bf8d5318071bd000000004c67990370b984f0b3bf4b8ee680536ebf6c9386b8e46872d639e0de679325aa384473cb1be572c7320000000000000000"], 0x1, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m18.397603199s ago: executing program 3 (id=712):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x80841, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001040)=0x1)

1m18.146749162s ago: executing program 3 (id=713):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4084, &(0x7f00000001c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRESOCT, @ANYRES32, @ANYRESHEX], 0x11, 0x4427, &(0x7f0000004480)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140))

1m18.140065041s ago: executing program 33 (id=713):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4084, &(0x7f00000001c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRESOCT, @ANYRES32, @ANYRESHEX], 0x11, 0x4427, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FL3nJm+SRPKOmaVmpJbGUQmmhYlCIcTNM2wGq0w5pp8YFi7ojcWXiwrggmrjrinThFv8ENy5xTaILNyYmxJqZuVPm3plJR9JphXw+Cb2953fne++ZcxeXEycqt5fWcktrucJKrrxwc+107qNyaX25GOJ9ctD9051exEnsD86VcxfeuX46hO8Wf3i8vb29Har6Q1tjTb//+svdheZjQ5ypU223fWt75f0QwomWcVX1hRDe+zaEKIRwNkmbTI6DIYRjoZ53/e6nN3J7NJoHj4pn8k/m7m2Nn5rdvL/V+W+PQviy9O9Xby3/9L++8R9f3qPuAQAAAAAAAAAAAAAAAAB4zk1fvXLt7dGx8DAK/ZtR6/u608mx0/ux23vmv73/YwEAAAAAAAAAAAAAAAAAAOAv6un7/7noeJv3/6eS40SH+ttv9n6M9M7MW1emzo+OJfu/Ry35ryVJP5/tC8Nt9n3P7v9+NlO//f7vrf08q8b4Gv0OhSgeSZ3H8chICF8nG7+fjA7HpfJa5ZWb5fWVxT0bxnMrHf/67v2p6CQb+ncb/8lM+73f//9fLVdT9fzG3l1iL7R0/Ps6lvvmk6ir+J/L1NuP+PPs0vHvr6UNNheYqE8A1fh/1r97/Kcy7fcq/sdCCLmoOtZcagaormGq6Z3WK6Sl4/+3Wlpq6kw+yE73/2+Z+J/PtH9Q8/9G9ouIttLx/3stbSBV4un9Pxzvfv9fyLR/EPGvjn/D939X0vE/VE/sTxWpfZLdzv/TmfZ7Ff9rcTLOY1HqCtiM6umd/r860tLxH2jJf/r8F3e1/ruYqb9fz3+NfhvPf43p/6Wo/vxHe+n4D3Ys1+39P5Op1+v5fyLkQutVS7fS8T9cS0uvnYdqP7uN/2ym/V7Fv7YqGajHv3n+//1QPf0r67+upOP/j3pi3Fxio/aztv6Ldl//X8q0fxDrv+r4N+Le9vqiSMf/SMdy1fh/38X3/+VMvd7HP4RRa/1nlo7/0Y7lavf/wO7xn8vU63X8/9/LxgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeA5PJcShE8UjqPI5HRkI4l5yfDIej+cJifr5UXvhwLYSpJD0Xjke3SuX5Qim/tFJeLOYLpVJ5IYTzSf6JMBCtlcqV/HLhzoWdtgaj28XCamW+WKiEEKaT9P+Eo4225pcqy4U7IYSLO3n/jMurd24XVvKLS6tvjI6OjoaZnTEMR8WPK8WVSr33em4Iszt1h6KmwdWyL+2M5Uj0QXl9daVQqqVfbqpTKi8USk115pK8z8NwVFldX1koVIr5UvlWo7+DNJEcp2auvnv18lhL/o2ofpzc32EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Cc9HH/9ixBCf/0sDiHkouSXKPmX8uBR8Uz+ydy9rfFTs5v3tx63KwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAf7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWGX/lEaCKI4AL8ZCy09htWy29muKKKFK4In0GN4GD2Kl/AOFinSpgiBZBbC/oFtkur7mgfzY+Y9mAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw3ONb9/5aNxEprraXEb+ff//H+XOp33fT9y/OMCOn8/TS3T/UTfn3NMpvy9Gqzft0s/76iIna+xnsyXCfDsZ9hub2bW6+vu91pFxFRFvym5RzVS17CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDHDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL8CAAD//+jHH0c=")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140))

3.517003068s ago: executing program 4 (id=1544):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @dev}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10, 0x11}}], 0x20}}], 0x2, 0x0)

3.516876397s ago: executing program 4 (id=1545):
userfaultfd(0x80001)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe2(&(0x7f00000000c0), 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

3.516683313s ago: executing program 4 (id=1546):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

3.097429317s ago: executing program 2 (id=1552):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x1, 0x5}, 0x50)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080))
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x80, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)

2.004979662s ago: executing program 1 (id=1554):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x8000003dbc, 0x4)
setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(r0, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

2.004724667s ago: executing program 1 (id=1555):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x44, 0x12)

1.995040432s ago: executing program 2 (id=1556):
bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYRES32, @ANYBLOB="0000000000002554a58db719ad"], 0x50)

1.931920752s ago: executing program 1 (id=1557):
r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0xd3c, [0xffff, 0x5d, 0x8, 0x6, 0x2, 0xc1, 0x3, 0x15f, 0x46, 0x401, 0xa, 0x200, 0xf26, 0x0, 0x240, 0x9, 0xf046, 0x0, 0x1, 0xf000, 0xfffb, 0xf, 0x5, 0x0, 0x1, 0x1000, 0x4efc, 0x8, 0x7f, 0x5, 0x2, 0x6, 0x2, 0x3, 0x1402, 0xf, 0x7, 0xc, 0x52, 0x3e, 0x10, 0x3, 0xf, 0x2, 0x734, 0xd, 0x7a7e, 0xfffc], 0x1c0}})

1.931551409s ago: executing program 1 (id=1558):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x7ffffffe, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @remote}, 0x2, 0x4, 0x3, 0x3}}, 0x2e)

1.93143793s ago: executing program 2 (id=1559):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@null, 0x0, 'lo\x00'})

1.931183939s ago: executing program 1 (id=1560):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3}, 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x1}, 0x8)
sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

1.778582656s ago: executing program 2 (id=1561):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x20000006})

1.645779708s ago: executing program 2 (id=1562):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/57, 0x39}], 0x1}, 0x0)

1.550804436s ago: executing program 2 (id=1563):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0141021800168014000300fc0000000000000000000000000000000600150002000000f79289d1e13bbe10b49e56bd59a12a02f83b8cff47e9b858a72638f00d247785660105111f5282ac07395c8cdfd2a07f992c691358732292410d645f5bffd48649e5d83c3d841f4735b5b89ea8a9bca616"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000500), 0xa, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000800), 0x0)

421.042045ms ago: executing program 1 (id=1564):
syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xbd, 0xf4, 0x26, 0x20, 0x763, 0x1015, 0x8621, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x20, 0xd, [{{0x9, 0x4, 0xdf, 0x2, 0x3, 0xff, 0xff, 0x8f, 0x0, [], [{{0x9, 0x5, 0xa, 0x0, 0x40, 0x1, 0x2, 0xfd}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x41, 0x5, 0xb}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x9, 0x13, 0x3}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0})

109.684467ms ago: executing program 4 (id=1565):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acd", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09eb", 0x3c}], 0x1}, 0x20048050)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

154.347µs ago: executing program 4 (id=1566):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)

0s ago: executing program 4 (id=1567):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4001af83, &(0x7f00000001c0)={0x3, 0x1, 0x0, 0x0, 0x0, 0x10000})

kernel console output (not intermixed with test programs):

