last executing test programs:

5.102077149s ago: executing program 1 (id=1078):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x2, 0x0, 0x7}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))

4.907255371s ago: executing program 1 (id=1081):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f0000000180)={[{@barrier}, {@autodefrag}, {@notreelog}, {@enospc_debug}, {@noflushoncommit}, {@nodiscard}, {@max_inline={'max_inline', 0x3d, [0x37, 0x37, 0x6b, 0x70]}}, {@thread_pool={'thread_pool', 0x3d, 0x6}}, {@ssd_spread}]}, 0x1, 0x55ae, &(0x7f0000005600)="$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")
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xd0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

4.828744873s ago: executing program 2 (id=1082):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x101880a, &(0x7f0000000400)=ANY=[], 0x1, 0x5521, &(0x7f000000cf00)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0})

4.153643872s ago: executing program 0 (id=1088):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000024c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)

4.089128003s ago: executing program 0 (id=1089):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa")
mount$nfs(&(0x7f0000000000)='.\xec\xbf.\\', 0x0, 0x0, 0x2000, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)

3.897457326s ago: executing program 0 (id=1091):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb71d)
ioctl$TUNSETLINK(r0, 0x400454cc, 0x1)

3.56392219s ago: executing program 0 (id=1094):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x5599, &(0x7f0000005680)="$eJzs3X1oVecdB/BzTaKhFpPV1alY6RSqdGVTW5DNUeNLZjvfkhq0NTXGaWudrViZW9qJCwliOi2NSh2jrjhkRVtWApO+iFPXoUM2psikszLnim44ahZ1gh2Tjdx7n+u955rk1nVNXz6fknvuc3/nec5zD+eP+731OTcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAKIoSm289OevImvqxM8fNeeA/j7y669ljk5aNPnL25/N3TCuqWv1U3fSGlrq5UzqaKxfPP3p1/aEoSqT6pfsvnHzfA4/OWTizNAxYX53alpd3ecjk4+lUo2/Oi539cv8WRVFUEhugKL2tLMpqJ+IHiFblD9it6k1X3lxWM/XtxssXJg6vHbU3/63TqbS3J9Bb0tfVmWvXUkXysU9sj0w769JL5Fyiqf7xC+4jeRMAwAcypiq5yXwcTX/EzbQb4/VYuyLWbo21wyeE1uzGjUiN27ered4er/fSPCtSUaFfl/OM1dPnP9OuivePtWNR4wPMM3fXdKQp7WqeK2P13ponAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMfJu5PmXZgy/cXLfSfV7hiy4a+z+mxcv+9UbfVLd+2sPrHujf61ddMbWurmTulorlw8/+jV9YeiqDzZL5Hqnnhj08Kn+tbNfHDzQ2srZ0w49FpRetywLc7aOfpjePLVsij6VlblTBj23IAoqsotJJvRj/MLy5JP7g8FAAAAPk2GJB/7ZNqpOFiS004k02Qi+V+QCovVm668uaxm6tuNly9MHF47au+Nj1fVxXgV1x0v0y6/9pfICsYh/sbHu1YPu67KG6d78RHjef7YtHdmnBlRf27rlfNNTWsv7h534K73tkw93/zNd/av6Hf/cyPy8n959/k/nDn5HwAAgP+F/B8fp3s95f+3ZlfOaPvDvT/6/biv/31o9cZ3m/YmVg09vmLkd+ZNPPXa869fzcv/t+ccMi//hxmH/N8nurH8DwAAAB9n/+/8X5E3Tvd6yv/PHDwxdM+ogzWN0furyv6VOLhk36nnvtZ8ec29216oPDvrsf55+X9MYfm/OHva4cXfhQkvL4uiMYWfVAAAACBH+P/u175aCHk99c1BPK+/PP7FnRdLZxYvKf7yrl3bnl5TevcdA5fWLn5l9EtDnjg8/9nVefm/orD8X/LRvF0AAACgAIs23L100D/mjd+2pH32rVePVg66Z/vRO25un7G6Zv2kFbec/kpe/q8qLP/36523AwAAAFzHsfmPLFrxt9071v16xOQxpe9PGTn7e3WX9hwe++9RNR0vjP/GW3n5v76w/H9Tepte+ZDqdCj8K4QtZVFU2vlkZarwm6h1YqYAAAAAfEhCTm/44eylDZuf2fbPizV3vtJ8y8utf374C+V3bpz2s+9vOT63adO+vPy/svv7/4c7HYT1/zn3/8tb/59VSN31b4IbAwAAAPBZlL+eP9weP/XLBV39/n6h6/8fe3r4o1u/+5Olv7itfHfitpNPfumJ5ocrfzpwYHvL6JHNRYNL8vJ/Y2H5vyh7+2H+/h8AAADcgE/a7/89lDdO93q6//+0BesOL2gf+/kDLe3Pjxn02znFDy7Y+af2m/c/Oax9/7nzLcPy8n9rYfk/bPtnv70D4fw0l0XR4M4n6bsJ7grTXR4rtJVkFVInPtZjTuiRLrT1yyokrYz1GFcWRV/sfNIYK3wuFFpjhY4B6cL2WOFIKKSvh0zh1VjhQLjStg5ITzdeeD0U0gss2sIKiv6ZJRGxHpe66tFZuG6Pk5mDAwAAfKaE8JzOsiW5zSgeZdsSPe1wU0879Olph6KediiO7RDfsavXo/rcQnj9L6dXv/f48l/WTmi4Z+7kPcOOP37f2bE/+PbaX83uv6XxxKUpTXn5f3th+T+cir6pTVfr/6Ow/j/9u4aZ9f/1oVAeK7SFQlX8jgFV4RipsLshHKO8Kt2jY3CmAAAAAJ9q4XuBol6eBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBf9u49Sq6qThTw7nd30uk0OI6AykSdJEZMdydBlICLPERUjHQYZFTGPEg65NEkIQ8kwYWBsBwUdQLBxDvDXQS4WYCixDgEERgSlcC9RHnNMAzyFLiBUSFc3nCZ3NV9aleqzulKV0wa0tzv+6NrV/3289Sja59zah8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj/w+BDv7LgilOeuWnkC3936imNC59+bsxlB3/kiPqb5h48/PUtd8+6fcrxZ10w5eSJO1YeO+Mrd7/591tDaO8uV5EUr/j5RVOX1U6Z9KWLv3zOsZ8/auum2ly9uXgY2PWnMnfn/Njqk4NCuKEihOp0YGRjEqjJ3W+M9b2vMYQDwq5AvkTHgKREuuFwW0MI68KuQL6qGxtCaCwInHTvL2/9blfikoYQhoYQ6tJtPFyXtNGQDgyrTQID0oEF1UnglZ2JfODnlUkA9lp8M+Rf9BvaizM091yuxOuvZp917O2VHl5VTDSXzven8X3cqQK16Qfa9+ppy1RHn8i8PTZ7t/WDd1tmO6/ytBV+kcp9Q9m5K1QXKmd2zJq+tHNJfKQytLRUlaqpj57nh5//+ow9Sfeb12HsQPM+eR1W7dh+59mNn7pu9aD1r64ce+WWve3mQwWbtDDd1+pC7jXXb57HaJzPk37w9st8SxriS1cI4V9vqNv26hcuf/nTa7ZcPem8v13zzIjTW9veuO+F6yctWLXg+v/+i8z8v3n38//4co63lUW5Y6tvNCVz8/hIY0w815TMzQEAAKDf6A97Tac+NOvF4b/5xD9PvvHR7YOO/5tFqw/+de2Wdz34VOX4Z285ecT81zLz/yHlHf+Ph/wbC0e7OYRx3YmVg0M4qPvxJHBN7M6pg0P4QHeqvTgwPhXYHMLB3YkR+apSJepjiSGpwPamXGBcKrA1BtpTgfUxsCoVOD8GNqQCM2JgcyowIQbCnOJxfKQpN46yAw0xMC3ZiBviWQgvNMXWUtvqd/mqAAAA9pHc7LCm+G7BuQ57myFOLzc09JYhnoFdMkNdqob0DDY/rSpZQ3VvNVT2VkN+3Ct2P/xMzRW91Zw5DaOiOMPSb/7h/rFfXDW3euj22sNemnfczN8d8/41O1s++uPanT8cd9fahsz8v2338/+6HjpSkTn+H8Lk7r8xd2Uu0pmPT2svygAAAADshdETP/ZPl733l9fdcuLnfzv4jiOv2PjDqbVjv/XK0nt+uGLCudt+dEFm/j+uvPP/4z6RqoLMYVvcDTFvcAhtxYGk2qOygeSo98BcAAAAAPqD/PH4/LHwObnb5BTt9Hw6m799D/PHA//jesw//pC/fmzDf8z99k8nTjli7TmPzd9+1+EfrWn7m+cf/tIF86Z947JvZub/7eWd/z+g+DbpxNbYi9WDQ6gvCNwee9kV6DYkBh47pjiQG//WuAEujFXlTkzIV3VhLDEtBtpSgXWlStydL3FQcSD3ZOUbX5kfx5xciYIAAAAAvOXi7oB4XD6e/3/fgg/PPmpb3aG3rKr46V/uuKZz4vVtNc+M/VXT61/4whNff63xzMz8f9qenf/fPQ/OnN7fOTCE1uoQqtI/DNg2IFkYMAYaK3KJWwYkdVWlqzp3QAhHdw0sXdXjufX/q9NrDN7bkFQVAwd98Ornh3UlrmwIobUwcP8pl3+sK7EkFcg3/sWGEP6qa7Tpxq+vTxqvSTe+tj6EQwsC+apOrQ+hq7HadFW/rMtdxyBd1XV1IbyrIJCv6oi6EJYFAPqp+K90ZuGDi5ctnze9s7NjUR8m4j78hjBrTmdHy4wFnTPrSvRpZqrPRcsYnZsdU8nlkFLiEkWr7lk7tJx0/neCbYV9ye3Hz5w4mLsfvwvVdI9zdE3R3THpIX/4Q9kmQsE3qbdryAMKK9n1JGbqj/lrw8BQv3Rxx6KWs6YvWbJoVPK33Oyjk79xUMm2GpXeVgN66tt+8PIYXlhJ65LTF7YuXrZ85JzTp5/WcVrH/NFtYw5vO3LMqCM+3to1qrbkby9DHd5T1amh7rz8rR/qIdUFlbwVnxoSEhL9LfE/zjj95DuOnPOpE+5d+oGj1oybcPaNh89qXXPb9ZPWT3ts8I9GXZKZ/y/c/fw/furET/7c+gyljv83x8P8yeO7DvNPi4F15R7/by51ND9/YsCQVGBFDKxwmB8AAIB3hrg7Mu52jHutH6q74qrDL3329C2jJn7tzOaRv57wwXEHfvqML99x3H/+3/d/7xN//N+Z+f+K8n7/v4/W/88vXf+5Usv8j4gl2kqt/59e5j+//v+KUuv/p5f5z6//v+5tWP9/aT6Q2iQvWP8fAAB4J3jr1v/vdXn/9AUCMhl6Xd4/fYGATIZel/Ev9wIBe7z+/5PHXPv0B97/TPvPrr/j8ekXn3HOx9fUD9uxrL7l9m//+y9u/MqpgzLz/1Xlzf8t3A8AAAD7j2uPffLfjr3q+7ec3Pjsj2sWzT7/5vNuahz2WsWsjfMnDJh8zez/ysz/15U3/3/r1/8Lpc7/H1Iq0F5qYUDr/wEAANBPlVr/b/tP6i+9sHHHuk0bXv/ske9+/Tt3fOdrry34wQ8+89H3zV48adyEmzPz/w3lzf/jaReVRbljb95oSta0C+k17Z5ryv9kAAAAAPqHytDSUlNm3qKVUcf/+W3GpUB3ly504nE//WT70HffPufaKa3/cN99Ha2H3NnUsH7+zi+d8PTyp05YeWVm/r+5vPl/0e8yqnZsv/Psxk9d98bqQetfXTn2yi27jv8DAAAAfafc/RIAAAAAAAAAAAAAAMDb770Lxoy/t+Xxd1+0evn5zdddcfmbm1q3fPUfL6na/uHZf7hg7uiGzO//w+TucqV+/x+v+xd/X/AXRbljq72v/5e7f9LxP1nWvWThtqYQPlQYmHfevANC7tr8wwsDt351xHu6EuelS9z8yISnuhJT04HPjDzw5a7E0anAtLhI4sHpQLyq4suDUoG4vOJ96UDcHhvSgdpc4FuDknFUpLfVM43JtqpIb6sHG0MYXBDIb6sbGpM2KtIDvCQVyA/wjHQgDvALuUBlulc/GZj0KgYaY9HLBia9AgBgvxW/BdaEWXM6O9riV/h4e0h18W1UtGTZudlqq8psPi5NtuqetUPLSVelv4vuutZ4TajrGsKozNfVwiwV3aPcN7X0sun+osSQe1vtra82XW3pETUkI2qZsaBzZk2vAx/Te5bR1b1mGZWZ7BRmqezepGXUUkZfyhhRmdumjC7H+5WhpaUqlWtsDDaHIr29Isr9vX5Pa/6VekV0+cSXb/rD41ubPn3Ye9pPO/+eyvff+6sDr3jxQ688dN1hm/7bR9b++urM/L+5vPl/XeG4Xs5dDGBFvLLeUYNDmFbmiAAAAOCdb/b8Ry6+4FcXbX+sfdhTC1ovuvWBZT9YXt10zfnHPnjzmS+d8r2pexu/9skTfvvAb3+0cdj4WxaOGfDEWVdedtw9d92xetvxb95w2P8ZOePRzPx/SHnz/7hjLHcoONnbsTle/3/l4BC6L63fnASuicM9dXAIH+hOtccSyQX1PxdLtCWBa+IOkxGxxLT24qrqY2BDKrC9KRfYnApsjYHcXoqrQ25XzkVNIXysOzW5uMTCWKI5FTghBoakAi0x0JYKDIqBcanAHwflAu2pwJ0xEOYUb6ufDcptKwAAgD2Rm2fVFN8N6XnehureMlT0lmFAbxkqe8tQ11uGUqOI9zfGDDWFx+NzGeJDNelaG1K1ZDLEi+Hvcb8yGcLdxTnTBTNN588kaS7OGTN8+x8f/OT0lx6+YemP3hh+4rmf/PH3tm16be4Tp40cPO3VsfNGfPuPmfl/W3nz/wHFt0nrW+P8f9f1/5LA7bF7q+Op40Ni4LFjigO5HQNb42T3wnxV7bkSuUn7hbHEuBgYkgosjIFxqcC0ybnAuvcUB3Iz7XzjK/ONz8mVKAgAAADAWy7uIIi7aeL8/9K/mz353O+0dqyc9dWnps0Y+ukDL33fpcfcNOk3c9cedOCpd14zLzP/H1fe/D+2N7CwsfNjb54cFMINFbt6kw+MbEwCcT9GY/x5/PsaQzigYAdHvkTHgKREbarhcFtD8gv12nRVNzYkawzE+yfd+8tbv9uVuKQhhKEFe1/ybTxcl7TRkA4Mq00CA9KBBdVJIO75yQd+XpkEYK/l9wrGF1TuVJe85p7LlXj9vVOuCZoeXmYfaA/5evrNVV+pSz+Q26eat2dPW6Y6+kTm7bHZu60/vtuavdsKv0jlvqHs3BWqC5UzO2ZNX9q5JD5S+EvWjD56nnv6Jevu0vvgdbjiz+9t7+rSHWhLfXy09Vyu59dhRayuasf2O89u/NR1qwetf3Xl2Cu3lN2NEuIm/cuvjR/2UMHm7Wt1Ifea63efJ+0+T/rjv4EhnrYQwqbnvlF/5okn/tsB/7Rw0/cf/a/mV7/1zTs2blzW1HJz1ZpJF3722sz8v728+X916rbba3FjLh4cwocLNu62uPknDk4+BwsCyafku7KB5JD7E00lPzkBAABgX8vv7sjvL5iTu01OCE/Pk7P52/cwf9xfMa7H/OX2+4TP3/0vf7vid6u/uGX9AxW/+f3GK04YM3XhYwvvu3jiP/+v31/16I2Z+f+03c//61PddPzf8X/6iOP/Pdrfd0XXpx9YsVe7ojPV0Scc/+/R/v5uc/y/R47/O/7fE8f/e+H4f4/296ct8y1poS9dIYSnn/2XC//hgmUnPfTqu4+4+IE/PTjx7IobOv9j+kPPdLzx0Vdm3XpoZv6/sLz5v/X/el60L7/+37RS6/8tLLX+3wrr/wEAAH2qxEJz6XleZvW+TIb06n2ZDL0uENjrEoPW/9vj9f82nFz9+1/P/ffvf+6+pw+vnHr/f46eP++m4UcdM+KqNU+t+NcX2lsy8/8V5c3/48thYGHr/WX9vyGTS1S1KgYWWhgQAACA/VGpHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8vcaceedL33lh+2G3Lrlt5cnj/3r1qV//7NEH/+zKnZ/YHL7x4vKX7ply/FkXTDl54o6Vx874yt1v/v3WEOZ0l6tIilf8/KKpy2qnTPrSxV8+59jPH7V1U12u3prc7XuLcsdW32gKYV3BI40x8VxT151dgZOO/8my6q7EtqYQPlQYmHfevAO6EuubQhheGLj1qyPe05U4L13i5kcmPNWVmJoOfGbkgS93JY7OBSrS3b10UNLdinR3vzsohMEFgXx35w4qrirfxnG5QGW6jasakzZioDEW/UFj0kYMdMYSc+pDaK0OoSpd1f+sS6qqSlf1i7qkqqp0VefUhXB0CKE6XdUjtUlV1emR31WbVBUDB33w6ueHdSXW1YbQWhi4/5TLP9aVOCMVyDd+Ym0If9X1kkk3vrEmabwm3fglNSEcGkKoTZd4sTopUZsu8Xh1CO8qCOQbn10dwrLAO0L88JlZ+ODiZcvnTe/s7FjUh4naXFsNYdaczo6WGQs6Z9al+lRKRUF657nZeGWZY3/4+a/P6Lpddc/aoeWkq3Plarq7PLqm6O6YfdX7ij7qfezXgMJKdj0fmfpj/towMNQvXdyxqOWs6UuWLBqV/C03++jkb1UummyrUftqW5Xrz91WwwsraV1y+sLWxcuWj5xz+vTTOk7rmD+6bczhbUeOGXXEx1u7RtWW/N0XQ708G6/q46EeUl1QyVvxASAhIdHfEpVFn25t+/u/7MwX/V0drQl13R/QmWlFYZaK7lHui0GP3318Xw46MyXJjGhUZuKQyTK69yxjMpOJXVkakizd3+syk8PCmiq7N2m8XxlaWkr+p2suvlu4+f7Uw+YtV9x05aYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBQAAP//CAsM0g==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x161000, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)="c0"})
rename(&(0x7f00000001c0)='./file3\x00', &(0x7f00000002c0)='./file1\x00')

