last executing test programs:

1m0.013628942s ago: executing program 2 (id=971):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4429, &(0x7f0000008940)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2)
flock(r0, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

59.36469179s ago: executing program 2 (id=978):
rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0)

59.234325024s ago: executing program 2 (id=980):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15)

59.17435841s ago: executing program 2 (id=982):
syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002528bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a240129000302010209050101000203ff0609050a030800030101072501040809"], 0x0)

57.840575235s ago: executing program 2 (id=997):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f55, &(0x7f000000efc0)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100))
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

57.194521257s ago: executing program 2 (id=1006):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0xc7, 0x4a, 0x7c, 0x10, 0x294b, 0x7b59, 0x5261, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x8, 0xd0, 0xa, [{{0x9, 0x4, 0xc8, 0x80, 0x2, 0xff, 0x47, 0xd0, 0x2e, [], [{{0x9, 0x5, 0xf, 0xa, 0x20, 0x65, 0x8, 0x9}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x2, 0x7, 0x6}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})

42.017716225s ago: executing program 32 (id=1006):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0xc7, 0x4a, 0x7c, 0x10, 0x294b, 0x7b59, 0x5261, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x8, 0xd0, 0xa, [{{0x9, 0x4, 0xc8, 0x80, 0x2, 0xff, 0x47, 0xd0, 0x2e, [], [{{0x9, 0x5, 0xf, 0xa, 0x20, 0x65, 0x8, 0x9}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x2, 0x7, 0x6}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})

14.000738678s ago: executing program 3 (id=1444):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000800000062000000ad000000950080008639cfc84a00200000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)

14.000598602s ago: executing program 3 (id=1445):
epoll_pwait(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x5, &(0x7f0000000200)={[0x2000007]}, 0xffffffffffffff9f)

13.848700488s ago: executing program 3 (id=1448):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x800, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r1, 0x20, 0x0, 0x8000)

13.712125241s ago: executing program 3 (id=1450):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303031373737373737373737372c6e6c733d63703934392c63726561746f723d7af940e22c63726561746f723d0aee18b02c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d1362a84f2c001ff9431eef5603a24fd03ed91e53947f1c1b0db87d311ac2332606851a5634c431970f558844dd9de7c5411a6a043cd24b8dac907e9e8575657ddeae1a3b6113873ccbc19593f645cac58983c2694a9c166df86f5cc5fdb0a4f7285667940bab9d107a53ca4f3f986662f9c2050388a55392282348754d"], 0x1, 0x6f4, &(0x7f0000000680)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000640)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x10, 0x6, 0x10001)

13.550983739s ago: executing program 3 (id=1452):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x5, 0x3, 0x0, 0x0, "f759ca14860e4041836dd400", '\x00\x00\a\x00', "0300", "e859ad13", ["1c9600", "808e8889dc7fb3eacf821b00", "2971088d5453005a4e5200", "ff812500004000"]})

12.920724634s ago: executing program 3 (id=1453):
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca746d00090503034d00ff99"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

12.797597642s ago: executing program 33 (id=1453):
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca746d00090503034d00ff99"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

825.9676ms ago: executing program 4 (id=1523):
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1ee, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10)

746.144682ms ago: executing program 4 (id=1525):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x19e172f08959ac4a, 0x10001, 0x47}, 0x2c)

745.798554ms ago: executing program 0 (id=1526):
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0xffffffffffffff8c, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4})

656.326392ms ago: executing program 0 (id=1528):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000140)={0x9, "f991bbb7ea24d9e1bf40bb290906597417702b3c0cd9f63603de4ccad77d68b9678503ac2fcd880561971753640ef5ddd5d90c5e434fd4ed7fe529d7ff9c92b21035fae65009020ef00162783d5079e616f289a9c1e438a46fef95f72663c36d80ad7314054b8e1bb09f2dc3d366f6e182669eac6bc3838ed90cf316aaa6c904"})

580.113482ms ago: executing program 0 (id=1530):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

579.881911ms ago: executing program 4 (id=1531):
mount(&(0x7f0000000140)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x208000, 0x0)

473.557136ms ago: executing program 4 (id=1533):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'wlan1\x00', &(0x7f0000000340)=@ethtool_ts_info})

473.241994ms ago: executing program 0 (id=1534):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x24, r1, 0x1, 0x70bd29, 0x25df5bfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}}, 0x0)

406.268488ms ago: executing program 0 (id=1535):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00')
getdents64(r0, 0x0, 0x0)

405.962618ms ago: executing program 4 (id=1536):
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000000)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$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")

405.840362ms ago: executing program 0 (id=1537):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="31010000dccd5e08cb0603000000000023010902240001000064000904340102d469e70009058acf", @ANYRESDEC], 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
write$tun(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

405.673925ms ago: executing program 1 (id=1538):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x6}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x500, 0x4)

160.111511ms ago: executing program 1 (id=1539):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000500)={[{@dots}, {@fat=@check_normal}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@quiet}, {@fat=@nfs_nostale_ro}, {@nodots}, {@nodots}, {}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@fat=@nfs}, {@dots}, {@dots}, {@dots}, {@fat=@flush}]}, 0xfd, 0x1bf, &(0x7f0000000840)="$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")
utime(&(0x7f000001f480)='./file0\x00', 0x0)

100.817015ms ago: executing program 1 (id=1540):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004084)

51.06144ms ago: executing program 1 (id=1541):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

50.725315ms ago: executing program 1 (id=1542):
clock_gettime(0x2, &(0x7f0000000300))