ace 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.351709][ T5846] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.367331][ T5842] Bluetooth: hci2: command tx timeout
[  104.370287][ T5846] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  104.374439][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  104.381042][ T5846] usb 3-1: Product: syz
[  104.382890][ T5846] usb 3-1: Manufacturer: syz
[  104.385023][ T5846] usb 3-1: SerialNumber: syz
[  104.401965][ T5846] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input10
[  104.681629][   T24] usb 5-1: xr_serial converter now attached to ttyUSB0
[  104.885509][   T24] usb 5-1: USB disconnect, device number 2
[  104.892202][   T24] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0
[  104.899367][   T24] xr_serial 5-1:150.204: device disconnected
[  105.684300][ T8013] loop4: detected capacity change from 0 to 32768
[  105.728510][ T8013] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  105.728530][ T8013]   allowing incompatible features above 0.0: (unknown version)
[  105.728537][ T8013]   features: 
[  105.811819][ T8013] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  105.815209][ T8013] bcachefs (loop4): initializing new filesystem
[  105.826886][ T8013] bcachefs (loop4): going read-write
[  105.830411][ T8013] bcachefs (loop4): marking superblocks
[  105.836932][ T8013] bcachefs (loop4): initializing freespace
[  105.839945][ T8013] bcachefs (loop4): done initializing freespace
[  105.843455][ T8013] bcachefs (loop4): reading snapshots table
[  105.847782][ T8013] bcachefs (loop4): reading snapshots done
[  105.854830][ T8013] bcachefs (loop4): done starting filesystem
[  106.005626][ T7838] bcachefs (loop4): shutting down
[  106.008900][ T8030] CIFS: iocharset name too long
[  106.012041][ T7838] bcachefs (loop4): going read-only
[  106.014264][ T7838] bcachefs (loop4): finished waiting for writes to stop
[  106.021896][ T7838] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3
[  106.133060][ T7838] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4
[  106.138474][ T7838] bcachefs (loop4): clean shutdown complete, journal seq 5
[  106.142602][ T7838] bcachefs (loop4): marking filesystem clean
[  106.204248][ T7838] bcachefs (loop4): shutdown complete
[  106.456076][ T5842] Bluetooth: hci2: command tx timeout
[  106.937092][  T971] usb 3-1: USB disconnect, device number 12
[  106.985834][  T971] appletouch 3-1:1.0: input: appletouch disconnected
[  107.469263][ T8036] loop2: detected capacity change from 0 to 40427
[  107.478345][ T8036] F2FS-fs (loop2): build fault injection rate: 14
[  107.490262][ T8036] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  107.497213][ T8036] F2FS-fs (loop2): invalid crc value
[  107.500638][    C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  107.508092][    C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  107.535676][ T8036] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  107.539521][ T8036] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  107.544122][ T8036] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  107.558083][ T8036] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  107.562770][ T8036] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[  107.569777][ T8036] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x131/0xa40
[  107.587671][ T5843] syz-executor: attempt to access beyond end of device
[  107.587671][ T5843] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  107.593271][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  107.593287][ T5843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.593296][ T5843] Call Trace:
[  107.593300][ T5843]  <TASK>
[  107.593305][ T5843]  dump_stack_lvl+0x189/0x250
[  107.593325][ T5843]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.593337][ T5843]  ? __pfx_queue_work_on+0x10/0x10
[  107.593348][ T5843]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  107.593384][ T5843]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  107.593403][ T5843]  f2fs_handle_critical_error+0x37c/0x540
[  107.593421][ T5843]  f2fs_write_end_io+0x886/0xb60
[  107.593438][ T5843]  __submit_merged_bio+0x27a/0x6a0
[  107.593456][ T5843]  __submit_merged_write_cond+0x255/0x530
[  107.593473][ T5843]  f2fs_write_data_pages+0x261d/0x3000
[  107.593498][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  107.593524][ T5843]  ? __mod_zone_page_state+0xd7/0x140
[  107.593569][ T5843]  ? folios_put_refs+0x560/0x640
[  107.593586][ T5843]  ? __pfx_folios_put_refs+0x10/0x10
[  107.593598][ T5843]  ? rcu_is_watching+0x15/0xb0
[  107.593609][ T5843]  ? lru_add+0xa2f/0xd80
[  107.593620][ T5843]  ? lru_add+0x198/0xd80
[  107.593633][ T5843]  ? do_raw_spin_lock+0x121/0x290
[  107.593651][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[  107.593665][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  107.593680][ T5843]  do_writepages+0x32e/0x550
[  107.593694][ T5843]  ? rcu_is_watching+0x15/0xb0
[  107.593708][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[  107.593724][ T5843]  filemap_fdatawrite+0x199/0x240
[  107.593739][ T5843]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  107.593763][ T5843]  ? rcu_is_watching+0x15/0xb0
[  107.593776][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[  107.593791][ T5843]  f2fs_sync_dirty_inodes+0x31f/0x830
[  107.593808][ T5843]  f2fs_write_checkpoint+0x95a/0x1df0
[  107.593825][ T5843]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  107.593862][ T5843]  ? kill_f2fs_super+0x298/0x6c0
[  107.593874][ T5843]  kill_f2fs_super+0x2c3/0x6c0
[  107.593887][ T5843]  ? __pfx_kill_f2fs_super+0x10/0x10
[  107.593898][ T5843]  ? radix_tree_delete_item+0x2b6/0x400
[  107.593916][ T5843]  ? shrinker_free+0x2ce/0x3e0
[  107.593929][ T5843]  deactivate_locked_super+0xbc/0x130
[  107.593942][ T5843]  cleanup_mnt+0x425/0x4c0
[  107.593955][ T5843]  task_work_run+0x1d4/0x260
[  107.593976][ T5843]  ? __pfx_task_work_run+0x10/0x10
[  107.593991][ T5843]  ? __x64_sys_umount+0x122/0x160
[  107.594008][ T5843]  ? __pfx___x64_sys_umount+0x10/0x10
[  107.594022][ T5843]  ? rcu_is_watching+0x15/0xb0
[  107.594033][ T5843]  exit_to_user_mode_loop+0xec/0x110
[  107.594048][ T5843]  do_syscall_64+0x2bd/0x3b0
[  107.594066][ T5843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.594079][ T5843]  ? exc_page_fault+0x9f/0xf0
[  107.594093][ T5843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.594103][ T5843] RIP: 0033:0x7effb058ff17
[  107.594113][ T5843] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  107.594123][ T5843] RSP: 002b:00007ffcd9c66fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  107.594135][ T5843] RAX: 0000000000000000 RBX: 00007effb0611c05 RCX: 00007effb058ff17
[  107.594143][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd9c67080
[  107.594150][ T5843] RBP: 00007ffcd9c67080 R08: 0000000000000000 R09: 0000000000000000
[  107.594156][ T5843] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd9c68110
[  107.594163][ T5843] R13: 00007effb0611c05 R14: 000000000001a3c3 R15: 00007ffcd9c68150
[  107.594176][ T5843]  </TASK>
[  107.596454][ T5843] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  107.599781][ T5909] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  107.745424][ T8048] loop4: detected capacity change from 0 to 40427
[  107.757684][ T8048] F2FS-fs (loop4): invalid crc value
[  107.791091][ T8048] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  107.805085][ T8048] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  107.898912][ T5909] usb 2-1: config 0 has no interfaces?
[  107.901265][ T5909] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  107.905078][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.927736][ T5909] usb 2-1: config 0 descriptor??
[  107.980385][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'.
[  108.113400][ T8068] loop2: detected capacity change from 0 to 8192
[  108.145206][ T5909] usb 2-1: USB disconnect, device number 14
[  108.429799][ T8083] loop2: detected capacity change from 0 to 764
[  108.448038][ T8083] rock: directory entry would overflow storage
[  108.450699][ T8083] rock: sig=0x4654, size=5, remaining=4
[  108.524962][ T8085] loop2: detected capacity change from 0 to 8192
[  108.529304][ T8085] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  108.532393][ T8085] UDF-fs: Scanning with blocksize 512 failed
[  108.535690][ T8085] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  108.536071][ T5842] Bluetooth: hci2: command tx timeout
[  108.539579][ T8085] UDF-fs: Scanning with blocksize 1024 failed
[  108.545502][ T8085] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  108.550707][ T8085] UDF-fs: Scanning with blocksize 2048 failed
[  108.556997][ T8085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.862869][ T8097] loop2: detected capacity change from 0 to 256
[  108.870133][ T8097] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  109.758650][ T8118] 9pnet_fd: Insufficient options for proto=fd
[  111.762260][ T8139] loop2: detected capacity change from 0 to 256
[  111.766684][ T8139] FAT-fs (loop2): bogus sectors per cluster 223
[  111.769334][ T8139] FAT-fs (loop2): Can't find a valid FAT filesystem
[  111.827923][ T8143] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  111.996909][ T8160] netlink: 40 bytes leftover after parsing attributes in process `syz.2.821'.
[  112.070484][ T8165] loop2: detected capacity change from 0 to 512
[  112.073570][ T8165] EXT4-fs: Ignoring removed oldalloc option
[  112.107523][ T8165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.123997][ T8165] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  112.143028][ T8165] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.822: bg 0: block 217: padding at end of block bitmap is not set
[  112.201573][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.437073][ T8189] loop4: detected capacity change from 0 to 32768
[  112.441730][ T8189] JBD2: Ignoring recovery information on journal
[  112.444080][ T8189] JBD2: corrupted journal superblock
[  112.446443][ T8189] JBD2: error -117 scanning journal
[  112.448665][ T8189] (syz.4.832,8189,1):ocfs2_journal_wipe:1216 ERROR: status = -117
[  112.451941][ T8189] (syz.4.832,8189,1):ocfs2_check_volume:2363 ERROR: status = -117
[  112.455033][ T8189] (syz.4.832,8189,1):ocfs2_check_volume:2432 ERROR: status = -117
[  112.466613][ T8189] (syz.4.832,8189,1):ocfs2_mount_volume:1764 ERROR: status = -117
[  112.470477][ T8189] (syz.4.832,8189,1):ocfs2_fill_super:1177 ERROR: status = -117
[  112.492368][ T8198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.837'.
[  112.508601][ T8198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.837'.
[  112.515009][ T8198] gretap0: entered promiscuous mode
[  112.522105][ T8198] gretap0: left promiscuous mode
[  112.718661][ T8209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  112.726288][ T8211] netlink: 100 bytes leftover after parsing attributes in process `syz.2.839'.
[  112.962257][ T8232] loop4: detected capacity change from 0 to 16
[  112.973696][ T8232] erofs (device loop4): mounted with root inode @ nid 36.
[  113.812960][ T8258] loop4: detected capacity change from 0 to 32768
[  113.858442][ T8258] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  113.865811][ T8258] (syz.4.854,8258,1):ocfs2_find_entry:1094 ERROR: status = -117
[  113.876803][ T8258] (syz.4.854,8258,1):ocfs2_find_entry:1094 ERROR: status = -117
[  113.879549][ T8258] (syz.4.854,8258,1):ocfs2_symlink:2080 ERROR: status = -117
[  113.903871][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.857'.
[  113.916228][ T7838] (syz-executor,7838,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  113.927185][ T7838] ocfs2: Unmounting device (7,4) on (node local)
[  113.952755][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'.
[  113.955774][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'.
[  113.961298][ T8275] netlink: 'syz.1.860': attribute type 18 has an invalid length.
[  113.972177][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'.
[  114.019749][ T8279] netlink: 64 bytes leftover after parsing attributes in process `syz.2.862'.
[  114.071432][ T8283] loop2: detected capacity change from 0 to 64
[  114.285874][ T8292] netlink: 36 bytes leftover after parsing attributes in process `syz.4.867'.
[  114.608880][   T10] iguanair 4-1:0.255: failed to get version
[  114.616224][   T10] iguanair 4-1:0.255: probe with driver iguanair failed with error -110
[  114.732833][   T10] usb 4-1: USB disconnect, device number 11
[  114.776161][    T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  114.957864][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  114.962418][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  114.971792][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  114.982864][    T9] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  114.992385][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.001787][    T9] usb 5-1: Product: syz
[  115.003345][    T9] usb 5-1: Manufacturer: syz
[  115.004895][    T9] usb 5-1: SerialNumber: syz
[  115.012564][    T9] usb 5-1: config 0 descriptor??
[  115.022097][ T8296] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  115.024605][ T8296] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  115.030285][    T9] usb 5-1: ucan: probing device on interface #0
[  115.286047][  T971] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  115.501863][ T8296] loop4: detected capacity change from 0 to 2048
[  115.508838][ T8296] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  115.526077][ T8325] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  115.530635][ T8296] syz.4.869: attempt to access beyond end of device
[  115.530635][ T8296] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  115.570349][  T971] usb 2-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice= 0.f8
[  115.574160][  T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.577666][  T971] usb 2-1: Product: syz
[  115.579438][  T971] usb 2-1: Manufacturer: syz
[  115.581456][  T971] usb 2-1: SerialNumber: syz
[  115.587111][  T971] usb 2-1: config 0 descriptor??
[  115.590452][  T971] hub 2-1:0.0: bad descriptor, ignoring hub
[  115.592898][  T971] hub 2-1:0.0: probe with driver hub failed with error -5
[  115.596339][  T971] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  115.600620][  T971] usb 2-1: Detected SIO
[  115.603248][  T971] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  115.751683][    T9] ucan 5-1:0.0: probe with driver ucan failed with error -71
[  115.761168][    T9] usb 5-1: USB disconnect, device number 3
[  115.906158][  T971] usb 2-1: USB disconnect, device number 15
[  115.909859][  T971] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  115.913858][  T971] ftdi_sio 2-1:0.0: device disconnected
[  116.060562][ T8327] netem: incorrect ge model size
[  116.062712][ T8327] netem: change failed
[  116.216762][ T8334] block nbd2: shutting down sockets
[  116.309929][ T8343] random: crng reseeded on system resumption
[  116.420884][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'.
[  116.425073][ T8352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.893'.
[  116.436759][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'.
[  116.440506][ T8352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.893'.
[  120.262694][ T8403] loop2: detected capacity change from 0 to 1024
[  120.271770][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  120.288664][ T8403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.293329][ T8403] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.295660][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  120.309575][ T8403] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.917: lblock 1 mapped to illegal pblock 1 (length 1)
[  120.318471][ T8403] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117
[  120.323607][ T8403] EXT4-fs (loop2): This should not happen!! Data will be lost
[  120.323607][ T8403] 
[  120.348094][ T8403] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.917: lblock 1 mapped to illegal pblock 1 (length 1)
[  120.366357][ T8403] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117
[  120.379111][ T8410] __nla_validate_parse: 1 callbacks suppressed
[  120.379120][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'.
[  120.384717][ T8403] EXT4-fs (loop2): This should not happen!! Data will be lost
[  120.384717][ T8403] 
[  120.458408][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.755984][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  120.929194][    T9] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  120.933368][    T9] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  120.937309][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.945118][    T9] gspca_main: stv0680-2.14.0 probing 041e:4007
[  120.995983][ T5909] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  121.158948][ T5909] usb 3-1: config 0 has an invalid interface number: 216 but max is 0
[  121.162522][ T5909] usb 3-1: config 0 has no interface number 0
[  121.165245][ T5909] usb 3-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64
[  121.169783][ T5909] usb 3-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0
[  121.174259][ T5909] usb 3-1: config 0 interface 216 has no altsetting 0
[  121.177280][ T5909] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e
[  121.180940][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.185762][ T5909] usb 3-1: config 0 descriptor??