3.107529486s ago: executing program 1 (id=1097):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)
unshare(0x400)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={0x0, 0x0, 0xc, 0x2000000})

2.783083501s ago: executing program 2 (id=1099):
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0x387040000})
capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040))
mlock(&(0x7f000000e000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000010000/0x3000)=nil, 0x3000)

1.836768775s ago: executing program 4 (id=1110):
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa6796c21a00000000ff0806000108"], 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

1.786374836s ago: executing program 3 (id=1111):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.607266508s ago: executing program 4 (id=1112):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "011c4e", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x1}}}}}}, 0x0)

1.508610359s ago: executing program 3 (id=1113):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x3c}}, 0x0)

1.503670779s ago: executing program 1 (id=1114):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000200)={0x0})

1.38797967s ago: executing program 4 (id=1115):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002)
pwrite64(r0, &(0x7f0000000640)="d9cd", 0x2, 0x2)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.385920981s ago: executing program 3 (id=1116):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f0000000140)={[{@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@noload}]}, 0xfe, 0x452, &(0x7f0000000980)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x84)
lseek(r0, 0xfffffffffffffffa, 0x1)

1.272070592s ago: executing program 2 (id=1117):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000004fc500850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.230626233s ago: executing program 4 (id=1118):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1a)

1.220050983s ago: executing program 1 (id=1119):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x80, @local, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}], 0x1, 0x4040001)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)

1.126830164s ago: executing program 4 (id=1120):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000055003d0902000000fccbdf2507000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000040ff"], 0x84}}, 0x0)

1.112966145s ago: executing program 2 (id=1121):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0)

997.640406ms ago: executing program 2 (id=1122):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)

980.690227ms ago: executing program 0 (id=1123):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x24, 0x2c, 0x0, @remote, @local, {[@dstopts={0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}]}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

963.271507ms ago: executing program 4 (id=1124):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@localalloc={'localalloc', 0x3d, 0x6}}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000140), 0x12)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x0, r0, 0x0, 0x3, 0x5})

888.044458ms ago: executing program 1 (id=1125):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a)
recvmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000048c0)=""/170, 0xaa}], 0x1}, 0x200}], 0x1, 0x40010123, 0x0)

660.151141ms ago: executing program 3 (id=1126):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x42)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}})

266.231007ms ago: executing program 3 (id=1127):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc001001b, 0x0, 0x3}]})

127.170448ms ago: executing program 2 (id=1128):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x800000, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x220d1}, [@IFLA_AF_SPEC={0xc, 0xc, 0x0, 0x0, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x8040)

78.465909ms ago: executing program 3 (id=1129):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f00000002c0))

0s ago: executing program 0 (id=1130):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$l2tp(r0, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x2, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

