last executing test programs:

29.586054243s ago: executing program 4 (id=590):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)
pread64(r3, &(0x7f0000000380)=""/31, 0x1f, 0xc0a9)

29.370252528s ago: executing program 4 (id=591):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/members\x00', 0x0, 0x0)

29.145948313s ago: executing program 4 (id=592):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000002c0)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

28.563499937s ago: executing program 4 (id=596):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4ef, &(0x7f00000016c0)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

28.112479168s ago: executing program 4 (id=602):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0)

27.650862709s ago: executing program 4 (id=606):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000380)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}], 0x10)

27.489669193s ago: executing program 32 (id=606):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000380)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}], 0x10)

5.911216329s ago: executing program 5 (id=811):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xccd, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xf, 0xb0, 0x6, {0x8, 0xb, 0x1, 0xff, 0x1, 0x25, 0x30, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x7, 0xc, {0xa, 0x25, 0x25, 0x72f, 0x5, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x2c, 0x10, {0xa, 0x25, 0x25, 0x2, 0x9, 0x401}}}}}}}}]}}, 0x0)
tkill(r0, 0x12)
tkill(r0, 0x12)

4.789589686s ago: executing program 1 (id=816):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000010, &(0x7f00000002c0)={[{@volume={'volume', 0x3d, 0xe}}, {@volume={'volume', 0x3d, 0x3}}, {@gid_ignore}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortad}, {@gid}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@dmode={'dmode', 0x3d, 0x5}}]}, 0x1, 0xc57, &(0x7f0000001640)="$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")
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x2afc0, 0x64, 0x6}, 0x18)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65)

4.477783404s ago: executing program 1 (id=817):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})
close_range(r0, 0xffffffffffffffff, 0x0)

4.193596771s ago: executing program 1 (id=819):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c890}, 0x14)

4.133447632s ago: executing program 1 (id=821):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002340)=""/4081, 0xff1}, {&(0x7f0000000180)=""/139, 0x8b}], 0x2}, 0x12120)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x120)
recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40000004)

4.069603343s ago: executing program 5 (id=822):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(0xffffffffffffffff, 0x0, 0x48)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

3.629511834s ago: executing program 1 (id=825):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235222bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856a24cedd963c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75474939c664ff1849f8fbc403959f9c2de4b235261aba126be33a1762054cf2fad7dfc679c611c046f5764cfd3b84268cf21e9b8cd374866e2d55c4bfdd180a43e4fae7f5ddab3469cda8da12808566a285524ac700c24595dcd5c7784b30a4baafe80e10cecfe2393ecc927520408071c6901003dd15417429bfa90a54f501dd193865ebbb27e85c50605c45115595b04c410c2b2d6ef11e53872cba8091c88311d00c175bcf0a780265fe60228a640a746847d0138dc9f673fac8658d57ebaab4212bdcb1625a73bbda3c4a6e4282480077305b6afa3ebbcd525e588bf55760e556f1211a02cfe2e533ce915d86d62374332773744fcc8fdaf51812edd747c93b23bbe70d"], 0x1, 0x553a, &(0x7f0000006040)="$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")
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5403, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xbff4, 0x6, 0x0, 0x1})

3.269364532s ago: executing program 0 (id=829):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1008001, &(0x7f0000000180)=ANY=[], 0x1, 0x144c, &(0x7f0000003d80)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d000000000000ff00000000000000000000000d00000000002e305f2e2e2e"], 0x0, 0x44, 0x0, 0x0, 0x40}, 0x28)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x1a30c1, 0x9c37611dc13d0dab)

2.97073231s ago: executing program 0 (id=830):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x20)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x800000, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x3, 0x6, 0x1cc, 0x7, 0x0, 0x5, 0x0, 0x9, 0x9, 0x9, 0x9, 0xfff, 0x200, 0x1, 0x2000005, 0x6, 0x4, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0x9, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x800, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x2, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x616, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xffffffec, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x40000007, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0xa, 0x7, 0xa, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x22, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x8, 0x101, 0x5, 0x2, 0x3, 0x4, 0x3, 0x3, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x2, 0x7a, 0x9f87, 0x65, 0x85, 0x4, 0x2, 0x2, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x436, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x8000, 0x10, 0x4, 0x8001, 0x5, 0x100, 0x9, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x7, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x101, 0x405, 0x3, 0x6, 0x8001, 0x10001, 0x9, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
ppoll(&(0x7f0000000240), 0x20000000000000dc, 0x0, 0x0, 0x30)

2.246667807s ago: executing program 1 (id=831):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f000000d680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xfffe82)
truncate(&(0x7f00000000c0)='./file1\x00', 0x6e3)

2.245343907s ago: executing program 0 (id=841):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140))
creat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20, 0x0, 0x1, 0x0, &(0x7f0000000000))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1.923074155s ago: executing program 0 (id=834):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r2}}, 0xc)

1.616796082s ago: executing program 0 (id=836):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.422110466s ago: executing program 5 (id=838):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc)

1.421388126s ago: executing program 3 (id=839):
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x42001)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000005c4100a0200010040400", 0x800000, 0x40})
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

1.322261739s ago: executing program 5 (id=840):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x121042, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x5, 0x8, 0x5, 0xe})

1.273699421s ago: executing program 2 (id=842):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0)

1.254969161s ago: executing program 3 (id=843):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000340)='./file2\x00', 0x2010000, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x41, 0x235, &(0x7f0000000400)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000004, 0x4082172, 0xffffffffffffffff, 0xffffd000)
mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)
getdents64(r0, &(0x7f00000003c0)=""/91, 0x5b)

1.178041852s ago: executing program 2 (id=844):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)

1.007918197s ago: executing program 3 (id=845):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))

992.666477ms ago: executing program 2 (id=846):
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000004000)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000001080)="15", 0x1}], 0x1}}, {{&(0x7f00000012c0)={0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000001300)='5', 0x1}], 0x1}}], 0x2, 0x50)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

843.247511ms ago: executing program 3 (id=847):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0xfff1}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0x8, 0x8, 0x0, 0xe09, 0x0, 0x9, 0x717a, 0x2, 0xd, 0x8, 0x5, 0x10a1, 0x80000001, 0x200, 0x3, 0xeeb, 0x81, 0xc, 0x3ff, 0xffffffff, 0xfff, 0x1, 0x99bd, 0xc, 0x10000, 0x9, 0xfc57c70, 0x3ff, 0x8, 0x6, 0xc, 0xa00, 0x1b, 0x8e, 0x4, 0x4, 0x9, 0x7, 0x6, 0xa160, 0xbee, 0x4, 0x100, 0xc2, 0x800, 0x3b1, 0x6, 0x100, 0x1000, 0x5, 0x9, 0xec4, 0x8000, 0x0, 0xedf, 0x5, 0xd, 0x2, 0x97, 0x7fffffff, 0x7, 0xd85, 0x81, 0x3, 0x6, 0x101, 0x6, 0x4, 0xbffffc00, 0x7, 0x9, 0x6, 0x4, 0x7c, 0x3, 0xd84e, 0x0, 0x1, 0x8, 0x7, 0xffffffff, 0xf8, 0x4, 0x5, 0x401, 0x440, 0xb3, 0x7fff, 0x400, 0x6, 0x7ff, 0x6, 0x3, 0x1, 0x5, 0x3, 0x9, 0x2, 0xffffffff, 0x7, 0x0, 0x375f, 0x8, 0x1, 0x4, 0x4, 0x0, 0x6, 0x0, 0xaa5, 0x9, 0x800, 0x2, 0x81, 0x4, 0x9, 0x4a20a1a8, 0x8, 0x80000001, 0x0, 0xfffffffa, 0x3, 0x7, 0x4, 0x5, 0xc, 0x36, 0xf, 0xff9b, 0x68, 0x80000001, 0x401, 0x4, 0xff, 0x2e3, 0xc, 0x9, 0x3, 0x2, 0x0, 0x2452, 0xab, 0x5, 0x8, 0x8, 0x9, 0x10000, 0x1000, 0x7, 0x9, 0x1ff, 0x4a0, 0x0, 0x3, 0xc0, 0xffffffff, 0x7, 0x1, 0xa94a, 0x4, 0x101, 0xffffffff, 0xd7, 0x5, 0x8, 0x395, 0x7, 0x8, 0x6, 0x7fff, 0x10000, 0x80000001, 0x0, 0x5, 0x18000, 0x5, 0x6, 0x5, 0x2, 0xd146, 0x8, 0x6, 0x1, 0xf17, 0x9, 0x7, 0xffffffff, 0x7, 0xff, 0x1, 0x7, 0x81, 0x2, 0x8, 0x101, 0xfff, 0x2, 0x6, 0xffff99a7, 0x5, 0xac000000, 0x8000, 0x9, 0xe, 0x9, 0xa39, 0x9, 0x25, 0x5, 0x7, 0x9, 0x928800, 0x7fffffff, 0x2, 0x0, 0x1, 0x1, 0x8ef1, 0x9, 0x4, 0x0, 0x0, 0x2, 0x10, 0x1, 0x7fffffff, 0x6, 0x5, 0x7, 0x200, 0x80, 0x7, 0x1000, 0x9, 0x71, 0x6, 0x7, 0x7, 0x3, 0x1, 0x5, 0x4cd, 0x0, 0x9, 0x7f, 0x800, 0x8, 0x0, 0x1, 0xfffffffd, 0x4, 0x80000000, 0x4cd, 0x1fd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfc, 0x2, 0x7f, 0x2, 0x7, 0xffffa9d9}, {0x0, 0x0, 0x6, 0x100, 0x972}, 0x7, 0xb95, 0x5b9}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000)

792.270932ms ago: executing program 2 (id=848):
socket$nl_generic(0x10, 0x3, 0x10)
openat$rtc(0xffffff9c, &(0x7f0000001600), 0x40000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x20000400)
pselect6(0x40, &(0x7f0000000200)={0x26, 0x4, 0x0, 0x1, 0x800, 0x8, 0x2, 0x6}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x3, 0x1, 0xf75a}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0)

770.679192ms ago: executing program 5 (id=849):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000200)={0x5, 0x0, 0xe, 0x1, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x13}, @multicast1}, 0x10)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00')
preadv(r1, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000480)=""/246, 0xf6}], 0x2, 0x0, 0x10201)

649.187225ms ago: executing program 3 (id=850):
ioperm(0xe, 0x9, 0x20)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f00000006c0)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$eJzs3c1vHGcdB/DvbNZONpTUbZM2RZUSNRIgIhI7Vgrm0oAQyqFCVTlwthInsbJJi+0it0LUvF97yB9QDr5xQEjcI8qFC9x69bESgksvmNOimZ1db/y6bhOvHT6favw8M888z/ye387s7EujDfB/6/rFNB+myPWLbyyX62ur0+211el7vXqS40kaSbNbpPhPp9P5OLmW7pKXy431cMVOx3kwP/PWJ5+tfdpda9ZLtX9jt37DWamXnE9yrC4f13g39hrvxF7DFf0Zlgm70EscjNpYkk7lXw+6W37yt2f6LQNa2/Xe88wHjoCie9/cYiI5WV/o5euA7l2xe88+0lZGHQAAAAAcgGfXs57lnBp1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU1L//X9RLo1c/n6L3+//j9bbU9cPl3P52f/ik4gAAAAAAAACAA3RuPetZzqneeqeovvN/tVo5Xf39Ut7NYuaykEtZzmyWspSFTCWZGBhofHl2aWlhqt+z938GbO15ZdueV/YI9Hhdth7HrAEAAAAAAADgqfPLXN/4/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6DIjnWLarldK8+kUYzyYkk4+V+K8k/evWj7OGoAwAAAIAvoDPkfs+uZz3LOdXvV1Tv+V+s3vefyLu5n6XMZyntzOVm9VlA911/Y211ur22On2vXLaO+91/7yvcasR0P3vY/shnqz1auZX5asul3MjbKYqbaVQ9S2d78Wwf1y/KmIrXu8aGjOxmXZYz/7Aut/hgX5PdyT4/TJmoMjLWz8hkHVuZjed2z8Q+H53NR5pKox/s6U1H2jSJR3L++pDHO1mX5Xx+u1POR2JzJq4MnH0v7p7z5Gt//sOP77Tv371za/Hi4ZnScI7VZfd5pbU1E9MDmXjpac7EFpNVJs7016/nB/lRLuZ83sxC5vPTzGYpczmf71e12fp8LgYu+R0yde2RtTf3imS8PkO7D9ajMWWPmF6t+p7KfH6Yt3Mzc3mt+u9KpvKtXM3VzAw8wmeGeKZt7HDVd768bfAXvl5XWkl+V5eV2829Jv6ElXl9biCvg8+5E1Xb4JaNLD2/j/tRL0t/3D2U5lfqSnmMX9Xl4bA5E1MDmXhh90z8vnpaWWzfv7twZ/ad4Q73/Id1pbyOfnOo7hLl+fJ8+WBVa4+eHWXbC3XbWLVs5Gu8/sal26+xpe1Mv617pa7seKWO16/hto50pWp7adu26art7EDb5tdb7f7roafhyx+Ap9bJb5wcb/2z9ffWR61ft+603jjxvePfPv7KeMb+Ovad5uSxrzZeKf6Uj/Lzjff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA57f43vt3Z9vtuYVNlU6n88EOTUe50vs5swM86MvPJKOa8niSw5H5/3Y6nXpLcRji2b3SKR1P53N2/0uS4XZuJtmu6dzokzDiJybgibu8dO+dy4vvvf/N+Xuzt+duz92fuXp1ZnLm6mvTl2/Nt+cmu39HHSXwJGzc9EcdCQAAAAAAAAAAADCsg/jnBDsf/cRBThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4oq5fTPNhikxNXpos19dWp9vl0qtv7NlM0khS/CwpPk6upbtkYmC4YqfjPJifeeuTz9Y+3Rir2du/sVu/4azUS84nOVaXj2u8G194vKI/wzJhF3qJg1H7XwAAAP//DJEGHw==")
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04030b00c800ce5dd37d19965fc01aff701b650101000000000000000000be0fd2b9228fdd729d2e844f66b0148e71729157fb7c50a2989575f160fc528c56d6af7f52ea4658fd464746d2e5480edb141a43f8e0cbfd424089c91e71b0eae1bab0"], 0xe)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

