last executing test programs:

2m59.980899274s ago: executing program 2 (id=95):
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_PEC(r0, 0x708, 0x24000000000000)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0x3, 0x4, &(0x7f00000000c0)={0xf, "90f54155ec4f61909103707809000000000000003cb5e52829ff0f00"}})

2m59.777001631s ago: executing program 2 (id=97):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0)
ioctl$SIOCGSKNS(r0, 0x894c, 0x0)

2m59.433044513s ago: executing program 2 (id=99):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001b80)=""/4110, 0x100e}, {0x0}], 0x2, 0x1, 0xd55)

2m57.760197391s ago: executing program 2 (id=106):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$eJzs282O0lAYxvGnlALi99fGlYkL3QiKbtzJBXgD7ghUQixqxA3ExHgpcyfcydwAJDO7WU0nLWUCpMBpOzOF4f9LgDc5fc45JD1wzqICcLAehe+WLDlh5fv+v5eSvn6RVMx5cgCula9zH8Chsk/yngGAfEybdrgPGFvS8enf9iR6OYb7h2mzMCsqkhbyJdP8fyv8fFGUJgv5ctTl1v3L0Sz/Wsv5OwnHr67kq1ty1mV+9v3fvFrO35V0T9J9SQ8kPYzOWo8lPYkZv7My/nPD+QNZBHdfLWs+QwfB6vnW89x3cY329rwT5d/HNy/8hIxjLyhF+YbhfNflP6TMl6N8rf3T68S0F1L2C5go5Lz+benMX13/n83zxc3rH8AGg+Hoe8vz3N8JCicsylEPCeLB5QnHosijqMQ0OSnvlp0ugr+vHZiGaTFftTc5FoDbqv6n/6s+GI7e9vqtrtt1fzQ+fpofu8NzeX3t6RzAnlvenAMAAAAAAAAAAAAAgH30VNKzNEHTB/wAAAAA7IyrfWbIkRT/2B8AAAAAAAAAAAAAAAAAAACA7C4CAAD//3Y4Qng=")
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})

2m56.805435254s ago: executing program 2 (id=113):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x1}, 0x94)

2m56.005442792s ago: executing program 2 (id=118):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2m55.503170559s ago: executing program 32 (id=118):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m51.091113907s ago: executing program 0 (id=696):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000086a050e0100000000000109022400010000c00509040021c1030004000921d811280122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002207000000a0b057"], 0x0}, 0x0)

1m48.949212671s ago: executing program 0 (id=713):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})

1m47.999558114s ago: executing program 0 (id=723):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x25, 0x1c, 0x4, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x4, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x8}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

1m47.884266048s ago: executing program 0 (id=726):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})

1m47.467753782s ago: executing program 0 (id=722):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x1}, 0x94)

1m46.997424059s ago: executing program 0 (id=728):
unshare(0x40400)
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xe73a}, 0x1c)

1m46.565125294s ago: executing program 33 (id=728):
unshare(0x40400)
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xe73a}, 0x1c)

1m8.597453718s ago: executing program 5 (id=1014):
r0 = timerfd_create(0x0, 0x80800)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timerfd_gettime(r0, &(0x7f0000000000))

1m8.349558186s ago: executing program 5 (id=1016):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000010085000000860000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000002d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc)

1m8.149355743s ago: executing program 5 (id=1017):
creat(&(0x7f00000002c0)='./file0\x00', 0x32)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r0], 0xb8}}, 0x2)

1m7.93685401s ago: executing program 5 (id=1018):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=0x0], 0x1, 0x189, &(0x7f00000027c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x141020, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m7.199599445s ago: executing program 5 (id=1022):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = dup2(r0, r0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10)

1m6.265212768s ago: executing program 5 (id=1027):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)

1m5.931417019s ago: executing program 34 (id=1027):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)

2.91378022s ago: executing program 3 (id=1541):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f00000007c0)=@phonet={0x23, 0x9, 0x9, 0x5}, 0x80, 0x0}, 0x24000000)

2.727512776s ago: executing program 3 (id=1544):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000006c0)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20)

2.540845452s ago: executing program 4 (id=1547):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10)
modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48)

2.3173773s ago: executing program 4 (id=1549):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x2)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x52d9, 0x81, 0x0})

2.221474674s ago: executing program 3 (id=1551):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0xffffffff, "89e5422911b5280686e57061720d98334ff03f2df01aceb1065e4907e5009617", <r1=>0xffffffffffffffff})
poll(&(0x7f0000000140)=[{r1, 0x400}], 0x1, 0xc)

2.105619907s ago: executing program 4 (id=1553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x11b43}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

1.869757306s ago: executing program 3 (id=1557):
io_setup(0x1, &(0x7f0000002500)=<r0=>0x0)
r1 = memfd_create(&(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa', 0x4)
io_submit(r0, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r1, 0x0, 0x0, 0x40, 0x0, 0x2}])

1.860709026s ago: executing program 1 (id=1558):
r0 = socket(0x80000000000000a, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1, 0x2}, 0x1c)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000580)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x8)

1.677439932s ago: executing program 1 (id=1559):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2e0, &(0x7f0000000640)="$eJzs3T9rE2EYAPAnf5qmRWxncQi46FLU2SVIBTFQqGRQFwNVkFaEdImCkK/gIn4AJz+Sgx+iU8EhcrmzSZPUQrnexfb3g2ufu6d98+S43nvD+zSvb7/f3/tw+Hb081s0m62oRzPiOGIzqlGLVCX50vwbN2LasHZqN1YDAFh2u7u99lm5YbGlkIv63JF+v91bWfhs1v1RUFEAAAAAAAAAAADkbH79fwwXrv+PiOrp9f/jYDjTDwAALL9/rf/nauj327319PltplvT+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgPPUYbYxGo3s30t0knmyN2Ci7PgAgf8fT8/3J9nuUMf8DwBW0eP6fbGXXBwDkb2r+jzhn/q+VVyYAkKPnL14+a3c627utVjPiaDjoDrrp9zT/5Gln+35rbDMiqunRo8GgWzvJP0jzrcmoSX4l1rP8w4X5Rty9k+aT3OOdzkx+NfaKOQUAAAAAAAAAAAAAAAAAAABQuq1xG38lIu3vz0z6+7e2dr7+enfS/z+VT6Ps/wNUY6a///P3etyqp3vVM199Ned3AwAAAAAAAAAAAAAAAAAAAP+nw4+f9nsHB2/6xQSViMh35FpEjIN6dqSW+0tMBZc3chI0YxxUYi7ViIgLj5yc9MWpJHPRmr+kQcRFfv3Rq4hzf7iyvxZzqbXiL9rLDdayv8RlqedmdrWcdcdoFHdzAgAAAAAAAAAAAAAAAACAa2bS/Vt2JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQnsnn/19eUPZ7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6HPwEAAP//GQR1Iw==")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x4, 0x0, 0x1, 0x0, 0x0)

1.652924153s ago: executing program 3 (id=1560):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0xfffffffd, 0x1000, {0x7}}, 0x14}}, 0x890)

1.637760073s ago: executing program 6 (id=1561):
r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0)
fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x0)
fsetxattr(r0, &(0x7f0000000300)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x0)

1.636478503s ago: executing program 4 (id=1562):
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8, @ANYBLOB="000826bd0800ff"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40001)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$sequencer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="9401a3e18f5176e29401"], 0x24)

1.44449919s ago: executing program 3 (id=1563):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x4, "355680af"}, @local=@item_4={0x3, 0x2, 0xa, "3ef068f7"}, @global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0)

1.44394818s ago: executing program 6 (id=1564):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

1.391094702s ago: executing program 4 (id=1565):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000010900010073797a310000000064000480500001800a0001006c696d6974000000400002800c00024000000000000000d60c000140000000000000000e08000340000000000c000140000000000000000908000440000000016a00044000000001100001800a000100696e6e65720000000900020073797a32"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

1.390149252s ago: executing program 1 (id=1566):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0x10, 0x2}, {0x1, 0x3}}}, 0x24}}, 0x0)

1.251907977s ago: executing program 6 (id=1567):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x106, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @local}, {0xa, 0x4e20, 0x2, @empty, 0x3}, r1, 0x3}}, 0x48)

1.18162562s ago: executing program 1 (id=1568):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000)

1.18099903s ago: executing program 4 (id=1569):
syz_mount_image$ocfs2(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x880, &(0x7f0000000280)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4454, &(0x7f000000cd80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xbc)
fsync(r0)

1.089997513s ago: executing program 6 (id=1570):
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{0xa, 0x0, 0x20102, @mcast1, 0xfffff415}, {0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x1, 0xfffffef9, 0x4000000, 0x1, 0x9]}}, 0x5c)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)

1.078737463s ago: executing program 1 (id=1571):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10)
modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48)

957.390667ms ago: executing program 6 (id=1572):
r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==")
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480))
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

914.779258ms ago: executing program 1 (id=1573):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f00000002c0)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@fatal_errors_bug}, {@autodefrag}, {@flushoncommit}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f00000000c0)={&(0x7f0000000240)=[{&(0x7f0000000140)="d0a4", 0x2}], 0x1, 0xfffffffffffffff4, 0x0, 0xd4, 0x8, 0xbe7, 0x4})