364.515µs ago: executing program 4 (id=1543):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$eJzs3c1PHOcdAOB3BlyD6w9wfXClSl2pllq1FQKf2mKpGGNjsKkrt7aqXtYLrG3ahbVgqXqwFHKzlFOkHKIcrETKjZPFIVfnT8glR+dsKTnkEimSFaLdnYWdYVds0C7EzvMcmJ33e/c3H+8chjdOVB4ureWW1nKFlVx54f7axdz/yqX15WKID0nL/o8dXv90phfHyVEfez9lt65c+8fdiyF8uvj5y+3t7e1Q1R9aGmv6/M3Xjxeatw1xpk613datdcu/Qwjn9oyrqi+E8K9PQohCCJeTtMlkOxhCOBXqeXcfv3Mv16XRPHtRvJR/Nfdka/zC7ObTrfbfPQrhg9Iv//hg+cvf9I1/8fsudQ8AAAAAAAAAAAAAAAAAwGtu+vatO38fHQvPo9C/Ge19X3c62bZ7P3a7a37d+y8LAAAAAAAAAAAAAAAAAAAAP1K77//norMt3v+fSrYTbepv/7VNxvHujpPemPnbramro2PJ+u/Rnvw/JUlfXe4Lwy3Wfc+u/345U7/1+u97+zmoxvga/Q6FKB7ZfmsnfyjE8chICB8lC7+fj07EpfJa5Q/3y+sri10bxmsrHf/66v2p6CQL+nca/8lM+71f//8Xe46m6v697h1ib7R0/Pvalvv47aij+F/J1DuM+HNw6fj319IGmwtM1C8A1fi/279//Kcy7fcq/qdDCLmoOtZc6gpQncNU09vNV0hLx/9YLS116Ux+yHbn/7eZ+F/NtN8u/me69g1aX/83sjciWkrH/2e1tIFUid3zfzje//y/lmn/KO7/1fFvuP93JB3/5KGtP1Wk9kt2ev2fzrTfq/jfiZNxno5SR8BmVE9v9//qSEvHf2BP/u7zX9zR/O96pv5hPf81+q09/zU9h/wuqj//0Vo6/oNty3V6/s9k6vX6+j9Rm/9xUOn4n6ilpefOQ7W/ncZ/NtN+r+Jfm5UMNOK/ez357ng9/UPzv46k4//zemLcXGKj9rc2/4v2n//fyLR/FPO/6vg34t72+qZIx/9k23LV+H/Wwf3/ZqZe7+Mfwqi5/oGl43+qbbna+T+wf/znMvV6Hf/f9rJxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNfAZLIdClE8ktqP45GREK4k++fDiWi+sJifL5UX/rsWwlSSngtnowel8nyhlF9aKS8W84VSqbwQwtUk/1wYiNZK5Up+ufDo2k5bg9HDYmG1Ml8sVEII00n6r8KpRlvzS5XlwqMQwvWdvDNxefXRw8JKfnFp9S+jo6OjYWZnDMNR8f+V4kql3ns9N4TZnbpDUdPgatk3dsZyMvpPeX11pVCqpd9sqlMqLxRKTXXmkrz3wnBUWV1fWShUivlS+UGjv6M0kWynZm7/8/bNsT3596L6dvJwhwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAD/R8/M/vhxD663txCGGi8SFqVf7Zi+Kl/Ku5J1vjF2Y3n269bFcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB7duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrBLxygRA1EYgN+Mhdp5DKuQdLYJimhhRPAEegwPE4/iJbyDhYWthQhmBjTuQprd6vuaB/l5eT8kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsc3k33t+2XUSKo6/DiJfH17ff+XWZ0zDPvNg/2FNPduPqZjy/aLvy3dO//Kw8eu/zT/r58fQQG2b1PPzdX/5Ps3rneGuvaVjXv/ard08i5SYi+pKfppybZt27AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhmBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86ir4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//78SIGU=")
setxattr$trusted_overlay_origin(&(0x7f0000000240)='.\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=1544):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000401, &(0x7f0000000200)={[{@noquota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@errors_continue}, {@grpquota}, {@usrquota}, {@errors_continue}, {@uid}, {@errors_remount}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000100)='.\x00', 0x600a02a, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  154.582716][ T8194] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  154.586088][ T8194] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  154.589201][ T8194] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  154.591920][ T8194] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  154.595386][ T8194] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  154.599071][ T8194] XFS (loop2): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  154.604273][   T10] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  154.610564][ T8194] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  154.616472][ T8194] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  154.650375][ T5850] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  154.767410][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  154.772931][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  154.777514][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 255, setting to 64
[  154.781604][   T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  154.786736][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.792123][   T10] usb 2-1: config 0 descriptor??
[  154.800100][ T8184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  154.804413][   T10] hub 2-1:0.0: bad descriptor, ignoring hub
[  154.811020][   T10] hub 2-1:0.0: probe with driver hub failed with error -5
[  154.869214][ T8211] loop2: detected capacity change from 0 to 256
[  155.110491][ T8215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.824'.
[  155.149778][ T8217] netlink: 'syz.0.825': attribute type 14 has an invalid length.
[  155.230222][   T10] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  155.431826][ T5313] usb 2-1: USB disconnect, device number 19
[  155.846287][ T8227] loop2: detected capacity change from 0 to 256
[  155.854018][ T8227] exfat: Deprecated parameter 'utf8'
[  155.872797][ T8227] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[  155.940884][ T8229] loop2: detected capacity change from 0 to 1764
[  156.025484][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'.
[  156.029155][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'.
[  156.184595][ T8233] usb usb8: usbfs: process 8233 (syz.2.831) did not claim interface 0 before use
[  156.816769][ T8252] loop1: detected capacity change from 0 to 32768
[  156.954525][ T8252] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  156.954554][ T8252]   allowing incompatible features above 0.0: (unknown version)
[  156.954564][ T8252]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  156.973034][ T8252] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  156.976409][ T8252] bcachefs (loop1): initializing new filesystem
[  156.987351][ T8252] bcachefs (loop1): going read-write
[  157.006892][ T8252] bcachefs (loop1): marking superblocks
[  157.018627][ T8252] bcachefs (loop1): initializing freespace
[  157.023303][ T8252] bcachefs (loop1): done initializing freespace
[  157.028950][ T8252] bcachefs (loop1): reading snapshots table
[  157.031233][ T8252] bcachefs (loop1): reading snapshots done
[  157.072724][ T8252] bcachefs (loop1): done starting filesystem
[  157.232129][ T8252] syz.1.838 (8252) used greatest stack depth: 16824 bytes left
[  157.302520][ T5846] bcachefs (loop1): shutting down
[  157.304428][ T5846] bcachefs (loop1): going read-only
[  157.307923][ T5846] bcachefs (loop1): finished waiting for writes to stop
[  157.313142][ T5846] bcachefs (loop1): flushing journal and stopping allocators, journal seq 5
[  157.332807][ T8266] loop0: detected capacity change from 0 to 32768
[  157.338475][ T8266] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.840 (8266)
[  157.359795][ T8266] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  157.371617][ T8266] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  157.375044][ T8266] BTRFS info (device loop0): using free-space-tree
[  157.388588][ T8273] loop2: detected capacity change from 0 to 256
[  157.460422][ T5846] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 6
[  157.472176][ T5846] bcachefs (loop1): clean shutdown complete, journal seq 7
[  157.485856][ T5846] bcachefs (loop1): marking filesystem clean
[  157.493216][   T33] audit: type=1800 audit(1755338191.164:35): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.840" name="file0" dev="loop0" ino=258 res=0 errno=0
[  157.548724][ T5846] bcachefs (loop1): shutdown complete
[  157.648275][ T5853] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  158.100812][ T8300] loop2: detected capacity change from 0 to 4096
[  158.104976][ T8300] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  158.121469][ T8300] ntfs3(loop2): Inode r=19 is not in use!
[  158.123885][ T8300] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  158.127745][ T8300] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  158.219870][ T8298] loop0: detected capacity change from 0 to 32768
[  158.239087][ T8298] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  158.308263][ T5853] ocfs2: Unmounting device (7,0) on (node local)
[  158.312943][ T8304] trusted_key: syz.2.848 sent an empty control message without MSG_MORE.
[  158.511995][ T8309] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  158.620188][ T8311] loop0: detected capacity change from 0 to 4096
[  158.649303][ T8311] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  158.653825][ T8311] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  158.693377][ T8311] ntfs3(loop0): ino=1c, mi_enum_attr
[  158.701210][ T8311] ntfs3(loop0): ino=1b, "file0" ntfs_readdir
[  158.716455][ T1100] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  158.721340][ T5853] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  158.723681][ T5853] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  158.727142][ T5853] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  158.729650][ T1100] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  158.935218][ T8319] netlink: 36 bytes leftover after parsing attributes in process `syz.0.854'.
[  158.982794][ T8321] loop0: detected capacity change from 0 to 128
[  159.020447][ T8321] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /usr/sbin/sshd /usr/sbin/sshd /bin/sh /syz-executor /syz-executor /newroot/279/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  159.165979][ T5909] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  159.201146][    C1] vkms_vblank_simulate: vblank timer overrun
[  159.342637][ T8330] loop0: detected capacity change from 0 to 4096
[  159.352508][ T8330] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  159.375168][ T5909] usb 2-1: Using ep0 maxpacket: 8
[  159.379062][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  159.383485][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  159.384401][ T8330] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  159.392667][ T8330] ntfs3(loop0): Failed to initialize $Secure::$SII (-22).
[  159.397808][ T5909] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[  159.399406][ T8330] ntfs3(loop0): Failed to initialize $Secure (-22).
[  159.401599][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.416966][ T5909] usb 2-1: config 0 descriptor??
[  159.491753][ T8335] loop0: detected capacity change from 0 to 1024
[  159.535398][ T1091] hfsplus: b-tree write err: -5, ino 4
[  159.563535][ T8337] netlink: 'syz.0.862': attribute type 1 has an invalid length.
[  159.570292][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'.
[  159.831978][ T5909] logitech 0003:046D:C298.000A: item fetching failed at offset 4/5
[  159.837169][ T5909] logitech 0003:046D:C298.000A: parse failed
[  159.839541][ T5909] logitech 0003:046D:C298.000A: probe with driver logitech failed with error -22
[  159.936295][    T9] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  160.027181][   T10] usb 2-1: USB disconnect, device number 20
[  160.090149][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  160.094312][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  160.099845][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64
[  160.103472][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  160.112222][    T9] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  160.117464][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.120643][    T9] usb 3-1: Product: syz
[  160.122393][    T9] usb 3-1: Manufacturer: syz
[  160.124095][    T9] usb 3-1: SerialNumber: syz
[  160.132332][    T9] usb 3-1: config 0 descriptor??
[  160.135637][ T8343] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  160.185607][ T8350] loop0: detected capacity change from 0 to 40427
[  160.186227][    T9] rc_core: IR keymap rc-imon-rsc not found
[  160.190063][ T8350] F2FS-fs (loop0): build fault injection rate: 14
[  160.190095][ T8350] F2FS-fs (loop0): build fault injection type: 0x77fd1
[  160.192077][ T8350] F2FS-fs (loop0): invalid crc value
[  160.199381][    T9] Registered IR keymap rc-empty
[  160.202350][    T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  160.208555][ T8350] F2FS-fs (loop0): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4429/0x6ff0
[  160.210035][    T9] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11
[  160.218672][ T8350] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-12)
[  160.352909][    T9] usb 3-1: USB disconnect, device number 19
[  160.610398][ T8361] loop1: detected capacity change from 0 to 128
[  161.085572][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.091085][ T8383] batadv_slave_1: entered promiscuous mode
[  161.100867][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'.
[  161.481327][ T8389] loop0: detected capacity change from 0 to 512
[  161.484802][ T8389] EXT4-fs: Ignoring removed mblk_io_submit option
[  161.507103][ T8389] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  161.519827][ T8389] EXT4-fs (loop0): 1 truncate cleaned up
[  161.529720][ T8389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.631855][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.954143][ T8409] loop1: detected capacity change from 0 to 4096
[  161.964636][ T8409] ntfs3: Unknown parameter 'noshowmeta'
[  162.539012][ T8418] syz.1.895: attempt to access beyond end of device
[  162.539012][ T8418] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0
[  162.543782][ T8418] XFS (nbd1): SB validate failed with error -5.
[  162.605400][   T51] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  162.625525][ T8425] netlink: 'syz.0.896': attribute type 1 has an invalid length.
[  162.758195][   T51] usb 3-1: config 7 descriptor has 1 excess byte, ignoring
[  162.760959][   T51] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2
[  162.786922][   T51] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[  162.790482][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.797970][   T51] usb 3-1: Product: syz
[  162.799681][   T51] usb 3-1: Manufacturer: syz
[  162.801536][   T51] usb 3-1: SerialNumber: syz
[  162.827980][   T51] rndis_host 3-1:7.0: skipping garbage
[  162.830119][   T51] usb 3-1: bad CDC descriptors
[  162.832997][   T51] option 3-1:7.0: GSM modem (1-port) converter detected
[  163.023319][ T8437] loop0: detected capacity change from 0 to 32768
[  163.032353][ T8437] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.902 (8437)
[  163.047756][ T8437] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  163.052061][ T8437] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  163.062824][   T51] usb 3-1: USB disconnect, device number 20
[  163.065611][ T8437] BTRFS info (device loop0): using free-space-tree
[  163.069969][   T51] option 3-1:7.0: device disconnected
[  163.075502][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  163.135636][   T33] audit: type=1800 audit(1755338196.814:36): pid=8437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.902" name="file1" dev="loop0" ino=260 res=0 errno=0
[  163.235426][    T9] usb 2-1: Using ep0 maxpacket: 32
[  163.240271][    T9] usb 2-1: config 0 has an invalid interface number: 126 but max is 0
[  163.242907][    T9] usb 2-1: config 0 has no interface number 0
[  163.244805][    T9] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  163.253903][    T9] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  163.257446][    T9] usb 2-1: config 0 interface 126 has no altsetting 0
[  163.270753][    T9] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  163.273577][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.278186][    T9] usb 2-1: Product: syz
[  163.282681][    T9] usb 2-1: Manufacturer: syz
[  163.284372][    T9] usb 2-1: SerialNumber: syz
[  163.288693][    T9] usb 2-1: config 0 descriptor??
[  163.293259][ T8439] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  163.296673][ T8439] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  163.707012][    T9] ir_usb 2-1:0.126: IR Dongle converter detected
[  163.768920][ T5853] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  163.906886][    T9] usb 2-1: IRDA class descriptor not found, device not bound
[  164.108062][ T8458] loop2: detected capacity change from 0 to 32768
[  164.112016][ T8458] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.904 (8458)
[  164.114324][    T9] usb 2-1: USB disconnect, device number 21
[  164.175841][ T8458] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  164.179956][ T8458] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  164.205335][ T8458] BTRFS info (device loop2): using free-space-tree
[  164.376240][ T5850] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  164.488905][ T8462] loop0: detected capacity change from 0 to 32768
[  164.501570][ T8462] JBD2: Ignoring recovery information on journal
[  164.578975][ T8462] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  164.680906][ T5853] ocfs2: Unmounting device (7,0) on (node local)
[  164.711018][ T8484] loop1: detected capacity change from 0 to 256
[  164.724242][ T8484] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  165.448487][ T8496] loop2: detected capacity change from 0 to 2048
[  165.467018][ T8496] FAT-fs (loop2): Directory bread(block 131102) failed
[  165.469295][ T8496] FAT-fs (loop2): Directory bread(block 131103) failed
[  165.471579][ T8496] FAT-fs (loop2): Directory bread(block 131104) failed
[  165.473986][ T8496] FAT-fs (loop2): Directory bread(block 131105) failed
[  165.477053][ T8496] FAT-fs (loop2): Directory bread(block 131106) failed
[  165.480146][ T8496] FAT-fs (loop2): Directory bread(block 131107) failed
[  165.482305][ T8496] FAT-fs (loop2): Directory bread(block 131108) failed
[  165.484283][ T8496] FAT-fs (loop2): Directory bread(block 131109) failed
[  165.487583][ T8496] FAT-fs (loop2): Directory bread(block 131110) failed
[  165.491064][ T8496] FAT-fs (loop2): Directory bread(block 131111) failed
[  165.691773][ T8500] loop1: detected capacity change from 0 to 512
[  165.703267][ T8500] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  165.717413][ T8500] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  165.721376][ T8500] System zones: 1-12
[  165.739740][ T8500] EXT4-fs (loop1): 1 truncate cleaned up
[  165.743453][ T8500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.793901][ T8506] loop0: detected capacity change from 0 to 512
[  165.794088][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.834145][ T8506] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  165.858117][ T8506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  165.861433][ T8506] EXT4-fs (loop0): orphan cleanup on readonly fs
[  165.878524][ T8506] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.917: bg 0: block 361: padding at end of block bitmap is not set
[  165.891340][ T8506] EXT4-fs (loop0): Remounting filesystem read-only
[  165.894484][ T8506] EXT4-fs (loop0): 1 truncate cleaned up
[  165.899112][ T8506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  166.173237][ T8517] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.917: dx entry: limit 0 != root limit 125
[  166.179154][ T8517] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.917: Corrupt directory, running e2fsck is recommended
[  166.186253][ T8517] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.917: dx entry: limit 0 != root limit 125
[  166.190695][ T8517] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.917: Corrupt directory, running e2fsck is recommended
[  166.199668][ T8517] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.917: dx entry: limit 0 != root limit 125
[  166.204463][ T8517] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.917: Corrupt directory, running e2fsck is recommended
[  166.212630][ T8517] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.917: dx entry: limit 0 != root limit 125
[  166.217196][ T8517] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.917: Corrupt directory, running e2fsck is recommended
[  166.384990][ T8519] loop2: detected capacity change from 0 to 1024
[  166.431803][ T8519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  166.442416][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  166.472127][ T8519] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.534455][   T33] audit: type=1800 audit(1755338200.204:37): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.922" name="file1" dev="loop2" ino=15 res=0 errno=0
[  166.550890][ T8519] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.922: lblock 0 mapped to illegal pblock 0 (length 1)
[  166.562894][   T33] audit: type=1804 audit(1755338200.234:38): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.922" name="/newroot/343/file1/file1" dev="loop2" ino=15 res=1 errno=0
[  166.575379][   T33] audit: type=1800 audit(1755338200.234:39): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.922" name="file1" dev="loop2" ino=15 res=0 errno=0
[  166.623520][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  166.693391][ T8531] loop0: detected capacity change from 0 to 4096
[  166.704983][ T8533] IPv6: addrconf: prefix option has invalid lifetime
[  166.726792][ T8534] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.770490][ T8531] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  166.790740][ T8531] Remounting filesystem read-only
[  166.814033][ T8538] binder: 8535:8538 ioctl c0046209 0 returned -22
[  166.829918][ T5853] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  167.000333][ T8546] loop1: detected capacity change from 0 to 1024
[  167.565509][ T8551] loop1: detected capacity change from 0 to 4096
[  167.569155][ T8551] ntfs3(loop1): ino=0, mi_enum_attr