512.025778ms ago: executing program 5 (id=851):
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000020c0)='./file1\x00', 0x1c002, &(0x7f0000000400)=ANY=[], 0x1, 0x5f12, &(0x7f0000008040)="$eJzs3U9vHGcdB/Df/vH6T2kaVagKEYc0hdJSmv8JlH9NOXCAA0goZxK5bhVwoUoMopVFXPmAuAAvAS69cOgb6WtAvAAi2Zx6oAwa+3mS8XqddUi8s+vn85Gcmd8+O95n8vV4Zj0z+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/64c8udiLi5m/TAycjvhC9iG7EYl2fiXrmen5+PyJOxU5zvBARvfmIevmdf56LuBIRn56I2NpeX64fvnTIfly9sHbn8x//4B9/+PPmqV+8/fOPh9t/+sXLn/zxXsTJn7zxyef3ns66AwAAQCmqqqo66W3+6fT+vtt2pwCAicj7/yrJj6vVarX6qdZ/6k5Xf9SF1k3VaPeaRURsNJepjxmcjgeAGbMRn7XdBVok/6L1I+KZtjsBTLVO2x3gSGxtry93Ur6d5v7gzG57/jvlnvw3Og/u7zhoOs7wNSaT+vnajF48f0B/FifUh2mS8+8O539zt32QnnfU+U/KQfkPdm99Kk7Ovzec/5A9+f8lImY2/+7I/EuV8+8/Tv4bvRne/uUPAAAAAMDxl//+f7Ll87/zT74qh/Ko879nJtQHAAAAAAAAAHjannT8vweM/wcAAABTq36vXvvr+w8//eygz2KrH7/RiXi2fv6JyfQPmELpZpmltvsBAAAAAAAAAAAAACXp717De6MTMRcRzy4tVVVVfzUN14/rSZefdaWvP5Ss7V/yAACw69MTQ/fydyIWIuJG+qy/uaWlpapaWFyqlqrF+Xw8O5hfqBYb72vztH5sfnCIA+L+oKq/2UJjuaZx75fHtQ9/v/q1BlXvEB2bjBYDB4CI2N0bbdkjHTNV9Vy0fZTDbLD9Hz+2fw6j7Z9TAAAA4OhVVVV10sd5n07n/LttdwoAmISFvP8fPi+gVqvVarX6+NVN1Wj3mkVEbDSXqY8ZDMcPADNmIz5ruwu0SP5F60fEqbY7AUy1Ttsd4Ehsba8vd1K+neb+II3vnq8F2ZP/Rmdnubz8qOk4w9eYTOrnazN68fwB/XlhQn2YJjn/7nD+N3fbB+l5R53/pByUf72eJ1voT9ty/r3h/Iccn/y7I/MvVc6//1j59+QPAAAAAABTLP/9/6Tzv3mVAQAAAAAAAGDmbG2vL+f7XvP5/y+PeF6nOef+z2Mj5985dP7u/z1Ocv7d4fyHLsjpNebvv/Uw/39vry9/vPavL+Xp1Oc/1xvUrz3X6fb66Zqfau6duB2rsRIX9j2/v6f94r72uT3tl8a0X97XPqjbF3P7uViOX8dqvP2gfX7MhVELY9qrMe05/57tv0g5/37jq85/KbV3hqa1+x919233zemo17n+9/+8vH/rmrzN6D1Yt6Z6/c620J+d/5NnBvGbuyt3zv3u1tranYuRJnsevRRp8pTl/OfSV87/lZd22/Pv/eb2ev+jwWPnPy02o39g/i815uv1fXXCfWtDzn+QvnL+eQ80evuf5fwP3v5fa6E/AAAAAAAAAAAAAAAA8ChVVe3cIno9Iq6l+3/aujcTAJisvP+vkvy4Wq1Wq9Xq41c3VaO92SxiYe8y9THD70d9MwBgmv03Iv7ZdidojfwLlj/vr55+pe3OABN194MPf3lrdXXlzt22ewIAAAAAAAAA/L/y+J9nGuM/71wHNDRu9J7xX9+KMzM7/md30NsZ6zyt0Ivx6PG/z8ajx//uj3m9uTHtgzHt82PaF8a0j7zRoyHn/2LKOOd/Oq1YSeO/vtJCf9qW8z+bxnrO+X9t6HnN/Ku/zXL+3T35n1977/3zdz/48PXb7916d+XdlV9dvHDtyuWrVy5fvXr+ndurKxd2/22xx0cr55/HvnYdaFly/jlz+Zcl5//VVMu/LDn/l1Mt/7Lk/PPxnvzLkvPP733kX5ac/6upln9Zcv5fT7X8y5Lzfy3V8i9Lzv8bqZZ/WXL+r6da/mXJ+Z9LtfzLkvM/n2r5lyXnn89wyb8sOf98ZYP8y5Lzv5Rq+Zcl53851fIvS87/SqrlX5ac/9VUy78sOf9rqZZ/WXL+30y1/MuS8/9WquVflpz/G6mWf1ly/t9OtfzLkvP/TqrlX5ac/3dTLf+y5Py/l2r5lyXn//1Uy78sOf83Uy3/sjz8/H8zZsyYyTNt/2YCAAAAAAAAAAAAAIZN4nLittcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgfO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrC3t3FyFXeZwA/+2WvDQluIIQQJ9jGgIGF3fUXOMRgkpBS0qaUhLRpSY1jr40Tf9W7TgChshTaEgWpSO0FvWiaRGkUqa1AUaSmEo2QGqm9K1eJuIlaiQtLhcpBSaVUga3OnPd9PTM7O7P+GPvMOb8fwn/vzJmZd86cmd1nrWcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGbrPzbz50NZluX/N/5Yk2WX5n9fle3Kv5zffrFXCAAAAJyrtxt//sNl6YRdy7hQ0zb/9qH/+P7CwsJC9oW3Tr7zlwsL6Yx1WTayMssa50X//stfLDRvEzydjQ8NN3093OPmR3qcP9rj/LEe56/ocf7KHueP9zh/0Q5YZFXx+5jGlW1s/HVNsUuzK7KxxnkbO1zq6aGVw8PxdzkNQ43LLIztzw5mh7KZbGrRZYYa/2XZy+vz27o3i7c13HRba7MsO/WzJ/bGNQyFfbwxa7mxhubH7s27s3Vv/eyJvd+Ze+P9nWbP3bBopVm2aUO+zmey7PSvq7KhbGXaJ3Gdw03rXNthnSMt6xxqXC7/e/s6Ty1znfF+j4d1vtplnWvDaY9em2XZfLbkNu2ezoaz1W23mvb3eHFE5NeRP5TvyUbP6DhZv4zjJL/M69e2Hiftx2Tc/+vDPhldYg3ND8ebT61YtN/P9jjJ73UZjtX8uu/Pb3R8vPlXqy3Har7NE9ctfQx0fOw6HAPpWG46Bjb0OgaGV4w0joHh02ve0HIMTC+6zHA21Litk9d1PwYm5w4fm5x97PFbDh7ec2DmwMyR6antW7ds27pl27bJ/QcPzUwVf57ZLh0gq7PhdAxuCK818Ri8oW3b5kNy4Zvn73kwXpLnQX7fP3N9vqBLh7MljvF8m2c2nfvzIH3fb3oejDY9Dzq+pnZ4Howu43mQb3Nq0/K+Z442/d9pDf16LVzTdAxczO+H+W0+dOPSr4Vrw7qevelMvx+OLDoG4t0aCs+9/JT089747WG/LD4urs7PuGRFdmJ25vitj+6Zmzs+nYVxQVze9Fi1Hy+rm+5Ttuh4GT7j42XX3//q+qs7nL4m7Kvxm7s/Vvk2Wye6P1aNV/fW/bkiK/Zny6mbszDOswu9Pzt9N8v3Z8oSXfZnvs0zt5z7z4IplzS9/o31ev0bGRstXv9G0t4Ya3n9W/zQjDRWlmWnblne699Y+P9Cv/5dUZLXv3xfPXRr92Mg3+bZyTM9Bka7vv5dG+ZQWM+NITGMN+X+dxrnzxeHadNj2fO4GR0dC8fNaLzF1uNmy6LL5NeW3/amqbM7bjZd2/pYtfzcUsHjJt9XfzXV/bjJt3ll+txfO1bFvza9dqzodQyMjazI1zuWDoLi9W5hVTwGbs32ZkezQ9m+dJn8Uc5va2Lz8o6BFeH/C/3acVVJjoF8X72wufsxkG/zoy3n92enTeGUtE3Tz07tv19YKvNfPXr6+tp32/nO/Pk6P/7jT6XTOmWIfJs3tp5pzui+n24Op1zSYT+1P3+WOqb3ZRdmP10V1nloW/ffTeXbXLF9mcfTrizLXpt+rfH7rvD73e+d+PH3W37v2+l3yq9Nv3bf5AM/OZP1AwBw9t5p/Dm/ovhZs+lfrJfz7/8AAADAQIi5fzjMRP4HAACAyoi5fyTMRP4HAACAyoi5fzTMpCb5/5Hbd7z49pNZejfAhSCeH3fD/XcW28WO93z4et3CafnpH/322ItffXJ5tz2cZdmv7vtAx+0fuTOuq3AsrvPDracvctU1y7r9hx88vV3z+yec2lFcf7w/yz0MYlf55cnNjetd99h0Y75yX9aYD8w/+3Rx/cXXcfuTW4rt/ya8acmu/UMtl98U1rMxzHXhPWXu33V6P+QzXu7FtR/618s/e/r24uWGNry7cTdf+OPieuN7RD1/ebF9vN9Lrf9fvvbdF/PtH72u8/qfHO68/pPhel8P85c7i+2b9/lXm9b/p2H98fbi5W791g87rv+l9xXbvxSOi2+E2b7+u//ig293erzi7ey6o7hcvP2p/93auFy8vnj97esff3K6ZX+0X/8rbxXXs/PLPx9p3j6eHm8neviO1uN7KDy+LT3yLMu++2dZy37OPlJc7p/b1h+v79gdndd/c9s6jw1d07j86fuzpuV+ff3vNne8v3E9u/5xTcv9ef6esP/emvxRfr0nHwjHYzj//14trq/9vUxfuqf19SZu/401xfM2Xt9k2/qfb1v//DX5vuu9/nvfKtb/0l0rW9a/6xPheLq3mL3Wf+BvL2u5/De/Uzwex78yceTo7ImD+5r2avPzeOX4qtWXXPqud18WXkvbv959dO6RmePrptZNZdm6AXzLwH6v/1th/k8x5s//LRR+8vPiuHvuk8X3rRt+UXz9fDj94fB4xu+PX//rsZbjtf1xn7+rmOe6/pvCOpbrfV/7r2uWteHJz7984p/+5I32nwvi/Tn23vHG/Xth/ZWN84ZeKc5vf73q5T/f2/q8/unoVGP+IOzXhfDOzBuuLG6v/frje5M89+ni+Rt/kouXz9reT2TNSOv9ONf1/zT8HPPDq1pf/+Lx8YMn297NeU02lC9hPrw+ZPPF+XGruL+fO3Vlx9uL78OTzb//TJa5pNnHZicPHTxy4tHJuZnZucnZxx7fffjoiSNzuxvvXbr7i70uf/r5vbrx/N43s31r1ni2Hy1Gn13s9R97cO++26au3zezf8+J/XMPHps5fmDv7OzemX2z1+/Zv3/mK70uf3DfzunNO7bctnniwMF9O2/fsWPLjomDR47myygW1cP2qS9NHDm+u3GR2Z1bd0xv27Z1auLw0X0zO2+bmpo40evyje9NE/mlvzxxfObQnrmDh2cmZg8+PrNzesf27Zt7vvvj4WP7Z9dNHj9xZPLE7MzxyeK+rJtrnJx/7+t1eeph9mh4vWszFH46/9zN29P74+a+/dSSV1Vs0vrjafZmeC+o+P2t19cx94+FmdQk/wMAAEAdxNwf3vj/9BnyPwAAAFRGzP0rw0zkfwAAAKiMmPuL5D+ePv69Lvn/fPX/n9L/b9D/1//P9P8T/X/9/0z/X/+/B/1//f9BXr/+v/4/vZWt/x9yf7Yqy/z7PwAAAFRUzP2rw0zkfwAAAKiMmPsvCTOR/wEAAKAyYu6/NMykJvnf5//r/+v/d+v/x231/zP9/zL0/zf+t/7/Ivr/+v+Z/v9Zu9j9+UFffwn7/6v0/ymbsvX/Y+5/V5hJTfI/AAAA1EHM/e8OM5H/AQAAoDJi7r8szET+BwAAgMqIuX9NmElN8r/+v/6//r/P/9f/H5j+v8//70D/X/8/0/8/axe7Pz/o6y9h/9/n/1M6Zev/x9z/a2EmNcn/AAAAUAcx978nzET+BwAAgMqIuf/yMBP5HwAAACoj5v4rwkxqkv/r2f9/Pcsy/f9M/1//v22d+v/6//2g/6//343+v/7/IK9f/1//n97K1v+Puf+9YSY1yf8AAABQBzH3XxlmIv8DAABAZcTc/74wE/kfAAAAKiPm/qvCTGqS/+vZ//f5//r/Bf3/1nXq/+v/94P+v/5/N/r/+v+DvH79f/1/eitb/z/m/veHmdQk/wMAAEAdxNx/dZiJ/A8AAACVEXP/B8JM5H8AAACojJj714aZ1CT/6//r/+v/6//r/+v/99Ng9f+HlzxH/7+g/9/q/PX/508vQP9/YNav/6//T29l6//H3P/BMJOa5H8AAACog5j7PxRmIv8DAABAZcTcf02YifwPAAAAlRFz/7owk5rkf/1//X/9f/1//X/9/34arP7/0vT/C/r/rXz+v/6//r/+P92Vrf8fc//6MJOa5H8AAACog5j7N4SZyP8AAABQGTH3XxtmIv8DAABAZcTcvzHMpCb5X/9f/1//X/9f/1//v5+q0f8f0v8P9P9b6f/r/+v/6//TXdn6/zH3XxdmUpP8DwAAAHUQc//1YSbyPwAAAFRGzP03hJnI/wAAAFAZMfdvCjOpSf7X/9f/1/8f4P7/iP5/pv9fetXo//v8/3iy/n8r/X/9f/1//X+6K1v/P+b+G8NMapL/AQAAoA5i7r8pzET+BwAAgMqIuf/mMBP5HwAAACoj5v6JMJOa5H/9f/1//f8B7v/7/P+W9ev/l5P+v/5/N/r/+v+DvH79f/1/eitb/z/m/lvCTGqS/wEAAKAOYu6/NcxE/gcAAIDKiLl/MsxE/gcAAIDKiLl/KsykJvlf/1//X/9f/1//X/+/n/T/W/v/4/r/LfT/9f8Hef36//r/9Fa2/n/M/dNhJjXJ/wAAAFAHMfdvDjOR/wEAAKAyYu7fEmYi/wMAAEBlxNy/NcykJvlf/78i/f9h/X/9f/1//f9y0v/3+f/d6P/r/w/y+vX/9f9pNdzhtLL1/2Pu3xZmUpP8DwAAAHUQc//2MBP5HwAAACoj5v7bwkzkfwAAAKiMmPtvDzOpSf7X/69I/9/n/+v/6//r/5eU/r/+fzf6//r/g7x+/X/9f3orW/8/5v4dYSY1yf8AAABQBzH3fzjMRP4HAACAyoi5/44wE/kfAAAABkqnzyGMYu7/SJhJTfK//n/V+/8LK/X/9f/1/7uvX/+/v/T/9f+70f/X/x/k9ev/6//TW9n6/zH37wwzqUn+BwAAgDqIuf/OMBP5HwAAACoj5v67wkzkfwAAAKiMmPt3hZnUJP/r/1e9/+/z//X/9f97rV//v7/0//X/u9H/H8z+f/ixRf+/RP3//BjS/6eMytb/j7n/7jCTmuR/AAAAqIOY+z8aZiL/AwAAQGXE3P+xMBP5HwAAACoj5v6Ph5nUJP/r/+v/6//r/+v/6//3k/5/3/r/jZdC/f+C/v/Zudj9+UFff5n6/z7/n7IqW/8/5v57wkyWCH6rlnUvAQAAgDKJuf8TYSY1+fd/AAAAqIOY+389zET+BwAAgMqIuf/eMJOa5H/9f/1//X/9f/1//f9+0v/3+f/d6P/r/w/y+vX/9f/prWz9/5j7fyPMpCb5HwAAAOog5v77wkzkfwAAAKiMmPs/GWYi/wMAAMCAWbHkOTH3/2aYSU3yv/7/hen/D6fr1//X/9f/1//X/z+f9P/1/zP9/7PWoz//TtvDv4j+v/6//j+9lK3/H3P/b4WZ1CT/AwAAQB3E3P+pMBP5HwAAACoj5v7fDjOR/wEAAKAyYu6/P8ykJvn/fPf/2y/fTZ36/z7/X/8/0//X/2/aq/r/54/+v/5/pv9/1i52f37Q16//r/9Pb2Xr/8fc/zthJjXJ/wAAAFAHMfc/EGYi/wMAAEBlxNz/6TAT+R8AAAAqI+b+z4SZ1CT/+/x//X/9f/1//X/9/37S/9f/70b/X/9/kNev/6//T29l6//H3P9gmElN8j8AAADUQcz9nw0zkf8BAACgMmLu/90wE/kfAAAAKiPm/t8LM6lJ/tf/1//X/9f/1//X/+8n/f/F/f/8NUz/v6D/r/8/yOvX/9f/p7ey9f9j7v9cmElN8j8AAADUQcz9vx9mIv8DAABAZcTc/wdhJvI/AAAAVEbM/Q+FmdQk/+v/6//r/+v/6//r//eT/r/P/+9G/1//f5DXr/+v/09vZev/x9z/+TCTmuR/AAAAqIOY+/8wzET+BwAAgMqIuX93mIn8DwAAAJURc//DYSY1yf/6//r/+v/6//r/+v/9pP+v/9+N/r/+/yCvX/9f/5/eytb/j7l/T5jJrtabAQAAAAZXzP1fCDOpyb//AwAAQB3E3L83zET+BwAAgMqIuX9fmElN8r/+v/6//r/+v/6//n8/6f/r/3ej/6//P8jr1//X/6e3svX/Y+6fCTOpSf4HAACAOoi5f3+YifwPAAAAlRFz/4EwE/kfAAAAKiPm/kfCTGqS//X/9f/1/2vb/3/1e23r1P/X/+8H/X/9/270//X/B3n9+v/6//RWtv5/zP0Hw0xqkv8BAACgDmLu/2KYSa/8P97PVQEAAADnU8z9Xwoz8e//AAAAUBkx9x8KM6lJ/tf/1//X/69t/9/n/wf6//2l/6//343+v/7/IK9f/1//n97K1v+Puf9wmElN8j8AAADUQcz9R8JM5H8AAACojJj7j4aZyP8AAABQGTH3HwszqUn+1/8/s/7/0BLdQP3/zuvX/9f/1//X/9f/1/9v1v7xSfr/+v+DvH79f/1/eitb/z/m/j8KM6lJ/gcAAIA6iLn/eJiJ/A8AAACVEXP/bJiJ/A8AAACVEXP/XJhJTfK//r/P/9f/1//X/9f/7yf9f/3/bvT/9f8Hef36//r/9Fa2/n/M/SfCTGqS/wEAAKAOYu7/f/buM1evq4rj8BsHk0iIOcAQGEGGwACQkJCYAF/oxaGHDqH3FnoLHUzvvYXeew+EHooESrzWsnF8z7n29Zu7z17P82XJ11jeCAT6C346D4xb7H8AAACYRu7+B8Ut9j8AAABMI3f/g+OWJvtf/6//1//r//X/+v990v/r/5fo//X/W36//l//z7rR+v/c/Q+JW5rsfwAAAOggd/9D4xb7HwAAAKaRu/9hcYv9DwAAANPI3f/wuKXJ/tf/6//1//p//b/+f5/0//r/Jfp//f+W36//1/+zbrT+P3f/I+KWJvsfAAAAOsjd/8i4xf4HAACAaeTuf1TcYv8DAADANHL3n4pbmux//b/+X/+v/9f/6//3Sf+v/1+i/5+v/7/rTv+v/9f/c9Zo/X/u/mvjlib7HwAAADrI3f/ouMX+BwAAgGnk7n9M3GL/AwAAwDRy9z82bmmy//X/+n/9v/5f/6//3yf9v/5/if5/vv7f9//1//p/zjVa/5+7/3FxS5P9DwAAAB3k7n983GL/AwAAwDRy9z8hbrH/AQAAYBq5+58YtzTZ//p//b/+X//frv8/7z8j9P/7pf/X/y/R/+v/t/x+/b/+n3V77//vfd3t97D9f+7+6+KWJvsfAAAAOsjd/6S4xf4HAACAaeTuf3LcYv8DAADANHL3PyVuabL/9f/6/7P9/3+v0P/r/1v0/+f9ffr//dL/6/+X6P/1/1t+v/5f/8+6vff/K73/+b/O3f/UuKXJ/gcAAIAOcvc/LW6x/wEAAGAaufufHrfY/wAAADCN3P3PiFua7H/9v/7f9//1//p//f8+6f/1/0v0//r/Lb9/qf+/5hDv1//TwWj9f+7+Z8YtTfY/AAAAdJC7/1lxi/0PAAAA08jdf33cYv8DAADANHL3PztuabL/9f/6f/2//v//+/8TLfv/236m/98P/b/+f4n+X/8/9vuvuMvSn/f9f/0/60br/3P3PyduabL/AQAAoIPc/c+NW+x/AAAAmEbu/ufFLfY/AAAATCN3//Pjlib7X/+v/9f/6/+P9P3/K+fo/33/f3/0//r/Jfr/+P1TZ/9+/f923q//1/+zbrT+P3f/C+KWJvsfAAAAOsjd/8K4xf4HAACAaeTuf1HcYv8DAADANHL3vzhuabL/9f/6f/2//v9I/f8k3//X/++P/l//v+Sw/f9u8v7f9/+3+X79v/6fdaP1/7n7XxK3NNn/AAAA0EHu/pfGLfY/AAAAbNJN5/1/2G6Tu/9lcYv9DwAAANPI3f/yuKXJ/tf/X9b+/8RO/6//1/8X/b/+f6f/1/+v8P1//f+W36//1/+zbrT+P3f/K+KWJvsfAAAAOsjd/8q4xf4HAACAaeTuf1XcYv8DAADANHL3vzpuabL/9f++/6//1//r//X/+6T/1/8v0f9fuP+/+oC/T/8/1vv1//p/1o3W/+fuvyFuabL/AQAAoIPc/a+JW+x/AAAAmEbu/tfGLfY/AAAATCN3/+vilib7/6D+/5a7nfl9/f/h6P8v/H79v/5f/6//1//r/5fo/33/f8vv1//r/1k3Wv+fu//1cUuT/Q8AAAAd5O5/Q9xi/wMAAMA0cve/MW6x/wEAAGAaufvfFLc02f+X//v/99D/6//1/3H1//p//b/+X/+/TP+v/9/y+/X/+n/Wjdb/5+5/c9zSZP8DAABAB7n73xK32P8AAAAwjdz9b41b7H8AAACYRu7+t8UtTfb/5e//ff9f/3+R/f8J/X/S/8e/rvp//f9F0P/r/3f6/0t23P381t+v/9f/s260/j93/41xS5P9DwAAAB3k7n973GL/AwAAwDRy978jbrH/AQAAYBq5+98ZtzTZ/3fs/6/Z6f/1/77/r/8/Q/+v/z86/b/+f4n+X/+/5ffr//X/rBut/8/d/664pcn+BwAAgA5y9787brH/AQAAYBq5+98Tt9j/AAAAMI3c/e+NW5rsf9//1//r/4fv/288/99v+n/9/5bo//X/S/T/+v8tv3+c/j9+cEr/z3hG6/9z978vbmmy/wEAAKCD3P3vj1vsfwAAAJhG7v7TcYv9DwAAANM4fes9H3Df+lW//a//33r/f7+b4wX6/3n7f9//j6v/1/9fiP5f/7/T/1+y4+7nt/7+cfp/3/9nXKP1/x+4/U9dvftg3NJk/wMAAEAHufs/FLfY/wAAADCN3P0fjlvsfwAAAJhG7v6PxC1N9r/+f+v9v+//6//1//r/sen/9f9L9P/6/y2/X/+v/2fdaP1/7v6Pxi1N9j8AAAB0kLv/Y3GL/Q8AAADTyN3/8bjF/gcAAIBp5O7/RNzSZP/r//X/+n/9/5H7/2v1/zv9/4H0//r/Jfp//f+W36//1/+zbrT+P3f/J+OWJvsfAAAAOsjd/6m4xf4HAACAaeTu/3TcYv8DAADANHL3fyZuuNfdj+9Jl9fJA34evbn+X/+v/9f/+/6//n+f9P/6/yX6f/3/lt+v/9f/s260/j93/2fjFv/7PwAAAEwjd//n4hb7HwAAAKaRu//zcYv9DwAAANPI3f+FuKXJ/tf/6//1//p//b/+f5/0//r/Jfp//f+W36//1/+zbrT+P3f/F+OWJvsfAAAAOsjd/6W4xf4HAACAaeTu/3LcYv8DAADANHL3fyVuabL/9f/6f/2//v+4+v/77PT/+v+j0//r/3f6/0t23P381t+v/9f/s260/j93/1fjlib7HwAAADrI3f+1uMX+BwAAgGnk7r8pbrH/AQAAYBq5+78etzTZ//p//b/+X//v+//6/33S/+v/l+j/9f9bfr/+X//PutH6/9z934hbmux/AAAA6CB3/zfjFvsfAAAAppG7/1txi/0PAAAA08jd/+24pcn+n7n/X/qH6f/P0P/r/3f6f/3/nun/9f9L9P/6/y2/X/+v/2fdaP1/7v7vxC1N9j8AAAB0kLv/u3GL/Q8AAADTyN3/vbjF/gcAAIBp5O7/ftzSZP/P3P8v0f+fof/X/+/0//r/PdP/6/+X6P/1/1t+v/5f/8+6Y+r/T+4O6P9z9/8gbmmy/wEAAKCD3P0/jFvsfwAAAJhG7v4fxS32PwAAAEwjd/+P45Z59v/9Ty/8pv5f/6//1//r//X/+6T/1/8v0f/r/7f8fv2//p91o33/P3f/T+KWefY/AAAAtJe7/6dxi/0PAAAA08jd/7O4xf4HAACAaeTu/3nc0mT/6//1//r/Vv3/lTv9v/7/Tqb/1/8v0f/r/7f8fv2//p91o/X/uft/Ebc02f8AAADQQe7+X8Yt9j8AAABMI3f/r+IW+x8AAACmkbv/13FLk/2v/9f/6/9b9f++/6//v9Pp//X/S/T/+v8tv1//r/9n3Wj9f+7+38QtTfY/AAAAdJC7/7dxi/0PAAAA08jd/7u4xf4HAACAaeTu/33c0mT/6//1//p//b/+X/+/T/p//f8S/b/+f8vv1//r/1k3Wv+fu//muKXJ/gcAAIAOcvf/IW6x/wEAAGAaufv/GLfY/wAAADCN3P23xC1N9r/+X/8/Zf9/lf5f/6//H4X+/1L6/0P+F6n+X/9/RMfdz2/9/fp//T/rRuv/c/f/KW5psv8BAACgg9z9f45b7H8AAACYRu7+v8Qt9j8AAABMI3f/X+OWJvtf/6//v/j+/2T98x62//f9f/2//n8Y+n/f/1/Svf+//oYzP9b/b/P9+n/9P+tG6/9z9/8tbmmy/wEAAKCD3P1/j1vsfwAAAJhG7v5/xC32PwAAAEwjd/+tcUuT/a//1/9P+f1//b/+X/8/DP3/bP3/Vfr/c/j+v/5f/6//Z9lo/X/u/n/GLU32PwAAAHSQu/9fcYv9DwAAANPI3f/vuMX+BwAAgGnk7v9P3NJk/+v/9f/6f/2//l//v0/6/9n6f9//P5f+X/+v/9f/s2y0/j93//8CAAD//+C7SbY=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
creat(&(0x7f0000000080)='./file1\x00', 0x1)