0s ago: executing program 6 (id=1574):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xd2, &(0x7f0000000040)=""/210}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc60100005000a000200053582c137153e37000c0180fc0b1000f80b", 0x33fe0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.302186][ T7925] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.776: bad inode number: 15
[  173.334970][ T7925] EXT4-fs (loop4): Remounting filesystem read-only
[  173.394249][ T6133] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.476248][ T4489] team0 (unregistering): Port device team_slave_1 removed
[  173.656319][ T7936] loop4: detected capacity change from 0 to 1024
[  173.689914][ T4489] team0 (unregistering): Port device team_slave_0 removed
[  173.817030][ T1320] hfsplus: b-tree write err: -5, ino 25
[  173.838033][ T1320] hfsplus: b-tree write err: -5, ino 4
[  173.846978][ T1320] hfsplus: b-tree write err: -5, ino 2
[  173.853900][ T4489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.002860][ T5782] Bluetooth: hci2: command tx timeout
[  174.015676][ T4489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.389276][ T7940] loop3: detected capacity change from 0 to 32768
[  174.501043][ T7940] JFS: metapage_get_blocks failed
[  174.508837][ T7940] ERROR: (device loop3): release_metapage: metapage_write_one() failed
[  174.508837][ T7940] 
[  174.571136][ T7940] ERROR: (device loop3): remounting filesystem as read-only
[  174.657248][  T112] blkno = 5002c, nblocks = 1
[  174.661934][  T112] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  174.661934][  T112] 
[  174.823864][ T4489] bond0 (unregistering): Released all slaves
[  174.966694][ T7806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.177175][ T7806] team0: Port device team_slave_0 added
[  175.195477][ T7948] loop3: detected capacity change from 0 to 128
[  175.221698][ T7806] team0: Port device team_slave_1 added
[  175.228752][ T7948] VFS: Found a Xenix FS (block size = 1024) on device loop3
[  175.390265][ T5771] sysv_free_block: flc_count > flc_size
[  175.397985][ T5771] sysv_free_block: flc_count > flc_size
[  175.443467][ T5771] sysv_free_block: flc_count > flc_size
[  175.453608][ T5771] sysv_free_block: flc_count > flc_size
[  175.459484][ T5771] sysv_free_block: flc_count > flc_size
[  175.461426][ T7806] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.486112][ T5771] sysv_free_block: flc_count > flc_size
[  175.497232][ T7806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.503275][ T5771] sysv_free_block: flc_count > flc_size
[  175.553526][ T7806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.555329][ T5771] sysv_free_block: flc_count > flc_size
[  175.572691][ T5771] sysv_free_block: flc_count > flc_size
[  175.578632][ T5771] sysv_free_block: flc_count > flc_size
[  175.586921][ T7806] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.597247][ T5771] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  175.600560][ T7806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.651742][ T7806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.848456][ T7806] hsr_slave_0: entered promiscuous mode
[  175.856567][ T7806] hsr_slave_1: entered promiscuous mode
[  175.978358][ T7966] [U] 	
[  176.073468][ T5782] Bluetooth: hci2: command tx timeout
[  176.662131][ T7806] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  176.690550][ T7982] loop1: detected capacity change from 0 to 2048
[  176.732241][ T7806] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  176.779334][ T7982] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27485, location=27485
[  176.808619][ T7806] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  176.845139][ T7982] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.882127][ T7806] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  177.296613][ T7806] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.352138][ T7806] 8021q: adding VLAN 0 to HW filter on device team0
[  177.369951][ T8003] loop4: detected capacity change from 0 to 128
[  177.410826][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.418807][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.480502][ T5789] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  177.520062][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.527803][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.709913][ T7806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  178.014034][ T8023] TCP: TCP_TX_DELAY enabled
[  178.281673][ T8037] loop1: detected capacity change from 0 to 512
[  178.352941][ T7806] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.374469][ T8037] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  178.432922][ T8037] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  178.483517][ T8037] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  178.540157][ T8037] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  178.607495][ T8037] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  178.664302][ T8037] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8802c198, mo2=0000]
[  178.674671][ T8037] EXT4-fs (loop1): orphan cleanup on readonly fs
[  178.684514][ T8037] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #4: comm syz.1.810: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  178.711999][ T8037] EXT4-fs error (device loop1): ext4_quota_enable:7143: comm syz.1.810: Bad quota inode: 4, type: 1
[  178.756310][ T8037] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  178.836019][ T8037] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  178.864012][ T8037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  179.018218][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.322789][ T8068] loop1: detected capacity change from 0 to 2048
[  179.392739][ T8068] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  179.425539][ T8068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.425984][ T7806] veth0_vlan: entered promiscuous mode
[  179.531324][ T7806] veth1_vlan: entered promiscuous mode
[  179.618316][ T8051] loop4: detected capacity change from 0 to 32768
[  179.659464][ T8051] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.814 (8051)
[  179.675220][ T7806] veth0_macvtap: entered promiscuous mode
[  179.734174][ T7806] veth1_macvtap: entered promiscuous mode
[  179.767634][ T8051] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  179.810486][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.822515][ T8051] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  179.837682][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.848602][ T8051] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  179.859273][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.883170][ T8051] BTRFS info (device loop4): use zstd compression, level 3
[  179.890545][ T8051] BTRFS info (device loop4): using free space tree
[  179.897852][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.913485][ T5833] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  179.917661][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.935933][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.947370][ T7806] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.005617][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.057007][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.077288][ T8051] BTRFS info (device loop4): enabling ssd optimizations
[  180.113286][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.117816][ T8051] BTRFS info (device loop4): auto enabling async discard
[  180.140944][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.166534][ T5833] usb 2-1: Using ep0 maxpacket: 16
[  180.178632][ T5833] usb 2-1: config index 0 descriptor too short (expected 51443, got 18)
[  180.182065][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.208965][ T5833] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  180.228924][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.239727][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.239755][ T5833] usb 2-1: Product: syz
[  180.239769][ T5833] usb 2-1: Manufacturer: syz
[  180.239781][ T5833] usb 2-1: SerialNumber: syz
[  180.281199][ T5833] r8152-cfgselector 2-1: config 0 descriptor??
[  180.333531][ T7806] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.359682][ T7806] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.370364][ T7806] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.413285][ T7806] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.440249][ T7806] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.479590][ T6133] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  180.577738][ T5833] r8152-cfgselector 2-1: Needed 1 retries to read version
[  180.589647][ T5833] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  180.680632][   T12] usb 2-1: config 0 descriptor??
[  180.698628][ T5902] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop4 scanned by udevd (5902)
[  180.765250][ T4489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.827458][ T4489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.861731][ T5833] usb 2-1: USB disconnect, device number 5
[  180.871263][   T12] usb 2-1: can't set config #0, error -71
[  180.993938][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.002438][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.387321][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  181.584672][    T9] usb 4-1: Using ep0 maxpacket: 32
[  181.610419][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.634423][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.832'.
[  181.650232][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  181.673476][ T5760] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  181.682250][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.712134][    T9] usb 4-1: config 0 descriptor??
[  181.729820][    T9] hub 4-1:0.0: bad descriptor, ignoring hub
[  181.750669][    T9] hub: probe of 4-1:0.0 failed with error -5
[  181.775189][ T8134] loop5: detected capacity change from 0 to 4096
[  181.807762][ T8134] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  181.874371][ T5760] usb 5-1: Using ep0 maxpacket: 32
[  181.898755][ T5760] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  181.924977][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.949480][ T5760] usb 5-1: Product: syz
[  181.970145][ T5760] usb 5-1: Manufacturer: syz
[  181.994102][ T5760] usb 5-1: SerialNumber: syz
[  182.034869][ T5760] usb 5-1: config 0 descriptor??
[  182.052600][ T5760] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  182.089415][ T5760] dvb-usb: bulk message failed: -22 (2/0)
[  182.099731][ T8134] ntfs3: loop5: failed to convert "c46c" to cp1255
[  182.147467][ T5760] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  182.191477][ T5760] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  182.225519][ T5760] usb 5-1: media controller created
[  182.284673][ T8128] dvb-usb: bulk message failed: -22 (3/0)
[  182.308201][ T5760] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  182.318592][ T5780] usb 4-1: reset high-speed USB device number 11 using dummy_hcd
[  182.447428][ T5760] usb 5-1: selecting invalid altsetting 7
[  182.455945][ T8146] loop1: detected capacity change from 0 to 2048
[  182.475645][ T5760] cxusb: set interface failed
[  182.505074][ T5760] dvb-usb: bulk message failed: -22 (1/0)
[  182.603912][ T8146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  182.745514][ T8146] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #12: comm syz.1.836: corrupted in-inode xattr: invalid size in ea xattr
[  182.768721][ T5760] DVB: Unable to find symbol lgdt330x_attach()
[  182.798529][ T5760] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  182.894518][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  182.973716][ T5780] usb 4-1: USB disconnect, device number 11
[  183.093437][ T5760] rc_core: IR keymap rc-dvico-portable not found
[  183.119260][ T5760] Registered IR keymap rc-empty
[  183.142244][ T5760] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  183.201339][ T5760] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input9
[  183.228276][ T5760] dvb-usb: schedule remote query interval to 100 msecs.
[  183.242757][ T5760] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  183.269529][ T5760] usb 5-1: USB disconnect, device number 7
[  183.350224][   T27] dvb-usb: bulk message failed: -22 (1/0)
[  183.611340][ T5760] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  184.459471][ T8211] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  184.682371][ T8215] loop3: detected capacity change from 0 to 512
[  184.770520][ T8215] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  184.793393][ T8215] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  184.810358][ T8199] loop5: detected capacity change from 0 to 32768
[  184.817657][ T8215] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  184.881761][ T8215] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  184.918347][ T8215] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  184.972166][ T8215] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8802c198, mo2=0000]
[  185.003558][ T8215] EXT4-fs (loop3): orphan cleanup on readonly fs
[  185.010333][ T8215] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #4: comm syz.3.854: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  185.077869][ T8215] EXT4-fs error (device loop3): ext4_quota_enable:7143: comm syz.3.854: Bad quota inode: 4, type: 1
[  185.101170][ T8215] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  185.144070][ T8215] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  185.152601][ T8215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  185.390711][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.886942][ T8244] loop1: detected capacity change from 0 to 128
[  185.930656][ T8244] FAT-fs (loop1): Directory bread(block 524322) failed
[  185.947994][ T8244] FAT-fs (loop1): Directory bread(block 524323) failed
[  185.976179][ T8244] FAT-fs (loop1): Directory bread(block 524324) failed
[  185.998838][ T8239] loop3: detected capacity change from 0 to 8192
[  186.013491][ T8244] FAT-fs (loop1): Directory bread(block 524325) failed
[  186.020424][ T8244] FAT-fs (loop1): Directory bread(block 524326) failed
[  186.069419][ T8244] FAT-fs (loop1): Directory bread(block 524327) failed
[  186.079022][ T8244] FAT-fs (loop1): Directory bread(block 524328) failed
[  186.087559][ T8244] FAT-fs (loop1): Directory bread(block 524329) failed
[  186.095144][ T8239] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  186.117515][ T8244] FAT-fs (loop1): Directory bread(block 524322) failed
[  186.126784][ T8244] FAT-fs (loop1): Directory bread(block 524323) failed
[  186.161745][ T8239] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  186.194207][ T8239] REISERFS (device loop3): using ordered data mode
[  186.200864][ T8239] reiserfs: using flush barriers
[  186.263930][ T8239] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  186.361943][ T8239] REISERFS (device loop3): checking transaction log (loop3)
[  186.399078][ T8255] loop5: detected capacity change from 0 to 512
[  186.423783][ T8239] REISERFS (device loop3): Using r5 hash to sort names
[  186.448551][ T8239] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  186.474287][ T8255] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  186.493428][ T8255] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  186.512811][ T8239] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  186.563309][ T8255] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  186.618330][ T8255] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  186.662067][ T8239] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  186.698870][ T8255] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  186.734411][ T8255] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8802c198, mo2=0000]