[  167.758917][ T8556] loop0: detected capacity change from 0 to 40427
[  167.765830][ T8556] F2FS-fs (loop0): invalid crc value
[  167.821135][ T8556] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  167.827099][ T8556] F2FS-fs (loop0): Start checkpoint disabled!
[  167.828787][ T8551] ntfs3(loop1): ino=0, mi_enum_attr
[  167.831428][ T8551] ntfs3(loop1): Failed to load $MFT (-22).
[  167.836845][ T8556] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  167.854625][   T33] audit: type=1800 audit(1755338201.524:40): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.938" name="file1" dev="loop0" ino=10 res=0 errno=0
[  167.889417][   T28] kworker/u9:1: attempt to access beyond end of device
[  167.889417][   T28] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  167.901254][   T28] CPU: 0 UID: 0 PID: 28 Comm: kworker/u9:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  167.901278][   T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.901287][   T28] Workqueue: writeback wb_workfn (flush-7:0)
[  167.901320][   T28] Call Trace:
[  167.901327][   T28]  <TASK>
[  167.901334][   T28]  dump_stack_lvl+0x189/0x250
[  167.901358][   T28]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.901374][   T28]  ? __pfx_queue_work_on+0x10/0x10
[  167.901388][   T28]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  167.901407][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  167.901434][   T28]  f2fs_handle_critical_error+0x37c/0x540
[  167.901493][   T28]  f2fs_write_end_io+0x886/0xb60
[  167.901524][   T28]  __submit_merged_bio+0x27a/0x6a0
[  167.901550][   T28]  __submit_merged_write_cond+0x255/0x530
[  167.901573][   T28]  f2fs_write_data_pages+0x261d/0x3000
[  167.901624][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  167.901655][   T28]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  167.901702][   T28]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  167.901733][   T28]  ? trace_f2fs_writepages+0x7f/0x200
[  167.901751][   T28]  ? f2fs_write_node_pages+0x478/0x6e0
[  167.901785][   T28]  ? rcu_read_lock_sched_held+0x89/0x100
[  167.901801][   T28]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[  167.901817][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  167.901838][   T28]  do_writepages+0x32e/0x550
[  167.901865][   T28]  ? reacquire_held_locks+0x127/0x1d0
[  167.901880][   T28]  ? writeback_sb_inodes+0x384/0x1010
[  167.901906][   T28]  __writeback_single_inode+0x145/0xff0
[  167.901923][   T28]  ? do_raw_spin_unlock+0x4d/0x240
[  167.901944][   T28]  writeback_sb_inodes+0x6c7/0x1010
[  167.901960][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.902001][   T28]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  167.902054][   T28]  ? rcu_is_watching+0x15/0xb0
[  167.902079][   T28]  wb_writeback+0x43b/0xaf0
[  167.902105][   T28]  ? queue_io+0x3c1/0x590
[  167.902125][   T28]  ? __pfx_wb_writeback+0x10/0x10
[  167.902150][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  167.902172][   T28]  wb_workfn+0x409/0xef0
[  167.902199][   T28]  ? __pfx_wb_workfn+0x10/0x10
[  167.902219][   T28]  ? __lock_acquire+0xab9/0xd20
[  167.902248][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  167.902269][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  167.902283][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  167.902304][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  167.902319][   T28]  process_scheduled_works+0xae1/0x17b0
[  167.902361][   T28]  ? __pfx_process_scheduled_works+0x10/0x10
[  167.902391][   T28]  worker_thread+0x8a0/0xda0
[  167.902433][   T28]  kthread+0x711/0x8a0
[  167.902454][   T28]  ? __pfx_worker_thread+0x10/0x10
[  167.902495][   T28]  ? __pfx_kthread+0x10/0x10
[  167.902512][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  167.902528][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.902545][   T28]  ? __pfx_kthread+0x10/0x10
[  167.902563][   T28]  ret_from_fork+0x3fc/0x770
[  167.902582][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[  167.902602][   T28]  ? __switch_to_asm+0x39/0x70
[  167.902619][   T28]  ? __switch_to_asm+0x33/0x70
[  167.902634][   T28]  ? __pfx_kthread+0x10/0x10
[  167.902651][   T28]  ret_from_fork_asm+0x1a/0x30
[  167.902682][   T28]  </TASK>
[  167.902689][   T28] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  168.051564][   T28] CPU: 0 UID: 0 PID: 28 Comm: kworker/u9:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  168.051588][   T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.051598][   T28] Workqueue: writeback wb_workfn (flush-7:0)
[  168.051621][   T28] Call Trace:
[  168.051629][   T28]  <TASK>
[  168.051636][   T28]  dump_stack_lvl+0x189/0x250
[  168.051659][   T28]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.051675][   T28]  ? __pfx_queue_work_on+0x10/0x10
[  168.051690][   T28]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  168.051709][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  168.051736][   T28]  f2fs_handle_critical_error+0x37c/0x540
[  168.051763][   T28]  f2fs_write_end_io+0x886/0xb60
[  168.051793][   T28]  __submit_merged_bio+0x27a/0x6a0
[  168.051818][   T28]  __submit_merged_write_cond+0x255/0x530
[  168.051843][   T28]  f2fs_write_data_pages+0x261d/0x3000
[  168.051893][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  168.051925][   T28]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  168.051973][   T28]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  168.052003][   T28]  ? trace_f2fs_writepages+0x7f/0x200
[  168.052023][   T28]  ? f2fs_write_node_pages+0x478/0x6e0
[  168.052065][   T28]  ? rcu_read_lock_sched_held+0x89/0x100
[  168.052081][   T28]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[  168.052097][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  168.052119][   T28]  do_writepages+0x32e/0x550
[  168.052143][   T28]  ? reacquire_held_locks+0x127/0x1d0
[  168.052157][   T28]  ? writeback_sb_inodes+0x384/0x1010
[  168.052182][   T28]  __writeback_single_inode+0x145/0xff0
[  168.052200][   T28]  ? do_raw_spin_unlock+0x4d/0x240
[  168.052221][   T28]  writeback_sb_inodes+0x6c7/0x1010
[  168.052237][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.052277][   T28]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  168.052332][   T28]  ? rcu_is_watching+0x15/0xb0
[  168.052359][   T28]  wb_writeback+0x43b/0xaf0
[  168.052385][   T28]  ? queue_io+0x3c1/0x590
[  168.052408][   T28]  ? __pfx_wb_writeback+0x10/0x10
[  168.052434][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  168.052482][   T28]  wb_workfn+0x409/0xef0
[  168.052513][   T28]  ? __pfx_wb_workfn+0x10/0x10
[  168.052535][   T28]  ? __lock_acquire+0xab9/0xd20
[  168.052566][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  168.052587][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  168.052604][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  168.052616][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  168.052633][   T28]  process_scheduled_works+0xae1/0x17b0
[  168.052670][   T28]  ? __pfx_process_scheduled_works+0x10/0x10
[  168.052701][   T28]  worker_thread+0x8a0/0xda0
[  168.052741][   T28]  kthread+0x711/0x8a0
[  168.052760][   T28]  ? __pfx_worker_thread+0x10/0x10
[  168.052774][   T28]  ? __pfx_kthread+0x10/0x10
[  168.052793][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  168.052808][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.052823][   T28]  ? __pfx_kthread+0x10/0x10
[  168.052842][   T28]  ret_from_fork+0x3fc/0x770
[  168.052859][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[  168.052877][   T28]  ? __switch_to_asm+0x39/0x70
[  168.052892][   T28]  ? __switch_to_asm+0x33/0x70
[  168.052906][   T28]  ? __pfx_kthread+0x10/0x10
[  168.052922][   T28]  ret_from_fork_asm+0x1a/0x30
[  168.052954][   T28]  </TASK>
[  168.052960][   T28] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  168.182870][ T8556] VFS:Filesystem freeze failed
[  169.652773][ T8587] hfs: can't find a HFS filesystem on dev nullb0
[  169.745660][   T33] audit: type=1326 audit(1755338203.414:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.2.949" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22ba18ebe9 code=0x0
[  170.412260][ T8583] loop1: detected capacity change from 0 to 32768
[  170.729981][ T8583] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  171.097542][ T8583] XFS (loop1): Ending clean mount
[  171.110187][ T8583] XFS (loop1): Quotacheck needed: Please wait.
[  171.157575][ T8583] XFS (loop1): Quotacheck: Done.
[  171.234928][ T5846] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  171.587760][    T9] usb 1-1: new low-speed USB device number 23 using dummy_hcd
[  171.758511][    T9] usb 1-1: LPM exit latency is zeroed, disabling LPM.
[  171.761883][    T9] usb 1-1: config 0 has no interfaces?
[  171.766277][    T9] usb 1-1: string descriptor 0 read error: -22
[  171.768665][    T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=9a.90
[  171.771541][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.784838][    T9] usb 1-1: config 0 descriptor??
[  171.843686][ T8623] overlayfs: failed to verify upper (294/file0, ino=1552, err=-116)
[  171.864280][ T5849] Bluetooth: hci2: link tx timeout
[  171.866738][ T5849] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  171.867988][ T8623] overlayfs: failed to verify index dir 'upper' xattr
[  171.872237][ T5237] Bluetooth: hci2: link tx timeout
[  171.874245][ T5237] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  171.877597][ T5237] Bluetooth: hci2: link tx timeout
[  171.879871][ T5237] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  171.880780][ T8623] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  171.883717][ T5237] Bluetooth: hci2: link tx timeout
[  171.888830][ T5237] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  172.003842][    T9] usb 1-1: USB disconnect, device number 23
[  172.093745][ T8636] loop2: detected capacity change from 0 to 512
[  172.114538][ T8636] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.968: casefold flag without casefold feature
[  172.125701][ T8636] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.968: couldn't read orphan inode 15 (err -117)
[  172.143247][ T8636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.200253][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.362547][ T8642] loop2: detected capacity change from 0 to 32768
[  172.412552][ T8642] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  172.428851][ T8640] loop1: detected capacity change from 0 to 40427
[  172.429207][ T8642] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  172.432536][ T8640] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  172.437632][ T8640] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  172.442692][ T8640] F2FS-fs (loop1): invalid crc value
[  172.494498][ T5850] ocfs2: Unmounting device (7,2) on (node local)
[  172.563555][ T8640] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  172.572667][ T8640] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  172.574950][ T8640] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  172.953624][ T8654] loop2: detected capacity change from 0 to 32768
[  173.051977][ T8662] loop1: detected capacity change from 0 to 4096
[  173.053920][ T8654] JBD2: Ignoring recovery information on journal
[  173.096344][ T8664] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  173.104273][ T8654] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  173.144053][ T8662] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.'
[  173.154973][ T8662] Remounting filesystem read-only
[  173.158615][ T5850] ocfs2: Unmounting device (7,2) on (node local)
[  173.585396][ T5909] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  173.735261][ T5909] usb 3-1: Using ep0 maxpacket: 8
[  173.737023][ T8679] loop0: detected capacity change from 0 to 32768
[  173.739487][ T5909] usb 3-1: config 3 has an invalid interface number: 45 but max is 0
[  173.758496][ T5909] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  173.761878][ T5909] usb 3-1: config 3 has no interface number 0
[  173.764318][ T5909] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  173.785682][ T5909] usb 3-1: config 3 interface 45 has no altsetting 0
[  173.808268][ T5909] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  173.835978][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.839245][ T5909] usb 3-1: Product: syz
[  173.840911][ T5909] usb 3-1: Manufacturer: syz
[  173.842636][ T5909] usb 3-1: SerialNumber: syz
[  173.905406][ T5237] Bluetooth: hci2: command 0x0406 tx timeout
[  173.919839][ T8681] loop1: detected capacity change from 0 to 4096
[  173.948429][ T8683] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.002625][ T8685] loop0: detected capacity change from 0 to 512
[  174.008340][ T8685] EXT4-fs: Ignoring removed i_version option
[  174.022315][ T8685] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  174.044614][ T8685] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  174.066802][ T8685] EXT4-fs (loop0): 1 truncate cleaned up
[  174.073828][ T8685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.093505][ T5909] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  174.201148][ T5909] usb 3-1: USB disconnect, device number 21
[  174.271452][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  174.363782][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.480955][ T8701] loop1: detected capacity change from 0 to 256
[  174.527208][ T8701] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  174.669232][ T8711] loop0: detected capacity change from 0 to 16
[  174.680940][ T8711] erofs (device loop0): mounted with root inode @ nid 36.
[  175.130343][ T8714] loop2: detected capacity change from 0 to 32768
[  175.243763][ T8714] ERROR: (device loop2): duplicateIXtree: 
[  175.243763][ T8714] 
[  175.247947][ T8714] ERROR: (device loop2): remounting filesystem as read-only
[  175.279517][ T8714] ERROR: (device loop2): dtReadFirst: btstack overrun
[  175.279517][ T8714] 
[  175.282564][ T8714] ERROR: (device loop2): remounting filesystem as read-only
[  175.284848][ T8714] btstack dump:
[  175.287626][ T8714] bn = 0, index = 0
[  175.288955][ T8714] bn = 2d, index = 0
[  175.290371][ T8714] bn = 0, index = 0
[  175.291740][ T8714] bn = 2d, index = 0
[  175.293037][ T8714] bn = 0, index = 0
[  175.294578][ T8714] bn = 2d, index = 0
[  175.297495][ T8714] bn = 0, index = 0
[  175.298835][ T8714] bn = 0, index = 0
[  175.300220][ T8714] jfs_readdir: unexpected rc = -5 from dtReadNext
[  175.348276][ T8733] loop0: detected capacity change from 0 to 8
[  175.354255][ T8733] Major/Minor mismatch, trying to mount newer 5.0 filesystem
[  175.364367][ T8733] Please update your kernel
[  175.641604][ T8745] Bluetooth: MGMT ver 1.23
[  175.865215][ T5313] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  176.019771][ T5313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  176.023840][ T5313] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  176.031057][ T5313] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  176.032518][ T8758] loop1: detected capacity change from 0 to 4096
[  176.034612][ T5313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  176.042281][ T5313] usb 1-1: SerialNumber: syz
[  176.062177][ T5313] usb 1-1: bad CDC descriptors
[  176.064301][ T5313] usb-storage 1-1:1.0: USB Mass Storage device detected
[  176.073020][ T5313] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  176.083653][ T8758] ntfs3(loop1): Failed to load $MFT (-22).
[  176.246478][ T8764] fuse: Unknown parameter 'grou00000000000000000000'
[  176.283977][ T5313] usb 1-1: USB disconnect, device number 24
[  176.553691][ T8768] loop1: detected capacity change from 0 to 32768
[  176.566842][ T8768] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 1, max 64)
[  176.566842][ T8768] members_v2 (size 152):
[  176.566842][ T8768] Device:                        0
[  176.566842][ T8768]   Label:                       (none)
[  176.566842][ T8768]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  176.566842][ T8768]   Size:                        131072
[  176.566842][ T8768]   read errors:                 0
[  176.566842][ T8768]   write errors:                0
[  176.566842][ T8768]   checksum errors:             0
[  176.566842][ T8768]   seqread iops:                0
[  176.566842][ T8768]   seqwrite iops:               0
[  176.566842][ T8768]   randread iops:               0
[  176.566842][ T8768]   randwrite iops:              0
[  176.566842][ T8768]   Bucket size:                 131072
[  176.566842][ T8768]   First bucket:                0
[  176.566842][ T8768]   Buckets:                     1
[  176.566842][ T8768]   Last mount:                  1714681267
[  176.566842][ T8768]   Last superblock write:       42
[  176.566842][ T8768]   State:                       rw
[  176.566842][ T8768]   Data allowed:                journal,btree,user
[  176.566842][ T8768]   Has data:                    btree,user
[  176.566842][ T8768]   Btree allocated bitmap blocksize:256
[  176.566842][ T8768]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  176.566842][ T8768]   Durability:
[  176.567048][ T8768] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  176.769975][ T8770] loop1: detected capacity change from 0 to 512
[  176.794823][ T8770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.800572][ T8770] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.846297][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.039500][ T8782] loop1: detected capacity change from 0 to 764
[  177.112714][ T8785] Symlink component flag not implemented
[  177.116693][ T8785] Symlink component flag not implemented
[  177.119343][ T8785] Symlink component flag not implemented (128)
[  177.123454][ T8785] Symlink component flag not implemented (122)
[  178.441705][ T8795] loop0: detected capacity change from 0 to 32768
[  178.501913][ T8795] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  178.525368][ T8795] XFS (loop0): Ending clean mount
[  178.561976][ T5853] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  179.413371][ T8817] loop1: detected capacity change from 0 to 512
[  179.419409][ T8817] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  179.452112][ T8817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.456274][ T8817] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  179.504652][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.722984][ T8831] loop0: detected capacity change from 0 to 2048
[  179.744869][ T8831] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.882252][ T8837] loop0: detected capacity change from 0 to 2048
[  179.931630][ T7275] Dev loop0: RDB in block 1 has bad checksum
[  179.938557][ T8837] Dev loop0: RDB in block 1 has bad checksum
[  180.084977][ T8851] loop0: detected capacity change from 0 to 736
[  180.148708][ T8851] rock: directory entry would overflow storage
[  180.151302][ T8851] rock: sig=0x3b10, size=4, remaining=3
[  180.371588][ T8867] loop0: detected capacity change from 0 to 128
[  180.394435][ T8867] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  180.395609][ T5909] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  180.400991][ T8867] ext4 filesystem being mounted at /360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  180.458883][ T5853] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.557573][ T5909] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  180.561249][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.571693][ T5909] usb 2-1: config 0 descriptor??
[  180.579711][ T5909] cp210x 2-1:0.0: cp210x converter detected
[  180.636455][ T8874] loop0: detected capacity change from 0 to 256
[  180.792391][ T5909] usb 2-1: cp210x converter now attached to ttyUSB0
[  180.995338][ T5909] usb 2-1: USB disconnect, device number 22
[  181.002361][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  181.006761][ T5909] cp210x 2-1:0.0: device disconnected
[  181.085328][    T9] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  181.248741][    T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  181.252386][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.258394][    T9] usb 1-1: config 0 descriptor??
[  181.268038][    T9] cp210x 1-1:0.0: cp210x converter detected
[  181.643201][ T8883] input: syz0 as /devices/virtual/input/input12
[  181.714568][    T9] usb 1-1: cp210x converter now attached to ttyUSB0
[  181.878881][ T5313] usb 1-1: USB disconnect, device number 25
[  181.893731][ T5313] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  181.904270][ T5313] cp210x 1-1:0.0: device disconnected
[  182.844913][ T8888] loop0: detected capacity change from 0 to 512
[  183.017722][ T8888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.022929][ T8888] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.436572][ T8899] loop1: detected capacity change from 0 to 4096
[  183.437155][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.468090][ T8899] ntfs3(loop1): ino=1a, mi_enum_attr
