last executing test programs:

5.926102505s ago: executing program 1 (id=1239):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x4c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x30, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x4}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0xa}, {0x4, 0xa}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0x2}, {0x0, 0x5}, {0x6, 0x2}, {0x5}, {0x7, 0x4}, {0x3, 0x2}, {0x1, 0x2}, {0x7, 0x4}, {0x6, 0x2}, {0x7, 0x9}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x2, 0xa}, {0x4, 0x19}, {0x1, 0xa}, {0x4, 0x6}, {0x6, 0xa}, {0x4, 0x4}, {0x4, 0x9}]}]}]}]}, 0x4c}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="7e0033008000e100ffffffffffff080211"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080)

5.772349557s ago: executing program 1 (id=1245):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="600000001200010300000000000000000200"/56, @ANYRES32=0x0, @ANYBLOB="0000000002000000ffffffff03000000140001000710100002180000ffffffff"], 0x60}}, 0x0)

4.757673048s ago: executing program 1 (id=1251):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001140)={0x44, &(0x7f0000000f40)={0x0, 0xb, 0x4, "94a291d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="000c04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.863539915s ago: executing program 2 (id=1260):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001100)={[{@clear_cache}, {@compress}, {@ssd_spread}, {@rescan_uuid_tree}, {@skip_balance}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x29f)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000})

2.229308525s ago: executing program 1 (id=1267):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
ioctl(r0, 0xc138fd0c, &(0x7f0000000000))

2.124631697s ago: executing program 2 (id=1279):
r0 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x2)
fchdir(r1)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0xfc, 0x0, &(0x7f0000000140))

1.639598638s ago: executing program 1 (id=1283):
syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x777)
mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb-serial/devices/ttyUSB0/vcc_mode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)="37047502cc9d0765cf2157efaf1969ef8bff6a95fd2fa9c1fc7fd11fb52950fbf4f51f28", 0xfffffdf9)

1.547218828s ago: executing program 2 (id=1273):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.400793978s ago: executing program 0 (id=1274):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup3(r0, r1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x0, 0xfffffffd, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x4004000)

1.39035682s ago: executing program 3 (id=1275):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r2, 0x512, 0x20}, 0xc)

1.387186751s ago: executing program 2 (id=1276):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f00000002c0)=[@acquire={0x40046305, 0x1}, @register_looper], 0x4, 0x0, &(0x7f0000000340)="1865d87b"})
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002140)={0x4c, 0x0, &(0x7f0000001fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6c, 0x0, &(0x7f0000002040)="15274ea73861c388a8a0d7f53d686607a789c7d505f57f22e694e2fbc1d43a337bd5cfb309381e160ad9dfd905d1a0a60d990978985b84bd34a22898184d5f56fdb98aee0aac8a74195b4da93d7314ed53f1e93846dbc316d60e63597a11329291670b684ec8cb3b2d33195a"})

1.223571755s ago: executing program 0 (id=1280):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc090)

1.213920807s ago: executing program 3 (id=1281):
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0x12d)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000100)=@usbdevfs_driver={0x80000001, 0x6, 0x0})

1.2005801s ago: executing program 4 (id=1282):
r0 = socket(0xa, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r2, 0xfffffffd}, &(0x7f00000000c0)=0x8)

1.099495271s ago: executing program 0 (id=1284):
futex(0x0, 0x4, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

1.098674171s ago: executing program 4 (id=1294):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x8, 0x4, 0xba, 0x2, 0x6, 0x0, 0xa1, 0x8, 0xfc, 0xfd, 0x0, 0x0, 0x3, 0x1}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r1, 0x4, 0x4, "5178b667"}, 0xc)

1.079730265s ago: executing program 3 (id=1285):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x400, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=")
syz_mount_image$exfat(0x0, &(0x7f00000000c0)='./file3\x00', 0x80d808, 0x0, 0x7e, 0x0, &(0x7f0000000000))
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fsync(r0)

920.630288ms ago: executing program 4 (id=1286):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4)
sendmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="14"], 0x18, 0x80}, 0x40000)
recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x60)

739.295426ms ago: executing program 4 (id=1287):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345\r', 0x36, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10)

548.295276ms ago: executing program 4 (id=1288):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000005d40)=ANY=[@ANYBLOB="000086dd00000100000000000000600000001b012c00fe8000000000000000000000000000aaff0200000000000000000000000000012b000000000000000401"], 0x1b37)

547.483666ms ago: executing program 0 (id=1299):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x400, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100))
rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
mknod$loop(&(0x7f0000000080)='./bus\x00', 0x8, 0x0)

540.236637ms ago: executing program 3 (id=1300):
r0 = socket$inet6(0xa, 0x802, 0x88)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
recvfrom(r0, 0x0, 0xfffffffffffffd89, 0x40000102, 0x0, 0x0)

404.913506ms ago: executing program 2 (id=1289):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x26fe9}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000500)={0x1, [<r1=>0x0]}, &(0x7f00000005c0)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x100}, &(0x7f00000001c0)=0x8)

404.684816ms ago: executing program 3 (id=1290):
unshare(0x400)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket(0x11, 0x800000003, 0x1000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000000)={'wlan0\x00'})

279.134412ms ago: executing program 4 (id=1291):
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = semget$private(0x0, 0x7, 0x191)
semop(r0, &(0x7f0000000140)=[{0x2, 0xce97, 0x800}, {0x1, 0x5, 0x1000}], 0x2)
semctl$GETNCNT(r0, 0x0, 0xe, 0x0)

260.651216ms ago: executing program 0 (id=1292):
r0 = socket(0x2c, 0x3, 0x0)
r1 = socket(0x2c, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0xff}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000580), &(0x7f0000000080)=@udp6=r0}, 0x20)

219.155154ms ago: executing program 3 (id=1293):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000840)=""/4099, 0x1003}], 0x1, 0x12, 0x0)

213.607926ms ago: executing program 2 (id=1295):
syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x710, &(0x7f00000019c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x142)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
lremovexattr(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=@known='user.syz\x00')

351.27µs ago: executing program 0 (id=1296):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=<r2=>0x0)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
close(r1)

0s ago: executing program 1 (id=1297):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=")
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
rmdir(&(0x7f00000004c0)='./file1\x00')

kernel console output (not intermixed with test programs):