sb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[  103.679536][   T26] audit: type=1800 audit(1747073793.916:4): pid=5319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.361" name="file1" dev="loop0" ino=16 res=0 errno=0
[  103.698874][    C0] vkms_vblank_simulate: vblank timer overrun
[  103.737060][ T4625] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  103.802481][ T4625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.929156][ T5335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.368'.
[  104.020609][ T5337] loop0: detected capacity change from 0 to 1024
[  104.094911][ T5337] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  104.127542][ T4625] usb 2-1: USB disconnect, device number 7
[  104.167557][ T5337] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback.
[  104.488243][ T5352] loop3: detected capacity change from 0 to 256
[  104.656786][ T5352] FAT-fs (loop3): Directory bread(block 64) failed
[  104.689064][ T5352] FAT-fs (loop3): Directory bread(block 65) failed
[  104.715016][ T5352] FAT-fs (loop3): Directory bread(block 66) failed
[  104.751475][ T5352] FAT-fs (loop3): Directory bread(block 67) failed
[  104.770109][ T5352] FAT-fs (loop3): Directory bread(block 68) failed
[  104.790427][ T5352] FAT-fs (loop3): Directory bread(block 69) failed
[  104.819840][ T5352] FAT-fs (loop3): Directory bread(block 70) failed
[  104.831639][ T5341] loop4: detected capacity change from 0 to 32768
[  104.843247][ T5352] FAT-fs (loop3): Directory bread(block 71) failed
[  104.871184][ T5352] FAT-fs (loop3): Directory bread(block 72) failed
[  104.895973][ T5352] FAT-fs (loop3): Directory bread(block 73) failed
[  104.963394][ T5341] XFS (loop4): Mounting V5 Filesystem
[  105.135103][ T5341] XFS (loop4): Ending clean mount
[  105.327920][ T4182] XFS (loop4): Unmounting Filesystem
[  105.373207][ T5385] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  105.447492][ T5388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'.
[  106.046815][ T5050] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  106.342114][ T5050] usb 4-1: Using ep0 maxpacket: 32
[  106.470542][ T5050] usb 4-1: config 0 interface 0 has no altsetting 0
[  106.487584][ T5394] loop0: detected capacity change from 0 to 131072
[  106.488581][ T5050] usb 4-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00
[  106.545041][ T5050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.582961][ T5394] F2FS-fs (loop0): invalid crc value
[  106.590071][ T5050] usb 4-1: config 0 descriptor??
[  106.635075][ T5394] F2FS-fs (loop0): Found nat_bits in checkpoint
[  106.708496][ T5394] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  106.794022][ T5394] F2FS-fs (loop0): Corrupted max_depth of 3: 16842753
[  106.823871][ T5390] loop2: detected capacity change from 0 to 32768
[  106.962619][ T1483] read_mapping_page failed!
[  106.966691][ T4214] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  106.990163][ T1483] ERROR: (device loop2): txCommit: 
[  106.990163][ T1483] 
[  107.026719][ T1483] jfs_write_inode: jfs_commit_inode failed!
[  107.100017][ T5050] wacom 0003:056A:037A.0006: item fetching failed at offset 4/7
[  107.119544][ T5050] wacom 0003:056A:037A.0006: parse failed
[  107.154490][ T5050] wacom: probe of 0003:056A:037A.0006 failed with error -22
[  107.196018][ T5408] loop1: detected capacity change from 0 to 32768
[  107.282319][ T4214] usb 5-1: Using ep0 maxpacket: 8
[  107.330338][ T5050] usb 4-1: USB disconnect, device number 5
[  107.341638][ T5422] syz.2.402 sent an empty control message without MSG_MORE.
[  107.390486][ T5408] XFS (loop1): Mounting V5 Filesystem
[  107.436673][ T4214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.470686][ T4214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.481394][ T4214] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  107.490567][ T4214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.523794][ T4214] usb 5-1: config 0 descriptor??
[  107.613943][ T5432] loop2: detected capacity change from 0 to 64
[  107.633652][ T5408] XFS (loop1): Ending clean mount
[  107.663862][ T5408] XFS (loop1): Quotacheck needed: Please wait.
[  107.739807][ T5408] XFS (loop1): Quotacheck: Done.
[  107.846951][ T4171] XFS (loop1): Unmounting Filesystem
[  107.999441][ T4214] holtek 0003:1241:5015.0007: unknown main item tag 0x0
[  108.006473][ T4214] holtek 0003:1241:5015.0007: unknown main item tag 0x0
[  108.025300][ T4214] holtek 0003:1241:5015.0007: item fetching failed at offset 2/5
[  108.034150][ T4214] holtek 0003:1241:5015.0007: parse failed
[  108.045902][ T4214] holtek: probe of 0003:1241:5015.0007 failed with error -22
[  108.257501][ T4629] usb 5-1: USB disconnect, device number 2
[  108.935066][ T5436] loop2: detected capacity change from 0 to 32768
[  109.063640][ T5436] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  109.122273][ T5436] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  109.189707][ T5442] loop3: detected capacity change from 0 to 32768
[  109.334289][ T5442] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  109.369751][ T5436] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  109.459793][ T5442] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[  109.546587][    C0] sched: RT throttling activated
[  109.568772][ T5436] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  109.575720][ T5442] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  109.645988][ T5442] OCFS2: File system is now read-only.
[  109.694043][ T5442] (syz.3.409,5442,1):ocfs2_find_leaf:1941 ERROR: status = -30
[  109.825151][ T5442] (syz.3.409,5442,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  109.880058][ T5442] (syz.3.409,5442,1):ocfs2_get_clusters:624 ERROR: status = -30
[  109.915317][ T5442] (syz.3.409,5442,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  109.976999][ T5442] (syz.3.409,5442,1):ocfs2_read_virt_blocks:981 ERROR: status = -30
[  109.985701][ T5442] (syz.3.409,5442,1):ocfs2_read_dir_block:511 ERROR: status = -30
[  110.176182][ T4173] ocfs2: Unmounting device (7,3) on (node local)
[  110.281399][ T5451] loop4: detected capacity change from 0 to 32768
[  110.351440][ T5451] XFS (loop4): Mounting V5 Filesystem
[  110.380953][ T5449] loop1: detected capacity change from 0 to 262144
[  110.387874][ T4625] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  110.563428][ T5449] F2FS-fs (loop1): invalid crc value
[  110.610507][ T5451] XFS (loop4): Ending clean mount
[  110.635076][ T5449] F2FS-fs (loop1): Found nat_bits in checkpoint
[  110.668942][ T4625] usb 1-1: Using ep0 maxpacket: 8
[  110.682902][ T5451] XFS (loop4): Quotacheck needed: Please wait.
[  110.714534][ T5449] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  110.827707][ T5451] XFS (loop4): Quotacheck: Done.
[  111.007677][ T4625] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  111.024966][ T4182] XFS (loop4): Unmounting Filesystem
[  111.024996][ T4625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.063758][ T4625] usb 1-1: Product: syz
[  111.073194][ T4625] usb 1-1: Manufacturer: syz
[  111.093451][ T4625] usb 1-1: SerialNumber: syz
[  111.114384][ T4625] usb 1-1: config 0 descriptor??
[  111.206003][ T4625] gspca_main: se401-2.14.0 probing 047d:5003
[  111.273975][ T5464] loop3: detected capacity change from 0 to 32768
[  111.327568][ T5464] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.413 (5464)
[  111.387970][ T5464] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  111.436667][ T5464] BTRFS info (device loop3): using free space tree
[  111.466222][ T5464] BTRFS info (device loop3): has skinny extents
[  111.537080][ T5470] loop2: detected capacity change from 0 to 32768
[  111.560925][ T5464] BTRFS info (device loop3): enabling ssd optimizations
[  111.604779][ T5470] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  111.622444][  T337] (kworker/u4:3,337,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  111.767154][ T5464] BTRFS error (device loop3): unable to set label with more than 255 bytes
[  111.838550][ T4176] ocfs2: Unmounting device (7,2) on (node local)
[  111.886887][ T5505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'.
[  112.069286][ T5510] loop2: detected capacity change from 0 to 2048
[  112.214113][ T5515] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  112.277922][   T26] audit: type=1800 audit(1747073802.516:5): pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.421" name="file2" dev="loop2" ino=16 res=0 errno=0
[  112.298835][ T4625] gspca_se401: read req failed req 0x06 error -19
[  112.311098][ T5510] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12
[  112.345208][ T4625] usb 1-1: USB disconnect, device number 5
[  112.363898][ T5510] Remounting filesystem read-only
[  112.561230][ T4176] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  112.717221][ T4639] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  112.772561][ T5519] loop3: detected capacity change from 0 to 8192
[  112.844034][ T5519] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  112.894162][ T5519] REISERFS (device loop3): using ordered data mode
[  112.940212][ T5519] reiserfs: using flush barriers
[  112.982894][ T5519] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  112.989031][ T5527] validate_nla: 2 callbacks suppressed
[  112.989052][ T5527] netlink: 'syz.0.428': attribute type 39 has an invalid length.
[  113.032868][ T5519] REISERFS (device loop3): checking transaction log (loop3)
[  113.042199][ T5519] REISERFS (device loop3): Using rupasov hash to sort names
[  113.050293][ T5519] REISERFS (device loop3): using 3.5.x disk format
[  113.058489][ T5519] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  113.069918][ T5519] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  113.083473][ T5519] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  113.121423][ T5519] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  113.183336][ T5519] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  113.198027][ T5519] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  113.346778][ T4639] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  113.355880][ T4639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.377147][ T4639] usb 5-1: Product: syz
[  113.381405][ T4639] usb 5-1: Manufacturer: syz
[  113.386016][ T4639] usb 5-1: SerialNumber: syz
[  113.453040][ T4639] usb 5-1: config 0 descriptor??
[  113.558333][ T4639] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 003
[  113.851084][ T5547] loop1: detected capacity change from 0 to 1024
[  113.886721][ T4590] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  113.941981][ T5547] hfsplus: can't free extent
[  113.971727][ T5536] loop0: detected capacity change from 0 to 32768
[  113.977007][ T4639]  (null): failure reading functionality
[  113.986840][ T5517] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  114.031373][ T4247]  loop0: p1 p3 < p5 p6 >
[  114.068306][ T4639] i2c i2c-1: connected i2c-tiny-usb device
[  114.158120][ T5536]  loop0: p1 p3 < p5 p6 >
[  114.282411][ T4639] usb 5-1: USB disconnect, device number 3
[  114.388938][ T5557] loop2: detected capacity change from 0 to 4096
[  114.397699][ T5561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.443'.
[  114.409404][ T5561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'.
[  114.418602][ T5561] (unnamed net_device) (uninitialized): option arp_validate: invalid value (951)
[  114.428669][ T5517] usb 1-1: unable to get BOS descriptor or descriptor too short
[  114.450034][ T5557] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  114.487067][ T4590] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  114.512072][ T4590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.550985][ T4590] usb 4-1: Product: syz
[  114.555303][ T4590] usb 4-1: Manufacturer: syz
[  114.561480][ T5517] usb 1-1: unable to read config index 0 descriptor/start: -71
[  114.571430][ T5517] usb 1-1: can't read configurations, error -71
[  114.579178][ T4590] usb 4-1: SerialNumber: syz
[  114.620287][ T5557] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  114.650863][ T5567] loop1: detected capacity change from 0 to 128
[  114.655114][ T4590] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  114.750495][   T26] audit: type=1800 audit(1747073804.986:6): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.446" name="file1" dev="loop1" ino=1048630 res=0 errno=0
[  114.823596][ T1483] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8)
[  114.850124][ T1483] FAT-fs (loop1): Filesystem has been set read-only
[  114.870496][ T1483] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522)
[  115.004321][ T5569] loop4: detected capacity change from 0 to 256
[  115.052466][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[  115.061574][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  115.066524][ T4637] udevd[4637]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory
[  115.097735][ T4463] udevd[4463]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  115.164674][ T5573] loop2: detected capacity change from 0 to 64
[  115.203488][ T5569] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  115.244025][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  115.262533][ T4463] udevd[4463]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  115.289368][ T4247] udevd[4247]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[  115.305325][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory
[  115.387076][ T4590] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  115.695909][ T5589] PKCS7: Unknown OID: [5] (bad)
[  115.702110][ T5589] PKCS7: Only support pkcs7_signedData type
[  115.842928][ T5047] usb 4-1: USB disconnect, device number 6
[  115.863857][ T5594] loop2: detected capacity change from 0 to 256
[  115.983504][ T5595] loop1: detected capacity change from 0 to 2048
[  116.036030][ T5595]  loop1: p2 < > p3 p4
[  116.067588][ T5595] loop1: p3 start 65535 is beyond EOD, truncated
[  116.073989][ T5595] loop1: p4 size 8192 extends beyond EOD, truncated
[  116.253346][ T5579] loop0: detected capacity change from 0 to 32768
[  116.352246][ T4247] udevd[4247]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  116.380121][ T5579] XFS (loop0): Mounting V5 Filesystem
[  116.415727][ T4463] udevd[4463]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  116.437227][ T4590] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  116.455566][ T4590] ath9k_htc: Failed to initialize the device
[  116.721104][ T5579] XFS (loop0): Ending clean mount
[  116.921245][ T5600] loop2: detected capacity change from 0 to 32768
[  117.002210][ T4168] XFS (loop0): Unmounting Filesystem
[  117.273837][ T5600] XFS (loop2): Mounting V5 Filesystem
[  117.462418][ T5047] usb 4-1: ath9k_htc: USB layer deinitialized
[  117.573556][ T5600] XFS (loop2): Ending clean mount
[  117.587333][ T5600] XFS (loop2): Quotacheck needed: Please wait.
[  118.142464][ T5612] loop3: detected capacity change from 0 to 262144
[  118.213916][ T5627] loop4: detected capacity change from 0 to 2048
[  118.230840][ T5600] XFS (loop2): Quotacheck: Done.
[  118.263884][ T5612] F2FS-fs (loop3): Wrong SIT boundary, start(2048) end(134220800) blocks(1024)
[  118.273082][ T5612] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  118.296905][ T5612] F2FS-fs (loop3): invalid crc value
[  118.339333][ T4176] XFS (loop2): Unmounting Filesystem
[  118.352088][ T5612] F2FS-fs (loop3): Found nat_bits in checkpoint
[  118.421176][ T5638] device team0 entered promiscuous mode
[  118.449615][ T5627] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  118.473509][ T5627] process 'syz.4.467' launched '/dev/fd/4/./file1' with NULL argv: empty string added
[  118.487168][ T5612] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  118.494288][ T5612] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  118.504692][ T5638] device team_slave_0 entered promiscuous mode
[  118.523927][ T5638] device team_slave_1 entered promiscuous mode
[  118.585215][ T5632] device team0 left promiscuous mode
[  118.754013][ T5632] device team_slave_0 left promiscuous mode
[  118.786124][ T5632] device team_slave_1 left promiscuous mode
[  119.055578][ T5644] loop1: detected capacity change from 0 to 2048
[  119.130786][ T5644] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  119.239246][ T5648] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.865464][ T5635] loop0: detected capacity change from 0 to 32768
[  120.026878][ T5050] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  120.151860][ T5635] XFS (loop0): Mounting V5 Filesystem
[  120.367776][ T5635] XFS (loop0): Ending clean mount
[  120.391852][ T5050] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.406746][ T5050] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  120.451274][ T5678] netlink: 830 bytes leftover after parsing attributes in process `syz.1.484'.
[  120.516054][ T5680] loop2: detected capacity change from 0 to 1024
[  120.577019][ T5050] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  120.606464][ T5050] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.622749][ T4168] XFS (loop0): Unmounting Filesystem
[  120.639853][ T5050] usb 4-1: Product: syz
[  120.644072][ T5050] usb 4-1: Manufacturer: syz
[  120.681273][ T5680] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,max_dir_size_kb=0x0000000000008001,init_itable=0x0000000000000005,norecovery,discard,noload,noload,usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  120.714109][ T5050] usb 4-1: SerialNumber: syz
[  120.820440][ T5667] loop4: detected capacity change from 0 to 32768
[  120.927949][   T26] audit: type=1804 audit(1747073811.156:7): pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.483" name="/newroot/98/file1/mnt" dev="loop2" ino=18 res=1 errno=0
[  120.963723][ T5667] XFS (loop4): Mounting V5 Filesystem
[  121.052864][ T5658] udc-core: couldn't find an available UDC or it's busy
[  121.076918][ T5658] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  121.111188][ T5050] cdc_ether: probe of 4-1:1.0 failed with error -22
[  121.138548][ T5050] usb 4-1: USB disconnect, device number 7
[  121.336853][ T5667] XFS (loop4): Ending clean mount
[  121.352459][ T5667] XFS (loop4): Quotacheck needed: Please wait.
[  121.471856][ T5667] XFS (loop4): Quotacheck: Done.
[  121.594579][ T4182] XFS (loop4): Unmounting Filesystem
[  121.676915][ T5050] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  121.711332][ T5686] loop1: detected capacity change from 0 to 32768
[  121.806975][ T5686] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.487 (5686)
[  121.882830][ T5686] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  121.976858][ T5050] usb 4-1: Using ep0 maxpacket: 8
[  121.981223][ T5686] BTRFS info (device loop1): turning on flush-on-commit
[  121.998573][ T5686] BTRFS info (device loop1): enabling disk space caching
[  122.015918][ T5686] BTRFS info (device loop1): turning off barriers
[  122.066377][ T5686] BTRFS info (device loop1): doing ref verification
[  122.096954][ T5050] usb 4-1: config index 0 descriptor too short (expected 301, got 72)
[  122.102602][ T5686] BTRFS info (device loop1): enabling auto defrag
[  122.122865][ T5686] BTRFS info (device loop1): force clearing of disk cache
[  122.135845][ T5050] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  122.161731][ T5686] BTRFS info (device loop1): enabling ssd optimizations
[  122.176893][ T5686] BTRFS info (device loop1): using spread ssd allocation scheme
[  122.177087][ T5050] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  122.230473][ T5686] BTRFS info (device loop1): using default commit interval 30s
[  122.240399][ T5050] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  122.248466][ T5686] BTRFS info (device loop1): disk space caching is enabled
[  122.276721][ T5050] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  122.287249][ T5686] BTRFS info (device loop1): has skinny extents
[  122.306693][ T5050] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.386787][ T5050] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  122.417434][ T5050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.462147][ T5720] loop4: detected capacity change from 0 to 64
[  122.529850][ T5699] loop0: detected capacity change from 0 to 32768
[  122.572838][ T5686] BTRFS info (device loop1): clearing free space tree
[  122.638338][ T5686] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  122.672836][ T5699] XFS (loop0): Mounting V5 Filesystem
[  122.716496][ T5699] XFS (loop0): Ending clean mount
[  122.746821][ T5050] usb 4-1: usb_control_msg returned -71
[  122.753075][ T5050] usbtmc 4-1:16.0: can't read capabilities