511.415508ms ago: executing program 2 (id=861):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

391.773671ms ago: executing program 2 (id=852):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x4, &(0x7f0000000140)={0x1e, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}})

374.047732ms ago: executing program 3 (id=853):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303001000080303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303a30303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c", @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRES8], 0xfc, 0xc44, &(0x7f0000003100)="$eJzs3U9sHNd9B/DfG5HiUm4rxnYUJ42LTVuksmK5+hdTsQp3VdNsA8iyEIq5BeCKpNSFKZIgqUY20oLupYceAhRFDzkRaI0CKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAOQUMZvatuKRJmxb/iJI/H5v67s68N/PezHJGIvjmBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ8QcvXz5zNj3oVgAAB+nqyNfOnHP/B4BPlOv+/Q8AAAAAAAAAAAAAAIddiiKeiBSzV1fTWPW+rXal1Xvn7ujQ8NbV+lNV80hVvvyqnT13/sKXnx+82MkrrekPqb/XPhevjly/XH9p5vbs3OT8/OREfXS6NT4zMbnjLey2/manqgNQv/3anYmbN+fr5547v2H13YH3+x47MXBp8JnTT3fKjg4ND4+sF6l1l++574a0bTfC42gUcTpSPPu9n6ZmRBSx+2NRO9hzv1l/1YlTVSdGh4arjky1mtML5cprnQNRRNS7KjU6x2jrcxE9vQfah+01IhbL5pcNPlV2b2S2Ode8MTVZv9acW2gttGamr6V2a8v+1KOIiyliKSJW+j64ud4ooidSfOf4aroREUc6x+FL1cDg7dtR7GMfd6BsZ703Yql4CM7ZIdYXRbwSKX72zskYz9eZ6lrzxYhXyvxBxFtlvhiRyg/GhYj3tvgc8XDqiSL+sjz/l1bTRHU96FxXrny9/tXpmzNdZTvXlY95f/jAleIB3R/6N+XBOOTXploU0ayu+Kvp/v+yAwAAAAAAAAAAAAAAAMBe648iPhspXv6PP6nGFUc1Lv34pcE/HPjV7jHjT33Edsqyz0XEYrGzMblH88DAa+laSvcxlvhgB/E9umpRxJ/m8X9vPujGAAAAAAAAAAAAAAAAAAAAfKIV8ZNI8cK7J9NSdM8p3pq+Vb/evDHVnhW2M/dvZ870tbW1tXpqZyPnWM7FnEs5l3Ou5Iwi18/ZyDmWczHnUs7lnCs540iun7ORcyznYs6lnMs5V3JGT66fs5FzLOdizqWcyzlXcsYhmbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRUkQRv4gU3/7maooUEY2IsWjnct+Dbh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUOpLRXw/UtT/qHFvWU9EpOr/tpPlHxeicbTMx6MxWOaL0bics1llT+PNB9B+dqc3FfHjSNFXeztST3tZPv+97Xf3Pgbx1rfW330ulz3SWTnwft9jJ45fGhz+jae2e522asCpK63pO3fro0PDwyNdi3vy3h/vWjaQ91vsUd+JmH/9jdeaU1OTc/f/ovwI7KL6Q/Si/AY5BM3w4qBeRM+haMaD6TufAOX9/71I8bvv/mfnht++/9fiV9rv7t3h4+d/tn7/f2HzhnZ4/+/ZXC/f/8t7+lb3/ye6lr2Q/zbS2xNRW7g923siojb/+hunW7ebtyZvTU5fOHPmK4ODXzl/pvdoRO1ma2qy69WeHC4AAAAAAAAAAAAAAACAg5OK+P1I0fzxaqpHxN1qvNbApcFnTj99JI5U4602jNt+deT65fpLM7dn5ybn5ycn6qPTrfGZicmd7q5WDfcaHRrel858pP59bn9/7aWZ2dfnWrf+eGHL9cdql2/ML8w1x7deHf1RRDS6l5yqGjw6NFw1eqrVnK6qXttyMP3H15uK+K9IMX6hnr6Ql+Xx/5tH+G8Y/7+4eUP7NP7/U13Lyn2mVMTPI8Xv/NVT8YWqncfiA8csl/u7SHHq4udzuThaluu04fHqIQLtkYFl2f+LFP/0i41lO+Mh22MQq7Jnd35kHw7l+T8eKb7/F9+N38zLNj7/Yevzf2zzhvbp/D/ZtezYhucV7Lrr5PN/OlK8+MTb8Vt52Yc9/6Pz7I2TufC953Ps0/n/dNeygbzf396brgMAAAAAAAAAADzUelMRfx8pfjjck57Py3by+38Tmze0T7//9ZmuZRN7M1/RR77Y9UEFAAAAgEOiNxXxk0hxa+Hte2OoN47/7hr/+Xvr4z+H0qa11c/5fq16bsBe/vyv20De79juuw0AAAAAAAAAAAAAAAAAAACHSkpFPJ/nUx+rxvNPbDuf+nKkePl/ns3l0omyXGce+IHqz9rVmenTl6emZsabC80bU5P1kdnm+GRZ98lIsfq3n891i2p+9c588+053tfnYp+LFMP/0Cnbnou9Mzf5k+tlz5ZlPxUp/vsfc9m1tapsZx7rT6+XPVeW/ZtI8Y1/2bjdTtkT62XPl2W/Gyl+9I16p+yxsmzn+aifWS/73PhMsQ9nBQAAAAAAAAAAAAAAAAAAgE+a3lTEn0eK/729dG8sf57/v7frbeWtb3XN97/J3Wqe/4Fq/v/tXt/P/P/VcwUWt9srAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8mlIU8UakmL26mpb7yvdttSut6Tt3R4eGt67Wn6qaR6ry5Vft7LnzF778/ODFTn54/b322Xh15Prl+kszt2fnJufnJyfqo9Ot8ZmJyR1vYbf1NztVHYD67dfuTNy8OV8/99z5DavvDrzf99iJgUuDz5x+ulN2dGh4eKSrTE/vx93pm9uuSdssPxpF/HWkePZ7P00/7IsoYvfHYsvPTt/Oe7FL/VUnTlWdGB0arjoy1WpOL5Qrr3UORBFR76rU6ByjPTsX+6QRsVg2v2zwqbJ7I7PNueaNqcn6tebcQmuhNTN9LbVbW/anHkVcTBFLEbGyxTnojSJeixTfOb6a/rUv4kjnOHzp6sjXzpzbvh3FPvZxB8p21nsjloqH4JwdYn1RxD9Hip+9czL+rS+iJ9pf8cWIV8r8QcRb0T7fqfxgXIh47+C+l9lnPVHE/5fn/9JqeqevvB50ritXvl7/6vTNma6ynevKvtwfDk7/ge7tkF+balHEj6or/mr6d9/XAAAAAAAAAAAAAAAAAIdIEb8eKV5492SqxgffG1Pcmr5Vv968MdUe1tcZ+9cZM722trZWT+1s5BzLuZhzKedyzpWcUeT6ORtl1tbWxvL7xZxLOZdzruSMI7l+zkbOsZyLOZdyLudcyRk9uX7ORs6xnIs5l3Iu51zJGYdk7B4AAAAAAAAAAAAAAAAAAPBoKar/Unz7m6tpra89v/RYtHPZfKCPvF8GAAD//xze+0A=")
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = open(&(0x7f0000000040)='.\x00', 0x101480, 0x24)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

0s ago: executing program 0 (id=854):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

kernel console output (not intermixed with test programs):