g crc32c (crc32c-intel) checksum algorithm
[  150.520232][ T5943] BTRFS info (device loop0): setting nodatasum
[  150.526554][ T5943] BTRFS info (device loop0): force zlib compression, level 3
[  150.534241][ T5943] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  150.544182][ T5943] BTRFS info (device loop0): use lzo compression, level 0
[  150.551391][ T5943] BTRFS info (device loop0): turning on flush-on-commit
[  150.558430][ T5943] BTRFS info (device loop0): enabling auto defrag
[  150.565182][ T5943] BTRFS info (device loop0): max_inline at 4096
[  150.571658][ T5943] BTRFS info (device loop0): using free space tree
[  150.621249][ T5973] EXT4-fs (loop3): shut down requested (2)
[  150.802930][ T5943] BTRFS info (device loop0): enabling ssd optimizations
[  150.822100][ T4286] EXT4-fs (loop3): unmounting filesystem.
[  151.164959][ T4279] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  151.959716][ T6036] loop8: detected capacity change from 0 to 7
[  151.991807][ T4381]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  152.003631][ T4381] loop8: partition table partially beyond EOD, truncated
[  152.025431][ T4381] loop8: p1 size 1905483274 extends beyond EOD, truncated
[  152.060716][ T4381] loop8: p2 start 121280928 is beyond EOD, truncated
[  152.127276][ T6034] loop2: detected capacity change from 0 to 32768
[  152.152838][ T6034] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  152.161514][ T6034] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  152.174063][ T6036]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  152.218758][ T6036] loop8: partition table partially beyond EOD, truncated
[  152.247125][ T6034] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  152.259236][ T6036] loop8: p1 size 1905483274 extends beyond EOD, truncated
[  152.260761][ T6017] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  152.280998][ T6017] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  152.299416][ T6013] loop4: detected capacity change from 0 to 40427
[  152.313955][ T6036] loop8: p2 start 121280928 is beyond EOD, truncated
[  152.351484][ T6013] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  152.361052][ T6013] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  152.375552][ T6017] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 94ms
[  152.386396][ T6017] gfs2: fsid=syz:syz.0: jid=0: Done
[  152.394286][ T6034] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  152.417077][ T6013] F2FS-fs (loop4): invalid crc value
[  152.457215][ T6013] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  152.526089][ T4381] udevd[4381]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  152.628591][ T6013] F2FS-fs (loop4): Found nat_bits in checkpoint
[  152.672846][ T6040] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.574: corrupted inode contents
[  152.708089][ T6013] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  152.721107][ T6013] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  152.815568][ T6040] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  152.863270][ T4381] udevd[4381]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  152.887299][ T6040] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.574: corrupted inode contents
[  152.932798][ T6040] EXT4-fs error (device loop0): ext4_evict_inode:329: inode #15: comm syz.0.574: mark_inode_dirty error
[  152.951160][ T4348] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  153.045761][ T6040] EXT4-fs (loop0): 1 orphan inode deleted
[  153.058677][ T4278] syz-executor: attempt to access beyond end of device
[  153.058677][ T4278] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  153.069375][ T6040] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  153.161926][ T4348] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  153.196431][ T4348] usb 2-1: config 0 has no interface number 0
[  153.219644][ T6040] EXT4-fs error (device loop0): __ext4_iget:5102: inode #12: block 2: comm syz.0.574: invalid block
[  153.235923][ T4348] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  153.277638][ T4348] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  153.311017][ T4348] usb 2-1: config 0 interface 255 has no altsetting 0
[  153.352081][ T4348] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  153.396911][ T4348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.436134][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  153.454834][ T4348] usb 2-1: config 0 descriptor??
[  153.509929][ T4348] cp210x 2-1:0.255: cp210x converter detected
[  153.872411][ T4348] cp210x 2-1:0.255: failed to get vendor val 0x000e size 3: -32
[  153.965650][ T6074] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.585'.
[  154.082352][ T4348] cp210x 2-1:0.255: GPIO initialisation failed: -19
[  154.095998][ T4348] usb 2-1: cp210x converter now attached to ttyUSB0
[  154.176764][ T6085] netlink: 44 bytes leftover after parsing attributes in process `syz.2.590'.
[  154.192455][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.201120][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.250023][ T6085] netlink: 44 bytes leftover after parsing attributes in process `syz.2.590'.
[  154.286202][ T4348] usb 2-1: USB disconnect, device number 7
[  154.311922][ T4348] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  154.320125][ T4348] cp210x 2-1:0.255: device disconnected
[  154.468776][ T6092] device batadv_slave_1 entered promiscuous mode
[  154.477477][ T6091] device batadv_slave_1 left promiscuous mode
[  154.824857][ T6104] input: syz1 as /devices/virtual/input/input10
[  154.921136][ T6017] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  155.056352][ T6115] netlink: 'syz.3.603': attribute type 3 has an invalid length.
[  155.111034][ T6017] usb 1-1: Using ep0 maxpacket: 32
[  155.118102][ T6017] usb 1-1: config 7 has an invalid interface number: 2 but max is 0
[  155.136694][ T6017] usb 1-1: config 7 has no interface number 0
[  155.152507][ T6017] usb 1-1: config 7 interface 2 has no altsetting 0
[  155.203397][ T6017] usb 1-1: New USB device found, idVendor=05ac, idProduct=1871, bcdDevice=82.84
[  155.227578][ T6017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.250361][ T6017] usb 1-1: Product: syz
[  155.260884][ T6017] usb 1-1: Manufacturer: syz
[  155.276255][ T6017] usb 1-1: SerialNumber: syz
[  155.489557][ T6133] gadgetfs: bound to dummy_udc driver
[  155.528836][ T6017] usb 1-1: USB disconnect, device number 11
[  155.555943][    T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  155.741081][    T7] usb 4-1: Using ep0 maxpacket: 8
[  155.747986][    T7] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  155.773714][    T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  155.784597][    T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  155.809840][    T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  155.820367][    T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  155.842644][    T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  155.851883][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.083302][    T7] usb 4-1: usb_control_msg returned -32
[  156.089022][    T7] usbtmc 4-1:16.0: can't read capabilities
[  156.242565][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'.
[  156.308786][ T6142] set_capacity_and_notify: 1 callbacks suppressed
[  156.308804][ T6142] loop4: detected capacity change from 0 to 32768
[  156.369885][ T6142] JBD2: Ignoring recovery information on journal
[  156.426843][ T6155] FAULT_INJECTION: forcing a failure.
[  156.426843][ T6155] name failslab, interval 1, probability 0, space 0, times 0
[  156.448046][ T6156] usbtmc 4-1:16.0: usb_control_msg returned -32
[  156.476067][ T6142] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  156.489897][ T4348] usb 4-1: USB disconnect, device number 10
[  156.496530][ T6155] CPU: 1 PID: 6155 Comm: syz.0.622 Not tainted syzkaller #0
[  156.503881][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  156.513985][ T6155] Call Trace:
[  156.517301][ T6155]  <TASK>
[  156.520279][ T6155]  dump_stack_lvl+0x188/0x24e
[  156.525006][ T6155]  ? show_regs_print_info+0x12/0x12
[  156.530257][ T6155]  ? load_image+0x410/0x410
[  156.534812][ T6155]  ? __might_sleep+0xd0/0xd0
[  156.539440][ T6155]  ? __lock_acquire+0x7c40/0x7c40
[  156.544513][ T6155]  should_fail_ex+0x390/0x4c0
[  156.549262][ T6155]  should_failslab+0x5/0x20
[  156.553818][ T6155]  slab_pre_alloc_hook+0x59/0x300
[  156.558913][ T6155]  ? resv_map_alloc+0x4d/0x2b0
[  156.563725][ T6155]  __kmem_cache_alloc_node+0x4f/0x270
[  156.569140][ T6155]  ? resv_map_alloc+0x4d/0x2b0
[  156.573950][ T6155]  kmalloc_trace+0x26/0xe0
[  156.578408][ T6155]  resv_map_alloc+0x4d/0x2b0
[  156.583395][ T6155]  hugetlbfs_get_inode+0x64/0x510
[  156.588477][ T6155]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  156.594521][ T6155]  hugetlb_file_setup+0x211/0x610
[  156.599658][ T6155]  ksys_mmap_pgoff+0x1e2/0x720
[  156.604488][ T6155]  do_syscall_64+0x4c/0xa0
[  156.608960][ T6155]  ? clear_bhb_loop+0x60/0xb0
[  156.613683][ T6155]  ? clear_bhb_loop+0x60/0xb0
[  156.618499][ T6155]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  156.624448][ T6155] RIP: 0033:0x7fe66b79e159
[  156.628909][ T6155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.648561][ T6155] RSP: 002b:00007fe66c6e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  156.657029][ T6155] RAX: ffffffffffffffda RBX: 00007fe66ba25fa0 RCX: 00007fe66b79e159
[  156.665045][ T6155] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000
[  156.673054][ T6155] RBP: 00007fe66b83506b R08: ffffffffffffffff R09: 0000000000000000
[  156.681069][ T6155] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000
[  156.689084][ T6155] R13: 00007fe66ba26038 R14: 00007fe66ba25fa0 R15: 00007ffd22c34488
[  156.697111][ T6155]  </TASK>
[  156.807580][   T26] audit: type=1800 audit(1790801520.996:17): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.617" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  156.903902][ T4278] ocfs2: Unmounting device (7,4) on (node local)
[  157.112673][   T22] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  157.281167][ T4348] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  157.313268][   T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.331034][   T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.348866][   T22] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  157.359574][   T22] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  157.391833][   T22] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  157.401423][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.409726][   T22] usb 1-1: Product: syz
[  157.414220][   T22] usb 1-1: Manufacturer: syz
[  157.419052][   T22] usb 1-1: SerialNumber: syz
[  157.429049][   T22] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  157.445485][ T6176] loop3: detected capacity change from 0 to 128
[  157.451973][   T22] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  157.472243][ T4348] usb 2-1: not running at top speed; connect to a high speed hub
[  157.483938][   T22] usbserial_generic 1-1:1.0: generic converter detected
[  157.492538][ T4348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.496460][ T6176] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985
[  157.506345][   T22] usb 1-1: generic converter now attached to ttyUSB0
[  157.526917][ T4348] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  157.528954][ T6176] ; already mounted read-only
[  157.544804][ T6176] hpfs: filesystem error: improperly stopped
[  157.551103][ T6176] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  157.559274][ T6176] hpfs: You really don't want any checks? You are crazy...
[  157.567156][ T6176] hpfs: hpfs_map_sector(): read error
[  157.573029][ T6176] hpfs: code page support is disabled
[  157.579224][ T6176] hpfs: hpfs_map_4sectors(): unaligned read
[  157.581597][ T4348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.586649][ T6176] hpfs: hpfs_map_4sectors(): unaligned read
[  157.607647][ T6176] hpfs: filesystem error: unable to find root dir
[  157.642237][   T22] usb 1-1: USB disconnect, device number 12
[  157.654491][ T4348] usb 2-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  157.673373][   T22] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  157.699654][   T22] usbserial_generic 1-1:1.0: device disconnected
[  158.025505][ T4348] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  158.043314][ T6187] loop4: detected capacity change from 0 to 256
[  158.053937][ T4348] videodev: could not get a free minor
[  158.059638][ T4348] uvcvideo 2-1:1.1: Failed to register meta-cap device (-23).
[  158.242949][ T4348] usb 2-1: USB disconnect, device number 8
[  158.349755][ T6193] netlink: 2 bytes leftover after parsing attributes in process `syz.0.637'.
[  158.525936][   T26] audit: type=1800 audit(1790801522.716:18): pid=6199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.640" name="dbroot" dev="configfs" ino=39737 res=0 errno=0
[  158.578268][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  158.604091][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  158.620649][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  158.992771][   T22] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  159.192782][   T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.216494][   T22] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[  159.248048][   T22] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  159.265682][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.291065][   T22] usb 4-1: Product: syz
[  159.295365][   T22] usb 4-1: Manufacturer: syz
[  159.299983][   T22] usb 4-1: SerialNumber: syz
[  159.559802][ T4320] usb 4-1: USB disconnect, device number 11
[  159.671255][ T6017] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  159.862948][ T6017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.881038][ T6017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.890895][ T6017] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  159.918057][ T6017] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  159.930398][ T6017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.949571][ T6017] usb 3-1: config 0 descriptor??
[  160.029441][ T6272] loop0: detected capacity change from 0 to 256
[  160.037398][ T6272] exfat: Deprecated parameter 'utf8'
[  160.043012][ T6272] exfat: Deprecated parameter 'namecase'
[  160.048938][ T6272] exfat: Deprecated parameter 'namecase'
[  160.054962][ T6272] exfat: Deprecated parameter 'utf8'
[  160.097002][ T6272] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  160.388098][ T6017] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  160.419870][ T6017] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  160.453050][ T6283] loop4: detected capacity change from 0 to 1024
[  160.608993][ T6292] loop1: detected capacity change from 0 to 128
[  160.840168][ T6295] loop4: detected capacity change from 0 to 256
[  161.724417][ T6321] loop1: detected capacity change from 0 to 4096
[  161.759041][ T6321] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  161.866371][ T6327] netlink: 'syz.3.694': attribute type 11 has an invalid length.
[  161.887690][ T6321] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  162.129464][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'.
[  162.510096][ T5050] usb 3-1: USB disconnect, device number 7
[  162.687965][ T6355] TCP: TCP_TX_DELAY enabled
[  162.846620][ T6362] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  162.857349][ T6359] loop0: detected capacity change from 0 to 4096
[  162.949115][ T6359] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  163.098110][ T6373] loop2: detected capacity change from 0 to 128
[  163.132909][ T6373] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  163.220306][ T6373] FAT-fs (loop2): error, clusters badly computed (3 != 1)
[  163.266436][ T6373] FAT-fs (loop2): Filesystem has been set read-only
[  163.384785][ T6383] loop0: detected capacity change from 0 to 128
[  163.437458][ T6383] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  163.455421][ T4277] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  163.596491][ T6358] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  163.671427][ T6388] FAULT_INJECTION: forcing a failure.
[  163.671427][ T6388] name failslab, interval 1, probability 0, space 0, times 0
[  163.713008][ T6393] loop4: detected capacity change from 0 to 512
[  163.752230][ T6388] CPU: 1 PID: 6388 Comm: syz.2.718 Not tainted syzkaller #0
[  163.759605][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  163.769705][ T6388] Call Trace:
[  163.773029][ T6388]  <TASK>
[  163.775998][ T6388]  dump_stack_lvl+0x188/0x24e
[  163.780730][ T6388]  ? show_regs_print_info+0x12/0x12
[  163.785984][ T6388]  ? load_image+0x410/0x410
[  163.790639][ T6388]  ? __lock_acquire+0x7c40/0x7c40
[  163.795730][ T6388]  ? ida_alloc_range+0x820/0x860
[  163.800732][ T6388]  should_fail_ex+0x390/0x4c0
[  163.805483][ T6388]  should_failslab+0x5/0x20
[  163.810037][ T6388]  slab_pre_alloc_hook+0x59/0x300
[  163.815111][ T6388]  ? idr_replace+0x1a0/0x1a0
[  163.819763][ T6388]  kmem_cache_alloc+0x56/0x2f0
[  163.824580][ T6388]  ? proc_net_ns_init+0x4a/0x380
[  163.829573][ T6388]  proc_net_ns_init+0x4a/0x380
[  163.834386][ T6388]  ops_init+0x360/0x5e0
[  163.838633][ T6388]  setup_net+0x4f2/0xbd0
[  163.842930][ T6388]  ? copy_net_ns+0x5b0/0x5b0
[  163.847580][ T6388]  ? copy_net_ns+0x324/0x5b0
[  163.852221][ T6388]  ? down_read_killable+0x1cc/0x340
[  163.857476][ T6388]  copy_net_ns+0x33e/0x5b0
[  163.861951][ T6388]  create_new_namespaces+0x3ce/0x700
[  163.867291][ T6388]  unshare_nsproxy_namespaces+0x116/0x160
[  163.873072][ T6388]  ksys_unshare+0x4f6/0x8e0
[  163.877629][ T6388]  ? sighand_ctor+0x40/0x40
[  163.882178][ T6388]  ? lock_chain_count+0x20/0x20
[  163.887089][ T6388]  ? syscall_enter_from_user_mode+0x21/0x80
[  163.893045][ T6388]  __x64_sys_unshare+0x34/0x40