[  122.780633][ T5686] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  122.861229][ T5050] usb 4-1: USB disconnect, device number 8
[  123.010857][ T4168] XFS (loop0): Unmounting Filesystem
[  123.234255][ T5744] loop4: detected capacity change from 0 to 128
[  123.236304][ T5705] loop2: detected capacity change from 0 to 40427
[  123.339065][ T5744] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  123.426266][ T5705] F2FS-fs (loop2): invalid crc value
[  123.443081][ T5744] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.506007][ T5705] F2FS-fs (loop2): Found nat_bits in checkpoint
[  123.681132][ T5705] F2FS-fs (loop2): Start checkpoint disabled!
[  123.742359][ T5705] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  123.945089][ T5752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.501'.
[  123.996914][ T5752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.501'.
[  124.263507][ T5105] attempt to access beyond end of device
[  124.263507][ T5105] loop2: rw=2049, want=40984, limit=40427
[  124.617356][ T5782] netlink: 'syz.3.513': attribute type 3 has an invalid length.
[  124.786931][ T4396] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  124.956427][ T5770] loop1: detected capacity change from 0 to 32768
[  124.957482][ T5793] loop4: detected capacity change from 0 to 2048
[  125.026135][ T5793] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.093903][ T5770] XFS (loop1): Mounting V5 Filesystem
[  125.146857][ T4396] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  125.180134][ T5808] loop3: detected capacity change from 0 to 256
[  125.206706][ T4396] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.272564][ T4396] usb 1-1: config 0 interface 0 has no altsetting 0
[  125.306335][ T5808] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  125.342385][ T5770] XFS (loop1): Ending clean mount
[  125.346689][ T4396] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  125.350766][ T5770] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 
[  125.393074][ T4396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.393842][ T5770] XFS (loop1): Unmount and run xfs_repair
[  125.408127][ T5770] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  125.419878][ T5770] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  125.435775][ T5770] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  125.448129][ T5770] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  125.456286][ T4396] usb 1-1: config 0 descriptor??
[  125.458303][ T5770] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  125.472052][ T5770] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  125.481317][ T5770] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  125.491052][ T5770] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  125.500964][ T5770] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  125.527120][   T26] audit: type=1800 audit(1747073815.766:8): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.521" name="file1" dev="loop3" ino=1048634 res=0 errno=0
[  125.559879][ T5770] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74
[  125.597105][ T5770] XFS (loop1): Failed to initialize disk quotas.
[  125.732038][ T5817] device veth0_to_team entered promiscuous mode
[  125.882157][ T5821] netlink: 124 bytes leftover after parsing attributes in process `syz.4.525'.
[  125.903409][ T5821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'.
[  125.950269][ T4396] zeroplus 0003:0C12:0005.0008: collection stack underflow
[  125.956508][ T5517] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 
[  125.987215][ T4396] zeroplus 0003:0C12:0005.0008: item 0 1 0 12 parsing failed
[  125.994749][ T4171] XFS (loop1): Unmounting Filesystem
[  125.997407][ T5517] XFS (loop1): Unmount and run xfs_repair
[  126.014264][ T4396] zeroplus 0003:0C12:0005.0008: parse failed
[  126.014794][ T5517] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  126.037256][ T5517] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  126.046281][ T5517] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  126.060737][ T4396] zeroplus: probe of 0003:0C12:0005.0008 failed with error -22
[  126.066012][ T5517] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  126.091716][ T5829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.530'.
[  126.106367][ T5517] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  126.118383][ T5517] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  126.137853][ T5517] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  126.178624][ T5517] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.199145][ T5517] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.216298][ T5517] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74
[  126.244854][ T4639] usb 1-1: USB disconnect, device number 8
[  126.269713][ T5517] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  126.296412][ T5517] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  126.309113][ T4395] XFS (loop1): xfs_difree: xfs_ialloc_read_agi() returned error -5.
[  126.583137][ T5843] loop3: detected capacity change from 0 to 256
[  126.814580][ T5843] loop3: detected capacity change from 0 to 4096
[  126.866219][ T5845] device wireguard0 entered promiscuous mode
[  126.928938][ T5833] loop4: detected capacity change from 0 to 32768
[  127.021106][ T5833] (syz.4.532,5833,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  127.062533][ T5849] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  127.107602][ T5833] (syz.4.532,5833,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  127.186006][ T5837] loop2: detected capacity change from 0 to 32768
[  127.234554][ T5833] (syz.4.532,5833,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  127.333467][ T5837] XFS (loop2): Mounting V5 Filesystem
[  127.344009][ T5861] loop1: detected capacity change from 0 to 512
[  127.418533][ T5861] EXT4-fs (loop1): inline encryption not supported
[  127.461269][ T5861] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  127.510690][ T5833] JBD2: Ignoring recovery information on journal
[  127.620597][ T5861] EXT4-fs (loop1): 1 orphan inode deleted
[  127.626485][ T5861] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,minixdf,acl,sb=0x0000000000000007,jqfmt=vfsv0,user_xattr,stripe=0x0000000000000374,,errors=continue. Quota mode: writeback.
[  127.650491][ T5837] XFS (loop2): Ending clean mount
[  127.698670][ T5861] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.699423][ T5875] loop3: detected capacity change from 0 to 64
[  127.712386][ T4275] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  127.773989][ T5837] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on.
[  127.777802][ T5833] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  127.796846][   T26] audit: type=1800 audit(1747073818.026:9): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.539" name="file0" dev="loop1" ino=13 res=0 errno=0
[  127.951287][ T4176] XFS (loop2): Unmounting Filesystem
[  128.015043][ T4275] usb 1-1: Using ep0 maxpacket: 16
[  128.091088][ T5878] sch_tbf: burst 7710 is lower than device lo mtu (65550) !
[  128.146998][ T4275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  128.167117][ T5879] (syz.4.532,5879,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  128.253102][ T5879] (syz.4.532,5879,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  128.314435][ T5879] (syz.4.532,5879,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  128.346108][ T5883] loop3: detected capacity change from 0 to 4096
[  128.355215][ T5879] (syz.4.532,5879,1):ocfs2_quota_read:201 ERROR: status = -5
[  128.375140][ T5879] Quota error (device loop4): find_next_id: Can't read quota tree block 5
[  128.394217][ T4275] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  128.404680][ T4275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.433531][ T5884] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.450593][ T4275] usb 1-1: Product: syz
[  128.460369][ T5879] (syz.4.532,5879,1):ocfs2_get_next_id:909 ERROR: status = -5
[  128.475242][ T4275] usb 1-1: Manufacturer: syz
[  128.480744][ T4275] usb 1-1: SerialNumber: syz
[  128.481354][   T26] audit: type=1800 audit(1747073818.716:10): pid=5883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.548" name="file1" dev="loop3" ino=15 res=0 errno=0
[  128.488449][ T5833] (syz.4.532,5833,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  128.544366][ T4275] usb 1-1: config 0 descriptor??
[  128.552333][ T5833] (syz.4.532,5833,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  128.565357][ T5833] (syz.4.532,5833,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  128.575202][ T5833] (syz.4.532,5833,1):ocfs2_quota_read:201 ERROR: status = -5
[  128.587627][ T4275] hub 1-1:0.0: bad descriptor, ignoring hub
[  128.598752][ T4275] hub: probe of 1-1:0.0 failed with error -5
[  128.614876][ T5833] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 5
[  128.633466][ T4275] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6
[  128.650108][ T5833] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  128.693386][ T5833] (syz.4.532,5833,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  128.754469][ T5833] (syz.4.532,5833,1):ocfs2_mknod:314 ERROR: status = -5
[  128.774323][ T5891] tun0: tun_chr_ioctl cmd 1074025680
[  128.785864][ T5833] (syz.4.532,5833,1):ocfs2_mknod:502 ERROR: status = -5
[  128.843196][ T5833] (syz.4.532,5833,1):ocfs2_create:676 ERROR: status = -5
[  128.959086][ T4182] ocfs2: Unmounting device (7,4) on (node local)
[  129.371383][ T4214] usb 1-1: USB disconnect, device number 9
[  129.473063][ T5904] loop4: detected capacity change from 0 to 8192
[  129.663405][ T5898] loop2: detected capacity change from 0 to 32768
[  129.802576][ T5898] XFS (loop2): Mounting V5 Filesystem
[  129.883502][ T5898] XFS (loop2): Ending clean mount
[  129.893110][ T5914] loop1: detected capacity change from 0 to 4096
[  129.930321][ T5898] XFS (loop2): Quotacheck needed: Please wait.
[  129.977620][ T5914] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  130.002781][ T5898] XFS (loop2): Quotacheck: Done.
[  130.047618][   T26] audit: type=1800 audit(1747073820.276:11): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.556" name="file2" dev="loop2" ino=4423 res=0 errno=0
[  130.106761][ T4625] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  130.174997][ T4176] XFS (loop2): Unmounting Filesystem
[  130.546780][ T4625] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  130.559734][ T5935] syzkaller0: tun_chr_ioctl cmd 1074025677
[  130.565735][ T5935] syzkaller0: linktype set to 270
[  130.570971][ T4625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.602943][ T4625] usb 5-1: config 0 descriptor??
[  131.130603][ T4625] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[  131.157831][ T4625] [drm] Initialized udl on minor 2
[  131.421700][ T5974] loop0: detected capacity change from 0 to 256
[  131.517941][ T5974] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x3eebdab2, utbl_chksum : 0xe619d30d)
[  131.531427][ T4625] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffffb9
[  131.543133][ T4625] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  131.586844][ T4625] usb 5-1: USB disconnect, device number 4
[  131.627646][ T5517] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  131.659770][ T5517] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  131.666127][ T5982] loop2: detected capacity change from 0 to 512
[  131.705021][ T5517] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  131.740184][ T5982] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.588: casefold flag without casefold feature
[  131.886644][ T5988] loop0: detected capacity change from 0 to 512
[  131.888578][ T5982] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.588: couldn't read orphan inode 15 (err -117)
[  131.912677][ T5982] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  132.052285][ T5988] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.589: inode #1: comm syz.0.589: iget: illegal inode #
[  132.104600][ T5988] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.589: error while reading EA inode 1 err=-117
[  132.147832][ T5988] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.589: inode #1: comm syz.0.589: iget: illegal inode #
[  132.231156][ T5988] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.589: error while reading EA inode 1 err=-117
[  132.274539][ T5988] EXT4-fs (loop0): 1 orphan inode deleted
[  132.305705][ T5988] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none.
[  132.443723][ T5988] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.589: invalid indirect mapped block 234881024 (level 0)
[  132.542025][ T4395] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  132.759001][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  132.765491][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  132.796796][ T4395] usb 5-1: Using ep0 maxpacket: 32
[  132.917018][ T4395] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  132.936875][ T4395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.947797][ T6010] loop2: detected capacity change from 0 to 512
[  132.974983][ T4395] usb 5-1: config 0 descriptor??
[  133.000557][ T6011] loop0: detected capacity change from 0 to 2048
[  133.079510][ T6011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.174974][ T6010] EXT4-fs (loop2): 1 orphan inode deleted
[  133.182408][ T6010] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,noauto_da_alloc,journal_dev=0x0000000000000003,barrier,delalloc,usrquota,. Quota mode: writeback.
[  133.208452][ T6010] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.236896][ T4395] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  133.253560][ T5997] loop1: detected capacity change from 0 to 32768
[  133.261138][ T4395] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  133.287081][ T4395] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  133.304509][ T4395] usb 5-1: media controller created
[  133.331246][ T4395] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  133.430544][ T5997] XFS (loop1): Mounting V5 Filesystem
[  133.439965][ T5993] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  133.494394][ T6024] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  133.502430][ T4395] az6027: usb out operation failed. (-71)
[  133.556728][ T4395] az6027: usb out operation failed. (-71)
[  133.562591][ T4395] stb0899_attach: Driver disabled by Kconfig
[  133.604495][ T4395] az6027: no front-end attached
[  133.604495][ T4395] 
[  133.680595][ T4395] az6027: usb out operation failed. (-71)
[  133.701477][ T4395] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  133.751616][ T4395] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7
[  133.786897][ T5997] XFS (loop1): Ending clean mount
[  133.800354][ T4395] dvb-usb: schedule remote query interval to 400 msecs.
[  133.836658][ T4395] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  133.867713][ T4395] usb 5-1: USB disconnect, device number 5
[  133.885252][ T6017] loop3: detected capacity change from 0 to 40427
[  133.939769][ T6017] F2FS-fs (loop3): build fault injection attr: rate: 694, type: 0x1ffff
[  133.977393][ T6017] F2FS-fs (loop3): invalid crc value
[  133.991881][ T4395] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  133.995023][ T4171] XFS (loop1): Unmounting Filesystem
[  134.020998][ T6017] F2FS-fs (loop3): Found nat_bits in checkpoint
[  134.046639][ T4265] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  134.196241][ T6017] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  134.361087][ T6017] F2FS-fs (loop3) : inject slab alloc in f2fs_kmem_cache_alloc of __f2fs_get_acl+0x52/0x900
[  134.416889][ T4265] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  134.431264][ T4265] usb 3-1: config 0 interface 0 has no altsetting 0
[  134.534659][ T6042] loop0: detected capacity change from 0 to 1024
[  134.555014][ T4173] attempt to access beyond end of device
[  134.555014][ T4173] loop3: rw=2049, want=45112, limit=40427
[  134.626834][ T4265] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  134.634917][ T6042] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.611: bad orphan inode 196608
[  134.655664][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  134.672230][ T4265] usb 3-1: Product: syz
[  134.676882][ T4265] usb 3-1: Manufacturer: syz
[  134.681503][ T4265] usb 3-1: SerialNumber: syz
[  134.690522][ T4265] usb 3-1: config 0 descriptor??
[  134.700552][ T6042] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  134.729976][ T4265] usb 3-1: selecting invalid altsetting 0
[  134.981429][ T6052] loop0: detected capacity change from 0 to 16
[  135.049090][ T5517] usb 3-1: USB disconnect, device number 5
[  135.077337][ T6052] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  135.120862][ T4294] udevd[4294]: incorrect cramfs checksum on /dev/loop0
[  135.212633][ T4294] udevd[4294]: incorrect cramfs checksum on /dev/loop0
[  135.497067][ T6065] loop1: detected capacity change from 0 to 2048
[  135.581037][ T6072] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.606210][ T6071] loop0: detected capacity change from 0 to 1024
[  135.650885][ T6067] loop4: detected capacity change from 0 to 4096
[  135.685653][ T6065] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '..'
[  135.742094][ T6065] Remounting filesystem read-only
[  135.806708][ T4625] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  135.877182][ T6078] loop2: detected capacity change from 0 to 64
[  135.938671][ T1483] hfsplus: b-tree write err: -5, ino 4
[  136.201697][ T6090] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  136.201697][ T6090] The task syz.0.628 (6090) triggered the difference, watch for misbehavior.
[  136.220277][ T4265] hid-generic 0005:0B57:0009.0009: collection stack underflow
[  136.246938][ T4625] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  136.257069][ T4625] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  136.282415][ T4265] hid-generic 0005:0B57:0009.0009: item 0 0 0 12 parsing failed
[  136.300741][ T6094] loop1: detected capacity change from 0 to 1024
[  136.322166][ T4265] hid-generic: probe of 0005:0B57:0009.0009 failed with error -22
[  136.382854][ T6094] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  136.398367][ T6094] EXT4-fs (loop1): Ignoring removed bh option
[  136.404608][ T6094] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  136.457018][ T4625] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  136.470841][ T4625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.484600][ T6094] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,i_version,mblk_io_submit,grpid,data_err=ignore,mb_optimize_scan=0x0000000000000001,lazytime,max_batch_time=0x0000000000000078,noquota,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[  136.533622][ T4625] usb 4-1: Product: syz
[  136.547776][ T4625] usb 4-1: Manufacturer: syz
[  136.552450][ T4625] usb 4-1: SerialNumber: syz
[  136.566037][ T4625] usb 4-1: config 0 descriptor??
[  136.591965][ T6069] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  136.602622][ T6069] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  136.736631][ T6105] loop1: detected capacity change from 0 to 64
[  136.804014][   T26] audit: type=1800 audit(1747073827.036:12): pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.636" name="file1" dev="overlay" ino=5 res=0 errno=0
[  136.840380][ T6069] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  136.847849][ T6069] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  136.856995][ T4590] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  136.873194][ T4171] Trying to free block not in datazone
[  136.963118][ T6109] loop0: detected capacity change from 0 to 256
[  136.970092][ T6108] loop1: detected capacity change from 0 to 256
[  137.004360][ T6108] FAT-fs (loop1): Directory bread(block 64) failed
[  137.019643][ T6109] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  137.040301][ T6108] FAT-fs (loop1): Directory bread(block 65) failed
[  137.056076][ T6108] FAT-fs (loop1): Directory bread(block 66) failed
[  137.066388][ T6109] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  137.076842][ T6108] FAT-fs (loop1): Directory bread(block 67) failed
[  137.086458][ T6108] FAT-fs (loop1): Directory bread(block 68) failed
[  137.096170][ T6108] FAT-fs (loop1): Directory bread(block 69) failed
[  137.103660][ T6108] FAT-fs (loop1): Directory bread(block 70) failed
[  137.110825][ T6108] FAT-fs (loop1): Directory bread(block 71) failed
[  137.116977][ T4590] usb 5-1: Using ep0 maxpacket: 8
