last executing test programs:

9.311695462s ago: executing program 0 (id=1190):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f00000001c0), 0x81, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
setresuid(0xee00, 0xee01, 0xffffffffffffffff)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
openat(0xffffffffffffff9c, 0x0, 0x511001, 0x408)

8.903667832s ago: executing program 0 (id=1194):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000000c0), 0x8)
sendmmsg$sock(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="643f0e91", 0x4}], 0x1, &(0x7f0000000180)=[@txtime={{0x14, 0x1, 0x3d, 0x6}}], 0x14}}], 0x1, 0x40)

8.264556428s ago: executing program 0 (id=1208):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff42, 0x0})

8.19263512s ago: executing program 0 (id=1202):
syz_mount_image$jfs(&(0x7f0000000a00), &(0x7f0000000080)='./bus\x00', 0xc001, &(0x7f0000001900)=ANY=[@ANYBLOB='discard=0x0000000000000004,usrquota,iocharset=ascii,errors=remount-ro,nointegrity,noquota,nodiscard\x00noquota,nointegresize,discard=0x000000000000043a,iocharset=macromanian,nointegridiscard,dont_appraise,defcontext=sysadm_u,subj_type={[,smackfsdef=nointeerity,func=CREDS_CLECK,audit,fowne2=\x00\x00\x00\x00\x00', @ANYRESOCT=0x0, @ANYBLOB="2c6d65b47d7189617375"], 0x1, 0x61f7, &(0x7f0000002240)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT28ySzk92uU8c7a8/nIzkzv3lmvc/4u7Mv2Zl5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vB2udiLj287RgJeIz0YvoRiyV9WpELK2u5PX7EfFc7DXHsxExWIgob7/3z9MRr0bER6cjdnY318vFFw/Yj+/+8e+/++Gpt/72h8H5//7pTu+1Sevdvfur//z53uG2GQAAANqmKIqikz7mn0mf77tNdwoAmIn8+l8kefmJr3/9z7f+Mk/9UavVarV6BnVVMd69ahERW9XblO8ZfB0PAMfMVnzcdBdokPxbrR8Rp5ruBDDXOk13gCOxs7u53kn5dqqvB6v77flYkJH8tzoPzu+YNJ2mfozJrB5f29GLZyb0Z2lGfZgnOf9uPf9r++3DtN5R5z8rk/If7p/61Do5/149/5qTk393bP5tlfPvP1b+PfkDAAAAAMAcy///v9Lw978Lh9+UA/mk739XZ9QHAAAAAAAAAHjSDjv+3wPG/wMAAIC5VX5WL/3m9MNlk67FVi6/2ol4qrY+0DLpZJnlpvsBAAAAAAAAAAAAAG3S3z+G92onYhARTy0vF0VR/lTV68d12Nsfd23ffmizpp/kAQBg30ena+fydyIWI+JqutbfYHl5uSgWl5aL5WJpIb+fHS4sFkuVz7V5Wi5bGB7gDXF/WJS/bLFyu6ppn5entdd/X3lfw6J3gI49IYP015zQ3FDYAJDsvxrteEU6YYri6UlvPmCE/f8EWomVph9XzL+mH6YAAADA0SuKouiky3mfSd/5d5vuFAAwE/n1v/69wKHq7oT2iCfz+9VqtVqtVn+quqoY7161iIit6m3K9wyG4weAY2YrPm66CzRI/q3Wj4jnmu4EMNc6TXeAI7Gzu7neSfl2qq8HaXz3fCzISP5bnb3b5duPm05TP8ZkVo+v7ejFMxP68+yM+jBPcv7dev7X9tuHab2jzn9WJuU/3Dtlrn1y/r16/jUnJ//u2PzbKufff6z8e/IHAAAAAIA5lv//f8X3v3mTAQAAAAAAAODY2dndXM/nvebv/z83Zj3