[  186.742794][ T8255] EXT4-fs (loop5): orphan cleanup on readonly fs
[  186.771535][ T8239] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  186.773780][ T8255] EXT4-fs error (device loop5): ext4_ext_check_inode:530: inode #4: comm syz.5.867: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  186.836024][ T8239] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  186.866849][ T8255] EXT4-fs error (device loop5): ext4_quota_enable:7143: comm syz.5.867: Bad quota inode: 4, type: 1
[  186.908326][ T8255] EXT4-fs warning (device loop5): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  186.957210][ T8255] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  187.018381][ T8255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  187.132365][ T8249] loop4: detected capacity change from 0 to 32768
[  187.165640][ T8249] 
[  187.165640][ T8249]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  187.165640][ T8249] 
[  187.260486][ T7806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.287437][ T8249] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt
[  187.287437][ T8249] 
[  187.312270][ T8270] loop3: detected capacity change from 0 to 2048
[  187.350720][ T8249] xtLookup: xtSearch returned -5
[  187.391760][ T8249] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt
[  187.391760][ T8249] 
[  187.419634][ T8271] loop1: detected capacity change from 0 to 1024
[  187.423041][ T8270] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  187.475287][ T8271] EXT4-fs: Ignoring removed nobh option
[  187.502416][ T8249] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt
[  187.502416][ T8249] 
[  187.521272][ T8270] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.542007][ T8271] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869)
[  187.578809][ T8249] xtLookup: xtSearch returned -5
[  187.583541][ T8271] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  187.608977][ T8249] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt
[  187.608977][ T8249] 
[  187.636786][ T8271] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  187.836545][ T1320] 
[  187.836545][ T1320]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  187.836545][ T1320] 
[  187.879586][ T1320] 
[  187.879586][ T1320]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  187.879586][ T1320] 
[  187.913767][ T6133] 
[  187.913767][ T6133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  187.913767][ T6133] 
[  187.954554][  T112] 
[  187.954554][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  187.954554][  T112] 
[  188.000838][ T6133] 
[  188.000838][ T6133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  188.000838][ T6133] 
[  188.172695][ T8288] loop1: detected capacity change from 0 to 64
[  189.084098][ T8291] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  189.174339][ T8326] loop1: detected capacity change from 0 to 1024
[  189.282667][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'.
[  189.309111][ T1028] hfsplus: b-tree write err: -5, ino 25
[  189.322385][ T1028] hfsplus: b-tree write err: -5, ino 4
[  189.331366][ T1028] hfsplus: b-tree write err: -5, ino 2
[  189.368849][ T1028] hfsplus: b-tree write err: -5, ino 26
[  189.910159][ T8348] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  189.965189][ T8348] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  190.172058][ T8350] loop5: detected capacity change from 0 to 4096
[  190.214849][ T8350] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  190.322818][ T8350] ntfs: volume version 3.1.
[  191.193242][ T5776] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  191.203679][ T8362] loop1: detected capacity change from 0 to 32768
[  191.222739][ T8362] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  191.232012][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  191.267969][ T8362] XFS (loop1): Ending clean mount
[  191.404254][ T5776] usb 4-1: Using ep0 maxpacket: 32
[  191.413471][    T9] usb 6-1: Using ep0 maxpacket: 16
[  191.419601][ T5776] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  191.430928][    T9] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  191.438242][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.448888][    T9] usb 6-1: config 0 has no interface number 0
[  191.461686][    T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  191.474474][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  191.483999][ T5776] usb 4-1: Product: syz
[  191.484023][ T5776] usb 4-1: Manufacturer: syz
[  191.484039][ T5776] usb 4-1: SerialNumber: syz
[  191.494118][ T5776] usb 4-1: config 0 descriptor??
[  191.508297][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.519903][    T9] usb 6-1: Product: syz
[  191.526085][    T9] usb 6-1: Manufacturer: syz
[  191.531515][    T9] usb 6-1: SerialNumber: syz
[  191.540425][    T9] usb 6-1: config 0 descriptor??
[  191.570533][    T9] hub 6-1:0.132: bad descriptor, ignoring hub
[  191.581483][ T5776] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  191.583258][    T9] hub: probe of 6-1:0.132 failed with error -5
[  191.596442][ T5776] dvb-usb: bulk message failed: -22 (2/0)
[  191.608663][ T5776] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  191.618866][ T5776] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  191.635759][ T5776] usb 4-1: media controller created
[  191.659795][    T9] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input10
[  191.695143][ T5776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  191.824539][ T8366] dvb-usb: bulk message failed: -22 (3/0)
[  191.931904][ T5776] usb 4-1: selecting invalid altsetting 7
[  191.953255][ T5776] cxusb: set interface failed
[  191.969211][ T5776] dvb-usb: bulk message failed: -22 (1/0)
[  192.070143][ T5776] DVB: Unable to find symbol lgdt330x_attach()
[  192.091968][ T5776] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  192.230613][   T28] audit: type=1326 audit(1775130977.925:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1def9c819 code=0x7ffc0000
[  192.263522][ T5776] rc_core: IR keymap rc-dvico-portable not found
[  192.277669][ T5776] Registered IR keymap rc-empty
[  192.286665][   T28] audit: type=1326 audit(1775130977.925:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1def9c819 code=0x7ffc0000
[  192.289414][ T5776] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  192.358244][   T28] audit: type=1326 audit(1775130977.935:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa1def9c819 code=0x7ffc0000
[  192.359359][ T5776] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input11
[  192.382686][   T28] audit: type=1326 audit(1775130977.935:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1def9c819 code=0x7ffc0000
[  192.427619][ T5776] dvb-usb: schedule remote query interval to 100 msecs.
[  192.458181][ T5776] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  192.500652][ T5776] usb 4-1: USB disconnect, device number 12
[  192.563184][ T3389] dvb-usb: bulk message failed: -22 (1/0)
[  192.563673][   T28] audit: type=1326 audit(1775130977.935:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1def9c819 code=0x7ffc0000
[  192.610840][   T28] audit: type=1326 audit(1775130977.935:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fa1def9c819 code=0x7ffc0000
[  192.641429][   T28] audit: type=1326 audit(1775130977.935:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1def9c819 code=0x7ffc0000
[  192.712022][ T5776] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  192.923395][ T8401] loop4: detected capacity change from 0 to 32768
[  192.992737][ T8401] 
[  192.992737][ T8401]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.992737][ T8401] 
[  193.040203][ T8401] 
[  193.040203][ T8401]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  193.040203][ T8401] 
[  193.077320][ T8401] 
[  193.077320][ T8401]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  193.077320][ T8401] 
[  193.137569][ T8401] 
[  193.137569][ T8401]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  193.137569][ T8401] 
[  193.165189][ T8401] 
[  193.165189][ T8401]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  193.165189][ T8401] 
[  193.249730][  T113] 
[  193.249730][  T113]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  193.249730][  T113] 
[  193.272043][ T8411] 
[  193.272043][ T8411]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  193.272043][ T8411] 
[  193.287402][ T8411] 
[  193.287402][ T8411]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  193.287402][ T8411] 
[  193.299666][ T8411] 
[  193.299666][ T8411]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  193.299666][ T8411] 
[  193.311384][ T8411] 
[  193.311384][ T8411]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  193.311384][ T8411] 
[  193.322794][ T8414] loop5: detected capacity change from 0 to 8192
[  193.342151][ T8411] 
[  193.342151][ T8411]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  193.342151][ T8411] 
[  193.362479][ T8411] 
[  193.362479][ T8411]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  193.362479][ T8411] 
[  193.384768][  T113] 
[  193.384768][  T113]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  193.384768][  T113] 
[  193.448972][ T6133] 
[  193.448972][ T6133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  193.448972][ T6133] 
[  193.494372][ T6133] 
[  193.494372][ T6133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  193.494372][ T6133] 
[  194.151962][ T8438] loop4: detected capacity change from 0 to 512
[  194.229950][ T8438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.244172][ T8438] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.305109][ T6133] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.334830][ T8440] [U] 	
[  194.452294][ T8447] loop4: detected capacity change from 0 to 128
[  194.495414][ T8447] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  194.519097][ T8447] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  194.553896][ T8424] loop3: detected capacity change from 0 to 32768
[  194.572385][ T8424] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.928 (8424)
[  194.612026][ T8424] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  194.648240][ T8424] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  194.683848][ T8424] BTRFS info (device loop3): force clearing of disk cache
[  194.691173][ T8424] BTRFS info (device loop3): enabling disk space caching
[  194.722492][ T8424] BTRFS info (device loop3): turning on sync discard
[  194.749274][ T8424] BTRFS info (device loop3): disabling tree log
[  194.762225][ T8424] BTRFS info (device loop3): metadata ratio 5
[  194.783496][ T5780] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  194.786010][ T8424] BTRFS info (device loop3): disk space caching is enabled
[  194.983322][ T5780] usb 2-1: Using ep0 maxpacket: 32
[  194.990505][ T5780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.022036][ T5780] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  195.033315][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.051667][ T8424] BTRFS info (device loop3): enabling ssd optimizations
[  195.051890][ T5780] usb 2-1: config 0 descriptor??
[  195.075965][ T5780] hub 2-1:0.0: bad descriptor, ignoring hub
[  195.088845][ T5780] hub: probe of 2-1:0.0 failed with error -5
[  195.104552][ T8424] BTRFS info (device loop3): rebuilding free space tree
[  195.180624][ T8424] BTRFS info (device loop3): disabling free space tree
[  195.211293][ T8424] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  195.226149][ T8424] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  195.289924][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  195.296947][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  195.411724][ T5771] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  195.837922][ T5780] usb 2-1: reset high-speed USB device number 6 using dummy_hcd
[  196.142855][ T8496] loop5: detected capacity change from 0 to 4096
[  196.229720][ T8501] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  196.242436][ T8483] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  196.383717][ T5776] usb 2-1: USB disconnect, device number 6
[  196.581455][ T8511] loop5: detected capacity change from 0 to 1024
[  196.660758][   T27] usb 6-1: USB disconnect, device number 2
[  196.688303][   T33] hfsplus: b-tree write err: -5, ino 25
[  196.720764][   T33] hfsplus: b-tree write err: -5, ino 4
[  196.730918][   T33] hfsplus: b-tree write err: -5, ino 2
[  196.765022][ T8509] loop3: detected capacity change from 0 to 8192
[  197.353379][ T5788] Bluetooth: hci1: command 0x0406 tx timeout
[  197.389512][ T8536] smc: net device bond0 applied user defined pnetid SYZ0
[  197.523502][ T5776] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  197.598171][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'.
[  197.723192][ T5776] usb 5-1: Using ep0 maxpacket: 16
[  197.744805][ T5776] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  197.758364][ T5776] usb 5-1: config 0 has no interface number 0
[  197.773278][   T27] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  197.794924][ T5776] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  197.813177][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.831945][ T5776] usb 5-1: Product: syz
[  197.842151][ T5776] usb 5-1: Manufacturer: syz
[  197.847556][ T5776] usb 5-1: SerialNumber: syz
[  197.860900][ T8548] loop1: detected capacity change from 0 to 8192
[  197.870218][ T5776] usb 5-1: config 0 descriptor??
[  197.881243][ T5776] hub 5-1:0.132: bad descriptor, ignoring hub
[  197.907597][ T5776] hub: probe of 5-1:0.132 failed with error -5
[  197.928812][ T5776] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input12
[  197.983369][   T27] usb 6-1: Using ep0 maxpacket: 32
[  198.002565][   T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.044925][   T27] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  198.103398][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.129948][   T27] usb 6-1: config 0 descriptor??
[  198.151539][   T27] hub 6-1:0.0: bad descriptor, ignoring hub
[  198.163419][   T27] hub: probe of 6-1:0.0 failed with error -5
[  198.711523][ T5776] usb 6-1: reset high-speed USB device number 3 using dummy_hcd
[  199.243437][   T27] usb 6-1: USB disconnect, device number 3
[  199.329707][ T8605] loop1: detected capacity change from 0 to 256
[  200.110711][ T8606] loop3: detected capacity change from 0 to 32768
[  200.217454][ T8606] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  200.446764][ T8645] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.988'.
[  200.542723][ T8649] loop5: detected capacity change from 0 to 1024
[  200.564720][ T8606] XFS (loop3): Ending clean mount
[  200.867454][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  201.091158][ T8657] loop5: detected capacity change from 0 to 4096
[  201.126762][ T8657] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  201.157094][ T8630] loop4: detected capacity change from 0 to 32768
[  201.263339][ T8630] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.985 (8630)
[  201.324260][ T8630] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  201.336312][ T8657] ntfs: volume version 3.1.
[  201.364725][ T8630] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  201.433994][ T8630] BTRFS info (device loop4): using free space tree
[  201.549484][ T8657] overlayfs: failed to resolve './bus': -2
[  201.630067][ T8657] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  201.672101][ T8630] BTRFS info (device loop4): enabling ssd optimizations
[  201.733481][ T8630] BTRFS info (device loop4): auto enabling async discard
[  201.743205][ T8657] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  201.982927][ T6133] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  202.256121][ T8655] loop1: detected capacity change from 0 to 40427
[  202.337654][ T8697] loop3: detected capacity change from 0 to 2048