[  137.122866][ T6108] FAT-fs (loop1): Directory bread(block 72) failed
[  137.130039][ T6108] FAT-fs (loop1): Directory bread(block 73) failed
[  137.140670][ T6109] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  137.239248][ T4590] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.266209][ T4590] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  137.339700][ T4625] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  137.407467][ T6113] loop0: detected capacity change from 0 to 512
[  137.411452][ T6111] mmap: syz.1.640 (6111) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  137.449870][ T6113] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  137.514030][ T4590] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  137.534794][ T6113] EXT4-fs (loop0): 1 truncate cleaned up
[  137.548859][ T4590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.557716][ T4625] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  137.586743][ T6113] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  137.640538][ T4625] usb 4-1: USB disconnect, device number 9
[  137.657022][ T4590] usb 5-1: Product: syz
[  137.681719][ T4590] usb 5-1: Manufacturer: syz
[  137.686373][ T4590] usb 5-1: SerialNumber: syz
[  138.063169][ T6120] loop2: detected capacity change from 0 to 32768
[  138.092468][ T4590] cdc_ncm 5-1:1.0: bind() failure
[  138.101161][ T4590] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  138.105378][ T6128] loop0: detected capacity change from 0 to 8192
[  138.108251][ T4590] cdc_ncm 5-1:1.1: bind() failure
[  138.129172][ T4590] usb 5-1: USB disconnect, device number 6
[  138.147664][ T5517] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  138.203381][ T6120] XFS (loop2): Mounting V5 Filesystem
[  138.250297][ T6128] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  138.288297][ T6128] REISERFS (device loop0): using ordered data mode
[  138.294860][ T6128] reiserfs: using flush barriers
[  138.376759][ T6128] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  138.399777][ T6120] XFS (loop2): Ending clean mount
[  138.427623][ T6143] IPv6: Can't replace route, no match found
[  138.441703][ T6128] REISERFS (device loop0): checking transaction log (loop0)
[  138.535355][ T4176] XFS (loop2): Unmounting Filesystem
[  138.606980][ T5517] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.763479][ T4590] kernel write not supported for file /input/event2 (pid: 4590 comm: kworker/0:14)
[  138.773914][ T5517] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  138.783479][ T5517] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9
[  138.796829][ T5517] usb 2-1: Manufacturer: syz
[  138.801469][ T5517] usb 2-1: SerialNumber: syz
[  138.805411][ T6128] REISERFS (device loop0): Using tea hash to sort names
[  138.809007][ T5517] usb 2-1: config 0 descriptor??
[  138.828333][ T6128] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  138.856491][ T6151] loop4: detected capacity change from 0 to 128
[  138.940863][ T6151] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  138.972946][ T6151] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  139.119820][ T5517] usb 2-1: USB disconnect, device number 8
[  139.155286][ T6157] netlink: 2 bytes leftover after parsing attributes in process `syz.4.656'.
[  139.731603][ T6175] loop2: detected capacity change from 0 to 2048
[  139.864281][ T6175] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  139.897149][ T4395] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  140.015235][ T6175] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  140.124702][ T6175] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 1 with error 28
[  140.149493][ T6175] EXT4-fs (loop2): This should not happen!! Data will be lost
[  140.149493][ T6175] 
[  140.169478][ T6175] EXT4-fs (loop2): Total free blocks count 0
[  140.175845][ T6175] EXT4-fs (loop2): Free/Dirty block details
[  140.182708][ T6175] EXT4-fs (loop2): free_blocks=2415919104
[  140.189316][ T6175] EXT4-fs (loop2): dirty_blocks=16
[  140.194649][ T6175] EXT4-fs (loop2): Block reservation details
[  140.206212][ T6175] EXT4-fs (loop2): i_reserved_data_blocks=1
[  140.287638][ T5105] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  140.312245][ T5105] EXT4-fs (loop2): This should not happen!! Data will be lost
[  140.312245][ T5105] 
[  140.426672][ T4590] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  140.504215][ T6194] loop3: detected capacity change from 0 to 32768
[  140.562926][ T6194] ERROR: (device loop3): dbAlloc: unable to allocate blocks
[  140.562926][ T6194] 
[  140.567168][ T6205] loop1: detected capacity change from 0 to 1024
[  140.581522][ T6194] ERROR: (device loop3): remounting filesystem as read-only
[  140.591856][ T6194] jfs_create: dtInsert returned -EIO
[  140.598357][ T6194] ERROR: (device loop3): jfs_create: 
[  140.598357][ T6194] 
[  140.653112][   T26] audit: type=1800 audit(1747073830.886:13): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.676" name="file1" dev="loop1" ino=20 res=0 errno=0
[  140.748628][ T4585] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  140.829574][ T4590] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.850015][ T4590] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  140.977025][ T4590] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  141.000047][ T4590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  141.021934][ T4590] usb 5-1: SerialNumber: syz
[  141.032204][ T4585] usb 3-1: Using ep0 maxpacket: 32
[  141.192425][ T4585] usb 3-1: config 0 has an invalid interface number: 3 but max is 0
[  141.206598][ T4585] usb 3-1: config 0 has no interface number 0
[  141.339613][ T4590] usb 5-1: 0:2 : does not exist
[  141.347066][ T6208] loop3: detected capacity change from 0 to 32768
[  141.372397][ T6208] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.677 (6208)
[  141.387632][ T4590] usb 5-1: USB disconnect, device number 7
[  141.417154][ T4585] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  141.426248][ T4585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.458728][ T4585] usb 3-1: Product: syz
[  141.462947][ T4585] usb 3-1: Manufacturer: syz
[  141.484708][ T4585] usb 3-1: SerialNumber: syz
[  141.497733][ T4585] usb 3-1: config 0 descriptor??
[  141.514468][ T6208] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  141.533450][ T6212] loop1: detected capacity change from 0 to 32768
[  141.544827][ T6208] BTRFS info (device loop3): enabling auto defrag
[  141.557844][ T4585] smsc95xx v2.0.0
[  141.565149][ T6208] BTRFS info (device loop3): doing ref verification
[  141.574634][ T6212] (syz.1.679,6212,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  141.588620][ T6208] BTRFS info (device loop3): max_inline at 0
[  141.594658][ T6208] BTRFS info (device loop3): force clearing of disk cache
[  141.610757][ T6208] BTRFS info (device loop3): turning on sync discard
[  141.618437][ T6208] BTRFS info (device loop3): disabling free space tree
[  141.625326][ T6208] BTRFS info (device loop3): has skinny extents
[  141.632230][ T6212] (syz.1.679,6212,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  141.671373][ T6212] (syz.1.679,6212,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  141.708378][ T4463] udevd[4463]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  141.738700][ T6212] JBD2: Ignoring recovery information on journal
[  141.885617][ T6221] loop0: detected capacity change from 0 to 4096
[  141.916735][ T6208] BTRFS info (device loop3): enabling ssd optimizations
[  141.927845][ T6212] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  141.971680][ T6208] BTRFS info (device loop3): clearing free space tree
[  141.999679][ T6208] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  142.016880][ T4585] smsc95xx 3-1:0.3 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  142.027898][ T4585] smsc95xx 3-1:0.3 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  142.062508][ T6208] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  142.178503][ T6212] (syz.1.679,6212,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  142.233363][ T6212] (syz.1.679,6212,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  142.288151][ T4585] smsc95xx 3-1:0.3 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  142.293395][ T6212] (syz.1.679,6212,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  142.313029][ T4585] smsc95xx: probe of 3-1:0.3 failed with error -71
[  142.321201][ T6212] (syz.1.679,6212,1):ocfs2_quota_read:201 ERROR: status = -5
[  142.329423][ T6212] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 5
[  142.333225][ T4585] usb 3-1: USB disconnect, device number 6
[  142.441439][ T6212] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  142.461292][ T6212] (syz.1.679,6212,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  142.469270][ T6244] (syz.1.679,6244,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  142.546449][ T4590] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  142.546824][ T6212] (syz.1.679,6212,1):ocfs2_mknod:314 ERROR: status = -5
[  142.611066][ T6244] (syz.1.679,6244,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  142.644800][ T6212] (syz.1.679,6212,1):ocfs2_mknod:502 ERROR: status = -5
[  142.665042][ T6244] (syz.1.679,6244,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  142.694580][ T6244] (syz.1.679,6244,1):ocfs2_quota_read:201 ERROR: status = -5
[  142.699358][ T6212] (syz.1.679,6212,0):ocfs2_create:676 ERROR: status = -5
[  142.758814][ T6244] Quota error (device loop1): find_next_id: Can't read quota tree block 5
[  142.790651][ T6250] loop0: detected capacity change from 0 to 64
[  142.802520][ T6244] (syz.1.679,6244,1):ocfs2_get_next_id:909 ERROR: status = -5
[  142.885169][ T4171] ocfs2: Unmounting device (7,1) on (node local)
[  142.932268][ T4590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.938147][ T6254] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  142.949177][ T4590] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  142.993960][ T4590] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  143.038902][ T4590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.060989][ T4590] usb 5-1: config 0 descriptor??
[  143.133133][ T6256] loop3: detected capacity change from 0 to 512
[  143.351893][ T6266] loop0: detected capacity change from 0 to 256
[  143.405554][ T6266] exFAT-fs (loop0): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[  143.447248][ T6256] EXT4-fs (loop3): Test dummy encryption mode enabled
[  143.476996][ T6256] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  143.489454][   T26] audit: type=1800 audit(1747073833.726:14): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.692" name="file1" dev="loop0" ino=1048661 res=0 errno=0
[  143.524468][ T6270] exFAT-fs (loop0): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5)
[  143.550628][ T4590] hid-generic 0003:07B5:0312.000A: unknown main item tag 0x3
[  143.587786][ T6256] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.690: bad orphan inode 131083
[  143.598886][ T4590] hid-generic 0003:07B5:0312.000A: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.4-1/input0
[  143.629647][ T6270] exFAT-fs (loop0): Filesystem has been set read-only
[  143.652343][ T6266] exFAT-fs (loop0): hint_cluster is invalid (521)
[  143.669916][ T6256] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  143.712325][ T6266] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000208)
[  143.747006][ T6266] exFAT-fs (loop0): error, failed to bmap (inode : ffff888061c921e0 iblock : 9, err : -5)
[  143.832575][ T4590] usb 5-1: USB disconnect, device number 8
[  143.874882][ T6266] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000208)
[  143.920313][ T6278] loop1: detected capacity change from 0 to 256
[  143.931943][ T6276] fido_id[6276]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  143.960756][ T6266] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000208)
[  144.124441][ T6278] FAT-fs (loop1): Directory bread(block 64) failed
[  144.138435][ T6278] FAT-fs (loop1): Directory bread(block 65) failed
[  144.161825][ T6278] FAT-fs (loop1): Directory bread(block 66) failed
[  144.192140][ T6278] FAT-fs (loop1): Directory bread(block 67) failed
[  144.206701][ T6278] FAT-fs (loop1): Directory bread(block 68) failed
[  144.213295][ T6278] FAT-fs (loop1): Directory bread(block 69) failed
[  144.279684][ T6278] FAT-fs (loop1): Directory bread(block 70) failed
[  144.286294][ T6278] FAT-fs (loop1): Directory bread(block 71) failed
[  144.326338][ T6278] FAT-fs (loop1): Directory bread(block 72) failed
[  144.356233][ T6278] FAT-fs (loop1): Directory bread(block 73) failed
[  144.706668][ T4265] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  144.731780][ T6290] loop0: detected capacity change from 0 to 8192
[  144.759409][ T4214] hid-generic 0005:0B57:0009.000B: collection stack underflow
[  144.773095][ T4214] hid-generic 0005:0B57:0009.000B: item 0 0 0 12 parsing failed
[  144.781956][ T4214] hid-generic: probe of 0005:0B57:0009.000B failed with error -22
[  144.794487][ T6290] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  144.826370][ T6290] REISERFS (device loop0): using ordered data mode
[  144.834633][ T6301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.705'.
[  144.853178][ T6290] reiserfs: using flush barriers
[  144.876828][ T6290] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  144.946659][ T4265] usb 3-1: Using ep0 maxpacket: 32
[  144.992667][ T6290] REISERFS (device loop0): checking transaction log (loop0)
[  144.998462][ T6304] loop1: detected capacity change from 0 to 1024
[  145.067017][ T4265] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  145.101505][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.134653][ T4265] usb 3-1: config 0 descriptor??
[  145.252783][ T6304] hfsplus: catalog searching failed
[  145.267639][ T6280] loop3: detected capacity change from 0 to 40427
[  145.287708][ T6290] REISERFS (device loop0): Using tea hash to sort names
[  145.296222][ T6290] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  145.298398][ T6280] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  145.322618][ T6280] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  145.371076][ T6280] F2FS-fs (loop3): invalid crc value
[  145.394362][ T4223] hfsplus: b-tree write err: -5, ino 3
[  145.406781][ T4265] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  145.425219][ T4265] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  145.438420][ T6280] F2FS-fs (loop3): Found nat_bits in checkpoint
[  145.467195][ T4265] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  145.474550][ T4265] usb 3-1: media controller created
[  145.576327][ T4265] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  145.628956][ T6280] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  145.636169][ T6280] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  145.666715][ T4265] az6027: usb out operation failed. (-71)
[  145.686740][ T4265] az6027: usb out operation failed. (-71)
[  145.693235][ T4265] stb0899_attach: Driver disabled by Kconfig
[  145.758396][ T4265] az6027: no front-end attached
[  145.758396][ T4265] 
[  145.780917][ T4265] az6027: usb out operation failed. (-71)
[  145.796794][ T4265] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  145.847460][ T4265] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[  145.905401][ T4265] dvb-usb: schedule remote query interval to 400 msecs.
[  145.933227][ T4265] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  146.006220][ T4265] usb 3-1: USB disconnect, device number 7
[  146.129172][ T4265] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  146.656783][ T4265] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  146.896662][ T4265] usb 3-1: Using ep0 maxpacket: 8
[  147.016953][ T4265] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  147.026233][ T4265] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  147.073775][ T4265] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  147.105025][ T4265] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  147.135674][ T4265] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  147.169586][ T4265] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  147.186869][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.261730][ T6337] loop0: detected capacity change from 0 to 32768
[  147.264710][ T6375] loop3: detected capacity change from 0 to 128
[  147.333192][ T6375] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  147.467344][ T4265] usb 3-1: GET_CAPABILITIES returned 0
[  147.472933][ T4265] usbtmc 3-1:16.0: can't read capabilities
[  147.546075][ T6375] FAT-fs (loop3): FAT read failed (blocknr 128)
[  147.729849][ T4590] usb 3-1: USB disconnect, device number 8
[  147.774617][ T5105] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  148.169987][ T6377] loop1: detected capacity change from 0 to 32768
[  148.205082][ T6379] loop4: detected capacity change from 0 to 32768
[  148.342645][ T6379] XFS (loop4): Mounting V5 Filesystem
[  148.431256][ T6389] loop0: detected capacity change from 0 to 32768
[  148.458376][ T6400] loop2: detected capacity change from 0 to 4096
[  148.488094][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.736'.
[  148.507282][ T6389] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  148.558095][  T154] (kworker/u4:2,154,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  148.566636][ T6379] XFS (loop4): Ending clean mount
[  148.653083][ T6412] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.705017][   T26] audit: type=1800 audit(1747073838.936:15): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.733" name="file1" dev="loop2" ino=15 res=0 errno=0
[  148.768790][ T4182] XFS (loop4): Unmounting Filesystem
[  148.777719][ T6411] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  148.989479][ T4168] ocfs2: Unmounting device (7,0) on (node local)
[  149.594409][ T6434] loop0: detected capacity change from 0 to 512
[  149.709899][ T6434] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.746: inode #1: comm syz.0.746: iget: illegal inode #
[  149.779989][ T6434] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.746: error while reading EA inode 1 err=-117
[  149.800950][ T6442] loop9: detected capacity change from 0 to 8
[  149.808549][ T6434] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.746: inode #1: comm syz.0.746: iget: illegal inode #
[  149.838572][ T6434] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.746: error while reading EA inode 1 err=-117
[  149.872192][ T6442]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  149.882188][ T6434] EXT4-fs (loop0): 1 orphan inode deleted
[  149.887420][ T6442] loop9: partition table partially beyond EOD, truncated
[  149.896968][ T6434] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback.
[  149.924718][ T6442] loop9: p1 size 81768186 extends beyond EOD, truncated
[  150.106404][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  150.140002][ T6459] loop2: detected capacity change from 0 to 256
[  150.257819][ T6459] FAT-fs (loop2): Directory bread(block 64) failed
[  150.274061][ T6459] FAT-fs (loop2): Directory bread(block 65) failed
[  150.286789][ T6459] FAT-fs (loop2): Directory bread(block 66) failed
[  150.302967][ T6459] FAT-fs (loop2): Directory bread(block 67) failed
[  150.344139][ T6459] FAT-fs (loop2): Directory bread(block 68) failed
[  150.361427][ T6459] FAT-fs (loop2): Directory bread(block 69) failed
[  150.378702][ T6468] loop4: detected capacity change from 0 to 256
[  150.382539][ T6459] FAT-fs (loop2): Directory bread(block 70) failed
[  150.414212][ T6459] FAT-fs (loop2): Directory bread(block 71) failed
[  150.433492][ T6459] FAT-fs (loop2): Directory bread(block 72) failed
[  150.473581][ T6459] FAT-fs (loop2): Directory bread(block 73) failed
[  150.552896][ T6468] FAT-fs (loop4): Directory bread(block 64) failed
[  150.573025][ T6468] FAT-fs (loop4): Directory bread(block 65) failed
[  150.607245][ T6468] FAT-fs (loop4): Directory bread(block 66) failed
[  150.627075][ T6468] FAT-fs (loop4): Directory bread(block 67) failed
[  150.643378][ T6475] loop3: detected capacity change from 0 to 16
[  150.650116][ T6468] FAT-fs (loop4): Directory bread(block 68) failed
[  150.683144][ T6468] FAT-fs (loop4): Directory bread(block 69) failed
[  150.694454][ T6468] FAT-fs (loop4): Directory bread(block 70) failed
[  150.713213][ T6468] FAT-fs (loop4): Directory bread(block 71) failed
[  150.748404][ T6475] erofs: (device loop3): mounted with root inode @ nid 36.
[  150.755603][   T26] audit: type=1800 audit(1747073840.986:16): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.755" name="bus" dev="loop2" ino=1048663 res=0 errno=0