[  121.188761][ T8428] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  121.193309][ T5909] usb 3-1: NFC: intf ffff88802e01f000 id ffffffff8eb53fe0
[  121.401378][   T10] usb 3-1: USB disconnect, device number 13
[  121.596036][ T5909] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  121.745994][ T5909] usb 2-1: Using ep0 maxpacket: 16
[  121.749667][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.753813][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.758025][ T5909] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  121.761923][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.767573][ T5909] usb 2-1: config 0 descriptor??
[  121.979501][    T9] stv0680 5-1:4.0: STV(e): camera ping failed!!
[  122.406626][    T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  122.416261][    T9] stv0680 5-1:4.0: last error: 85,  command = 0x7f
[  122.422226][    T9] usb 5-1: USB disconnect, device number 4
[  122.433146][ T5909] usb 2-1: string descriptor 0 read error: -71
[  122.463228][ T5909] usb 2-1: Max retries (5) exceeded reading string descriptor 200
[  122.467350][ T5909] letsketch 0003:6161:4D15.0002: probe with driver letsketch failed with error -32
[  122.472781][ T5909] usb 2-1: USB disconnect, device number 16
[  122.899818][ T8454] loop4: detected capacity change from 0 to 4096
[  122.911618][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  122.916518][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:4' failed: Read-only file system
[  122.924571][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  122.935090][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:4' failed: Read-only file system
[  123.143820][ T8476] loop4: detected capacity change from 0 to 32768
[  123.146853][ T8476] XFS: noikeep mount option is deprecated.
[  123.152744][ T8476] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  123.160041][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system
[  123.164053][ T8476] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  123.172308][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system
[  123.174307][ T8476] XFS (loop4): Starting recovery (logdev: internal)
[  123.184554][ T8476] XFS (loop4): Ending recovery (logdev: internal)
[  123.206005][ T5909] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  123.209779][ T7838] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  123.441092][ T5909] usb 2-1: unable to get BOS descriptor or descriptor too short
[  123.445316][ T5909] usb 2-1: not running at top speed; connect to a high speed hub
[  123.449712][ T5909] usb 2-1: config 8 has an invalid interface number: 250 but max is 0
[  123.453199][ T5909] usb 2-1: config 8 has no interface number 0
[  123.463443][ T5909] usb 2-1: config 8 interface 250 has no altsetting 0
[  123.468690][ T5909] usb 2-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b9.7d
[  123.472582][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.476104][ T5909] usb 2-1: Product: syz
[  123.477908][ T5909] usb 2-1: Manufacturer: syz
[  123.479923][ T5909] usb 2-1: SerialNumber: syz
[  123.559926][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'.
[  123.690669][ T5909] gspca_main: sn9c2028-2.14.0 probing 0458:7005
[  123.693583][ T5909] gspca_sn9c2028: read1 error -71
[  123.695762][ T5909] gspca_sn9c2028: read1 error -71
[  123.698459][ T5909] gspca_sn9c2028: read1 error -71
[  123.700774][ T5909] sn9c2028 2-1:8.250: probe with driver sn9c2028 failed with error -71
[  123.705505][ T5909] usb 2-1: USB disconnect, device number 17
[  124.329929][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'.
[  124.338656][ T8501] bridge_slave_1: left allmulticast mode
[  124.343947][ T8501] bridge_slave_1: left promiscuous mode
[  124.351777][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.365837][ T8501] bridge_slave_0: left allmulticast mode
[  124.372492][ T8501] bridge_slave_0: left promiscuous mode
[  124.387629][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.319885][ T8508] loop2: detected capacity change from 0 to 4096
[  125.334801][ T8509] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.354188][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:2' failed: Read-only file system
[  125.370104][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:2' failed: Read-only file system
[  125.646316][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'.
[  126.101318][ T8520] netlink: 132 bytes leftover after parsing attributes in process `syz.4.959'.
[  126.676217][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  126.828787][   T24] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  126.834283][   T24] usb 5-1: config 0 has no interface number 0
[  126.841020][   T24] usb 5-1: config 0 interface 12 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[  126.844598][   T24] usb 5-1: config 0 interface 12 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 511
[  126.850693][   T24] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice=5f.c4
[  126.853943][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.858403][   T24] usb 5-1: Product: syz
[  126.860074][   T24] usb 5-1: Manufacturer: syz
[  126.861947][   T24] usb 5-1: SerialNumber: syz
[  126.873243][   T24] usb 5-1: config 0 descriptor??
[  126.875571][ T8529] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  126.880621][ T8537] loop2: detected capacity change from 0 to 1024
[  126.881410][ T8529] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  126.883817][ T8537] EXT4-fs: Ignoring removed nomblk_io_submit option
[  126.890811][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  126.896574][   T24] option 5-1:0.12: GSM modem (1-port) converter detected
[  126.898068][ T8537] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  126.902969][ T8537] System zones: 0-1, 3-36
[  126.907229][   T24] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0
[  126.911149][ T8537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.919512][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  126.947641][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.101098][ T6134] usb 5-1: USB disconnect, device number 5
[  127.128429][ T6134] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  127.139539][ T6134] option 5-1:0.12: device disconnected
[  127.807799][   T33] kauditd_printk_skb: 48 callbacks suppressed
[  127.807854][   T33] audit: type=1326 audit(1755834587.594:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.1.977" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff117b8ebe9 code=0x0
[  128.164997][ T8578] loop2: detected capacity change from 0 to 32768
[  128.173840][ T8578] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  128.178764][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:2' failed: Read-only file system
[  128.182412][ T8578] XFS (loop2): Ending clean mount
[  128.195396][   T33] audit: type=1800 audit(1755834588.044:173): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.984" name="file1" dev="loop2" ino=4425 res=0 errno=0
[  128.195878][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:2' failed: Read-only file system
[  128.217709][ T5843] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  128.285182][ T8590] loop2: detected capacity change from 0 to 512
[  128.292511][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  128.297029][ T8590] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  128.302039][ T8590] EXT4-fs (loop2): 1 truncate cleaned up
[  128.304810][ T8590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.374533][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.896055][ T1271] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  129.044413][ T8622] vivid-008: disconnect
[  129.047591][ T1271] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  129.052080][ T1271] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  129.055720][ T1271] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  129.059709][ T1271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.065552][ T8607] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  129.070604][ T1271] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  129.283016][ T1271] usb 2-1: USB disconnect, device number 18
[  129.824313][ T8621] vivid-008: reconnect
[  130.046132][   T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  130.146065][  T971] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  130.196094][   T24] usb 2-1: Using ep0 maxpacket: 8
[  130.201676][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  130.206737][   T24] usb 2-1: config 127 has an invalid interface number: 250 but max is 1
[  130.210263][   T24] usb 2-1: config 127 has an invalid interface number: 129 but max is 1
[  130.213773][   T24] usb 2-1: config 127 has no interface number 0
[  130.216958][   T24] usb 2-1: config 127 has no interface number 1
[  130.219572][   T24] usb 2-1: config 127 interface 250 altsetting 8 bulk endpoint 0xA has invalid maxpacket 64
[  130.223757][   T24] usb 2-1: config 127 interface 250 has no altsetting 0
[  130.226967][   T24] usb 2-1: config 127 interface 129 has no altsetting 0
[  130.232144][   T24] usb 2-1: New USB device found, idVendor=0582, idProduct=04f4, bcdDevice=51.ac
[  130.235867][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.239281][   T24] usb 2-1: Product: syz
[  130.241026][   T24] usb 2-1: Manufacturer: syz
[  130.243281][   T24] usb 2-1: SerialNumber: syz
[  130.248188][ T8637] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  130.298121][  T971] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  130.300793][  T971] usb 5-1: config 0 has no interface number 0
[  130.302827][  T971] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  130.306461][  T971] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  130.312793][  T971] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  130.315782][  T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.318879][  T971] usb 5-1: Product: syz
[  130.320364][  T971] usb 5-1: Manufacturer: syz
[  130.321918][  T971] usb 5-1: SerialNumber: syz
[  130.328993][  T971] usb 5-1: config 0 descriptor??
[  130.331653][ T8641] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  130.335126][  T971] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  130.341318][  T971] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  130.405084][ T8643] loop2: detected capacity change from 0 to 32768
[  130.408304][ T8643] XFS: noikeep mount option is deprecated.
[  130.420834][ T8072] udevd[8072]: symlink '../../loop2' '/dev/disk/by-uuid/ed37bf6e-74ea-4e01-afba-5fee274b0f3a.tmp-b7:2' failed: Read-only file system
[  130.428566][ T8643] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  130.439861][ T8072] udevd[8072]: symlink '../../loop2' '/dev/disk/by-uuid/ed37bf6e-74ea-4e01-afba-5fee274b0f3a.tmp-b7:2' failed: Read-only file system
[  130.447394][ T8643] XFS (loop2): Ending clean mount
[  130.451941][ T8643] XFS (loop2): Quotacheck needed: Please wait.
[  130.461736][ T8643] XFS (loop2): Quotacheck: Done.
[  130.478958][   T24] usb 2-1: USB disconnect, device number 19
[  130.484604][ T5843] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  130.495263][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:127.250/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  130.549165][    C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  130.750654][ T1271] usb 5-1: USB disconnect, device number 6
[  130.761603][ T1271] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  130.769558][ T1271] cyberjack 5-1:0.69: device disconnected
[  130.795419][ T8663] netlink: 'syz.2.1013': attribute type 1 has an invalid length.
[  130.814479][ T8663] bond1: (slave gretap1): making interface the new active one
[  130.818554][ T8663] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  130.930413][ T8674] loop2: detected capacity change from 0 to 64
[  131.448629][ T8684] loop2: detected capacity change from 0 to 40427
[  131.452653][ T8684] F2FS-fs (loop2): invalid crc value
[  131.472145][ T8691] wireguard: wg1: Could not create IPv4 socket
[  131.481405][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system
[  131.500978][ T8684] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  131.507592][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system
[  131.517050][ T8684] F2FS-fs (loop2): Start checkpoint disabled!
[  131.522681][ T8684] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  131.536722][   T33] audit: type=1800 audit(1755834591.394:174): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1023" name="file1" dev="loop2" ino=10 res=0 errno=0
[  131.562725][ T8684] syz.2.1023: attempt to access beyond end of device
[  131.562725][ T8684] loop2: rw=2049, sector=77824, nr_sectors = 800 limit=40427
[  131.573150][   T33] audit: type=1800 audit(1755834591.424:175): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1023" name="file1" dev="loop2" ino=10 res=0 errno=0
[  131.584316][ T8684] syz.2.1023: attempt to access beyond end of device
[  131.584316][ T8684] loop2: rw=2049, sector=78624, nr_sectors = 800 limit=40427
[  131.601402][ T1088] kworker/u10:4: attempt to access beyond end of device
[  131.601402][ T1088] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  131.613814][ T1088] CPU: 1 UID: 0 PID: 1088 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[  131.613828][ T1088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.613833][ T1088] Workqueue: writeback wb_workfn (flush-7:2)
[  131.613850][ T1088] Call Trace:
[  131.613854][ T1088]  <TASK>
[  131.613858][ T1088]  dump_stack_lvl+0x189/0x250
[  131.613871][ T1088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.613879][ T1088]  ? __pfx_queue_work_on+0x10/0x10
[  131.613887][ T1088]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  131.613897][ T1088]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  131.613908][ T1088]  f2fs_handle_critical_error+0x37c/0x540
[  131.613920][ T1088]  f2fs_write_end_io+0x886/0xb60
[  131.613930][ T1088]  __submit_merged_bio+0x27a/0x6a0
[  131.613942][ T1088]  __submit_merged_write_cond+0x255/0x530
[  131.613952][ T1088]  f2fs_write_data_pages+0x261d/0x3000
[  131.613967][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  131.613979][ T1088]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  131.613992][ T1088]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  131.614003][ T1088]  ? trace_f2fs_writepages+0x7f/0x200
[  131.614012][ T1088]  ? f2fs_write_node_pages+0x478/0x6e0
[  131.614022][ T1088]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  131.614031][ T1088]  ? f2fs_update_inode+0x13d9/0x2620
[  131.614041][ T1088]  ? f2fs_write_inode+0x3fb/0x5f0
[  131.614050][ T1088]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  131.614059][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  131.614070][ T1088]  do_writepages+0x32e/0x550
[  131.614079][ T1088]  ? unwind_next_frame+0xa5/0x2390
[  131.614090][ T1088]  __writeback_single_inode+0x145/0xff0
[  131.614099][ T1088]  ? do_raw_spin_unlock+0x4d/0x240
[  131.614110][ T1088]  writeback_sb_inodes+0x6c7/0x1010
[  131.614121][ T1088]  ? fprop_reflect_period_percpu+0x6b/0x330
[  131.614133][ T1088]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  131.614147][ T1088]  ? rcu_is_watching+0x15/0xb0
[  131.614156][ T1088]  wb_writeback+0x43b/0xaf0
[  131.614166][ T1088]  ? queue_io+0x3c1/0x590
[  131.614175][ T1088]  ? __pfx_wb_writeback+0x10/0x10
[  131.614184][ T1088]  ? rcu_is_watching+0x15/0xb0
[  131.614191][ T1088]  wb_workfn+0x409/0xef0
[  131.614200][ T1088]  ? __pfx_wb_workfn+0x10/0x10
[  131.614207][ T1088]  ? rcu_is_watching+0x15/0xb0
[  131.614213][ T1088]  ? rcu_is_watching+0x15/0xb0
[  131.614221][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  131.614228][ T1088]  ? rcu_is_watching+0x15/0xb0
[  131.614234][ T1088]  ? lock_acquire+0x5f/0x360
[  131.614244][ T1088]  ? rcu_is_watching+0x15/0xb0
[  131.614250][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  131.614256][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  131.614263][ T1088]  process_scheduled_works+0xae1/0x17b0
[  131.614274][ T1088]  ? __pfx_process_scheduled_works+0x10/0x10
[  131.614283][ T1088]  worker_thread+0x8a0/0xda0
[  131.614294][ T1088]  kthread+0x711/0x8a0
[  131.614303][ T1088]  ? __pfx_worker_thread+0x10/0x10
[  131.614309][ T1088]  ? __pfx_kthread+0x10/0x10
[  131.614317][ T1088]  ? rcu_is_watching+0x15/0xb0
[  131.614323][ T1088]  ? __pfx_kthread+0x10/0x10
[  131.614360][ T1088]  ret_from_fork+0x3fc/0x770
[  131.614369][ T1088]  ? __pfx_ret_from_fork+0x10/0x10
[  131.614377][ T1088]  ? __switch_to_asm+0x39/0x70
[  131.614386][ T1088]  ? __switch_to_asm+0x33/0x70
[  131.614394][ T1088]  ? __pfx_kthread+0x10/0x10
[  131.614402][ T1088]  ret_from_fork_asm+0x1a/0x30
[  131.614414][ T1088]  </TASK>
[  131.614417][ T1088] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  131.922026][ T8711] loop4: detected capacity change from 0 to 32768
[  131.941206][ T8713] loop2: detected capacity change from 0 to 8192
[  131.949402][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system
[  131.959618][ T8711] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  131.980562][ T8072] udevd[8072]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system
[  131.999004][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system
[  132.013915][ T8072] udevd[8072]: symlink '../../loop2' '/dev/disk/by-uuid/1DE1-D756.tmp-b7:2' failed: Read-only file system