[  202.356964][ T8655] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  202.379476][ T8655] F2FS-fs (loop1): Image doesn't support compression
[  202.413040][ T8655] F2FS-fs (loop1): Image doesn't support compression
[  202.455392][ T8697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.479582][ T8655] F2FS-fs (loop1): invalid crc value
[  202.626557][ T8655] F2FS-fs (loop1): Found nat_bits in checkpoint
[  202.679431][ T8697] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  202.743642][ T5760] usb 5-1: USB disconnect, device number 8
[  202.799161][ T8697] overlayfs: failed to verify origin (/, ino=2, err=-28)
[  202.823254][ T8697] overlayfs: failed to verify upper root origin
[  202.998332][ T8655] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  203.088191][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.274179][ T5772] syz-executor: attempt to access beyond end of device
[  203.274179][ T5772] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.326736][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  203.820725][ T8737] loop3: detected capacity change from 0 to 1024
[  203.867969][ T8737] EXT4-fs: Ignoring removed bh option
[  203.947830][ T8737] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  204.016369][ T8737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.183449][ T8737] EXT4-fs error (device loop3): ext4_check_all_de:666: inode #12: block 7: comm syz.3.1009: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  204.281032][ T8733] loop5: detected capacity change from 0 to 32768
[  204.298377][ T8737] EXT4-fs (loop3): Remounting filesystem read-only
[  204.307275][ T8721] loop4: detected capacity change from 0 to 32768
[  204.413285][   T28] audit: type=1800 audit(1775130990.105:48): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1008" name="file1" dev="loop5" ino=4 res=0 errno=0
[  204.438166][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.618903][ T8778] loop5: detected capacity change from 0 to 64
[  205.734192][ T8778] overlayfs: upper fs needs to support d_type.
[  205.808515][ T8778] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  205.839248][ T8754] loop4: detected capacity change from 0 to 32768
[  205.842141][ T8778] overlayfs: failed to set xattr on upper
[  205.894897][ T8778] overlayfs: ...falling back to redirect_dir=nofollow.
[  205.950504][ T8778] overlayfs: ...falling back to index=off.
[  205.963511][ T8778] overlayfs: ...falling back to uuid=null.
[  205.963739][ T8754] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  206.185615][ T8752] loop1: detected capacity change from 0 to 40427
[  206.248183][ T7806] VFS: Lookup of '.¨' in minix loop5 would have caused loop
[  206.271174][ T8754] XFS (loop4): Ending clean mount
[  206.279922][ T8752] F2FS-fs (loop1): invalid crc value
[  206.286879][ T7806] VFS: Lookup of '.¨' in minix loop5 would have caused loop
[  206.303914][ T8752] F2FS-fs (loop1): Found nat_bits in checkpoint
[  206.306602][ T8754] XFS (loop4): Quotacheck needed: Please wait.
[  206.541122][ T8752] F2FS-fs (loop1): Start checkpoint disabled!
[  206.592926][ T8752] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  206.653425][ T8754] XFS (loop4): Quotacheck: Done.
[  206.898118][ T6133] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  207.032584][ T8807] loop1: detected capacity change from 0 to 512
[  207.075711][ T8807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  207.088628][ T8807] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.317624][   T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.334472][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  207.445550][   T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.570944][   T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.731461][   T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.181506][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  208.196285][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  208.207841][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  208.246927][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  208.271477][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  208.279339][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  208.385242][ T8827] loop1: detected capacity change from 0 to 4096
[  208.468685][ T8832] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  208.474987][ T8831] loop3: detected capacity change from 0 to 256
[  208.608575][ T8831] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd509bb81, utbl_chksum : 0xe619d30d)
[  209.162126][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'.
[  209.207458][ T8854] loop3: detected capacity change from 0 to 64
[  209.767737][ T8868] loop4: detected capacity change from 0 to 8192
[  209.796194][ T8868] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  209.834707][ T8826] chnl_net:caif_netlink_parms(): no params data found
[  209.843580][ T8868] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  209.857694][ T8868] REISERFS (device loop4): using ordered data mode
[  209.865054][ T8868] reiserfs: using flush barriers
[  209.876609][ T8868] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  209.906233][ T8868] REISERFS (device loop4): checking transaction log (loop4)
[  209.942962][ T8868] REISERFS (device loop4): Using r5 hash to sort names
[  209.957539][ T8868] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  210.183661][ T8877] loop3: detected capacity change from 0 to 1024
[  210.313505][ T5782] Bluetooth: hci2: command tx timeout
[  210.841245][ T8826] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.869394][ T8826] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.893843][ T8826] bridge_slave_0: entered allmulticast mode
[  210.914240][ T8826] bridge_slave_0: entered promiscuous mode
[  210.964800][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.971989][ T8826] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.023447][ T8826] bridge_slave_1: entered allmulticast mode
[  211.036332][ T8826] bridge_slave_1: entered promiscuous mode
[  211.100474][ T8880] loop1: detected capacity change from 0 to 32768
[  211.393883][   T49] hsr_slave_0: left promiscuous mode
[  211.471617][   T49] hsr_slave_1: left promiscuous mode
[  211.499608][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.532522][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.554139][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.562057][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.596787][   T49] bridge_slave_1: left allmulticast mode
[  211.621865][   T49] bridge_slave_1: left promiscuous mode
[  211.636935][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.687603][   T49] bridge_slave_0: left allmulticast mode
[  211.701648][   T49] bridge_slave_0: left promiscuous mode
[  211.716864][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.753996][ T5760] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  211.838070][   T49] veth1_macvtap: left promiscuous mode
[  211.846275][   T49] veth0_macvtap: left promiscuous mode
[  211.852691][   T49] veth1_vlan: left promiscuous mode
[  211.860982][   T49] veth0_vlan: left promiscuous mode
[  211.943575][ T5760] usb 5-1: Using ep0 maxpacket: 8
[  211.959234][ T5760] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  211.968414][ T5760] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  211.981823][ T5760] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  211.992309][ T5760] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  212.011317][ T5760] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  212.026582][ T5760] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  212.039078][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.062024][ T5760] usbtmc 5-1:16.0: bulk endpoints not found
[  212.328760][ T5831] usb 5-1: USB disconnect, device number 9
[  212.397046][ T5782] Bluetooth: hci2: command tx timeout
[  212.974080][ T5831] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  213.123845][   T49] team0 (unregistering): Port device team_slave_1 removed
[  213.192765][ T5831] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  213.202137][ T5831] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  213.212872][ T5831] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  213.216438][   T49] team0 (unregistering): Port device team_slave_0 removed
[  213.224226][ T5831] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  213.245067][ T5831] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=61.23
[  213.256182][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.295543][ T5831] usbtmc 5-1:16.0: bulk endpoints not found
[  213.309090][ T5831] ati_remote 5-1:16.0: ati_remote_probe: Unexpected endpoint_in
[  213.340806][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.421474][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.548129][ T5831] usb 5-1: USB disconnect, device number 10
[  214.076932][   T49] bond0 (unregistering): Released all slaves
[  214.250616][ T8826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.300139][ T8826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.450534][ T8826] team0: Port device team_slave_0 added
[  214.473947][ T5782] Bluetooth: hci2: command tx timeout
[  214.498326][ T8826] team0: Port device team_slave_1 added
[  214.532833][ T8826] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.540706][ T8826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.599972][ T8826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.646010][ T8826] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.673981][ T8826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.721997][ T8826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.926021][ T8826] hsr_slave_0: entered promiscuous mode
[  214.978146][ T8826] hsr_slave_1: entered promiscuous mode
[  215.352105][ T8927] loop3: detected capacity change from 0 to 32768
[  215.526823][ T8826] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  215.577939][ T8826] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  215.608520][ T8826] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  215.670789][ T8931] loop4: detected capacity change from 0 to 40427
[  215.690769][ T8826] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  215.720194][ T8931] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff
[  215.741852][ T8949] loop1: detected capacity change from 0 to 2048
[  215.767560][ T8931] F2FS-fs (loop4): invalid crc value
[  215.811517][ T8931] F2FS-fs (loop4): Found nat_bits in checkpoint
[  215.818882][ T8949] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  215.879112][ T8949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  216.024298][ T8949] UDF-fs: unknown compression code (0)
[  216.052149][ T8826] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.090874][ T8931] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  216.224332][ T8826] 8021q: adding VLAN 0 to HW filter on device team0
[  216.271085][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.280683][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.337428][ T6133] syz-executor: attempt to access beyond end of device
[  216.337428][ T6133] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  216.352827][ T6133] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  216.377043][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.386502][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.568060][ T5782] Bluetooth: hci2: command tx timeout
[  217.239710][ T8956] loop3: detected capacity change from 0 to 40427
[  217.282450][ T8826] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.301642][ T8972] use of bytesused == 0 is deprecated and will be removed in the future,
[  217.314485][ T8972] use the actual size instead.
[  217.320156][ T8956] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff
[  217.335945][ T8956] F2FS-fs (loop3): Image doesn't support compression
[  217.346769][ T8956] F2FS-fs (loop3): Image doesn't support compression
[  217.388208][ T8956] F2FS-fs (loop3): invalid crc value
[  217.428589][ T8956] F2FS-fs (loop3): Found nat_bits in checkpoint
[  217.588238][ T8956] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  217.955003][ T5771] syz-executor: attempt to access beyond end of device
[  217.955003][ T5771] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  218.021110][ T5771] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  218.394891][ T8826] veth0_vlan: entered promiscuous mode
[  218.418336][ T8826] veth1_vlan: entered promiscuous mode
[  218.438322][ T8976] loop4: detected capacity change from 0 to 32768
[  218.532066][ T8826] veth0_macvtap: entered promiscuous mode
[  218.597224][ T8826] veth1_macvtap: entered promiscuous mode
[  218.606896][   T28] audit: type=1800 audit(1775131004.305:49): pid=8976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1070" name="file1" dev="loop4" ino=4 res=0 errno=0
[  218.717712][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.758073][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.803159][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.822984][ T9005] loop1: detected capacity change from 0 to 4096
[  218.835723][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.857281][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.886615][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.920838][ T8826] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.940553][ T9005] ntfs: volume version 3.1.
[  218.966381][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.003992][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.073946][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.098053][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.123247][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.162154][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.203481][ T8826] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.266119][ T8826] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.347701][ T8826] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.383191][ T8826] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.384070][ T8826] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.723317][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.731553][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.857866][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.887859][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.838834][ T9033] loop1: detected capacity change from 0 to 32768
[  220.894423][ T9033] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1087 (9033)
[  220.973741][ T9033] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  220.978666][ T9038] loop3: detected capacity change from 0 to 32768
[  221.019183][ T9033] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  221.071368][ T9033] BTRFS info (device loop1): force clearing of disk cache
[  221.125327][ T9033] BTRFS info (device loop1): metadata ratio 0
[  221.169391][ T9033] BTRFS info (device loop1): enabling ssd optimizations
[  221.170348][ T9038] JFS: Invalid stbl[2] = -55 for inode 2, block = 0
[  221.202812][ T9033] BTRFS info (device loop1): using spread ssd allocation scheme
[  221.242524][ T9033] BTRFS info (device loop1): using free space tree
[  221.305908][ T9060] loop4: detected capacity change from 0 to 8192
[  221.395121][ T9080] loop6: detected capacity change from 0 to 512
[  221.518699][ T9033] BTRFS info (device loop1): auto enabling async discard
[  221.531521][ T9080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.545464][ T9080] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.563637][ T9086] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  221.602298][ T9033] BTRFS info (device loop1): rebuilding free space tree
[  221.969199][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  221.982423][ T8826] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.163617][ T9094] loop3: detected capacity change from 0 to 64