[  163.897862][ T6388]  do_syscall_64+0x4c/0xa0
[  163.902321][ T6388]  ? clear_bhb_loop+0x60/0xb0
[  163.907048][ T6388]  ? clear_bhb_loop+0x60/0xb0
[  163.911773][ T6388]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.917737][ T6388] RIP: 0033:0x7f5e1d99e159
[  163.922202][ T6388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.941849][ T6388] RSP: 002b:00007f5e1e77e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  163.950351][ T6388] RAX: ffffffffffffffda RBX: 00007f5e1dc25fa0 RCX: 00007f5e1d99e159
[  163.958375][ T6388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040040000
[  163.966397][ T6388] RBP: 00007f5e1da3506b R08: 0000000000000000 R09: 0000000000000000
[  163.974417][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.982427][ T6388] R13: 00007f5e1dc26038 R14: 00007f5e1dc25fa0 R15: 00007fff2ef6adf8
[  163.990458][ T6388]  </TASK>
[  164.002473][ T6393] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c198, mo2=0003]
[  164.026482][ T6393] System zones: 1-12
[  164.045921][ T6393] EXT4-fs (loop4): 1 truncate cleaned up
[  164.051978][ T6393] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  164.210603][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  164.450068][ T6414] loop0: detected capacity change from 0 to 1024
[  164.557098][ T6417] overlayfs: failed to set xattr on upper
[  164.584789][ T6417] overlayfs: ...falling back to index=off,metacopy=off.
[  164.651106][   T22] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  164.758947][ T6420] loop0: detected capacity change from 0 to 512
[  164.804025][ T6420] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  164.852816][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  164.865570][ T5535] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  164.899947][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.920395][   T22] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  164.959811][   T22] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  164.979970][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.997236][   T22] usb 3-1: config 0 descriptor??
[  165.312124][ T6433] loop4: detected capacity change from 0 to 512
[  165.344644][ T6435] loop1: detected capacity change from 0 to 128
[  165.365818][ T6435] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  165.396643][ T6435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.424938][   T22] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  165.455593][ T6433] EXT4-fs (loop4): corrupt root inode, run e2fsck
[  165.458968][   T22] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  165.511166][ T6433] EXT4-fs (loop4): mount failed
[  165.632369][   T22] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  165.708077][ T3043] usb 3-1: USB disconnect, device number 8
[  165.788059][ T6439] fido_id[6439]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  165.837869][ T6427] loop3: detected capacity change from 0 to 32768
[  165.838606][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.862115][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.873070][   T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  165.889965][ T6427] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.732 (6427)
[  165.897610][   T22] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  165.917316][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.938614][   T22] usb 1-1: config 0 descriptor??
[  165.962739][ T6427] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  165.988652][ T6427] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  166.008711][ T6427] BTRFS info (device loop3): setting nodatasum
[  166.015743][ T6427] BTRFS info (device loop3): using free space tree
[  166.198323][ T6427] BTRFS info (device loop3): enabling ssd optimizations
[  166.211176][ T4322] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  166.257680][   T26] audit: type=1800 audit(1790801530.446:19): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.732" name="bus" dev="loop3" ino=263 res=0 errno=0
[  166.320247][   T26] audit: type=1800 audit(1790801530.506:20): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.732" name="bus" dev="loop3" ino=263 res=0 errno=0
[  166.355791][   T22] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  166.389107][   T22] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  166.443711][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.475188][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.495020][ T4322] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  166.521144][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.548965][ T4322] usb 2-1: config 0 descriptor??
[  166.579186][ T4286] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  166.785942][ T6474] device-mapper: ioctl: Unable to rename non-existent device,  to j
[  166.973656][ T4322] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0
[  166.997413][ T4322] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0
[  167.024052][ T4322] playstation 0003:054C:0DF2.000F: item fetching failed at offset 2/5
[  167.042072][ T4322] playstation 0003:054C:0DF2.000F: Parse failed
[  167.056478][ T4322] playstation: probe of 0003:054C:0DF2.000F failed with error -22
[  167.176150][ T4322] usb 2-1: USB disconnect, device number 9
[  167.299110][ T6469] loop2: detected capacity change from 0 to 32768
[  167.329130][ T6469] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.741 (6469)
[  167.382891][ T6469] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  167.411166][ T6469] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  167.441397][ T6469] BTRFS info (device loop2): using free space tree
[  167.573620][ T6469] BTRFS info (device loop2): enabling ssd optimizations
[  167.610770][ T6503] loop3: detected capacity change from 0 to 8192
[  167.629141][ T6503] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  167.643090][ T6503] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  167.652074][    C0] plantronics 0003:047F:FFFF.000E: usb_submit_urb(ctrl) failed: -1
[  167.657492][ T6503] REISERFS (device loop3): using ordered data mode
[  167.711140][ T6503] reiserfs: using flush barriers
[  167.719720][ T6503] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  167.770727][ T6503] REISERFS (device loop3): checking transaction log (loop3)
[  167.838089][ T4277] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  168.119807][ T6503] REISERFS (device loop3): Using tea hash to sort names
[  168.134291][ T6503] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  168.194588][ T6512] loop2: detected capacity change from 0 to 512
[  168.208592][ T6503] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  168.252767][ T6512] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.751: invalid indirect mapped block 256 (level 2)
[  168.273612][ T6512] EXT4-fs (loop2): 2 truncates cleaned up
[  168.281435][ T6512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  168.482360][ T4322] usb 1-1: USB disconnect, device number 13
[  168.549110][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  168.897996][ T6532] loop4: detected capacity change from 0 to 2048
[  168.953554][ T6532] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  168.970843][ T6532] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.980351][ T4322] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  169.174619][ T4322] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  169.193920][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.229415][ T4322] usb 1-1: config 0 descriptor??
[  169.233662][ T4317] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  169.272629][ T4317] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  169.329656][ T6546] device syzkaller1 entered promiscuous mode
[  169.660168][ T6554] netlink: 'syz.2.769': attribute type 1 has an invalid length.
[  169.669807][ T6554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  169.678111][ T6554] IPv6: NLM_F_CREATE should be set when creating new route
[  169.685415][ T6554] IPv6: NLM_F_CREATE should be set when creating new route
[  169.694482][ T4322] microsoft 0003:045E:009D.0011: unknown main item tag 0x2
[  169.705576][ T4322] microsoft 0003:045E:009D.0011: unknown main item tag 0x1
[  169.713337][ T4322] microsoft 0003:045E:009D.0011: unknown main item tag 0x0
[  169.720874][ T4322] microsoft 0003:045E:009D.0011: unknown main item tag 0x0
[  169.731077][ T4322] microsoft 0003:045E:009D.0011: unknown main item tag 0x0
[  169.738352][ T4322] microsoft 0003:045E:009D.0011: ignoring exceeding usage max
[  169.752672][ T6555] netlink: 'syz.2.769': attribute type 1 has an invalid length.
[  169.760479][ T6555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  169.782755][ T4322] microsoft 0003:045E:009D.0011: unknown main item tag 0x5
[  169.790048][ T4322] microsoft 0003:045E:009D.0011: unknown main item tag 0x6
[  169.831696][ T4322] microsoft 0003:045E:009D.0011: hidraw0: USB HID v0.c4 Device [HID 045e:009d] on usb-dummy_hcd.0-1/input0
[  169.860707][ T6526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.873469][ T4322] microsoft 0003:045E:009D.0011: no inputs found
[  169.879903][ T4322] microsoft 0003:045E:009D.0011: could not initialize ff, continuing anyway
[  169.901405][ T6526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.947304][ T4322] usb 1-1: USB disconnect, device number 14
[  170.080296][ T6562] loop3: detected capacity change from 0 to 2048
[  170.134709][ T6565] loop2: detected capacity change from 0 to 256
[  170.170029][ T6558] fido_id[6558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  170.238654][   T26] audit: type=1800 audit(1790801534.426:21): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.775" name="file1" dev="loop2" ino=1048621 res=0 errno=0
[  170.280265][   T26] audit: type=1800 audit(1790801534.446:22): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.775" name="file1" dev="loop2" ino=1048621 res=0 errno=0
[  170.312917][ T6562] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  170.380275][   T26] audit: type=1800 audit(1790801534.566:23): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.775" name="file1" dev="loop2" ino=1048621 res=0 errno=0
[  170.451168][ T6577] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152)
[  170.459257][ T6577] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152)
[  170.965675][ T5535] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  170.996525][ T5535] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  171.014779][ T5535] EXT4-fs (loop3): This should not happen!! Data will be lost
[  171.014779][ T5535] 
[  171.044572][ T5535] EXT4-fs (loop3): Total free blocks count 0
[  171.061810][ T5535] EXT4-fs (loop3): Free/Dirty block details
[  171.080072][ T5535] EXT4-fs (loop3): free_blocks=2415919504
[  171.092794][ T5535] EXT4-fs (loop3): dirty_blocks=2384
[  171.103819][ T5535] EXT4-fs (loop3): Block reservation details
[  171.116592][ T5535] EXT4-fs (loop3): i_reserved_data_blocks=149
[  171.140164][ T5535] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  171.526216][ T6588] loop4: detected capacity change from 0 to 40427
[  171.574338][ T6588] F2FS-fs (loop4): invalid crc value
[  171.585202][ T6588] F2FS-fs (loop4): Found nat_bits in checkpoint
[  171.731813][ T6588] F2FS-fs (loop4): Start checkpoint disabled!
[  171.749492][ T6613] loop3: detected capacity change from 0 to 8
[  171.772869][ T6588] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  171.784003][ T4317] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  171.851413][   T26] audit: type=1800 audit(1790801536.046:24): pid=6588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.781" name="bus" dev="loop4" ino=10 res=0 errno=0
[  171.856889][ T6613] SQUASHFS error: lzo decompression failed, data probably corrupt
[  171.934656][ T6620] FAULT_INJECTION: forcing a failure.
[  171.934656][ T6620] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  171.938112][ T6613] SQUASHFS error: Failed to read block 0x91: -5
[  171.958107][ T6620] CPU: 1 PID: 6620 Comm: syz.2.794 Not tainted syzkaller #0
[  171.965463][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  171.975559][ T6620] Call Trace:
[  171.978872][ T6620]  <TASK>
[  171.981844][ T6620]  dump_stack_lvl+0x188/0x24e
[  171.986572][ T6620]  ? show_regs_print_info+0x12/0x12
[  171.991355][ T4317] usb 1-1: Using ep0 maxpacket: 32
[  171.991799][ T6620]  ? load_image+0x410/0x410
[  172.001471][ T6620]  ? __lock_acquire+0x7c40/0x7c40
[  172.006553][ T6620]  should_fail_ex+0x390/0x4c0
[  172.008389][ T4317] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  172.011276][ T6620]  strncpy_from_user+0x32/0x340
[  172.011313][ T6620]  getname_flags+0xf2/0x500
[  172.011339][ T6620]  __x64_sys_mkdirat+0x78/0x90
[  172.011364][ T6620]  do_syscall_64+0x4c/0xa0
[  172.011386][ T6620]  ? clear_bhb_loop+0x60/0xb0
[  172.044702][ T6620]  ? clear_bhb_loop+0x60/0xb0
[  172.048984][ T6613] SQUASHFS error: Unable to read metadata cache entry [8f]
[  172.049410][ T6620]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  172.062537][ T6620] RIP: 0033:0x7f5e1d99e159
[  172.066970][ T6620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.086597][ T6620] RSP: 002b:00007f5e1e77e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  172.095040][ T6620] RAX: ffffffffffffffda RBX: 00007f5e1dc25fa0 RCX: 00007f5e1d99e159
[  172.103047][ T6620] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c
[  172.111076][ T6620] RBP: 00007f5e1da3506b R08: 0000000000000000 R09: 0000000000000000
[  172.119068][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.127070][ T6620] R13: 00007f5e1dc26038 R14: 00007f5e1dc25fa0 R15: 00007fff2ef6adf8
[  172.135078][ T6620]  </TASK>
[  172.138844][ T6613] SQUASHFS error: Unable to read inode 0x11f
[  172.153504][ T4317] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  172.164601][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  172.173237][ T4317] usb 1-1: Product: syz
[  172.181199][ T4317] usb 1-1: Manufacturer: syz
[  172.191115][ T4317] usb 1-1: SerialNumber: syz
[  172.198209][ T4317] usb 1-1: config 0 descriptor??
[  172.217379][ T6607] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  172.232355][ T4317] hub 1-1:0.0: bad descriptor, ignoring hub
[  172.239895][ T6613] loop3: detected capacity change from 0 to 256
[  172.246461][ T4317] hub: probe of 1-1:0.0 failed with error -5
[  172.267581][ T6613] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  172.318981][ T6613] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  172.340248][ T5535] kworker/u4:20: attempt to access beyond end of device
[  172.340248][ T5535] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  172.956837][ T4322] usb 1-1: USB disconnect, device number 15
[  173.129736][ T6633] loop2: detected capacity change from 0 to 32768
[  173.136441][ T4322] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  173.174221][ T6633] JBD2: Ignoring recovery information on journal
[  173.271041][   T14] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  173.310358][ T6633] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  173.357568][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64
[  173.368698][ T6640] loop1: detected capacity change from 0 to 32768
[  173.410451][ T6640] XFS (loop1): Mounting V5 Filesystem
[  173.430411][ T4322] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  173.461434][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  173.471021][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.479209][ T4322] usb 1-1: Product: syz
[  173.490671][ T4322] usb 1-1: Manufacturer: syz
[  173.496330][ T4322] usb 1-1: SerialNumber: syz
[  173.510768][ T4322] usb 1-1: config 0 descriptor??
[  173.519589][ T6627] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  173.529344][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.538023][ T4322] hub 1-1:0.0: bad descriptor, ignoring hub
[  173.545702][ T4322] hub: probe of 1-1:0.0 failed with error -5
[  173.580871][   T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  173.629631][   T14] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  173.666275][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.685401][   T14] usb 4-1: config 0 descriptor??
[  173.698996][ T6640] XFS (loop1): Ending clean mount
[  173.709635][ T4277] ocfs2: Unmounting device (7,2) on (node local)
[  173.884078][   T22] usb 1-1: USB disconnect, device number 16
[  173.965543][ T4273] XFS (loop1): Unmounting Filesystem
[  174.106010][   T14] plantronics 0003:047F:FFFF.0012: unbalanced collection at end of report description
[  174.135822][   T14] plantronics 0003:047F:FFFF.0012: parse failed
[  174.155339][   T14] plantronics: probe of 0003:047F:FFFF.0012 failed with error -22
[  174.319737][   T14] usb 4-1: USB disconnect, device number 12
[  174.445624][ T6668] loop0: detected capacity change from 0 to 256
[  174.617928][   T26] audit: type=1800 audit(1790801538.806:25): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.809" name="UDC" dev="configfs" ino=41986 res=0 errno=0
[  174.808903][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'.
[  175.174529][ T6685] loop4: detected capacity change from 0 to 128
[  175.222644][ T6670] loop2: detected capacity change from 0 to 32768
[  175.242629][ T6670] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.807 (6670)
[  175.264589][ T6670] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.275905][ T6685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  175.281766][ T6670] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  175.294413][ T6685] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  175.331324][ T6670] BTRFS info (device loop2): setting nodatasum
[  175.341280][ T6670] BTRFS info (device loop2): using free space tree
[  175.361021][   T22] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  175.546896][ T6670] BTRFS info (device loop2): enabling ssd optimizations