[  132.036175][ T7838] ocfs2: Unmounting device (7,4) on (node local)
[  132.206641][ T8719] loop2: detected capacity change from 0 to 40427
[  132.213047][ T8719] F2FS-fs (loop2): invalid crc value
[  132.218701][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system
[  132.237520][ T8719] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  132.241808][ T8719] F2FS-fs (loop2): Start checkpoint disabled!
[  132.254389][ T8719] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  132.298178][ T1366] kworker/u9:3: attempt to access beyond end of device
[  132.298178][ T1366] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  132.302793][ T1366] CPU: 0 UID: 0 PID: 1366 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
[  132.302803][ T1366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.302809][ T1366] Workqueue: writeback wb_workfn (flush-7:2)
[  132.302822][ T1366] Call Trace:
[  132.302826][ T1366]  <TASK>
[  132.302830][ T1366]  dump_stack_lvl+0x189/0x250
[  132.302841][ T1366]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.302850][ T1366]  ? __pfx_queue_work_on+0x10/0x10
[  132.302857][ T1366]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  132.302868][ T1366]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  132.302878][ T1366]  f2fs_handle_critical_error+0x37c/0x540
[  132.302890][ T1366]  f2fs_write_end_io+0x886/0xb60
[  132.302900][ T1366]  __submit_merged_bio+0x27a/0x6a0
[  132.302911][ T1366]  __submit_merged_write_cond+0x255/0x530
[  132.302926][ T1366]  f2fs_write_data_pages+0x261d/0x3000
[  132.302952][ T1366]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.302972][ T1366]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  132.302993][ T1366]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  132.303005][ T1366]  ? trace_f2fs_writepages+0x7f/0x200
[  132.303014][ T1366]  ? f2fs_write_node_pages+0x478/0x6e0
[  132.303022][ T1366]  ? xa_load+0x60/0x210
[  132.303035][ T1366]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  132.303043][ T1366]  ? do_raw_spin_lock+0x121/0x290
[  132.303052][ T1366]  ? rcu_is_watching+0x15/0xb0
[  132.303060][ T1366]  ? rcu_qs+0xc4/0x170
[  132.303066][ T1366]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.303076][ T1366]  do_writepages+0x32e/0x550
[  132.303089][ T1366]  __writeback_single_inode+0x145/0xff0
[  132.303098][ T1366]  ? do_raw_spin_unlock+0x4d/0x240
[  132.303106][ T1366]  writeback_sb_inodes+0x6c7/0x1010
[  132.303119][ T1366]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  132.303134][ T1366]  ? rcu_is_watching+0x15/0xb0
[  132.303142][ T1366]  wb_writeback+0x43b/0xaf0
[  132.303151][ T1366]  ? queue_io+0x3c1/0x590
[  132.303159][ T1366]  ? __pfx_wb_writeback+0x10/0x10
[  132.303169][ T1366]  ? rcu_is_watching+0x15/0xb0
[  132.303176][ T1366]  wb_workfn+0x409/0xef0
[  132.303185][ T1366]  ? __pfx_wb_workfn+0x10/0x10
[  132.303196][ T1366]  ? rcu_is_watching+0x15/0xb0
[  132.303203][ T1366]  ? process_scheduled_works+0x9ef/0x17b0
[  132.303210][ T1366]  ? rcu_is_watching+0x15/0xb0
[  132.303217][ T1366]  ? lock_acquire+0x5f/0x360
[  132.303227][ T1366]  ? rcu_is_watching+0x15/0xb0
[  132.303233][ T1366]  ? process_scheduled_works+0x9ef/0x17b0
[  132.303239][ T1366]  ? process_scheduled_works+0x9ef/0x17b0
[  132.303245][ T1366]  process_scheduled_works+0xae1/0x17b0
[  132.303256][ T1366]  ? __pfx_process_scheduled_works+0x10/0x10
[  132.303266][ T1366]  worker_thread+0x8a0/0xda0
[  132.303276][ T1366]  kthread+0x711/0x8a0
[  132.303285][ T1366]  ? __pfx_worker_thread+0x10/0x10
[  132.303292][ T1366]  ? __pfx_kthread+0x10/0x10
[  132.303300][ T1366]  ? rcu_is_watching+0x15/0xb0
[  132.303307][ T1366]  ? __pfx_kthread+0x10/0x10
[  132.303315][ T1366]  ret_from_fork+0x3fc/0x770
[  132.303351][ T1366]  ? __pfx_ret_from_fork+0x10/0x10
[  132.303361][ T1366]  ? __switch_to_asm+0x39/0x70
[  132.303370][ T1366]  ? __switch_to_asm+0x33/0x70
[  132.303378][ T1366]  ? __pfx_kthread+0x10/0x10
[  132.303386][ T1366]  ret_from_fork_asm+0x1a/0x30
[  132.303397][ T1366]  </TASK>
[  132.303401][ T1366] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  132.428598][ T8723] loop4: detected capacity change from 0 to 32768
[  132.530234][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.532952][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.072131][ T8749] loop2: detected capacity change from 0 to 128
[  133.079718][ T8749] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  133.085793][ T8749] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  133.110545][ T1088] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  133.326076][ T1271] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  133.488516][ T1271] usb 2-1: Using ep0 maxpacket: 16
[  133.493744][ T1271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.498085][ T1271] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  133.505144][ T1271] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  133.511941][ T1271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.519279][ T1271] usb 2-1: Product: syz
[  133.523291][ T1271] usb 2-1: Manufacturer: syz
[  133.527751][ T1271] usb 2-1: SerialNumber: syz
[  133.549361][ T8763] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  133.738806][ T1271] usb 2-1: 0:2 : does not exist
[  133.745642][ T1271] usb 2-1: unit 9 not found!
[  133.752914][ T1271] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4)
[  133.765277][ T1271] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4)
[  133.772758][ T1271] usb 2-1: 4:0: cannot get min/max values for control 3 (id 4)
[  133.795458][ T1271] usb 2-1: USB disconnect, device number 20
[  134.210583][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'.
[  134.214281][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1064'.
[  134.218963][ T8785] netlink: 'syz.2.1064': attribute type 20 has an invalid length.
[  134.225799][ T5859] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.225832][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'.
[  134.229487][ T5859] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  134.236926][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1064'.
[  134.240726][ T8785] netlink: 'syz.2.1064': attribute type 20 has an invalid length.
[  134.243917][ T5859] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  134.248795][ T5859] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.390405][ T8789] loop2: detected capacity change from 0 to 32768
[  134.394411][ T8789] bcachefs (/dev/loop2): error reading default superblock: Invalid superblock: too big (got 4760 bytes, layout max 512)
[  134.400152][ T8789] syz.2.1066: attempt to access beyond end of device
[  134.400152][ T8789] loop2: rw=6144, sector=18446744073709551615, nr_sectors = 2 limit=32768
[  134.467464][ T8789] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,degraded=yes,journal_flush_disabled,fsck,fix_errors=yes,norecovery,nojournal_transaction_names
[  134.467477][ T8789]   allowing incompatible features above 0.0: (unknown version)
[  134.467482][ T8789]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  134.482627][ T8789] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  134.485804][ T8789] bcachefs (loop2): recovering from clean shutdown, journal seq 13
[  134.488849][ T8789] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  134.488849][ T8789]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  134.503062][ T8789] bcachefs (loop2): btree node read error at btree alloc level 0/0
[  134.503071][ T8789]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1818ce08861e3527 written 40 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  134.503077][ T8789]   loop2 node offset 0/40 bset u64s 0: checksum error, type chacha20_poly1305_128: got 2b3128554b281fc996daa8c45b178c02 should be a1c0cae4d1c6eac9087fba7ada6f601b
[  134.503084][ T8789]   loop2 node offset 0/40 bset u64s 0: incorrect max key 18446744073709530367:U64_MAX:U32_MAX
[  134.503088][ T8789]   loop2 btree validate error
[  134.503092][ T8789]   flagging btree alloc lost data
[  134.503096][ T8789]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  134.503101][ T8789]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[  134.503105][ T8789]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[  134.503110][ T8789]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[  134.503115][ T8789]   ret btree_node_read_err_bad_node
[  134.541992][ T8789] bcachefs (loop2): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[  134.546987][ T8789] bcachefs (loop2): btree node read error at btree snapshots level 0/0
[  134.546998][ T8789]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d771a06d670df06c written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0
[  134.547008][ T8789]   loop2 node offset 0/16 bset u64s 0: checksum error, type chacha20_poly1305_128: got 7d32bc923954246f647c1bffb8ad6e4f should be 3f4bb4678363c29f1ca269ce5970cac0
[  134.547018][ T8789]   loop2 btree validate error
[  134.547024][ T8789]   repair success (rewriting node)
[  134.565501][ T8789] bcachefs (loop2): btree node read error at btree backpointers level 0/0
[  134.565513][ T8789]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 3b468546fb27822d written 24 min_key POS_MIN durability: 1 ptr: 0:36:0 gen 0
[  134.565522][ T8789]   loop2 node offset 16/24 bset u64s 14: checksum error, type chacha20_poly1305_128: got 18612bb0bd5c0ead57b5f85959915bcf should be 6399ef4aeb6d8a4369c39b0b9ed27362
[  134.565529][ T8789]   loop2 btree validate error
[  134.565532][ T8789]   repair success (rewriting node)
[  134.583782][ T8789] bcachefs (loop2): check_topology... done
[  134.586325][ T8789] bcachefs (loop2): accounting_read... done
[  134.588832][ T8789] bcachefs (loop2): alloc_read... done
[  134.590921][ T8789] bcachefs (loop2): snapshots_read... done
[  134.593063][ T8789] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean
[  134.597091][ T8789] bcachefs (loop2): done starting filesystem
[  134.616179][ T5843] bcachefs (loop2): shutting down
[  134.623445][ T5843] bcachefs (loop2): shutdown complete
[  134.636410][ T1271] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  134.805966][ T1271] usb 2-1: Using ep0 maxpacket: 16
[  134.809550][ T1271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.819546][ T1271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.822781][ T1271] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  134.828141][ T1271] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  134.835961][ T1271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.844374][ T1271] usb 2-1: config 0 descriptor??
[  134.957493][ T5842] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[  135.157892][ T8815] netlink: zone id is out of range
[  135.162061][ T8815] netlink: zone id is out of range
[  135.164727][ T8815] netlink: zone id is out of range
[  135.167625][ T8815] netlink: zone id is out of range
[  135.169801][ T8815] netlink: zone id is out of range
[  135.171975][ T8815] netlink: zone id is out of range
[  135.174790][ T8815] netlink: zone id is out of range
[  135.179337][ T8815] netlink: zone id is out of range
[  135.182892][ T8815] netlink: zone id is out of range
[  135.226692][ T8815] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  135.262679][ T1271] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input11
[  135.266188][ T1271] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  135.459863][ T1271] usb 2-1: USB disconnect, device number 21
[  135.576723][ T8818] loop2: detected capacity change from 0 to 512
[  135.694383][ T8826] loop2: detected capacity change from 0 to 512
[  135.701827][ T8826] EXT4-fs (loop2): #blocks per group too big: 65535
[  135.704106][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  135.782197][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'.
[  135.785792][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'.
[  135.790777][ T8832] netlink: 'syz.2.1082': attribute type 18 has an invalid length.
[  135.941445][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1086'.
[  135.945400][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1086'.
[  136.201379][ T8865] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1090'.
[  136.462729][ T8873] netlink: 'syz.4.1097': attribute type 25 has an invalid length.
[  136.466313][ T8873] netlink: 'syz.4.1097': attribute type 7 has an invalid length.
[  136.523259][ T8864] loop2: detected capacity change from 0 to 40427
[  136.541433][ T8864] F2FS-fs (loop2): Wrong segment_count / block_count (64 > 16384)
[  136.544911][ T8864] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  136.576706][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system
[  136.577248][ T8864] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  136.588713][ T8864] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  136.592219][ T8864] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  136.602096][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system
[  136.918033][ T8881] loop2: detected capacity change from 0 to 32768
[  136.922532][ T8881] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1099 (8881)
[  136.938919][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:2' failed: Read-only file system
[  136.949946][ T8881] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  136.959411][ T8881] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  136.964340][ T8881] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  137.027926][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:2' failed: Read-only file system
[  137.060054][ T8905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1105'.
[  137.105464][ T8881] BTRFS info (device loop2): rebuilding free space tree
[  137.117691][ T8881] BTRFS info (device loop2): disabling free space tree
[  137.121011][ T8881] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  137.125042][ T8881] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  137.131904][ T8881] BTRFS info (device loop2): setting nodatasum
[  137.134641][ T8881] BTRFS info (device loop2): allowing degraded mounts
[  137.138881][ T8881] BTRFS info (device loop2): enabling disk space caching
[  137.141949][ T8881] BTRFS info (device loop2): force clearing of disk cache
[  137.144922][ T8881] BTRFS info (device loop2): force zlib compression, level 3
[  137.174704][ T5843] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  137.267604][ T8920] loop2: detected capacity change from 0 to 1024
[  137.271249][ T8920] EXT4-fs: Ignoring removed oldalloc option
[  137.273928][ T8920] EXT4-fs: Ignoring removed bh option
[  137.281813][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  137.290487][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  137.291344][ T8920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.332942][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.353402][   T33] audit: type=1326 audit(1755834597.204:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.4.1114" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e9798ebe9 code=0x0
[  137.489921][   T51] hid-generic 0004:0006:0003.0004: unknown main item tag 0x1
[  137.495511][   T51] hid-generic 0004:0006:0003.0004: hidraw0: <UNKNOWN> HID v0.09 Device [syz1] on syz1
[  137.586032][   T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  137.737268][ T8953] sctp_transport_update_pmtu: 49 callbacks suppressed
[  137.737309][ T8953] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  137.744905][ T8953] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  137.750819][ T8953] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  137.755477][ T8953] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  137.762208][ T8953] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  137.767451][ T8953] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  137.771945][ T8953] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  137.776870][ T8953] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  137.784824][ T8953] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  137.791345][ T8953] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  138.218540][ T8955] loop4: detected capacity change from 0 to 16
[  138.224999][ T8955] erofs (device loop4): mounted with root inode @ nid 36.
[  138.238917][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:4' failed: Read-only file system
[  138.258942][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:4' failed: Read-only file system
[  138.263988][   T33] audit: type=1800 audit(1755834598.094:177): pid=8955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1124" name="file1" dev="loop4" ino=86 res=0 errno=0
[  138.396050][   T24] usb 2-1: Using ep0 maxpacket: 16
[  138.400406][   T24] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  138.406024][   T24] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  138.411006][   T24] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  138.426745][   T24] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  138.436406][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  138.448328][   T24] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  138.452247][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.452719][ T8963] loop2: detected capacity change from 0 to 128
[  138.455777][   T24] usb 2-1: Product: syz
[  138.460947][   T24] usb 2-1: Manufacturer: syz
[  138.462691][ T8963] EXT4-fs: Ignoring removed nomblk_io_submit option
[  138.462995][   T24] usb 2-1: SerialNumber: syz