[  223.168157][ T9111] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1104'.
[  223.519033][   T27] kernel write not supported for file /amidi2 (pid: 27 comm: kworker/1:1)
[  223.861191][ T9096] loop6: detected capacity change from 0 to 32768
[  223.956382][ T9096] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  224.027014][ T9096] JBD2: Ignoring recovery information on journal
[  224.101037][ T9101] loop1: detected capacity change from 0 to 32768
[  224.194227][ T9096] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  224.212598][ T9101] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  224.350972][ T9117] loop4: detected capacity change from 0 to 32768
[  224.448131][ T9101] XFS (loop1): Ending clean mount
[  224.490657][ T9117] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  224.490657][ T9117] 
[  224.540388][ T9101] XFS (loop1): Quotacheck needed: Please wait.
[  224.542286][ T9117] ERROR: (device loop4): remounting filesystem as read-only
[  224.731652][ T9101] XFS (loop1): Quotacheck: Done.
[  225.008651][ T8826] ocfs2: Unmounting device (7,6) on (node local)
[  225.192783][ T5772] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  225.458240][ T9157] loop4: detected capacity change from 0 to 128
[  225.548823][ T9157] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  225.584224][ T9157] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  225.814517][ T6133] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  225.941346][ T9150] loop3: detected capacity change from 0 to 32768
[  226.085289][ T9150] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  226.101781][ T9168] loop1: detected capacity change from 0 to 1024
[  226.417530][ T9150] XFS (loop3): Ending clean mount
[  226.604689][ T5780] IPVS: starting estimator thread 0...
[  226.723518][ T9192] IPVS: using max 31 ests per chain, 74400 per kthread
[  226.805840][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  226.919604][ T9201] loop4: detected capacity change from 0 to 1024
[  227.203613][ T9201] hfsplus: bad catalog entry type
[  227.373551][ T3453] hfsplus: b-tree write err: -5, ino 25
[  227.396770][ T9206] loop1: detected capacity change from 0 to 4096
[  227.427460][ T3453] hfsplus: b-tree write err: -5, ino 4
[  227.443009][ T3453] hfsplus: b-tree write err: -5, ino 2
[  227.535495][ T9206] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  227.587655][ T9206] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  227.631898][ T9206] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  227.654258][ T5831] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  227.712103][ T9206] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  227.763271][ T9206] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  227.792508][ T9220] loop3: detected capacity change from 0 to 512
[  227.826594][ T9206] ntfs: volume version 3.1.
[  227.841793][ T9206] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  227.893490][ T9206] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  227.915240][ T9220] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1131: Directory hole found for htree index block 0
[  227.963476][ T9206] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  227.985554][ T9220] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  228.028678][ T9220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.069313][ T9206] ntfs: (device loop1): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[  228.140800][ T9206] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2.
[  228.273551][ T5780] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  228.311314][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.499859][ T9237] loop3: detected capacity change from 0 to 512
[  228.568872][ T9237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.603793][ T9237] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.729182][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.743514][ T5776] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  228.856432][ T9247] netlink: 'syz.3.1138': attribute type 3 has an invalid length.
[  228.866859][ T9247] netlink: 'syz.3.1138': attribute type 1 has an invalid length.
[  228.881756][ T9247] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1138'.
[  228.913286][ T5780] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  228.945127][ T5776] usb 2-1: Using ep0 maxpacket: 16
[  228.959803][ T5776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.974075][ T5776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.985076][ T5776] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  228.999484][ T5776] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  229.009879][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.034593][ T5776] usb 2-1: config 0 descriptor??
[  229.104557][ T5780] usb 7-1: Using ep0 maxpacket: 32
[  229.125028][ T5780] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  229.142392][ T5780] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.156768][ T5780] usb 7-1: config 0 descriptor??
[  229.184666][ T5780] as10x_usb: device has been detected
[  229.185490][ T9255] warning: `syz.4.1142' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  229.198920][ T5780] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  229.250228][ T5780] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  229.331702][ T5780] as10x_usb: error during firmware upload part1
[  229.339964][ T5780] Registered device nBox DVB-T Dongle
[  229.401935][ T9258] sit0: entered promiscuous mode
[  229.470563][ T9258] netlink: 'syz.3.1143': attribute type 1 has an invalid length.
[  229.491417][ T5780] usb 7-1: USB disconnect, device number 2
[  229.509399][ T5776] microsoft 0003:045E:07DA.000A: No inputs registered, leaving
[  229.517632][ T9258] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1143'.
[  229.548236][ T5776] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  229.593838][ T5776] microsoft 0003:045E:07DA.000A: no inputs found
[  229.594952][ T5780] Unregistered device nBox DVB-T Dongle
[  229.600442][ T5776] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway
[  229.623052][ T5780] as10x_usb: device has been disconnected
[  229.726324][   T27] usb 2-1: USB disconnect, device number 7
[  229.776639][ T9262] fido_id[9262]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  229.782433][ T9266] loop3: detected capacity change from 0 to 8
[  229.824420][ T9266] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  230.188530][ T9277] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  230.421424][ T9288] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1155'.
[  230.513719][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  230.642803][ T9297] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  230.703320][    T9] usb 5-1: Using ep0 maxpacket: 16
[  230.730857][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.770343][    T9] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  230.817303][    T9] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  230.839126][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  230.890648][    T9] usb 5-1: string descriptor 0 read error: -22
[  230.918393][    T9] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  230.933658][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.962050][    T9] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  230.978976][ T9308] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1165'.
[  230.996676][ T9310] loop3: detected capacity change from 0 to 64
[  231.000118][    T9] usb 5-1: MIDIStreaming interface descriptor not found
[  231.270836][ T9314] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1168'.
[  231.295610][ T9314] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1168'.
[  231.310853][    T9] usb 5-1: USB disconnect, device number 11
[  231.630001][ T9324] mmap: syz.3.1173 (9324) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  232.139982][ T9338] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  232.470982][ T9350] loop1: detected capacity change from 0 to 1024
[  232.561957][ T9350] hfsplus: bad catalog entry type
[  232.630744][ T1320] hfsplus: b-tree write err: -5, ino 25
[  232.644709][ T1320] hfsplus: b-tree write err: -5, ino 4
[  232.657492][ T1320] hfsplus: b-tree write err: -5, ino 2
[  233.222912][ T9370] loop1: detected capacity change from 0 to 4096
[  233.519124][ T9380] loop6: detected capacity change from 0 to 64
[  233.888543][ T9393] loop6: detected capacity change from 0 to 128
[  233.911079][ T9393] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  233.973332][ T9393] hpfs: filesystem error: improperly stopped
[  233.991863][ T9393] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  234.038183][ T9393] hpfs: You really don't want any checks? You are crazy...
[  234.109514][ T9393] hpfs: hpfs_map_sector(): read error
[  234.133182][ T9393] hpfs: code page support is disabled
[  234.158708][ T9393] hpfs: hpfs_map_4sectors(): unaligned read
[  234.173813][ T9393] hpfs: hpfs_map_4sectors(): unaligned read
[  234.184750][ T9393] hpfs: filesystem error: unable to find root dir
[  234.226721][ T9393] hpfs: hpfs_map_4sectors(): unaligned read
[  234.249350][ T9393] hpfs: hpfs_map_sector(): read error
[  234.580822][ T9418] loop1: detected capacity change from 0 to 16
[  234.616003][ T9418] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  234.851905][ T9430] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1220'.
[  235.176768][ T9445] loop1: detected capacity change from 0 to 1024
[  235.218133][ T9445] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  235.249989][ T9445] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000]
[  235.333926][ T9445] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.1225: lblock 2 mapped to illegal pblock 2 (length 1)
[  235.354279][ T9445] __quota_error: 2 callbacks suppressed
[  235.354297][ T9445] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  235.369037][ T9445] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 48: comm syz.1.1225: lblock 0 mapped to illegal pblock 48 (length 1)
[  235.390716][ T9445] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  235.403254][ T9445] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.1225: Failed to acquire dquot type 0
[  235.418342][ T9445] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  235.453573][ T9445] EXT4-fs error (device loop1): ext4_evict_inode:252: inode #11: comm syz.1.1225: mark_inode_dirty error
[  235.505874][ T9445] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -117)
[  235.520814][ T9445] EXT4-fs (loop1): 1 orphan inode deleted
[  235.529946][ T9445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.545260][ T3453] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  235.618243][ T3453] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  235.637928][ T3453] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:10: Failed to release dquot type 0
[  235.692724][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.723472][ T3453] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  235.770184][ T3453] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  235.786256][ T3453] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:10: Failed to release dquot type 0
[  235.806502][ T5772] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0
[  235.831783][ T5772] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  235.864322][ T5772] EXT4-fs error (device loop1): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error
[  236.070695][ T9472] loop1: detected capacity change from 0 to 256
[  236.150558][ T9473] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in;
[  236.150558][ T9473]    program syz.4.1238 not setting count and/or reply_len properly
[  236.170517][ T9472] FAT-fs (loop1): Directory bread(block 64) failed
[  236.196637][ T9472] FAT-fs (loop1): Directory bread(block 65) failed
[  236.213436][ T9472] FAT-fs (loop1): Directory bread(block 66) failed
[  236.223475][ T9472] FAT-fs (loop1): Directory bread(block 67) failed
[  236.265402][ T9472] FAT-fs (loop1): Directory bread(block 68) failed
[  236.277755][ T9472] FAT-fs (loop1): Directory bread(block 69) failed
[  236.306390][ T9472] FAT-fs (loop1): Directory bread(block 70) failed
[  236.323435][ T9472] FAT-fs (loop1): Directory bread(block 71) failed
[  236.347588][ T9472] FAT-fs (loop1): Directory bread(block 72) failed
[  236.377010][ T9472] FAT-fs (loop1): Directory bread(block 73) failed
[  236.543690][   T28] audit: type=1800 audit(1775131022.245:50): pid=9472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1232" name="file1" dev="loop1" ino=1048639 res=0 errno=0
[  236.545121][ T9472] syz.1.1232: attempt to access beyond end of device
[  236.545121][ T9472] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256
[  236.619264][ T9485] loop3: detected capacity change from 0 to 64
[  236.786350][ T9489] loop6: detected capacity change from 0 to 512
[  236.897814][ T9489] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.036476][ T9499] loop3: detected capacity change from 0 to 164
[  237.158528][ T8826] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.174076][ T9499] iso9660: Corrupted directory entry in block 4 of inode 1792
[  238.151724][ T9535] loop1: detected capacity change from 0 to 512
[  238.181674][ T9535] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  238.304046][ T9535] EXT4-fs (loop1): 1 orphan inode deleted
[  238.309945][ T9535] EXT4-fs (loop1): 1 truncate cleaned up
[  238.394839][ T9535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.575915][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.628327][ T9549] loop4: detected capacity change from 0 to 1024
[  238.786806][ T9549] hfsplus: b-tree write err: -5, ino 2
[  238.803288][ T5760] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  238.994739][ T5760] usb 4-1: Using ep0 maxpacket: 32
[  239.008910][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.050089][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.080730][ T5760] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  239.097654][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  239.113803][   T12] hfsplus: b-tree write err: -5, ino 25
[  239.115426][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.132134][   T12] hfsplus: b-tree write err: -5, ino 4
[  239.150141][   T12] hfsplus: b-tree write err: -5, ino 2
[  239.154654][ T5760] usb 4-1: config 0 descriptor??
[  239.202847][   T12] hfsplus: b-tree write err: -5, ino 22
[  239.295718][    T9] usb 2-1: Using ep0 maxpacket: 8
[  239.311467][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7
[  239.349601][    T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  239.376122][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.401450][    T9] usb 2-1: Product: syz
[  239.412769][    T9] usb 2-1: Manufacturer: syz
[  239.422192][    T9] usb 2-1: SerialNumber: syz
[  239.522664][ T9572] mkiss: ax0: crc mode is auto.
[  239.545234][   T27] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  239.601661][ T5760] hid (null): bogus close delimiter
[  239.624586][ T5760] nintendo 0003:057E:200E.000B: bogus close delimiter
[  239.632361][ T5760] nintendo 0003:057E:200E.000B: item 0 2 2 10 parsing failed
[  239.642166][ T5760] nintendo 0003:057E:200E.000B: HID parse failed
[  239.667314][ T5760] nintendo 0003:057E:200E.000B: probe - fail = -22
[  239.682401][ T5760] nintendo: probe of 0003:057E:200E.000B failed with error -22
[  239.718848][    T9] usb 2-1: selecting invalid altsetting 1
[  239.751649][   T27] usb 7-1: unable to get BOS descriptor or descriptor too short
[  239.765249][   T27] usb 7-1: not running at top speed; connect to a high speed hub
[  239.780420][   T27] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  239.795553][   T27] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  239.840636][   T27] usb 7-1: string descriptor 0 read error: -22