[  183.470369][ T8899] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  183.529988][ T8899] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  183.838885][ T5851] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  183.986609][ T5851] usb 1-1: Using ep0 maxpacket: 32
[  184.018753][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.022839][ T5851] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  184.026864][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.037539][ T5851] usb 1-1: config 0 descriptor??
[  184.452051][ T5851] magicmouse 0003:05AC:0265.000B: item fetching failed at offset 2/5
[  184.457478][ T5851] magicmouse 0003:05AC:0265.000B: magicmouse hid parse failed
[  184.460518][ T5851] magicmouse 0003:05AC:0265.000B: probe with driver magicmouse failed with error -22
[  184.646254][ T5313] usb 1-1: USB disconnect, device number 26
[  184.875442][ T5851] usb 2-1: new low-speed USB device number 23 using dummy_hcd
[  185.029478][ T5851] usb 2-1: config 0 has an invalid interface number: 153 but max is 0
[  185.032319][ T5851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.035754][ T5851] usb 2-1: config 0 has no interface number 0
[  185.037914][ T5851] usb 2-1: config 0 interface 153 has no altsetting 0
[  185.043508][ T5851] usb 2-1: string descriptor 0 read error: -22
[  185.046235][ T5851] usb 2-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83
[  185.049933][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.056078][ T5851] usb 2-1: config 0 descriptor??
[  185.061846][ T5851] uvcvideo 2-1:0.153: probe with driver uvcvideo failed with error -22
[  185.207630][ T8920] input: syz0 as /devices/virtual/input/input13
[  185.273100][ T5851] usb 2-1: USB disconnect, device number 23
[  186.398642][ T5851] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  186.555149][ T5851] usb 1-1: Using ep0 maxpacket: 8
[  186.560910][ T5851] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  186.563835][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.567008][ T5851] usb 1-1: Product: syz
[  186.568319][ T5851] usb 1-1: Manufacturer: syz
[  186.569883][ T5851] usb 1-1: SerialNumber: syz
[  186.575165][ T5851] usb 1-1: config 0 descriptor??
[  186.785410][ T5851] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  187.545141][    T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  187.728083][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  187.732748][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64
[  187.737535][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  187.745460][    T9] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1
[  187.749051][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.751914][    T9] usb 2-1: Product: syz
[  187.753280][    T9] usb 2-1: Manufacturer: syz
[  187.754993][    T9] usb 2-1: SerialNumber: syz
[  187.760644][    T9] usb 2-1: config 0 descriptor??
[  187.764332][ T8955] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  187.771835][    T9] option 2-1:0.0: GSM modem (1-port) converter detected
[  187.973314][ T5313] usb 2-1: USB disconnect, device number 24
[  187.981824][ T5313] option 2-1:0.0: device disconnected
[  188.203700][ T5851] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  188.209675][ T5851] usb 1-1: USB disconnect, device number 27
[  188.600942][ T8960] loop1: detected capacity change from 0 to 512
[  188.606117][ T8960] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  188.610750][ T8960] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  188.613871][ T8960] System zones: 1-12
[  188.620520][ T8960] EXT4-fs (loop1): orphan cleanup on readonly fs
[  188.623932][ T8960] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1103: invalid indirect mapped block 12 (level 1)
[  188.632421][ T8960] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1103: invalid indirect mapped block 2 (level 2)
[  188.642707][ T8960] EXT4-fs (loop1): 1 truncate cleaned up
[  188.645826][ T8960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  188.664172][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  188.863049][ T8973] loop0: detected capacity change from 0 to 4096
[  189.187257][ T8982] loop0: detected capacity change from 0 to 32768
[  189.192275][ T8982] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1112 (8982)
[  189.198611][ T8982] BTRFS info (device loop0 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  189.202288][ T8982] BTRFS info (device loop0 state S): using crc32c (crc32c-lib) checksum algorithm
[  189.204958][ T8982] BTRFS info (device loop0 state S): using free-space-tree
[  189.221430][ T8987] loop1: detected capacity change from 0 to 16
[  189.232247][ T8987] erofs (device loop1): mounted with root inode @ nid 36.
[  189.290800][  T190] BTRFS warning (device loop0 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  189.306213][  T190] BTRFS warning (device loop0 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  189.323606][ T3069] BTRFS warning (device loop0 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x31515604 level 0, ignored
[  189.343938][ T8982] BTRFS error (device loop0 state S): dev extent physical offset 6881280 devid 2 has no corresponding chunk
[  189.349389][ T8982] BTRFS error (device loop0 state S): failed to find devid 2
[  189.351933][ T8982] BTRFS error (device loop0 state S): failed to verify dev extents against chunks: -117
[  189.371357][ T8982] BTRFS error (device loop0 state S): open_ctree failed: -117
[  189.690335][ T9020] loop0: detected capacity change from 0 to 512
[  189.714245][ T9020] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1123: casefold flag without casefold feature
[  189.730416][ T9020] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1123: couldn't read orphan inode 15 (err -117)
[  189.747346][ T9020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.866524][ T9019] loop1: detected capacity change from 0 to 40427
[  189.871050][ T9019] F2FS-fs (loop1): invalid crc value
[  189.913512][ T9019] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  189.917831][ T9019] F2FS-fs (loop1): Start checkpoint disabled!
[  189.921212][ T9019] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  189.955343][ T3069] kworker/u10:4: attempt to access beyond end of device
[  189.955343][ T3069] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  189.960180][ T3069] CPU: 1 UID: 0 PID: 3069 Comm: kworker/u10:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  189.960209][ T3069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.960215][ T3069] Workqueue: writeback wb_workfn (flush-7:1)
[  189.960231][ T3069] Call Trace:
[  189.960235][ T3069]  <TASK>
[  189.960240][ T3069]  dump_stack_lvl+0x189/0x250
[  189.960254][ T3069]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.960263][ T3069]  ? __pfx_queue_work_on+0x10/0x10
[  189.960272][ T3069]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  189.960282][ T3069]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.960298][ T3069]  f2fs_handle_critical_error+0x37c/0x540
[  189.960313][ T3069]  f2fs_write_end_io+0x886/0xb60
[  189.960330][ T3069]  __submit_merged_bio+0x27a/0x6a0
[  189.960344][ T3069]  __submit_merged_write_cond+0x255/0x530
[  189.960358][ T3069]  f2fs_write_data_pages+0x261d/0x3000
[  189.960386][ T3069]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  189.960405][ T3069]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  189.960431][ T3069]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  189.960442][ T3069]  ? look_up_lock_class+0x74/0x170
[  189.960458][ T3069]  ? trace_f2fs_writepages+0x7f/0x200
[  189.960469][ T3069]  ? f2fs_write_node_pages+0x478/0x6e0
[  189.960482][ T3069]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  189.960499][ T3069]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  189.960511][ T3069]  do_writepages+0x32e/0x550
[  189.960524][ T3069]  ? reacquire_held_locks+0x127/0x1d0
[  189.960532][ T3069]  ? writeback_sb_inodes+0x384/0x1010
[  189.960547][ T3069]  __writeback_single_inode+0x145/0xff0
[  189.960556][ T3069]  ? do_raw_spin_unlock+0x4d/0x240
[  189.960568][ T3069]  writeback_sb_inodes+0x6c7/0x1010
[  189.960597][ T3069]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  189.960629][ T3069]  ? rcu_is_watching+0x15/0xb0
[  189.960644][ T3069]  wb_writeback+0x43b/0xaf0
[  189.960658][ T3069]  ? queue_io+0x3c1/0x590
[  189.960669][ T3069]  ? __pfx_wb_writeback+0x10/0x10
[  189.960683][ T3069]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.960695][ T3069]  wb_workfn+0x409/0xef0
[  189.960711][ T3069]  ? __pfx_wb_workfn+0x10/0x10
[  189.960723][ T3069]  ? __lock_acquire+0xab9/0xd20
[  189.960739][ T3069]  ? process_scheduled_works+0x9ef/0x17b0
[  189.960750][ T3069]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.960758][ T3069]  ? process_scheduled_works+0x9ef/0x17b0
[  189.960766][ T3069]  ? process_scheduled_works+0x9ef/0x17b0
[  189.960774][ T3069]  process_scheduled_works+0xae1/0x17b0
[  189.960797][ T3069]  ? __pfx_process_scheduled_works+0x10/0x10
[  189.960815][ T3069]  worker_thread+0x8a0/0xda0
[  189.960824][ T3069]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.960839][ T3069]  ? __kthread_parkme+0x7b/0x200
[  189.960854][ T3069]  kthread+0x711/0x8a0
[  189.960865][ T3069]  ? __pfx_worker_thread+0x10/0x10
[  189.960873][ T3069]  ? __pfx_kthread+0x10/0x10
[  189.960883][ T3069]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.960892][ T3069]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.960900][ T3069]  ? __pfx_kthread+0x10/0x10
[  189.960910][ T3069]  ret_from_fork+0x3fc/0x770
[  189.960921][ T3069]  ? __pfx_ret_from_fork+0x10/0x10
[  189.960932][ T3069]  ? __switch_to_asm+0x39/0x70
[  189.960941][ T3069]  ? __switch_to_asm+0x33/0x70
[  189.960949][ T3069]  ? __pfx_kthread+0x10/0x10
[  189.960959][ T3069]  ret_from_fork_asm+0x1a/0x30
[  189.960978][ T3069]  </TASK>
[  189.964497][ T3069] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  190.453353][ T9028] loop1: detected capacity change from 0 to 8
[  190.467115][ T9028] SQUASHFS error: xz decompression failed, data probably corrupt
[  190.470059][ T9028] SQUASHFS error: Failed to read block 0x108: -5
[  190.472555][ T9028] SQUASHFS error: Unable to read metadata cache entry [106]
[  190.475802][ T9028] SQUASHFS error: Unable to read inode 0x11f
[  190.649789][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.797651][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  190.804804][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  190.809245][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  190.819286][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  190.824861][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  190.865520][ T5851] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  191.019249][ T9036] chnl_net:caif_netlink_parms(): no params data found
[  191.032410][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  191.043985][ T5851] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  191.048422][ T5851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.051750][ T5851] usb 2-1: config 0 has no interface number 0
[  191.061892][ T5851] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  191.064689][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.077721][ T5851] usb 2-1: Product: syz
[  191.079081][ T5851] usb 2-1: Manufacturer: syz
[  191.080602][ T5851] usb 2-1: SerialNumber: syz
[  191.085824][ T5851] usb 2-1: config 0 descriptor??
[  191.093975][ T5851] ims_pcu 2-1:0.41: Missing CDC union descriptor
[  191.099416][ T5851] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22
[  191.125990][ T9041] loop0: detected capacity change from 0 to 40427
[  191.131310][ T9041] F2FS-fs: heap/no_heap options were deprecated
[  191.144629][ T9041] F2FS-fs (loop0): build fault injection rate: 19
[  191.154427][ T9041] F2FS-fs (loop0): build fault injection type: 0x7
[  191.157312][ T9036] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.157449][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.157557][ T9036] bridge_slave_0: entered allmulticast mode
[  191.166800][ T9041] F2FS-fs (loop0): invalid crc value
[  191.169091][ T9036] bridge_slave_0: entered promiscuous mode
[  191.172442][ T9041] F2FS-fs (loop0): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4429/0x6ff0
[  191.176256][ T9036] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.176341][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.176425][ T9036] bridge_slave_1: entered allmulticast mode
[  191.179463][ T9041] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-12)
[  191.182979][ T9036] bridge_slave_1: entered promiscuous mode
[  191.212098][ T9036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.217422][ T9036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.250131][ T9036] team0: Port device team_slave_0 added
[  191.254022][ T9036] team0: Port device team_slave_1 added
[  191.283737][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.286420][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.291461][   T51] usb 2-1: USB disconnect, device number 25
[  191.298706][ T9036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.309770][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.313282][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.323764][ T9036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.357851][ T9036] hsr_slave_0: entered promiscuous mode
[  191.361435][ T9036] hsr_slave_1: entered promiscuous mode
[  191.364638][ T9036] debugfs: 'hsr0' already exists in 'hsr'
[  191.373793][ T9036] Cannot create hsr debugfs directory
[  191.503863][ T9036] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  191.510780][ T9036] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  191.516092][ T9036] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  191.521381][ T9036] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  191.544133][ T9036] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.546520][ T9036] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.548846][ T9036] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.551051][ T9036] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.591595][ T9036] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.603836][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.608244][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.621651][ T9036] 8021q: adding VLAN 0 to HW filter on device team0
[  191.631526][  T729] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.633842][  T729] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.640684][  T729] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.643014][  T729] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.773971][ T9036] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.803727][ T9036] veth0_vlan: entered promiscuous mode
[  191.810456][ T9036] veth1_vlan: entered promiscuous mode
[  191.843568][ T9036] veth0_macvtap: entered promiscuous mode
[  191.852627][ T9036] veth1_macvtap: entered promiscuous mode
[  191.866272][ T9036] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.873823][ T9036] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.951706][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.959498][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.972649][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.979752][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.983035][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.991734][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.327165][ T3069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.347347][ T3069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.521043][ T9074] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1135'.
[  192.524502][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1135'.
[  192.530918][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'.
[  192.580963][ T9076] loop3: detected capacity change from 0 to 8
[  192.584435][ T9076] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  192.616145][ T9076] cramfs: bad data blocksize 4159700568
[  192.618880][ T9076] cramfs: bad data blocksize 4159700568
[  192.665579][ T5908] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  192.836233][ T5908] usb 1-1: config 0 interface 0 has no altsetting 0
[  192.839090][ T5908] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  192.843226][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.868533][ T5237] Bluetooth: hci3: command tx timeout
[  192.874463][ T5908] usb 1-1: config 0 descriptor??
[  192.939001][ T9086] veth3: entered allmulticast mode
[  192.971879][ T9088] loop3: detected capacity change from 0 to 512
[  192.987346][ T9088] EXT4-fs: Ignoring removed bh option
[  192.996318][ T9088] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  193.049115][ T9088] EXT4-fs (loop3): 1 truncate cleaned up
[  193.054565][ T9088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.152448][ T9036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.471304][ T9099] loop3: detected capacity change from 0 to 32768
[  193.503659][ T5908] video4linux radio48: keene_cmd_set failed (-71)
[  193.523157][ T5908] radio-keene 1-1:0.0: V4L2 device registered as radio48
[  193.528638][ T5908] usb 1-1: USB disconnect, device number 28
[  193.826444][ T9109] loop3: detected capacity change from 0 to 512
[  193.862996][ T9109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.869690][ T9109] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.903864][ T9036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.072875][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.075764][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.222560][ T9126] sp0: Synchronizing with TNC
[  194.287824][ T9129] loop1: detected capacity change from 0 to 16
[  194.294793][ T9129] erofs (device loop1): mounted with root inode @ nid 36.
[  194.785487][ T5895] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  194.925240][   T51] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  194.941792][ T5895] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  194.955236][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.955378][ T5237] Bluetooth: hci3: command tx timeout
[  194.958653][ T5895] usb 1-1: Product: syz
[  194.962496][ T5895] usb 1-1: Manufacturer: syz
[  194.964462][ T5895] usb 1-1: SerialNumber: syz
[  194.975619][ T5895] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  195.030415][ T5313] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  195.075434][   T51] usb 2-1: Using ep0 maxpacket: 8
[  195.079842][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.083318][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.088768][   T51] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  195.093199][   T51] usb 2-1: New USB device found, idVendor=045e, idProduct=008e, bcdDevice= 0.00
[  195.097336][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.111062][   T51] usb 2-1: config 0 descriptor??
[  195.293531][ T9141] loop3: detected capacity change from 0 to 32768
[  195.344395][ T9141] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  195.389706][ T9141] XFS (loop3): Starting recovery (logdev: internal)
[  195.412337][ T9141] XFS (loop3): Ending recovery (logdev: internal)
[  195.450673][   T10] usb 1-1: USB disconnect, device number 29
[  195.469780][ T9036] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  195.551445][   T51] hid-generic 0003:045E:008E.000C: unbalanced collection at end of report description
[  195.558207][   T51] hid-generic 0003:045E:008E.000C: probe with driver hid-generic failed with error -22
[  195.733803][ T9153] loop3: detected capacity change from 0 to 512
[  195.747293][ T5851] usb 2-1: USB disconnect, device number 26
[  195.751218][ T9153] EXT4-fs: Ignoring removed i_version option
[  195.793740][ T9153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.841848][ T9036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.930631][ T9159] netlink: 'syz.3.1169': attribute type 10 has an invalid length.
[  195.933830][ T9159] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1169'.
[  196.067678][ T5313] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  196.070489][ T5313] ath9k_htc: Failed to initialize the device
[  196.077423][   T10] usb 1-1: ath9k_htc: USB layer deinitialized
[  196.207155][ T9169] syz.0.1174 (9169): drop_caches: 0
[  196.602725][    T9] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  196.757320][    T9] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  196.760585][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.764601][    T9] usb 2-1: config 0 has no interface number 0
[  196.768218][    T9] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  196.772539][    T9] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  196.777465][    T9] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  196.782525][    T9] usb 2-1: config 0 interface 52 has no altsetting 0
[  196.787015][    T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  196.791155][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[  196.794031][    T9] usb 2-1: SerialNumber: syz