[  138.465759][ T8963] EXT4-fs: Ignoring removed nomblk_io_submit option
[  138.472142][   T24] usb 2-1: config 0 descriptor??
[  138.475815][ T8929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  138.481678][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:2' failed: Read-only file system
[  138.488963][ T8963] EXT4-fs (loop2): Test dummy encryption mode enabled
[  138.494367][ T8963] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  138.499735][ T8963] ext4 filesystem being mounted at /446/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  138.519096][ T5843] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  138.607687][ T8973] netlink: 'syz.2.1131': attribute type 1 has an invalid length.
[  138.610854][ T8973] netlink: 'syz.2.1131': attribute type 8 has an invalid length.
[  138.684072][ T8929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  138.694051][   T24] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12
[  138.901000][   T24] usb 2-1: USB disconnect, device number 22
[  139.986107][   T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  140.136065][   T24] usb 2-1: Using ep0 maxpacket: 32
[  140.141421][   T24] usb 2-1: config 0 has an invalid interface number: 151 but max is 0
[  140.144778][   T24] usb 2-1: config 0 has no interface number 0
[  140.152330][   T24] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  140.156207][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.159643][   T24] usb 2-1: Product: syz
[  140.161498][   T24] usb 2-1: Manufacturer: syz
[  140.163407][   T24] usb 2-1: SerialNumber: syz
[  140.169327][   T24] usb 2-1: config 0 descriptor??
[  140.387722][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  140.420619][   T24] usb 2-1: USB disconnect, device number 23
[  141.010459][ T9019] __nla_validate_parse: 1 callbacks suppressed
[  141.010469][ T9019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1153'.
[  141.661476][ T9033] loop4: detected capacity change from 0 to 1024
[  141.689739][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  141.710109][ T9033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  141.718370][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:4' failed: Read-only file system
[  141.733087][ T9033] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.761296][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  141.775281][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:4' failed: Read-only file system
[  141.840553][ T9037] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.1158: lblock 0 mapped to illegal pblock 0 (length 6)
[  141.854319][ T9037] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  141.865486][ T9037] EXT4-fs (loop4): This should not happen!! Data will be lost
[  141.865486][ T9037] 
[  142.297192][ T1271] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  142.335587][ T8119] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u9:7: lblock 8 mapped to illegal pblock 8 (length 8)
[  142.342193][ T8119] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  142.346395][ T8119] EXT4-fs (loop4): This should not happen!! Data will be lost
[  142.346395][ T8119] 
[  142.360997][ T8119] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  142.366401][ T8119] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28
[  142.370806][ T8119] EXT4-fs (loop4): This should not happen!! Data will be lost
[  142.370806][ T8119] 
[  142.374025][ T8119] EXT4-fs (loop4): Total free blocks count 0
[  142.376641][ T8119] EXT4-fs (loop4): Free/Dirty block details
[  142.378845][ T8119] EXT4-fs (loop4): free_blocks=4293918720
[  142.446136][ T1271] usb 2-1: Using ep0 maxpacket: 32
[  142.449362][ T1271] usb 2-1: config 0 has an invalid interface number: 111 but max is 0
[  142.452725][ T1271] usb 2-1: config 0 has no interface number 0
[  142.457048][ T1271] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  142.460718][ T1271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.463975][ T1271] usb 2-1: Product: syz
[  142.465593][ T1271] usb 2-1: Manufacturer: syz
[  142.467472][ T1271] usb 2-1: SerialNumber: syz
[  142.470112][ T1271] usb 2-1: config 0 descriptor??
[  142.675739][ T1271] snd-usb-6fire 2-1:0.111: unable to receive device firmware state.
[  142.682065][ T1271] snd-usb-6fire 2-1:0.111: probe with driver snd-usb-6fire failed with error -71
[  142.686385][ T1271] usb 2-1: USB disconnect, device number 24
[  142.979437][ T9056] loop4: detected capacity change from 0 to 64
[  143.010628][   T33] audit: type=1800 audit(1755834602.864:178): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1167" name="file1" dev="loop4" ino=5 res=0 errno=0
[  143.088733][ T9055] loop2: detected capacity change from 0 to 32768
[  143.091742][ T9055] btrfs: Deprecated parameter 'usebackuproot'
[  143.094224][ T9055] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  143.098732][ T9055] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1166 (9055)
[  143.106267][ T9055] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  143.110350][ T9055] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  143.122506][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:2' failed: Read-only file system
[  143.191311][ T9055] BTRFS info (device loop2): rebuilding free space tree
[  143.197642][ T9055] BTRFS info (device loop2): enabling ssd optimizations
[  143.200591][ T9055] BTRFS info (device loop2): using spread ssd allocation scheme
[  143.204533][ T9055] BTRFS info (device loop2): enabling free space tree
[  143.207831][ T9055] BTRFS info (device loop2): force clearing of disk cache
[  143.210709][ T9055] BTRFS info (device loop2): enabling auto defrag
[  143.213291][ T9055] BTRFS info (device loop2): doing ref verification
[  143.216057][ T9055] BTRFS info (device loop2): trying to use backup root at mount time
[  143.219308][ T9055] BTRFS info (device loop2): max_inline set to 4096
[  143.329209][ T9078] loop4: detected capacity change from 0 to 32768
[  143.342552][ T9078] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1171 (9078)
[  143.364680][ T5843] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  143.369921][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:2' failed: Read-only file system
[  143.371531][ T8072] udevd[8072]: symlink '../../loop4' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:4' failed: Read-only file system
[  143.382106][ T9078] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  143.394222][ T9078] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  143.405071][ T9078] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  143.472730][ T9078] BTRFS info (device loop4): rebuilding free space tree
[  143.487702][ T9078] BTRFS info (device loop4): disabling free space tree
[  143.491862][ T9078] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  143.506882][ T9078] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  143.524336][ T9078] BTRFS info (device loop4): setting nodatasum
[  143.528317][ T9078] BTRFS info (device loop4): allowing degraded mounts
[  143.530886][ T9078] BTRFS info (device loop4): enabling disk space caching
[  143.533695][ T9078] BTRFS info (device loop4): force clearing of disk cache
[  143.537957][ T9078] BTRFS info (device loop4): max_inline set to 599
[  143.559979][ T7838] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  144.336099][ T1271] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  144.517706][ T1271] usb 2-1: config 0 has an invalid interface number: 197 but max is 0
[  144.521327][ T1271] usb 2-1: config 0 has no interface number 0
[  144.524384][ T1271] usb 2-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[  144.531740][ T1271] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  144.542426][ T1271] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42
[  144.550085][ T1271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.554034][ T1271] usb 2-1: Product: syz
[  144.555985][ T1271] usb 2-1: Manufacturer: syz
[  144.557991][ T1271] usb 2-1: SerialNumber: syz
[  144.563872][ T9145] loop2: detected capacity change from 0 to 512
[  144.567127][ T1271] usb 2-1: config 0 descriptor??
[  144.569721][ T9139] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  144.583582][ T8072] udevd[8072]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  144.594619][ T9145] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  144.598682][ T8072] udevd[8072]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  144.599428][ T9145] System zones: 0-2, 18-18, 34-34
[  144.606811][ T9145] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1193: bg 0: block 248: padding at end of block bitmap is not set
[  144.613262][ T9145] Quota error (device loop2): write_blk: dquota write failed
[  144.616979][ T9145] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  144.621066][ T9145] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1193: Failed to acquire dquot type 1
[  144.626639][ T9145] EXT4-fs (loop2): 1 truncate cleaned up
[  144.629679][ T9145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.634784][ T9145] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.656579][ T9145] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1193: iget: bad i_size value: 360287970189639690
[  144.688633][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.792213][   T51] usb 2-1: USB disconnect, device number 25
[  144.917246][ T9149] loop2: detected capacity change from 0 to 32768
[  144.935722][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:2' failed: Read-only file system
[  144.944121][ T9149] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  144.990890][ T5843] ocfs2: Unmounting device (7,2) on (node local)
[  145.348234][ T9186] loop4: detected capacity change from 0 to 2048
[  145.349735][ T9186] NILFS (loop4): invalid segment: Checksum error in super root
[  145.349746][ T9186] NILFS (loop4): error -22 while loading super root
[  145.396051][ T1271] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  145.417867][ T9193] loop4: detected capacity change from 0 to 512
[  145.424482][ T9193] EXT4-fs: Ignoring removed orlov option
[  145.430512][ T9193] EXT4-fs (loop4): Test dummy encryption mode enabled
[  145.434452][ T9193] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size
[  145.557967][ T1271] usb 3-1: Using ep0 maxpacket: 8
[  145.561657][ T1271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.565283][ T1271] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  145.568859][ T1271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.575095][ T1271] usb 3-1: config 0 descriptor??
[  145.978068][ T1271] usbhid 3-1:0.0: can't add hid device: -71
[  145.980588][ T1271] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  145.984877][ T1271] usb 3-1: USB disconnect, device number 14
[  147.036792][ T9216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1223'.
[  147.137059][ T9212] loop2: detected capacity change from 0 to 262144
[  147.142402][ T9212] F2FS-fs (loop2): invalid crc value
[  147.169141][ T9212] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  147.173740][ T9212] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  147.186169][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/736ff085-2528-4e7f-b61f-8c944ae13605.tmp-b7:2' failed: Read-only file system
[  147.199021][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/736ff085-2528-4e7f-b61f-8c944ae13605.tmp-b7:2' failed: Read-only file system
[  147.210601][ T9212] F2FS-fs (loop2): sanity_check_inode: inode (ino=7, mode=33261) should not have inline_data, run fsck to fix
[  147.926636][ T1271] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  148.078250][ T1271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.082968][ T1271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.087117][ T1271] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  148.092444][ T1271] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  148.106011][ T1271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.117612][ T1271] usb 5-1: config 0 descriptor??
[  148.266121][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  148.467078][    T9] usb 3-1: Using ep0 maxpacket: 8
[  148.472051][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[  148.478358][    T9] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  148.481801][    T9] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  148.484568][    T9] usb 3-1: Product: syz
[  148.486885][    T9] usb 3-1: Manufacturer: syz
[  148.488489][    T9] usb 3-1: SerialNumber: syz
[  148.545168][ T1271] dragonrise 0003:0079:0011.0005: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.4-1/input0
[  148.690053][ T9269] CUSE: unknown device info "!"
[  148.692364][ T9269] CUSE: zero length info key specified
[  148.702845][    T9] usb 3-1: Handspring Visor / Palm OS: No valid connect info available
[  148.707132][    T9] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  148.710655][    T9] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  148.713982][    T9] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2
[  148.746705][ T1271] usb 5-1: USB disconnect, device number 7
[  148.908083][    T9] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[  148.912866][    T9] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  148.918736][    T9] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  149.110743][ T1271] usb 3-1: USB disconnect, device number 15
[  149.117257][ T1271] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  149.124053][ T1271] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  149.129826][ T1271] visor 3-1:1.0: device disconnected
[  149.542306][ T9312] syz.1.1264 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  149.698765][ T9315] loop2: detected capacity change from 0 to 256
[  149.709081][ T9315] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d)
[  149.888763][ T9323] loop2: detected capacity change from 0 to 32768
[  149.892570][ T9323] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1269 (9323)
[  149.901603][ T9323] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  149.906359][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:2' failed: Read-only file system
[  149.907940][ T9323] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  149.960479][ T9323] BTRFS info (device loop2): rebuilding free space tree
[  149.968236][ T9323] BTRFS info (device loop2): enabling ssd optimizations
[  149.971360][ T9323] BTRFS info (device loop2): turning on sync discard
[  149.974237][ T9323] BTRFS info (device loop2): enabling free space tree
[  149.978145][ T9323] BTRFS info (device loop2): force clearing of disk cache
[  149.981284][ T9323] BTRFS info (device loop2): enabling auto defrag
[  149.984116][ T9323] BTRFS info (device loop2): max_inline set to 0
[  149.998145][   T33] audit: type=1800 audit(1755834609.844:179): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1269" name="file1" dev="loop2" ino=260 res=0 errno=0
[  150.012464][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:2' failed: Read-only file system
[  150.116119][    T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  150.269513][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.277158][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.284671][    T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  150.291165][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.302954][    T9] usb 2-1: config 0 descriptor??
[  150.637788][ T5843] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  150.656891][   T51] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  150.715358][    T9] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  150.719269][    T9] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  150.742468][ T9357] loop2: detected capacity change from 0 to 136
[  150.753877][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-label/CDROM.tmp-b7:2' failed: Read-only file system
[  150.759682][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:2' failed: Read-only file system
[  150.779476][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-label/CDROM.tmp-b7:2' failed: Read-only file system
[  150.784651][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:2' failed: Read-only file system
[  150.807931][   T51] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.812422][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  150.822931][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  150.834453][   T51] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  150.841909][   T51] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  150.845540][   T51] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  150.850221][   T51] usb 5-1: Manufacturer: syz
[  150.853426][   T51] usb 5-1: config 0 descriptor??
[  150.919346][    T9] cp2112 0003:10C4:EA90.0006: error requesting version
[  150.925091][    T9] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -71
[  150.931074][    T9] usb 2-1: USB disconnect, device number 26
[  151.076527][ T1271] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  151.096039][   T51] rc_core: IR keymap rc-hauppauge not found
[  151.098308][   T51] Registered IR keymap rc-empty
[  151.099907][   T51] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.116063][   T51] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.136478][   T51] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  151.141324][   T51] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13