[  239.848138][   T27] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  239.872328][   T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.902937][    T8] usb 4-1: USB disconnect, device number 13
[  239.913609][    T9] usb 2-1: cannot request logical cluster ID: 0 (err: -5)
[  239.921069][    T9] usb 2-1: invalid MIXER UNIT descriptor 6
[  239.963001][    T9] snd-usb-audio: probe of 2-1:1.0 failed with error -5
[  239.977401][   T27] usb 7-1: 0:2 : does not exist
[  239.992160][    T9] usb 2-1: selecting invalid altsetting 1
[  240.010405][ T9583] loop4: detected capacity change from 0 to 4096
[  240.052922][ T9583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.111782][ T9583] EXT4-fs: Ignoring removed orlov option
[  240.133633][ T9583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  240.156978][ T9583] EXT4-fs (loop4): stripe (20) is not aligned with cluster size (16), stripe is disabled
[  240.172560][ T9583] EXT4-fs (loop4): can't enable nombcache during remount
[  240.223740][ T6133] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.590145][   T27] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5)
[  240.616674][   T27] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  240.660724][   T27] usb 7-1: 5:0: failed to get current value for ch 1 (-22)
[  240.807756][   T27] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  240.842844][    T9] usb 2-1: cannot request logical cluster ID: 0 (err: -71)
[  240.854679][   T27] usb 7-1: USB disconnect, device number 3
[  240.872204][ T9605] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0)
[  240.893483][    T9] usb 2-1: invalid MIXER UNIT descriptor 6
[  240.906937][    T9] snd-usb-audio: probe of 2-1:1.1 failed with error -71
[  240.949689][    T9] usb 2-1: selecting invalid altsetting 1
[  240.983801][    T9] usb 2-1: cannot request logical cluster ID: 0 (err: -71)
[  240.991567][    T9] usb 2-1: invalid MIXER UNIT descriptor 6
[  241.003784][    T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  241.116562][    T9] snd-usb-audio: probe of 2-1:1.2 failed with error -71
[  241.163221][    T9] usb 2-1: USB disconnect, device number 8
[  241.224867][    T8] usb 5-1: Using ep0 maxpacket: 16
[  241.225245][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  241.241704][    T8] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  241.281545][    T8] usb 5-1: config 0 has no interface number 0
[  241.313347][    T8] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  241.353892][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  241.360181][    T8] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  241.418366][    T8] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  241.440982][    T8] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  241.477866][    T8] usb 5-1: Product: syz
[  241.490050][    T8] usb 5-1: SerialNumber: syz
[  241.522858][ T9627] loop1: detected capacity change from 0 to 512
[  241.534514][    T8] usb 5-1: config 0 descriptor??
[  241.558498][    T8] cm109 5-1:0.8: invalid payload size 0, expected 4
[  241.569473][    T8] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input15
[  241.629526][ T9627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  241.688132][ T9627] ext4 filesystem being mounted at /343/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.794490][ T9635] ieee802154 phy0 wpan0: encryption failed: -22
[  241.931163][    C0] cm109_urb_ctl_callback: 3 callbacks suppressed
[  241.931189][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  241.932340][ T5776] usb 5-1: USB disconnect, device number 12
[  241.937574][    C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  241.994539][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  242.025237][ T5776] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  242.106186][    T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  242.254760][ T9650] raw_sendmsg: syz.1.1298 forgot to set AF_INET. Fix it!
[  242.313321][    T8] usb 4-1: Using ep0 maxpacket: 16
[  242.321738][    T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  242.333371][ T9648] loop6: detected capacity change from 0 to 4096
[  242.341668][    T8] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  242.371979][    T8] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  242.393434][    T8] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  242.436592][    T8] usb 4-1: string descriptor 0 read error: -22
[  242.444021][    T8] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  242.466237][ T9655] loop1: detected capacity change from 0 to 512
[  242.483248][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.567305][    T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  242.606983][    T8] usb 4-1: MIDIStreaming interface descriptor not found
[  242.856391][    T8] usb 4-1: USB disconnect, device number 14
[  243.071678][ T9669] loop4: detected capacity change from 0 to 64
[  243.211676][ T9671] loop1: detected capacity change from 0 to 256
[  243.604516][ T9683] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  243.715296][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1309'.
[  243.799447][ T9689] netlink: 'syz.3.1310': attribute type 8 has an invalid length.
[  243.872529][ T9693] loop1: detected capacity change from 0 to 256
[  243.907324][ T9693] exfat: Deprecated parameter 'namecase'
[  243.936415][ T9693] exfat: Deprecated parameter 'utf8'
[  243.942132][ T9693] exfat: Deprecated parameter 'utf8'
[  243.992951][ T9693] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d)
[  244.165100][ T9704] loop4: detected capacity change from 0 to 128
[  244.222854][ T9704] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  244.263687][ T9704] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  244.331010][ T9704] EXT4-fs: Ignoring sb option on remount
[  244.392864][ T9704] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  244.586880][ T6133] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  244.785148][ T9718] loop1: detected capacity change from 0 to 4096
[  244.838311][ T9718] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  244.878772][ T9718] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  244.903473][ T5760] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  244.940260][ T9718] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  244.966545][ T9718] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  245.007229][ T9718] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  245.051310][ T9718] ntfs: volume version 3.1.
[  245.059077][ T9718] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  245.107253][ T9718] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  245.131816][ T9734] loop3: detected capacity change from 0 to 256
[  245.137860][ T9731] loop4: detected capacity change from 0 to 4096
[  245.139379][ T5760] usb 7-1: Using ep0 maxpacket: 32
[  245.170708][ T9718] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  245.171038][ T5760] usb 7-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  245.187663][ T9718] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  245.233786][ T9731] NILFS (loop4): invalid segment: Checksum error in segment payload
[  245.242789][ T9731] NILFS (loop4): trying rollback from an earlier position
[  245.256796][ T5760] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.281149][ T9718] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  245.302759][ T9734] FAT-fs (loop3): Directory bread(block 64) failed
[  245.310323][ T5760] usb 7-1: Product: syz
[  245.329360][ T5760] usb 7-1: Manufacturer: syz
[  245.346041][ T9734] FAT-fs (loop3): Directory bread(block 65) failed
[  245.366402][ T9734] FAT-fs (loop3): Directory bread(block 66) failed
[  245.373060][ T9734] FAT-fs (loop3): Directory bread(block 67) failed
[  245.373280][ T5760] usb 7-1: SerialNumber: syz
[  245.393305][ T9731] NILFS (loop4): recovery complete
[  245.405936][ T9734] FAT-fs (loop3): Directory bread(block 68) failed
[  245.412728][ T9734] FAT-fs (loop3): Directory bread(block 69) failed
[  245.425860][ T9737] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  245.445144][ T5760] usb 7-1: config 0 descriptor??
[  245.481072][ T5760] dw2102: su3000_identify_state
[  245.486864][ T9734] FAT-fs (loop3): Directory bread(block 70) failed
[  245.507134][ T5760] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  245.518645][ T9734] FAT-fs (loop3): Directory bread(block 71) failed
[  245.539198][ T9734] FAT-fs (loop3): Directory bread(block 72) failed
[  245.553427][ T5760] dw2102: su3000_power_ctrl: 1, initialized 0
[  245.559592][ T5760] dvb-usb: bulk message failed: -22 (2/0)
[  245.573459][ T9734] FAT-fs (loop3): Directory bread(block 73) failed
[  245.602451][ T5760] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  245.616524][ T5760] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  245.663973][ T9720] dvb-usb: bulk message failed: -22 (4/0)
[  245.670190][ T9720] dw2102: i2c transfer failed.
[  245.683245][ T5760] usb 7-1: media controller created
[  245.743831][ T5760] dvb-usb: bulk message failed: -22 (6/0)
[  245.751503][ T5760] dw2102: i2c transfer failed.
[  245.775474][ T5760] dvb-usb: bulk message failed: -22 (6/0)
[  245.789200][ T5760] dw2102: i2c transfer failed.
[  245.809687][ T5760] dvb-usb: bulk message failed: -22 (6/0)
[  245.843483][ T5760] dw2102: i2c transfer failed.
[  245.867187][ T5760] dvb-usb: bulk message failed: -22 (6/0)
[  245.892063][ T5760] dw2102: i2c transfer failed.
[  245.908322][ T5760] dvb-usb: bulk message failed: -22 (6/0)
[  245.938289][ T5760] dw2102: i2c transfer failed.
[  245.963408][ T5760] dvb-usb: bulk message failed: -22 (6/0)
[  245.973209][ T5760] dw2102: i2c transfer failed.
[  245.978123][ T5760] dvb-usb: MAC address: 02:02:02:02:02:02
[  246.048679][ T5760] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  246.132392][ T5760] dvb-usb: bulk message failed: -22 (3/0)
[  246.152218][ T5760] dw2102: command 0x0e transfer failed.
[  246.168831][ T5760] dvb-usb: bulk message failed: -22 (3/0)
[  246.181093][ T5760] dw2102: command 0x0e transfer failed.
[  246.523297][ T5760] dvb-usb: bulk message failed: -22 (3/0)
[  246.529534][ T5760] dw2102: command 0x0e transfer failed.
[  246.569710][ T5760] dvb-usb: bulk message failed: -22 (3/0)
[  246.595367][ T5760] dw2102: command 0x0e transfer failed.
[  246.617755][ T5760] dvb-usb: bulk message failed: -22 (1/0)
[  246.641792][ T5760] dw2102: command 0x51 transfer failed.
[  246.852472][ T5760] DVB: Unable to find symbol ds3000_attach()
[  246.880057][ T5760] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  246.912791][ T9786] IPVS: Error connecting to the multicast addr
[  247.115161][ T5760] rc_core: IR keymap rc-su3000 not found
[  247.153589][ T5760] Registered IR keymap rc-empty
[  247.184493][ T5760] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[  247.255236][ T5760] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input16
[  247.310294][ T5760] dvb-usb: schedule remote query interval to 150 msecs.
[  247.353245][ T5760] dw2102: su3000_power_ctrl: 0, initialized 1
[  247.371566][ T5760] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  247.434149][ T5760] usb 7-1: USB disconnect, device number 4
[  247.661075][ T5760] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  247.678084][ T9812] loop6: detected capacity change from 0 to 1024
[  247.685988][ T9813] loop3: detected capacity change from 0 to 256
[  247.785165][ T9813] FAT-fs (loop3): Directory bread(block 64) failed
[  247.795234][ T9813] FAT-fs (loop3): Directory bread(block 65) failed
[  247.840046][ T9813] FAT-fs (loop3): Directory bread(block 66) failed
[  247.856472][ T9813] FAT-fs (loop3): Directory bread(block 67) failed
[  247.873020][ T9813] FAT-fs (loop3): Directory bread(block 68) failed
[  247.886039][ T9812] hfsplus: trying to free free bnode 0(1)
[  247.895160][ T9813] FAT-fs (loop3): Directory bread(block 69) failed
[  247.921418][ T9813] FAT-fs (loop3): Directory bread(block 70) failed
[  247.949731][ T9813] FAT-fs (loop3): Directory bread(block 71) failed
[  247.968857][ T9813] FAT-fs (loop3): Directory bread(block 72) failed
[  247.983547][ T9813] FAT-fs (loop3): Directory bread(block 73) failed
[  248.191567][   T11] hfsplus: b-tree write err: -5, ino 25
[  248.207270][   T11] hfsplus: b-tree write err: -5, ino 4
[  248.223288][   T11] hfsplus: b-tree write err: -5, ino 2
[  248.234423][   T11] hfsplus: b-tree write err: -5, ino 26
[  248.439670][ T9835] loop4: detected capacity change from 0 to 512
[  248.461314][ T9833] loop6: detected capacity change from 0 to 1024
[  248.492774][ T9835] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.1358: inode has both inline data and extents flags
[  248.511284][ T9833] EXT4-fs: inline encryption not supported
[  248.526348][ T9830] loop3: detected capacity change from 0 to 4096
[  248.546684][ T9835] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1358: couldn't read orphan inode 15 (err -117)
[  248.553303][ T9833] EXT4-fs: Ignoring removed i_version option
[  248.578584][ T9833] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  248.612919][ T9830] ntfs: volume version 3.1.
[  248.628621][ T9835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.729627][ T9833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.896425][ T6133] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.122424][ T9833] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4059: comm syz.6.1356: Allocating blocks 497-513 which overlap fs metadata
[  249.202095][ T9833] EXT4-fs (loop6): pa ffff8880786f31d0: logic 368, phys. 369, len 9
[  249.211142][ T9833] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5393: group 0, free 0, pa_free 1
[  249.286263][ T9854] loop3: detected capacity change from 0 to 2048
[  249.317074][ T9854] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  249.403348][ T9863] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  249.532023][ T8826] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.706083][   T27] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  249.732902][ T9870] loop1: detected capacity change from 0 to 1024
[  249.832530][ T9870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.933353][   T27] usb 5-1: Using ep0 maxpacket: 16
[  249.942558][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.957905][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.968655][   T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  249.992050][   T27] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  250.011696][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.057058][   T27] usb 5-1: config 0 descriptor??
[  250.221529][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.539146][   T27] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max
[  250.578006][   T27] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max
[  250.617127][   T27] microsoft 0003:045E:07DA.000C: No inputs registered, leaving
[  250.645464][   T27] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  250.683273][   T27] microsoft 0003:045E:07DA.000C: no inputs found
[  250.700499][   T27] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway
[  250.763884][   T27] usb 5-1: USB disconnect, device number 13
[  250.864073][ T9901] fido_id[9901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  250.939102][ T9886] loop3: detected capacity change from 0 to 32768
[  251.070827][ T9886] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  251.106437][ T9914] loop6: detected capacity change from 0 to 256
[  251.220586][ T9886] XFS (loop3): Ending clean mount
[  251.226322][ T9914] FAT-fs (loop6): Directory bread(block 64) failed
[  251.233014][ T9914] FAT-fs (loop6): Directory bread(block 65) failed
[  251.252103][ T9886] XFS (loop3): Quotacheck needed: Please wait.
[  251.283583][ T9914] FAT-fs (loop6): Directory bread(block 66) failed
[  251.290860][ T9914] FAT-fs (loop6): Directory bread(block 67) failed