[  196.799410][    T9] usb 2-1: config 0 descriptor??
[  196.945803][ T5313] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  196.956867][   T51] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  197.010720][    T9] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  197.016206][    T9] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5
[  197.025781][ T5237] Bluetooth: hci3: command tx timeout
[  197.101438][ T5313] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  197.110958][   T51] usb 4-1: not running at top speed; connect to a high speed hub
[  197.114132][ T5313] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  197.119046][ T5313] usb 1-1: Product: syz
[  197.120808][ T5313] usb 1-1: SerialNumber: syz
[  197.122886][   T51] usb 4-1: config 95 has an invalid interface number: 1 but max is 0
[  197.127739][   T51] usb 4-1: config 95 has no interface number 0
[  197.131454][ T5313] usb 1-1: config 0 descriptor??
[  197.133712][   T51] usb 4-1: config 95 interface 1 has no altsetting 0
[  197.142822][   T51] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f
[  197.146872][   T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.149972][   T51] usb 4-1: Product: syz
[  197.151775][   T51] usb 4-1: Manufacturer: syz
[  197.153716][   T51] usb 4-1: SerialNumber: syz
[  197.219884][   T10] usb 2-1: USB disconnect, device number 27
[  197.351676][ T5313] hso 1-1:0.0: Failed to find BULK IN ep
[  197.415868][   T51] usb 4-1: USB disconnect, device number 2
[  197.466380][ T7275] udevd[7275]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  197.553268][   T10] usb 1-1: USB disconnect, device number 30
[  198.043162][ T9205] loop3: detected capacity change from 0 to 1024
[  198.055365][ T9205] hfsplus: invalid btree flag
[  198.057565][ T9205] hfsplus: failed to load catalog file
[  198.131337][ T9207] capability: warning: `syz.3.1192' uses deprecated v2 capabilities in a way that may be insecure
[  198.226034][ T9211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  198.322157][ T9217] loop0: detected capacity change from 0 to 512
[  198.333999][ T9217] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  198.344789][ T9217] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  198.351597][ T9217] System zones: 1-12
[  198.353076][ T9217] EXT4-fs (loop0): orphan cleanup on readonly fs
[  198.356543][ T9201] loop1: detected capacity change from 0 to 40427
[  198.362066][ T9217] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1197: invalid indirect mapped block 12 (level 1)
[  198.369853][ T9217] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1197: invalid indirect mapped block 2 (level 2)
[  198.377529][ T9201] F2FS-fs (loop1): invalid crc value
[  198.379773][ T9217] EXT4-fs (loop0): 1 truncate cleaned up
[  198.382393][ T9217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  198.436302][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  198.441389][ T9201] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  198.452157][ T9201] F2FS-fs (loop1): Start checkpoint disabled!
[  198.463369][ T9201] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  198.498984][ T3539] kworker/u10:5: attempt to access beyond end of device
[  198.498984][ T3539] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  198.504059][ T3539] CPU: 1 UID: 0 PID: 3539 Comm: kworker/u10:5 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  198.504075][ T3539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  198.504082][ T3539] Workqueue: writeback wb_workfn (flush-7:1)
[  198.504100][ T3539] Call Trace:
[  198.504104][ T3539]  <TASK>
[  198.504109][ T3539]  dump_stack_lvl+0x189/0x250
[  198.504125][ T3539]  ? __pfx_dump_stack_lvl+0x10/0x10
[  198.504134][ T3539]  ? __pfx_queue_work_on+0x10/0x10
[  198.504143][ T3539]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  198.504155][ T3539]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  198.504171][ T3539]  f2fs_handle_critical_error+0x37c/0x540
[  198.504193][ T3539]  f2fs_write_end_io+0x886/0xb60
[  198.504211][ T3539]  __submit_merged_bio+0x27a/0x6a0
[  198.504226][ T3539]  __submit_merged_write_cond+0x255/0x530
[  198.504240][ T3539]  f2fs_write_data_pages+0x261d/0x3000
[  198.504269][ T3539]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  198.504287][ T3539]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  198.504314][ T3539]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  198.504326][ T3539]  ? look_up_lock_class+0x74/0x170
[  198.504343][ T3539]  ? trace_f2fs_writepages+0x7f/0x200
[  198.504354][ T3539]  ? f2fs_write_node_pages+0x478/0x6e0
[  198.504366][ T3539]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  198.504385][ T3539]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  198.504396][ T3539]  do_writepages+0x32e/0x550
[  198.504411][ T3539]  ? reacquire_held_locks+0x127/0x1d0
[  198.504419][ T3539]  ? writeback_sb_inodes+0x384/0x1010
[  198.504462][ T3539]  __writeback_single_inode+0x145/0xff0
[  198.504474][ T3539]  ? do_raw_spin_unlock+0x4d/0x240
[  198.504486][ T3539]  writeback_sb_inodes+0x6c7/0x1010
[  198.504510][ T3539]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  198.504542][ T3539]  ? rcu_is_watching+0x15/0xb0
[  198.504557][ T3539]  wb_writeback+0x43b/0xaf0
[  198.504572][ T3539]  ? queue_io+0x3c1/0x590
[  198.504583][ T3539]  ? __pfx_wb_writeback+0x10/0x10
[  198.504597][ T3539]  ? _raw_spin_unlock_irq+0x23/0x50
[  198.504610][ T3539]  wb_workfn+0x409/0xef0
[  198.504626][ T3539]  ? __pfx_wb_workfn+0x10/0x10
[  198.504637][ T3539]  ? __lock_acquire+0xab9/0xd20
[  198.504654][ T3539]  ? process_scheduled_works+0x9ef/0x17b0
[  198.504666][ T3539]  ? _raw_spin_unlock_irq+0x23/0x50
[  198.504675][ T3539]  ? process_scheduled_works+0x9ef/0x17b0
[  198.504682][ T3539]  ? process_scheduled_works+0x9ef/0x17b0
[  198.504690][ T3539]  process_scheduled_works+0xae1/0x17b0
[  198.504714][ T3539]  ? __pfx_process_scheduled_works+0x10/0x10
[  198.504731][ T3539]  worker_thread+0x8a0/0xda0
[  198.504742][ T3539]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  198.504756][ T3539]  ? __kthread_parkme+0x7b/0x200
[  198.504770][ T3539]  kthread+0x711/0x8a0
[  198.504781][ T3539]  ? __pfx_worker_thread+0x10/0x10
[  198.504789][ T3539]  ? __pfx_kthread+0x10/0x10
[  198.504799][ T3539]  ? _raw_spin_unlock_irq+0x23/0x50
[  198.504808][ T3539]  ? lockdep_hardirqs_on+0x9c/0x150
[  198.504817][ T3539]  ? __pfx_kthread+0x10/0x10
[  198.504827][ T3539]  ret_from_fork+0x3fc/0x770
[  198.504838][ T3539]  ? __pfx_ret_from_fork+0x10/0x10
[  198.504849][ T3539]  ? __switch_to_asm+0x39/0x70
[  198.504859][ T3539]  ? __switch_to_asm+0x33/0x70
[  198.504867][ T3539]  ? __pfx_kthread+0x10/0x10
[  198.504877][ T3539]  ret_from_fork_asm+0x1a/0x30
[  198.504895][ T3539]  </TASK>
[  198.504902][ T3539] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  198.775219][   T51] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  198.888180][ T9226] loop1: detected capacity change from 0 to 8192
[  198.935340][   T51] usb 1-1: Using ep0 maxpacket: 32
[  198.951257][   T51] usb 1-1: config 1 has an invalid interface number: 233 but max is 0
[  198.953908][   T51] usb 1-1: config 1 has no interface number 0
[  198.963554][   T51] usb 1-1: config 1 interface 233 altsetting 250 bulk endpoint 0x9 has invalid maxpacket 8
[  198.971342][   T51] usb 1-1: config 1 interface 233 has no altsetting 0
[  198.979990][   T51] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac
[  198.982980][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.995185][   T51] usb 1-1: Product: syz
[  198.996607][   T51] usb 1-1: Manufacturer: syz
[  198.998121][   T51] usb 1-1: SerialNumber: syz
[  199.013162][ T9222] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  199.127193][ T5237] Bluetooth: hci3: command tx timeout
[  199.227597][ T9238] loop3: detected capacity change from 0 to 4096
[  199.239312][   T51] imon_raw 1-1:1.233: IR endpoint missing
[  199.263078][   T51] usb 1-1: USB disconnect, device number 31
[  199.325856][ T9238] ntfs3(loop3): failed to convert name for inode 1e.
[  199.331327][ T9238] ntfs3(loop3): ino=1f, mi_enum_attr
[  199.333009][ T9238] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  199.512492][ T9244] loop1: detected capacity change from 0 to 32768
[  199.595232][ T9244] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  199.595251][ T9244]   allowing incompatible features above 0.0: (unknown version)
[  199.595257][ T9244]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  199.607773][ T9244] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  199.610822][ T9244] bcachefs (loop1): initializing new filesystem
[  199.622250][ T9244] bcachefs (loop1): going read-write
[  199.631212][ T9244] bcachefs (loop1): marking superblocks
[  199.640993][ T9244] bcachefs (loop1): initializing freespace
[  199.646312][ T9244] bcachefs (loop1): done initializing freespace
[  199.651069][ T9244] bcachefs (loop1): reading snapshots table
[  199.653267][ T9244] bcachefs (loop1): reading snapshots done
[  199.683968][ T9244] bcachefs (loop1):  loop1: Superblock write was silently dropped! (seq 0 expected 42)
[  199.688504][ T9244] bcachefs (loop1): done starting filesystem
[  199.822950][ T9248] loop3: detected capacity change from 0 to 32768
[  199.853663][ T9248] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  199.877189][ T9244] syz.1.1209 (9244) used greatest stack depth: 15736 bytes left
[  199.897261][ T5846] bcachefs (loop1): shutting down
[  199.899140][ T5846] bcachefs (loop1): going read-only
[  199.900932][ T5846] bcachefs (loop1): finished waiting for writes to stop
[  199.921318][ T5846] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4
[  199.970633][ T5846] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 5
[  199.973842][ T9036] ocfs2: Unmounting device (7,3) on (node local)
[  199.974085][ T5846] bcachefs (loop1): clean shutdown complete, journal seq 6
[  199.989845][ T5846] bcachefs (loop1): marking filesystem clean
[  200.017036][ T5846] bcachefs (loop1): shutdown complete
[  200.146841][ T9267] loop3: detected capacity change from 0 to 8192
[  200.162346][ T9267] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  200.243508][ T9269] loop3: detected capacity change from 0 to 128
[  200.268352][ T9269] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  200.282420][ T9269] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  200.318668][ T9036] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  201.380087][ T9319] loop0: detected capacity change from 0 to 512
[  201.384625][ T9319] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  201.420657][ T9319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  201.426803][ T9319] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.436964][ T9319] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  201.441280][ T9319] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  201.445762][ T9319] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1236: Failed to acquire dquot type 0
[  201.474640][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  201.491007][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  201.655253][    T9] usb 4-1: Using ep0 maxpacket: 16
[  201.659104][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  201.662889][    T9] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  201.668795][    T9] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  201.672552][    T9] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  201.676990][    T9] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  201.680988][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[  201.683674][    T9] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  201.689974][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.708075][    T9] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  201.712641][ T9325] loop0: detected capacity change from 0 to 32768
[  201.718790][ T9325] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1238 (9325)
[  201.730527][ T9325] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  201.741411][ T9325] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  201.744927][ T9325] BTRFS info (device loop0): disk space caching is enabled
[  201.748201][ T9325] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  201.823165][ T9325] BTRFS info (device loop0): rebuilding free space tree
[  201.834357][ T9325] BTRFS info (device loop0): disabling free space tree
[  201.842436][ T9325] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  201.848394][ T9325] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  201.893658][ T5853] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  201.942925][    T9] scsi host6: usb-storage 4-1:1.0
[  202.030697][ T9346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1239'.
[  202.133580][ T5909] usb 4-1: USB disconnect, device number 3
[  202.261535][ T9352] loop0: detected capacity change from 0 to 2048
[  202.282956][ T9352] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.799440][ T9374] loop3: detected capacity change from 0 to 512
[  202.827745][ T9374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.835951][ T9374] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.978912][ T9036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.031644][   T33] audit: type=1804 audit(1755338236.694:42): pid=9382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1255" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=16362 res=1 errno=0
[  203.054489][   T33] audit: type=1804 audit(1755338236.704:43): pid=9382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1255" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=16362 res=1 errno=0
[  203.135345][   T51] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  203.308069][   T51] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10
[  203.312516][   T51] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024
[  203.318306][   T51] usb 1-1: config 0 interface 0 has no altsetting 0
[  203.329954][   T51] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  203.333468][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.336928][   T51] usb 1-1: Product: syz
[  203.338648][   T51] usb 1-1: Manufacturer: syz
[  203.340512][   T51] usb 1-1: SerialNumber: syz
[  203.353381][   T51] usb 1-1: config 0 descriptor??
[  203.361503][   T51] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected
[  203.364835][   T51] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7
[  203.375751][   T51] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81
[  203.379005][   T51] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[  203.382093][   T51] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[  203.390835][ T9387] loop3: detected capacity change from 0 to 512
[  203.395307][   T51] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85
[  203.398474][   T51] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5
[  203.407096][   T51] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  203.417818][   T51] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83
[  203.420972][   T51] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3
[  203.424087][   T51] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4
[  203.431966][   T51] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86
[  203.435277][   T51] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6
[  203.448691][   T51] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  203.449641][ T9387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.468433][ T9387] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.502191][ T9036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.562728][    T9] usb 1-1: USB disconnect, device number 32
[  203.581738][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  203.599278][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  203.611491][    T9] keyspan 1-1:0.0: device disconnected
[  203.766786][ T9391] loop3: detected capacity change from 0 to 32768
[  203.779355][ T9391] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  203.802450][ T9391] (syz.3.1258,9391,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  203.809715][ T9391] (syz.3.1258,9391,1):__ocfs2_delete_entry:1170 ERROR: status = -5
[  203.812367][ T9391] (syz.3.1258,9391,1):ocfs2_unlink:993 ERROR: status = -5
[  203.814949][ T9391] (syz.3.1258,9391,1):ocfs2_unlink:1046 ERROR: status = -5
[  203.837375][ T9036] ocfs2: Unmounting device (7,3) on (node local)
[  203.956565][ T9397] netlink: 'syz.3.1260': attribute type 1 has an invalid length.
[  203.978022][ T9397] 8021q: adding VLAN 0 to HW filter on device bond1
[  203.998787][ T9397] bond1: (slave ip6erspan0): making interface the new active one
[  204.003502][ T9397] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  204.506833][ T9424] loop1: detected capacity change from 0 to 2048
[  204.512769][ T9424] udf: Unknown parameter ''
[  204.807133][   T51] IPVS: starting estimator thread 0...
[  204.915532][ T9433] IPVS: using max 64 ests per chain, 153600 per kthread
[  205.096083][ T9426] loop3: detected capacity change from 0 to 32768
[  205.110619][ T9426] 
[  205.110619][ T9426]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  205.110619][ T9426] 
[  205.159674][ T9036] 
[  205.159674][ T9036]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  205.159674][ T9036] 
[  205.168169][ T9036] 
[  205.168169][ T9036]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  205.168169][ T9036] 
[  205.756419][ T9445] loop1: detected capacity change from 0 to 40427
[  205.763475][ T9445] F2FS-fs (loop1): invalid crc value
[  205.837323][ T9445] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  205.846316][ T9445] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  205.896245][ T5846] syz-executor: attempt to access beyond end of device
[  205.896245][ T5846] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  205.910053][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  205.910076][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  205.910084][ T5846] Call Trace:
[  205.910091][ T5846]  <TASK>
[  205.910098][ T5846]  dump_stack_lvl+0x189/0x250
[  205.910124][ T5846]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.910140][ T5846]  ? __pfx_queue_work_on+0x10/0x10
[  205.910155][ T5846]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  205.910174][ T5846]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  205.910200][ T5846]  f2fs_handle_critical_error+0x37c/0x540
[  205.910227][ T5846]  f2fs_write_end_io+0x886/0xb60
[  205.910254][ T5846]  __submit_merged_bio+0x27a/0x6a0
[  205.910279][ T5846]  __submit_merged_write_cond+0x255/0x530
[  205.910303][ T5846]  f2fs_write_data_pages+0x261d/0x3000
[  205.910349][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  205.910424][ T5846]  ? __lock_acquire+0xab9/0xd20
[  205.910453][ T5846]  ? do_raw_spin_lock+0x121/0x290
[  205.910478][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[  205.910494][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  205.910515][ T5846]  do_writepages+0x32e/0x550
[  205.910552][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[  205.910572][ T5846]  filemap_fdatawrite+0x199/0x240
[  205.910591][ T5846]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  205.910646][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[  205.910666][ T5846]  f2fs_sync_dirty_inodes+0x31f/0x830
[  205.910691][ T5846]  f2fs_write_checkpoint+0x95a/0x1df0
[  205.910724][ T5846]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  205.910776][ T5846]  ? kill_f2fs_super+0x298/0x6c0
[  205.910794][ T5846]  kill_f2fs_super+0x2c3/0x6c0
[  205.910812][ T5846]  ? __pfx_kill_f2fs_super+0x10/0x10
[  205.910825][ T5846]  ? radix_tree_delete_item+0x2b6/0x400
[  205.910847][ T5846]  ? shrinker_free+0x2ce/0x3e0
[  205.910864][ T5846]  deactivate_locked_super+0xbc/0x130
[  205.910882][ T5846]  cleanup_mnt+0x425/0x4c0
[  205.910898][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.910919][ T5846]  task_work_run+0x1d4/0x260
[  205.910965][ T5846]  ? __pfx_task_work_run+0x10/0x10
[  205.910982][ T5846]  ? __x64_sys_umount+0x122/0x160
[  205.911004][ T5846]  ? exit_to_user_mode_loop+0x40/0x110
[  205.911026][ T5846]  exit_to_user_mode_loop+0xec/0x110
[  205.911045][ T5846]  do_syscall_64+0x2bd/0x3b0
[  205.911062][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.911079][ T5846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.911093][ T5846]  ? exc_page_fault+0x9f/0xf0
[  205.911112][ T5846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.911124][ T5846] RIP: 0033:0x7f088f18ff17
[  205.911137][ T5846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  205.911150][ T5846] RSP: 002b:00007ffdae9e88b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  205.911165][ T5846] RAX: 0000000000000000 RBX: 00007f088f211c05 RCX: 00007f088f18ff17
[  205.911174][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdae9e8970
[  205.911182][ T5846] RBP: 00007ffdae9e8970 R08: 0000000000000000 R09: 0000000000000000
[  205.911190][ T5846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdae9e9a00