[  151.146734][   T51] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.166063][   T51] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.186955][   T51] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.206075][   T51] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.226014][ T1271] usb 3-1: Using ep0 maxpacket: 8
[  151.226434][   T51] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.229865][ T1271] usb 3-1: config 0 has an invalid interface number: 176 but max is 2
[  151.233242][ T1271] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.237036][ T1271] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  151.240040][ T1271] usb 3-1: config 0 has no interface number 0
[  151.242429][ T1271] usb 3-1: config 0 has no interface number 1
[  151.244819][ T1271] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  151.246196][   T51] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.248653][ T1271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.255569][ T1271] usb 3-1: config 0 descriptor??
[  151.258877][ T1271] usb 3-1: unknown number of interfaces: 2
[  151.267240][   T51] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.288132][   T51] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.306059][   T51] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.326124][   T51] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  151.348231][   T51] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  151.352016][   T51] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  151.471349][ T1271] usb 3-1: USB disconnect, device number 16
[  151.512856][   T51] usb 5-1: USB disconnect, device number 8
[  151.668101][ T9376] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1285'.
[  151.719530][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'.
[  151.976045][   T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  152.166392][ T9397] loop4: detected capacity change from 0 to 512
[  152.170021][ T9397] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  152.175120][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  152.192397][ T9397] EXT4-fs (loop4): 1 truncate cleaned up
[  152.194760][ T9397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.246717][   T24] usb 2-1: Using ep0 maxpacket: 32
[  152.254125][   T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  152.259263][   T24] usb 2-1: config 0 has no interface number 0
[  152.271108][   T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.275797][   T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.286337][   T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  152.290333][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.300949][   T24] usb 2-1: config 0 descriptor??
[  152.347469][ T7838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.707209][ T5909] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[  152.867697][ T5909] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2
[  152.871661][ T5909] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  152.877706][ T5909] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  152.882000][ T5909] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  152.885780][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.931286][   T24] uclogic 0003:28BD:0094.0007: pen parameters not found
[  152.935283][   T24] uclogic 0003:28BD:0094.0007: interface is invalid, ignoring
[  153.145085][    T9] usb 2-1: USB disconnect, device number 27
[  153.832980][ T5909] usb 5-1: string descriptor 0 read error: -71
[  153.847663][ T5909] usb 5-1: USB disconnect, device number 9
[  153.946351][ T9434] loop2: detected capacity change from 0 to 4096
[  153.957973][ T9434] NILFS (loop2): invalid segment: Checksum error in segment payload
[  153.961698][ T9434] NILFS (loop2): trying rollback from an earlier position
[  153.967345][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:2' failed: Read-only file system
[  153.979872][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:2' failed: Read-only file system
[  153.990828][ T9434] NILFS (loop2): recovery complete
[  153.993894][ T9439] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.036507][ T9441] loop2: detected capacity change from 0 to 128
[  154.042072][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system
[  154.048370][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:2' failed: Read-only file system
[  154.060479][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system
[  154.068279][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:2' failed: Read-only file system
[  154.080993][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system
[  154.089502][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:2' failed: Read-only file system
[  154.397668][ T9457] capability: warning: `syz.4.1322' uses 32-bit capabilities (legacy support in use)
[  154.403226][ T9457] program syz.4.1322 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  154.426126][   T51] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  154.576045][   T51] usb 3-1: Using ep0 maxpacket: 32
[  154.579864][   T51] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  154.583309][   T51] usb 3-1: config 0 has no interface number 0
[  154.586377][   T51] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  154.592461][   T51] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  154.597032][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.600309][   T51] usb 3-1: Product: syz
[  154.602023][   T51] usb 3-1: Manufacturer: syz
[  154.603912][   T51] usb 3-1: SerialNumber: syz
[  154.608690][   T51] usb 3-1: config 0 descriptor??
[  154.613738][   T51] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  154.618526][   T51] em28xx 3-1:0.132: Video interface 132 found:
[  154.827207][ T9470] loop4: detected capacity change from 0 to 8
[  154.838734][ T9470] SQUASHFS error: xz decompression failed, data probably corrupt
[  154.842196][ T9470] SQUASHFS error: Failed to read block 0x108: -5
[  154.844809][ T9470] SQUASHFS error: Unable to read metadata cache entry [106]
[  154.857088][ T9470] SQUASHFS error: Unable to read inode 0x0
[  155.018920][   T51] em28xx 3-1:0.132: chip ID is em2884
[  155.165322][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1334'.
[  155.286970][ T9488] loop4: detected capacity change from 0 to 256
[  155.297668][ T9488] FAT-fs (loop4): Directory bread(block 64) failed
[  155.300602][ T9488] FAT-fs (loop4): Directory bread(block 65) failed
[  155.303315][ T9488] FAT-fs (loop4): Directory bread(block 66) failed
[  155.308233][ T9488] FAT-fs (loop4): Directory bread(block 67) failed
[  155.311184][ T9488] FAT-fs (loop4): Directory bread(block 68) failed
[  155.313879][ T9488] FAT-fs (loop4): Directory bread(block 69) failed
[  155.317214][ T9488] FAT-fs (loop4): Directory bread(block 70) failed
[  155.320217][ T9488] FAT-fs (loop4): Directory bread(block 71) failed
[  155.323292][ T9488] FAT-fs (loop4): Directory bread(block 72) failed
[  155.326849][ T9488] FAT-fs (loop4): Directory bread(block 73) failed
[  155.364685][ T8119] kworker/u9:7: attempt to access beyond end of device
[  155.364685][ T8119] loop4: rw=1, sector=1224, nr_sectors = 32 limit=256
[  155.371294][ T8119] kworker/u9:7: attempt to access beyond end of device
[  155.371294][ T8119] loop4: rw=1, sector=1288, nr_sectors = 32 limit=256
[  155.377096][ T8119] kworker/u9:7: attempt to access beyond end of device
[  155.377096][ T8119] loop4: rw=1, sector=1352, nr_sectors = 32 limit=256
[  155.382794][ T8119] kworker/u9:7: attempt to access beyond end of device
[  155.382794][ T8119] loop4: rw=1, sector=1416, nr_sectors = 32 limit=256
[  156.006722][   T51] em28xx 3-1:0.132: failed to read eeprom (err=-110)
[  156.009507][   T51] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110]
[  156.106197][   T51] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  156.109203][   T51] em28xx 3-1:0.132: analog set to bulk mode.
[  156.111364][   T24] em28xx 3-1:0.132: Registering V4L2 extension
[  156.115423][   T51] usb 3-1: USB disconnect, device number 17
[  156.118297][   T51] em28xx 3-1:0.132: Disconnecting em28xx
[  156.158372][   T24] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  156.161243][   T24] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  156.202461][   T24] em28xx 3-1:0.132: No AC97 audio processor
[  156.207960][   T24] usb 3-1: Decoder not found
[  156.209830][   T24] em28xx 3-1:0.132: failed to create media graph
[  156.212159][   T24] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  156.215564][   T24] em28xx 3-1:0.132: Remote control support is not available for this card.
[  156.219159][   T51] em28xx 3-1:0.132: Closing input extension
[  156.224528][   T51] em28xx 3-1:0.132: Freeing device
[  156.403860][ T9506] loop4: detected capacity change from 0 to 1024
[  156.407051][ T9506] hfsplus: Bad value for 'gid'
[  156.630592][ T9509] pim6reg: entered allmulticast mode
[  156.667015][ T9508] pim6reg: left allmulticast mode
[  156.834560][ T9511] loop2: detected capacity change from 0 to 8
[  156.897182][ T9511] SQUASHFS error: xz decompression failed, data probably corrupt
[  156.909766][ T9511] SQUASHFS error: Failed to read block 0x108: -5
[  156.928209][ T9511] SQUASHFS error: Unable to read metadata cache entry [106]
[  156.940807][ T9511] SQUASHFS error: Unable to read inode 0x11f
[  157.153794][ T9515] netlink: 'syz.1.1346': attribute type 10 has an invalid length.
[  157.188242][ T9515] team0: Port device syz_tun added
[  157.986030][  T971] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  158.142331][  T971] usb 2-1: Using ep0 maxpacket: 16
[  158.152980][  T971] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  158.161635][  T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.173027][  T971] usb 2-1: config 0 descriptor??
[  158.189777][  T971] gspca_main: sonixj-2.14.0 probing 0471:0327
[  158.436204][ T5909] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  158.587585][ T5909] usb 5-1: Using ep0 maxpacket: 16
[  158.592944][ T5909] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  158.602451][ T5909] usb 5-1: config 0 has no interface number 0
[  158.604941][ T5909] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  158.616742][ T5909] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  158.624642][ T5909] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  158.633996][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.637527][ T5909] usb 5-1: Product: syz
[  158.639398][ T5909] usb 5-1: Manufacturer: syz
[  158.641349][ T5909] usb 5-1: SerialNumber: syz
[  158.644390][ T5909] usb 5-1: config 0 descriptor??
[  158.650861][ T9527] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  158.657210][ T9527] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  158.865685][ T9527] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  158.869156][ T9527] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  158.970994][ T9535] loop2: detected capacity change from 0 to 40427
[  158.975268][ T9535] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  158.978753][ T9535] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  158.982254][ T9535] F2FS-fs (loop2): build fault injection rate: 18446
[  158.987022][ T9535] F2FS-fs (loop2): invalid crc value
[  158.988256][ T8072] udevd[8072]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system
[  158.996386][  T971] gspca_sonixj: reg_r err -71
[  158.998489][  T971] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  159.002005][ T8072] udevd[8072]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system
[  159.005661][  T971] usb 2-1: USB disconnect, device number 28
[  159.033871][ T9535] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  159.038899][ T9535] F2FS-fs (loop2): Start checkpoint disabled!
[  159.042680][ T9535] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  159.045568][ T9535] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  159.082893][   T36] kworker/u10:1: attempt to access beyond end of device
[  159.082893][   T36] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  159.091951][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  159.091970][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.091979][   T36] Workqueue: writeback wb_workfn (flush-7:2)
[  159.092002][   T36] Call Trace:
[  159.092026][   T36]  <TASK>
[  159.092032][   T36]  dump_stack_lvl+0x189/0x250
[  159.092051][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.092064][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  159.092076][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  159.092092][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  159.092135][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  159.092155][   T36]  f2fs_write_end_io+0x886/0xb60
[  159.092172][   T36]  __submit_merged_bio+0x27a/0x6a0
[  159.092190][   T36]  __submit_merged_write_cond+0x255/0x530
[  159.092207][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  159.092235][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  159.092256][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  159.092277][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  159.092297][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  159.092312][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  159.092325][   T36]  ? xa_load+0x60/0x210
[  159.092343][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  159.092356][   T36]  ? do_raw_spin_lock+0x121/0x290
[  159.092372][   T36]  ? lock_release+0x4b/0x3e0
[  159.092390][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  159.092406][   T36]  do_writepages+0x32e/0x550
[  159.092422][   T36]  ? unwind_next_frame+0xa5/0x2390
[  159.092444][   T36]  __writeback_single_inode+0x145/0xff0
[  159.092458][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  159.092471][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  159.092488][   T36]  ? fprop_reflect_period_percpu+0x6b/0x330
[  159.092504][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  159.092548][   T36]  ? rcu_is_watching+0x15/0xb0
[  159.092562][   T36]  wb_writeback+0x43b/0xaf0
[  159.092577][   T36]  ? queue_io+0x3c1/0x590
[  159.092590][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  159.092604][   T36]  ? rcu_is_watching+0x15/0xb0
[  159.092615][   T36]  wb_workfn+0x409/0xef0
[  159.092629][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  159.092639][   T36]  ? rcu_is_watching+0x15/0xb0
[  159.092650][   T36]  ? rcu_is_watching+0x15/0xb0
[  159.092661][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  159.092670][   T36]  ? rcu_is_watching+0x15/0xb0
[  159.092680][   T36]  ? lock_acquire+0x5f/0x360
[  159.092696][   T36]  ? rcu_is_watching+0x15/0xb0
[  159.092706][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  159.092715][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  159.092726][   T36]  process_scheduled_works+0xae1/0x17b0
[  159.092746][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  159.092761][   T36]  worker_thread+0x8a0/0xda0
[  159.092780][   T36]  kthread+0x711/0x8a0
[  159.092794][   T36]  ? __pfx_worker_thread+0x10/0x10
[  159.092805][   T36]  ? __pfx_kthread+0x10/0x10
[  159.092818][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  159.092832][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.092846][   T36]  ? __pfx_kthread+0x10/0x10
[  159.092859][   T36]  ret_from_fork+0x3fc/0x770
[  159.092872][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  159.092885][   T36]  ? __switch_to_asm+0x39/0x70
[  159.092898][   T36]  ? __switch_to_asm+0x33/0x70
[  159.092911][   T36]  ? __pfx_kthread+0x10/0x10
[  159.092924][   T36]  ret_from_fork_asm+0x1a/0x30
[  159.092942][   T36]  </TASK>
[  159.093766][   T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  159.217325][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  159.217345][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.217353][   T36] Workqueue: writeback wb_workfn (flush-7:2)
[  159.217375][   T36] Call Trace:
[  159.217380][   T36]  <TASK>
[  159.217386][   T36]  dump_stack_lvl+0x189/0x250
[  159.217404][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.217418][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  159.217430][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  159.217446][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  159.217465][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  159.217484][   T36]  f2fs_write_end_io+0x886/0xb60
[  159.217501][   T36]  __submit_merged_bio+0x27a/0x6a0
[  159.217520][   T36]  __submit_merged_write_cond+0x255/0x530
[  159.217537][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  159.217564][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  159.217585][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  159.217606][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  159.217626][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  159.217640][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  159.217653][   T36]  ? xa_load+0x60/0x210
[  159.217671][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  159.217683][   T36]  ? do_raw_spin_lock+0x121/0x290
[  159.217698][   T36]  ? lock_release+0x4b/0x3e0
[  159.217715][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  159.217730][   T36]  do_writepages+0x32e/0x550
[  159.217744][   T36]  ? unwind_next_frame+0xa5/0x2390
[  159.217762][   T36]  __writeback_single_inode+0x145/0xff0
[  159.217777][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  159.217793][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  159.217813][   T36]  ? fprop_reflect_period_percpu+0x6b/0x330