: loop0: Mark volume as dirty due to NTFS errors
[   71.139204][ T4769] loop4: detected capacity change from 0 to 4096
[   71.150739][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.157224][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.432195][ T4797] loop0: detected capacity change from 0 to 1024
[   71.489715][ T4797] EXT4-fs (loop0): Ignoring removed oldalloc option
[   71.500470][ T4797] EXT4-fs (loop0): Ignoring removed oldalloc option
[   71.549476][ T4797] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   71.607865][ T4807] input: syz0 as /devices/virtual/input/input6
[   71.630166][ T4806] device syzkaller1 entered promiscuous mode
[   71.636822][ T4797] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none.
[   71.855316][ T4817] loop2: detected capacity change from 0 to 4096
[   71.959178][ T4820] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   72.000923][   T25] audit: type=1800 audit(1787621615.693:5): pid=4817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.192" name="file1" dev="loop2" ino=15 res=0 errno=0
[   72.004402][ T4824] netlink: 32 bytes leftover after parsing attributes in process `syz.3.195'.
[   72.057227][ T4824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.195'.
[   72.200515][   T25] audit: type=1800 audit(1787621615.893:6): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.197" name="out_ports" dev="configfs" ino=33786 res=0 errno=0
[   72.655439][ T4857] loop1: detected capacity change from 0 to 1024
[   72.718344][ T4852] loop3: detected capacity change from 0 to 4096
[   72.785309][ T4852] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[   72.878902][ T4852] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   72.933009][ T4852] ntfs3: loop3: Failed to load $Extend.
[   72.940190][ T4857] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[   72.999492][ T4857] hfsplus: xattr searching failed
[   73.021189][ T4864] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[   73.022621][ T4852] ntfs3: loop3: MftZone: unavailable
[   73.028857][ T4864] hfsplus: xattr search failed
[   73.056826][ T4852] ntfs3: loop3: MftZone: unavailable
[   73.098052][ T4251] hfsplus: b-tree write err: -5, ino 25
[   73.122563][ T4852] ntfs3: loop3: no free space to extend mft
[   73.139895][ T4251] hfsplus: b-tree write err: -5, ino 4
[   73.153507][ T4251] hfsplus: b-tree write err: -5, ino 2
[   73.187967][ T4251] hfsplus: b-tree write err: -5, ino 28
[   73.365971][ T4877] overlayfs: failed to resolve './cgroup': -2
[   73.621793][ T4898] loop2: detected capacity change from 0 to 64
[   73.678785][ T4904] loop1: detected capacity change from 0 to 764
[   73.711307][ T4907] loop0: detected capacity change from 0 to 2048
[   73.733723][   T25] audit: type=1800 audit(1787621617.423:7): pid=4898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.228" name="file1" dev="loop2" ino=21 res=0 errno=0
[   73.781140][ T4907] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   73.821144][ T4189] hfs: node 4:3 still has 1 user(s)!
[   73.923223][ T4913] overlayfs: failed to set xattr on upper
[   73.942529][ T4915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.235'.
[   73.951819][ T4913] overlayfs: ...falling back to index=off,metacopy=off.
[   74.015189][ T4917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   74.089469][ T4920] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   74.132388][ T4920] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.302797][ T4920] fscrypt (loop3, inode 12): Reserved bits set in encryption policy
[   74.396585][ T4920] syz.3.239 (pid 4920) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   74.448062][ T4938] process 'syz.4.245' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   74.473480][ T4938] device ip6gre1 entered promiscuous mode
[   74.610566][   T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   74.692396][ T4945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'.
[   74.711645][ T4926] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   74.722073][ T4926] REISERFS (device loop1): using ordered data mode
[   74.728592][ T4926] reiserfs: using flush barriers
[   74.749446][ T4926] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   74.775565][ T4926] REISERFS (device loop1): checking transaction log (loop1)
[   74.928256][ T4926] REISERFS (device loop1): Using r5 hash to sort names
[   74.942299][ T4926] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   74.958888][ T4926] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   75.140075][   T13] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[   75.149646][   T13] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[   75.158049][   T13] usb 3-1: Product: syz
[   75.166002][ T4962] set_capacity_and_notify: 4 callbacks suppressed
[   75.166014][ T4962] loop0: detected capacity change from 0 to 256
[   75.204471][   T13] usb 3-1: config 0 descriptor??
[   75.296639][   T13] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[   75.312422][   T13] usb 3-1: Detected FT232H
[   75.519663][   T13] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   75.611253][ T4968] loop0: detected capacity change from 0 to 4096
[   75.767517][ T4971] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   75.780518][ T4954] loop3: detected capacity change from 0 to 32768
[   75.843424][   T25] audit: type=1800 audit(1787621619.503:8): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.259" name="file1" dev="loop0" ino=15 res=0 errno=0
[   75.988909][ T4954] XFS (loop3): Mounting V5 Filesystem
[   76.013598][   T13] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   76.058906][ T4966] loop4: detected capacity change from 0 to 131072
[   76.145020][ T4966] F2FS-fs (loop4): invalid crc value
[   76.147014][ T4954] XFS (loop3): Ending clean mount
[   76.233366][ T1108] usb 3-1: USB disconnect, device number 3
[   76.257573][ T4966] F2FS-fs (loop4): Found nat_bits in checkpoint
[   76.307250][ T4966] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[   76.353624][ T1108] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   76.363363][ T4966] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   76.415823][ T1108] ftdi_sio 3-1:0.0: device disconnected
[   76.534904][ T4190] XFS (loop3): Unmounting Filesystem
[   76.675769][ T4999] loop0: detected capacity change from 0 to 4096
[   76.850316][ T4999] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   76.948124][ T4999] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   76.982042][ T5007] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[   77.111454][ T4999] ntfs3: loop0: ino=5, "/" directory corrupted
[   77.182471][ T5009] loop4: detected capacity change from 0 to 4096
[   77.237108][  T144] ntfs3: loop0: ino=5, directory corrupted
[   77.253775][ T5009] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[   77.266633][ T5013] serio: Serial port ptm0
[   77.299539][  T144] ntfs3: loop0: ino=1e, Internal error
[   77.305289][  T144] ntfs3: loop0: ntfs3_write_inode r=1e failed, -22.
[   77.439656][ T5009] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22.
[   77.636993][ T1276] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22.
[   77.673339][ T4192] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22.
[   77.686730][ T5016] loop2: detected capacity change from 0 to 8192
[   77.699139][ T5026] gadgetfs: bound to dummy_udc driver
[   77.714838][ T4192] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[   77.911484][ T5016] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[   77.969452][ T5016] REISERFS (device loop2): using ordered data mode
[   77.975988][ T5016] reiserfs: using flush barriers
[   78.103382][ T5016] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   78.170095][ T5016] REISERFS (device loop2): checking transaction log (loop2)
[   78.427136][ T5053] loop0: detected capacity change from 0 to 128
[   78.431511][ T5044] loop4: detected capacity change from 0 to 32768
[   78.481555][ T5016] REISERFS (device loop2): Using tea hash to sort names
[   78.491758][ T5016] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   78.533688][ T5053] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   78.552555][ T5044] XFS (loop4): Mounting V5 Filesystem
[   78.611089][ T5037] loop3: detected capacity change from 0 to 32768
[   78.634717][ T5044] XFS (loop4): Ending clean mount
[   78.672598][ T5044] XFS (loop4): Quotacheck needed: Please wait.
[   78.714460][ T5037] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[   78.714460][ T5037] 
[   78.733360][ T5044] XFS (loop4): Quotacheck: Done.
[   78.875693][ T4192] XFS (loop4): Unmounting Filesystem
[   79.225819][ T5078] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   79.567267][ T5092] device macsec1 entered promiscuous mode
[   79.610047][ T5092] device wlan0 entered promiscuous mode
[   79.649131][ T5095] device macsec2 entered promiscuous mode
[   79.657101][ T5095] Zero length message leads to an empty skb
[   79.924319][ T4234] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   79.952592][   T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   79.964311][ T5111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.310'.
[   79.994046][   T13] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   80.337010][ T5097] set_capacity_and_notify: 2 callbacks suppressed
[   80.337023][ T5097] loop1: detected capacity change from 0 to 32768
[   80.359677][ T4234] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.381100][ T4234] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   80.396033][ T5097] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.305 (5097)
[   80.414753][ T4234] usb 5-1: config 0 interface 0 has no altsetting 0
[   80.431858][ T4234] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   80.449842][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.463544][ T4234] usb 5-1: config 0 descriptor??
[   80.498172][ T5097] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   80.508788][ T5097] BTRFS info (device loop1): max_inline at 4
[   80.516055][ T5097] BTRFS info (device loop1): using free space tree
[   80.522687][ T5097] BTRFS info (device loop1): has skinny extents
[   80.629512][ T4232] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   80.680024][ T5143] loop3: detected capacity change from 0 to 4096
[   80.704534][ T5143] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[   80.870542][  T527] BTRFS warning (device loop1): checksum verify failed on 5312512 wanted 0xb043382657aede36608fd3386d6b001692ff406164733d94e2d9a180412c6003 found 0xbf7f6c38dc0c7e580dd04ab0c11d46c3ca5837020abf916d8be1da2832dcdc41 level 0
[   80.907063][ T5097] BTRFS warning (device loop1): failed to read root (objectid=7): -5
[   81.276865][ T5139] loop2: detected capacity change from 0 to 131072
[   81.315234][ T5143] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22.
[   81.330699][ T5097] BTRFS error (device loop1): open_ctree failed: -22
[   81.346282][ T5139] F2FS-fs (loop2): invalid crc value
[   81.351992][  T144] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22.
[   81.355541][ T4234] hid-multitouch 0003:0EEF:72C4.0002: unbalanced collection at end of report description
[   81.380789][ T4190] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22.
[   81.381843][ T1345] cfg80211: failed to load regulatory.db
[   81.403617][ T4234] hid-multitouch: probe of 0003:0EEF:72C4.0002 failed with error -22
[   81.406259][ T4190] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   81.427175][ T5139] F2FS-fs (loop2): Found nat_bits in checkpoint
[   81.459031][ T5139] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[   81.505822][ T5139] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   81.538541][ T4232] usb 1-1: Using ep0 maxpacket: 8
[   81.577214][   T25] audit: type=1800 audit(1787621625.263:9): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.316" name="file1" dev="loop2" ino=7 res=0 errno=0
[   81.600400][ T5160] usb 5-1: USB disconnect, device number 4
[   81.699876][ T4232] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[   81.708096][ T4232] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   81.749400][ T4232] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   81.773322][ T4232] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   81.806297][ T4232] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   81.837740][ T4232] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   81.879386][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.887604][ T5172] loop3: detected capacity change from 0 to 256
[   81.984881][ T5176] loop1: detected capacity change from 0 to 4096
[   82.064030][ T5177] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   82.094357][   T25] audit: type=1800 audit(1787621625.783:10): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.323" name="file1" dev="loop1" ino=15 res=0 errno=0
[   82.159503][ T4232] usb 1-1: usb_control_msg returned -32
[   82.165108][ T4232] usbtmc 1-1:16.0: can't read capabilities
[   82.499940][ T5186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.327'.
[   82.550716][ T5188] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   82.569796][ T5187] usbtmc 1-1:16.0: control status returned 2
[   82.773597][    T7] usb 1-1: USB disconnect, device number 3
[   82.796465][ T5182] loop3: detected capacity change from 0 to 32768
[   82.891755][ T5182] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[   82.946461][ T5182] JBD2: Ignoring recovery information on journal
[   82.958490][ T5196] loop2: detected capacity change from 0 to 512
[   83.088420][ T5182] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   83.106362][ T5196] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.320: iget: bad i_size value: 38620345925642
[   83.149466][ T5192] loop4: detected capacity change from 0 to 32768
[   83.175596][ T5196] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.320: couldn't read orphan inode 15 (err -117)
[   83.215370][ T5204] loop1: detected capacity change from 0 to 512
[   83.222660][ T5196] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,quota,journal_dev=0x0000000000000011,bsddf,delalloc,usrjquota=,minixdf,,errors=continue. Quota mode: writeback.
[   83.338132][ T5204] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   83.356851][   T25] audit: type=1804 audit(1787621627.043:11): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.320" name="/newroot/60/bus/bus" dev="loop2" ino=18 res=1 errno=0
[   83.375005][ T5204] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.391790][ T5192] XFS (loop4): Mounting V5 Filesystem
[   83.501067][ T5192] XFS (loop4): Ending clean mount
[   83.557101][ T5196] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.320: bg 0: block 5: invalid block bitmap
[   83.579959][ T5196] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   83.652249][ T5196] EXT4-fs (loop2): This should not happen!! Data will be lost
[   83.652249][ T5196] 
[   83.676811][ T5196] EXT4-fs (loop2): Total free blocks count 0
[   83.685262][ T4192] XFS (loop4): Unmounting Filesystem
[   83.714372][ T5196] EXT4-fs (loop2): Free/Dirty block details
[   83.721792][ T5196] EXT4-fs (loop2): free_blocks=0
[   83.743505][ T5196] EXT4-fs (loop2): dirty_blocks=1
[   83.749142][ T5196] EXT4-fs (loop2): Block reservation details
[   83.772261][ T5196] EXT4-fs (loop2): i_reserved_data_blocks=1
[   84.468250][ T5238] netlink: 'syz.4.342': attribute type 10 has an invalid length.
[   84.498634][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.507779][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.554885][ T5222] loop1: detected capacity change from 0 to 40213
[   84.583430][ T5222] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   84.605503][ T5222] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   84.624647][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.631801][ T5238] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.640383][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.647595][ T5238] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.676538][ T5222] F2FS-fs (loop1): invalid crc value
[   84.682516][ T5238] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   84.696143][ T5241] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:d0f7:73ff:fe7a:b790 error=-28
[   84.735114][ T5222] F2FS-fs (loop1): Mismatch valid blocks 232 vs. 256
[   84.757187][ T5222] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117)
[   85.007286][ T5241] infiniband syz0: set active
[   85.036314][ T5241] infiniband syz0: added bridge_slave_1
[   85.049595][ T5158] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   85.162584][ T5241] RDS/IB: syz0: added
[   85.167562][ T5241] smc: adding ib device syz0 with port count 1
[   85.174383][ T5241] smc:    ib device syz0 port 1 has pnetid 
[   85.309462][ T5158] usb 1-1: Using ep0 maxpacket: 8
[   85.429671][ T5158] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[   85.439902][ T5158] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   85.444328][ T5209] syz.3.324 (5209) used greatest stack depth: 18832 bytes left
[   85.475317][ T5158] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   85.499425][ T5158] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   85.520026][ T5158] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   85.554977][ T5158] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   85.585488][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.592368][ T5255] loop1: detected capacity change from 0 to 8192
[   85.717612][ T5263] loop2: detected capacity change from 0 to 16
[   85.743895][ T5255] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   85.755696][ T5255] REISERFS (device loop1): using ordered data mode
[   85.762398][ T5255] reiserfs: using flush barriers
[   85.774357][ T5255] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   85.783060][ T4190] ocfs2: Unmounting device (7,3) on (node local)
[   85.809737][ T5255] REISERFS (device loop1): checking transaction log (loop1)
[   85.816004][ T5263] erofs: (device loop2): mounted with root inode @ nid 36.
[   85.869657][ T5158] usb 1-1: usb_control_msg returned -32
[   85.893425][ T5158] usbtmc 1-1:16.0: can't read capabilities
[   86.011212][ T5263] erofs: (device loop2): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[   86.032254][ T5263] fuse: Bad value for 'fd'
[   86.090172][ T5255] REISERFS (device loop1): Using tea hash to sort names
[   86.119867][ T5255] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   86.199750][ T5268] printk: console [ttyS0] disabled
[   86.250209][ T5270] printk: console [ttyS0] enabled
[   86.420410][ T5274] loop4: detected capacity change from 0 to 4096
[   86.545004][ T5277] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.564609][   T25] audit: type=1800 audit(1787621630.253:12): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.359" name="file1" dev="loop4" ino=15 res=0 errno=0
[   87.042900][ T5160] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   87.329783][ T5159] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   87.420182][ T5160] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   87.430389][ T5160] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   87.599777][ T5160] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   87.608982][ T5160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.617379][ T5160] usb 2-1: Product: syz
[   87.621903][ T5160] usb 2-1: Manufacturer: syz
[   87.626488][ T5160] usb 2-1: SerialNumber: syz
[   87.649593][ T5280] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   87.656700][ T5280] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   87.670549][ T5160] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   87.682450][ T5160] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   87.693611][ T5160] usbserial_generic 2-1:1.0: generic converter detected
[   87.700733][ T5159] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   87.712979][ T5159] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   87.713238][ T5160] usb 2-1: generic converter now attached to ttyUSB0
[   87.729777][ T5159] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 180, changing to 11
[   87.740958][ T5159] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41877, setting to 1024
[   87.756379][ T5159] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[   87.765493][ T5159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.789721][ T5284] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   87.797003][ T5284] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   87.797327][ T5158] usb 1-1: USB disconnect, device number 4
[   87.840520][ T5159] pl2303 3-1:1.0: pl2303 converter detected
[   87.851601][ T5297] loop0: detected capacity change from 0 to 2048
[   87.856344][ T5159] usb 3-1: pl2303 converter now attached to ttyUSB1
[   87.901977][ T5297] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   87.909526][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   87.950202][ T5159] usb 2-1: USB disconnect, device number 3
[   87.959180][ T5298] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   87.974080][ T5159] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   87.979093][ T4347] udevd[4347]: incorrect nilfs2 checksum on /dev/loop0
[   87.993970][ T5159] usbserial_generic 2-1:1.0: device disconnected
[   88.236585][ T5306] hugetlbfs: syz.0.370 (5306): Using mlock ulimits for SHM_HUGETLB is deprecated
[   88.377616][ T5314] loop0: detected capacity change from 0 to 128
[   88.387178][ T5312] loop4: detected capacity change from 0 to 16
[   88.428373][ T5316] loop3: detected capacity change from 0 to 4096
[   88.449611][ T5312] erofs: (device loop4): mounted with root inode @ nid 36.
[   88.456854][ T5314] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   88.490670][ T5312] erofs: (device loop4): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[   88.507870][ T5312] fuse: Bad value for 'fd'
[   88.547180][ T5314] FAT-fs (loop0): error, parent dir link count too low (2)
[   88.556748][ T5319] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.568334][   T25] audit: type=1800 audit(1787621632.253:13): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.373" name="file1" dev="loop3" ino=15 res=0 errno=0
[   88.582487][ T5318] 9pnet: p9_errstr2errno: server reported unknown error �00000000000000000000005
[   88.603784][ T5314] FAT-fs (loop0): Filesystem has been set read-only
[   88.731316][ T4187] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   88.751671][ T5322] loop4: detected capacity change from 0 to 8
[   89.097298][ T5333] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   89.131102][ T5333] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   89.449471][ T4232] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   89.486807][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'.
[   89.707726][ T5353] loop1: detected capacity change from 0 to 8192
[   89.791650][ T5353] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   89.835845][ T5353] REISERFS (device loop1): using ordered data mode
[   89.856965][ T4232] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.858298][ T5353] reiserfs: using flush barriers
[   89.877377][ T4232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   89.897005][ T4232] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   89.899209][ T5353] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   89.955496][ T5353] REISERFS (device loop1): checking transaction log (loop1)
[   90.005055][ T5360] loop3: detected capacity change from 0 to 32768
[   90.020870][ T5360] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.393 (5360)
[   90.068831][ T5159] usb 3-1: USB disconnect, device number 4
[   90.071625][ T5360] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   90.094760][ T5353] REISERFS (device loop1): Using rupasov hash to sort names
[   90.104160][ T4232] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   90.121377][ T5159] pl2303 ttyUSB1: pl2303 converter now disconnected from ttyUSB1
[   90.128027][ T5360] BTRFS info (device loop3): use zlib compression, level 3
[   90.138906][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.148467][ T5353] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   90.159109][ T5360] BTRFS info (device loop3): turning on sync discard
[   90.167822][ T5159] pl2303 3-1:1.0: device disconnected
[   90.169108][ T4232] usb 1-1: Product: syz
[   90.187898][ T4232] usb 1-1: Manufacturer: syz
[   90.198800][ T5360] BTRFS info (device loop3): using free space tree
[   90.205892][ T4232] usb 1-1: SerialNumber: syz
[   90.213188][ T5360] BTRFS info (device loop3): has skinny extents
[   90.235937][ T5366] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   90.291620][ T4232] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[   90.302442][ T4232] cdc_ncm 1-1:1.0: bind() failure