[  205.911199][ T5846] R13: 00007f088f211c05 R14: 00000000000323b5 R15: 00007ffdae9e9a40
[  205.911222][ T5846]  </TASK>
[  205.911228][ T5846] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  206.276648][ T9464] af_packet: tpacket_rcv: packet too big, clamped from 65075 to 3952. macoff=96
[  206.581419][ T9467] loop1: detected capacity change from 0 to 32768
[  206.585439][ T9467] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1288 (9467)
[  206.612282][ T9467] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  206.616250][ T9467] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  206.630615][ T9467] BTRFS info (device loop1): using free-space-tree
[  206.832148][ T9474] loop3: detected capacity change from 0 to 32768
[  206.867230][ T5846] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  206.900709][ T9474] (syz.3.1293,9474,0):ocfs2_clear_journal_error:1147 ERROR: File system error 1280 recorded in journal 0.
[  206.931572][ T9474] (syz.3.1293,9474,0):ocfs2_clear_journal_error:1149 ERROR: File system on device loop3 needs checking.
[  206.948585][ T9474] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  207.059769][ T9036] ocfs2: Unmounting device (7,3) on (node local)
[  207.347310][ T9519] loop3: detected capacity change from 0 to 1024
[  207.408620][ T9519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.432611][ T9517] loop1: detected capacity change from 0 to 4096
[  207.438968][ T9517] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  207.541001][ T9036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.632858][ T9534] loop1: detected capacity change from 0 to 512
[  207.652683][ T9534] EXT4-fs (loop1): Test dummy encryption mode enabled
[  207.656752][ T9534] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  207.678093][ T9534] EXT4-fs (loop1): 1 truncate cleaned up
[  207.687280][ T9534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.829533][ T9534] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  207.861937][ T9548] binfmt_misc: register: failed to install interpreter file ./file0
[  207.891315][ T9545] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  207.923739][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.498156][ T9592] loop1: detected capacity change from 0 to 512
[  208.521755][ T5237] Bluetooth: hci2: unexpected event for opcode 0x1005
[  208.560902][ T9592] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1333: Parent and EA inode have the same ino 15
[  208.592864][ T9592] EXT4-fs (loop1): Remounting filesystem read-only
[  208.596153][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1335'.
[  208.669040][ T9592] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  208.674448][ T9592] EXT4-fs (loop1): 1 orphan inode deleted
[  208.678015][ T9592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.760049][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.982879][ T9610] loop3: detected capacity change from 0 to 16
[  209.099686][ T9608] loop1: detected capacity change from 0 to 32768
[  209.120466][ T9608] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1339 (9608)
[  209.136105][ T9608] BTRFS info (device loop1 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  209.139672][ T9608] BTRFS info (device loop1 state S): using crc32c (crc32c-lib) checksum algorithm
[  209.178551][   T28] BTRFS warning (device loop1 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  209.190887][   T70] BTRFS warning (device loop1 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  209.197222][   T28] BTRFS warning (device loop1 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  209.203179][ T1100] BTRFS warning (device loop1 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored
[  209.233911][ T9608] BTRFS error (device loop1 state S): logical 6881280 len 1638400 found bg but no related chunk
[  209.301754][ T5846] BTRFS info (device loop1 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  211.007978][ T9677] loop3: detected capacity change from 0 to 16
[  211.064932][ T9676] loop1: detected capacity change from 0 to 4096
[  211.065270][ T9677] erofs (device loop3): mounted with root inode @ nid 36.
[  211.079836][ T9676] EXT4-fs (loop1): Test dummy encryption mode enabled
[  211.108286][ T9676] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  211.115826][ T9676] System zones: 0-5
[  211.152112][ T9676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.531780][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.315397][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  212.467265][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  212.472600][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.476598][    T9] usb 4-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30
[  212.481180][    T9] usb 4-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217
[  212.487848][    T9] usb 4-1: config 1 interface 1 has no altsetting 0
[  212.494190][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  212.498094][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.500720][    T9] usb 4-1: Product: syz
[  212.502389][    T9] usb 4-1: Manufacturer: syz
[  212.504381][    T9] usb 4-1: SerialNumber: syz
[  212.522559][    T9] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22
[  212.747951][ T5908] usb 4-1: USB disconnect, device number 4
[  212.881153][ T9723] loop1: detected capacity change from 0 to 2048
[  212.897978][ T9724] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  213.225523][ T5908] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  213.384913][ T5908] usb 2-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32
[  213.394116][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.397471][ T5908] usb 2-1: Product: syz
[  213.399115][ T5908] usb 2-1: Manufacturer: syz
[  213.405197][ T5908] usb 2-1: SerialNumber: syz
[  213.412541][ T5908] usb 2-1: config 0 descriptor??
[  213.428276][ T5908] pwc: Logitech QuickCam Zoom (new model) USB webcam detected.
[  213.574760][ T9730] loop3: detected capacity change from 0 to 32768
[  213.605303][ T9730] (syz.3.1388,9730,0):ocfs2_check_set_options:1265 ERROR: ACL support requested but extended attributes feature is not enabled
[  213.617311][ T9730] (syz.3.1388,9730,0):ocfs2_fill_super:1177 ERROR: status = -22
[  213.642791][ T5908] pwc: Failed to set LED on/off time (-71)
[  213.645307][ T5908] pwc: send_video_command error -71
[  213.647286][ T5908] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  213.649818][ T5908] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  213.675941][ T5908] usb 2-1: USB disconnect, device number 28
[  214.170609][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1401'.
[  214.293549][ T9768] loop1: detected capacity change from 0 to 764
[  214.544951][ T9778] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1411'.
[  214.567249][ T9778] netlink: 'syz.3.1411': attribute type 1 has an invalid length.
[  214.573765][ T9778] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1411'.
[  214.762215][ T9785] loop3: detected capacity change from 0 to 1024
[  214.774498][   T33] audit: type=1326 audit(1755338248.444:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.1.1412" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f088f18ebe9 code=0x0
[  214.821606][   T36] hfsplus: b-tree write err: -5, ino 4
[  215.420443][ T9794] tmpfs: Cannot retroactively limit inodes
[  216.115740][   T51] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  216.242402][ T9802] sctp: [Deprecated]: syz.1.1420 (pid 9802) Use of int in max_burst socket option deprecated.
[  216.242402][ T9802] Use struct sctp_assoc_value instead
[  216.295408][   T51] usb 1-1: Using ep0 maxpacket: 16
[  216.302296][   T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.323046][   T51] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  216.350016][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.401621][   T51] usb 1-1: config 0 descriptor??
[  216.609755][ T9808] loop3: detected capacity change from 0 to 8
[  216.618338][ T9808] SQUASHFS error: zlib decompression failed, data probably corrupt
[  216.621541][ T9808] SQUASHFS error: Failed to read block 0x9b: -5
[  216.632281][ T9808] SQUASHFS error: Unable to read metadata cache entry [99]
[  216.636745][ T9808] SQUASHFS error: Unable to read inode 0x127
[  216.655330][   T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  216.822483][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  216.826187][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  216.833724][   T10] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18
[  216.838711][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.843413][   T10] usb 2-1: Product: syz
[  216.845396][   T10] usb 2-1: Manufacturer: syz
[  216.846961][   T10] usb 2-1: SerialNumber: syz
[  216.852894][   T10] usb 2-1: config 0 descriptor??
[  217.390613][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  217.480319][   T10] usb 2-1: USB disconnect, device number 29
[  217.735699][ T9818] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1427'.
[  218.393933][ T9846] loop1: detected capacity change from 0 to 8
[  218.596451][   T51] usbhid 1-1:0.0: can't add hid device: -71
[  218.603952][   T51] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  218.623459][   T51] usb 1-1: USB disconnect, device number 33
[  218.699014][ T9858] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1447'.
[  218.712223][ T9856] loop1: detected capacity change from 0 to 4096
[  218.717122][ T9856] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  218.747436][ T9856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.774813][ T9862] loop3: detected capacity change from 0 to 1024
[  218.784995][ T9862] EXT4-fs: Ignoring removed nobh option
[  218.790025][ T9862] EXT4-fs: Ignoring removed bh option
[  218.803228][ T9862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.853315][ T9036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.900439][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.902680][ T9870] loop3: detected capacity change from 0 to 1024
[  218.907751][ T9870] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  218.954498][ T9036] hfsplus: bad catalog entry type
[  219.717479][ T5723] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.825863][ T5723] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.082047][ T5723] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.201978][ T5723] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.469659][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  220.481838][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  220.487489][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  220.496299][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  220.505696][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  220.879891][ T5723] bridge_slave_1: left allmulticast mode
[  220.883242][ T5723] bridge_slave_1: left promiscuous mode
[  220.896720][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.933121][ T5723] bridge_slave_0: left allmulticast mode
[  220.934921][ T5723] bridge_slave_0: left promiscuous mode
[  220.937662][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.253970][ T5723] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[  221.958679][ T5723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.989162][ T5723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.003604][ T5723] bond0 (unregistering): Released all slaves
[  222.339183][ T5723] bond1 (unregistering): Released all slaves
[  222.547359][   T54] Bluetooth: hci3: command tx timeout
[  222.984355][ T9918] loop1: detected capacity change from 0 to 1024
[  223.011978][ T9918] EXT4-fs: Ignoring removed orlov option
[  223.014263][ T9918] EXT4-fs: Ignoring removed nomblk_io_submit option
[  223.052056][ T9918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.078750][ T9882] chnl_net:caif_netlink_parms(): no params data found
[  223.213115][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.438425][ T9882] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.441510][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.444615][ T9882] bridge_slave_0: entered allmulticast mode
[  223.453605][ T9882] bridge_slave_0: entered promiscuous mode
[  223.459221][ T9882] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.462472][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.465614][ T9882] bridge_slave_1: entered allmulticast mode
[  223.469219][ T9882] bridge_slave_1: entered promiscuous mode
[  223.473599][    C1] vkms_vblank_simulate: vblank timer overrun
[  223.581253][ T5723] hsr_slave_0: left promiscuous mode
[  223.608718][ T5723] hsr_slave_1: left promiscuous mode
[  223.618471][ T5723] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.621926][ T5723] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.633537][ T5723] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.636846][ T5723] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.700531][ T5723] veth1_macvtap: left promiscuous mode
[  223.703499][ T5723] veth0_macvtap: left promiscuous mode
[  223.707098][ T5723] veth1_vlan: left promiscuous mode
[  223.713938][ T5723] veth0_vlan: left promiscuous mode
[  223.798137][ T9931] loop1: detected capacity change from 0 to 32768
[  223.966537][   T51] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  224.138074][   T51] usb 1-1: Using ep0 maxpacket: 8
[  224.146706][   T51] usb 1-1: config 253 has an invalid interface number: 176 but max is 0
[  224.150056][   T51] usb 1-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config
[  224.154150][   T51] usb 1-1: config 253 has no interface number 0
[  224.159901][   T51] usb 1-1: config 253 interface 176 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  224.165988][   T51] usb 1-1: config 253 interface 176 has no altsetting 0
[  224.179279][   T51] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=25.28
[  224.184069][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.189309][   T51] usb 1-1: Product: syz
[  224.190977][   T51] usb 1-1: Manufacturer: syz
[  224.192873][   T51] usb 1-1: SerialNumber: syz
[  224.217031][   T51] usb 1-1: cannot find UAC_HEADER
[  224.263586][   T51] snd-usb-audio 1-1:253.176: probe with driver snd-usb-audio failed with error -22
[  224.312514][ T7275] udevd[7275]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:253.176/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  224.427108][   T51] usb 1-1: USB disconnect, device number 34
[  224.632059][   T54] Bluetooth: hci3: command tx timeout
[  224.698151][ T9951] loop1: detected capacity change from 0 to 4096
[  224.738664][ T9951] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  224.790992][ T5723] team0 (unregistering): Port device team_slave_1 removed
[  224.862302][ T5723] team0 (unregistering): Port device team_slave_0 removed
[  225.234641][ T5908] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  225.422757][ T5908] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  225.427396][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.458828][ T5908] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  225.463983][ T5908] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  225.467449][ T5908] usb 2-1: Manufacturer: syz
[  225.486702][ T5908] usb 2-1: config 0 descriptor??
[  225.523924][ T5909] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  225.545476][ T5908] rc_core: IR keymap rc-hauppauge not found
[  225.547824][ T5908] Registered IR keymap rc-empty
[  225.550834][ T5908] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  225.561851][ T5908] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15
[  225.698680][ T5909] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  225.702068][ T5909] usb 1-1: config 0 has no interface number 0
[  225.718721][ T5909] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  225.726136][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.735488][ T5909] usb 1-1: Product: syz
[  225.737435][ T5909] usb 1-1: Manufacturer: syz
[  225.739241][ T5909] usb 1-1: SerialNumber: syz
[  225.740895][    C0] igorplugusb 2-1:0.0: Error: urb status = -32
[  225.749672][ T5909] usb 1-1: config 0 descriptor??
[  225.776263][ T5908] usb 2-1: USB disconnect, device number 30
[  225.885935][ T9882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.913856][ T9882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.992483][ T9882] team0: Port device team_slave_0 added
[  225.996320][ T9882] team0: Port device team_slave_1 added
[  226.044290][ T9882] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.049985][ T9882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.059937][ T9882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.080576][ T9882] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.082849][ T9882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.093088][ T9882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.171553][ T5909] usb 1-1: Firmware: major: 154, minor: 51, hardware type: ATUSB (1)
[  226.223972][ T9882] hsr_slave_0: entered promiscuous mode
[  226.232566][ T9882] hsr_slave_1: entered promiscuous mode
[  226.238118][ T9882] debugfs: 'hsr0' already exists in 'hsr'
[  226.240445][ T9882] Cannot create hsr debugfs directory
[  226.373711][ T5909] usb 1-1: failed to fetch extended address, random address set
[  226.474477][ T9975] loop1: detected capacity change from 0 to 256
[  226.489939][ T9975] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  226.507484][ T5909] usb 1-1: USB disconnect, device number 35
[  226.659151][   T33] audit: type=1804 audit(1755338260.334:45): pid=9977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1483" name="/newroot/463/file1" dev="fuse" ino=1 res=1 errno=0
[  226.684338][   T33] audit: type=1800 audit(1755338260.334:46): pid=9977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1483" name="/" dev="fuse" ino=1 res=0 errno=0
[  226.705685][   T54] Bluetooth: hci3: command tx timeout
[  226.754491][ T9980] loop1: detected capacity change from 0 to 512
[  226.762935][ T9980] EXT4-fs: Ignoring removed nomblk_io_submit option
[  226.810933][ T9980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.821608][ T9980] ext4 filesystem being mounted at /464/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  226.838278][ T9882] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  226.848047][   T33] audit: type=1800 audit(1755338260.524:47): pid=9980 uid=60929 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1484" name="file1" dev="loop1" ino=15 res=0 errno=0
[  226.868310][ T9882] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  226.875007][ T9882] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  226.902875][ T9882] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  226.916745][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.032083][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'.
[  227.129429][ T9882] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.164522][ T9882] 8021q: adding VLAN 0 to HW filter on device team0
[  227.181576][T10005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1489'.
[  227.190165][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.193215][ T6471] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.208915][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.211723][ T6471] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.327878][ T9882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  227.587830][ T9882] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.695451][ T5908] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  227.866282][ T5908] usb 2-1: Using ep0 maxpacket: 32
[  227.886244][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.891000][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.894769][ T5908] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  227.917200][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.929201][ T5908] usb 2-1: config 0 descriptor??
[  227.935625][ T5908] hub 2-1:0.0: USB hub found
[  227.970147][ T5850] jfs_flush_journal: synclist not empty
[  227.994690][ T5850] metapage: ffff88803a0ab0f8: 00001000 00000000 00003938 00000000
[  228.015415][ T5850] metapage: ffff88803a0ab108: 3a0ab200 ffff8880 24e21a28 ffff8880
[  228.039208][ T5850] metapage: ffff88803a0ab118: 00000004 00000000 00000000 00000000
[  228.059917][ T5850] metapage: ffff88803a0ab128: 29438000 ffff8880 0000002d 00000000
[  228.082178][ T5850] metapage: ffff88803a0ab138: 00000000 dead4ead ffffffff 00000000
[  228.107428][ T5850] metapage: ffff88803a0ab148: ffffffff ffffffff 99c03760 ffffffff
[  228.131917][ T5850] metapage: ffff88803a0ab158: 9351c2e8 ffffffff 00000000 00000000
[  228.170675][ T5850] metapage: ffff88803a0ab168: 8bc40380 ffffffff 00000300 00000000
[  228.178855][ T5908] hub 2-1:0.0: 1 port detected
[  228.223028][ T5850] metapage: ffff88803a0ab178: 3a0ab178 ffff8880 3a0ab178 ffff8880
[  228.233765][ T5850] metapage: ffff88803a0ab188: 00a50e00 ffffea00 3a38a000 ffff8880
[  228.237455][ T5850] metapage: ffff88803a0ab198: 00001000 00003e24 00000000 00000000