[  251.298325][ T9914] FAT-fs (loop6): Directory bread(block 68) failed
[  251.305529][ T9914] FAT-fs (loop6): Directory bread(block 69) failed
[  251.312271][ T9914] FAT-fs (loop6): Directory bread(block 70) failed
[  251.319796][ T9914] FAT-fs (loop6): Directory bread(block 71) failed
[  251.343688][ T9914] FAT-fs (loop6): Directory bread(block 72) failed
[  251.350561][ T9914] FAT-fs (loop6): Directory bread(block 73) failed
[  251.391262][ T9921] loop1: detected capacity change from 0 to 128
[  251.431763][ T9886] XFS (loop3): Quotacheck: Done.
[  251.480711][ T9921] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  251.575657][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  251.618664][ T9921] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.764741][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  252.366116][ T9924] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  252.465252][ T9934] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  252.489023][ T9924] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280
[  252.525400][ T9934] ntfs3: loop1: Failed to load $Extend (-22).
[  252.532126][ T9934] ntfs3: loop1: Failed to initialize $Extend.
[  252.532896][ T9924] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  252.566622][ T9928] JBD2: Ignoring recovery information on journal
[  252.611075][ T9924] OCFS2: File system is now read-only.
[  252.664098][ T9924] (syz.4.1379,9924,0):ocfs2_search_chain:1761 ERROR: status = -30
[  252.672903][ T9924] (syz.4.1379,9924,0):ocfs2_search_chain:1871 ERROR: status = -30
[  252.753012][ T9928] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  252.768020][ T9924] (syz.4.1379,9924,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  252.840789][ T9924] (syz.4.1379,9924,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  252.870267][ T9924] (syz.4.1379,9924,1):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  252.880680][ T9924] (syz.4.1379,9924,1):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  252.895459][ T9924] (syz.4.1379,9924,1):ocfs2_mknod_locked:639 ERROR: status = -30
[  252.947964][ T9924] (syz.4.1379,9924,1):ocfs2_mknod:385 ERROR: status = -30
[  252.981372][ T9928] (syz.6.1383,9928,1):ocfs2_remount:630 ERROR: Cannot change data mode on remount
[  253.002482][ T9924] (syz.4.1379,9924,1):ocfs2_mknod:502 ERROR: status = -30
[  253.049722][ T9924] (syz.4.1379,9924,1):ocfs2_create:676 ERROR: status = -30
[  253.261269][ T8826] ocfs2: Unmounting device (7,6) on (node local)
[  253.286754][ T6133] ocfs2: Unmounting device (7,4) on (node local)
[  253.691123][ T9952] set_capacity_and_notify: 3 callbacks suppressed
[  253.691141][ T9952] loop3: detected capacity change from 0 to 256
[  253.781020][ T9950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.812370][ T9952] FAT-fs (loop3): Directory bread(block 64) failed
[  253.826205][ T9952] FAT-fs (loop3): Directory bread(block 65) failed
[  253.854661][ T9952] FAT-fs (loop3): Directory bread(block 66) failed
[  253.873572][ T9952] FAT-fs (loop3): Directory bread(block 67) failed
[  253.880403][ T9952] FAT-fs (loop3): Directory bread(block 68) failed
[  253.889155][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'.
[  253.899381][ T9952] FAT-fs (loop3): Directory bread(block 69) failed
[  253.911175][ T9952] FAT-fs (loop3): Directory bread(block 70) failed
[  253.911636][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1391'.
[  253.918469][ T9952] FAT-fs (loop3): Directory bread(block 71) failed
[  253.918632][ T9952] FAT-fs (loop3): Directory bread(block 72) failed
[  253.939119][ T9954] netlink: 'syz.1.1391': attribute type 14 has an invalid length.
[  253.949899][ T9952] FAT-fs (loop3): Directory bread(block 73) failed
[  253.951327][ T9954] netlink: 'syz.1.1391': attribute type 11 has an invalid length.
[  254.058575][ T9950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.188940][ T5780] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  254.204945][ T9950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.237730][ T9960] batadv0: entered promiscuous mode
[  254.248609][ T9960] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  254.270524][ T9960] batadv0: left promiscuous mode
[  254.386596][ T5780] usb 7-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  254.405324][ T9950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.415960][ T5780] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.433177][ T5780] usb 7-1: Product: syz
[  254.437594][ T5780] usb 7-1: Manufacturer: syz
[  254.442332][ T5780] usb 7-1: SerialNumber: syz
[  254.484381][ T5780] usb 7-1: config 0 descriptor??
[  254.661152][ T9962] loop3: detected capacity change from 0 to 32768
[  254.693878][ T9962] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  254.715729][ T9950] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.725906][ T5780] peak_usb 7-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels)
[  254.748307][ T9950] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.777996][ T9950] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.804389][ T9950] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.827722][ T9962] XFS (loop3): Ending clean mount
[  254.850778][ T9962] XFS (loop3): Quotacheck needed: Please wait.
[  254.903417][ T5760] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  254.927182][ T5780] peak_usb 7-1:0.0 can0: sending command failure: -22
[  254.951959][ T5780] peak_usb 7-1:0.0 can0: sending command failure: -22
[  254.960721][ T5780] peak_usb 7-1:0.0 can0: sending command failure: -22
[  254.972094][ T9962] XFS (loop3): Quotacheck: Done.
[  254.989087][ T9976] loop4: detected capacity change from 0 to 64
[  255.014278][ T5780] peak_usb: probe of 7-1:0.0 failed with error -22
[  255.014543][   T28] kauditd_printk_skb: 22 callbacks suppressed
[  255.014556][   T28] audit: type=1800 audit(1775131040.715:51): pid=9962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1394" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  255.108748][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.123939][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.134486][ T5760] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  255.136346][ T5771] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  255.148629][ T5760] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  255.167144][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.183700][ T5760] usb 2-1: config 0 descriptor??
[  255.295759][ T5875] usb 7-1: USB disconnect, device number 5
[  255.633422][ T5760] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  255.675607][ T5760] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  255.907538][   T28] audit: type=1326 audit(1775131041.605:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.4.1404" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1def9c819 code=0x0
[  255.919093][    T9] usb 2-1: USB disconnect, device number 9
[  255.989825][ T9994] loop6: detected capacity change from 0 to 2048
[  256.007673][ T9994] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  256.039071][   T28] audit: type=1800 audit(1775131041.735:53): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1405" name="file1" dev="loop6" ino=1415 res=0 errno=0
[  256.144245][ T9997] loop6: detected capacity change from 0 to 256
[  256.151703][ T9997] exfat: Deprecated parameter 'utf8'
[  256.185816][ T9997] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[  256.430548][T10001] loop6: detected capacity change from 0 to 512
[  256.439717][T10001] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  256.504813][T10001] EXT4-fs error (device loop6): ext4_orphan_get:1424: comm syz.6.1408: bad orphan inode 131083
[  256.531409][T10001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.740385][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  256.747540][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  256.862064][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1412'.
[  257.018810][ T8826] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.439986][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1419'.
[  257.776003][T10017] loop1: detected capacity change from 0 to 32768
[  257.838026][T10019] loop4: detected capacity change from 0 to 32768
[  257.881761][T10017] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  257.889997][T10046] loop6: detected capacity change from 0 to 64
[  257.927839][T10019] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  258.051906][T10017] XFS (loop1): Ending clean mount
[  258.066216][T10019] XFS (loop4): Ending clean mount
[  258.101765][T10019] XFS (loop4): Quotacheck needed: Please wait.
[  258.151770][T10058] loop3: detected capacity change from 0 to 128
[  258.241293][T10019] XFS (loop4): Quotacheck: Done.
[  258.338432][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  258.557476][ T6133] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  258.951641][ T5780] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  259.161021][ T5780] usb 4-1: config 0 has an invalid interface number: 123 but max is 0
[  259.181231][ T5780] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  259.202935][ T5780] usb 4-1: config 0 has no interface number 0
[  259.217607][ T5780] usb 4-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d
[  259.228932][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.250894][ T5780] usb 4-1: Product: syz
[  259.255284][ T5780] usb 4-1: Manufacturer: syz
[  259.260015][ T5780] usb 4-1: SerialNumber: syz
[  259.284230][ T5780] usb 4-1: config 0 descriptor??
[  259.302116][ T5780] cdc_acm 4-1:0.123: More than one union descriptor, skipping ...
[  259.313416][T10080] loop1: detected capacity change from 0 to 256
[  259.374190][T10068] loop6: detected capacity change from 0 to 40427
[  259.397029][T10068] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  259.406007][T10068] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  259.431638][T10068] F2FS-fs (loop6): invalid crc value
[  259.461959][T10068] F2FS-fs (loop6): Found nat_bits in checkpoint
[  259.555991][ T5760] usb 4-1: USB disconnect, device number 15
[  259.640910][T10068] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  259.648306][T10068] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  259.768117][T10068] F2FS-fs (loop6): Unrecognized mount option "abort" or missing value
[  260.234393][   T28] audit: type=1326 audit(1775131045.704:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb959c819 code=0x7ffc0000
[  260.275659][T10098] loop3: detected capacity change from 0 to 256
[  260.291056][   T28] audit: type=1326 audit(1775131045.704:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb959c819 code=0x7ffc0000
[  260.327030][   T28] audit: type=1326 audit(1775131045.704:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb959c819 code=0x7ffc0000
[  260.390464][   T28] audit: type=1326 audit(1775131045.742:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3fb959c819 code=0x7ffc0000
[  260.418573][T10098] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  260.449294][T10098] FAT-fs (loop3): Filesystem has been set read-only
[  260.490224][   T28] audit: type=1326 audit(1775131045.742:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3fb959c582 code=0x7ffc0000
[  260.605455][   T28] audit: type=1326 audit(1775131045.742:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3fb955d04e code=0x7ffc0000
[  260.690620][   T28] audit: type=1326 audit(1775131045.742:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3fb959c647 code=0x7ffc0000
[  260.764238][   T28] audit: type=1326 audit(1775131045.742:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3fb955d04e code=0x7ffc0000
[  260.784138][T10109] Zero length message leads to an empty skb
[  260.847313][   T28] audit: type=1326 audit(1775131045.742:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3fb959c4ab code=0x7ffc0000
[  260.950597][   T28] audit: type=1326 audit(1775131045.751:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb959c819 code=0x7ffc0000
[  260.950656][   T28] audit: type=1326 audit(1775131045.779:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcabbd9c819 code=0x7ffc0000
[  262.331147][T10168] loop6: detected capacity change from 0 to 256
[  262.391473][T10168] FAT-fs (loop6): Directory bread(block 64) failed
[  262.406356][T10168] FAT-fs (loop6): Directory bread(block 65) failed
[  262.417280][T10168] FAT-fs (loop6): Directory bread(block 66) failed
[  262.437566][T10168] FAT-fs (loop6): Directory bread(block 67) failed
[  262.444641][T10168] FAT-fs (loop6): Directory bread(block 68) failed
[  262.472666][T10168] FAT-fs (loop6): Directory bread(block 69) failed
[  262.481021][T10168] FAT-fs (loop6): Directory bread(block 70) failed
[  262.506708][T10168] FAT-fs (loop6): Directory bread(block 71) failed
[  262.527775][T10168] FAT-fs (loop6): Directory bread(block 72) failed
[  262.545598][T10168] FAT-fs (loop6): Directory bread(block 73) failed
[  262.567753][T10170] loop4: detected capacity change from 0 to 4096
[  262.762012][T10157] loop1: detected capacity change from 0 to 32768
[  262.863400][T10157] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  263.051127][T10184] loop4: detected capacity change from 0 to 256
[  263.073534][T10157] XFS (loop1): Ending clean mount
[  263.089427][T10184] exfat: Deprecated parameter 'utf8'
[  263.171906][T10184] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  263.331085][ T5772] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  263.662015][T10195] loop4: detected capacity change from 0 to 512
[  263.710499][T10195] EXT4-fs: Ignoring removed oldalloc option
[  263.783699][T10195] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1484: Parent and EA inode have the same ino 15
[  263.829592][T10195] EXT4-fs (loop4): 1 orphan inode deleted
[  263.837228][T10195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.868720][    T8] usb 2-1: new low-speed USB device number 10 using dummy_hcd
[  263.945398][T10202] loop3: detected capacity change from 0 to 1024
[  263.991520][ T6133] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.048371][T10204] loop6: detected capacity change from 0 to 2048
[  264.072810][    T8] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  264.084602][    T8] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  264.122030][    T8] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  264.149670][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  264.156486][    T8] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[  264.166143][ T4489] hfsplus: b-tree write err: -5, ino 25
[  264.175844][T10204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.190152][ T4489] hfsplus: b-tree write err: -5, ino 4
[  264.195869][ T4489] hfsplus: b-tree write err: -5, ino 2
[  264.217864][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.244205][    T8] usb 2-1: config 0 descriptor??
[  264.250906][T10192] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  264.327802][ T8826] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.421421][ T5782] Bluetooth: hci3: command 0x0406 tx timeout
[  264.549909][T10212] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1491'.
[  264.705506][    T8] hid (null): unknown global tag 0xe
[  264.722121][    T8] hid (null): unknown global tag 0xe
[  264.736944][    T8] uclogic 0003:5543:0004.000E: unknown global tag 0xe
[  264.762067][    T8] uclogic 0003:5543:0004.000E: item 0 1 1 14 parsing failed
[  264.778020][    T8] uclogic 0003:5543:0004.000E: parse failed
[  264.795046][    T8] uclogic: probe of 0003:5543:0004.000E failed with error -22
[  264.839530][T10218] tipc: Started in network mode
[  264.846972][T10218] tipc: Node identity aaaaaaaaaa41, cluster identity 6
[  264.857517][T10206] loop4: detected capacity change from 0 to 32768
[  264.877655][T10218] tipc: Enabled bearer <eth:geneve1>, priority 12