[  175.594197][   T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.616797][   T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.669331][   T22] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  175.730773][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.782646][   T22] usb 2-1: config 0 descriptor??
[  176.023881][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  176.115505][ T6721] device syz_tun entered promiscuous mode
[  176.158533][ T6721] bridge0: port 3(syz_tun) entered blocking state
[  176.193445][ T6721] bridge0: port 3(syz_tun) entered disabled state
[  176.202014][   T22] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0
[  176.212330][ T4277] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  176.232792][   T22] hid-steam 0003:28DE:1142.0013: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  176.279428][ T5248] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (5248)
[  176.294810][   T22] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0
[  176.303196][ T6721] bridge0: port 3(syz_tun) entered blocking state
[  176.310186][ T6721] bridge0: port 3(syz_tun) entered forwarding state
[  176.337988][   T22] hid-steam 0003:28DE:1142.0014: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  176.447685][   T22] hid-steam 0003:28DE:1142.0013: Steam wireless receiver connected
[  176.457831][   T22] hid-steam 0003:28DE:1142.0013: No HID_FEATURE_REPORT submitted -  nothing to read
[  176.892525][ T6746] netlink: 'syz.2.823': attribute type 3 has an invalid length.
[  177.636490][ T6742] usb 2-1: reset high-speed USB device number 10 using dummy_hcd
[  177.747552][ T6769] loop3: detected capacity change from 0 to 512
[  177.787004][ T6748] loop0: detected capacity change from 0 to 40427
[  177.826124][ T6748] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  177.843334][ T6748] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  177.898690][ T6748] F2FS-fs (loop0): invalid crc value
[  177.919388][ T6748] F2FS-fs (loop0): Wrong cp_pack_start_sum: 1
[  177.945541][ T6748] F2FS-fs (loop0): Failed to get valid F2FS checkpoint
[  178.488178][ T4322] usb 2-1: USB disconnect, device number 10
[  178.546431][ T4322] hid-steam 0003:28DE:1142.0013: Steam wireless receiver disconnected
[  179.230204][ T6812] FAULT_INJECTION: forcing a failure.
[  179.230204][ T6812] name failslab, interval 1, probability 0, space 0, times 0
[  179.274540][ T6814] db_root: cannot open: /dev/net/tun
[  179.279902][ T6814] db_root: not a directory: /dev/net/tun
[  179.346874][ T6812] CPU: 0 PID: 6812 Comm: syz.3.846 Not tainted syzkaller #0
[  179.354290][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  179.364472][ T6812] Call Trace:
[  179.367790][ T6812]  <TASK>
[  179.370755][ T6812]  dump_stack_lvl+0x188/0x24e
[  179.375477][ T6812]  ? show_regs_print_info+0x12/0x12
[  179.380725][ T6812]  ? load_image+0x410/0x410
[  179.385280][ T6812]  ? __might_sleep+0xd0/0xd0
[  179.389907][ T6812]  ? __lock_acquire+0x7c40/0x7c40
[  179.395011][ T6812]  should_fail_ex+0x390/0x4c0
[  179.399778][ T6812]  should_failslab+0x5/0x20
[  179.404324][ T6812]  slab_pre_alloc_hook+0x59/0x300
[  179.409392][ T6812]  kmem_cache_alloc+0x56/0x2f0
[  179.414220][ T6812]  ? mpol_new+0x165/0x300
[  179.418607][ T6812]  mpol_new+0x165/0x300
[  179.422814][ T6812]  __se_sys_mbind+0x401/0x810
[  179.427537][ T6812]  ? __ia32_sys_get_robust_list+0x100/0x100
[  179.433498][ T6812]  ? __x64_sys_mbind+0xf0/0xf0
[  179.438331][ T6812]  ? lock_chain_count+0x20/0x20
[  179.443237][ T6812]  ? __x64_sys_mbind+0x1d/0xf0
[  179.448063][ T6812]  do_syscall_64+0x4c/0xa0
[  179.452525][ T6812]  ? clear_bhb_loop+0x60/0xb0
[  179.457246][ T6812]  ? clear_bhb_loop+0x60/0xb0
[  179.462002][ T6812]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  179.467952][ T6812] RIP: 0033:0x7fc08af9e159
[  179.472409][ T6812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  179.492061][ T6812] RSP: 002b:00007fc08bea2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  179.500533][ T6812] RAX: ffffffffffffffda RBX: 00007fc08b225fa0 RCX: 00007fc08af9e159
[  179.508566][ T6812] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00002000005b5000
[  179.516593][ T6812] RBP: 00007fc08b03506b R08: 0000000000000000 R09: 0000000000000002
[  179.524616][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.532634][ T6812] R13: 00007fc08b226038 R14: 00007fc08b225fa0 R15: 00007fff6626e988
[  179.540665][ T6812]  </TASK>
[  179.858728][ T6824] loop0: detected capacity change from 0 to 64
[  179.946015][ T4317] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  180.017345][ T6811] loop1: detected capacity change from 0 to 32768
[  180.144441][ T4317] usb 3-1: Using ep0 maxpacket: 16
[  180.154880][ T4317] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.201227][ T4317] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.240984][ T4317] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.250803][ T4317] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  180.301197][ T4317] usb 3-1: config 0 interface 0 has no altsetting 0
[  180.308052][ T4317] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  180.351158][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.362509][ T4317] usb 3-1: config 0 descriptor??
[  180.566331][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'.
[  180.625449][ T6835] device hsr_slave_0 left promiscuous mode
[  180.690260][ T6835] device hsr_slave_1 left promiscuous mode
[  180.791289][ T4317] logitech-djreceiver 0003:046D:C53A.0015: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0
[  181.222384][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.874'.
[  181.625877][ T6856] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[  181.795961][ T6860] loop4: detected capacity change from 0 to 4096
[  181.855649][ T6865] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.162153][ T6871] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  182.601037][ T5049] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  182.692756][ T6892] loop2: detected capacity change from 0 to 2048
[  182.728618][ T6893] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.751861][ T6742] usb 3-1: USB disconnect, device number 9
[  182.793371][ T5049] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11
[  182.819144][ T6893] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  182.831102][ T6893] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  182.861116][ T5049] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024
[  182.878984][ T6893] Remounting filesystem read-only
[  182.912829][ T5049] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00
[  182.938412][ T5049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.965497][ T5049] usb 2-1: Product: syz
[  182.970706][ T5049] usb 2-1: Manufacturer: syz
[  182.979963][ T5049] usb 2-1: SerialNumber: syz
[  182.996540][ T4277] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  183.017442][ T5049] symbolserial 2-1:1.0: symbol converter detected
[  183.071209][ T5049] usb 2-1: symbol converter now attached to ttyUSB0
[  183.240268][ T5049] usb 2-1: USB disconnect, device number 11
[  183.257985][ T5049] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  183.269171][ T5049] symbolserial 2-1:1.0: device disconnected
[  183.460998][   T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  183.649135][   T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  183.666421][   T14] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  183.680271][   T14] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[  183.695823][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  183.706593][   T14] usb 4-1: Product: syz
[  183.710811][   T14] usb 4-1: Manufacturer: syz
[  183.727195][   T14] iuu_phoenix 4-1:1.0: iuu_phoenix converter detected
[  183.742629][   T14] usb 4-1: iuu_phoenix converter now attached to ttyUSB0
[  183.878066][ T6924] netlink: 11 bytes leftover after parsing attributes in process `syz.1.893'.
[  183.919017][ T6924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.893'.
[  183.961106][ T6924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.893'.
[  183.985860][ T6913] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode: 7u̝e�!W�i��j��/�����)P���( is not a unsigned long
[  184.035392][ T5049] usb 4-1: USB disconnect, device number 13
[  184.057603][ T5049] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  184.086113][ T5049] iuu_phoenix 4-1:1.0: device disconnected
[  184.571890][ T6948] loop2: detected capacity change from 0 to 128
[  184.617935][ T6948] VFS: Found a Xenix FS (block size = 512) on device loop2
[  184.657035][ T6948] sysv_free_block: trying to free block not in datazone
[  184.750661][ T6948] syz.2.903: attempt to access beyond end of device
[  184.750661][ T6948] loop2: rw=2049, sector=209285, nr_sectors = 1 limit=128
[  184.786693][ T6948] Buffer I/O error on dev loop2, logical block 209285, lost async page write
[  184.939221][ T4277] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  184.955840][ T6953] loop4: detected capacity change from 0 to 8192
[  185.010138][ T6953] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  185.501353][ T6959] netlink: 40 bytes leftover after parsing attributes in process `syz.4.911'.
[  185.567357][ T6959] netlink: 2 bytes leftover after parsing attributes in process `syz.4.911'.
[  185.593880][ T6951] loop3: detected capacity change from 0 to 131072
[  185.611608][ T6951] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  185.618366][ T6951] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  185.631674][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'.
[  185.651206][ T6951] F2FS-fs (loop3): invalid crc value
[  185.703226][ T6951] F2FS-fs (loop3): Found nat_bits in checkpoint
[  185.730235][ T6963] netlink: 'syz.1.912': attribute type 1 has an invalid length.
[  185.818109][ T6951] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  185.825654][ T6951] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  186.191111][ T6742] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  186.412802][ T6742] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  186.438457][ T6742] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  186.466928][ T6742] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  186.501092][ T6742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.516035][ T6992] virtiofs: Unknown parameter 'always  1      V3
[  186.516035][ T6992] 				010000E0     1 0:00000000		0
[  186.516035][ T6992] 20	batadv0   :     1      V3
[  186.516035][ T6992] 				010000E0     1 0:00000000		0
[  186.516035][ T6992] 21	vxcan0    :     1      V3
[  186.516035][ T6992] 				010000E0     1 0:00000000		0
[  186.516035][ T6992] 22	vxcan1    :     1      V3
[  186.516035][ T6992] 				010000E0     1 0:00000000		0
[  186.516035][ T6992] 23	veth0     :     1      V3
[  186.516035][ T6992] 				010000E0     1 0:00000000		0
[  186.516035][ T6992] 24	veth1     :     1      V3
[  186.516035][ T6992] 				010000E0     1 0:00000000		0
[  186.516035][ T6992] 25	wg0       :     1      V3
[  186.516035][ T6992] 				010000E0     1 0:00000000		0
[  186.516035][ T6992] 26	wg1       :     1      V3
[  186.516035][ T6992] 				010000E0     1 0:00000000		0
[  186.516035][ T6992] 27	wg2       :     1      V3
[  186.516035][ T6992] 				010000E0     1 0:00000000		0
[  186.603887][    C1] vkms_vblank_simulate: vblank timer overrun
[  186.649066][ T6975] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  186.904403][ T6742] usb 5-1: USB disconnect, device number 11
[  187.433551][ T6993] loop3: detected capacity change from 0 to 32768
[  187.464982][ T6993] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.918 (6993)
[  187.510570][ T6993] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  187.533119][ T6993] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  187.565426][ T6993] BTRFS error (device loop3): superblock checksum mismatch
[  187.592367][ T6993] BTRFS error (device loop3): open_ctree failed: -22
[  187.679103][ T4381] udevd[4381]: incorrect btrfs checksum on /dev/loop3
[  187.815981][ T7002] loop2: detected capacity change from 0 to 32768
[  187.874265][ T7002] 
[  187.874265][ T7002]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  187.874265][ T7002] 
[  187.888022][ T7006] loop1: detected capacity change from 0 to 32768
[  187.904571][ T7006] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  187.942426][ T7002] ERROR: (device loop2): diWrite: ixpxd invalid
[  187.942426][ T7002] 
[  187.984719][ T7002] ERROR: (device loop2): remounting filesystem as read-only
[  188.001807][ T7002] ERROR: (device loop2): txCommit: 
[  188.001807][ T7002] 
[  188.472789][ T4357] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  188.515339][ T7015] blkno = 0, nblocks = 40
[  188.519748][ T7015] ERROR: (device loop2): dbFree: block to be freed is outside the map
[  188.519748][ T7015] 
[  188.872851][ T7023] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22)
[  189.079511][ T7012] loop0: detected capacity change from 0 to 32768
[  189.187933][ T7021] loop4: detected capacity change from 0 to 131072
[  189.216059][ T4277] 
[  189.216059][ T4277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.216059][ T4277] 
[  189.227480][ T7021] F2FS-fs (loop4): invalid crc value
[  189.247224][ T4277] 
[  189.247224][ T4277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.247224][ T4277] 
[  189.278573][ T7021] F2FS-fs (loop4): Found nat_bits in checkpoint
[  189.330634][ T7021] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  189.410862][ T7012] XFS (loop0): Mounting V5 Filesystem
[  189.441866][   T26] audit: type=1800 audit(1790801553.636:26): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.936" name="file2" dev="loop4" ino=8 res=0 errno=0
[  189.474816][ T7039] FAULT_INJECTION: forcing a failure.
[  189.474816][ T7039] name failslab, interval 1, probability 0, space 0, times 0
[  189.488820][ T7039] CPU: 1 PID: 7039 Comm: syz.2.938 Not tainted syzkaller #0
[  189.496173][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  189.506279][ T7039] Call Trace:
[  189.509609][ T7039]  <TASK>
[  189.512575][ T7039]  dump_stack_lvl+0x188/0x24e
[  189.517319][ T7039]  ? show_regs_print_info+0x12/0x12
[  189.522553][ T7039]  ? load_image+0x410/0x410
[  189.527112][ T7039]  ? __might_sleep+0xd0/0xd0
[  189.531752][ T7039]  ? __lock_acquire+0x7c40/0x7c40
[  189.536842][ T7039]  should_fail_ex+0x390/0x4c0
[  189.541694][ T7039]  should_failslab+0x5/0x20
[  189.546235][ T7039]  slab_pre_alloc_hook+0x59/0x300
[  189.551298][ T7039]  ? tomoyo_encode+0x28a/0x550
[  189.556108][ T7039]  __kmem_cache_alloc_node+0x4f/0x270
[  189.561528][ T7039]  ? tomoyo_realpath_from_path+0x5c0/0x5c0
[  189.567382][ T7039]  ? tomoyo_encode+0x28a/0x550
[  189.572191][ T7039]  __kmalloc+0xa3/0x240
[  189.576401][ T7039]  tomoyo_encode+0x28a/0x550
[  189.581047][ T7039]  tomoyo_realpath_from_path+0x578/0x5c0
[  189.586727][ T7039]  ? tomoyo_domain+0xd2/0x120
[  189.591477][ T7039]  ? tomoyo_path_perm+0x244/0x610
[  189.596531][ T7039]  tomoyo_path_perm+0x26f/0x610
[  189.601410][ T7039]  ? tomoyo_path_permission+0x3a0/0x3a0
[  189.607022][ T7039]  ? futex_wake_mark+0x150/0x150
[  189.611999][ T7039]  ? __fget_files+0x3fc/0x460
[  189.616714][ T7039]  security_inode_getattr+0xcf/0x120
[  189.622021][ T7039]  vfs_getattr+0x26/0x3a0
[  189.626376][ T7039]  __x64_sys_newfstat+0x13d/0x220
[  189.631422][ T7039]  ? __ia32_sys_newfstatat+0x250/0x250
[  189.636942][ T7039]  ? lockdep_hardirqs_on+0x94/0x140
[  189.642174][ T7039]  do_syscall_64+0x4c/0xa0
[  189.646636][ T7039]  ? clear_bhb_loop+0x60/0xb0
[  189.651340][ T7039]  ? clear_bhb_loop+0x60/0xb0
[  189.656043][ T7039]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  189.661991][ T7039] RIP: 0033:0x7f5e1d99e159
[  189.666430][ T7039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.686059][ T7039] RSP: 002b:00007f5e1e77e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005
[  189.694495][ T7039] RAX: ffffffffffffffda RBX: 00007f5e1dc25fa0 RCX: 00007f5e1d99e159
[  189.702484][ T7039] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  189.710620][ T7039] RBP: 00007f5e1da3506b R08: 0000000000000000 R09: 0000000000000000
[  189.718633][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.726635][ T7039] R13: 00007f5e1dc26038 R14: 00007f5e1dc25fa0 R15: 00007fff2ef6adf8
[  189.734652][ T7039]  </TASK>
[  189.737730][    C1] vkms_vblank_simulate: vblank timer overrun
[  189.771491][ T7039] ERROR: Out of memory at tomoyo_realpath_from_path.
[  189.811939][ T7012] XFS (loop0): Ending clean mount
[  189.891643][ T7012] XFS (loop0): User initiated shutdown received.
[  189.929873][ T7012] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  189.991048][ T7012] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  190.113215][ T4279] XFS (loop0): Unmounting Filesystem
[  190.168040][ T6742] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  190.321170][   T14] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  190.373185][ T6742] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  190.395725][ T7051] loop3: detected capacity change from 0 to 128
[  190.403119][ T6742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.436252][ T6742] usb 2-1: config 0 descriptor??
[  190.462447][ T6742] cp210x 2-1:0.0: cp210x converter detected
[  190.541187][   T14] usb 3-1: Using ep0 maxpacket: 32
[  190.559771][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.591274][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.628538][   T14] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  190.648052][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.676628][   T14] usb 3-1: config 0 descriptor??
[  190.853026][ T7047] loop4: detected capacity change from 0 to 32768
[  190.872805][ T6742] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  190.916643][ T6742] usb 2-1: cp210x converter now attached to ttyUSB0
[  190.926675][ T7060] netlink: 52 bytes leftover after parsing attributes in process `syz.3.947'.
[  190.962832][ T7047] XFS (loop4): Mounting V5 Filesystem
[  191.068390][ T7047] XFS (loop4): Ending clean mount