[  159.217830][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  159.217857][   T36]  ? rcu_is_watching+0x15/0xb0
[  159.217871][   T36]  wb_writeback+0x43b/0xaf0
[  159.217886][   T36]  ? queue_io+0x3c1/0x590
[  159.217907][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  159.217923][   T36]  ? rcu_is_watching+0x15/0xb0
[  159.217935][   T36]  wb_workfn+0x409/0xef0
[  159.217951][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  159.217962][   T36]  ? rcu_is_watching+0x15/0xb0
[  159.217972][   T36]  ? rcu_is_watching+0x15/0xb0
[  159.217985][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  159.217995][   T36]  ? rcu_is_watching+0x15/0xb0
[  159.218004][   T36]  ? lock_acquire+0x5f/0x360
[  159.218021][   T36]  ? rcu_is_watching+0x15/0xb0
[  159.218030][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  159.218040][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  159.218051][   T36]  process_scheduled_works+0xae1/0x17b0
[  159.218069][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  159.218087][   T36]  worker_thread+0x8a0/0xda0
[  159.218137][   T36]  kthread+0x711/0x8a0
[  159.218153][   T36]  ? __pfx_worker_thread+0x10/0x10
[  159.218164][   T36]  ? __pfx_kthread+0x10/0x10
[  159.218177][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  159.218191][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.218206][   T36]  ? __pfx_kthread+0x10/0x10
[  159.218219][   T36]  ret_from_fork+0x3fc/0x770
[  159.218232][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  159.218245][   T36]  ? __switch_to_asm+0x39/0x70
[  159.218259][   T36]  ? __switch_to_asm+0x33/0x70
[  159.218272][   T36]  ? __pfx_kthread+0x10/0x10
[  159.218286][   T36]  ret_from_fork_asm+0x1a/0x30
[  159.218305][   T36]  </TASK>
[  159.218311][   T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  159.275005][ T5909] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  159.349710][ T5909] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  159.355238][ T5909] asix 5-1:0.251: probe with driver asix failed with error -71
[  159.360911][ T5909] usb 5-1: USB disconnect, device number 10
[  160.723073][ T9571] loop2: detected capacity change from 0 to 512
[  160.741143][ T5940] udevd[5940]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  160.760998][ T9571] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1361: casefold flag without casefold feature
[  160.774568][ T9571] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1361: couldn't read orphan inode 15 (err -117)
[  160.784845][ T9571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.936357][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.980572][   T33] audit: type=1326 audit(1755834620.834:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.1.1367" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff117b8ebe9 code=0x7ffc0000
[  160.988773][   T33] audit: type=1326 audit(1755834620.834:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.1.1367" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff117b8ebe9 code=0x7ffc0000
[  160.999685][   T33] audit: type=1326 audit(1755834620.854:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.1.1367" exe="/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7ff117b8ebe9 code=0x7ffc0000
[  161.013237][   T33] audit: type=1326 audit(1755834620.854:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.1.1367" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff117b8ebe9 code=0x7ffc0000
[  161.025764][   T33] audit: type=1326 audit(1755834620.854:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.1.1367" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff117b8ebe9 code=0x7ffc0000
[  161.064676][ T9624] netdevsim netdevsim1 : renamed from netdevsim0
[  161.151735][ T9627] Invalid source name
[  161.170715][ T9620] loop4: detected capacity change from 0 to 32768
[  161.184512][ T9620] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  161.195704][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system
[  161.205177][ T5909] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  161.228346][ T7838] ocfs2: Unmounting device (7,4) on (node local)
[  161.248055][ T5940] udevd[5940]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system
[  161.460972][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short
[  161.481607][ T5909] usb 3-1: not running at top speed; connect to a high speed hub
[  161.487958][ T5909] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.494423][ T5909] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  161.501288][ T5909] usb 3-1: config 1 has no interface number 1
[  161.508861][ T5909] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  161.514836][ T5909] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  161.682126][ T5909] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  161.686543][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.689907][ T5909] usb 3-1: Product: syz
[  161.691839][ T5909] usb 3-1: Manufacturer: syz
[  161.693870][ T5909] usb 3-1: SerialNumber: syz
[  161.994868][ T5909] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  162.080854][ T5909] usb 3-1: USB disconnect, device number 18
[  162.309489][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  162.755692][ T9646] tipc: Started in network mode
[  162.761564][ T9646] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  162.768386][ T9646] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:6401:0100
[  162.771971][ T9646] tipc: Enabled bearer <udp:syz2>, priority 10
[  163.076283][    T9] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  163.267948][ T6042] printk: udevd: 6 output lines suppressed due to ratelimiting
[  163.440465][    T9] usb 2-1: device not accepting address 29, error -71
[  163.886279][ T5909] tipc: Node number set to 1
[  164.276281][    T9] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  164.427846][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  164.434393][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  164.445096][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  164.453547][    T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  164.460047][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.466682][    T9] usb 2-1: Product: syz
[  164.470821][    T9] usb 2-1: Manufacturer: syz
[  164.475026][    T9] usb 2-1: SerialNumber: syz
[  164.479169][    T9] usb 2-1: config 0 descriptor??
[  164.481764][ T9694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  164.485705][ T9694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  164.491018][    T9] usb 2-1: ucan: probing device on interface #0
[  164.894435][    T9] usb 2-1: ucan: device reported invalid device info
[  164.897781][    T9] usb 2-1: ucan: probe failed; try to update the device firmware
[  165.100444][   T24] usb 2-1: USB disconnect, device number 30
[  165.247513][ T9710] loop4: detected capacity change from 0 to 32768
[  165.250262][ T9710] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1409 (9710)
[  165.255645][ T9710] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  165.259951][ T9710] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  165.273461][ T9710] BTRFS info (device loop4): rebuilding free space tree
[  165.277913][ T9710] BTRFS info (device loop4): enabling ssd optimizations
[  165.280354][ T9710] BTRFS info (device loop4): turning on sync discard
[  165.282613][ T9710] BTRFS info (device loop4): enabling free space tree
[  165.285567][ T9710] BTRFS info (device loop4): force clearing of disk cache
[  165.288870][ T9710] BTRFS info (device loop4): enabling auto defrag
[  165.291793][ T9710] BTRFS info (device loop4): max_inline set to 0
[  165.312939][ T7838] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  165.509124][ T9727] loop4: detected capacity change from 0 to 32768
[  165.512690][ T9727] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1410 (9727)
[  165.519536][ T9727] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  165.523884][ T9727] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  165.537848][ T9727] BTRFS info (device loop4): turning off barriers
[  165.540683][ T9727] BTRFS info (device loop4): enabling free space tree
[  165.560216][ T7838] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  165.635333][ T9746] netlink: 'syz.4.1411': attribute type 4 has an invalid length.
[  165.651370][ T9746] netlink: 'syz.4.1411': attribute type 4 has an invalid length.
[  165.697160][ T9752] block nbd0: Unsupported socket: shutdown callout must be supported.
[  167.110118][ T9814] loop2: detected capacity change from 0 to 4096
[  167.145471][ T9814] ntfs3(loop2): ino=18, mi_enum_attr
[  167.148133][ T9814] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  167.151313][ T9814] ntfs3(loop2): ino=1a, mi_enum_attr
[  167.266144][   T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  167.417538][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  167.422768][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  167.428541][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  167.432197][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  167.435406][   T10] usb 5-1: SerialNumber: syz
[  167.439974][   T10] usb 5-1: bad CDC descriptors
[  167.442331][   T10] usb-storage 5-1:1.0: USB Mass Storage device detected
[  167.451847][   T10] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  167.456019][   T10] scsi host6: usb-storage 5-1:1.0
[  167.637883][ T9828] loop2: detected capacity change from 0 to 128
[  167.652136][  T971] usb 5-1: USB disconnect, device number 11
[  167.665661][ T9828] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 52)
[  167.670458][ T9828] FAT-fs (loop2): Filesystem has been set read-only
[  167.673559][ T9828] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 52)
[  167.713115][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'.
[  167.717286][ T9836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1446'.
[  167.722408][ T9836] geneve2: entered promiscuous mode
[  167.724505][ T9836] geneve2: entered allmulticast mode
[  167.843368][ T9836] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1446'.
[  167.887063][ T5842] Bluetooth: hci2: command tx timeout
[  167.973700][ T9594] Bluetooth: hci3: Frame reassembly failed (-84)
[  168.334135][ T9843] loop4: detected capacity change from 0 to 512
[  168.371611][ T9843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.380940][ T9843] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  168.388537][ T9843] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1448: corrupted inode contents
[  168.394073][ T9843] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1448: mark_inode_dirty error
[  168.401699][ T9843] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1448: corrupted inode contents
[  168.407553][ T9843] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1448: corrupted inode contents
[  168.412980][ T9843] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1448: mark_inode_dirty error
[  168.419560][ T9843] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1448: corrupted inode contents
[  168.440192][ T7838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.786139][ T6134] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  169.826070][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  169.935987][ T6134] usb 5-1: Using ep0 maxpacket: 16
[  169.940289][ T6134] usb 5-1: unable to get BOS descriptor or descriptor too short
[  169.944345][ T6134] usb 5-1: config 1 has an invalid interface descriptor of length 5, skipping
[  169.948498][ T6134] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.952537][ T6134] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  169.958784][ T6134] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  169.962494][ T6134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.965823][ T6134] usb 5-1: Product: syz
[  169.967941][ T6134] usb 5-1: Manufacturer: syz
[  169.969999][ T6134] usb 5-1: SerialNumber: syz
[  169.976767][    T9] usb 3-1: Using ep0 maxpacket: 32
[  169.980579][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.984977][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.988958][    T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  169.992738][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.997407][    T9] usb 3-1: config 0 descriptor??
[  170.046128][ T5842] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  170.046302][ T5847] Bluetooth: hci3: command 0x1003 tx timeout
[  170.180814][ T6134] usb 5-1: USB disconnect, device number 12
[  170.203487][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  170.209789][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  170.213598][    T9] usb 3-1: USB disconnect, device number 19
[  170.310935][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'.
[  170.314253][ T9893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1469'.
[  170.447416][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[  172.243884][ T9921] loop4: detected capacity change from 0 to 32768
[  172.257136][ T9921] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section replicas_v0: no devices in entry sb: 1/0 []
[  172.257136][ T9921] replicas_v0 (size 24):
[  172.257136][ T9921] btree: 2 [0 2] sb: 0 [] user: 1 [0]
[  172.257136][ T9921] 
[  172.268470][ T9921] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  172.780401][ T9954] net_ratelimit: 18 callbacks suppressed
[  172.780411][ T9954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.377135][ T9977] ieee802154 phy1 wpan1: encryption failed: -22
[  173.444354][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1511'.
[  173.487378][ T5849] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  173.490768][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: kworker/u11:4 Not tainted syzkaller #0 PREEMPT(full) 
[  173.490781][ T5849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.490786][ T5849] Workqueue: hci1 hci_rx_work
[  173.490803][ T5849] Call Trace:
[  173.490806][ T5849]  <TASK>
[  173.490810][ T5849]  dump_stack_lvl+0x189/0x250
[  173.490826][ T5849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.490835][ T5849]  ? __pfx__printk+0x10/0x10
[  173.490845][ T5849]  ? kernfs_root+0x1c/0x230
[  173.490855][ T5849]  ? kernfs_path_from_node+0x250/0x290
[  173.490864][ T5849]  ? kernfs_path_from_node+0x2f/0x290
[  173.490874][ T5849]  sysfs_create_dir_ns+0x259/0x280
[  173.490882][ T5849]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  173.490891][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  173.490903][ T5849]  kobject_add_internal+0x59f/0xb40
[  173.490916][ T5849]  kobject_add+0x155/0x220
[  173.490927][ T5849]  ? __pfx_kobject_add+0x10/0x10
[  173.490937][ T5849]  ? _raw_spin_unlock+0x28/0x50
[  173.490946][ T5849]  ? get_device_parent+0x366/0x3a0
[  173.490955][ T5849]  device_add+0x408/0xb50
[  173.490964][ T5849]  hci_conn_add_sysfs+0xd5/0x1e0
[  173.490994][ T5849]  le_conn_complete_evt+0xc3a/0x1220
[  173.491010][ T5849]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  173.491021][ T5849]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  173.491033][ T5849]  ? __asan_memcpy+0x40/0x70
[  173.491044][ T5849]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  173.491056][ T5849]  ? skb_pull_data+0xfb/0x200
[  173.491067][ T5849]  hci_le_conn_complete_evt+0x187/0x450
[  173.491079][ T5849]  hci_event_packet+0x78f/0x1200
[  173.491088][ T5849]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  173.491097][ T5849]  ? __pfx_hci_event_packet+0x10/0x10
[  173.491105][ T5849]  ? rcu_is_watching+0x15/0xb0
[  173.491113][ T5849]  ? hci_send_to_monitor+0xe2/0x570
[  173.491124][ T5849]  hci_rx_work+0x46a/0xe80
[  173.491132][ T5849]  ? process_scheduled_works+0x9ef/0x17b0
[  173.491140][ T5849]  process_scheduled_works+0xae1/0x17b0
[  173.491156][ T5849]  ? __pfx_process_scheduled_works+0x10/0x10
[  173.491165][ T5849]  worker_thread+0x8a0/0xda0
[  173.491173][ T5849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  173.491184][ T5849]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  173.491194][ T5849]  ? __kthread_parkme+0x7b/0x200
[  173.491204][ T5849]  kthread+0x711/0x8a0
[  173.491215][ T5849]  ? __pfx_worker_thread+0x10/0x10
[  173.491222][ T5849]  ? __pfx_kthread+0x10/0x10
[  173.491233][ T5849]  ? rcu_is_watching+0x15/0xb0
[  173.491241][ T5849]  ? __pfx_kthread+0x10/0x10
[  173.491251][ T5849]  ret_from_fork+0x3fc/0x770
[  173.491260][ T5849]  ? __pfx_ret_from_fork+0x10/0x10
[  173.491268][ T5849]  ? __switch_to_asm+0x39/0x70
[  173.491278][ T5849]  ? __switch_to_asm+0x33/0x70
[  173.491287][ T5849]  ? __pfx_kthread+0x10/0x10
[  173.491302][ T5849]  ret_from_fork_asm+0x1a/0x30
[  173.491314][ T5849]  </TASK>
[  173.491324][ T5849] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  173.521906][ T9994] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14
[  173.523072][ T5849] Bluetooth: hci1: failed to register connection device
[  173.596846][ T9999] loop2: detected capacity change from 0 to 1024
[  173.688683][T10008] loop2: detected capacity change from 0 to 4096
[  173.697098][T10011] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  173.783708][T10019] loop2: detected capacity change from 0 to 512
[  173.789216][T10019] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1527: Invalid inode bitmap blk 4 in block_group 0