[   90.604083][ T5388] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   90.623386][ T5388] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.626413][ T4232] usb 1-1: USB disconnect, device number 5
[   90.685193][ T5360] BTRFS info (device loop3): enabling ssd optimizations
[   90.725766][ T5394] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.398: iget: bad i_size value: 38620345925642
[   90.759677][ T5394] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.398: couldn't read orphan inode 15 (err -117)
[   90.806041][ T5394] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,quota,journal_dev=0x0000000000000011,bsddf,delalloc,usrjquota=,minixdf,,errors=continue. Quota mode: writeback.
[   90.936709][   T25] audit: type=1804 audit(1787621634.623:14): pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.398" name="/newroot/86/bus/bus" dev="loop1" ino=18 res=1 errno=0
[   91.115423][ T5394] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.398: bg 0: block 5: invalid block bitmap
[   91.145330][ T5394] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   91.162419][ T5394] EXT4-fs (loop1): This should not happen!! Data will be lost
[   91.162419][ T5394] 
[   91.174824][ T5394] EXT4-fs (loop1): Total free blocks count 0
[   91.184181][ T5394] EXT4-fs (loop1): Free/Dirty block details
[   91.193823][ T5394] EXT4-fs (loop1): free_blocks=0
[   91.199117][ T5394] EXT4-fs (loop1): dirty_blocks=1
[   91.207890][ T5394] EXT4-fs (loop1): Block reservation details
[   91.216838][ T5394] EXT4-fs (loop1): i_reserved_data_blocks=1
[   91.673951][ T5433] netlink: 'syz.0.410': attribute type 10 has an invalid length.
[   91.734486][ T5433] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.741914][ T5433] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.763347][ T5434] rdma_rxe: rxe_register_device failed with error -23
[   91.796903][ T5434] rdma_rxe: failed to add bridge_slave_1
[   91.873048][ T5433] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.880252][ T5433] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.887625][ T5433] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.894742][ T5433] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.085980][ T5433] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   92.339780][ T4197] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   92.381463][ T5430] set_capacity_and_notify: 2 callbacks suppressed
[   92.381477][ T5430] loop1: detected capacity change from 0 to 131072
[   92.471878][ T5431] loop2: detected capacity change from 0 to 32768
[   92.488242][ T5430] F2FS-fs (loop1): Found nat_bits in checkpoint
[   92.505286][ T5449] loop0: detected capacity change from 0 to 64
[   92.523684][ T5430] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   92.579450][ T4197] usb 4-1: Using ep0 maxpacket: 32
[   92.584803][ T5431] XFS (loop2): Mounting V5 Filesystem
[   92.716483][ T5431] XFS (loop2): Ending clean mount
[   92.795122][ T5431] XFS (loop2): User initiated shutdown received.
[   92.817060][ T5431] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[   92.852509][ T5431] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[   92.869574][ T4197] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[   92.899647][ T4197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.916589][ T4197] usb 4-1: Product: syz
[   92.926578][ T4197] usb 4-1: Manufacturer: syz
[   92.943516][ T4197] usb 4-1: SerialNumber: syz
[   92.950123][ T5466] loop4: detected capacity change from 0 to 512
[   92.963641][ T4197] usb 4-1: config 0 descriptor??
[   92.974389][ T4189] XFS (loop2): Unmounting Filesystem
[   93.016289][ T4197] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[   93.059595][ T5468] tipc: Started in network mode
[   93.069943][ T5468] tipc: Node identity 0010000000000000002, cluster identity 4711
[   93.136490][ T5466] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.418: iget: bad i_size value: 38620345925642
[   93.161413][ T5466] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.418: couldn't read orphan inode 15 (err -117)
[   93.179679][ T5466] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,quota,journal_dev=0x0000000000000011,bsddf,delalloc,usrjquota=,minixdf,,errors=continue. Quota mode: writeback.
[   93.367198][   T25] audit: type=1804 audit(1787621637.053:15): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.418" name="/newroot/76/bus/bus" dev="loop4" ino=18 res=1 errno=0
[   93.498322][ T5466] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.418: bg 0: block 5: invalid block bitmap
[   93.517421][ T5480] loop0: detected capacity change from 0 to 64
[   93.530429][ T5466] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   93.566165][ T5466] EXT4-fs (loop4): This should not happen!! Data will be lost
[   93.566165][ T5466] 
[   93.589088][ T5481] loop2: detected capacity change from 0 to 4096
[   93.599906][ T5466] EXT4-fs (loop4): Total free blocks count 0
[   93.645341][ T5466] EXT4-fs (loop4): Free/Dirty block details
[   93.655721][ T5466] EXT4-fs (loop4): free_blocks=0
[   93.661216][ T5466] EXT4-fs (loop4): dirty_blocks=1
[   93.678125][ T5466] EXT4-fs (loop4): Block reservation details
[   93.679481][ T4197] gspca_ov534_9: reg_w failed -71
[   93.697581][ T5481] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   93.717306][ T5481] ntfs3: loop2: Failed to load $Extend.
[   93.739120][ T5466] EXT4-fs (loop4): i_reserved_data_blocks=1
[   93.882039][ T5488] loop0: detected capacity change from 0 to 8
[   93.926271][ T5488] SQUASHFS error: xz decompression failed, data probably corrupt
[   93.951934][ T5488] SQUASHFS error: Failed to read block 0x108: -5
[   93.958292][ T5488] SQUASHFS error: Unable to read metadata cache entry [106]
[   93.974773][ T5488] SQUASHFS error: Unable to read inode 0x11f
[   94.099514][ T4197] gspca_ov534_9: Unknown sensor 0000
[   94.099573][ T4197] ov534_9: probe of 4-1:0.0 failed with error -22
[   94.101354][ T5491] loop4: detected capacity change from 0 to 256
[   94.122361][ T4197] usb 4-1: USB disconnect, device number 2
[   94.127873][ T5493] loop0: detected capacity change from 0 to 512
[   94.186725][ T5491] FAT-fs (loop4): Directory bread(block 64) failed
[   94.211773][ T5493] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   94.228546][ T5491] FAT-fs (loop4): Directory bread(block 65) failed
[   94.229653][ T5493] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.289878][ T5491] FAT-fs (loop4): Directory bread(block 66) failed
[   94.296437][ T5491] FAT-fs (loop4): Directory bread(block 67) failed
[   94.303925][ T5491] FAT-fs (loop4): Directory bread(block 68) failed
[   94.325918][ T5491] FAT-fs (loop4): Directory bread(block 69) failed
[   94.328337][ T5497] loop3: detected capacity change from 0 to 2048
[   94.336147][ T5491] FAT-fs (loop4): Directory bread(block 70) failed
[   94.353418][ T5491] FAT-fs (loop4): Directory bread(block 71) failed
[   94.374893][ T5491] FAT-fs (loop4): Directory bread(block 72) failed
[   94.393842][ T5498] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.395416][ T5491] FAT-fs (loop4): Directory bread(block 73) failed
[   94.430945][ T5497] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12
[   94.441511][ T5497] Remounting filesystem read-only
[   94.448092][ T5497] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12
[   94.713614][ T5504] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   94.780908][ T5504] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   94.869232][ T5504] EXT4-fs (loop3): 1 truncate cleaned up
[   94.876788][ T5515] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   94.887751][ T5515] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[   94.900873][ T5515] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   94.909434][ T5504] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[   95.019441][ T4197] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   95.109428][ T5158] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   95.448962][ T5521] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[   95.476257][ T5158] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   95.489962][ T5158] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   95.502087][ T5158] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[   95.512970][ T5158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.525158][ T4266] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   95.550733][ T4197] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[   95.569221][ T4197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.578771][ T4197] usb 2-1: Product: syz
[   95.588442][ T5158] spcp8x5 3-1:1.0: SPCP8x5 converter detected
[   95.606225][ T5158] usb 3-1: SPCP8x5 converter now attached to ttyUSB0
[   95.619465][ T4197] usb 2-1: Manufacturer: syz
[   95.625645][ T4197] usb 2-1: SerialNumber: syz
[   95.645614][ T4197] usb 2-1: config 0 descriptor??
[   95.710455][ T4197] gspca_main: sonixb-2.14.0 probing 0c45:6005
[   95.769683][ T4266] usb 5-1: Using ep0 maxpacket: 8
[   95.899001][ T5541] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   95.899681][ T4266] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   95.929636][ T4266] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   95.940281][ T4266] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   95.950512][ T4266] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   95.963843][ T4266] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   95.972978][ T4266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.020004][ T5512] SPCP8x5 ttyUSB0: failed to set control lines: -110
[   96.054414][ T5512] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[   96.112533][ T5512] SPCP8x5 ttyUSB0: failed to set control lines: -32
[   96.159542][ T4197] sonixb 2-1:0.0: Error writing register 01: -71
[   96.168894][ T4197] sonixb: probe of 2-1:0.0 failed with error -71
[   96.184241][ T4197] usb 2-1: USB disconnect, device number 4
[   96.239581][ T4266] usb 5-1: GET_CAPABILITIES returned 0
[   96.249639][ T5512] SPCP8x5 ttyUSB0: failed to set control lines: -32
[   96.266770][ T4266] usbtmc 5-1:16.0: can't read capabilities
[   96.318754][ T5424] usb 3-1: USB disconnect, device number 5
[   96.335915][ T5424] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[   96.355048][ T5424] spcp8x5 3-1:1.0: device disconnected
[   96.499905][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   96.510105][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   96.519362][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   96.528609][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   96.537832][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   96.547047][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   96.556265][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   96.565496][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   96.574745][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   96.583979][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   96.593212][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   96.602446][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   96.611690][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   96.620923][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   96.630155][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   96.671938][ T5425] usb 5-1: USB disconnect, device number 5
[   96.712083][ T5549] XFS (loop3): Mounting V5 Filesystem
[   96.779083][ T5549] XFS (loop3): Ending clean mount
[   96.831674][ T5549] XFS (loop3): User initiated shutdown received.
[   96.835621][ T5576] 9pnet: p9_errstr2errno: server reported unknown error �
[   96.842675][ T5549] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[   96.873199][ T5549] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[   96.918133][ T4190] XFS (loop3): Unmounting Filesystem
[   97.993000][ T5629] set_capacity_and_notify: 7 callbacks suppressed
[   97.993013][ T5629] loop2: detected capacity change from 0 to 32768
[   98.037022][ T5639] loop3: detected capacity change from 0 to 1024
[   98.109098][ T5629] XFS (loop2): Mounting V5 Filesystem
[   98.152944][ T5639] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[   98.226264][ T5639] EXT4-fs (loop3): Ignoring removed orlov option
[   98.242810][ T5629] XFS (loop2): Ending clean mount
[   98.258666][ T5633] loop0: detected capacity change from 0 to 32768
[   98.314325][ T5639] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,bsddf,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[   98.391691][ T4189] XFS (loop2): Unmounting Filesystem
[   98.393700][ T5633] JBD2: Ignoring recovery information on journal
[   98.486528][ T5641] loop1: detected capacity change from 0 to 32768
[   98.590470][ T5633] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   98.687703][ T5641] XFS (loop1): Mounting V5 Filesystem
[   98.864425][ T5641] XFS (loop1): Ending clean mount
[   98.936916][ T5641] XFS (loop1): User initiated shutdown received.
[   98.988914][ T5641] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[   99.021320][ T5680] loop4: detected capacity change from 0 to 128
[   99.052310][ T5641] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[   99.081292][ T4187] ocfs2: Unmounting device (7,0) on (node local)
[   99.102871][ T5680] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   99.116647][ T5680] hpfs: filesystem error: improperly stopped
[   99.123869][ T5680] hpfs: You really don't want any checks? You are crazy...
[   99.136300][ T5680] hpfs: hpfs_map_sector(): read error
[   99.142619][ T4266] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   99.157305][ T5680] hpfs: code page support is disabled
[   99.170047][ T4200] XFS (loop1): Unmounting Filesystem
[   99.180034][ T5680] hpfs: hpfs_map_4sectors(): unaligned read
[   99.186355][ T5680] hpfs: hpfs_map_4sectors(): unaligned read
[   99.192993][ T5680] hpfs: filesystem error: unable to find root dir
[   99.514505][ T4266] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   99.550808][ T4266] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   99.571411][ T5692] input: syz0 as /devices/virtual/input/input9
[   99.578465][ T4266] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 180, changing to 11
[   99.624394][ T4266] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41877, setting to 1024
[   99.644353][ T4266] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[   99.669145][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.702586][ T5671] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   99.710286][ T5671] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   99.720816][ T4266] pl2303 4-1:1.0: pl2303 converter detected
[   99.741651][ T4266] usb 4-1: pl2303 converter now attached to ttyUSB0
[   99.801192][ T5700] loop0: detected capacity change from 0 to 256
[   99.896503][ T5700] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   99.924915][ T5700] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   99.946337][ T5700] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   99.959544][    T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  100.129432][ T5424] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  100.162977][ T5671] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110
[  100.213541][ T5671] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  100.239539][ T5671] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  100.274899][ T5671] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  100.361789][    T7] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  100.390037][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.399455][ T5424] usb 5-1: Using ep0 maxpacket: 8
[  100.418792][ T5711] loop0: detected capacity change from 0 to 1024
[  100.530682][ T5424] usb 5-1: unable to get BOS descriptor or descriptor too short
[  100.536736][ T5711] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  100.589530][ T5424] usb 5-1: unable to read config index 0 descriptor/start: -71
[  100.594236][ T5670] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  100.597137][ T5424] usb 5-1: can't read configurations, error -71
[  100.623299][ T5706] loop2: detected capacity change from 0 to 32768
[  100.683355][ T5670] pl2303 ttyUSB0: error sending break = -32
[  100.704932][ T5706] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.489 (5706)
[  100.728860][ T1324] usb 4-1: USB disconnect, device number 3
[  100.770593][ T1324] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  100.798332][ T1324] pl2303 4-1:1.0: device disconnected
[  100.827825][ T5706] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  100.866328][ T5706] BTRFS info (device loop2): use zlib compression, level 3
[  100.887864][ T5706] BTRFS info (device loop2): turning on sync discard
[  100.911923][ T5706] BTRFS info (device loop2): using free space tree
[  100.918459][ T5706] BTRFS info (device loop2): has skinny extents
[  101.130761][    T7] cxacru 2-1:1.0: response to cm 0x91 failed: 0x3c
[  101.140289][    T7] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5
[  101.194761][    T7] ATM dev 0: usbatm_atm_init: atm_start failed: -5!
[  101.221594][    T7] cxacru: probe of 2-1:1.0 failed with error -5
[  101.242263][    T7] usb 2-1: USB disconnect, device number 5
[  101.280836][ T5706] BTRFS info (device loop2): enabling ssd optimizations
[  101.809380][    T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  102.069464][    T7] usb 1-1: Using ep0 maxpacket: 32
[  102.167265][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'.
[  102.209677][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11
[  102.236887][ T5762] loop4: detected capacity change from 0 to 8192
[  102.246378][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 76, changing to 10
[  102.364723][ T5762] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  102.379748][ T5762] REISERFS (device loop4): using ordered data mode
[  102.399664][ T5762] reiserfs: using flush barriers
[  102.416613][ T5762] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  102.479697][    T7] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  102.488759][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.534564][ T5762] REISERFS (device loop4): checking transaction log (loop4)
[  102.549479][    T7] usb 1-1: Product: syz
[  102.569449][    T7] usb 1-1: Manufacturer: syz
[  102.579630][    T7] usb 1-1: SerialNumber: syz
[  102.605439][    T7] usb 1-1: config 0 descriptor??
[  102.683254][    T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10
[  102.865855][ T5762] REISERFS (device loop4): Using rupasov hash to sort names
[  102.893077][ T5762] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  102.916074][    T7] usb 1-1: USB disconnect, device number 6
[  102.939574][    C0] xpad 1-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19
[  103.054166][ T5766] loop2: detected capacity change from 0 to 32768
[  103.129554][ T5424] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  103.138201][   T25] audit: type=1800 audit(1787621646.823:16): pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.500" name="file1" dev="loop2" ino=7 res=0 errno=0
[  103.422609][ T5424] usb 2-1: Using ep0 maxpacket: 8
[  103.559015][ T5424] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  103.576951][ T5424] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.639582][ T5424] usb 2-1: config 0 has no interface number 0
[  103.821038][ T5424] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  103.837673][ T5424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.856397][ T5424] usb 2-1: Product: syz
[  103.865719][ T5424] usb 2-1: Manufacturer: syz
[  103.875365][ T5424] usb 2-1: SerialNumber: syz
[  103.896195][ T5424] usb 2-1: config 0 descriptor??
[  103.911017][ T5798] loop2: detected capacity change from 0 to 4096
[  103.963311][ T5808] loop3: detected capacity change from 0 to 256
[  103.985063][ T5798] EXT4-fs (loop2): Test dummy encryption mode enabled
[  104.013962][ T5798] EXT4-fs (loop2): inline encryption not supported
[  104.069465][ T5798] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  104.078896][ T5798] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  104.101845][ T5798] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  104.140509][ T5798] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c199, mo2=0002]
[  104.148772][ T5798] System zones: 0-5
[  104.169634][ T5424] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[  104.179201][ T5424] usb 2-1: No valid video chain found.
[  104.220607][ T5798] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,jqfmt=vfsold,noinit_itable,norecovery,minixdf,errors=continue,mblk_io_submit,jqfmt=vfsv0,nombcache,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback.
[  104.382719][ T5424] usb 2-1: USB disconnect, device number 6
[  104.464612][ T5800] loop4: detected capacity change from 0 to 32768
[  104.540598][ T5800] 
[  104.540598][ T5800]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  104.540598][ T5800] 
[  104.611399][ T5811] loop0: detected capacity change from 0 to 40427
[  104.623440][ T5818] loop2: detected capacity change from 0 to 2048
[  104.656936][ T5811] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  104.658101][ T5800] 
[  104.658101][ T5800]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  104.658101][ T5800] 
[  104.670338][ T5811] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  104.704415][ T5811] F2FS-fs (loop0): invalid crc value
[  104.755430][ T5818] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  104.766417][ T5800] 
[  104.766417][ T5800]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  104.766417][ T5800] 
[  104.792993][ T5811] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  104.843054][ T5800] 
[  104.843054][ T5800]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  104.843054][ T5800] 
[  104.855805][ T5818] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.906208][ T5800] 
[  104.906208][ T5800]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  104.906208][ T5800] 
[  104.959485][ T5816] loop3: detected capacity change from 0 to 32768
[  104.966110][ T5800] 
[  104.966110][ T5800]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  104.966110][ T5800] 
[  105.008986][ T5800] 
[  105.008986][ T5800]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  105.008986][ T5800] 
[  105.027461][  T277] 
[  105.027461][  T277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  105.027461][  T277] 
[  105.097190][ T5811] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  105.107699][ T5811] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  105.127743][ T4192] 
[  105.127743][ T4192]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  105.127743][ T4192] 
[  105.182521][ T4192] 
[  105.182521][ T4192]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  105.182521][ T4192] 
[  105.219812][ T5816] XFS (loop3): Mounting V5 Filesystem
[  105.271508][ T1324] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  105.316825][ T5816] XFS (loop3): Ending clean mount
[  105.396002][   T25] audit: type=1800 audit(1787621649.083:17): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.523" name="file1" dev="loop0" ino=10 res=0 errno=0
[  105.449782][ T5816] XFS (loop3): User initiated shutdown received.
[  105.459664][ T5816] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  105.496385][   T25] audit: type=1804 audit(1787621649.143:18): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.523" name="/newroot/117/file1/file1" dev="loop0" ino=10 res=1 errno=0
[  105.519430][ T1324] usb 2-1: Using ep0 maxpacket: 32
[  105.529181][ T5845] loop4: detected capacity change from 0 to 512
[  105.540227][ T4187] attempt to access beyond end of device
[  105.540227][ T4187] loop0: rw=2049, want=45104, limit=40427
[  105.548419][ T5816] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  105.622297][ T4190] XFS (loop3): Unmounting Filesystem
[  105.634427][ T5845] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  105.660558][ T5845] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  105.670766][ T1324] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  105.679114][ T1324] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  105.709505][ T1324] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  105.715949][ T5845] EXT4-fs (loop4): 1 truncate cleaned up
[  105.728771][ T1324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  105.738695][ T5845] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  105.767492][ T1324] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  105.797898][ T1324] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  105.841772][ T1324] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  105.853096][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.882485][ T5841] loop2: detected capacity change from 0 to 32768