[  191.103763][ T6742] usb 2-1: USB disconnect, device number 12
[  191.122156][ T6742] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  191.139122][   T14] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  191.152787][ T6742] cp210x 2-1:0.0: device disconnected
[  191.222722][ T4278] XFS (loop4): Unmounting Filesystem
[  191.241321][ T7069] all (unregistering): Released all slaves
[  191.442681][ T6742] usb 3-1: USB disconnect, device number 10
[  191.462800][ T7073] loop0: detected capacity change from 0 to 1024
[  191.484194][ T7071] fido_id[7071]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  191.599175][ T7073] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  191.652030][ T7073] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.705561][ T7073] EXT4-fs warning (device loop0): ext4_empty_dir:3158: inode #12: comm syz.0.950: directory missing '..'
[  191.759889][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  191.871075][ T6737] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  191.951070][ T4322] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  192.074050][ T6737] usb 4-1: unable to get BOS descriptor or descriptor too short
[  192.086349][ T6737] usb 4-1: not running at top speed; connect to a high speed hub
[  192.099699][ T6737] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  192.113827][ T6737] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  192.136886][ T6737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.145402][ T6737] usb 4-1: Product: syz
[  192.149612][ T6737] usb 4-1: Manufacturer: syz
[  192.156082][ T4322] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  192.171662][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.188600][ T6737] usb 4-1: SerialNumber: syz
[  192.194943][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.210785][ T4322] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  192.234898][ T4322] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  192.254566][ T4322] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  192.266741][ T4322] usb 2-1: Manufacturer: syz
[  192.283810][ T4322] usb 2-1: config 0 descriptor??
[  192.401038][ T6742] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  192.424187][ T6737] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  192.437603][ T7104] loop4: detected capacity change from 0 to 128
[  192.450578][ T7104] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  192.475395][ T7104] FAT-fs (loop4): error, clusters badly computed (3 != 1)
[  192.482936][ T7104] FAT-fs (loop4): Filesystem has been set read-only
[  192.536742][ T4278] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  192.602783][ T6742] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[  192.621007][ T6742] usb 1-1: config 0 has no interface number 0
[  192.631392][ T6742] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  192.643712][ T6737] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  192.659905][ T6737] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  192.672122][ T6742] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  192.686507][ T6742] usb 1-1: config 0 interface 255 has no altsetting 0
[  192.699457][ T4322] appleir 0003:05AC:8243.0017: unknown main item tag 0x0
[  192.717089][ T6742] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  192.727530][ T4322] appleir 0003:05AC:8243.0017: No inputs registered, leaving
[  192.751038][ T6742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.765397][ T4322] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  192.782668][ T6742] usb 1-1: config 0 descriptor??
[  192.812303][ T6742] cp210x 1-1:0.255: cp210x converter detected
[  192.971041][ T4320] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  193.002801][ T6738] usb 2-1: USB disconnect, device number 13
[  193.054244][ T6737] usb 4-1: invalid uac2 rates
[  193.059184][ T6737] usb 4-1: invalid uac2 rates
[  193.064749][ T6737] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  193.073580][ T6737] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  193.171030][ T4320] usb 3-1: Using ep0 maxpacket: 8
[  193.178010][ T4320] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  193.186446][ T4320] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  193.197742][ T4320] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  193.197899][ T6742] cp210x 1-1:0.255: failed to get vendor val 0x000e size 3: -32
[  193.216322][ T4320] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  193.227743][ T4320] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  193.238626][ T4320] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  193.251783][ T4320] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  193.261328][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.272209][ T6737] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  193.284745][ T4322] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  193.334204][ T6737] usb 4-1: USB disconnect, device number 14
[  193.464290][ T6742] cp210x 1-1:0.255: GPIO initialisation failed: -19
[  193.473848][ T6742] usb 1-1: cp210x converter now attached to ttyUSB0
[  193.493515][ T4322] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  193.503027][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.520707][ T4320] usb 3-1: GET_CAPABILITIES returned 0
[  193.527547][ T4320] usbtmc 3-1:16.0: can't read capabilities
[  193.545357][ T4322] usb 5-1: config 0 descriptor??
[  193.565447][ T4322] cp210x 5-1:0.0: cp210x converter detected
[  193.606303][ T4381] udevd[4381]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  193.690297][ T6737] usb 1-1: USB disconnect, device number 17
[  193.706522][ T6737] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  193.723921][ T6737] cp210x 1-1:0.255: device disconnected
[  193.727471][ T4317] usb 3-1: USB disconnect, device number 11
[  193.754039][ T7115] loop1: detected capacity change from 0 to 8192
[  193.975157][ T4322] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  194.104595][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.111027][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.192431][ T4322] usb 5-1: cp210x converter now attached to ttyUSB0
[  194.390321][ T4317] usb 5-1: USB disconnect, device number 12
[  194.433599][ T4317] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  194.483421][ T4317] cp210x 5-1:0.0: device disconnected
[  194.772734][ T7142] loop3: detected capacity change from 0 to 2048
[  194.792733][ T7127] loop1: detected capacity change from 0 to 32768
[  194.809358][ T7142] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  194.860174][ T7127] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.972 (7127)
[  194.882008][ T7142] UDF-fs: unknown compression code (0)
[  194.953329][ T7127] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  194.974829][ T7127] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  195.051060][ T7127] BTRFS info (device loop1): setting nodatasum
[  195.057319][ T7127] BTRFS info (device loop1): using free space tree
[  195.157256][ T7151] __sock_release: fasync list not empty!
[  195.287236][ T7171] ip_tables: iptables: counters copy to user failed while replacing table
[  195.394895][ T7127] BTRFS info (device loop1): enabling ssd optimizations
[  195.464090][   T26] audit: type=1800 audit(1790801559.656:27): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.972" name="bus" dev="loop1" ino=263 res=0 errno=0
[  195.587384][   T26] audit: type=1800 audit(1790801559.686:28): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.972" name="bus" dev="loop1" ino=263 res=0 errno=0
[  195.608016][ T6737] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  195.696584][ T4273] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  195.831072][ T6737] usb 5-1: Using ep0 maxpacket: 32
[  195.840366][ T6737] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  195.893629][ T6737] usb 5-1: config 0 has no interface number 0
[  195.922447][ T6737] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  195.951180][ T6737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.969513][ T6737] usb 5-1: Product: syz
[  195.987893][ T6737] usb 5-1: Manufacturer: syz
[  196.006129][ T6737] usb 5-1: SerialNumber: syz
[  196.058601][ T6737] usb 5-1: config 0 descriptor??
[  196.097095][ T6737] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  196.115193][ T4381] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (4381)
[  196.282225][ T7203] xt_hashlimit: size too large, truncated to 1048576
[  196.289914][ T7203] xt_hashlimit: max too large, truncated to 1048576
[  196.301896][ T6737] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  196.326642][ T6737] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  196.388290][ T7200] loop2: detected capacity change from 0 to 4096
[  196.406865][ T7203] xt_hashlimit: Unknown mode mask B2F8C501, kernel too old?
[  196.492702][ T7200] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  196.706497][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  196.719531][ T4320] usb 5-1: USB disconnect, device number 13
[  196.757175][ T4320] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  196.771921][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  196.842236][ T4320] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  196.900520][ T4320] quatech2 5-1:0.51: device disconnected
[  196.913235][ T7220] loop1: detected capacity change from 0 to 2048
[  196.979321][ T7220] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  197.304070][ T7229] loop3: detected capacity change from 0 to 8192
[  197.761038][ T6737] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  197.869038][ T7251] loop4: detected capacity change from 0 to 256
[  197.958404][ T6737] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 4
[  197.980018][ T6737] usb 1-1: config 0 interface 0 has no altsetting 0
[  198.015598][ T6737] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  198.043039][ T6737] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  198.051677][ T7255] loop3: detected capacity change from 0 to 128
[  198.070876][ T6737] usb 1-1: Product: syz
[  198.083037][ T6737] usb 1-1: Manufacturer: syz
[  198.096120][ T6737] usb 1-1: SerialNumber: syz
[  198.105857][ T7255] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  198.143846][ T6737] usb 1-1: config 0 descriptor??
[  198.179855][ T6737] usb 1-1: selecting invalid altsetting 0
[  198.217522][ T7255] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  198.368220][ T7236] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  198.419166][ T6737] usb 1-1: USB disconnect, device number 18
[  198.608197][ T7275] loop1: detected capacity change from 0 to 1024
[  198.634609][ T7275] hfsplus: failed to load catalog file
[  198.666171][ T4323] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  198.836228][ T4320] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  198.865302][ T4323] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  198.883129][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.907209][ T4323] usb 5-1: config 0 descriptor??
[  199.023440][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.055031][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.081972][ T4320] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  199.111071][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.129977][ T7290] bridge0: port 4(syz_tun) entered blocking state
[  199.138198][ T4320] usb 3-1: config 0 descriptor??
[  199.146290][ T7290] bridge0: port 4(syz_tun) entered disabled state
[  199.163822][ T7290] bridge0: port 4(syz_tun) entered blocking state
[  199.170396][ T7290] bridge0: port 4(syz_tun) entered forwarding state
[  199.348001][ T4323] microsoft 0003:045E:009D.0018: unknown main item tag 0x2
[  199.361206][ T4323] microsoft 0003:045E:009D.0018: unknown main item tag 0x1
[  199.380820][ T4323] microsoft 0003:045E:009D.0018: unknown main item tag 0x0
[  199.401177][ T4323] microsoft 0003:045E:009D.0018: unknown main item tag 0x0
[  199.408542][ T4323] microsoft 0003:045E:009D.0018: unknown main item tag 0x0
[  199.416335][ T4323] microsoft 0003:045E:009D.0018: ignoring exceeding usage max
[  199.425951][ T4323] microsoft 0003:045E:009D.0018: unknown main item tag 0x5
[  199.434263][ T4323] microsoft 0003:045E:009D.0018: unknown main item tag 0x6
[  199.449476][ T4323] microsoft 0003:045E:009D.0018: hidraw0: USB HID v0.c4 Device [HID 045e:009d] on usb-dummy_hcd.4-1/input0
[  199.465559][ T4323] microsoft 0003:045E:009D.0018: no inputs found
[  199.476524][ T4323] microsoft 0003:045E:009D.0018: could not initialize ff, continuing anyway
[  199.565953][ T4320] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0
[  199.583583][ T7262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.586541][ T4320] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0
[  199.600266][ T7305] loop0: detected capacity change from 0 to 8
[  199.617836][ T7262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.629014][ T4320] playstation 0003:054C:0DF2.0019: item fetching failed at offset 2/5
[  199.639204][ T5050] usb 5-1: USB disconnect, device number 14
[  199.652458][ T4320] playstation 0003:054C:0DF2.0019: Parse failed
[  199.669055][ T4320] playstation: probe of 0003:054C:0DF2.0019 failed with error -22
[  199.680561][ T7305] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  199.683074][ T6737] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  199.704020][ T7303] fido_id[7303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  199.708912][ T4357] udevd[4357]: incorrect cramfs checksum on /dev/loop0
[  199.768745][ T4357] udevd[4357]: incorrect cramfs checksum on /dev/loop0
[  199.790862][ T4323] usb 3-1: USB disconnect, device number 12
[  199.905377][ T6737] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  199.916754][ T6737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.928191][ T6737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.942537][ T6737] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  199.961599][ T6737] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  199.970825][ T6737] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  199.979396][ T6737] usb 4-1: Manufacturer: syz
[  199.986879][ T6737] usb 4-1: config 0 descriptor??
[  200.223161][ T7319] Invalid argument reading file caps for ./file0
[  200.303594][ T7323] device syz_tun entered promiscuous mode
[  200.311391][ T7323] bridge0: port 3(syz_tun) entered blocking state
[  200.321373][ T7323] bridge0: port 3(syz_tun) entered disabled state
[  200.344223][ T7323] bridge0: port 3(syz_tun) entered blocking state
[  200.352003][ T7323] bridge0: port 3(syz_tun) entered forwarding state
[  200.402826][ T6737] appleir 0003:05AC:8243.001A: unknown main item tag 0x0
[  200.416843][ T6737] appleir 0003:05AC:8243.001A: No inputs registered, leaving
[  200.430253][ T6737] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  200.506190][ T7330] netlink: 'syz.4.1051': attribute type 8 has an invalid length.
[  200.677398][ T6737] usb 4-1: USB disconnect, device number 15
[  200.793531][ T7329] fido_id[7329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  200.991185][ T7345] netlink: 'syz.0.1059': attribute type 10 has an invalid length.
[  201.090741][ T7345] team0: Device wg1 is of different type
[  201.098438][ T7348] ip_tables: iptables: counters copy to user failed while replacing table
[  201.324816][ T7352] FAULT_INJECTION: forcing a failure.
[  201.324816][ T7352] name failslab, interval 1, probability 0, space 0, times 0
[  201.379642][ T7352] CPU: 1 PID: 7352 Comm: syz.2.1062 Not tainted syzkaller #0
[  201.387121][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  201.397224][ T7352] Call Trace:
[  201.400545][ T7352]  <TASK>
[  201.403512][ T7352]  dump_stack_lvl+0x188/0x24e
[  201.408260][ T7352]  ? show_regs_print_info+0x12/0x12
[  201.413507][ T7352]  ? load_image+0x410/0x410
[  201.418070][ T7352]  ? __might_sleep+0xd0/0xd0
[  201.422710][ T7352]  ? __lock_acquire+0x7c40/0x7c40
[  201.427797][ T7352]  should_fail_ex+0x390/0x4c0
[  201.432539][ T7352]  should_failslab+0x5/0x20
[  201.437120][ T7352]  slab_pre_alloc_hook+0x59/0x300
[  201.442197][ T7352]  ? zone_statistics+0x170/0x170
[  201.447191][ T7352]  ? memcg_alloc_slab_cgroups+0x81/0x120
[  201.452878][ T7352]  __kmem_cache_alloc_node+0x4f/0x270
[  201.458307][ T7352]  ? memcg_alloc_slab_cgroups+0x81/0x120
[  201.463987][ T7352]  __kmalloc_node+0xa2/0x240
[  201.468629][ T7352]  ? lock_chain_count+0x20/0x20
[  201.473533][ T7352]  memcg_alloc_slab_cgroups+0x81/0x120
[  201.479043][ T7352]  new_slab+0xc3/0x2d0
[  201.483174][ T7352]  ___slab_alloc+0xbc5/0x1240
[  201.487912][ T7352]  ? sk_prot_alloc+0x57/0x210
[  201.492655][ T7352]  kmem_cache_alloc+0x111/0x2f0
[  201.497557][ T7352]  ? sk_prot_alloc+0x57/0x210
[  201.502290][ T7352]  sk_prot_alloc+0x57/0x210
[  201.506832][ T7352]  ? sk_alloc+0x20/0x330
[  201.511108][ T7352]  sk_alloc+0x36/0x330
[  201.515219][ T7352]  kcm_create+0xfa/0x540
[  201.519484][ T7352]  __sock_create+0x49a/0x940
[  201.524115][ T7352]  __sys_socket+0xc4/0x190
[  201.528563][ T7352]  __x64_sys_socket+0x76/0x80
[  201.533273][ T7352]  do_syscall_64+0x4c/0xa0
[  201.537715][ T7352]  ? clear_bhb_loop+0x60/0xb0
[  201.542420][ T7352]  ? clear_bhb_loop+0x60/0xb0
[  201.547120][ T7352]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  201.553046][ T7352] RIP: 0033:0x7f5e1d99e159
[  201.557491][ T7352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.577121][ T7352] RSP: 002b:00007f5e1e77e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  201.585580][ T7352] RAX: ffffffffffffffda RBX: 00007f5e1dc25fa0 RCX: 00007f5e1d99e159
[  201.593573][ T7352] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029
[  201.601564][ T7352] RBP: 00007f5e1da3506b R08: 0000000000000000 R09: 0000000000000000
[  201.609567][ T7352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.617570][ T7352] R13: 00007f5e1dc26038 R14: 00007f5e1dc25fa0 R15: 00007fff2ef6adf8