[  150.756498][ T6468] FAT-fs (loop4): Directory bread(block 72) failed
[  150.837754][ T6468] FAT-fs (loop4): Directory bread(block 73) failed
[  150.846429][   T26] audit: type=1804 audit(1747073840.986:17): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.755" name="/newroot/145/bus/bus" dev="loop2" ino=1048663 res=1 errno=0
[  151.102703][  T154] attempt to access beyond end of device
[  151.102703][  T154] loop2: rw=1, want=1832, limit=256
[  151.142698][  T154] attempt to access beyond end of device
[  151.142698][  T154] loop2: rw=1, want=1928, limit=256
[  151.161995][ T6480] loop1: detected capacity change from 0 to 256
[  151.174098][  T154] attempt to access beyond end of device
[  151.174098][  T154] loop2: rw=1, want=3340, limit=256
[  151.197789][ T6470] loop0: detected capacity change from 0 to 32768
[  151.251732][ T6470] (syz.0.757,6470,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  151.303524][ T6470] (syz.0.757,6470,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  151.365455][ T6470] (syz.0.757,6470,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  151.403052][ T6470] JBD2: Ignoring recovery information on journal
[  151.484568][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'.
[  151.551006][ T6470] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  151.634551][ T6495] bridge: RTM_DELNEIGH with unconfigured vlan 4 on bridge0
[  151.702822][ T6470] (syz.0.757,6470,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  151.742782][ T6470] (syz.0.757,6470,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  151.768500][ T6500] loop2: detected capacity change from 0 to 256
[  151.785411][ T6470] (syz.0.757,6470,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  151.804295][ T6470] (syz.0.757,6470,0):ocfs2_quota_read:201 ERROR: status = -5
[  151.821675][ T6470] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 5
[  151.883340][ T6470] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  151.931832][ T6499] (syz.0.757,6499,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  151.997466][ T6470] (syz.0.757,6470,0):ocfs2_acquire_dquot:878 ERROR: status = -5
[  152.006972][ T6499] (syz.0.757,6499,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  152.033721][ T6470] (syz.0.757,6470,0):ocfs2_mknod:314 ERROR: status = -5
[  152.073365][ T6470] (syz.0.757,6470,0):ocfs2_mknod:502 ERROR: status = -5
[  152.094047][ T6499] (syz.0.757,6499,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  152.126697][ T6470] (syz.0.757,6470,0):ocfs2_create:676 ERROR: status = -5
[  152.163872][ T6499] (syz.0.757,6499,0):ocfs2_quota_read:201 ERROR: status = -5
[  152.200275][ T6499] Quota error (device loop0): find_next_id: Can't read quota tree block 5
[  152.226507][ T6499] (syz.0.757,6499,0):ocfs2_get_next_id:909 ERROR: status = -5
[  152.263255][ T6510] loop3: detected capacity change from 0 to 4096
[  152.321279][ T4168] ocfs2: Unmounting device (7,0) on (node local)
[  152.386157][ T6510] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  152.539215][ T6510] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback.
[  152.696370][ T6517] loop1: detected capacity change from 0 to 4096
[  152.713070][ T6518] loop0: detected capacity change from 0 to 4096
[  152.769835][ T6518] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  152.905932][ T6518] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  152.974621][ T6502] loop4: detected capacity change from 0 to 40427
[  152.992981][ T6518] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount.
[  153.001112][ T6528] loop2: detected capacity change from 0 to 1024
[  153.032345][ T6518] ntfs: (device loop0): read_ntfs_boot_sector(): Using backup boot sector.
[  153.112504][ T6518] ntfs: volume version 3.1.
[  153.122127][ T6502] F2FS-fs (loop4): Found nat_bits in checkpoint
[  153.347407][ T4223] hfsplus: b-tree write err: -5, ino 4
[  153.397559][ T6502] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  153.608517][ T6541] loop2: detected capacity change from 0 to 64
[  153.713783][ T4182] attempt to access beyond end of device
[  153.713783][ T4182] loop4: rw=2049, want=45104, limit=40427
[  153.869342][ T6547] loop2: detected capacity change from 0 to 1024
[  153.877503][ T6525] loop3: detected capacity change from 0 to 32768
[  153.919165][ T6525] (syz.3.783,6525,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  153.964822][ T6547] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,errors=remount-ro,. Quota mode: none.
[  154.022618][ T6525] (syz.3.783,6525,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  154.027424][ T6547] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.056958][ T4585] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  154.199565][ T6547] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.792: bg 0: block 393: padding at end of block bitmap is not set
[  154.220305][ T6525] (syz.3.783,6525,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  154.243971][ T6547] EXT4-fs (loop2): Remounting filesystem read-only
[  154.282884][ T6525] JBD2: Ignoring recovery information on journal
[  154.326622][ T4585] usb 2-1: Using ep0 maxpacket: 8
[  154.467807][ T4585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.480281][ T6525] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  154.529404][ T4585] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[  154.562703][ T4585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.590233][ T4585] usb 2-1: config 0 descriptor??
[  154.705232][ T6573] loop2: detected capacity change from 0 to 2048
[  154.728091][ T4173] ocfs2: Unmounting device (7,3) on (node local)
[  154.831036][ T6576] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.909782][ T6573] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  154.963910][ T6573] Remounting filesystem read-only
[  155.053934][ T4176] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  155.073277][ T4585] belkin 0003:050D:3201.000C: unknown main item tag 0x0
[  155.080898][ T4585] belkin 0003:050D:3201.000C: unknown main item tag 0x0
[  155.094792][ T4585] belkin 0003:050D:3201.000C: item fetching failed at offset 2/5
[  155.103297][ T4585] belkin 0003:050D:3201.000C: parse failed
[  155.141691][ T4585] belkin: probe of 0003:050D:3201.000C failed with error -22
[  155.285940][ T4585] usb 2-1: USB disconnect, device number 9
[  155.316706][ T4396] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  155.445457][ T6575] loop4: detected capacity change from 0 to 40427
[  155.566276][ T6575] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  155.576612][ T4396] usb 4-1: Using ep0 maxpacket: 32
[  155.585742][ T6575] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  155.663175][ T6575] F2FS-fs (loop4): invalid crc value
[  155.696833][ T4396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.717379][ T4396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.730371][ T6575] F2FS-fs (loop4): Found nat_bits in checkpoint
[  155.756888][ T4396] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  155.782909][ T4396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.846031][ T4396] usb 4-1: config 0 descriptor??
[  155.877559][ T6575] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  155.894944][ T6575] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  155.906390][ T4396] hub 4-1:0.0: USB hub found
[  155.922526][ T6605] loop2: detected capacity change from 0 to 2048
[  156.006033][ T6575] attempt to access beyond end of device
[  156.006033][ T6575] loop4: rw=2049, want=45104, limit=40427
[  156.025887][ T6605] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  156.116773][ T4396] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  156.131206][ T6612] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  156.576526][ T4396] hid-generic 0003:046D:C31C.000D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0
[  156.670896][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'.
[  156.852493][ T6635] loop2: detected capacity change from 0 to 1024
[  156.872620][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.816'.
[  156.950543][ T4585] usb 4-1: USB disconnect, device number 10
[  156.983063][ T6635] hfsplus: bad catalog entry type
[  157.075350][  T154] hfsplus: b-tree write err: -5, ino 4
[  157.367491][ T6657] loop1: detected capacity change from 0 to 256
[  157.385614][ T6622] loop0: detected capacity change from 0 to 32768
[  157.479536][ T6657] FAT-fs (loop1): Directory bread(block 64) failed
[  157.514671][ T6657] FAT-fs (loop1): Directory bread(block 65) failed
[  157.561583][ T6657] FAT-fs (loop1): Directory bread(block 66) failed
[  157.565444][ T6662] loop2: detected capacity change from 0 to 512
[  157.595388][ T6657] FAT-fs (loop1): Directory bread(block 67) failed
[  157.622050][ T6657] FAT-fs (loop1): Directory bread(block 68) failed
[  157.627496][ T6662] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  157.639201][ T6657] FAT-fs (loop1): Directory bread(block 69) failed
[  157.645837][ T6657] FAT-fs (loop1): Directory bread(block 70) failed
[  157.666848][ T6657] FAT-fs (loop1): Directory bread(block 71) failed
[  157.674564][ T6662] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  157.689092][ T6657] FAT-fs (loop1): Directory bread(block 72) failed
[  157.706421][ T6657] FAT-fs (loop1): Directory bread(block 73) failed
[  157.723425][ T6662] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  157.763907][ T6662] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  157.774381][ T6662] System zones: 0-2, 18-18, 34-35
[  157.825281][ T6662] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  158.181914][ T6675] netlink: 'syz.2.843': attribute type 12 has an invalid length.
[  158.191898][ T6671] loop1: detected capacity change from 0 to 2048
[  158.335764][ T6671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  158.380216][ T6684] ieee802154 phy0 wpan0: encryption failed: -22
[  158.506505][ T6660] loop3: detected capacity change from 0 to 32768
[  158.773324][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'.
[  158.837153][ T6697] netlink: 'syz.4.855': attribute type 1 has an invalid length.
[  158.866109][ T6697] netlink: 'syz.4.855': attribute type 2 has an invalid length.
[  158.981421][ T4172] Bluetooth: hci4: link tx timeout
[  158.987526][ T4172] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  158.999776][ T4172] Bluetooth: hci4: link tx timeout
[  159.005407][ T4172] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  159.550046][ T4214] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  159.813572][ T4214] usb 1-1: Using ep0 maxpacket: 16
[  159.879020][ T6745] loop1: detected capacity change from 0 to 512
[  159.903587][ T6745] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  159.935454][ T6745] EXT4-fs (loop1): 1 truncate cleaned up
[  159.949106][ T6745] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none.
[  160.086861][ T4395] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  160.112654][ T4214] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  160.144549][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  160.167142][ T6752] loop1: detected capacity change from 0 to 256
[  160.193833][ T4214] usb 1-1: Product: syz
[  160.206689][ T4214] usb 1-1: Manufacturer: syz
[  160.207182][ T6752] FAT-fs (loop1): count of clusters too big (178174)
[  160.211333][ T4214] usb 1-1: SerialNumber: syz
[  160.236049][ T6752] FAT-fs (loop1): Can't find a valid FAT filesystem
[  160.269544][ T4214] usb 1-1: config 0 descriptor??
[  160.302528][ T6756] loop4: detected capacity change from 0 to 512
[  160.376650][ T4395] usb 4-1: Using ep0 maxpacket: 16
[  160.409040][ T6756] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.880: inode #1: comm syz.4.880: iget: illegal inode #
[  160.496886][ T4395] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  160.505113][ T4395] usb 4-1: config 0 has no interface number 0
[  160.511612][ T4395] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  160.521944][ T4395] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  160.552284][ T6756] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.880: error while reading EA inode 1 err=-117
[  160.618325][ T6756] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.880: inode #1: comm syz.4.880: iget: illegal inode #
[  160.642168][ T6756] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.880: error while reading EA inode 1 err=-117
[  160.675820][ T6756] EXT4-fs (loop4): 1 orphan inode deleted
[  160.685210][ T6756] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback.
[  160.689643][ T4580] usb 1-1: USB disconnect, device number 10
[  160.715631][ T4395] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  160.735860][ T4395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.755102][ T4395] usb 4-1: Product: syz
[  160.764144][ T4395] usb 4-1: Manufacturer: syz
[  160.768936][ T4395] usb 4-1: SerialNumber: syz
[  160.787839][ T4395] usb 4-1: config 0 descriptor??
[  160.806975][ T6743] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  160.815977][ T6743] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  161.052159][ T6743] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  161.066984][ T4396] Bluetooth: hci4: command 0x0406 tx timeout
[  161.083900][ T6743] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  161.092929][ T6760] loop1: detected capacity change from 0 to 32768
[  161.096410][ T6766] loop2: detected capacity change from 0 to 256
[  161.197581][ T6760] XFS (loop1): Mounting V5 Filesystem
[  161.364658][ T6760] XFS (loop1): Ending clean mount
[  161.396407][ T6760] XFS (loop1): User initiated shutdown received.
[  161.417033][ T6760] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  161.485306][ T6783] loop0: detected capacity change from 0 to 1024
[  161.495902][ T6760] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  161.533589][ T6783] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  161.566997][ T4395] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  161.583634][ T6783] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none.
[  161.636874][ T4395] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  161.660918][ T4395] asix: probe of 4-1:0.251 failed with error -71
[  161.677049][ T4396] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  161.716357][ T4395] usb 4-1: USB disconnect, device number 11
[  161.749778][ T4171] XFS (loop1): Unmounting Filesystem
[  161.831312][ T6778] loop4: detected capacity change from 0 to 32768
[  161.862168][ T6778] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.888 (6778)
[  161.930014][ T4396] usb 3-1: Using ep0 maxpacket: 8
[  161.943855][ T6778] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  161.973916][ T6778] BTRFS info (device loop4): force zlib compression, level 3
[  161.993081][ T6778] BTRFS info (device loop4): force clearing of disk cache
[  162.004076][ T6778] BTRFS info (device loop4): setting nodatasum
[  162.022279][ T6778] BTRFS info (device loop4): doing ref verification
[  162.042517][ T6778] BTRFS info (device loop4): allowing degraded mounts
[  162.056958][ T4396] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  162.076689][ T6778] BTRFS info (device loop4): enabling disk space caching
[  162.083777][ T6778] BTRFS info (device loop4): disk space caching is enabled
[  162.098581][ T4396] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  162.142135][ T4396] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  162.155646][ T6778] BTRFS info (device loop4): has skinny extents
[  162.181334][ T4396] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  162.203806][ T4396] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  162.215831][ T4396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.376828][ T6778] BTRFS info (device loop4): enabling ssd optimizations
[  162.393416][ T6778] BTRFS info (device loop4): clearing free space tree
[  162.409283][ T6778] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  162.446670][ T6778] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  162.516937][ T4396] usb 3-1: GET_CAPABILITIES returned 0
[  162.522727][ T4396] usbtmc 3-1:16.0: can't read capabilities
[  162.618310][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.899'.
[  162.664175][ T6828] loop3: detected capacity change from 0 to 8
[  162.764004][ T4396] usb 3-1: USB disconnect, device number 9
[  162.856797][ T4585] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  162.920363][ T6830] loop1: detected capacity change from 0 to 4096
[  162.946134][ T6830] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  162.980218][ T6833] binder: 6832:6833 ioctl c0306201 200000000040 returned -14
[  163.130466][ T6830] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  163.137826][ T4585] usb 1-1: Using ep0 maxpacket: 16
[  163.167536][ T6830] ntfs3: loop1: Failed to load $Extend.
[  163.330500][ T4585] usb 1-1: config 0 has an invalid interface number: 243 but max is 0
[  163.338801][ T4585] usb 1-1: config 0 has no interface number 0
[  163.350921][ T4585] usb 1-1: config 0 interface 243 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  163.368150][ T6837] loop2: detected capacity change from 0 to 512
[  163.434129][ T6839] loop3: detected capacity change from 0 to 2048
[  163.442106][ T6837] EXT4-fs (loop2): Ignoring removed orlov option
[  163.502587][ T6837] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.905: casefold flag without casefold feature
[  163.513890][ T6842] loop1: detected capacity change from 0 to 512
[  163.546760][ T4585] usb 1-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=d0.ce
[  163.559941][ T4585] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.612522][ T6837] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.905: couldn't read orphan inode 15 (err -117)
[  163.653594][ T6842] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,grpquota,,errors=continue. Quota mode: writeback.
[  163.666221][ T4585] usb 1-1: Product: syz
[  163.676325][ T6837] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback.
[  163.677591][ T6842] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.689377][ T4585] usb 1-1: Manufacturer: syz
[  163.704032][ T4585] usb 1-1: SerialNumber: syz
[  163.711017][ T4585] usb 1-1: config 0 descriptor??
[  163.736876][ T6824] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  163.758472][ T4585] keyspan 1-1:0.243: Keyspan 1 port adapter converter detected
[  163.766891][ T4585] keyspan 1-1:0.243: found no endpoint descriptor for endpoint 84
[  163.780443][ T4585] keyspan 1-1:0.243: found no endpoint descriptor for endpoint 82
[  163.789104][ T4585] keyspan 1-1:0.243: found no endpoint descriptor for endpoint 1
[  163.797194][ T4585] keyspan 1-1:0.243: found no endpoint descriptor for endpoint 2
[  163.805203][ T4585] keyspan 1-1:0.243: found no endpoint descriptor for endpoint 83
[  163.807415][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  163.807430][   T26] audit: type=1800 audit(1747073854.046:19): pid=6837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.905" name="file1" dev="loop2" ino=18 res=0 errno=0
[  163.813704][ T4585] keyspan 1-1:0.243: found no endpoint descriptor for endpoint 3
[  163.856482][ T4585] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  163.932305][ T6842] EXT4-fs error (device loop1): ext4_remount:5855: comm syz.1.906: Abort forced by user
[  163.980107][ T6842] EXT4-fs (loop1): Remounting filesystem read-only
[  164.014361][ T6842] EXT4-fs warning (device loop1): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed
[  164.093768][ T4639] usb 1-1: USB disconnect, device number 11
[  164.122925][ T4639] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  164.133246][ T4639] keyspan 1-1:0.243: device disconnected
[  164.201651][ T6858] loop3: detected capacity change from 0 to 2048
[  164.269960][ T6858] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.534640][ T6875] netlink: 'syz.2.918': attribute type 21 has an invalid length.
[  164.548791][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'.
[  164.635687][ T6877] loop4: detected capacity change from 0 to 1024
[  164.881682][ T6877] EXT4-fs (loop4): Ignoring removed nobh option
[  164.914335][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.926'.
[  164.922438][ T6877] EXT4-fs (loop4): Ignoring removed bh option
[  164.950362][ T6877] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  164.967042][ T6892] loop2: detected capacity change from 0 to 256
[  165.014379][ T6896] loop0: detected capacity change from 0 to 128
[  165.085878][ T6892] FAT-fs (loop2): Directory bread(block 64) failed