[  105.936616][ T1324] usb 2-1: config 0 descriptor??
[  105.987885][ T5841] JBD2: Ignoring recovery information on journal
[  106.084929][ T5841] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  106.187601][ T5854] loop0: detected capacity change from 0 to 256
[  106.255816][ T4189] ocfs2: Unmounting device (7,2) on (node local)
[  106.264091][ T1324] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  106.282815][ T5854] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  106.419247][   T25] audit: type=1800 audit(1787621650.103:19): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.533" name="file1" dev="loop0" ino=1048645 res=0 errno=0
[  106.433677][ T5856] netlink: 'syz.4.537': attribute type 3 has an invalid length.
[  106.452952][ T5756] usb 2-1: USB disconnect, device number 7
[  106.459461][    C1] usblp0: nonzero read bulk status received: -71
[  106.468290][ T5856] netlink: 'syz.4.537': attribute type 7 has an invalid length.
[  106.499758][ T5856] netlink: 'syz.4.537': attribute type 8 has an invalid length.
[  106.531295][ T5856] netlink: 'syz.4.537': attribute type 7 has an invalid length.
[  106.561562][ T5856] netlink: 198948 bytes leftover after parsing attributes in process `syz.4.537'.
[  106.616010][ T5863] Dev loop5: unable to read RDB block 7
[  106.639531][ T5863]  loop5: AHDI p1 p2 p3
[  106.643734][ T5863] loop5: partition table partially beyond EOD, truncated
[  106.669042][ T5826] usblp0: removed
[  106.696077][ T5863] loop5: p1 size 150995456 extends beyond EOD, truncated
[  106.734908][ T5863] loop5: p2 size 150995200 extends beyond EOD, truncated
[  106.781644][ T5425] hid-generic 0005:07C0:5505.0003: item fetching failed at offset 0/1
[  106.792740][ T5425] hid-generic: probe of 0005:07C0:5505.0003 failed with error -22
[  106.950101][ T5880] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  106.977337][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  106.984175][ T5880] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.030245][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  107.305910][ T5899] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  107.339114][ T5899] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  107.406684][ T5899] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  107.507118][ T5899] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  107.610087][ T5899] System zones: 0-2, 18-18, 34-34
[  107.637807][ T5899] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.555: bad orphan inode 15
[  107.694339][ T5899] ext4_test_bit(bit=14, block=18) = 1
[  107.709450][ T5899] is_bad_inode(inode)=0
[  107.713777][ T5899] NEXT_ORPHAN(inode)=2264924160
[  107.718629][ T5899] max_ino=32
[  107.762919][ T5899] i_nlink=0
[  107.790793][ T5899] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.555: corrupted inode contents
[  107.865593][ T5899] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.555: mark_inode_dirty error
[  107.904059][ T5899] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.555: corrupted inode contents
[  107.982253][ T5899] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2954: inode #15: comm syz.2.555: mark_inode_dirty error
[  108.022343][ T5899] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2957: inode #15: comm syz.2.555: mark inode dirty (error -117)
[  108.092263][ T5899] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117)
[  108.129293][ T5910] JBD2: Ignoring recovery information on journal
[  108.130366][ T5899] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  108.259227][ T5899] EXT4-fs (loop2): shut down requested (1)
[  108.387275][ T5910] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  108.506298][ T5916] set_capacity_and_notify: 4 callbacks suppressed
[  108.506312][ T5916] loop1: detected capacity change from 0 to 32768
[  108.611673][ T5916] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  108.626851][ T5425] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  108.649561][    T7] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  108.705278][ T5916] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  108.798124][ T4190] ocfs2: Unmounting device (7,3) on (node local)
[  108.824675][ T5936] loop2: detected capacity change from 0 to 32768
[  108.919531][ T4200] ocfs2: Unmounting device (7,1) on (node local)
[  108.949696][ T5425] usb 5-1: Using ep0 maxpacket: 16
[  108.971231][ T5936] XFS (loop2): Mounting V5 Filesystem
[  109.032724][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'.
[  109.070013][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.089375][    T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  109.090464][ T5936] XFS (loop2): Ending clean mount
[  109.099582][ T5425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.114387][    T7] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  109.123492][ T5425] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  109.136677][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.145470][ T5425] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  109.159637][    T7] usb 1-1: config 0 descriptor??
[  109.164757][ T5425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.178532][ T5425] usb 5-1: config 0 descriptor??
[  109.205654][    T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  109.228533][    T7] dvb-usb: bulk message failed: -22 (3/0)
[  109.257224][    T7] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  109.261340][ T5936] XFS (loop2): Quotacheck needed: Please wait.
[  109.291725][ T5950] loop3: detected capacity change from 0 to 16
[  109.309919][    T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  109.317704][    T7] usb 1-1: media controller created
[  109.330632][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  109.355804][    T7] dvb-usb: bulk message failed: -22 (6/0)
[  109.369196][ T5936] XFS (loop2): Quotacheck: Done.
[  109.379241][ T5950] erofs: (device loop3): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms 2
[  109.442168][ T5934] dibusb: i2c wr: len=95 is too big!
[  109.442168][ T5934] 
[  109.451293][    T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  109.512109][    T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11
[  109.550772][    T7] dvb-usb: schedule remote query interval to 150 msecs.
[  109.559713][    T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  109.570618][ T4189] XFS (loop2): Unmounting Filesystem
[  109.610407][    T7] usb 1-1: USB disconnect, device number 7
[  109.694936][ T5425] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input12
[  109.745366][ T5956] loop3: detected capacity change from 0 to 8192
[  109.759656][    T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  109.788708][ T5956] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  109.804057][ T5956] REISERFS (device loop3): using ordered data mode
[  109.811729][ T5956] reiserfs: using flush barriers
[  109.818597][ T5956] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  109.845971][ T5956] REISERFS (device loop3): checking transaction log (loop3)
[  109.859504][ T5425] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  109.905490][ T5956] REISERFS (device loop3): Using r5 hash to sort names
[  109.969969][ T5758] kernel read not supported for file /video5 (pid: 5758 comm: kworker/1:19)
[  109.974564][ T1324] kernel write not supported for file /input/mice (pid: 1324 comm: kworker/0:2)
[  109.980711][ T5956] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  110.254252][ T1324] usb 5-1: USB disconnect, device number 8
[  110.538516][ T5976] loop2: detected capacity change from 0 to 512
[  110.633063][ T5986] loop1: detected capacity change from 0 to 256
[  110.692567][ T5988] loop0: detected capacity change from 0 to 256
[  110.779772][   T25] audit: type=1800 audit(1787621654.473:20): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.585" name="file2" dev="loop0" ino=1048647 res=0 errno=0
[  110.805456][ T5990] loop2: detected capacity change from 0 to 1024
[  110.848606][ T5992] capability: warning: `syz.4.588' uses deprecated v2 capabilities in a way that may be insecure
[  110.849522][ T5990] EXT4-fs (loop2): Ignoring removed bh option
[  110.918050][ T5995] netlink: 9 bytes leftover after parsing attributes in process `syz.1.587'.
[  111.009640][ T5990] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none.
[  111.041049][ T5990] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.091983][ T5990] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.586: lblock 3 mapped to illegal pblock 3 (length 3)
[  111.138717][ T5990] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  111.200325][ T5990] EXT4-fs (loop2): This should not happen!! Data will be lost
[  111.200325][ T5990] 
[  111.236501][ T6008] EXT4-fs error (device loop2): ext4_ext_remove_space:2944: inode #15: comm syz.2.586: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  111.258511][   T25] audit: type=1800 audit(1787621654.953:21): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.591" name="members" dev="configfs" ino=38307 res=0 errno=0
[  111.278648][    C0] vkms_vblank_simulate: vblank timer overrun
[  111.285722][ T6003] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  111.296868][ T6008] EXT4-fs error (device loop2) in ext4_setattr:5645: Corrupt filesystem
[  111.315736][ T6005] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.586: bg 0: block 112: padding at end of block bitmap is not set
[  111.362210][ T6005] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 1 with error 28
[  111.399422][ T6005] EXT4-fs (loop2): This should not happen!! Data will be lost
[  111.399422][ T6005] 
[  111.409132][ T6005] EXT4-fs (loop2): Total free blocks count 0
[  111.439476][ T6005] EXT4-fs (loop2): Free/Dirty block details
[  111.445483][ T6005] EXT4-fs (loop2): free_blocks=0
[  111.454598][ T6010] loop3: detected capacity change from 0 to 764
[  111.459432][ T6005] EXT4-fs (loop2): dirty_blocks=16
[  111.467249][ T6005] EXT4-fs (loop2): Block reservation details
[  111.480508][ T6005] EXT4-fs (loop2): i_reserved_data_blocks=1
[  111.782996][ T5995] device gretap0 entered promiscuous mode
[  111.837929][ T6004] netlink: 5 bytes leftover after parsing attributes in process `syz.1.587'.
[  111.881925][ T6004] 0{X功: renamed from gretap0
[  111.924910][ T6015] loop0: detected capacity change from 0 to 512
[  111.925550][ T6004] device 
30{X功 left promiscuous mode
[  111.965467][ T6004] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[  112.107871][ T6015] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  112.141524][ T6015] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.144039][ T6019] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.596: inode has both inline data and extents flags
[  112.191844][ T6019] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.596: couldn't read orphan inode 15 (err -117)
[  112.209764][ T6019] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  112.233078][ T6027] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  112.248280][ T6027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.444184][ T6036] Console: switching to colour VGA+ 80x25
[  112.548177][   T25] audit: type=1800 audit(1787621656.233:22): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.597" name="file1" dev="loop3" ino=4 res=0 errno=0
[  112.571623][ T6036] Console: switching to colour frame buffer device 128x48
[  112.913631][  T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.046956][  T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.070719][ T6051] netlink: 1372 bytes leftover after parsing attributes in process `syz.0.609'.
[  113.156266][  T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.236814][ T6058] netlink: 472 bytes leftover after parsing attributes in process `syz.2.614'.
[  113.247136][ T6056] netlink: 'syz.0.613': attribute type 4 has an invalid length.
[  113.298230][ T6061] input: syz0 as /devices/virtual/input/input13
[  113.311173][  T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.393070][ T6067] sd 0:0:1:0: PR command failed: 2
[  113.446083][ T6067] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  113.490462][ T6067] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  113.532335][ T6068] set_capacity_and_notify: 3 callbacks suppressed
[  113.532348][ T6068] loop1: detected capacity change from 0 to 2048
[  113.703822][ T6068] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.896833][ T6089] loop1: detected capacity change from 0 to 256
[  114.422953][ T6069] chnl_net:caif_netlink_parms(): no params data found
[  114.524679][ T6111] loop0: detected capacity change from 0 to 4096
[  114.532021][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.571271][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.616754][ T6069] device bridge_slave_0 entered promiscuous mode
[  114.662168][ T6111] ntfs: volume version 3.1.
[  114.667912][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.677499][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.715265][ T6069] device bridge_slave_1 entered promiscuous mode
[  114.811064][ T6127] loop2: detected capacity change from 0 to 1024
[  114.867854][ T6069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.904594][ T6069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.020388][ T6069] team0: Port device team_slave_0 added
[  115.036575][ T6127] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  115.100386][ T6069] team0: Port device team_slave_1 added
[  115.309106][ T6069] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.384112][ T6136] loop3: detected capacity change from 0 to 128
[  115.406038][ T6069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.488042][ T6139] loop1: detected capacity change from 0 to 1024
[  115.515635][ T6136] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  115.583338][ T6136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.598783][ T6129] loop0: detected capacity change from 0 to 131072
[  115.612335][ T5423] Bluetooth: hci3: command 0x0409 tx timeout
[  115.638367][ T6069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.649009][ T6129] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  115.657219][ T6129] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  115.667369][ T6129] F2FS-fs (loop0): invalid crc value
[  115.681128][ T6069] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.693221][ T6069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.721278][ T6069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.765128][ T6129] F2FS-fs (loop0): Found nat_bits in checkpoint
[  115.840795][ T6129] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  115.847914][ T6129] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  115.955784][ T6147] loop2: detected capacity change from 0 to 4096
[  115.992568][ T6069] device hsr_slave_0 entered promiscuous mode
[  116.011494][ T6129] F2FS-fs (loop0): Can't enable fs-verity on inode 8: the verity feature is not enabled on this filesystem
[  116.055427][ T6069] device hsr_slave_1 entered promiscuous mode
[  116.080772][ T6069] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.088348][ T6069] Cannot create hsr debugfs directory
[  116.156692][ T6162] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  116.265213][ T5158] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  116.376590][ T6165] loop2: detected capacity change from 0 to 2048
[  116.465541][ T6165] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.659738][ T5158] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.685262][ T5158] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  116.747046][ T6069] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  116.759458][ T5158] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  116.834272][ T6069] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  116.891268][ T6069] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  116.933111][ T6069] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  116.963535][ T5158] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  116.973465][  T154] device hsr_slave_0 left promiscuous mode
[  116.983233][ T5158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.992805][  T154] device hsr_slave_1 left promiscuous mode
[  116.999272][ T5158] usb 4-1: Product: syz
[  117.013998][ T5158] usb 4-1: Manufacturer: syz
[  117.018658][ T5158] usb 4-1: SerialNumber: syz
[  117.019687][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.046248][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.066970][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.086141][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.108277][  T154] device bridge_slave_1 left promiscuous mode
[  117.132195][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.162755][  T154] rdma_rxe: ignoring netdev event = 26 for bridge_slave_1
[  117.170439][  T154] rdma_rxe: ignoring netdev event = 21 for bridge_slave_1
[  117.188783][  T154] device bridge_slave_0 left promiscuous mode
[  117.190426][ T5758] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  117.212432][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.283049][  T154] rdma_rxe: ignoring netdev event = 10 for bridge_slave_1
[  117.318674][  T154] device veth1_macvtap left promiscuous mode
[  117.335823][  T154] device veth0_macvtap left promiscuous mode
[  117.336197][ T6169] loop2: detected capacity change from 0 to 32768
[  117.347665][  T154] device veth1_vlan left promiscuous mode
[  117.375511][  T154] device veth0_vlan left promiscuous mode
[  117.418900][   T25] audit: type=1800 audit(1787621661.103:23): pid=6169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.644" name="file1" dev="loop2" ino=4 res=0 errno=0
[  117.489535][ T5758] usb 2-1: Using ep0 maxpacket: 16
[  117.556508][  T154] infiniband syz0: set down
[  117.612164][ T5758] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.632719][ T5758] usb 2-1: config 0 has no interfaces?
[  117.700315][    T7] Bluetooth: hci3: command 0x041b tx timeout
[  117.739205][  T154] team0 (unregistering): Port device team_slave_1 removed
[  117.756922][  T154] team0 (unregistering): Port device team_slave_0 removed
[  117.770909][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.786374][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.799714][ T5758] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  117.810621][    T9] smc: removing ib device syz0
[  117.822111][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.834181][ T5758] usb 2-1: Product: syz
[  117.838447][ T5758] usb 2-1: Manufacturer: syz
[  117.845672][ T5758] usb 2-1: SerialNumber: syz
[  117.867597][ T5758] r8152-cfgselector 2-1: config 0 descriptor??
[  117.877419][  T154] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  117.888036][  T154] bond0 (unregistering): Released all slaves
[  117.976414][ T5425] infiniband syz0: ib_query_port failed (-19)
[  118.130249][ T5758] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  118.169895][ T5158] cdc_ncm 4-1:1.0: bind() failure
[  118.216789][ T5158] usbtest: probe of 4-1:1.1 failed with error -71
[  118.246301][ T6069] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.255193][ T5599] usb 2-1: config 0 descriptor??
[  118.283422][ T5158] usb 4-1: USB disconnect, device number 4
[  118.322176][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  118.347614][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  118.349788][ T5423] usb 2-1: USB disconnect, device number 8
[  118.358974][ T5599] usb 2-1: can't set config #0, error -71
[  118.371309][ T6069] 8021q: adding VLAN 0 to HW filter on device team0
[  118.437642][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  118.449930][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  118.478489][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.485581][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.515960][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  118.538107][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  118.556883][ T6208] loop0: detected capacity change from 0 to 8192
[  118.568740][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  118.584491][ T6208] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  118.599783][ T5425] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  118.601917][ T6208] REISERFS (device loop0): using ordered data mode
[  118.614072][ T6208] reiserfs: using flush barriers
[  118.618000][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.626062][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.643255][ T6208] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  118.661525][ T6208] REISERFS (device loop0): checking transaction log (loop0)
[  118.764323][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  118.823362][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  118.857852][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  118.870462][ T6208] REISERFS (device loop0): Using tea hash to sort names
[  118.885812][ T5425] usb 3-1: Using ep0 maxpacket: 8
[  118.887008][ T6208] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  118.925332][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  119.005242][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  119.013071][ T5425] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  119.045192][ T5425] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  119.079499][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  119.118097][ T5425] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  119.129031][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  119.158851][ T5425] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  119.172943][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  119.204639][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  119.214180][ T5425] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  119.225029][ T6229] loop3: detected capacity change from 0 to 64
[  119.240353][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  119.248731][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  119.269565][ T5425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.308397][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  119.332147][ T6229] hfs: walked past end of dir
[  119.357377][ T6229] hfs: walked past end of dir
[  119.558767][ T5425] usb 3-1: GET_CAPABILITIES returned 0
[  119.574638][ T5425] usbtmc 3-1:16.0: can't read capabilities
[  119.771772][ T5425] Bluetooth: hci3: command 0x040f tx timeout
[  119.799419][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  119.810246][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  119.819509][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  119.828756][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  119.838007][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  119.847263][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  119.856516][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  119.865773][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  119.875029][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  119.884268][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  119.893513][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  119.902768][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  119.912027][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  119.921280][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  119.930530][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  119.965126][ T5758] usb 3-1: USB disconnect, device number 6
[  120.055738][ T6237] loop3: detected capacity change from 0 to 32768
[  120.059552][ T6245] loop0: detected capacity change from 0 to 256
[  120.076889][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  120.101713][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  120.126679][ T6069] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.142679][ T6237] JBD2: Ignoring recovery information on journal
[  120.340356][ T6237] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  120.522083][   T25] audit: type=1800 audit(1787621664.213:24): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.660" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  120.723048][ T6266] loop1: detected capacity change from 0 to 8192
[  120.832431][ T6266] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  120.854045][ T6282] device team_slave_0 entered promiscuous mode
[  120.860591][ T6282] device team_slave_1 entered promiscuous mode
[  120.988803][ T6280] smpboot: CPU 1 is now offline
[  121.056278][ T6237] syz.3.660 (6237) used greatest stack depth: 18016 bytes left