[  228.240859][ T5850] metapage: ffff88803a0ab1a8: 24e21800 ffff8880
[  228.243495][ T5850] page: ffffea0000a50e00: 00fff2000000403c ffffea0000a1ee08
[  228.247864][ T5850] page: ffffea0000a50e10: ffffea00008d1508 0000000000000000
[  228.251071][ T5850] page: ffffea0000a50e20: 000000000000002d ffff88803a0ab0f8
[  228.254111][ T5850] page: ffffea0000a50e30: 00000001ffffffff ffff88811a698d00
[  228.258146][ T5850] metapage: ffff88803a0ab1f0: 00001000 00000000 00003cb0 00000000
[  228.261388][ T5850] metapage: ffff88803a0ab200: 3a0abe98 ffff8880 3a0ab108 ffff8880
[  228.264572][ T5850] metapage: ffff88803a0ab210: 00000004 00000000 00000000 00000000
[  228.268079][ T5850] metapage: ffff88803a0ab220: 1fbeb000 ffff8880 00000030 00000000
[  228.271520][ T5850] metapage: ffff88803a0ab230: 00000000 dead4ead ffffffff 00000000
[  228.274736][ T5850] metapage: ffff88803a0ab240: ffffffff ffffffff 99c03760 ffffffff
[  228.281125][ T5850] metapage: ffff88803a0ab250: 9351c2e8 ffffffff 00000000 00000000
[  228.284366][ T5850] metapage: ffff88803a0ab260: 8bc40380 ffffffff 00000300 00000000
[  228.293338][ T5850] metapage: ffff88803a0ab270: 3a0ab270 ffff8880 3a0ab270 ffff8880
[  228.297536][ T5850] metapage: ffff88803a0ab280: 007efac0 ffffea00 3a38a000 ffff8880
[  228.300769][ T5850] metapage: ffff88803a0ab290: 00001000 00003e24 00000000 00000000
[  228.304017][ T5850] metapage: ffff88803a0ab2a0: 24e21800 ffff8880
[  228.333808][ T5850] page: ffffea00007efac0: 00fff2800000403c ffffea0000e06cc8
[  228.397986][ T5850] page: ffffea00007efad0: ffffea0000a47388 0000000000000000
[  228.400549][ T9882] veth0_vlan: entered promiscuous mode
[  228.427432][ T5850] page: ffffea00007efae0: 0000000000000030 ffff88803a0ab1f0
[  228.428144][ T9882] veth1_vlan: entered promiscuous mode
[  228.465921][ T5850] page: ffffea00007efaf0: 00000001ffffffff ffff88811a698d00
[  228.468880][ T5850] metapage: ffff88803a0abe88: 00001000 00000000 00003d58 00000000
[  228.489263][ T5850] metapage: ffff88803a0abe98: 24e21a28 ffff8880 3a0ab200 ffff8880
[  228.492895][ T5850] metapage: ffff88803a0abea8: 00000004 00000000 00000000 00000000
[  228.516909][ T5850] metapage: ffff88803a0abeb8: 2848e000 ffff8880 0000001c 00000000
[  228.526048][ T9882] veth0_macvtap: entered promiscuous mode
[  228.530163][ T5850] metapage: ffff88803a0abec8: 00000000 dead4ead ffffffff 00000000
[  228.543848][ T9882] veth1_macvtap: entered promiscuous mode
[  228.561121][ T5850] metapage: ffff88803a0abed8: ffffffff ffffffff 99c03760 ffffffff
[  228.598957][ T5850] metapage: ffff88803a0abee8: 9351c2e8 ffffffff 00000000 00000000
[  228.607133][ T9882] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.620104][ T5850] metapage: ffff88803a0abef8: 8bc40380 ffffffff 00000300 00000000
[  228.623296][ T5850] metapage: ffff88803a0abf08: 3a0abf08 ffff8880 3a0abf08 ffff8880
[  228.633380][ T5850] metapage: ffff88803a0abf18: 00a12380 ffffea00 3a38a000 ffff8880
[  228.642065][ T5850] metapage: ffff88803a0abf28: 00001000 00003e24 00000000 00000000
[  228.649109][ T9882] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.654218][ T5850] metapage: ffff88803a0abf38: 24e21800 ffff8880
[  228.662037][ T5850] page: ffffea0000a12380: 00fff2800000403c ffffea0000d31608
[  228.664989][ T5850] page: ffffea0000a12390: ffffea00008f4848 0000000000000000
[  228.671168][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.674238][ T5850] page: ffffea0000a123a0: 000000000000001c ffff88803a0abe88
[  228.674379][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.677724][ T5850] page: ffffea0000a123b0: 00000001ffffffff ffff88811a698d00
[  228.702087][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.706250][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.786531][   T54] Bluetooth: hci3: command tx timeout
[  228.789157][ T5908] hub 2-1:0.0: activate --> -90
[  228.981669][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.991359][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.000365][ T5895] usb 2-1: USB disconnect, device number 31
[  229.001207][ T5908] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  229.159248][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.163504][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.882223][T10087] loop1: detected capacity change from 0 to 1024
[  231.060974][T10091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1507'.
[  231.193354][T10093] loop4: detected capacity change from 0 to 8192
[  231.361777][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1515'.
[  231.493384][T10102] loop1: detected capacity change from 0 to 32768
[  231.511473][T10102] JBD2: Ignoring recovery information on journal
[  231.549024][T10102] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  231.560201][T10102] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  231.560330][T10102] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  231.577604][T10102] OCFS2: File system is now read-only.
[  231.580617][T10102] (syz.1.1512,10102,1):ocfs2_calc_xattr_init:638 ERROR: status = -117
[  231.584036][T10102] (syz.1.1512,10102,1):ocfs2_mknod:337 ERROR: status = -117
[  231.587317][T10102] (syz.1.1512,10102,1):ocfs2_mknod:505 ERROR: status = -117
[  231.592857][T10102] (syz.1.1512,10102,1):ocfs2_mkdir:661 ERROR: status = -117
[  231.613185][ T5846] ocfs2: Unmounting device (7,1) on (node local)
[  231.640706][T10122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1520'.
[  231.644319][T10122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1520'.
[  231.712812][T10126] loop4: detected capacity change from 0 to 16
[  231.719149][T10127] input: syz1 as /devices/virtual/input/input16
[  231.721115][T10126] erofs (device loop4): mounted with root inode @ nid 36.
[  231.905056][ T5908] IPVS: starting estimator thread 0...
[  231.910737][T10131] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  231.980986][T10144] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.1530'.
[  231.992410][T10144] openvswitch: netlink: Message has 5 unknown bytes.
[  231.994644][T10147] MTD: Couldn't look up './cgroup': -15
[  231.995535][T10141] IPVS: using max 51 ests per chain, 122400 per kthread
[  232.063743][T10145] loop1: detected capacity change from 0 to 4096
[  232.110467][T10145] ntfs3(loop1): ino=21, "file1" fallocate(0x40) is not supported
[  232.366908][T10162] loop1: detected capacity change from 0 to 256
[  232.383819][T10155] loop4: detected capacity change from 0 to 32768
[  232.390297][T10155] bcachefs (/dev/loop4): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 1)
[  232.396520][T10155] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[  232.432567][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'.
[  232.456662][ T5909] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  232.615258][ T5909] usb 1-1: Using ep0 maxpacket: 8
[  232.628546][ T5909] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[  232.632412][ T5909] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  232.645163][ T5909] usb 1-1: config 0 has no interface number 0
[  232.647863][ T5909] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 52, changing to 9
[  232.651865][ T5909] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 8241, setting to 1024
[  232.664419][T10170] loop4: detected capacity change from 0 to 32768
[  232.665220][ T5909] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  232.675611][ T5909] usb 1-1: config 0 interface 52 has no altsetting 0
[  232.677859][T10170] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  232.682291][ T5909] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  232.685647][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[  232.691928][ T5909] usb 1-1: SerialNumber: syz
[  232.693770][T10170] 
[  232.694587][T10170] ======================================================
[  232.696665][T10170] WARNING: possible circular locking dependency detected
[  232.698741][T10170] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  232.701564][T10170] ------------------------------------------------------
[  232.704789][T10170] syz.4.1543/10170 is trying to acquire lock:
[  232.706758][T10170] ffff88811d5a89c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  232.711080][T10170] 
[  232.711080][T10170] but task is already holding lock:
[  232.713332][T10170] ffff88811d5a9578 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  232.713501][T10172] loop1: detected capacity change from 0 to 32768
[  232.716094][T10170] 
[  232.716094][T10170] which lock already depends on the new lock.
[  232.716094][T10170] 
[  232.716101][T10170] 
[  232.716101][T10170] the existing dependency chain (in reverse order) is:
[  232.716106][T10170] 
[  232.716106][T10170] -> #5 (&oi->ip_xattr_sem){++++}-{4:4}:
[  232.716124][T10170]        lock_acquire+0x120/0x360
[  232.716138][T10170]        down_read+0x46/0x2e0
[  232.716151][T10170]        ocfs2_init_acl+0x2f9/0x720
[  232.731357][T10170]        ocfs2_mknod+0x1321/0x2050
[  232.732941][T10170]        ocfs2_mkdir+0x191/0x440
[  232.734449][T10170]        vfs_mkdir+0x306/0x510
[  232.735987][T10170]        do_mkdirat+0x247/0x590
[  232.737492][T10170]        __x64_sys_mkdir+0x6c/0x80
[  232.739086][T10170]        do_syscall_64+0xfa/0x3b0
[  232.740718][T10170]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.742745][T10170] 
[  232.742745][T10170] -> #4 (jbd2_handle){++++}-{0:0}:
[  232.744957][T10170]        lock_acquire+0x120/0x360
[  232.746480][T10170]        start_this_handle+0x1fa7/0x21c0
[  232.748186][T10170]        jbd2__journal_start+0x2c1/0x5b0
[  232.749870][T10170]        jbd2_journal_start+0x2a/0x40
[  232.751520][T10170]        ocfs2_start_trans+0x376/0x6d0
[  232.753428][T10170]        ocfs2_modify_bh+0xe8/0x470
[  232.755095][T10170]        ocfs2_local_read_info+0x1465/0x17e0
[  232.756920][T10170]        dquot_load_quota_sb+0x791/0xbd0
[  232.758625][T10170]        dquot_load_quota_inode+0x2e1/0x5d0
[  232.760446][T10170]        ocfs2_enable_quotas+0x1c6/0x450
[  232.762220][T10170]        ocfs2_fill_super+0x50fe/0x63c0
[  232.764095][T10170]        get_tree_bdev_flags+0x40e/0x4d0
[  232.765892][T10170]        vfs_get_tree+0x92/0x2b0
[  232.767397][T10170]        do_new_mount+0x2a2/0x9e0
[  232.768953][T10170]        __se_sys_mount+0x317/0x410
[  232.770565][T10170]        do_syscall_64+0xfa/0x3b0
[  232.772150][T10170]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.774219][T10170] 
[  232.774219][T10170] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  232.776781][T10170]        lock_acquire+0x120/0x360
[  232.778335][T10170]        down_read+0x46/0x2e0
[  232.779784][T10170]        ocfs2_start_trans+0x36a/0x6d0
[  232.781455][T10170]        ocfs2_modify_bh+0xe8/0x470
[  232.783075][T10170]        ocfs2_local_read_info+0x1465/0x17e0
[  232.784978][T10170]        dquot_load_quota_sb+0x791/0xbd0
[  232.786714][T10170]        dquot_load_quota_inode+0x2e1/0x5d0
[  232.788520][T10170]        ocfs2_enable_quotas+0x1c6/0x450
[  232.790240][T10170]        ocfs2_fill_super+0x50fe/0x63c0
[  232.791948][T10170]        get_tree_bdev_flags+0x40e/0x4d0
[  232.793674][T10170]        vfs_get_tree+0x92/0x2b0
[  232.795288][T10170]        do_new_mount+0x2a2/0x9e0
[  232.797213][T10170]        __se_sys_mount+0x317/0x410
[  232.798863][T10170]        do_syscall_64+0xfa/0x3b0
[  232.800428][T10170]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.802563][T10170] 
[  232.802563][T10170] -> #2 (sb_internal#5){.+.+}-{0:0}:
[  232.804826][T10170]        lock_acquire+0x120/0x360
[  232.806423][T10170]        ocfs2_start_trans+0x26b/0x6d0
[  232.808505][T10170]        ocfs2_mknod+0xe93/0x2050
[  232.810433][T10170]        ocfs2_mkdir+0x191/0x440
[  232.812138][T10170]        vfs_mkdir+0x306/0x510
[  232.813704][T10170]        do_mkdirat+0x247/0x590
[  232.815345][T10170]        __x64_sys_mkdir+0x6c/0x80
[  232.817190][T10170]        do_syscall_64+0xfa/0x3b0
[  232.819211][T10170]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.821356][T10170] 
[  232.821356][T10170] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  232.824740][T10170]        lock_acquire+0x120/0x360
[  232.826540][T10170]        down_write+0x96/0x1f0
[  232.828321][T10170]        ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  232.830691][T10170]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  232.832854][T10170]        ocfs2_mknod+0xe32/0x2050
[  232.834452][T10170]        ocfs2_mkdir+0x191/0x440
[  232.836027][T10170]        vfs_mkdir+0x306/0x510
[  232.837849][T10170]        do_mkdirat+0x247/0x590
[  232.839597][T10170]        __x64_sys_mkdir+0x6c/0x80
[  232.841173][T10170]        do_syscall_64+0xfa/0x3b0
[  232.842704][T10170]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.844937][T10170] 
[  232.844937][T10170] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  232.849116][T10170]        validate_chain+0xb9b/0x2140
[  232.851236][T10170]        __lock_acquire+0xab9/0xd20
[  232.853252][T10170]        lock_acquire+0x120/0x360
[  232.855236][T10170]        down_write+0x96/0x1f0
[  232.857135][T10170]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  232.859658][T10170]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  232.862328][T10170]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  232.864746][T10170]        ocfs2_xattr_set+0xb70/0x11f0
[  232.866878][T10170]        __vfs_setxattr+0x43c/0x480
[  232.868922][T10170]        __vfs_setxattr_noperm+0x12d/0x660
[  232.871250][T10170]        vfs_setxattr+0x16b/0x2f0
[  232.873280][T10170]        filename_setxattr+0x274/0x600
[  232.875489][T10170]        path_setxattrat+0x364/0x3a0
[  232.877608][T10170]        __x64_sys_setxattr+0xbc/0xe0
[  232.879713][T10170]        do_syscall_64+0xfa/0x3b0
[  232.881716][T10170]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.884183][T10170] 
[  232.884183][T10170] other info that might help us debug this:
[  232.884183][T10170] 
[  232.887997][T10170] Chain exists of:
[  232.887997][T10170]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  232.887997][T10170] 
[  232.894038][T10170]  Possible unsafe locking scenario:
[  232.894038][T10170] 
[  232.896899][T10170]        CPU0                    CPU1
[  232.899020][T10170]        ----                    ----
[  232.901175][T10170]   lock(&oi->ip_xattr_sem);
[  232.902997][T10170]                                lock(jbd2_handle);
[  232.905518][T10170]                                lock(&oi->ip_xattr_sem);
[  232.908251][T10170]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  232.911057][T10170] 
[  232.911057][T10170]  *** DEADLOCK ***
[  232.911057][T10170] 
[  232.914201][T10170] 3 locks held by syz.4.1543/10170:
[  232.916263][T10170]  #0: ffff888039ee0428 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  232.919868][T10170]  #1: ffff88811d5a9840 (&type->i_mutex_dir_key#24){++++}-{4:4}, at: vfs_setxattr+0x144/0x2f0
[  232.923886][T10170]  #2: ffff88811d5a9578 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  232.927752][T10170] 
[  232.927752][T10170] stack backtrace:
[  232.930071][T10170] CPU: 0 UID: 0 PID: 10170 Comm: syz.4.1543 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  232.930095][T10170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.930107][T10170] Call Trace:
[  232.930116][T10170]  <TASK>
[  232.930125][T10170]  dump_stack_lvl+0x189/0x250
[  232.930175][T10170]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.930194][T10170]  ? __pfx__printk+0x10/0x10
[  232.930215][T10170]  ? print_lock_name+0xde/0x100
[  232.930234][T10170]  print_circular_bug+0x2ee/0x310
[  232.930251][T10170]  check_noncircular+0x134/0x160
[  232.930268][T10170]  validate_chain+0xb9b/0x2140
[  232.930284][T10170]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  232.930306][T10170]  ? look_up_lock_class+0x74/0x170
[  232.930322][T10170]  ? register_lock_class+0x51/0x320
[  232.930344][T10170]  __lock_acquire+0xab9/0xd20
[  232.930365][T10170]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  232.930380][T10170]  lock_acquire+0x120/0x360
[  232.930400][T10170]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  232.930419][T10170]  down_write+0x96/0x1f0
[  232.930431][T10170]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  232.930445][T10170]  ? __pfx_down_write+0x10/0x10
[  232.930460][T10170]  ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  232.930482][T10170]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  232.930498][T10170]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.930516][T10170]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  232.930533][T10170]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  232.930550][T10170]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  232.930566][T10170]  ? stack_depot_save_flags+0x41b/0x860
[  232.930586][T10170]  ? kasan_save_track+0x4f/0x80
[  232.930602][T10170]  ? kasan_save_track+0x3e/0x80
[  232.930615][T10170]  ? __kasan_kmalloc+0x93/0xb0
[  232.930631][T10170]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  232.930648][T10170]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  232.930663][T10170]  ? ocfs2_init_xattr_set_ctxt+0x307/0x700
[  232.930681][T10170]  ? ocfs2_xattr_set+0xb70/0x11f0
[  232.930696][T10170]  ? __vfs_setxattr+0x43c/0x480
[  232.930714][T10170]  ? __vfs_setxattr_noperm+0x12d/0x660
[  232.930758][T10170]  ? vfs_setxattr+0x16b/0x2f0
[  232.930777][T10170]  ? filename_setxattr+0x274/0x600
[  232.930797][T10170]  ? path_setxattrat+0x364/0x3a0
[  232.930812][T10170]  ? __x64_sys_setxattr+0xbc/0xe0
[  232.930826][T10170]  ? do_syscall_64+0xfa/0x3b0
[  232.930842][T10170]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.930866][T10170]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  232.930882][T10170]  ? __kasan_kmalloc+0x93/0xb0
[  232.930896][T10170]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  232.930912][T10170]  ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  232.930929][T10170]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  232.930945][T10170]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  232.930965][T10170]  ? __lock_acquire+0xab9/0xd20
[  232.930985][T10170]  ocfs2_init_xattr_set_ctxt+0x307/0x700
[  232.931004][T10170]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  232.931022][T10170]  ? ocfs2_xattr_set+0xb36/0x11f0
[  232.931039][T10170]  ? up_write+0x1c4/0x420
[  232.931052][T10170]  ? ocfs2_xattr_set+0x334/0x11f0
[  232.931067][T10170]  ocfs2_xattr_set+0xb70/0x11f0
[  232.931090][T10170]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  232.931106][T10170]  ? ocfs2_permission+0x107/0x1b0
[  232.931126][T10170]  ? __pfx_ocfs2_permission+0x10/0x10
[  232.931185][T10170]  ? inode_permission+0x149/0x470
[  232.931199][T10170]  ? __pfx_ocfs2_permission+0x10/0x10
[  232.931219][T10170]  ? look_up_lock_class+0x74/0x170
[  232.931235][T10170]  ? register_lock_class+0x51/0x320
[  232.931253][T10170]  ? posix_xattr_acl+0x93/0xc0
[  232.931271][T10170]  ? evm_protect_xattr+0x4d4/0xa90
[  232.931289][T10170]  ? __pfx_evm_protect_xattr+0x10/0x10
[  232.931304][T10170]  ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10
[  232.931322][T10170]  __vfs_setxattr+0x43c/0x480
[  232.931343][T10170]  __vfs_setxattr_noperm+0x12d/0x660
[  232.931364][T10170]  vfs_setxattr+0x16b/0x2f0
[  232.931386][T10170]  ? __pfx_vfs_setxattr+0x10/0x10
[  232.931404][T10170]  ? mnt_get_write_access+0x223/0x2a0
[  232.931422][T10170]  filename_setxattr+0x274/0x600
[  232.931445][T10170]  ? __pfx_filename_setxattr+0x10/0x10
[  232.931466][T10170]  ? getname_flags+0x1e5/0x540
[  232.931480][T10170]  path_setxattrat+0x364/0x3a0
[  232.931499][T10170]  ? __pfx_path_setxattrat+0x10/0x10
[  232.931513][T10170]  ? do_futex+0x395/0x420
[  232.931539][T10170]  ? rcu_is_watching+0x15/0xb0
[  232.931554][T10170]  __x64_sys_setxattr+0xbc/0xe0
[  232.931568][T10170]  do_syscall_64+0xfa/0x3b0
[  232.931587][T10170]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.931604][T10170]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.931617][T10170]  ? exc_page_fault+0x9f/0xf0
[  232.931632][T10170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.931644][T10170] RIP: 0033:0x7fdacad8ebe9
[  232.931658][T10170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.931673][T10170] RSP: 002b:00007fdac8ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  232.931689][T10170] RAX: ffffffffffffffda RBX: 00007fdacafb5fa0 RCX: 00007fdacad8ebe9
[  232.931700][T10170] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000240
[  232.931709][T10170] RBP: 00007fdacae11e19 R08: 0000000000000000 R09: 0000000000000000
[  232.931717][T10170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.931725][T10170] R13: 00007fdacafb6038 R14: 00007fdacafb5fa0 R15: 00007ffd1929f048
[  232.931739][T10170]  </TASK>
[  233.142677][ T5909] usb 1-1: config 0 descriptor??
[  233.168104][ T9882] ocfs2: Unmounting device (7,4) on (node local)
[  233.351178][ T5909] input: USB Synaptics Device 06cb:0003 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input17
[  233.552805][ T8100] usb 1-1: USB disconnect, device number 36
[  233.552888][    C1] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19