[  165.086061][ T6877] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  165.098829][ T6892] FAT-fs (loop2): Directory bread(block 65) failed
[  165.128708][ T6892] FAT-fs (loop2): Directory bread(block 66) failed
[  165.135361][ T6892] FAT-fs (loop2): Directory bread(block 67) failed
[  165.152106][ T6904] loop3: detected capacity change from 0 to 128
[  165.175419][ T6892] FAT-fs (loop2): Directory bread(block 68) failed
[  165.182891][ T6892] FAT-fs (loop2): Directory bread(block 69) failed
[  165.189648][ T6892] FAT-fs (loop2): Directory bread(block 70) failed
[  165.190206][ T6896] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nouid32,,errors=continue. Quota mode: writeback.
[  165.196366][ T6892] FAT-fs (loop2): Directory bread(block 71) failed
[  165.215359][ T6892] FAT-fs (loop2): Directory bread(block 72) failed
[  165.222002][ T6892] FAT-fs (loop2): Directory bread(block 73) failed
[  165.254435][   T26] audit: type=1800 audit(1747073855.486:20): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.920" name="bus" dev="loop4" ino=18 res=0 errno=0
[  165.301220][ T6896] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.370514][ T6904] VFS: Found a Xenix FS (block size = 512) on device loop3
[  165.410851][ T6904] attempt to access beyond end of device
[  165.410851][ T6904] loop3: rw=0, want=8767745, limit=128
[  165.478700][ T6904] Buffer I/O error on dev loop3, logical block 8767744, async page read
[  165.507038][ T6904] attempt to access beyond end of device
[  165.507038][ T6904] loop3: rw=0, want=13269810, limit=128
[  165.597530][ T6904] Buffer I/O error on dev loop3, logical block 13269809, async page read
[  165.650746][ T6904] attempt to access beyond end of device
[  165.650746][ T6904] loop3: rw=0, want=1158, limit=128
[  165.670557][ T6909] loop2: detected capacity change from 0 to 2048
[  165.704101][ T6904] Buffer I/O error on dev loop3, logical block 1157, async page read
[  165.736793][ T6904] attempt to access beyond end of device
[  165.736793][ T6904] loop3: rw=0, want=3211265, limit=128
[  165.754985][ T6904] Buffer I/O error on dev loop3, logical block 3211264, async page read
[  165.764834][ T6904] attempt to access beyond end of device
[  165.764834][ T6904] loop3: rw=0, want=8768636, limit=128
[  165.776434][ T6904] Buffer I/O error on dev loop3, logical block 8768635, async page read
[  165.783955][ T6909] UDF-fs: bad mount option "uid=" or missing value
[  165.827597][ T6904] attempt to access beyond end of device
[  165.827597][ T6904] loop3: rw=0, want=13466418, limit=128
[  165.876811][ T6904] Buffer I/O error on dev loop3, logical block 13466417, async page read
[  165.902212][ T6904] attempt to access beyond end of device
[  165.902212][ T6904] loop3: rw=0, want=209286, limit=128
[  165.913770][ T6904] Buffer I/O error on dev loop3, logical block 209285, async page read
[  165.924601][ T6904] attempt to access beyond end of device
[  165.924601][ T6904] loop3: rw=0, want=8767745, limit=128
[  165.974592][ T6904] Buffer I/O error on dev loop3, logical block 8767744, async page read
[  165.986810][ T4585] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  166.026934][ T6904] attempt to access beyond end of device
[  166.026934][ T6904] loop3: rw=0, want=13269810, limit=128
[  166.102829][ T6904] Buffer I/O error on dev loop3, logical block 13269809, async page read
[  166.143579][ T6904] attempt to access beyond end of device
[  166.143579][ T6904] loop3: rw=0, want=1158, limit=128
[  166.175094][ T6904] Buffer I/O error on dev loop3, logical block 1157, async page read
[  166.220031][   T26] audit: type=1800 audit(1747073856.456:21): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.932" name="/" dev="loop3" ino=2 res=0 errno=0
[  166.263430][ T6902] loop1: detected capacity change from 0 to 32768
[  166.291086][ T4173] sysv_free_block: trying to free block not in datazone
[  166.316645][ T4585] usb 1-1: Using ep0 maxpacket: 32
[  166.324104][ T4173] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  166.352706][ T6902] (syz.1.931,6902,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  166.381774][ T6902] (syz.1.931,6902,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  166.434714][ T6902] (syz.1.931,6902,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  166.464182][ T6902] JBD2: Ignoring recovery information on journal
[  166.477294][ T4585] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  166.485459][ T4585] usb 1-1: config 0 has no interface number 0
[  166.555046][ T6902] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  166.727058][ T4585] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  166.736163][ T4585] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.767652][ T4585] usb 1-1: Product: syz
[  166.782454][ T4585] usb 1-1: Manufacturer: syz
[  166.792116][ T4585] usb 1-1: SerialNumber: syz
[  166.806320][ T4585] usb 1-1: config 0 descriptor??
[  166.838821][ T4171] ocfs2: Unmounting device (7,1) on (node local)
[  166.853778][ T4585] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  167.094014][ T4585] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  167.125265][ T4585] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  167.319836][ T6936] loop2: detected capacity change from 0 to 40427
[  167.336764][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short
[  167.348857][ T4585] usb 2-1: new low-speed USB device number 10 using dummy_hcd
[  167.401033][ T6936] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff
[  167.435810][ T6936] F2FS-fs (loop2): invalid crc value
[  167.470413][ T6936] F2FS-fs (loop2): Found nat_bits in checkpoint
[  167.532379][ T4580] usb 1-1: USB disconnect, device number 12
[  167.546643][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  167.558783][ T4580] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  167.616671][ T4580] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  167.678033][ T4580] quatech2 1-1:0.51: device disconnected
[  167.690207][ T6936] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  167.762470][ T4585] usb 2-1: config 252 has an invalid interface number: 101 but max is 0
[  167.785845][ T4585] usb 2-1: config 252 has no interface number 0
[  167.816699][ T4585] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  167.846261][ T4585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.943820][ T4585] pvrusb2: Hardware description: Terratec Grabster AV400
[  167.960599][ T4585] pvrusb2: **********
[  167.973068][ T4585] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  168.013260][ T4585] pvrusb2: Important functionality might not be entirely working.
[  168.031074][ T4585] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  168.054116][ T4585] pvrusb2: **********
[  168.159898][ T2426] pvrusb2: Invalid write control endpoint
[  168.214752][ T6980] loop0: detected capacity change from 0 to 2048
[  168.339915][ T6980] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.351481][ T2426] pvrusb2: Invalid write control endpoint
[  168.436890][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  168.454384][ T6985] loop4: detected capacity change from 0 to 1024
[  168.481260][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  168.516601][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  168.546635][ T2426] pvrusb2: Device being rendered inoperable
[  168.565410][ T6985] hfsplus: bad catalog entry type
[  168.622089][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  168.653359][ T1483] hfsplus: b-tree write err: -5, ino 4
[  168.658729][ T4580] usb 2-1: USB disconnect, device number 10
[  168.665589][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  168.690572][ T6987] netlink: 'syz.0.965': attribute type 4 has an invalid length.
[  168.763570][ T2426] pvrusb2: Attached sub-driver cx25840
[  168.782002][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  168.852959][ T6970] loop3: detected capacity change from 0 to 40427
[  168.882039][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  168.921694][ T6993] loop2: detected capacity change from 0 to 512
[  168.973058][ T6970] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  169.006825][ T6970] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  169.009620][ T6970] F2FS-fs (loop3): invalid crc value
[  169.021144][ T6993] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  169.063994][ T6993] EXT4-fs (loop2): 1 truncate cleaned up
[  169.064022][ T6993] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  169.103742][ T6970] F2FS-fs (loop3): Found nat_bits in checkpoint
[  169.422038][ T6970] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  169.441639][ T6970] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  169.629107][ T7013] loop4: detected capacity change from 0 to 2048
[  169.720231][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.976'.
[  169.814330][ T7022] loop1: detected capacity change from 0 to 2048
[  169.828885][ T7013] UDF-fs: bad mount option "uid=" or missing value
[  169.911952][ T7022] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  170.008660][ T7027] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.113203][ T7030] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 3044605952
[  170.146680][ T7030] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15)
[  170.240799][ T7030] Remounting filesystem read-only
[  170.256236][ T7030] NILFS (loop1): error -5 truncating bmap (ino=15)
[  170.405346][ T4171] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  170.805140][ T7048] loop1: detected capacity change from 0 to 1024
[  170.922330][ T7048] EXT4-fs (loop1): Ignoring removed nobh option
[  170.939190][ T7048] EXT4-fs (loop1): Ignoring removed bh option
[  170.945334][ T7048] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  171.099991][ T7048] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  171.241441][ T7061] loop3: detected capacity change from 0 to 512
[  171.258747][   T26] audit: type=1800 audit(1747073861.496:22): pid=7048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.989" name="bus" dev="loop1" ino=18 res=0 errno=0
[  171.345381][ T7062] loop0: detected capacity change from 0 to 1764
[  171.437605][ T7061] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.994: casefold flag without casefold feature
[  171.542040][ T7061] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.994: couldn't read orphan inode 15 (err -117)
[  171.580768][ T7061] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  171.616983][ T7062] iso9660: Corrupted directory entry in block 2 of inode 1920
[  171.686664][ T7050] loop2: detected capacity change from 0 to 40427
[  171.759950][ T7050] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(83886083)
[  171.784013][ T7070] loop4: detected capacity change from 0 to 4096
[  171.796683][ T7050] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  171.848570][ T7050] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff
[  171.955951][ T7050] F2FS-fs (loop2): invalid crc value
[  172.032068][ T7050] F2FS-fs (loop2): Found nat_bits in checkpoint
[  172.040676][ T7079] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  172.266372][ T7050] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  172.294977][ T7050] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  172.462996][ T7089] Â: renamed from pim6reg1
[  172.557107][ T4176] handle_bad_sector: 5 callbacks suppressed
[  172.557129][ T4176] attempt to access beyond end of device
[  172.557129][ T4176] loop2: rw=2049, want=45104, limit=40427
[  172.751265][ T7098] loop3: detected capacity change from 0 to 256
[  172.818323][ T7098] exfat: Deprecated parameter 'namecase'
[  172.824090][ T7098] exfat: Deprecated parameter 'utf8'
[  172.888408][ T7098] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  172.936072][ T7104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1013'.
[  173.191961][ T7109] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1015'.
[  173.222252][ T7111] netlink: 'syz.1.1016': attribute type 25 has an invalid length.
[  173.303518][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'.
[  173.306826][ T4396] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[  173.716875][ T4396] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  173.724338][ T4396] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  173.780989][ T4396] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  173.825622][ T4396] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  173.869130][ T7128] netlink: 110 bytes leftover after parsing attributes in process `syz.2.1007'.
[  173.898828][ T4396] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  174.016936][ T4396] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  174.024437][ T4396] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  174.083992][ T4396] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  174.124623][ T4396] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  174.182377][ T4396] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  174.312694][ T4396] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  174.324868][ T4396] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  174.395269][ T4396] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  174.435214][ T4396] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  174.492030][ T4396] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  174.689606][ T7142] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1029'.
[  174.743754][ T7120] loop3: detected capacity change from 0 to 32768
[  174.771160][ T4396] usb 1-1: string descriptor 0 read error: -22
[  174.790648][ T4396] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  174.820215][ T4396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.843014][ T7120] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1019 (7120)
[  174.951288][ T7120] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  174.971194][ T4396] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  175.008197][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1034'.
[  175.008828][ T7124] loop4: detected capacity change from 0 to 32768
[  175.032555][ T7120] BTRFS info (device loop3): force zlib compression, level 3
[  175.092581][ T7120] BTRFS info (device loop3): force clearing of disk cache
[  175.102899][ T7124] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1022 (7124)
[  175.171675][ T7120] BTRFS info (device loop3): setting nodatasum
[  175.205101][ T7120] BTRFS info (device loop3): doing ref verification
[  175.223599][ T7124] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  175.250227][ T7120] BTRFS info (device loop3): allowing degraded mounts
[  175.293185][ T7124] BTRFS info (device loop4): using free space tree
[  175.322002][ T7120] BTRFS info (device loop3): enabling disk space caching
[  175.356730][ T7124] BTRFS info (device loop4): has skinny extents
[  175.363612][ T7120] BTRFS info (device loop3): disk space caching is enabled
[  175.376652][ T7120] BTRFS info (device loop3): has skinny extents
[  175.468576][ T4396] usb 1-1: USB disconnect, device number 13
[  175.499393][ T7168] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1038'.
[  175.509264][ T7120] BTRFS info (device loop3): enabling ssd optimizations
[  175.524192][ T7120] BTRFS info (device loop3): clearing free space tree
[  175.531614][ T7120] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  175.550133][ T7120] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  175.712617][ T7159] loop1: detected capacity change from 0 to 8192
[  175.853394][ T7124] BTRFS info (device loop4): enabling ssd optimizations
[  175.923794][ T7201] loop2: detected capacity change from 0 to 4096
[  176.105822][ T4294] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop3 scanned by udevd (4294)
[  176.213793][ T7206] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.946279][ T7214] loop0: detected capacity change from 0 to 32768
[  176.979151][ T7214] XFS: attr2 mount option is deprecated.
[  177.317573][ T7226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1045'.
[  177.344142][ T7214] XFS (loop0): Mounting V5 Filesystem
[  177.447309][ T7214] XFS (loop0): Ending clean mount
[  177.454344][ T7214] XFS (loop0): Quotacheck needed: Please wait.
[  177.575767][ T7214] XFS (loop0): Quotacheck: Done.
[  177.742755][ T4168] XFS (loop0): Unmounting Filesystem
[  178.031588][ T7212] loop1: detected capacity change from 0 to 32768
[  178.081230][ T7212] XFS: attr2 mount option is deprecated.
[  178.182323][ T7243] loop3: detected capacity change from 0 to 4096
[  178.292850][ T7212] XFS (loop1): Mounting V5 Filesystem
[  178.302743][ T7243] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  178.528286][ T7212] XFS (loop1): Ending clean mount
[  178.544359][ T7212] XFS (loop1): Quotacheck needed: Please wait.
[  178.686800][ T4639] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  178.715183][ T7212] XFS (loop1): Quotacheck: Done.
[  178.798165][ T7212] XFS (loop1): User initiated shutdown received.
[  178.804603][ T7212] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  178.980904][ T7260] loop3: detected capacity change from 0 to 4096
[  178.986845][ T4639] usb 5-1: Using ep0 maxpacket: 32
[  178.993159][ T7212] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  179.090763][ T4171] XFS (loop1): Unmounting Filesystem
[  179.129670][ T4639] usb 5-1: config 15 has no interfaces?
[  179.179417][ T7260] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00
[  179.231348][ T7260] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00
[  179.239936][ T5517] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  179.248513][ T7260] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00
[  179.257817][ T7260] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00
[  179.265698][ T7260] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00
[  179.274566][ T7260] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00
[  179.283240][ T7260] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00
[  179.307964][ T4639] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=f9.23
[  179.351582][ T4639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.373738][ T7260] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00
[  179.393990][ T4639] usb 5-1: Product: syz
[  179.398747][ T4639] usb 5-1: Manufacturer: syz
[  179.403373][ T4639] usb 5-1: SerialNumber: syz
[  179.408487][ T7260] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00
[  179.416348][ T7260] ntfs3: loop3: try to read out of volume at offset 0x3fffffe0c00
[  179.615401][ T7264] loop0: detected capacity change from 0 to 4096
[  179.656874][ T5517] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  179.713078][ T5517] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9
[  179.769364][ T4639] usb 5-1: USB disconnect, device number 9
[  179.858949][ T7264] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  179.942744][ T7272] team0: No ports can be present during mode change
[  179.947126][ T5517] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  179.969703][ T5517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.993754][ T5517] usb 3-1: Product: syz
[  180.024316][ T5517] usb 3-1: Manufacturer: syz
[  180.055739][ T5517] usb 3-1: SerialNumber: syz
[  180.128709][ T5517] usb 3-1: bad CDC descriptors
[  180.304424][ T4168] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  180.566726][ T4214] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  180.585039][ T7287] netlink: 'syz.0.1064': attribute type 15 has an invalid length.
[  180.874111][ T5517] usb 3-1: USB disconnect, device number 10
[  180.936893][ T4214] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  180.955251][ T4214] usb 4-1: config 0 has no interface number 0
[  180.976707][ T4214] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.008277][ T4214] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.055582][ T7280] loop1: detected capacity change from 0 to 32768
[  181.062387][ T4214] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  181.092299][ T7280] XFS: ikeep mount option is deprecated.
[  181.100613][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.161359][ T4214] usb 4-1: config 0 descriptor??
[  181.255366][ T7280] XFS (loop1): Mounting V5 Filesystem
[  181.268124][   T13] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  181.279113][ T7284] loop4: detected capacity change from 0 to 40427
[  181.311679][ T7284] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  181.321943][ T7284] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  181.418164][ T7280] XFS (loop1): Ending clean mount
[  181.436476][ T7280] XFS (loop1): Quotacheck needed: Please wait.