[  201.625583][ T7352]  </TASK>
[  201.764252][ T7365] ip_tables: iptables: counters copy to user failed while replacing table
[  201.771156][ T7356] loop3: detected capacity change from 0 to 8192
[  201.822471][ T7356] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  202.157907][ T7374] FAULT_INJECTION: forcing a failure.
[  202.157907][ T7374] name failslab, interval 1, probability 0, space 0, times 0
[  202.206546][ T7376] loop4: detected capacity change from 0 to 1024
[  202.208522][ T7374] CPU: 0 PID: 7374 Comm: syz.3.1072 Not tainted syzkaller #0
[  202.220397][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  202.230503][ T7374] Call Trace:
[  202.233823][ T7374]  <TASK>
[  202.236798][ T7374]  dump_stack_lvl+0x188/0x24e
[  202.241524][ T7374]  ? show_regs_print_info+0x12/0x12
[  202.246776][ T7374]  ? load_image+0x410/0x410
[  202.251335][ T7374]  ? __might_sleep+0xd0/0xd0
[  202.255977][ T7374]  ? __lock_acquire+0x7c40/0x7c40
[  202.256960][ T7378] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  202.261044][ T7374]  should_fail_ex+0x390/0x4c0
[  202.261085][ T7374]  should_failslab+0x5/0x20
[  202.261104][ T7374]  slab_pre_alloc_hook+0x59/0x300
[  202.261130][ T7374]  ? resv_map_alloc+0x4d/0x2b0
[  202.261152][ T7374]  __kmem_cache_alloc_node+0x4f/0x270
[  202.261178][ T7374]  ? resv_map_alloc+0x4d/0x2b0
[  202.261218][ T7374]  kmalloc_trace+0x26/0xe0
[  202.303612][ T7374]  resv_map_alloc+0x4d/0x2b0
[  202.308249][ T7374]  hugetlbfs_get_inode+0x64/0x510
[  202.313337][ T7374]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  202.319374][ T7374]  hugetlb_file_setup+0x211/0x610
[  202.324457][ T7374]  ksys_mmap_pgoff+0x1e2/0x720
[  202.329277][ T7374]  do_syscall_64+0x4c/0xa0
[  202.333735][ T7374]  ? clear_bhb_loop+0x60/0xb0
[  202.338449][ T7374]  ? clear_bhb_loop+0x60/0xb0
[  202.343165][ T7374]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  202.349111][ T7374] RIP: 0033:0x7fc08af9e159
[  202.353568][ T7374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  202.373216][ T7374] RSP: 002b:00007fc08bea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  202.381687][ T7374] RAX: ffffffffffffffda RBX: 00007fc08b225fa0 RCX: 00007fc08af9e159
[  202.389701][ T7374] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000
[  202.397718][ T7374] RBP: 00007fc08b03506b R08: ffffffffffffffff R09: 0000000000000000
[  202.405842][ T7374] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000
[  202.413884][ T7374] R13: 00007fc08b226038 R14: 00007fc08b225fa0 R15: 00007fff6626e988
[  202.421917][ T7374]  </TASK>
[  202.699732][ T7354] loop1: detected capacity change from 0 to 40427
[  202.757178][ T7354] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  202.775650][ T7386] FAULT_INJECTION: forcing a failure.
[  202.775650][ T7386] name failslab, interval 1, probability 0, space 0, times 0
[  202.778260][ T7354] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  202.835763][ T7386] CPU: 0 PID: 7386 Comm: syz.2.1078 Not tainted syzkaller #0
[  202.843233][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  202.853329][ T7386] Call Trace:
[  202.856662][ T7386]  <TASK>
[  202.859643][ T7386]  dump_stack_lvl+0x188/0x24e
[  202.863386][ T7354] F2FS-fs (loop1): invalid crc value
[  202.864362][ T7386]  ? show_regs_print_info+0x12/0x12
[  202.864394][ T7386]  ? load_image+0x410/0x410
[  202.879471][ T7386]  ? __might_sleep+0xd0/0xd0
[  202.884151][ T7386]  ? __lock_acquire+0x7c40/0x7c40
[  202.889229][ T7386]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  202.894922][ T7386]  should_fail_ex+0x390/0x4c0
[  202.899640][ T7386]  should_failslab+0x5/0x20
[  202.904166][ T7386]  slab_pre_alloc_hook+0x59/0x300
[  202.909228][ T7386]  kmem_cache_alloc_lru+0x49/0x2e0
[  202.914368][ T7386]  ? __d_alloc+0x2e/0x6e0
[  202.918720][ T7386]  __d_alloc+0x2e/0x6e0
[  202.922898][ T7386]  ? d_alloc_pseudo+0xe/0x70
[  202.927512][ T7386]  d_alloc_pseudo+0x19/0x70
[  202.932035][ T7386]  alloc_file_pseudo+0xe0/0x200
[  202.936951][ T7386]  ? alloc_empty_file_noaccount+0x80/0x80
[  202.942706][ T7386]  ? alloc_fd+0x590/0x640
[  202.947079][ T7386]  sock_alloc_file+0xb3/0x240
[  202.951800][ T7386]  __sys_socket+0x12d/0x190
[  202.956351][ T7386]  __x64_sys_socket+0x76/0x80
[  202.961059][ T7386]  do_syscall_64+0x4c/0xa0
[  202.965502][ T7386]  ? clear_bhb_loop+0x60/0xb0
[  202.970204][ T7386]  ? clear_bhb_loop+0x60/0xb0
[  202.974917][ T7386]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  202.980868][ T7386] RIP: 0033:0x7f5e1d99e159
[  202.985312][ T7386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  203.004956][ T7386] RSP: 002b:00007f5e1e77e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  203.013402][ T7386] RAX: ffffffffffffffda RBX: 00007f5e1dc25fa0 RCX: 00007f5e1d99e159
[  203.021405][ T7386] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d
[  203.029403][ T7386] RBP: 00007f5e1da3506b R08: 0000000000000000 R09: 0000000000000000
[  203.037400][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.045400][ T7386] R13: 00007f5e1dc26038 R14: 00007f5e1dc25fa0 R15: 00007fff2ef6adf8
[  203.053409][ T7386]  </TASK>
[  203.095613][ T7354] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  203.270639][ T7398] loop0: detected capacity change from 0 to 128
[  203.285730][ T7354] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  203.298782][ T7354] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  203.357900][ T7401] loop3: detected capacity change from 0 to 2048
[  203.437379][ T7402] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.506053][ T4273] syz-executor: attempt to access beyond end of device
[  203.506053][ T4273] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.654409][ T7402] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  203.675656][ T7402] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  203.702573][ T7402] Remounting filesystem read-only
[  203.725446][ T4286] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  203.875141][ T7408] loop4: detected capacity change from 0 to 4096
[  203.912578][ T7408] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  203.962821][ T7408] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  204.395804][ T7412] loop3: detected capacity change from 0 to 32768
[  204.438322][ T7412] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1087 (7412)
[  204.472539][ T7412] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  204.493894][ T7412] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  204.531032][ T7412] BTRFS info (device loop3): using free space tree
[  204.574921][ T7423] loop1: detected capacity change from 0 to 2048
[  204.675554][ T7423] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  204.797009][ T7412] BTRFS info (device loop3): enabling ssd optimizations
[  205.038335][ T4286] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  205.119818][ T7419] loop4: detected capacity change from 0 to 32768
[  205.195174][ T7454] FAULT_INJECTION: forcing a failure.
[  205.195174][ T7454] name failslab, interval 1, probability 0, space 0, times 0
[  205.214790][ T7419] (syz.4.1091,7419,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  205.241053][ T4381] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop3 scanned by udevd (4381)
[  205.279568][ T7454] CPU: 1 PID: 7454 Comm: syz.0.1099 Not tainted syzkaller #0
[  205.287036][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  205.297134][ T7454] Call Trace:
[  205.300452][ T7454]  <TASK>
[  205.301564][ T7419] (syz.4.1091,7419,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  205.303418][ T7454]  dump_stack_lvl+0x188/0x24e
[  205.303451][ T7454]  ? show_regs_print_info+0x12/0x12
[  205.303474][ T7454]  ? load_image+0x410/0x410
[  205.303503][ T7454]  ? __might_sleep+0xd0/0xd0
[  205.303520][ T7454]  ? __lock_acquire+0x7c40/0x7c40
[  205.341431][ T7454]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  205.347107][ T7454]  should_fail_ex+0x390/0x4c0
[  205.351824][ T7454]  should_failslab+0x5/0x20
[  205.356345][ T7454]  slab_pre_alloc_hook+0x59/0x300
[  205.361394][ T7454]  kmem_cache_alloc_lru+0x49/0x2e0
[  205.366546][ T7454]  ? __d_alloc+0x2e/0x6e0
[  205.370903][ T7454]  __d_alloc+0x2e/0x6e0
[  205.375081][ T7454]  ? d_alloc_pseudo+0xe/0x70
[  205.379692][ T7454]  d_alloc_pseudo+0x19/0x70
[  205.384217][ T7454]  alloc_file_pseudo+0xe0/0x200
[  205.389094][ T7454]  ? alloc_empty_file_noaccount+0x80/0x80
[  205.394844][ T7454]  ? alloc_fd+0x590/0x640
[  205.399203][ T7454]  sock_alloc_file+0xb3/0x240
[  205.403908][ T7454]  __sys_socket+0x12d/0x190
[  205.408457][ T7454]  __x64_sys_socket+0x76/0x80
[  205.413157][ T7454]  do_syscall_64+0x4c/0xa0
[  205.417595][ T7454]  ? clear_bhb_loop+0x60/0xb0
[  205.422294][ T7454]  ? clear_bhb_loop+0x60/0xb0
[  205.426998][ T7454]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  205.432928][ T7454] RIP: 0033:0x7fe66b79e159
[  205.437376][ T7454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.457003][ T7454] RSP: 002b:00007fe66c6e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  205.465471][ T7454] RAX: ffffffffffffffda RBX: 00007fe66ba25fa0 RCX: 00007fe66b79e159
[  205.473483][ T7454] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d
[  205.481468][ T7454] RBP: 00007fe66b83506b R08: 0000000000000000 R09: 0000000000000000
[  205.489459][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.497453][ T7454] R13: 00007fe66ba26038 R14: 00007fe66ba25fa0 R15: 00007ffd22c34488
[  205.505475][ T7454]  </TASK>
[  205.607007][ T7419] JBD2: Ignoring recovery information on journal
[  205.768888][ T7419] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  205.914797][ T5545] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  205.961236][ T5545] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  205.980963][ T5545] EXT4-fs (loop1): This should not happen!! Data will be lost
[  205.980963][ T5545] 
[  205.990658][ T5545] EXT4-fs (loop1): Total free blocks count 0
[  206.022737][ T5545] EXT4-fs (loop1): Free/Dirty block details
[  206.028725][ T5545] EXT4-fs (loop1): free_blocks=2415919504
[  206.043153][ T5545] EXT4-fs (loop1): dirty_blocks=3952
[  206.050877][ T5545] EXT4-fs (loop1): Block reservation details
[  206.110486][ T5545] EXT4-fs (loop1): i_reserved_data_blocks=247
[  206.134686][ T5545] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  206.273563][ T4278] ocfs2: Unmounting device (7,4) on (node local)
[  206.281120][ T5050] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  206.324802][ T7474] loop3: detected capacity change from 0 to 512
[  206.369762][ T7474] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.1105: iget: bad extended attribute block 134217728
[  206.512882][ T5050] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.555171][ T5050] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  206.581057][ T7474] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1105: couldn't read orphan inode 15 (err -117)
[  206.583753][ T5050] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.605349][ T7474] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  206.670124][ T5050] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected
[  206.701459][ T5050] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81
[  206.724219][ T5050] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1
[  206.748810][ T5050] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84
[  206.781358][ T7482] EXT4-fs (loop3): shut down requested (1)
[  206.796483][ T5050] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2
[  206.829393][ T5050] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  206.893674][ T5050] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88
[  206.911341][ T4286] EXT4-fs (loop3): unmounting filesystem.
[  206.934426][ T5050] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6
[  206.964306][ T5050] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  207.090279][ T7495] device syzkaller1 entered promiscuous mode
[  207.211809][ T4323] usb 3-1: USB disconnect, device number 13
[  207.255225][ T4323] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  207.273351][ T7504] loop0: detected capacity change from 0 to 1024
[  207.294712][ T4323] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  207.307834][ T7504] EXT4-fs: Ignoring removed bh option
[  207.348859][ T4323] keyspan 3-1:1.0: device disconnected
[  207.360664][ T7504] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  207.497395][ T7504] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  207.599380][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  207.620094][ T7509] loop4: detected capacity change from 0 to 2048
[  207.768682][ T7509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  208.132042][ T7526] syz_tun: Device is already in use.
[  208.376168][ T7536] loop1: detected capacity change from 0 to 256
[  208.442256][ T7536] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  208.698213][ T5538] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  208.736091][ T5538] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  208.761195][ T5538] EXT4-fs (loop4): This should not happen!! Data will be lost
[  208.761195][ T5538] 
[  208.776004][ T5538] EXT4-fs (loop4): Total free blocks count 0
[  208.785668][ T5538] EXT4-fs (loop4): Free/Dirty block details
[  208.796170][ T5538] EXT4-fs (loop4): free_blocks=2415919504
[  208.803590][ T5538] EXT4-fs (loop4): dirty_blocks=2976
[  208.809113][ T5538] EXT4-fs (loop4): Block reservation details
[  208.820726][ T5538] EXT4-fs (loop4): i_reserved_data_blocks=186
[  208.840230][ T5538] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  208.951072][ T4318] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  209.145999][ T4318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  209.157084][ T4318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  209.172157][ T4318] usb 3-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[  209.184859][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.360981][ T4320] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  209.561092][ T4320] usb 5-1: Using ep0 maxpacket: 8
[  209.570148][ T4320] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  209.585616][ T4320] usb 5-1: config 179 has no interface number 0
[  209.592561][ T4320] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  209.604403][ T4320] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  209.616942][ T4320] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  209.628553][ T4320] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  209.650636][ T4320] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  209.684706][ T4320] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  209.705057][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.763249][ T7561] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  210.081509][ T4320] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input13
[  210.219155][ T4318] pegasus: probe of 3-1:1.0 failed with error -71
[  210.245136][ T7584] netlink: 'syz.3.1145': attribute type 11 has an invalid length.
[  210.254324][ T4318] usb 3-1: USB disconnect, device number 14
[  210.418900][ T5050] usb 5-1: USB disconnect, device number 15
[  210.418900][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  210.418942][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  210.547410][ T7586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1146'.
[  210.578244][ T7586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1146'.
[  210.639502][ T7580] loop1: detected capacity change from 0 to 32768
[  210.686999][ T7580] (syz.1.1142,7580,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  210.726386][ T7580] (syz.1.1142,7580,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  210.787698][ T7580] (syz.1.1142,7580,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  210.819278][ T7580] JBD2: Ignoring recovery information on journal
[  210.908891][ T7578] loop0: detected capacity change from 0 to 40427
[  210.971550][ T7580] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  210.994674][ T7578] F2FS-fs (loop0): invalid crc value
[  211.042705][ T7578] F2FS-fs (loop0): Found nat_bits in checkpoint
[  211.284402][ T7578] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  211.371809][ T4273] ocfs2: Unmounting device (7,1) on (node local)
[  211.743419][ T7613] netlink: 'syz.3.1157': attribute type 10 has an invalid length.
[  211.851067][ T4321] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  211.877340][ T7613] team0: Device wg1 is of different type
[  211.967753][ T7598] loop2: detected capacity change from 0 to 32768
[  212.027063][ T7598] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  212.061236][ T4321] usb 5-1: Using ep0 maxpacket: 16
[  212.071764][ T4321] usb 5-1: unable to get BOS descriptor or descriptor too short
[  212.113726][ T4321] usb 5-1: unable to read config index 0 descriptor/start: -71
[  212.159485][ T4321] usb 5-1: can't read configurations, error -71
[  212.386528][ T4381] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  212.493093][ T7630] input: syz0 as /devices/virtual/input/input14
[  212.764990][ T7642] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1167'.
[  212.777804][ T7644] loop4: detected capacity change from 0 to 256
[  212.805956][ T7644] exfat: Deprecated parameter 'utf8'
[  212.821368][ T4318] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  212.847557][ T7638] loop0: detected capacity change from 0 to 8192
[  212.880697][ T7644] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  212.916422][ T7638] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  212.958357][ T7638] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  212.978642][ T7638] REISERFS (device loop0): using ordered data mode
[  212.985597][ T7638] reiserfs: using flush barriers
[  212.992377][ T7638] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  213.011962][ T7638] REISERFS (device loop0): checking transaction log (loop0)
[  213.030971][ T4318] usb 2-1: Using ep0 maxpacket: 32