[  121.105738][ T6282] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  121.223384][ T6287] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  121.267974][ T6284] x86: Booting SMP configuration:
[  121.278604][ T4190] ocfs2: Unmounting device (7,3) on (node local)
[  121.324628][ T6284] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  121.401535][    T0] kvm-clock: cpu 1, msr f104041, secondary cpu clock
[  121.436590][   T18] kvm-guest: stealtime: cpu 1, msr b9127440
[  121.499011][   T25] audit: type=1800 audit(1787621665.183:25): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.672" name="c_ssize" dev="configfs" ino=39464 res=0 errno=0
[  121.585353][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  121.600250][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  121.659266][ T6069] device veth0_vlan entered promiscuous mode
[  121.692422][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  121.711672][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  121.772465][ T6301] loop2: detected capacity change from 0 to 256
[  121.774641][ T6069] device veth1_vlan entered promiscuous mode
[  121.821030][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  121.837730][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  121.849897][ T5423] Bluetooth: hci3: command 0x0419 tx timeout
[  121.851091][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  121.906962][ T6312] loop0: detected capacity change from 0 to 256
[  121.925411][ T6301] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  121.987488][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  122.016970][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  122.078401][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  122.123129][ T6069] device veth0_macvtap entered promiscuous mode
[  122.144861][ T6069] device veth1_macvtap entered promiscuous mode
[  122.181498][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.198833][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.299355][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.337638][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.363164][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.409352][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.419201][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.471010][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.500857][ T6069] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.514732][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  122.530060][ T5412] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  122.556573][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  122.590030][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  122.620176][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  122.628601][ T6334] loop0: detected capacity change from 0 to 1024
[  122.649585][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.674865][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.709388][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.746644][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.769381][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.789348][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.799160][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.829384][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.850735][ T6069] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.852219][ T6316] loop1: detected capacity change from 0 to 32768
[  122.876205][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  122.891966][ T5412] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  122.914512][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  122.926829][ T5412] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  122.961541][ T6069] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.993301][ T6069] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.017166][ T6069] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.039424][ T6069] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.039572][ T5412] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  123.087806][ T5412] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  123.112199][ T6316] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  123.235159][ T6316] JBD2: Ignoring recovery information on journal
[  123.301102][ T3035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.338311][ T3035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.346106][ T5412] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  123.362081][ T5412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.409384][ T5412] usb 3-1: Product: syz
[  123.419812][ T5412] usb 3-1: Manufacturer: syz
[  123.434762][ T5412] usb 3-1: SerialNumber: syz
[  123.451700][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  123.452190][ T6346] loop0: detected capacity change from 0 to 512
[  123.466095][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.471090][ T6316] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  123.498500][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.526299][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  123.540859][ T5412] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected
[  123.566493][ T5412] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  123.594512][ T5412] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  123.603363][ T6346] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  123.636329][ T6346] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  123.811340][ T6346] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.687: bg 0: block 104: invalid block bitmap
[  123.943464][ T6322] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90
[  123.953059][ T6346] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  123.977884][ T6316] syz.1.680 (6316) used greatest stack depth: 17792 bytes left
[  124.013533][ T6346] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.687: invalid indirect mapped block 1 (level 1)
[  124.037234][ T5423] usb 3-1: USB disconnect, device number 7
[  124.056883][ T5423] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  124.089289][ T6346] EXT4-fs (loop0): 1 truncate cleaned up
[  124.106324][ T4200] ocfs2: Unmounting device (7,1) on (node local)
[  124.117353][ T6346] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  124.130276][ T5423] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  124.160135][ T5423] ti_usb_3410_5052 3-1:2.0: device disconnected
[  124.193241][ T6346] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  124.331360][ T6359] loop5: detected capacity change from 0 to 32768
[  124.553773][ T6359] JBD2: Ignoring recovery information on journal
[  124.711866][ T6359] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  124.839589][ T5425] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  125.072745][ T6069] ocfs2: Unmounting device (7,5) on (node local)
[  125.143934][ T6403] loop3: detected capacity change from 0 to 4096
[  125.212479][ T6403] EXT4-fs (loop3): Test dummy encryption mode enabled
[  125.291311][ T6403] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[  125.319672][ T6403] System zones: 0-5
[  125.340736][    T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  125.379648][ T5425] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  125.388706][ T5425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.417753][ T6403] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback.
[  125.462225][ T5425] usb 1-1: Product: syz
[  125.466440][ T5425] usb 1-1: Manufacturer: syz
[  125.488191][ T5425] usb 1-1: SerialNumber: syz
[  125.514340][ T5425] usb 1-1: config 0 descriptor??
[  125.729659][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.759601][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.814248][ T6433] loop1: detected capacity change from 0 to 4096
[  125.820831][    T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  125.834482][ T6403] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  125.857944][    T7] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  125.867521][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.887063][    T7] usb 3-1: config 0 descriptor??
[  125.895249][ T6403] EXT4-fs error (device loop3): ext4_remount:6062: comm syz.3.701: Abort forced by user
[  125.896541][ T6441] loop5: detected capacity change from 0 to 256
[  125.911133][ T5425] usb 1-1: USB disconnect, device number 8
[  125.939259][ T6403] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback.
[  125.981656][ T6443] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.016340][ T6441] netlink: 'syz.5.709': attribute type 298 has an invalid length.
[  126.029908][   T25] audit: type=1800 audit(1787621669.723:26): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.708" name="file1" dev="loop1" ino=15 res=0 errno=0
[  126.030771][ T6433] NILFS error (device loop1): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1
[  126.111476][   T25] audit: type=1800 audit(1787621669.793:27): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.708" name="file1" dev="loop1" ino=15 res=0 errno=0
[  126.220856][ T6433] Remounting filesystem read-only
[  126.233328][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'.
[  126.393236][    T7] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  126.421137][ T6456] netlink: 'syz.5.713': attribute type 7 has an invalid length.
[  126.448977][ T6456] netlink: 'syz.5.713': attribute type 1 has an invalid length.
[  126.467175][    T7] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  126.517943][ T4200] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  126.532041][ T4200] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  126.542972][ T6456] netlink: 'syz.5.713': attribute type 4 has an invalid length.
[  126.564519][ T6456] netlink: 'syz.5.713': attribute type 7 has an invalid length.
[  126.572566][ T6456] netlink: 207220 bytes leftover after parsing attributes in process `syz.5.713'.
[  126.728055][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.718'.
[  126.747672][ T4233] usb 3-1: USB disconnect, device number 8
[  126.966006][ T6485] loop1: detected capacity change from 0 to 512
[  127.022470][ T6489] loop5: detected capacity change from 0 to 2048
[  127.065620][ T6485] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  127.095087][ T6489] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  127.125455][ T6485] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002]
[  127.139416][ T5424] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  127.160887][ T6485] System zones: 1-12
[  127.165360][ T6485] EXT4-fs (loop1): orphan cleanup on readonly fs
[  127.174130][ T6485] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.725: invalid indirect mapped block 12 (level 1)
[  127.225875][ T6485] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.725: invalid indirect mapped block 2 (level 2)
[  127.245113][ T6485] EXT4-fs (loop1): 1 truncate cleaned up
[  127.251343][ T6485] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nobarrier,,,errors=continue. Quota mode: writeback.
[  127.475970][ T6501] loop3: detected capacity change from 0 to 64
[  127.529583][ T5424] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.562615][ T5424] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.669594][ T5424] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  127.688885][ T5424] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  127.732588][ T5424] usb 1-1: SerialNumber: syz
[  127.845489][ T6497] loop2: detected capacity change from 0 to 32768
[  127.879010][ T6515] loop3: detected capacity change from 0 to 512
[  127.915317][ T6515] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  127.935748][ T6515] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.738: iget: bad i_size value: 38620345925642
[  127.982023][   T25] audit: type=1800 audit(1787621671.673:28): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.731" name="file1" dev="loop2" ino=4 res=0 errno=0
[  128.012789][ T6515] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.738: couldn't read orphan inode 15 (err -117)
[  128.027191][ T5424] usb 1-1: 0:2 : does not exist
[  128.033042][ T4233] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  128.105502][ T6515] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback.
[  128.110376][ T6520] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  128.143456][ T5424] usb 1-1: USB disconnect, device number 9
[  128.242788][ T6515] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.738: bg 0: block 5: invalid block bitmap
[  128.267978][ T6515] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28
[  128.281269][ T4233] usb 2-1: Using ep0 maxpacket: 8
[  128.286653][ T6515] EXT4-fs (loop3): This should not happen!! Data will be lost
[  128.286653][ T6515] 
[  128.296592][ T6515] EXT4-fs (loop3): Total free blocks count 0
[  128.304845][ T6515] EXT4-fs (loop3): Free/Dirty block details
[  128.339633][ T6515] EXT4-fs (loop3): free_blocks=0
[  128.355141][ T6515] EXT4-fs (loop3): dirty_blocks=65
[  128.375309][ T6515] EXT4-fs (loop3): Block reservation details
[  128.381694][ T6515] EXT4-fs (loop3): i_reserved_data_blocks=65
[  128.404605][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  128.436128][ T4233] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  128.441640][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  128.455560][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.482632][ T6527] loop2: detected capacity change from 0 to 128
[  128.510597][ T4233] usb 2-1: config 0 descriptor??
[  128.510873][    T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 64 with error 28
[  128.552144][ T6529] EXT4-fs (loop5): Ignoring removed bh option
[  128.568877][ T6527] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  128.573776][ T6529] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.742: corrupted in-inode xattr
[  128.582284][ T6527] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  128.600995][    T9] EXT4-fs (loop3): This should not happen!! Data will be lost
[  128.600995][    T9] 
[  128.633807][ T6529] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.742: couldn't read orphan inode 15 (err -117)
[  128.646639][ T6529] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[  128.761530][ T4233] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  128.791597][ T6533] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  128.839618][ T6533] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  128.869869][ T6533] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  128.890264][ T6533] UDF-fs: Scanning with blocksize 512 failed
[  128.917852][ T6533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.992612][ T5424] usb 2-1: USB disconnect, device number 9
[  129.416421][ T6560] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.501854][ T6559] set_capacity_and_notify: 4 callbacks suppressed
[  129.501868][ T6559] loop0: detected capacity change from 0 to 4096
[  129.556929][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.758'.
[  129.618087][ T6567] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.627733][ T6567] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.636484][ T6567] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.645223][ T6567] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.670516][ T6559] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  129.709227][ T6565] loop2: detected capacity change from 0 to 8192
[  129.762647][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.758'.
[  129.834839][ T6565] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  129.883666][ T6565] REISERFS (device loop2): using ordered data mode
[  129.894184][ T4187] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  129.921394][ T6565] reiserfs: using flush barriers
[  129.974438][ T6565] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  130.065638][ T6565] REISERFS (device loop2): checking transaction log (loop2)
[  130.109121][ T5424] kernel write not supported for file /dummy_udc (pid: 5424 comm: kworker/0:17)
[  130.409669][ T6565] REISERFS (device loop2): Using tea hash to sort names
[  130.441724][ T6565] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  130.779417][ T5424] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  131.032435][ T6597] loop0: detected capacity change from 0 to 32768
[  131.076836][ T6601] loop1: detected capacity change from 0 to 32768
[  131.136538][ T6597] JBD2: Ignoring recovery information on journal
[  131.143227][ T5424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  131.205275][ T5424] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  131.247636][ T5424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  131.280731][ T5424] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  131.298411][ T6597] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  131.321664][ T5424] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  131.341057][ T5424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.361682][ T5424] usb 4-1: config 0 descriptor??
[  131.390311][   T25] audit: type=1800 audit(1787621675.083:29): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.766" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  131.398267][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.775'.
[  131.420841][ T6632] netlink: 28 bytes leftover after parsing attributes in process `syz.5.775'.
[  131.650274][ T5424] hdpvr 4-1:0.0: firmware version 0x12 dated 継򂧥訠綍�D奮jvi0�
[  131.650274][ T5424] 喢洃阷Y
[  131.881918][ T6646] loop2: detected capacity change from 0 to 32768
[  131.920473][ T5424] hdpvr 4-1:0.0: device init failed
[  131.926154][ T5424] hdpvr: probe of 4-1:0.0 failed with error -12
[  131.956164][ T5424] usb 4-1: USB disconnect, device number 5
[  131.980683][ T6646] (syz.2.780,6646,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  131.995795][ T6646] (syz.2.780,6646,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  132.021704][ T4187] ocfs2: Unmounting device (7,0) on (node local)
[  132.043919][ T6646] JBD2: Ignoring recovery information on journal
[  132.110938][ T6646] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  132.143662][ T6646] (syz.2.780,6646,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  132.249251][ T6646] (syz.2.780,6646,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC.
[  132.282285][ T6646] (syz.2.780,6646,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC.
[  132.296031][ T6646] (syz.2.780,6646,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c
[  132.308489][ T6646] (syz.2.780,6646,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  132.317304][ T6646] (syz.2.780,6646,0):ocfs2_quota_read:201 ERROR: status = -5
[  132.324744][ T6646] Quota error (device loop2): find_block_dqentry: Can't read quota tree block 6
[  132.334153][ T6646] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  132.343615][ T6646] (syz.2.780,6646,0):ocfs2_acquire_dquot:878 ERROR: status = -5
[  132.353583][ T6646] (syz.2.780,6646,0):ocfs2_mknod:314 ERROR: status = -5
[  132.360615][ T6646] (syz.2.780,6646,0):ocfs2_mknod:502 ERROR: status = -5
[  132.367951][ T6646] (syz.2.780,6646,0):ocfs2_mkdir:659 ERROR: status = -5
[  132.459994][ T4189] ocfs2: Unmounting device (7,2) on (node local)
[  132.572604][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.578951][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.719849][ T6666] loop0: detected capacity change from 0 to 256
[  132.785884][ T6672] loop5: detected capacity change from 0 to 512
[  132.790024][ T6666] exfat: Deprecated parameter 'utf8'
[  132.797534][ T6666] exfat: Deprecated parameter 'utf8'
[  132.837642][ T6666] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  132.870720][ T6675] loop2: detected capacity change from 0 to 128
[  132.879555][ T5424] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  132.895842][ T6672] EXT4-fs (loop5): Test dummy encryption mode enabled
[  132.931821][ T6672] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  132.985774][ T6649] loop1: detected capacity change from 0 to 40427
[  133.015268][ T6672] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  133.032411][ T6672] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,noauto_da_alloc,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  133.070026][ T6672] EXT4-fs warning (device loop5): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed
[  133.107332][ T6649] F2FS-fs (loop1): invalid crc value
[  133.139259][ T6649] F2FS-fs (loop1): Found nat_bits in checkpoint
[  133.239586][ T5424] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.261523][ T6649] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  133.279790][ T5424] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  133.323330][ T6693] af_packet: tpacket_rcv: packet too big, clamped from 2356 to 1904. macoff=96
[  133.344814][ T5424] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  133.359261][ T6649] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  133.530215][ T5424] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  133.548473][ T6649] attempt to access beyond end of device
[  133.548473][ T6649] loop1: rw=2049, want=77960, limit=40427
[  133.575190][ T5424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  133.594630][ T5424] usb 4-1: Product: syz
[  133.598857][ T5424] usb 4-1: Manufacturer: syz
[  133.638595][ T6649] attempt to access beyond end of device
[  133.638595][ T6649] loop1: rw=2049, want=77960, limit=40427
[  133.669765][ T6660] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  133.670112][   T25] audit: type=1800 audit(1787621677.353:30): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.801" name="start_block" dev="configfs" ino=40598 res=0 errno=0
[  133.692549][ T5424] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected
[  133.697098][    C1] vkms_vblank_simulate: vblank timer overrun
[  133.767144][ T5424] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  133.804453][ T4200] attempt to access beyond end of device
[  133.804453][ T4200] loop1: rw=2049, want=45104, limit=40427
[  133.819136][ T5425] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  133.929952][ T5424] usb 4-1: USB disconnect, device number 6
[  133.951813][ T5424] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  133.990485][ T5424] garmin_gps 4-1:1.0: device disconnected
[  134.069474][ T5425] usb 1-1: Using ep0 maxpacket: 16
[  134.183394][ T6709] loop2: detected capacity change from 0 to 32768
[  134.190420][ T5425] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.219186][ T5425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.239378][ T5425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  134.260735][ T5425] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  134.277683][ T5425] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  134.369921][ T6709] UFO tlock:0xffffc90002862750
[  134.379575][ T5425] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  134.418582][ T6709] non-latin1 character 0x637c found in JFS file name
[  134.435602][ T5425] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  134.458748][ T6709] mount with iocharset=utf8 to access
[  134.465930][ T5425] usb 1-1: Manufacturer: syz
[  134.487376][ T5425] usb 1-1: config 0 descriptor??
[  134.529833][ T6737] loop1: detected capacity change from 0 to 2048
[  134.587205][ T6737] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  134.859470][ T5758] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  135.109474][ T5758] usb 6-1: Using ep0 maxpacket: 16
[  135.154246][ T6744] loop3: detected capacity change from 0 to 131072
[  135.173866][ T6737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.249503][ T5425] rc_core: IR keymap rc-hauppauge not found
[  135.256501][ T6744] F2FS-fs (loop3): invalid crc value
[  135.262280][ T5425] Registered IR keymap rc-empty
[  135.278253][ T5425] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  135.328316][ T6744] F2FS-fs (loop3): Found nat_bits in checkpoint
[  135.354229][ T5425] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  135.367086][ T6744] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  135.405053][ T6744] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  135.420885][ T5425] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  135.434363][ T5758] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[  135.465417][ T5425] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15
[  135.473682][ T5758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.497857][   T25] audit: type=1800 audit(1787621679.183:31): pid=6744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.812" name="file2" dev="loop3" ino=8 res=0 errno=0
[  135.533436][ T5758] usb 6-1: Product: syz
[  135.537629][ T5758] usb 6-1: Manufacturer: syz
[  135.551091][ T5425] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  135.557543][ T5758] usb 6-1: SerialNumber: syz