[  181.508397][ T7284] F2FS-fs (loop4): Found nat_bits in checkpoint
[  181.605989][ T7280] XFS (loop1): Quotacheck: Done.
[  181.668919][ T4214] prodikeys 0003:041E:2801.000E: unknown main item tag 0x5
[  181.676249][ T4214] prodikeys 0003:041E:2801.000E: item fetching failed at offset 6/7
[  181.715673][ T7284] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  181.717406][   T13] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  181.750311][ T4214] prodikeys 0003:041E:2801.000E: hid parse failed
[  181.752739][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.765822][ T7284] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  181.796762][ T4214] prodikeys: probe of 0003:041E:2801.000E failed with error -22
[  181.798811][   T13] usb 1-1: config 0 descriptor??
[  181.868145][   T13] cp210x 1-1:0.0: cp210x converter detected
[  181.899570][ T4171] XFS (loop1): Unmounting Filesystem
[  181.916768][ T4214] usb 4-1: USB disconnect, device number 12
[  181.985678][   T26] audit: type=1800 audit(1747073872.216:23): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1065" name="bus" dev="loop4" ino=10 res=0 errno=0
[  182.014730][   T26] audit: type=1800 audit(1747073872.246:24): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1065" name="bus" dev="loop4" ino=10 res=0 errno=0
[  182.096054][ T4182] attempt to access beyond end of device
[  182.096054][ T4182] loop4: rw=2049, want=45104, limit=40427
[  182.296853][   T13] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  182.359846][   T13] usb 1-1: cp210x converter now attached to ttyUSB0
[  182.599888][   T13] usb 1-1: USB disconnect, device number 14
[  182.640935][   T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  182.660250][ T7306] loop2: detected capacity change from 0 to 512
[  182.675976][   T13] cp210x 1-1:0.0: device disconnected
[  182.782177][ T7306] EXT4-fs (loop2): Test dummy encryption mode enabled
[  182.826079][ T7306] EXT4-fs (loop2): 1 truncate cleaned up
[  182.858241][ T7306] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,data_err=abort,barrier,test_dummy_encryption,noauto_da_alloc,,errors=continue. Quota mode: none.
[  182.940572][ T7306] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1071: bg 0: block 7: invalid block bitmap
[  183.028247][ T7306] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  183.443369][ T7318] loop1: detected capacity change from 0 to 4096
[  183.622784][ T7318] NILFS (loop1): invalid segment: Checksum error in segment payload
[  183.680742][ T7318] NILFS (loop1): trying rollback from an earlier position
[  183.785952][ T7318] NILFS (loop1): recovery complete
[  183.916652][ T7324] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.959806][ T7314] loop4: detected capacity change from 0 to 131072
[  183.972908][ T7304] loop3: detected capacity change from 0 to 32768
[  184.033230][ T7314] F2FS-fs (loop4): Test dummy encryption mode enabled
[  184.079416][ T7314] F2FS-fs (loop4): Found nat_bits in checkpoint
[  184.166058][ T7314] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b
[  184.954926][ T7350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1086'.
[  185.086847][ T4639] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  185.242362][ T7357] loop0: detected capacity change from 0 to 256
[  185.346248][ T7335] loop1: detected capacity change from 0 to 32768
[  185.393818][ T7335] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1081 (7335)
[  185.426481][ T7335] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  185.457146][ T4639] usb 4-1: config 2 has an invalid interface number: 108 but max is 0
[  185.465373][ T4639] usb 4-1: config 2 has no interface number 0
[  185.503271][ T7335] BTRFS info (device loop1): enabling auto defrag
[  185.513386][ T4639] usb 4-1: config 2 interface 108 has no altsetting 0
[  185.542323][ T7361] syzkaller0: tun_chr_ioctl cmd 1074025676
[  185.543834][ T7335] BTRFS info (device loop1): disabling tree log
[  185.564365][ T7361] syzkaller0: owner set to 1
[  185.575675][ T7335] BTRFS info (device loop1): max_inline at 4096
[  185.591818][ T7335] BTRFS info (device loop1): enabling ssd optimizations
[  185.630029][ T7335] BTRFS info (device loop1): using spread ssd allocation scheme
[  185.650303][ T7335] BTRFS info (device loop1): using free space tree
[  185.680749][ T7335] BTRFS info (device loop1): has skinny extents
[  185.736978][ T4639] usb 4-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=1b.d8
[  185.777166][ T7339] loop2: detected capacity change from 0 to 40427
[  185.788528][ T4639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.833591][ T4639] usb 4-1: Product: syz
[  185.849368][ T4639] usb 4-1: Manufacturer: syz
[  185.854021][ T4639] usb 4-1: SerialNumber: syz
[  185.884347][ T7388] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1095'.
[  185.919300][ T7339] F2FS-fs (loop2): invalid crc value
[  186.026964][ T4214] Bluetooth: hci3: command 0x0406 tx timeout
[  186.043316][ T4214] Bluetooth: hci2: command 0x0406 tx timeout
[  186.050154][ T4214] Bluetooth: hci0: command 0x0406 tx timeout
[  186.061192][ T7371] loop0: detected capacity change from 0 to 32768
[  186.067915][ T4214] Bluetooth: hci1: command 0x0406 tx timeout
[  186.071882][ T7339] F2FS-fs (loop2): Found nat_bits in checkpoint
[  186.196345][ T7371] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1094 (7371)
[  186.227744][ T7339] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  186.277264][ T4639] usb 4-1: Could not find all expected endpoints
[  186.386956][ T4639] usb 4-1: MIDIStreaming interface descriptor not found
[  186.447258][ T7396] netlink: 836 bytes leftover after parsing attributes in process `syz.4.1098'.
[  186.486994][ T4639] usb 4-1: USB disconnect, device number 13
[  186.768947][ T7371] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  186.789057][ T4463] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop1 scanned by udevd (4463)
[  186.802632][ T7371] BTRFS info (device loop0): using free space tree
[  186.812903][ T4176] attempt to access beyond end of device
[  186.812903][ T4176] loop2: rw=2049, want=45104, limit=40427
[  186.827847][ T7371] BTRFS info (device loop0): has skinny extents
[  187.046799][ T7427] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1108'.
[  187.106966][ T7430] loop3: detected capacity change from 0 to 2048
[  187.130740][ T7430] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  187.216984][ T7438] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  187.260769][ T7371] BTRFS info (device loop0): enabling ssd optimizations
[  187.271921][ T4294] udevd[4294]: incorrect nilfs2 checksum on /dev/loop3
[  187.526463][ T7371] fs-verity: sha512 using implementation "sha512-avx2"
[  187.730841][ T7371] fs-verity (loop0, inode 261): fs-verity keyring is empty, rejecting signed file!
[  187.940637][ T7459] loop3: detected capacity change from 0 to 512
[  188.058812][ T7459] EXT4-fs (loop3): Ignoring removed bh option
[  188.065069][ T7459] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  188.189712][ T7459] EXT4-fs (loop3): 1 truncate cleaned up
[  188.226642][ T7459] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,resgid=0x000000000000ee00,bh,noload,data_err=ignore,noload,,errors=continue. Quota mode: writeback.
[  188.931307][ T7479] loop4: detected capacity change from 0 to 32768
[  189.154910][ T7479] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  189.271095][ T7479] 
[  189.273566][ T7479] ======================================================
[  189.280594][ T7479] WARNING: possible circular locking dependency detected
[  189.287636][ T7479] 5.15.182-syzkaller #0 Not tainted
[  189.292838][ T7479] ------------------------------------------------------
[  189.299855][ T7479] syz.4.1124/7479 is trying to acquire lock:
[  189.305839][ T7479] ffff888077988650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_write_begin_nolock+0x1c5e/0x4180
[  189.315882][ T7479] 
[  189.315882][ T7479] but task is already holding lock:
[  189.323261][ T7479] ffff888061f86a20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x18a/0x300
[  189.333914][ T7479] 
[  189.333914][ T7479] which lock already depends on the new lock.
[  189.333914][ T7479] 
[  189.344331][ T7479] 
[  189.344331][ T7479] the existing dependency chain (in reverse order) is:
[  189.353358][ T7479] 
[  189.353358][ T7479] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  189.362242][ T7479]        down_write+0x38/0x60
[  189.366949][ T7479]        ocfs2_lock_global_qf+0x1e5/0x270
[  189.372693][ T7479]        ocfs2_acquire_dquot+0x29d/0xaf0
[  189.378353][ T7479]        dqget+0x778/0xeb0
[  189.382795][ T7479]        __dquot_initialize+0x3b6/0xcb0
[  189.388366][ T7479]        ocfs2_get_init_inode+0x138/0x1b0
[  189.394113][ T7479]        ocfs2_mknod+0x8aa/0x22b0
[  189.399160][ T7479]        ocfs2_create+0x192/0x410
[  189.404204][ T7479]        path_openat+0x11e1/0x2f30
[  189.409338][ T7479]        do_filp_open+0x1b3/0x3e0
[  189.414386][ T7479]        do_sys_openat2+0x142/0x4a0
[  189.419606][ T7479]        __x64_sys_openat+0x135/0x160
[  189.424999][ T7479]        do_syscall_64+0x4c/0xa0
[  189.430043][ T7479]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  189.436481][ T7479] 
[  189.436481][ T7479] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}:
[  189.447101][ T7479]        down_write+0x38/0x60
[  189.451890][ T7479]        ocfs2_lock_global_qf+0x1c7/0x270
[  189.457630][ T7479]        ocfs2_acquire_dquot+0x29d/0xaf0
[  189.463270][ T7479]        dqget+0x778/0xeb0
[  189.467678][ T7479]        __dquot_initialize+0x3b6/0xcb0
[  189.473220][ T7479]        ocfs2_get_init_inode+0x138/0x1b0
[  189.478959][ T7479]        ocfs2_mknod+0x8aa/0x22b0
[  189.484000][ T7479]        ocfs2_create+0x192/0x410
[  189.489050][ T7479]        path_openat+0x11e1/0x2f30
[  189.494183][ T7479]        do_filp_open+0x1b3/0x3e0
[  189.499230][ T7479]        do_sys_openat2+0x142/0x4a0
[  189.504431][ T7479]        __x64_sys_openat+0x135/0x160
[  189.509790][ T7479]        do_syscall_64+0x4c/0xa0
[  189.514716][ T7479]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  189.521132][ T7479] 
[  189.521132][ T7479] -> #4 (&dquot->dq_lock){+.+.}-{3:3}:
[  189.528770][ T7479]        __mutex_lock_common+0x1eb/0x2390
[  189.534504][ T7479]        mutex_lock_nested+0x17/0x20
[  189.539783][ T7479]        dquot_commit+0x5a/0x410
[  189.544715][ T7479]        ext4_write_dquot+0x1f0/0x360
[  189.550083][ T7479]        mark_all_dquot_dirty+0xf9/0x400
[  189.555705][ T7479]        __dquot_free_space+0x7ca/0xb90
[  189.561246][ T7479]        ext4_free_blocks+0x1af5/0x2480
[  189.566789][ T7479]        ext4_ext_remove_space+0x1eaa/0x4390
[  189.572778][ T7479]        ext4_ext_truncate+0x192/0x240
[  189.578239][ T7479]        ext4_truncate+0x9f1/0x10d0
[  189.583464][ T7479]        ext4_evict_inode+0xb43/0x1080
[  189.588926][ T7479]        evict+0x485/0x870
[  189.593344][ T7479]        ext4_orphan_cleanup+0xaa9/0x12e0
[  189.599148][ T7479]        ext4_fill_super+0x9288/0x9a00
[  189.604611][ T7479]        mount_bdev+0x287/0x3c0
[  189.609462][ T7479]        legacy_get_tree+0xe6/0x180
[  189.614664][ T7479]        vfs_get_tree+0x88/0x270
[  189.619601][ T7479]        do_new_mount+0x24a/0xa40
[  189.624635][ T7479]        __se_sys_mount+0x2d6/0x3c0
[  189.629858][ T7479]        do_syscall_64+0x4c/0xa0
[  189.634789][ T7479]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  189.641199][ T7479] 
[  189.641199][ T7479] -> #3 (&ei->i_data_sem){++++}-{3:3}:
[  189.648870][ T7479]        down_write+0x38/0x60
[  189.653541][ T7479]        ext4_truncate+0x96d/0x10d0
[  189.658732][ T7479]        ext4_setattr+0xffe/0x19e0
[  189.663835][ T7479]        notify_change+0xbcd/0xee0
[  189.668964][ T7479]        do_truncate+0x197/0x220
[  189.673902][ T7479]        do_sys_ftruncate+0x31b/0x3d0
[  189.679270][ T7479]        do_syscall_64+0x4c/0xa0
[  189.684217][ T7479]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  189.690631][ T7479] 
[  189.690631][ T7479] -> #2 (jbd2_handle){++++}-{0:0}:
[  189.697938][ T7479]        start_this_handle+0x1338/0x15a0
[  189.703669][ T7479]        jbd2__journal_start+0x2b7/0x5a0
[  189.709296][ T7479]        jbd2_journal_start+0x26/0x30
[  189.714748][ T7479]        ocfs2_start_trans+0x374/0x6c0
[  189.720237][ T7479]        ocfs2_mknod+0xe2f/0x22b0
[  189.725353][ T7479]        ocfs2_create+0x192/0x410
[  189.730373][ T7479]        path_openat+0x11e1/0x2f30
[  189.735480][ T7479]        do_filp_open+0x1b3/0x3e0
[  189.740511][ T7479]        do_sys_openat2+0x142/0x4a0
[  189.745700][ T7479]        __x64_sys_openat+0x135/0x160
[  189.751058][ T7479]        do_syscall_64+0x4c/0xa0
[  189.755989][ T7479]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  189.762397][ T7479] 
[  189.762397][ T7479] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  189.770896][ T7479]        down_read+0x44/0x2e0
[  189.775566][ T7479]        ocfs2_start_trans+0x368/0x6c0
[  189.781018][ T7479]        ocfs2_mknod+0xe2f/0x22b0
[  189.786121][ T7479]        ocfs2_create+0x192/0x410
[  189.791137][ T7479]        path_openat+0x11e1/0x2f30
[  189.796242][ T7479]        do_filp_open+0x1b3/0x3e0
[  189.801268][ T7479]        do_sys_openat2+0x142/0x4a0
[  189.806457][ T7479]        __x64_sys_openat+0x135/0x160
[  189.811907][ T7479]        do_syscall_64+0x4c/0xa0
[  189.816847][ T7479]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  189.823253][ T7479] 
[  189.823253][ T7479] -> #0 (sb_internal#4){.+.+}-{0:0}:
[  189.831065][ T7479]        __lock_acquire+0x2c33/0x7c60
[  189.836440][ T7479]        lock_acquire+0x197/0x3f0
[  189.841459][ T7479]        ocfs2_start_trans+0x269/0x6c0
[  189.846917][ T7479]        ocfs2_write_begin_nolock+0x1c5e/0x4180
[  189.853149][ T7479]        ocfs2_write_begin+0x1ab/0x300
[  189.858949][ T7479]        generic_perform_write+0x2aa/0x530
[  189.864753][ T7479]        __generic_file_write_iter+0x25f/0x4e0
[  189.871069][ T7479]        ocfs2_file_write_iter+0x1578/0x1cf0
[  189.877052][ T7479]        vfs_write+0x712/0xd00
[  189.881834][ T7479]        ksys_write+0x14d/0x250
[  189.886678][ T7479]        do_syscall_64+0x4c/0xa0
[  189.891613][ T7479]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  189.898130][ T7479] 
[  189.898130][ T7479] other info that might help us debug this:
[  189.898130][ T7479] 
[  189.908442][ T7479] Chain exists of:
[  189.908442][ T7479]   sb_internal#4 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key
[  189.908442][ T7479] 
[  189.925421][ T7479]  Possible unsafe locking scenario:
[  189.925421][ T7479] 
[  189.932862][ T7479]        CPU0                    CPU1
[  189.938218][ T7479]        ----                    ----
[  189.943664][ T7479]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  189.949287][ T7479]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7);
[  189.959082][ T7479]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  189.967224][ T7479]   lock(sb_internal#4);
[  189.971492][ T7479] 
[  189.971492][ T7479]  *** DEADLOCK ***
[  189.971492][ T7479] 
[  189.979629][ T7479] 4 locks held by syz.4.1124/7479:
[  189.984745][ T7479]  #0: ffff8880774a74f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370
[  189.994180][ T7479]  #1: ffff888077988460 (sb_writers#30){.+.+}-{0:0}, at: vfs_write+0x28a/0xd00
[  190.003155][ T7479]  #2: ffff888061f86d88 (&sb->s_type->i_mutex_key#38){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x401/0x1cf0
[  190.014475][ T7479]  #3: ffff888061f86a20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x18a/0x300
[  190.025514][ T7479] 
[  190.025514][ T7479] stack backtrace:
[  190.031409][ T7479] CPU: 1 PID: 7479 Comm: syz.4.1124 Not tainted 5.15.182-syzkaller #0
[  190.039554][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  190.049611][ T7479] Call Trace:
[  190.052883][ T7479]  <TASK>
[  190.055803][ T7479]  dump_stack_lvl+0x168/0x230
[  190.060479][ T7479]  ? load_image+0x3b0/0x3b0
[  190.064977][ T7479]  ? show_regs_print_info+0x20/0x20
[  190.070174][ T7479]  ? print_circular_bug+0x12b/0x1a0
[  190.075372][ T7479]  check_noncircular+0x274/0x310
[  190.080310][ T7479]  ? add_chain_block+0x940/0x940
[  190.085242][ T7479]  ? lockdep_lock+0xdc/0x1e0
[  190.089921][ T7479]  ? mark_lock+0x94/0x320
[  190.094245][ T7479]  ? mark_lock+0x94/0x320
[  190.098572][ T7479]  __lock_acquire+0x2c33/0x7c60
[  190.103520][ T7479]  ? __rwlock_init+0x140/0x140
[  190.108297][ T7479]  ? verify_lock_unused+0x140/0x140
[  190.113490][ T7479]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  190.119380][ T7479]  ? verify_lock_unused+0x140/0x140
[  190.124668][ T7479]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  190.130568][ T7479]  ? _raw_spin_unlock+0x40/0x40
[  190.135429][ T7479]  ? stack_depot_save+0x404/0x440
[  190.140476][ T7479]  lock_acquire+0x197/0x3f0
[  190.144983][ T7479]  ? ocfs2_write_begin_nolock+0x1c5e/0x4180
[  190.151046][ T7479]  ? __might_sleep+0xf0/0xf0
[  190.155627][ T7479]  ? do_raw_spin_lock+0x11d/0x280
[  190.160645][ T7479]  ? read_lock_is_recursive+0x10/0x10
[  190.166010][ T7479]  ? __rwlock_init+0x140/0x140
[  190.170866][ T7479]  ? do_raw_spin_unlock+0x11d/0x230
[  190.176168][ T7479]  ocfs2_start_trans+0x269/0x6c0
[  190.181685][ T7479]  ? ocfs2_write_begin_nolock+0x1c5e/0x4180
[  190.187592][ T7479]  ? ocfs2_recovery_exit+0x280/0x280
[  190.192912][ T7479]  ocfs2_write_begin_nolock+0x1c5e/0x4180
[  190.198662][ T7479]  ? ocfs2_size_fits_inline_data+0x90/0x90
[  190.204461][ T7479]  ? __lock_acquire+0x289d/0x7c60
[  190.209490][ T7479]  ? ocfs2_read_inode_block_full+0x1a0/0x1a0
[  190.215475][ T7479]  ? verify_lock_unused+0x140/0x140
[  190.220676][ T7479]  ? __might_sleep+0xf0/0xf0
[  190.225256][ T7479]  ? preempt_count_add+0x8d/0x190
[  190.230282][ T7479]  ? rwsem_write_trylock+0x12f/0x1b0
[  190.235592][ T7479]  ? clear_nonspinnable+0x60/0x60
[  190.240619][ T7479]  ocfs2_write_begin+0x1ab/0x300
[  190.245689][ T7479]  ? ocfs2_readahead+0x190/0x190
[  190.250615][ T7479]  ? mark_lock+0x94/0x320
[  190.254946][ T7479]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  190.260918][ T7479]  ? fault_in_readable+0x120/0x150
[  190.266051][ T7479]  generic_perform_write+0x2aa/0x530
[  190.271434][ T7479]  ? _raw_spin_unlock_irq+0x1f/0x40
[  190.276637][ T7479]  ? grab_cache_page_write_begin+0xa0/0xa0
[  190.282465][ T7479]  ? file_remove_privs+0x590/0x590
[  190.287583][ T7479]  ? __rwlock_init+0x140/0x140
[  190.292372][ T7479]  ? __up_read+0x27c/0x660
[  190.296784][ T7479]  __generic_file_write_iter+0x25f/0x4e0
[  190.302416][ T7479]  ? _raw_spin_unlock+0x24/0x40
[  190.307262][ T7479]  ? ocfs2_inode_unlock+0x11a/0x140
[  190.312458][ T7479]  ocfs2_file_write_iter+0x1578/0x1cf0
[  190.317945][ T7479]  ? ocfs2_file_read_iter+0xa20/0xa20
[  190.323415][ T7479]  ? aa_file_perm+0x3a3/0xe20
[  190.328106][ T7479]  ? rcu_read_lock_any_held+0xb0/0x120
[  190.333581][ T7479]  ? rcu_read_lock_bh_held+0xe0/0xe0
[  190.338863][ T7479]  ? end_current_label_crit_section+0x14b/0x170
[  190.345104][ T7479]  ? memset+0x1e/0x40
[  190.349076][ T7479]  ? iov_iter_init+0xb4/0x170
[  190.353748][ T7479]  vfs_write+0x712/0xd00
[  190.357983][ T7479]  ? file_end_write+0x250/0x250
[  190.362832][ T7479]  ? __fget_files+0x40f/0x480
[  190.367553][ T7479]  ? mutex_lock_nested+0x17/0x20
[  190.372482][ T7479]  ? __fdget_pos+0x2bf/0x370
[  190.377072][ T7479]  ? ksys_write+0x71/0x250
[  190.381521][ T7479]  ksys_write+0x14d/0x250
[  190.385868][ T7479]  ? __ia32_sys_read+0x80/0x80
[  190.390627][ T7479]  ? lockdep_hardirqs_on+0x94/0x140
[  190.395821][ T7479]  do_syscall_64+0x4c/0xa0
[  190.400229][ T7479]  ? clear_bhb_loop+0x15/0x70
[  190.404898][ T7479]  ? clear_bhb_loop+0x15/0x70
[  190.409573][ T7479]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  190.415474][ T7479] RIP: 0033:0x7f4491368969
[  190.419881][ T7479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.439596][ T7479] RSP: 002b:00007f448f1d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  190.448052][ T7479] RAX: ffffffffffffffda RBX: 00007f449158ffa0 RCX: 00007f4491368969
[  190.456023][ T7479] RDX: 0000000000000012 RSI: 0000200000000140 RDI: 0000000000000004
[  190.464019][ T7479] RBP: 00007f44913eaab1 R08: 0000000000000000 R09: 0000000000000000
[  190.471992][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.479971][ T7479] R13: 0000000000000000 R14: 00007f449158ffa0 R15: 00007fff49e00068
[  190.487947][ T7479]  </TASK>
[  190.519132][ T4182] ocfs2: Unmounting device (7,4) on (node local)
[  194.198037][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.204369][ T1420] ieee802154 phy1 wpan1: encryption failed: -22