[  213.038174][ T4318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  213.048857][ T4318] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  213.062513][ T4318] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[  213.074058][ T4318] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  213.115777][ T7648] loop3: detected capacity change from 0 to 1024
[  213.122526][ T4318] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  213.141062][ T4318] usb 2-1: config 1 interface 1 has no altsetting 0
[  213.158051][ T4318] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  213.167597][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.176607][ T4318] usb 2-1: Product: syz
[  213.212545][ T4318] usb 2-1: Manufacturer: syz
[  213.217222][ T4318] usb 2-1: SerialNumber: syz
[  213.358284][ T7638] REISERFS (device loop0): Using tea hash to sort names
[  213.388194][ T7638] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  213.441250][ T7638] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  213.469875][ T4318] usb 2-1: selecting invalid altsetting 0
[  213.676787][ T4318] usb 2-1: 1:1: cannot get freq (v2/v3): err -32
[  213.803415][ T7656] netlink: 'syz.2.1173': attribute type 10 has an invalid length.
[  213.880056][ T7652] loop4: detected capacity change from 0 to 32768
[  213.900161][ T7656] team0: Device wg1 is of different type
[  213.910474][ T4318] usb 2-1: 1:1: cannot set freq 44100 (v2/v3): err -1202242516
[  213.973699][ T7652] JBD2: Ignoring recovery information on journal
[  214.109290][ T7661] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  214.165888][ T4318] usb 2-1: USB disconnect, device number 14
[  214.271531][ T7652] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  214.410116][ T7658] loop0: detected capacity change from 0 to 32768
[  214.435330][ T7658] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  214.565873][ T4278] ocfs2: Unmounting device (7,4) on (node local)
[  214.811773][ T4381] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  214.921727][ T7677] loop1: detected capacity change from 0 to 1024
[  214.954560][ T7679] loop2: detected capacity change from 0 to 512
[  214.989986][   T26] audit: type=1800 audit(1790801579.176:29): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1185" name="dbroot" dev="configfs" ino=45459 res=0 errno=0
[  215.033943][ T7679] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  215.091681][ T5545] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  215.322626][ T7685] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1197'.
[  215.535030][ T7693] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1188'.
[  215.580193][ T7689] loop4: detected capacity change from 0 to 8192
[  215.621199][ T7689] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  215.635308][ T7698] loop0: detected capacity change from 0 to 128
[  215.661085][ T7689] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  215.692039][ T7698] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  215.730299][ T7689] REISERFS (device loop4): using ordered data mode
[  215.791191][ T7689] reiserfs: using flush barriers
[  215.811053][ T7689] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  215.860607][ T7698] hpfs: filesystem error: improperly stopped
[  215.874999][ T7689] REISERFS (device loop4): checking transaction log (loop4)
[  215.891353][ T7698] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  215.899856][ T7698] hpfs: You really don't want any checks? You are crazy...
[  215.929932][ T7698] hpfs: hpfs_map_sector(): read error
[  215.942296][ T7698] hpfs: code page support is disabled
[  215.961267][ T7698] hpfs: hpfs_map_4sectors(): unaligned read
[  215.968519][ T7698] hpfs: hpfs_map_4sectors(): unaligned read
[  215.981078][ T7698] hpfs: filesystem error: unable to find root dir
[  216.033685][ T4318] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  216.163468][ T7689] REISERFS (device loop4): Using tea hash to sort names
[  216.181283][ T7689] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  216.207202][ T7689] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  216.233418][ T4318] usb 2-1: Using ep0 maxpacket: 8
[  216.257244][ T4318] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  216.279133][ T4318] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  216.296808][ T4318] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  216.307182][ T4318] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  216.322683][ T4318] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  216.357809][ T4318] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  216.372592][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.615332][ T4318] usb 2-1: usb_control_msg returned -32
[  216.623119][ T4318] usbtmc 2-1:16.0: can't read capabilities
[  216.991379][ T7735] usbtmc 2-1:16.0: usb_control_msg returned -32
[  217.005792][ T4330] usb 2-1: USB disconnect, device number 15
[  217.030253][ T7737] loop3: detected capacity change from 0 to 1024
[  217.097644][ T7737] hfsplus: request for non-existent node 3 in B*Tree
[  217.118730][ T7737] hfsplus: request for non-existent node 3 in B*Tree
[  217.148346][ T7737] hfsplus: invalid length 28418 has been corrected to 255
[  217.172284][ T7737] hfsplus: invalid length 28418 has been corrected to 255
[  217.213099][ T7737] hfsplus: request for non-existent node 4 in B*Tree
[  217.215123][ T7739] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  217.219959][ T7737] hfsplus: request for non-existent node 4 in B*Tree
[  217.240278][ T7737] hfsplus: request for non-existent node 5 in B*Tree
[  217.247926][ T7737] hfsplus: request for non-existent node 5 in B*Tree
[  217.291224][ T7739] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.452656][ T7747] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  217.482902][ T7730] XFS (loop4): Mounting V5 Filesystem
[  217.496584][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  217.564849][ T7747] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #17: comm syz.3.1211: corrupted in-inode xattr
[  217.589739][ T7729] XFS (loop2): Mounting V5 Filesystem
[  217.625885][ T7730] XFS (loop4): Ending clean mount
[  217.641109][ T7747] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1211: couldn't read orphan inode 17 (err -117)
[  217.670880][ T7747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  217.721745][ T7729] XFS (loop2): Ending clean mount
[  217.721853][ T4318] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x189/0x240, xfs_agfl block 0x3 
[  217.735930][ T7747] EXT4-fs (loop3): shut down requested (0)
[  217.790397][ T4318] XFS (loop4): Unmount and run xfs_repair
[  217.807303][ T4318] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  217.834040][ T4318] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00  XAFL......BN....
[  217.861394][ T4318] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00  .... ...........
[  217.876408][ T4318] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1  ................
[  217.895895][ T4318] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5  ................
[  217.916132][ T4318] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  217.942403][ T4318] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  217.952007][ T4318] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  217.961195][ T4318] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  217.970150][ T7730] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x21f/0x400" at daddr 0x3 len 1 error 74
[  217.998040][ T7768] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.021242][ T7730] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54f/0x9c0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  218.061953][ T7730] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  218.092119][ T4286] EXT4-fs (loop3): unmounting filesystem.
[  218.141316][ T4277] XFS (loop2): Unmounting Filesystem
[  218.188038][ T4278] XFS (loop4): Unmounting Filesystem
[  218.271518][ T4318] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  218.494997][ T4318] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.517377][ T4318] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.549745][ T4318] usb 1-1: config 0 interface 0 has no altsetting 0
[  218.564588][ T4318] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  218.584170][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.619047][ T4318] usb 1-1: config 0 descriptor??
[  218.880873][ T7787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1220'.
[  219.033594][ T4318] hid-multitouch 0003:0EEF:72C4.001B: unbalanced delimiter at end of report description
[  219.067771][ T4318] hid-multitouch: probe of 0003:0EEF:72C4.001B failed with error -22
[  219.094512][ T7797] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  219.107561][ T7793] set_capacity_and_notify: 4 callbacks suppressed
[  219.107572][ T7793] loop2: detected capacity change from 0 to 2048
[  219.159071][ T7793] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  219.250675][ T4318] usb 1-1: USB disconnect, device number 19
[  219.286922][ T7799] loop1: detected capacity change from 0 to 256
[  219.332273][ T7801] loop4: detected capacity change from 0 to 256
[  219.868102][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'.
[  219.923898][ T7819] netlink: 'syz.4.1235': attribute type 1 has an invalid length.
[  220.411047][ T4318] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  220.461421][ T4320] kernel read not supported for file /video9 (pid: 4320 comm: kworker/1:5)
[  220.577409][ T7839] loop3: detected capacity change from 0 to 32768
[  220.595628][ T7839] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1257 (7839)
[  220.617978][ T7839] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  220.629462][ T7839] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  220.638933][ T7839] BTRFS info (device loop3): using free space tree
[  220.646983][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.657458][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.668986][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.679268][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.692644][ T4318] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  220.701889][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.727320][ T4318] usb 3-1: config 0 descriptor??
[  220.770048][ T7839] BTRFS info (device loop3): enabling ssd optimizations
[  220.883323][ T4286] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  221.150676][ T4318] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving
[  221.183745][ T4318] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  221.447959][ T5050] usb 3-1: USB disconnect, device number 15
[  221.560995][ T7463] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  221.771200][ T7463] usb 2-1: Using ep0 maxpacket: 32
[  221.779530][ T7463] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  221.795641][ T7463] usb 2-1: config 0 has no interface number 0
[  221.803110][ T7463] usb 2-1: config 0 interface 184 has no altsetting 0
[  221.830248][ T7463] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  221.840412][ T7463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.854360][ T7463] usb 2-1: Product: syz
[  221.858589][ T7463] usb 2-1: Manufacturer: syz
[  221.864716][ T7463] usb 2-1: SerialNumber: syz
[  221.875836][ T7463] usb 2-1: config 0 descriptor??
[  221.883631][ T7463] smsc75xx v1.0.0
[  222.001967][ T7886] virtiofs: Unknown parameter 'always0000000		0
[  222.001967][ T7886] 18	nlmon0    :     1      V3
[  222.001967][ T7886] 				010000E0     1 0:00000000		0
[  222.001967][ T7886] 20	batadv0   :     1      V3
[  222.001967][ T7886] 				010000E0     1 0:00000000		0
[  222.001967][ T7886] 21	vxcan0    :     1      V3
[  222.001967][ T7886] 				010000E0     1 0:00000000		0
[  222.001967][ T7886] 22	vxcan1    :     1      V3
[  222.001967][ T7886] 				010000E0     1 0:00000000		0
[  222.001967][ T7886] 23	veth0     :     1      V3
[  222.001967][ T7886] 				010000E0     1 0:00000000		0
[  222.001967][ T7886] 24	veth1     :     1      V3
[  222.001967][ T7886] 				010000E0     1 0:00000000		0
[  222.001967][ T7886] 25	wg0       :     1      V3
[  222.001967][ T7886] 				010000E0     1 0:00000000		0
[  222.001967][ T7886] 26	wg1       :     1      V3
[  222.001967][ T7886] 				010000E0     1 0:00000000		0
[  222.001967][ T7886] 27	wg2       :     1      V3
[  222.327628][ T7893] loop3: detected capacity change from 0 to 512
[  222.409660][ T7893] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1261: invalid indirect mapped block 256 (level 2)
[  222.495138][ T7893] EXT4-fs (loop3): 2 truncates cleaned up
[  222.516393][ T7463] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  222.528363][ T7893] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  222.537588][ T7463] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  222.594741][ T7890] loop2: detected capacity change from 0 to 32768
[  222.621323][ T7893] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1261: bg 0: block 5: invalid block bitmap
[  222.653345][ T7890] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  222.676360][ T7890] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  222.696635][ T7890] BTRFS info (device loop2): force clearing of disk cache
[  222.725083][ T7884] loop0: detected capacity change from 0 to 32768
[  222.734588][ T7890] BTRFS info (device loop2): use zlib compression, level 3
[  222.760376][ T7463] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  222.790465][ T7890] BTRFS info (device loop2): enabling ssd optimizations
[  222.799746][ T7890] BTRFS info (device loop2): using spread ssd allocation scheme
[  222.808070][ T7890] BTRFS info (device loop2): using free space tree
[  222.816559][ T7463] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  222.836325][ T7884] XFS (loop0): Mounting V5 Filesystem
[  222.837493][ T7463] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  222.852452][ T7463] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  222.862143][ T7463] smsc75xx: probe of 2-1:0.184 failed with error -71
[  222.872310][ T7463] usb 2-1: USB disconnect, device number 16
[  222.924561][ T4286] EXT4-fs (loop3): unmounting filesystem.
[  223.019029][ T7884] XFS (loop0): Ending clean mount
[  223.067434][   T26] audit: type=1800 audit(1790801587.256:30): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1256" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  223.074049][ T7884] XFS (loop0): User initiated shutdown received.
[  223.107831][ T7924] FAULT_INJECTION: forcing a failure.
[  223.107831][ T7924] name failslab, interval 1, probability 0, space 0, times 0
[  223.176853][ T7890] BTRFS info (device loop2): rebuilding free space tree
[  223.188916][ T7924] CPU: 1 PID: 7924 Comm: syz.3.1264 Not tainted syzkaller #0
[  223.196464][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  223.206560][ T7924] Call Trace:
[  223.209869][ T7924]  <TASK>
[  223.212871][ T7924]  dump_stack_lvl+0x188/0x24e
[  223.217601][ T7924]  ? show_regs_print_info+0x12/0x12
[  223.221408][ T7884] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  223.222830][ T7924]  ? load_image+0x410/0x410
[  223.240621][ T7924]  ? __might_sleep+0xd0/0xd0
[  223.245255][ T7924]  ? __lock_acquire+0x7c40/0x7c40
[  223.250422][ T7924]  ? finish_task_switch+0x262/0x8e0
[  223.255672][ T7924]  should_fail_ex+0x390/0x4c0
[  223.257067][ T7884] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  223.260400][ T7924]  should_failslab+0x5/0x20
[  223.260426][ T7924]  slab_pre_alloc_hook+0x59/0x300
[  223.278423][ T7924]  ? __lock_acquire+0x138a/0x7c40
[  223.283501][ T7924]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[  223.289333][ T7924]  __kmem_cache_alloc_node+0x4f/0x270
[  223.294766][ T7924]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[  223.300537][ T7924]  __kmalloc+0xa3/0x240
[  223.304761][ T7924]  tomoyo_realpath_from_path+0xe2/0x5c0
[  223.310366][ T7924]  ? tomoyo_domain+0xd2/0x120
[  223.315114][ T7924]  ? tomoyo_path_perm+0x244/0x610
[  223.320192][ T7924]  tomoyo_path_perm+0x26f/0x610
[  223.325100][ T7924]  ? tomoyo_path_permission+0x3a0/0x3a0
[  223.330739][ T7924]  ? __fget_files+0x3fc/0x460
[  223.335481][ T7924]  security_inode_getattr+0xcf/0x120
[  223.340818][ T7924]  vfs_getattr+0x26/0x3a0
[  223.345211][ T7924]  __x64_sys_newfstat+0x13d/0x220
[  223.350288][ T7924]  ? __ia32_sys_newfstatat+0x250/0x250
[  223.355826][ T7924]  ? lockdep_hardirqs_on+0x94/0x140
[  223.361097][ T7924]  do_syscall_64+0x4c/0xa0
[  223.365556][ T7924]  ? clear_bhb_loop+0x60/0xb0
[  223.370278][ T7924]  ? clear_bhb_loop+0x60/0xb0
[  223.375011][ T7924]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.380972][ T7924] RIP: 0033:0x7fc08af9e159
[  223.385433][ T7924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.405100][ T7924] RSP: 002b:00007fc08bea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005
[  223.413563][ T7924] RAX: ffffffffffffffda RBX: 00007fc08b225fa0 RCX: 00007fc08af9e159
[  223.421576][ T7924] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  223.429588][ T7924] RBP: 00007fc08b03506b R08: 0000000000000000 R09: 0000000000000000
[  223.437597][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.445605][ T7924] R13: 00007fc08b226038 R14: 00007fc08b225fa0 R15: 00007fff6626e988
[  223.453640][ T7924]  </TASK>
[  223.472832][ T7890] BTRFS info (device loop2): checking UUID tree
[  223.487389][ T7924] ERROR: Out of memory at tomoyo_realpath_from_path.
[  223.506391][ T4279] XFS (loop0): Unmounting Filesystem
[  223.758676][ T4277] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  223.930881][ T4381] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop2 scanned by udevd (4381)
[  224.175715][ T7948] (syz.2.1279,7948,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  224.591191][  T126] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  224.788916][  T126] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  224.808476][  T126] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  224.840574][  T126] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[  224.849975][  T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  224.865503][  T126] usb 2-1: Product: syz