[  173.794934][T10019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.808112][T10019] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  173.825671][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.106037][ T6134] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  174.256175][ T6134] usb 3-1: Using ep0 maxpacket: 16
[  174.259653][ T6134] usb 3-1: config 254 has an invalid interface number: 235 but max is 0
[  174.262671][ T6134] usb 3-1: config 254 has no interface number 0
[  174.264706][ T6134] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 237, changing to 7
[  174.269117][ T6134] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 42803, setting to 1024
[  174.273145][ T6134] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  174.277268][ T6134] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  174.280745][ T6134] usb 3-1: config 254 interface 235 has no altsetting 0
[  174.286807][ T6134] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  174.290483][ T6134] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.293889][ T6134] usb 3-1: Product: syz
[  174.295868][ T6134] usb 3-1: Manufacturer: syz
[  174.298172][ T6134] usb 3-1: SerialNumber: syz
[  174.505448][ T6134] usbtest 3-1:254.235: couldn't get endpoints, -71
[  174.508404][ T6134] usbtest 3-1:254.235: probe with driver usbtest failed with error -71
[  174.513580][ T6134] usb 3-1: USB disconnect, device number 20
[  174.570068][T10043] wg1: entered promiscuous mode
[  174.572134][T10043] wg1: entered allmulticast mode
[  174.600718][T10047] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1538'.
[  174.685603][T10057] loop4: detected capacity change from 0 to 256
[  174.690407][T10057] exfat: Deprecated parameter 'namecase'
[  174.692284][T10057] exfat: Deprecated parameter 'utf8'
[  174.700112][T10057] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  175.037396][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  175.206218][    T9] usb 5-1: Using ep0 maxpacket: 8
[  175.551624][    T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  175.566384][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.570906][    T9] usb 5-1: Product: syz
[  175.572870][    T9] usb 5-1: Manufacturer: syz
[  175.574990][    T9] usb 5-1: SerialNumber: syz
[  175.580556][    T9] usb 5-1: config 0 descriptor??
[  176.269590][   T33] audit: type=1326 audit(1755834636.124:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.1.1555" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff117b8ebe9 code=0x7ffc0000
[  176.274140][    T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  176.282585][   T33] audit: type=1326 audit(1755834636.124:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.1.1555" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff117b8ebe9 code=0x7ffc0000
[  176.293170][   T33] audit: type=1326 audit(1755834636.134:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.1.1555" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff117b8ebe9 code=0x7ffc0000
[  176.302647][   T33] audit: type=1326 audit(1755834636.134:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.1.1555" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff117b8ebe9 code=0x7ffc0000
[  176.314042][   T33] audit: type=1326 audit(1755834636.134:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.1.1555" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff117b8ebe9 code=0x7ffc0000
[  176.324684][   T33] audit: type=1326 audit(1755834636.134:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.1.1555" exe="/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7ff117b8ebe9 code=0x7ffc0000
[  176.345673][   T33] audit: type=1326 audit(1755834636.134:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.1.1555" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff117b8ebe9 code=0x7ffc0000
[  176.356423][   T33] audit: type=1326 audit(1755834636.134:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.1.1555" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff117b8ebe9 code=0x7ffc0000
[  176.737871][T10101] netlink: 'syz.2.1563': attribute type 3 has an invalid length.
[  176.745636][T10101] netlink: 'syz.2.1563': attribute type 3 has an invalid length.
[  176.749226][T10101] netlink: 'syz.2.1563': attribute type 3 has an invalid length.
[  176.752502][T10101] netlink: 'syz.2.1563': attribute type 3 has an invalid length.
[  176.755740][T10101] netlink: 'syz.2.1563': attribute type 3 has an invalid length.
[  176.758847][T10101] netlink: 'syz.2.1563': attribute type 3 has an invalid length.
[  176.761642][T10101] netlink: 'syz.2.1563': attribute type 3 has an invalid length.
[  176.764596][T10101] netlink: 'syz.2.1563': attribute type 3 has an invalid length.
[  176.767557][T10101] netlink: 'syz.2.1563': attribute type 3 has an invalid length.
[  176.770701][T10101] netlink: 'syz.2.1563': attribute type 3 has an invalid length.
[  177.644769][    T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  177.702203][    T9] usb 5-1: USB disconnect, device number 13
[  178.056093][  T971] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  178.206683][  T971] usb 2-1: Using ep0 maxpacket: 32
[  178.214561][  T971] usb 2-1: unable to get BOS descriptor or descriptor too short
[  178.220548][  T971] usb 2-1: config 0 has an invalid interface number: 223 but max is 0
[  178.224043][  T971] usb 2-1: config 0 has no interface number 0
[  178.228411][  T971] usb 2-1: config 0 interface 223 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  178.234914][  T971] usb 2-1: config 0 interface 223 altsetting 2 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  178.239436][T10110] loop4: detected capacity change from 0 to 512
[  178.239657][T10110] EXT4-fs: Ignoring removed i_version option
[  178.244293][  T971] usb 2-1: config 0 interface 223 has no altsetting 0
[  178.244775][T10110] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  178.253260][  T971] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=86.21
[  178.254093][T10110] EXT4-fs (loop4): 1 truncate cleaned up
[  178.257312][  T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.259266][T10110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.262156][  T971] usb 2-1: Product: syz
[  178.268590][  T971] usb 2-1: Manufacturer: syz
[  178.270442][  T971] usb 2-1: SerialNumber: syz
[  178.273851][  T971] usb 2-1: config 0 descriptor??
[  178.278716][  T971] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  178.282736][ T7838] EXT4-fs warning (device loop4): ext4_xattr_inode_create:1469: refuse to create EA inode when umounting
[  178.290203][ T7838] ------------[ cut here ]------------
[  178.292315][ T7838] WARNING: CPU: 0 PID: 7838 at fs/ext4/xattr.c:1470 ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  178.296368][ T7838] Modules linked in:
[  178.297783][ T7838] CPU: 0 UID: 0 PID: 7838 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  178.302329][ T7838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.306810][ T7838] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  178.309643][ T7838] Code: 8b 74 24 10 e9 d4 03 00 00 e8 bc ad 3a ff 48 89 df 48 c7 c6 ec c9 97 8d ba bd 05 00 00 48 c7 c1 40 e3 9f 8b e8 01 26 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d
[  178.317551][ T7838] RSP: 0018:ffffc900036af3e0 EFLAGS: 00010246
[  178.320067][ T7838] RAX: adb3964f78fad700 RBX: ffff88802924c000 RCX: adb3964f78fad700
[  178.323272][ T7838] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  178.326586][ T7838] RBP: ffffc900036af570 R08: ffffc900036aefc7 R09: 1ffff920006d5df8
[  178.329892][ T7838] R10: dffffc0000000000 R11: fffff520006d5df9 R12: 1ffff920006d5e90
[  178.333148][ T7838] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802a72a900
[  178.336602][ T7838] FS:  000055556df11500(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  178.340273][ T7838] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.343014][ T7838] CR2: 000020000000f000 CR3: 0000000121990000 CR4: 00000000000006f0
[  178.346430][ T7838] Call Trace:
[  178.347840][ T7838]  <TASK>
[  178.349099][ T7838]  ? __pfx___might_resched+0x10/0x10
[  178.351344][ T7838]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[  178.354119][ T7838]  ? __filemap_get_folio+0x79f/0xaf0
[  178.356410][ T7838]  ? rcu_is_watching+0x15/0xb0
[  178.358469][ T7838]  ? ext4_xattr_block_set+0xd6/0x2ac0
[  178.360731][ T7838]  ext4_xattr_block_set+0x223/0x2ac0
[  178.362960][ T7838]  ? fs_reclaim_acquire+0x7d/0x100
[  178.365102][ T7838]  ? __pfx___might_resched+0x10/0x10
[  178.367647][ T7838]  ? __pfx_check_xattrs+0x10/0x10
[  178.370045][ T7838]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  178.372454][ T7838]  ? ext4_xattr_block_find+0x2d4/0x350
[  178.374759][ T7838]  ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[  178.377562][ T7838]  __ext4_expand_extra_isize+0x30d/0x400
[  178.379918][ T7838]  __ext4_mark_inode_dirty+0x46c/0x700
[  178.382238][ T7838]  ext4_dirty_inode+0xd0/0x110
[  178.384256][ T7838]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  178.386590][ T7838]  __mark_inode_dirty+0x2ec/0xe10
[  178.388710][ T7838]  iput+0x1ee/0x9d0
[  178.390360][ T7838]  __dentry_kill+0x209/0x660
[  178.392324][ T7838]  ? shrink_kill+0x8d/0x2c0
[  178.394383][ T7838]  shrink_kill+0xa9/0x2c0
[  178.396515][ T7838]  shrink_dentry_list+0x2e0/0x5e0
[  178.398656][ T7838]  shrink_dcache_parent+0xa1/0x2c0
[  178.400832][ T7838]  ? __pfx_shrink_dcache_parent+0x10/0x10
[  178.403257][ T7838]  ? rcu_is_watching+0x15/0xb0
[  178.405295][ T7838]  do_one_tree+0x23/0xe0
[  178.407201][ T7838]  shrink_dcache_for_umount+0xa0/0x170
[  178.409521][ T7838]  generic_shutdown_super+0x67/0x2c0
[  178.411837][ T7838]  kill_block_super+0x44/0x90
[  178.413910][ T7838]  ext4_kill_sb+0x68/0xb0
[  178.415792][ T7838]  deactivate_locked_super+0xbc/0x130
[  178.418234][ T7838]  cleanup_mnt+0x425/0x4c0
[  178.420180][ T7838]  task_work_run+0x1d4/0x260
[  178.422227][ T7838]  ? __pfx_task_work_run+0x10/0x10
[  178.424463][ T7838]  ? __x64_sys_umount+0x122/0x160
[  178.426839][ T7838]  ? __pfx___x64_sys_umount+0x10/0x10
[  178.429108][ T7838]  ? rcu_is_watching+0x15/0xb0
[  178.431082][ T7838]  exit_to_user_mode_loop+0xec/0x110
[  178.433329][ T7838]  do_syscall_64+0x2bd/0x3b0
[  178.435288][ T7838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.437895][ T7838]  ? exc_page_fault+0x9f/0xf0
[  178.439855][ T7838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.442321][ T7838] RIP: 0033:0x7f6e9798ff17
[  178.444242][ T7838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  178.452363][ T7838] RSP: 002b:00007ffe7adadd08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  178.456154][ T7838] RAX: 0000000000000000 RBX: 00007f6e97a11c05 RCX: 00007f6e9798ff17
[  178.459458][ T7838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7adaddc0
[  178.462753][ T7838] RBP: 00007ffe7adaddc0 R08: 0000000000000000 R09: 0000000000000000
[  178.466149][ T7838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7adaee50
[  178.469395][ T7838] R13: 00007f6e97a11c05 R14: 000000000002b7f2 R15: 00007ffe7adaee90
[  178.473081][ T7838]  </TASK>
[  178.474413][ T7838] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  178.477367][ T7838] CPU: 0 UID: 0 PID: 7838 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  178.481212][ T7838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.485286][ T7838] Call Trace:
[  178.486662][ T7838]  <TASK>
[  178.487892][ T7838]  dump_stack_lvl+0x99/0x250
[  178.489804][ T7838]  ? __asan_memcpy+0x40/0x70
[  178.491711][ T7838]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.493918][ T7838]  ? __pfx__printk+0x10/0x10
[  178.495912][ T7838]  vpanic+0x281/0x750
[  178.497595][ T7838]  ? __pfx__printk+0x10/0x10
[  178.499563][ T7838]  ? __pfx_vpanic+0x10/0x10
[  178.501489][ T7838]  ? is_bpf_text_address+0x26/0x2b0
[  178.503688][ T7838]  panic+0xb9/0xc0
[  178.505310][ T7838]  ? __pfx_panic+0x10/0x10
[  178.507250][ T7838]  __warn+0x31b/0x4b0
[  178.508992][ T7838]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  178.511736][ T7838]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  178.514478][ T7838]  report_bug+0x2be/0x4f0
[  178.516363][ T7838]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  178.519107][ T7838]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  178.521824][ T7838]  ? ext4_xattr_inode_lookup_create+0xa82/0x1c20
[  178.524473][ T7838]  handle_bug+0x84/0x160
[  178.526272][ T7838]  exc_invalid_op+0x1a/0x50
[  178.528278][ T7838]  asm_exc_invalid_op+0x1a/0x20
[  178.530297][ T7838] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  178.533131][ T7838] Code: 8b 74 24 10 e9 d4 03 00 00 e8 bc ad 3a ff 48 89 df 48 c7 c6 ec c9 97 8d ba bd 05 00 00 48 c7 c1 40 e3 9f 8b e8 01 26 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d
[  178.541014][ T7838] RSP: 0018:ffffc900036af3e0 EFLAGS: 00010246
[  178.543549][ T7838] RAX: adb3964f78fad700 RBX: ffff88802924c000 RCX: adb3964f78fad700
[  178.546823][ T7838] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  178.550159][ T7838] RBP: ffffc900036af570 R08: ffffc900036aefc7 R09: 1ffff920006d5df8
[  178.553366][ T7838] R10: dffffc0000000000 R11: fffff520006d5df9 R12: 1ffff920006d5e90
[  178.556628][ T7838] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802a72a900
[  178.560044][ T7838]  ? __pfx___might_resched+0x10/0x10
[  178.562261][ T7838]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[  178.565012][ T7838]  ? __filemap_get_folio+0x79f/0xaf0
[  178.567266][ T7838]  ? rcu_is_watching+0x15/0xb0
[  178.569269][ T7838]  ? ext4_xattr_block_set+0xd6/0x2ac0
[  178.571539][ T7838]  ext4_xattr_block_set+0x223/0x2ac0
[  178.573739][ T7838]  ? fs_reclaim_acquire+0x7d/0x100
[  178.575872][ T7838]  ? __pfx___might_resched+0x10/0x10
[  178.578143][ T7838]  ? __pfx_check_xattrs+0x10/0x10
[  178.580286][ T7838]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  178.582587][ T7838]  ? ext4_xattr_block_find+0x2d4/0x350
[  178.584925][ T7838]  ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[  178.587434][ T7838]  __ext4_expand_extra_isize+0x30d/0x400
[  178.589840][ T7838]  __ext4_mark_inode_dirty+0x46c/0x700
[  178.592097][ T7838]  ext4_dirty_inode+0xd0/0x110
[  178.594191][ T7838]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  178.596487][ T7838]  __mark_inode_dirty+0x2ec/0xe10
[  178.598622][ T7838]  iput+0x1ee/0x9d0
[  178.600234][ T7838]  __dentry_kill+0x209/0x660
[  178.602147][ T7838]  ? shrink_kill+0x8d/0x2c0
[  178.604139][ T7838]  shrink_kill+0xa9/0x2c0
[  178.606021][ T7838]  shrink_dentry_list+0x2e0/0x5e0
[  178.608053][ T7838]  shrink_dcache_parent+0xa1/0x2c0
[  178.610230][ T7838]  ? __pfx_shrink_dcache_parent+0x10/0x10
[  178.612678][ T7838]  ? rcu_is_watching+0x15/0xb0
[  178.614663][ T7838]  do_one_tree+0x23/0xe0
[  178.616377][ T7838]  shrink_dcache_for_umount+0xa0/0x170
[  178.618689][ T7838]  generic_shutdown_super+0x67/0x2c0
[  178.620876][ T7838]  kill_block_super+0x44/0x90
[  178.622813][ T7838]  ext4_kill_sb+0x68/0xb0
[  178.624624][ T7838]  deactivate_locked_super+0xbc/0x130
[  178.626848][ T7838]  cleanup_mnt+0x425/0x4c0
[  178.628703][ T7838]  task_work_run+0x1d4/0x260
[  178.630626][ T7838]  ? __pfx_task_work_run+0x10/0x10
[  178.632744][ T7838]  ? __x64_sys_umount+0x122/0x160
[  178.634889][ T7838]  ? __pfx___x64_sys_umount+0x10/0x10
[  178.637201][ T7838]  ? rcu_is_watching+0x15/0xb0
[  178.639229][ T7838]  exit_to_user_mode_loop+0xec/0x110
[  178.641478][ T7838]  do_syscall_64+0x2bd/0x3b0
[  178.643458][ T7838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.645987][ T7838]  ? exc_page_fault+0x9f/0xf0
[  178.647862][ T7838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.650247][ T7838] RIP: 0033:0x7f6e9798ff17
[  178.652139][ T7838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  178.660033][ T7838] RSP: 002b:00007ffe7adadd08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  178.663551][ T7838] RAX: 0000000000000000 RBX: 00007f6e97a11c05 RCX: 00007f6e9798ff17
[  178.666902][ T7838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7adaddc0
[  178.670246][ T7838] RBP: 00007ffe7adaddc0 R08: 0000000000000000 R09: 0000000000000000
[  178.673529][ T7838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7adaee50
[  178.676779][ T7838] R13: 00007f6e97a11c05 R14: 000000000002b7f2 R15: 00007ffe7adaee90
[  178.680078][ T7838]  </TASK>
[  178.682223][ T7838] Kernel Offset: disabled
[  178.684066][ T7838] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:50:38  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bde60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99def670 RSP=ffffc900036aeb30
R8 =ffff888107758237 R9 =1ffff11020eeb046 R10=dffffc0000000000 R11=ffffffff854f1c30
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1ca7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556df11500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000f000 CR3=0000000121990000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007ff117c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff89222db4 RBX=ffffc900066dea00 RCX=ffff888108ad0000 RDX=0000000000000000
RSI=ffff8881263ed1bf RDI=0000000000001000 RBP=0000000000000000 RSP=ffffc900066de8b8
R8 =ffff888108ad0000 R9 =0000000000000002 R10=0000000000000406 R11=0000000000000002
R12=ffff8881263ed1bf R13=0000000000000000 R14=0000000000000000 R15=ffff8881263ec1c0
RIP=ffffffff81bfb041 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556df2c5c8 CR3=0000000121990000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f6e97a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