[  264.899433][T10206] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  264.950738][    T8] usb 2-1: USB disconnect, device number 10
[  265.045175][T10230] loop3: detected capacity change from 0 to 1024
[  265.148640][T10206] XFS (loop4): Ending clean mount
[  265.152687][T10230] hfsplus: bad catalog entry type
[  265.231981][ T4489] hfsplus: b-tree write err: -5, ino 25
[  265.247829][ T4489] hfsplus: b-tree write err: -5, ino 4
[  265.253782][ T4489] hfsplus: b-tree write err: -5, ino 2
[  265.339024][ T6133] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  265.420743][T10232] loop3: detected capacity change from 0 to 1024
[  265.648266][ T4489] hfsplus: b-tree write err: -5, ino 25
[  265.705419][T10236] loop1: detected capacity change from 0 to 16
[  265.707890][ T4489] hfsplus: b-tree write err: -5, ino 4
[  265.733296][T10222] loop6: detected capacity change from 0 to 32768
[  265.746143][ T4489] hfsplus: b-tree write err: -5, ino 2
[  265.849580][T10236] erofs: (device loop1): mounted with root inode @ nid 36.
[  265.889284][T10222] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  266.024778][T10222] XFS (loop6): Ending clean mount
[  266.029133][T10252] loop4: detected capacity change from 0 to 256
[  266.081374][ T5776] tipc: Node number set to 15444650
[  266.118820][T10252] FAT-fs (loop4): Directory bread(block 64) failed
[  266.156130][T10252] FAT-fs (loop4): Directory bread(block 65) failed
[  266.162809][T10252] FAT-fs (loop4): Directory bread(block 66) failed
[  266.197214][T10252] FAT-fs (loop4): Directory bread(block 67) failed
[  266.246824][T10252] FAT-fs (loop4): Directory bread(block 68) failed
[  266.277900][T10252] FAT-fs (loop4): Directory bread(block 69) failed
[  266.296607][T10252] FAT-fs (loop4): Directory bread(block 70) failed
[  266.303284][T10252] FAT-fs (loop4): Directory bread(block 71) failed
[  266.310535][ T8826] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  266.344015][T10252] FAT-fs (loop4): Directory bread(block 72) failed
[  266.357394][T10252] FAT-fs (loop4): Directory bread(block 73) failed
[  266.515349][T10260] loop1: detected capacity change from 0 to 256
[  266.639745][T10260] FAT-fs (loop1): Directory bread(block 64) failed
[  266.646696][T10260] FAT-fs (loop1): Directory bread(block 65) failed
[  266.666658][T10260] FAT-fs (loop1): Directory bread(block 66) failed
[  266.674537][T10260] FAT-fs (loop1): Directory bread(block 67) failed
[  266.714494][T10260] FAT-fs (loop1): Directory bread(block 68) failed
[  266.756061][T10260] FAT-fs (loop1): Directory bread(block 69) failed
[  266.798045][T10260] FAT-fs (loop1): Directory bread(block 70) failed
[  266.804901][T10260] FAT-fs (loop1): Directory bread(block 71) failed
[  266.858763][T10267] loop4: detected capacity change from 0 to 64
[  266.872424][T10260] FAT-fs (loop1): Directory bread(block 72) failed
[  266.879662][T10260] FAT-fs (loop1): Directory bread(block 73) failed
[  266.977279][T10269] macvlan2: entered promiscuous mode
[  267.063314][T10271] option changes via remount are deprecated (pid=10270 comm=syz.3.1511)
[  267.106813][T10271] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  267.451360][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1517'.
[  267.532977][T10282] loop4: detected capacity change from 0 to 4096
[  267.577431][T10282] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  267.968441][T10282] ntfs3: loop4: ino=1e, "file1" ntfs_sync_inode failed, -22.
[  267.997386][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'.
[  268.016498][T10282] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  268.066022][T10294] loop6: detected capacity change from 0 to 8
[  268.149438][T10290] ntfs3: loop4: ino=1e, "file1" ntfs_sync_inode failed, -22.
[  268.216537][T10294] SQUASHFS error: Failed to read block 0x2d0: -5
[  268.223959][T10294] SQUASHFS error: Unable to read metadata cache entry [2ce]
[  268.245106][T10294] SQUASHFS error: Unable to read directory block [2ce:0]
[  268.306392][   T11] ntfs3: loop4: ino=1e, ntfs3_write_inode failed, -22.
[  268.341327][T10277] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  268.553803][T10277] XFS (loop3): Ending clean mount
[  268.783247][ T5771] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  269.138545][    T8] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  269.354570][    T8] usb 7-1: unable to get BOS descriptor or descriptor too short
[  269.368193][    T8] usb 7-1: not running at top speed; connect to a high speed hub
[  269.380186][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  269.392909][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  269.404634][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64
[  269.416950][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  269.421262][T10323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.428161][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 12336, setting to 64
[  269.454706][    T8] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  269.464877][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.473716][    T8] usb 7-1: Product: syz
[  269.478010][    T8] usb 7-1: Manufacturer: syz
[  269.482798][    T8] usb 7-1: SerialNumber: syz
[  269.491354][    T8] usb 7-1: config 0 descriptor??
[  269.498009][T10314] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  269.506745][T10314] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  269.530014][    T8] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[  269.709562][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.906262][ T5776] usb 7-1: USB disconnect, device number 6
[  270.168228][ T6133] hfs: node 4:3 still has 1 user(s)!
[  270.312763][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1536'.
[  270.336338][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1536'.
[  270.342089][T10340] ip6gretap0: entered promiscuous mode
[  270.352732][T10340] macsec1: entered promiscuous mode
[  270.358804][T10340] macsec1: entered allmulticast mode
[  270.364538][T10340] ip6gretap0: entered allmulticast mode
[  270.389819][T10340] ip6gretap0: left allmulticast mode
[  270.403443][T10340] ip6gretap0: left promiscuous mode
[  270.779384][T10352] set_capacity_and_notify: 3 callbacks suppressed
[  270.779402][T10352] loop3: detected capacity change from 0 to 1024
[  270.795104][T10355] loop1: detected capacity change from 0 to 16
[  270.815406][T10355] erofs: (device loop1): mounted with root inode @ nid 36.
[  270.841579][T10357] loop6: detected capacity change from 0 to 64
[  270.888000][T10357] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  270.906976][T10352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.958531][T10352] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.161926][T10363] Cannot find add_set index 46338 as target
[  271.199024][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.428363][T10373] ip6gretap0: entered promiscuous mode
[  271.434091][T10373] macsec1: entered promiscuous mode
[  271.453382][T10373] macsec1: entered allmulticast mode
[  271.462650][T10373] ip6gretap0: entered allmulticast mode
[  271.512441][T10373] ip6gretap0: left allmulticast mode
[  271.523068][T10373] ip6gretap0: left promiscuous mode
[  271.644759][T10381] option changes via remount are deprecated (pid=10379 comm=syz.6.1556)
[  271.661190][T10381] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  271.769965][T10385] loop1: detected capacity change from 0 to 512
[  271.821395][T10385] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  271.911269][   T28] kauditd_printk_skb: 44 callbacks suppressed
[  271.911286][   T28] audit: type=1800 audit(1775131056.631:109): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1559" name="file1" dev="loop1" ino=1048740 res=0 errno=0
[  272.120270][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1565'.
[  272.303197][ T5776] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  272.510403][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.527031][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.548651][ T5776] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  272.558194][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.599965][ T5776] usb 4-1: config 0 descriptor??
[  272.620516][T10411] loop6: detected capacity change from 0 to 8192
[  272.656341][T10411] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  272.751816][T10411] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  272.817236][T10411] REISERFS (device loop6): using ordered data mode
[  272.824456][T10411] reiserfs: using flush barriers
[  272.859234][T10411] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  272.912249][T10411] REISERFS (device loop6): checking transaction log (loop6)
[  272.950389][T10411] REISERFS (device loop6): Using r5 hash to sort names
[  272.981191][T10413] loop1: detected capacity change from 0 to 32768
[  272.995366][T10413] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1573 (10413)
[  273.025696][T10411] reiserfs: enabling write barrier flush mode
[  273.071730][T10411] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  273.091672][ T5776] holtek_kbd 0003:04D9:A055.000F: item fetching failed at offset 5/7
[  273.100956][T10413] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  273.101070][T10413] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  273.133087][T10411] REISERFS error (device loop6): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  273.133197][T10405] loop4: detected capacity change from 0 to 32768
[  273.144510][T10413] BTRFS info (device loop1): setting nodatasum
[  273.156843][ T5776] holtek_kbd: probe of 0003:04D9:A055.000F failed with error -22
[  273.179221][T10411] REISERFS (device loop6): Remounting filesystem read-only
[  273.186721][T10411] REISERFS error (device loop6): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  273.190223][T10413] BTRFS info (device loop1): force zlib compression, level 3
[  273.214050][T10411] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  273.232429][T10411] REISERFS error (device loop6): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  273.232533][T10413] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  273.243579][T10411] REISERFS error (device loop6): zam-7001 reiserfs_find_entry: io error
[  273.261960][T10411] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  273.281730][T10411] REISERFS error (device loop6): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  273.293056][T10411] REISERFS error (device loop6): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  273.311546][T10411] REISERFS warning (device loop6): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  273.339407][T10413] BTRFS info (device loop1): use lzo compression, level 0
[  273.346688][T10413] BTRFS info (device loop1): enabling auto defrag
[  273.353547][T10405] JBD2: Ignoring recovery information on journal
[  273.397069][T10413] BTRFS info (device loop1): turning on flush-on-commit
[  273.407021][T10413] BTRFS info (device loop1): using free space tree
[  273.423482][ T8826] ------------[ cut here ]------------
[  273.429524][ T8826] kernel BUG at fs/reiserfs/journal.c:1916!
[  273.462716][    T8] usb 4-1: USB disconnect, device number 16
[  273.497409][ T8826] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  273.503630][ T8826] CPU: 0 PID: 8826 Comm: syz-executor Not tainted syzkaller #0
[  273.511460][ T8826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  273.521877][ T8826] RIP: 0010:do_journal_release+0x4e6/0x4f0
[  273.527880][ T8826] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 db b5 ff e9 f9 fc ff ff e8 6a 9f 5d ff <0f> 0b e8 63 9f 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3
[  273.547778][ T8826] RSP: 0018:ffffc900051afb00 EFLAGS: 00010293
[  273.554040][ T8826] RAX: ffffffff822980b6 RBX: 1ffff92000a35f64 RCX: ffff888018fc9e00
[  273.562119][ T8826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  273.570106][ T8826] RBP: ffffc900051afbf8 R08: ffffc900051afb77 R09: 0000000000000000
[  273.578106][ T8826] R10: ffffc900051afb40 R11: fffff52000a35f6f R12: ffffc90005731000
[  273.586109][ T8826] R13: dffffc0000000000 R14: ffff88806b050630 R15: 0000000000000000
[  273.594445][ T8826] FS:  000055555e309500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  273.603745][ T8826] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  273.610337][ T8826] CR2: 0000001b2db14ff8 CR3: 000000006a3ee000 CR4: 00000000003506f0
[  273.618790][ T8826] Call Trace:
[  273.622261][ T8826]  <TASK>
[  273.625368][ T8826]  ? journal_release+0x30/0x30
[  273.630248][ T8826]  journal_release+0x1f/0x30
[  273.635009][ T8826]  reiserfs_put_super+0x26b/0x510
[  273.639730][T10405] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  273.640112][ T8826]  ? hook_inode_free_security+0xb0/0xb0
[  273.654817][ T8826]  ? evict_inodes+0x63c/0x6a0
[  273.659901][ T8826]  ? reiserfs_dirty_inode+0x270/0x270
[  273.665776][ T8826]  ? fscrypt_destroy_keyring+0x288/0x2a0
[  273.671717][ T8826]  ? reiserfs_dirty_inode+0x270/0x270
[  273.677130][ T8826]  generic_shutdown_super+0x134/0x2b0
[  273.682791][ T8826]  kill_block_super+0x44/0x90
[  273.687491][ T8826]  deactivate_locked_super+0x97/0x100
[  273.692978][ T8826]  cleanup_mnt+0x43b/0x4d0
[  273.697854][ T8826]  task_work_run+0x1d4/0x260
[  273.702565][ T8826]  ? task_work_cancel+0x220/0x220
[  273.707801][ T8826]  ? exit_to_user_mode_loop+0x3b/0x110
[  273.713666][ T8826]  exit_to_user_mode_loop+0xe6/0x110
[  273.718972][ T8826]  exit_to_user_mode_prepare+0xee/0x180
[  273.724627][ T8826]  syscall_exit_to_user_mode+0x1a/0x50
[  273.730200][ T8826]  do_syscall_64+0x61/0xa0
[  273.734915][ T8826]  ? clear_bhb_loop+0x40/0x90
[  273.739692][ T8826]  ? clear_bhb_loop+0x40/0x90
[  273.744464][ T8826]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  273.750609][ T8826] RIP: 0033:0x7feaeeb9da57
[  273.755026][ T8826] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  273.756411][T10413] BTRFS info (device loop1): enabling ssd optimizations
[  273.774705][ T8826] RSP: 002b:00007ffc6a472428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  273.774731][ T8826] RAX: 0000000000000000 RBX: 00007feaeec32048 RCX: 00007feaeeb9da57
[  273.774740][ T8826] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6a4724e0
[  273.774748][ T8826] RBP: 00007ffc6a4724e0 R08: 00007ffc6a4734e0 R09: 00000000ffffffff
[  273.774758][ T8826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6a473570
[  273.774766][ T8826] R13: 00007feaeec32048 R14: 000000000004263b R15: 00007ffc6a4735b0
[  273.774783][ T8826]  </TASK>
[  273.774788][ T8826] Modules linked in:
[  273.803621][ T8826] ---[ end trace 0000000000000000 ]---
[  273.865479][ T8826] RIP: 0010:do_journal_release+0x4e6/0x4f0
[  273.884117][ T6133] ocfs2: Unmounting device (7,4) on (node local)
[  273.903407][ T8826] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 db b5 ff e9 f9 fc ff ff e8 6a 9f 5d ff <0f> 0b e8 63 9f 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3
[  273.924441][ T5772] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  273.968937][ T8826] RSP: 0018:ffffc900051afb00 EFLAGS: 00010293
[  273.995565][ T8826] RAX: ffffffff822980b6 RBX: 1ffff92000a35f64 RCX: ffff888018fc9e00
[  274.014021][ T8826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  274.022065][ T8826] RBP: ffffc900051afbf8 R08: ffffc900051afb77 R09: 0000000000000000
[  274.041791][ T8826] R10: ffffc900051afb40 R11: fffff52000a35f6f R12: ffffc90005731000
[  274.067259][ T8826] R13: dffffc0000000000 R14: ffff88806b050630 R15: 0000000000000000
[  274.075405][ T8826] FS:  000055555e309500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  274.087827][ T8826] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  274.094882][ T8826] CR2: 00005651d08285f8 CR3: 000000006a3ee000 CR4: 00000000003506f0
[  274.119619][ T8826] Kernel panic - not syncing: Fatal exception
[  274.126167][ T8826] Kernel Offset: disabled
[  274.130639][ T8826] Rebooting in 86400 seconds..