[  135.601530][ T5425] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  135.629647][ T5425] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  135.669448][ T5425] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  135.699709][ T5425] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  135.724168][ T6760] loop1: detected capacity change from 0 to 2048
[  135.730678][ T5425] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  135.761263][ T5425] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  135.790247][ T5425] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  135.829457][ T5425] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  135.878711][ T5425] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  135.886383][ T6760] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.889547][ T5758] snd-usb-audio: probe of 6-1:1.0 failed with error -71
[  135.896036][ T6748] loop2: detected capacity change from 0 to 32768
[  135.950704][ T5425] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  135.960233][ T5758] usb 6-1: USB disconnect, device number 2
[  135.980038][ T5425] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  136.000589][ T5425] usb 1-1: USB disconnect, device number 10
[  136.124493][ T6748] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  136.225876][ T6766] input: syz1 as /devices/virtual/input/input16
[  136.270901][ T6766] input: failed to attach handler leds to device input16, error: -6
[  136.291067][ T4189] ocfs2: Unmounting device (7,2) on (node local)
[  136.400046][ T6770] netlink: 'syz.1.821': attribute type 29 has an invalid length.
[  136.464661][ T6770] netlink: 'syz.1.821': attribute type 29 has an invalid length.
[  136.520608][ T6772] netlink: 'syz.1.821': attribute type 29 has an invalid length.
[  136.575628][ T6774] netlink: 'syz.1.821': attribute type 29 has an invalid length.
[  136.694107][ T6782] loop0: detected capacity change from 0 to 8
[  136.705329][ T6779] netlink: 'syz.1.821': attribute type 29 has an invalid length.
[  136.724326][ T5757] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  136.883564][ T6782] SQUASHFS error: zlib decompression failed, data probably corrupt
[  136.913506][ T6782] SQUASHFS error: Failed to read block 0x9b: -5
[  136.944842][ T6782] SQUASHFS error: Unable to read metadata cache entry [99]
[  136.970400][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'.
[  136.989466][ T6782] SQUASHFS error: Unable to read inode 0x127
[  137.012249][ T5757] usb 6-1: Using ep0 maxpacket: 16
[  137.084084][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'.
[  137.269581][ T5425] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  137.301252][ T6805] smpboot: CPU 1 is now offline
[  137.330609][ T5757] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  137.342627][ T5757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.405577][ T6808] loop0: detected capacity change from 0 to 2368
[  137.414814][ T5757] usb 6-1: Product: syz
[  137.432555][ T6810] x86: Booting SMP configuration:
[  137.456568][ T5757] usb 6-1: Manufacturer: syz
[  137.482630][ T6810] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  137.493150][ T5757] usb 6-1: SerialNumber: syz
[  137.507473][    T0] kvm-clock: cpu 1, msr f104041, secondary cpu clock
[  137.520715][   T18] kvm-guest: stealtime: cpu 1, msr b9127440
[  137.527611][ T5757] usb 6-1: config 0 descriptor??
[  137.573576][ T5757] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  137.651917][ T5425] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.679509][ T5425] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  137.703356][ T5425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.862635][ T6790] loop1: detected capacity change from 0 to 40427
[  137.976448][ T6790] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  137.987289][ T6790] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  138.007398][ T6790] F2FS-fs (loop1): invalid crc value
[  138.027612][ T6790] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  138.113314][ T6790] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  138.125629][ T6790] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  138.208243][ T5425] wacom 0003:056A:033B.0006: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[  138.251788][ T6847] loop0: detected capacity change from 0 to 128
[  138.272419][ T5425] wacom 0003:056A:033B.0006: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0
[  138.300793][ T5425] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0006/input/input17
[  138.349200][ T4200] attempt to access beyond end of device
[  138.349200][ T4200] loop1: rw=2049, want=45104, limit=40427
[  138.372613][ T6855] loop3: detected capacity change from 0 to 64
[  138.395680][ T6847] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback.
[  138.448174][ T6847] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  138.450844][ T5757] ssu100: probe of 6-1:0.0 failed with error -71
[  138.667028][ T5424] usb 3-1: USB disconnect, device number 9
[  138.709667][ T5757] usb 6-1: USB disconnect, device number 3
[  138.751732][ T6861] fido_id[6861]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  139.234570][ T6891] loop5: detected capacity change from 0 to 1024
[  139.303273][ T6894] erofs: (device loop3): mounted with root inode @ nid 36.
[  139.347212][ T6891] EXT4-fs (loop5): Ignoring removed bh option
[  139.435774][ T6891] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  139.734369][ T6069] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  139.867089][ T6873] set_capacity_and_notify: 1 callbacks suppressed
[  139.867104][ T6873] loop0: detected capacity change from 0 to 32768
[  139.909527][ T6922] loop3: detected capacity change from 0 to 1024
[  140.025120][ T6879] loop1: detected capacity change from 0 to 32768
[  140.074164][ T6873] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  140.105962][ T6873] JBD2: Ignoring recovery information on journal
[  140.160202][ T6879] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  140.192560][ T6873] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  140.259034][ T6879] JBD2: Ignoring recovery information on journal
[  140.364911][ T6943] loop3: detected capacity change from 0 to 2048
[  140.371476][    T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  140.444145][ T6879] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  140.492901][ T4187] ocfs2: Unmounting device (7,0) on (node local)
[  140.534244][   T25] audit: type=1800 audit(1787621684.223:32): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.831" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  140.564986][ T6943] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  140.609400][    T7] usb 3-1: Using ep0 maxpacket: 16
[  140.681518][ T6879] 
[  140.683874][ T6879] ======================================================
[  140.690888][ T6879] WARNING: possible circular locking dependency detected
[  140.698170][ T6879] syzkaller #0 Not tainted
[  140.702562][ T6879] ------------------------------------------------------
[  140.709552][ T6879] syz.1.831/6879 is trying to acquire lock:
[  140.715418][ T6879] ffff88805d9fc990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x19f/0x270
[  140.724966][ T6879] 
[  140.724966][ T6879] but task is already holding lock:
[  140.732305][ T6879] ffff88805fbb44e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0
[  140.742550][ T6879] 
[  140.742550][ T6879] which lock already depends on the new lock.
[  140.742550][ T6879] 
[  140.752927][ T6879] 
[  140.752927][ T6879] the existing dependency chain (in reverse order) is:
[  140.761912][ T6879] 
[  140.761912][ T6879] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  140.770393][ T6879]        down_read+0x44/0x2e0
[  140.775052][ T6879]        ocfs2_start_trans+0x3a6/0x6f0
[  140.780485][ T6879]        ocfs2_mknod+0xf70/0x2510
[  140.785483][ T6879]        ocfs2_create+0x192/0x420
[  140.790488][ T6879]        path_openat+0x120a/0x2fb0
[  140.795966][ T6879]        do_filp_open+0x1df/0x400
[  140.800966][ T6879]        do_sys_openat2+0x14b/0x500
[  140.806139][ T6879]        __x64_sys_open+0x11b/0x140
[  140.811310][ T6879]        do_syscall_64+0x4c/0xa0
[  140.816228][ T6879]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  140.822616][ T6879] 
[  140.822616][ T6879] -> #4 (sb_internal#4){.+.+}-{0:0}:
[  140.830057][ T6879]        ocfs2_start_trans+0x2a7/0x6f0
[  140.835498][ T6879]        ocfs2_acquire_dquot+0x6c0/0xb30
[  140.841121][ T6879]        dqget+0x713/0xbb0
[  140.845564][ T6879]        dquot_set_dqblk+0x27/0xfb0
[  140.850740][ T6879]        quota_setquota+0x4d6/0x590
[  140.855912][ T6879]        __se_sys_quotactl+0x28b/0x6f0
[  140.861359][ T6879]        do_syscall_64+0x4c/0xa0
[  140.866293][ T6879]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  140.872702][ T6879] 
[  140.872702][ T6879] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  140.881531][ T6879]        down_write+0x38/0x60
[  140.886189][ T6879]        ocfs2_create_local_dquot+0x199/0x18d0
[  140.892326][ T6879]        ocfs2_acquire_dquot+0x822/0xb30
[  140.898377][ T6879]        dqget+0x713/0xbb0
[  140.902770][ T6879]        dquot_set_dqblk+0x27/0xfb0
[  140.907942][ T6879]        quota_setquota+0x4d6/0x590
[  140.913110][ T6879]        __se_sys_quotactl+0x28b/0x6f0
[  140.918543][ T6879]        do_syscall_64+0x4c/0xa0
[  140.923461][ T6879]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  140.929880][ T6879] 
[  140.929880][ T6879] -> #2 (&dquot->dq_lock){+.+.}-{3:3}:
[  140.937494][ T6879]        __mutex_lock_common+0x1e5/0x2400
[  140.943192][ T6879]        mutex_lock_nested+0x17/0x20
[  140.948456][ T6879]        dquot_commit+0x5a/0x410
[  140.953388][ T6879]        ext4_write_dquot+0x1f0/0x360
[  140.958737][ T6879]        mark_all_dquot_dirty+0xf9/0x400
[  140.964361][ T6879]        __dquot_free_space+0x7c3/0xb80
[  140.969880][ T6879]        ext4_free_blocks+0x1b1b/0x24c0
[  140.975402][ T6879]        ext4_ext_remove_space+0x22bd/0x41a0
[  140.981356][ T6879]        ext4_ext_truncate+0x182/0x230
[  140.986791][ T6879]        ext4_truncate+0xa41/0x1190
[  140.991964][ T6879]        ext4_setattr+0x117c/0x1b70
[  140.997576][ T6879]        notify_change+0xbc6/0xee0
[  141.002664][ T6879]        do_truncate+0x1ac/0x240
[  141.007578][ T6879]        path_openat+0x293b/0x2fb0
[  141.012664][ T6879]        do_filp_open+0x1df/0x400
[  141.017659][ T6879]        do_sys_openat2+0x14b/0x500
[  141.022849][ T6879]        __x64_sys_open+0x11b/0x140
[  141.028026][ T6879]        do_syscall_64+0x4c/0xa0
[  141.032948][ T6879]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  141.039358][ T6879] 
[  141.039358][ T6879] -> #1 (&ei->i_data_sem){++++}-{3:3}:
[  141.046998][ T6879]        down_read+0x44/0x2e0
[  141.051660][ T6879]        ext4_map_blocks+0x350/0x1a50
[  141.057013][ T6879]        ext4_append+0x22d/0x560
[  141.061922][ T6879]        ext4_init_new_dir+0x2a7/0x910
[  141.067369][ T6879]        ext4_mkdir+0x4c3/0xc90
[  141.072190][ T6879]        vfs_mkdir+0x386/0x570
[  141.076927][ T6879]        do_mkdirat+0x1dd/0x5c0
[  141.081753][ T6879]        __x64_sys_mkdir+0x6a/0x80
[  141.086836][ T6879]        do_syscall_64+0x4c/0xa0
[  141.091751][ T6879]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  141.098143][ T6879] 
[  141.098143][ T6879] -> #0 (jbd2_handle){++++}-{0:0}:
[  141.105408][ T6879]        __lock_acquire+0x2c66/0x7b50
[  141.110757][ T6879]        lock_acquire+0x19e/0x400
[  141.115776][ T6879]        wait_transaction_locked+0x1bb/0x270
[  141.121729][ T6879]        add_transaction_credits+0x104/0xcb0
[  141.127681][ T6879]        start_this_handle+0x723/0x1560
[  141.133198][ T6879]        jbd2__journal_restart+0x233/0x630
[  141.138977][ T6879]        ocfs2_extend_trans+0x2bb/0x6f0
[  141.144501][ T6879]        ocfs2_try_to_merge_extent+0xdb9/0x1cd0
[  141.150724][ T6879]        ocfs2_split_extent+0x14e3/0x21e0
[  141.156418][ T6879]        ocfs2_change_extent_flag+0xb11/0xe30
[  141.162457][ T6879]        ocfs2_mark_extent_written+0x2f3/0x570
[  141.168585][ T6879]        ocfs2_dio_end_io+0x881/0x1400
[  141.174019][ T6879]        dio_complete+0x255/0x700
[  141.179018][ T6879]        __blockdev_direct_IO+0x2eb0/0x3b20
[  141.184885][ T6879]        ocfs2_direct_IO+0x233/0x2a0
[  141.190151][ T6879]        generic_file_direct_write+0x222/0x470
[  141.196315][ T6879]        __generic_file_write_iter+0x2b2/0x4e0
[  141.202455][ T6879]        ocfs2_file_write_iter+0x171a/0x1ee0
[  141.208415][ T6879]        do_iter_readv_writev+0x47d/0x5f0
[  141.214106][ T6879]        do_iter_write+0x1f8/0x7a0
[  141.219223][ T6879]        iter_file_splice_write+0x6be/0xcf0
[  141.225088][ T6879]        direct_splice_actor+0xe1/0x130
[  141.230606][ T6879]        splice_direct_to_actor+0x4e8/0xc00
[  141.236472][ T6879]        do_splice_direct+0x1d4/0x2f0
[  141.241816][ T6879]        do_sendfile+0x524/0xe30
[  141.246734][ T6879]        __se_sys_sendfile64+0x141/0x1a0
[  141.252337][ T6879]        do_syscall_64+0x4c/0xa0
[  141.257249][ T6879]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  141.263641][ T6879] 
[  141.263641][ T6879] other info that might help us debug this:
[  141.263641][ T6879] 
[  141.273843][ T6879] Chain exists of:
[  141.273843][ T6879]   jbd2_handle --> sb_internal#4 --> &journal->j_trans_barrier
[  141.273843][ T6879] 
[  141.287190][ T6879]  Possible unsafe locking scenario:
[  141.287190][ T6879] 
[  141.294621][ T6879]        CPU0                    CPU1
[  141.299967][ T6879]        ----                    ----
[  141.305320][ T6879]   lock(&journal->j_trans_barrier);
[  141.310602][ T6879]                                lock(sb_internal#4);
[  141.317343][ T6879]                                lock(&journal->j_trans_barrier);
[  141.325119][ T6879]   lock(jbd2_handle);
[  141.329163][ T6879] 
[  141.329163][ T6879]  *** DEADLOCK ***
[  141.329163][ T6879] 
[  141.337285][ T6879] 5 locks held by syz.1.831/6879:
[  141.342292][ T6879]  #0: ffff888078890460 (sb_writers#32){.+.+}-{0:0}, at: do_sendfile+0x4ff/0xe30
[  141.351488][ T6879]  #1: ffff88805ef03488 (&sb->s_type->i_mutex_key#38){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x437/0x1ee0
[  141.362772][ T6879]  #2: ffff88805ef03120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_dio_end_io+0x43e/0x1400
[  141.373701][ T6879]  #3: ffff888078890650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_dio_end_io+0x7a8/0x1400
[  141.383331][ T6879]  #4: ffff88805fbb44e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0
[  141.393999][ T6879] 
[  141.393999][ T6879] stack backtrace:
[  141.399877][ T6879] CPU: 0 PID: 6879 Comm: syz.1.831 Not tainted syzkaller #0
[  141.407132][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  141.417167][ T6879] Call Trace:
[  141.420424][ T6879]  <TASK>
[  141.423332][ T6879]  dump_stack_lvl+0x188/0x250
[  141.427989][ T6879]  ? load_image+0x410/0x410
[  141.432466][ T6879]  ? show_regs_print_info+0x20/0x20
[  141.437641][ T6879]  ? print_circular_bug+0x12b/0x1a0
[  141.442815][ T6879]  check_noncircular+0x296/0x330
[  141.447732][ T6879]  ? add_chain_block+0x9b0/0x9b0
[  141.452647][ T6879]  ? lockdep_lock+0xf1/0x1f0
[  141.457227][ T6879]  ? mark_lock+0x94/0x320
[  141.461539][ T6879]  ? _find_first_zero_bit+0xd1/0xf0
[  141.466716][ T6879]  __lock_acquire+0x2c66/0x7b50
[  141.471553][ T6879]  ? verify_lock_unused+0x140/0x140
[  141.476730][ T6879]  ? mark_lock+0x94/0x320
[  141.481040][ T6879]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  141.486995][ T6879]  lock_acquire+0x19e/0x400
[  141.491478][ T6879]  ? wait_transaction_locked+0x19f/0x270
[  141.497107][ T6879]  ? wait_transaction_locked+0x17c/0x270
[  141.502715][ T6879]  ? __lock_acquire+0x7b50/0x7b50
[  141.507723][ T6879]  ? read_lock_is_recursive+0x10/0x10
[  141.513069][ T6879]  wait_transaction_locked+0x1bb/0x270
[  141.518502][ T6879]  ? wait_transaction_locked+0x19f/0x270
[  141.524107][ T6879]  ? add_transaction_credits+0xcb0/0xcb0
[  141.529712][ T6879]  ? init_wait_entry+0xd0/0xd0
[  141.534452][ T6879]  ? mark_lock+0x94/0x320
[  141.538756][ T6879]  add_transaction_credits+0x104/0xcb0
[  141.544202][ T6879]  ? jbd2_journal_begin_ordered_truncate+0x150/0x150
[  141.550856][ T6879]  ? mark_lock+0x94/0x320
[  141.555160][ T6879]  ? read_lock_is_recursive+0x10/0x10
[  141.560505][ T6879]  ? lock_chain_count+0x20/0x20
[  141.565347][ T6879]  ? verify_lock_unused+0x140/0x140
[  141.570522][ T6879]  ? try_to_wake_up+0x69a/0x1020
[  141.575436][ T6879]  start_this_handle+0x723/0x1560
[  141.580440][ T6879]  ? jbd2__journal_start+0x5a0/0x5a0
[  141.585702][ T6879]  ? __lock_acquire+0x7b50/0x7b50
[  141.590708][ T6879]  ? stop_this_handle+0x3d7/0x5c0
[  141.595726][ T6879]  jbd2__journal_restart+0x233/0x630
[  141.600987][ T6879]  ocfs2_extend_trans+0x2bb/0x6f0
[  141.606000][ T6879]  ? ocfs2_commit_trans+0x240/0x240
[  141.611220][ T6879]  ? __lock_acquire+0x7b50/0x7b50
[  141.616231][ T6879]  ocfs2_try_to_merge_extent+0xdb9/0x1cd0
[  141.621961][ T6879]  ? ocfs2_split_and_insert+0xe00/0xe00
[  141.627487][ T6879]  ? unwind_next_frame+0x11ec/0x1cf0
[  141.632751][ T6879]  ? 0xffffffffa0028000
[  141.636880][ T6879]  ? is_bpf_text_address+0x254/0x270
[  141.642143][ T6879]  ? ocfs2_allocate_extend_trans+0x5d0/0x5d0
[  141.648099][ T6879]  ? __kernel_text_address+0x9a/0x100
[  141.653444][ T6879]  ? unwind_get_return_address+0x49/0x80
[  141.659050][ T6879]  ? stack_trace_save+0xf0/0xf0
[  141.663889][ T6879]  ? arch_stack_walk+0xf2/0x140
[  141.668715][ T6879]  ? ocfs2_metadata_cache_get_super+0x42/0x80
[  141.674759][ T6879]  ocfs2_split_extent+0x14e3/0x21e0
[  141.679936][ T6879]  ? __blockdev_direct_IO+0x2eb0/0x3b20
[  141.685455][ T6879]  ? ocfs2_direct_IO+0x233/0x2a0
[  141.690378][ T6879]  ? ocfs2_add_clusters_in_btree+0xfd0/0xfd0
[  141.696364][ T6879]  ? __se_sys_sendfile64+0x141/0x1a0
[  141.701639][ T6879]  ? do_syscall_64+0x4c/0xa0
[  141.706208][ T6879]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  141.712253][ T6879]  ? __ocfs2_find_path+0x47e/0x860
[  141.717344][ T6879]  ? __ocfs2_find_path+0x860/0x860
[  141.722430][ T6879]  ? ocfs2_find_path+0x100/0x100
[  141.727344][ T6879]  ocfs2_change_extent_flag+0xb11/0xe30
[  141.732870][ T6879]  ? ocfs2_try_to_merge_extent+0x1cd0/0x1cd0
[  141.738824][ T6879]  ? do_raw_spin_unlock+0x11d/0x230
[  141.744001][ T6879]  ? _raw_spin_unlock+0x24/0x40
[  141.748849][ T6879]  ? ocfs2_extent_map_trunc+0x58a/0x5e0
[  141.754371][ T6879]  ? ocfs2_extent_map_init+0x90/0x90
[  141.759634][ T6879]  ? ocfs2_dinode_extent_map_insert+0x50/0x50
[  141.765696][ T6879]  ocfs2_mark_extent_written+0x2f3/0x570
[  141.771308][ T6879]  ? ocfs2_change_extent_flag+0xe30/0xe30
[  141.777018][ T6879]  ? ocfs2_commit_trans+0x240/0x240
[  141.782194][ T6879]  ? rcu_is_watching+0x11/0xa0
[  141.786934][ T6879]  ocfs2_dio_end_io+0x881/0x1400
[  141.791854][ T6879]  ? ocfs2_dio_wr_get_block+0x1810/0x1810
[  141.797573][ T6879]  ? ocfs2_file_write_iter+0x171a/0x1ee0
[  141.803183][ T6879]  ? iter_file_splice_write+0x6be/0xcf0
[  141.808706][ T6879]  ? direct_splice_actor+0xe1/0x130
[  141.813898][ T6879]  ? ocfs2_allocate_extend_trans+0x5d0/0x5d0
[  141.819854][ T6879]  ? mark_lock+0x94/0x320
[  141.824162][ T6879]  ? mark_lock+0x94/0x320
[  141.828467][ T6879]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  141.834425][ T6879]  ? lock_chain_count+0x20/0x20
[  141.839252][ T6879]  ? __rwlock_init+0x140/0x140
[  141.843992][ T6879]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  141.849864][ T6879]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  141.855737][ T6879]  ? lockdep_hardirqs_on+0x94/0x140
[  141.860921][ T6879]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  141.866815][ T6879]  ? _raw_spin_unlock+0x40/0x40
[  141.871640][ T6879]  ? ocfs2_dio_wr_get_block+0x1810/0x1810
[  141.877336][ T6879]  dio_complete+0x255/0x700
[  141.881817][ T6879]  __blockdev_direct_IO+0x2eb0/0x3b20
[  141.887169][ T6879]  ? sb_init_dio_done_wq+0x80/0x80
[  141.892261][ T6879]  ? ocfs2_lock_get_block+0x50/0x50
[  141.897487][ T6879]  ? invalidate_mapping_pagevec+0x30/0x30
[  141.903185][ T6879]  ? filemap_write_and_wait_range+0x228/0x3b0
[  141.909229][ T6879]  ? ocfs2_lock_get_block+0x50/0x50
[  141.914400][ T6879]  ocfs2_direct_IO+0x233/0x2a0
[  141.919137][ T6879]  generic_file_direct_write+0x222/0x470
[  141.924747][ T6879]  __generic_file_write_iter+0x2b2/0x4e0
[  141.930357][ T6879]  ? ocfs2_inode_unlock+0x11a/0x140
[  141.935531][ T6879]  ocfs2_file_write_iter+0x171a/0x1ee0
[  141.940977][ T6879]  ? ocfs2_file_read_iter+0xa80/0xa80
[  141.946347][ T6879]  ? rcu_lock_release+0x5/0x20
[  141.951093][ T6879]  ? __lock_acquire+0x7b50/0x7b50
[  141.956098][ T6879]  ? aa_file_perm+0x38b/0xe80
[  141.960751][ T6879]  ? __kasan_kmalloc+0xaf/0xe0
[  141.965491][ T6879]  ? splice_direct_to_actor+0x4e8/0xc00
[  141.971014][ T6879]  do_iter_readv_writev+0x47d/0x5f0
[  141.976188][ T6879]  ? aa_path_link+0x8a0/0x8a0
[  141.980842][ T6879]  ? generic_file_rw_checks+0x280/0x280
[  141.986365][ T6879]  ? common_file_perm+0x171/0x1c0
[  141.991363][ T6879]  ? fsnotify_perm+0x5d/0x560
[  141.996019][ T6879]  ? security_file_permission+0x75/0xa0
[  142.001540][ T6879]  do_iter_write+0x1f8/0x7a0
[  142.006106][ T6879]  ? memset+0x1e/0x40
[  142.010065][ T6879]  ? iov_iter_bvec+0xb4/0x170
[  142.014715][ T6879]  iter_file_splice_write+0x6be/0xcf0
[  142.020064][ T6879]  ? splice_from_pipe+0x180/0x180
[  142.025064][ T6879]  ? generic_file_splice_read+0x463/0x5f0
[  142.030757][ T6879]  ? splice_shrink_spd+0xc0/0xc0
[  142.035685][ T6879]  ? fsnotify_set_children_dentry_flags+0x220/0x220
[  142.042252][ T6879]  ? splice_from_pipe+0x180/0x180
[  142.047262][ T6879]  direct_splice_actor+0xe1/0x130
[  142.052263][ T6879]  splice_direct_to_actor+0x4e8/0xc00
[  142.057610][ T6879]  ? direct_file_splice_eof+0xa0/0xa0
[  142.062954][ T6879]  ? pipe_to_sendpage+0x320/0x320
[  142.067953][ T6879]  ? common_file_perm+0x171/0x1c0
[  142.072950][ T6879]  ? fsnotify_perm+0x5d/0x560
[  142.077600][ T6879]  ? security_file_permission+0x75/0xa0
[  142.083120][ T6879]  do_splice_direct+0x1d4/0x2f0
[  142.087947][ T6879]  ? splice_direct_to_actor+0xc00/0xc00
[  142.093466][ T6879]  ? rcu_read_lock_any_held+0xb0/0x130
[  142.098903][ T6879]  ? do_splice_direct+0x2f0/0x2f0
[  142.103900][ T6879]  ? common_file_perm+0x171/0x1c0
[  142.108909][ T6879]  do_sendfile+0x524/0xe30
[  142.113302][ T6879]  ? do_pwritev+0x3a0/0x3a0
[  142.117803][ T6879]  ? __lock_acquire+0x7b50/0x7b50
[  142.122810][ T6879]  __se_sys_sendfile64+0x141/0x1a0
[  142.127911][ T6879]  ? lock_chain_count+0x20/0x20
[  142.132753][ T6879]  ? __x64_sys_sendfile64+0xa0/0xa0
[  142.137926][ T6879]  ? lockdep_hardirqs_on+0x94/0x140
[  142.143102][ T6879]  do_syscall_64+0x4c/0xa0
[  142.147498][ T6879]  ? clear_bhb_loop+0x30/0x80
[  142.152168][ T6879]  ? clear_bhb_loop+0x30/0x80
[  142.156819][ T6879]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  142.162698][ T6879] RIP: 0033:0x7f4d3a8ed0d9
[  142.167088][ T6879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.186667][ T6879] RSP: 002b:00007f4d38b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  142.195058][ T6879] RAX: ffffffffffffffda RBX: 00007f4d3ab74fa0 RCX: 00007f4d3a8ed0d9
[  142.203009][ T6879] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[  142.210999][ T6879] RBP: 00007f4d3a984024 R08: 0000000000000000 R09: 0000000000000000
[  142.218947][ T6879] R10: 0000000000fffe82 R11: 0000000000000246 R12: 0000000000000000
[  142.226891][ T6879] R13: 00007f4d3ab75038 R14: 00007f4d3ab74fa0 R15: 00007fff73bc6168
[  142.234843][ T6879]  </TASK>
[  142.300200][ T6933] loop5: detected capacity change from 0 to 32768
[  142.354703][   T25] audit: type=1800 audit(1787621686.043:33): pid=6933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.851" name="file1" dev="loop5" ino=4 res=0 errno=0
[  142.385083][ T4200] ocfs2: Unmounting device (7,1) on (node local)
[  142.439722][    T7] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  142.469526][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.500714][    T7] usb 3-1: Product: syz
[  142.539475][    T7] usb 3-1: Manufacturer: syz
[  142.544121][    T7] usb 3-1: SerialNumber: syz
[  142.840292][    T7] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  142.851078][    T7] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  142.861371][    T7] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  142.870418][    T7] usb 3-1: media controller created
[  142.880763][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  143.109484][    T7] zl10353_read_register: readreg error (reg=127, ret==-110)
[  143.125683][    T7] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5
[  143.134271][    T7] usb 3-1: USB disconnect, device number 10