[  224.869804][  T126] usb 2-1: Manufacturer: syz
[  224.909048][  T126] iuu_phoenix 2-1:1.0: iuu_phoenix converter detected
[  224.916656][ T7982] loop3: detected capacity change from 0 to 2048
[  224.932533][  T126] usb 2-1: iuu_phoenix converter now attached to ttyUSB0
[  225.015093][ T7983] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  225.064010][ T7983] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  225.079718][ T7983] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  225.110015][ T7983] Remounting filesystem read-only
[  225.147749][ T4286] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  225.169030][ T7957] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode: 7u̝e�!W�i��j��/�����)P���( is not a unsigned long
[  225.189721][ T7193] usb 2-1: USB disconnect, device number 17
[  225.210302][ T7193] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  225.234805][ T7193] iuu_phoenix 2-1:1.0: device disconnected
[  225.273262][ T7987] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[  225.406801][ T7993] loop0: detected capacity change from 0 to 2048
[  225.462223][ T7994] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  225.607910][ T7994] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  225.624928][ T7994] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  225.673960][ T7994] Remounting filesystem read-only
[  225.679547][ T4279] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  225.761346][ T8003] loop2: detected capacity change from 0 to 1024
[  226.011014][ T6730] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  226.168300][ T8009] loop1: detected capacity change from 0 to 32768
[  226.207007][ T8009] JBD2: Ignoring recovery information on journal
[  226.216902][ T6730] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  226.237442][ T6730] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  226.282066][ T6730] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  226.295642][ T8009] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  226.302573][ T6730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.334306][ T6730] usb 4-1: Product: syz
[  226.359569][ T6730] usb 4-1: Manufacturer: syz
[  226.366336][ T8009] 
[  226.368710][ T8009] ======================================================
[  226.370852][ T6730] usb 4-1: SerialNumber: syz
[  226.375738][ T8009] WARNING: possible circular locking dependency detected
[  226.375771][ T8009] syzkaller #0 Not tainted
[  226.375782][ T8009] ------------------------------------------------------
[  226.375790][ T8009] syz.1.1297/8009 is trying to acquire lock:
[  226.404882][ T8009] ffff88807ad6c990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a6/0x270
[  226.414537][ T8009] 
[  226.414537][ T8009] but task is already holding lock:
[  226.421924][ T8009] ffff8880568164e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0
[  226.432242][ T8009] 
[  226.432242][ T8009] which lock already depends on the new lock.
[  226.432242][ T8009] 
[  226.442673][ T8009] 
[  226.442673][ T8009] the existing dependency chain (in reverse order) is:
[  226.452006][ T8009] 
[  226.452006][ T8009] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  226.460568][ T8009]        down_read+0x42/0x2d0
[  226.465288][ T8009]        ocfs2_start_trans+0x3a4/0x6f0
[  226.470778][ T8009]        ocfs2_reserve_suballoc_bits+0x7dd/0x4810
[  226.477218][ T8009]        ocfs2_reserve_new_metadata_blocks+0x412/0x9a0
[  226.484132][ T8009]        ocfs2_extend_dir+0xd70/0x4c40
[  226.489616][ T8009]        ocfs2_prepare_dir_for_insert+0x3217/0x5600
[  226.496229][ T8009]        ocfs2_mknod+0xb9e/0x25e0
[  226.501288][ T8009]        ocfs2_mkdir+0x1b6/0x4b0
[  226.506235][ T8009]        vfs_mkdir+0x386/0x570
[  226.511036][ T8009]        do_mkdirat+0x1d8/0x440
[  226.515906][ T8009]        __x64_sys_mkdirat+0x85/0x90
[  226.521218][ T8009]        do_syscall_64+0x4c/0xa0
[  226.526171][ T8009]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  226.532620][ T8009] 
[  226.532620][ T8009] -> #4 (sb_internal#6){.+.+}-{0:0}:
[  226.540111][ T8009]        ocfs2_start_trans+0x2a5/0x6f0
[  226.545596][ T8009]        ocfs2_acquire_dquot+0x69a/0xb80
[  226.551246][ T8009]        dqget+0x713/0xbb0
[  226.555698][ T8009]        __dquot_initialize+0x3a9/0xd00
[  226.561265][ T8009]        ocfs2_get_init_inode+0x144/0x1b0
[  226.567006][ T8009]        ocfs2_mknod+0xbe8/0x25e0
[  226.572068][ T8009]        ocfs2_create+0x1b6/0x4b0
[  226.577108][ T8009]        path_openat+0x11b9/0x2f10
[  226.582232][ T8009]        do_filp_open+0x1ee/0x420
[  226.587279][ T8009]        do_sys_openat2+0x14b/0x4f0
[  226.592512][ T8009]        __x64_sys_openat+0x135/0x160
[  226.597915][ T8009]        do_syscall_64+0x4c/0xa0
[  226.602867][ T8009]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  226.609309][ T8009] 
[  226.609309][ T8009] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  226.618199][ T8009]        down_write+0x36/0x60
[  226.622896][ T8009]        ocfs2_create_local_dquot+0x19a/0x1900
[  226.629080][ T8009]        ocfs2_acquire_dquot+0x7e6/0xb80
[  226.634721][ T8009]        dqget+0x713/0xbb0
[  226.639164][ T8009]        __dquot_initialize+0x3a9/0xd00
[  226.644744][ T8009]        ocfs2_get_init_inode+0x144/0x1b0
[  226.650480][ T8009]        ocfs2_mknod+0xbe8/0x25e0
[  226.655517][ T8009]        ocfs2_create+0x1b6/0x4b0
[  226.660556][ T8009]        path_openat+0x11b9/0x2f10
[  226.665698][ T8009]        do_filp_open+0x1ee/0x420
[  226.670744][ T8009]        do_sys_openat2+0x14b/0x4f0
[  226.675963][ T8009]        __x64_sys_openat+0x135/0x160
[  226.681357][ T8009]        do_syscall_64+0x4c/0xa0
[  226.686312][ T8009]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  226.692752][ T8009] 
[  226.692752][ T8009] -> #2 (&dquot->dq_lock){+.+.}-{3:3}:
[  226.700405][ T8009]        __mutex_lock+0x12d/0xae0
[  226.705451][ T8009]        dquot_commit+0x5a/0x410
[  226.710408][ T8009]        ext4_write_dquot+0x1f0/0x360
[  226.715798][ T8009]        mark_all_dquot_dirty+0xf9/0x400
[  226.721450][ T8009]        __dquot_alloc_space+0x5f6/0xe50
[  226.727107][ T8009]        ext4_mb_new_blocks+0xf55/0x44d0
[  226.732768][ T8009]        ext4_ext_map_blocks+0x18d1/0x6640
[  226.738586][ T8009]        ext4_map_blocks+0x9d7/0x1a90
[  226.743974][ T8009]        _ext4_get_block+0x1e7/0x540
[  226.749288][ T8009]        ext4_block_write_begin+0x63b/0x12f0
[  226.755292][ T8009]        ext4_write_begin+0x623/0xf40
[  226.760690][ T8009]        ext4_da_write_begin+0x408/0x920
[  226.766353][ T8009]        generic_perform_write+0x2fa/0x5c0
[  226.772188][ T8009]        ext4_buffered_write_iter+0x11a/0x380
[  226.778308][ T8009]        ext4_file_write_iter+0x1e3/0x17d0
[  226.784143][ T8009]        vfs_write+0x482/0x9a0
[  226.788939][ T8009]        __x64_sys_pwrite64+0x194/0x220
[  226.794513][ T8009]        do_syscall_64+0x4c/0xa0
[  226.799498][ T8009]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  226.805949][ T8009] 
[  226.805949][ T8009] -> #1 (&ei->i_data_sem){++++}-{3:3}:
[  226.813619][ T8009]        down_read+0x42/0x2d0
[  226.818418][ T8009]        ext4_map_blocks+0x338/0x1a90
[  226.823826][ T8009]        ext4_append+0x22d/0x560
[  226.828806][ T8009]        ext4_init_new_dir+0x2b8/0x550
[  226.834295][ T8009]        ext4_mkdir+0x4c3/0xc90
[  226.839166][ T8009]        vfs_mkdir+0x386/0x570
[  226.843976][ T8009]        do_mkdirat+0x1d8/0x440
[  226.848852][ T8009]        __x64_sys_mkdir+0x6a/0x80
[  226.853989][ T8009]        do_syscall_64+0x4c/0xa0
[  226.858964][ T8009]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  226.865422][ T8009] 
[  226.865422][ T8009] -> #0 (jbd2_handle){++++}-{0:0}:
[  226.872740][ T8009]        __lock_acquire+0x2d18/0x7c40
[  226.878141][ T8009]        lock_acquire+0x1bb/0x4a0
[  226.883209][ T8009]        wait_transaction_locked+0x1bf/0x270
[  226.889212][ T8009]        start_this_handle+0x7e7/0x2240
[  226.894778][ T8009]        jbd2__journal_start+0x2b7/0x5a0
[  226.900425][ T8009]        jbd2_journal_start+0x26/0x30
[  226.905815][ T8009]        ocfs2_start_trans+0x3b0/0x6f0
[  226.911316][ T8009]        ocfs2_run_deallocs+0xfd4/0x1620
[  226.916973][ T8009]        ocfs2_remove_value_outside+0x4d8/0x6f0
[  226.923238][ T8009]        ocfs2_xattr_remove+0x689/0x1650
[  226.928882][ T8009]        ocfs2_evict_inode+0x1639/0x46d0
[  226.934546][ T8009]        evict+0x4b6/0x8b0
[  226.938984][ T8009]        vfs_rmdir+0x374/0x4a0
[  226.943776][ T8009]        do_rmdir+0x29a/0x5c0
[  226.948467][ T8009]        __x64_sys_rmdir+0x45/0x50
[  226.953597][ T8009]        do_syscall_64+0x4c/0xa0
[  226.958568][ T8009]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  226.965012][ T8009] 
[  226.965012][ T8009] other info that might help us debug this:
[  226.965012][ T8009] 
[  226.975255][ T8009] Chain exists of:
[  226.975255][ T8009]   jbd2_handle --> sb_internal#6 --> &journal->j_trans_barrier
[  226.975255][ T8009] 
[  226.988664][ T8009]  Possible unsafe locking scenario:
[  226.988664][ T8009] 
[  226.996124][ T8009]        CPU0                    CPU1
[  227.001506][ T8009]        ----                    ----
[  227.006897][ T8009]   lock(&journal->j_trans_barrier);
[  227.012222][ T8009]                                lock(sb_internal#6);
[  227.019030][ T8009]                                lock(&journal->j_trans_barrier);
[  227.026875][ T8009]   lock(jbd2_handle);
[  227.031001][ T8009] 
[  227.031001][ T8009]  *** DEADLOCK ***
[  227.031001][ T8009] 
[  227.039161][ T8009] 7 locks held by syz.1.1297/8009:
[  227.044299][ T8009]  #0: ffff8880781c2460 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  227.053563][ T8009]  #1: ffff888055e75f48 (&type->i_mutex_dir_key#19/1){+.+.}-{3:3}, at: do_rmdir+0x1b7/0x5c0
[  227.063711][ T8009]  #2: ffff888079ca0ab0 (&osb->nfs_sync_rwlock){.+.+}-{3:3}, at: ocfs2_nfs_sync_lock+0x103/0x270
[  227.074271][ T8009]  #3: ffff8880516cd108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_evict_inode+0x11bd/0x46d0
[  227.087026][ T8009]  #4: ffff8880516c9808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_run_deallocs+0xebb/0x1620
[  227.099926][ T8009]  #5: ffff8880781c2650 (sb_internal#6){.+.+}-{0:0}, at: ocfs2_run_deallocs+0xfd4/0x1620
[  227.109815][ T8009]  #6: ffff8880568164e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0
[  227.120602][ T8009] 
[  227.120602][ T8009] stack backtrace:
[  227.126502][ T8009] CPU: 0 PID: 8009 Comm: syz.1.1297 Not tainted syzkaller #0
[  227.133892][ T8009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  227.143994][ T8009] Call Trace:
[  227.147291][ T8009]  <TASK>
[  227.150246][ T8009]  dump_stack_lvl+0x188/0x24e
[  227.154944][ T8009]  ? load_image+0x410/0x410
[  227.159470][ T8009]  ? show_regs_print_info+0x12/0x12
[  227.164684][ T8009]  ? print_circular_bug+0x12b/0x1a0
[  227.169903][ T8009]  check_noncircular+0x296/0x330
[  227.174863][ T8009]  ? add_chain_block+0x9b0/0x9b0
[  227.179825][ T8009]  ? lockdep_lock+0xf1/0x1f0
[  227.184450][ T8009]  ? _find_first_zero_bit+0xd2/0x100
[  227.189763][ T8009]  __lock_acquire+0x2d18/0x7c40
[  227.194637][ T8009]  ? __lock_acquire+0x1465/0x7c40
[  227.199683][ T8009]  ? verify_lock_unused+0x140/0x140
[  227.204905][ T8009]  ? mark_lock+0x94/0x320
[  227.209278][ T8009]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  227.215285][ T8009]  lock_acquire+0x1bb/0x4a0
[  227.219808][ T8009]  ? wait_transaction_locked+0x1a6/0x270
[  227.225462][ T8009]  ? __lock_acquire+0x7c40/0x7c40
[  227.230527][ T8009]  ? read_lock_is_recursive+0x10/0x10
[  227.235925][ T8009]  ? prepare_to_wait_exclusive+0x7d/0x210
[  227.241678][ T8009]  ? wait_transaction_locked+0x1a6/0x270
[  227.247337][ T8009]  wait_transaction_locked+0x1bf/0x270
[  227.252826][ T8009]  ? wait_transaction_locked+0x1a6/0x270
[  227.258481][ T8009]  ? jbd2_journal_begin_ordered_truncate+0x150/0x150
[  227.265172][ T8009]  ? stack_trace_save+0xa6/0xf0
[  227.270049][ T8009]  ? wake_bit_function+0x200/0x200
[  227.275187][ T8009]  start_this_handle+0x7e7/0x2240
[  227.280238][ T8009]  ? slab_post_alloc_hook+0x4b/0x490
[  227.285551][ T8009]  ? kmem_cache_alloc+0x18b/0x2f0
[  227.290598][ T8009]  ? jbd2__journal_start+0x13c/0x5a0
[  227.295933][ T8009]  ? jbd2__journal_start+0x5a0/0x5a0
[  227.301262][ T8009]  ? __kasan_slab_alloc+0x6b/0x80
[  227.306319][ T8009]  ? slab_post_alloc_hook+0x67/0x490
[  227.311620][ T8009]  ? slab_pre_alloc_hook+0x59/0x300
[  227.316853][ T8009]  ? rcu_is_watching+0x11/0xa0
[  227.321654][ T8009]  ? kmem_cache_alloc+0x1b2/0x2f0
[  227.326696][ T8009]  ? jbd2__journal_start+0x13c/0x5a0
[  227.332005][ T8009]  jbd2__journal_start+0x2b7/0x5a0
[  227.337142][ T8009]  jbd2_journal_start+0x26/0x30
[  227.342028][ T8009]  ocfs2_start_trans+0x3b0/0x6f0
[  227.346994][ T8009]  ? ocfs2_recovery_exit+0x50/0x50
[  227.352137][ T8009]  ocfs2_run_deallocs+0xfd4/0x1620
[  227.357284][ T8009]  ? ocfs2_cache_cluster_dealloc+0x430/0x430
[  227.363292][ T8009]  ? mark_lock+0x94/0x320
[  227.367649][ T8009]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  227.373653][ T8009]  ? lock_chain_count+0x20/0x20
[  227.378524][ T8009]  ? queue_delayed_work_on+0x110/0x1f0
[  227.384005][ T8009]  ? lockdep_hardirqs_on+0x94/0x140
[  227.389230][ T8009]  ? queue_delayed_work_on+0x19d/0x1f0
[  227.394708][ T8009]  ? delayed_work_timer_fn+0x80/0x80
[  227.400009][ T8009]  ? ocfs2_commit_trans+0x130/0x240
[  227.405242][ T8009]  ? sb_end_intwrite+0x1c0/0x1c0
[  227.410221][ T8009]  ? rcu_is_watching+0x11/0xa0
[  227.415026][ T8009]  ocfs2_remove_value_outside+0x4d8/0x6f0
[  227.420788][ T8009]  ? ocfs2_xattr_get_value_outside+0x740/0x740
[  227.426959][ T8009]  ? ocfs2_refresh_inode+0x940/0x940
[  227.432267][ T8009]  ? ocfs2_read_blocks_sync+0xc60/0xc60
[  227.437834][ T8009]  ocfs2_xattr_remove+0x689/0x1650
[  227.442973][ T8009]  ? ocfs2_xattr_get_nolock+0x1000/0x1000
[  227.448710][ T8009]  ? ocfs2_journal_access_db+0x40/0x40
[  227.454197][ T8009]  ? do_raw_spin_unlock+0x11d/0x230
[  227.459413][ T8009]  ? ocfs2_extend_dir+0x4c40/0x4c40
[  227.464628][ T8009]  ? ocfs2_inode_lock_full_nested+0xaaa/0x1b10
[  227.470797][ T8009]  ? __rwlock_init+0x140/0x140
[  227.475579][ T8009]  ? do_raw_spin_unlock+0x11d/0x230
[  227.480798][ T8009]  ? ocfs2_downconvert_lock+0x500/0x500
[  227.486360][ T8009]  ? rwsem_write_trylock+0x135/0x1c0
[  227.491675][ T8009]  ? clear_nonspinnable+0x60/0x60
[  227.496719][ T8009]  ? ocfs2_node_map_test_bit+0xe2/0x1a0
[  227.502287][ T8009]  ? ocfs2_node_map_clear_bit+0xd0/0xd0
[  227.507859][ T8009]  ocfs2_evict_inode+0x1639/0x46d0
[  227.513010][ T8009]  ? verify_lock_unused+0x140/0x140
[  227.518238][ T8009]  ? look_up_lock_class+0x75/0x140
[  227.523387][ T8009]  ? ocfs2_sync_blockdev+0x40/0x40
[  227.528519][ T8009]  ? mark_lock+0x94/0x320
[  227.532865][ T8009]  ? is_dynamic_key+0x260/0x260
[  227.537745][ T8009]  ? mark_lock+0x94/0x320
[  227.542101][ T8009]  ? __lock_acquire+0x1465/0x7c40
[  227.547150][ T8009]  ? deref_stack_reg+0x18e/0x220
[  227.552115][ T8009]  ? mark_lock+0x94/0x320
[  227.556472][ T8009]  ? __lock_acquire+0x1465/0x7c40
[  227.561527][ T8009]  ? stack_trace_save+0xf0/0xf0
[  227.566404][ T8009]  ? arch_stack_walk+0xf2/0x140
[  227.571282][ T8009]  ? __lock_acquire+0x1465/0x7c40
[  227.576333][ T8009]  ? verify_lock_unused+0x140/0x140
[  227.581584][ T8009]  ? writeback_single_inode+0x7ce/0x8e0
[  227.587157][ T8009]  ? __lock_acquire+0x7c40/0x7c40
[  227.592230][ T8009]  ? inode_wait_for_writeback+0x1df/0x220
[  227.598012][ T8009]  ? _raw_spin_unlock+0x24/0x40
[  227.602921][ T8009]  ? __lock_acquire+0x7c40/0x7c40
[  227.607979][ T8009]  ? do_raw_spin_lock+0x128/0x2f0
[  227.613033][ T8009]  ? __rwlock_init+0x140/0x140
[  227.617846][ T8009]  ? do_raw_spin_unlock+0x11d/0x230
[  227.623088][ T8009]  ? _raw_spin_unlock+0x24/0x40
[  227.627966][ T8009]  ? inode_wait_for_writeback+0x1df/0x220
[  227.633715][ T8009]  ? sb_clear_inode_writeback+0x3c0/0x3c0
[  227.639458][ T8009]  ? do_raw_spin_lock+0x128/0x2f0
[  227.644502][ T8009]  ? bit_waitqueue+0x30/0x30
[  227.649114][ T8009]  ? do_raw_spin_unlock+0x11d/0x230
[  227.654346][ T8009]  ? ocfs2_sync_blockdev+0x40/0x40
[  227.659495][ T8009]  evict+0x4b6/0x8b0
[  227.663443][ T8009]  ? proc_nr_inodes+0x2f0/0x2f0
[  227.668329][ T8009]  ? do_raw_spin_unlock+0x11d/0x230
[  227.673553][ T8009]  ? _raw_spin_unlock+0x24/0x40
[  227.678432][ T8009]  ? iput+0x79f/0x9c0
[  227.682443][ T8009]  vfs_rmdir+0x374/0x4a0
[  227.686707][ T8009]  do_rmdir+0x29a/0x5c0
[  227.690884][ T8009]  ? d_delete_notify+0x150/0x150
[  227.695851][ T8009]  ? getname_flags+0x206/0x500
[  227.700632][ T8009]  __x64_sys_rmdir+0x45/0x50
[  227.705245][ T8009]  do_syscall_64+0x4c/0xa0
[  227.709679][ T8009]  ? clear_bhb_loop+0x60/0xb0
[  227.714370][ T8009]  ? clear_bhb_loop+0x60/0xb0
[  227.719061][ T8009]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  227.724995][ T8009] RIP: 0033:0x7f5b1759e159
[  227.729442][ T8009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.749081][ T8009] RSP: 002b:00007f5b18425028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  227.757516][ T8009] RAX: ffffffffffffffda RBX: 00007f5b17825fa0 RCX: 00007f5b1759e159
[  227.765511][ T8009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000004c0
[  227.773505][ T8009] RBP: 00007f5b1763506b R08: 0000000000000000 R09: 0000000000000000
[  227.781489][ T8009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.789491][ T8009] R13: 00007f5b17826038 R14: 00007f5b17825fa0 R15: 00007ffc96f942d8
[  227.797495][ T8009]  </TASK>
[  227.831224][ T6730] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  227.925775][ T4273] ocfs2: Unmounting device (7,1) on (node local)
[  228.230557][ T6730] usb 4-1: USB disconnect, device number 16
[  228.238920][ T6730] usblp0: removed