VM DIAGNOSIS:
09:57:46  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001412 RDI=0000000000001413 RBP=00000000000003f8 RSP=ffffc90008b4e4b0
R8 =ffff888107080237 R9 =1ffff11020e10046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98c8 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdac8ff66c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2e423ffc CR3=0000000041a4c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fdacae12e53
XMM06=0000000000000000 00007fdacae12e4d XMM07=0000000000000000 00007fdacae12e61
XMM08=0000000000000000 00007fdacae12ee7 XMM09=0000000000000000 00007fdacae12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffffff822a9f69 RCX=c2ba1270a23eca00 RDX=0000000000000000
RSI=ffffffff8be333e0 RDI=ffffea000470d500 RBP=0000000000000013 RSP=ffffc900078b76c8
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff940008e1aa1
R12=ffffea000470d500 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88813fff7400
RIP=ffffffff822a8760 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f08900986c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055f8f8b017e8 CR3=000000011e3f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=74d6a874aa46ffff 000020fff773ffeb XMM03=0880041080908210 0000040480040e01
XMM04=0000000000000000 0000000000000000 XMM05=0000555594ee1daa 0000555594ee1cb0
XMM06=0000000000000000 0000000000000000 XMM07=fffffffffffffffb 0804800300736f64
XMM08=736d01ffffffffff fffffff3083d8003 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