nf55MOf/O4+a/lOblf6zl/Lu1/L9cW69Xmb//5sP9/9+7m+u/v/Ovz+bpQfNfyDOd9MjqpEdEJ91Tp5+mh9m6R20PesPyngadbq+fjvkpBu/EjbgZG3FhZN1u+ns8bF8baS97OhhpvzjS3n+k/dJI+yBdd6BYyu3nYj1+Ejfj7b32sm1hyvYvTmkvprTn/Hue/1sp59+v/JT5L6f2Tm1auv9h95H9vjoddz9v3Pj8Ly8c/eZMtR29B9tWVW7f2Qb6s/c3OTWMn93euHXu7vU7d26tRZqMLL0YafKE5fwHez8LD5//X9hvz8/71f31/ofDx85/XmxHf2L+L1Tmy+19acZ9a0LOf5h+cv5vp/bx+/9xzn/y/v9yA/0BAAAAAAAAAAAAAACAT1IUxd4pom9ExOV0/k9T52YCALOVX/+LJC9Xq9VqtVp98uqqYrzXq0VE/LV6m/I9wy/G/TIAYJ79LyL+0XQnaIz8Wyxf76+cvth0Z4CZuv3+Bz+6fvPmxq3bTfcEAAAAAAAAAPi08vifq5Xxn1+MiJXaeiPjv74Zq4cd/7OfZx4MMPqEB/qeYLs77HUrw40/H3vjc5+bNP732Xh0/O88Jm6vuh0TDKa0D6e0L0xpX3xkyegVHMae6FGR83++Mt55mf+Z2vDrbRj/tT7mfRvk/M9WHs9l/l+qrVfNv/jt3OW/ddAVt6M7kv/5O+/99Pzt9z945cZ719/deHfjx5fW1i5cunz5ypUr59+5cXPjwv6/R9PrOZDzz2NfOw60XXL+OXP5t0vO/wupln+75Py/mGr5t0vOP7/fk3+75PzzZx/5t0vO/6VUy79dcv5fSbX822Vnd3OhzP/lVMu/XfL+/9VUy79dcv6vpFr+7ZLzP5dq+bdLzv98qg+Qv8vDnyA5//wNl/2/XXL+a6mWf7vk/C+mWv7tkvO/lGr5t0vO/9VUy79dcv5fS7X82yXnfznV8m+XnP/XU33A/Kcd9swxkfO/kmr7f7vk/L+Ravm3S87/m6mWf7vk/F9LtfzbJef/rVTLv11y/t9OtfzbJef/nVTLv11y/q+nWv7t8vD6/2bMmDGTZ5p+ZgIAAAAAAAAAAAAA6mZxOHHT2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/J8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWHvXmPkOuv7gZ/Zm9cOIQZCcPI3ZJOYEJwlu77EF/51MSFcGqAUSAL0gu1612bBN7x2CRTJpoESCaOiior0RVtAqI1UVVgVLyiiNC+qXl6V9gV9U1FVQmpUGRRQkdqKZquZ8zyPZ2Zn5+x6x+uz53w+kv3bnTlnzjNnnnN2fmt/5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ7q43zX62kWVZ80/rr81Z9qLm1xsnNrdue/2NHiEAAACwWv/b+vv5W9INB5exUtsyf/uqf/jGwsLCQvb+4d8b/eLCQrpjIstGN2RZ677o8r99oNG+TPBkNt4Yavt+qGDzwwX3jxTcP1pw/1jB/RsK7h8vuH/RDlhkY/77mNaDbWt9uTnfpdmt2Wjrvm091nqysWFoKP4up6XRWmdh9Fg2l53IZrPpjuXzZRut5b99V3Nbb8vitobatrW1OUN+/MmjcQyNsI+3dWzr6mNGP3xjNvGTH3/y6B+fu3J7r1q4GzoeLx/nfXc3x/npcEs+1ka2Ie2TOM6htnFu7fGaDHeMs9Far/l19zifX+Y4h68Oc011v+bj2VDr6++29tNI+6/10n7aGm77r3uyLLt4ddjdyyzaVjaUbeq4Zejq6zOez8jmYzSn0kuzkRXN07uWMU+bdWZb5zztPibi639XWG9kiTG0v0w//NTYotd9pfM0aj7rpY6V7jk46GOlLHMwzovvtp70Uz3n4Lbw/D9579JzsOfc6TEH0/Num4N3F83BobHh1pjTi9BorXN1Du7oWH64taVGqz53b/85OHXu5Jmp+Y9/4nVzJ48cnz0+e2rXjh3Tu/bs2bdv39SxuROz0/nf17i3y29TNpSOgbvDvovHwGu6lm2fqgtfGdxxON7nONzcteygj8OR7ifXWJsDcvGczo+NR5s7ffzSULbEMdZ6fbav/jjs9bNgpO047PkzpcdxOLKM47C5zJnty3vPMtL2p9cYrtfPgs1tc7D7/Uj3HBz0+5GyzMHm+5HmWP5l+9I/C7aG8T41udL3I8OL5mB6uuHc07wlvd8f39cqveblHc07bhrLzs/Pnn3giSPnzp3dkYWyJl7WNle65+umtueULZqvQyuerwfnXvXUHT1u3xz21fjrmn+NL/laNZfZ/UD/16r10633/uy4dWcWyoCt9f7s9dO8uT9TL9lnfzaX+fTU6t+Lp7607fw7usT5N/b9L+TbSw/15PDoSH78Dqe9M9pxPu58qUZa565Ga9vPTy3vfDwa/qz1+fjWPufjLV3LDvp8PNr95OL5uFH0247V6X49x8M8OTHd/3zcXGbLzpXOyZG+5+N7Qm2E/f/a8K4h9UVtc2epeZu2NTIyGp7XSNxC5zzd1bH8aOjNmtt6Zue1zdP77skfazg9u6vWap5OdC076HmazldLzdNG0W/frk336zke5sWtu/rP0+Yyz+5e/blzY/yy7dw5VjQHR4fHmmMeTZMwP98vbIxz8IHsaHY6O5HNtO4da82nRmtbkw8ubw6OhT9rfa7c0mcO3te17KDnYPo5ttTca4wsfvID0P16jod58fSD/edgc5mH9w72vet94Za0TNt71+7fry31O687unbT9fydV3Ocf723/+9mm8uc2LfSPrP/fro/3HJTj/3UffwudUzNZGuzn7aEcV7Zt/R+ao6nucwX9y9zPh3MsuzCRx9q/b43/PvKn5//3jc6/t2l17/pXPjoQz+6+djfrGT8AKx/L+RlU/6zru1fppbz7/8AAADAuhD7/qFQE/0/AAAAVEbs++P/Ck/0/wAAAFAZse8fCTWpSf+/5eErcy9cyFIyfyGI96fd8Ei+XMy4TofvJxauat7+0Ndmf/qtC8vb9lCWZT975Dd7Lr/lkTiu3EQY5+U3d96+eMULy9r+4ceuLteeX/9yePz4fJY7DXpFcKezLPv2LZ9vbWfiA5da9dlHDrfqey4+9WRzmef359/H9Z97Wb78H4Tw78FjRzrWfy7shx+EOv323vsjrvf1S6/duvfxq9uL6zXufnHraT/9wfxx4+fkfOHJfPm4n5ca/19+7pmvN5d/4tW9x39hqPf4nwmP+7VQ//uV+fLtr0Hz+7jeZ8L44/bieg989Ts9x3/5s/nyZ96SL3c41Lj9+8L3295yZa59fz3RONLxvLK35svF7U9/73da98fHi4/fPf7xQ5c69kf3/Hj2n/LHmepaPt4etxP9Rdf2m4/TPj/j9p/57cMd+7lo+5ff89wrm4/bvf37u5Yb7lq/+xOb/vAzn++5vTieg392puP5HHx3OI7D9p/+YJiP4f7/ufz5ju1Gh9/def6Jy39584WO5xO97Sf59i+/4Xir/vvET3//phfd/OKLdzb3XZZ997354xVt//gfne4Y/1du2956PeL9MaPfvf2lxO2f/djkqdPz5+dm2vZq67Nz3pGPZ8P4xk3N8d4Szq3d3x86fe5Ds2cnpiems2yiuh+hd82+GuqP8nJxpetvfyy8nnd86dub7v3Hz8Xb//nR/PZLb89/br0mLPeFcPvm/PVbaKxy+0/fdVvr+G48m3/fkWMfgK3b/mPfshYMz7/7fUGc72de/qHWfmje1/q5EY/rVY7/+zP543wz7NeF8MnMd992dXvty8fPRrj03vx4X/X+C6e5+Lr+SXi93/mD/PHjuOLz/X54H/OdLZ3nuzg/vnlhqPvxW5/icTGcT7KL+f1xqbi/Lz1/W8/hxc8hyS7e3vr+d9Pj3L6ip7mU+Y/PT52YO3X+ialzs/PnpuY//olDJ0+fP3XuUOuzPA99uGj9q+enTa3z08zsnt3Z9MYsy05n02twwro+429+tbzxn3ns6Mze6XtnZo8dOX/s3GNnZs8ePzo/f3R2Zv7eI8eOzX6saP25mQM7du7ftXfn5PG5mQP79u/ftX9y7tTp5jDyQRXYM/2RyVNnD7VWmT+we/+OBx/cPT158vTM7IG909OT54vWb/1smmyu/RuTZ2dPHDk3d3J2cn7uE7MHduzfs2dn4acBnjxzbH5i6uz5U1Pn52fPTuXPZeJc6+bmz76i9amm+X/N3892a+QfxJe96/496fNZm772qSUfKl+k6wNEr4TPovn7l5zZt5zvY98/GmpSk/4fAAAA6iD2/WOhJvp/AAAAqIzY928INdH/AwAAQGXEvn881KQm/b/8v/z/8vL/+f3y//XK/5/5aJ4rXe/5/5ifl/+vhxuc/1/19geQ/7+z353y/wXk/29ofn5Vhm78+OX/5f9ZrGz5/9j3b8yyWvb/AAAAUAex798UaqL/BwAAgMqIff9NoSb6fwAAAKiM2Pe/KNSkJv2//P+y8v87iwJX1c//u/6//H+2PvP/8cWR/6+NFefvH3+049sK5P/7kv8vIP+/fvP/JRi//L/8P91Gl7znRuX/Y99/c6hJTfp/AAAAqIPY97841ET/DwAAAJUR+/5bQk30/wAAAFAZse/fHGpSk/5f/t/1/+X/5f8rnf9f7fX/2wYj/78+uP5/f/L/Ba45/z8u/78e8/+jgx1/ufP/hcOX/+e6KNv1/2Pf/5JQk5r0/wAAAFAHse9/aaiJ/h8AAAAqI/b9Lws10f8DAABAZcS+/9ZQk5r0//L/8v/y//L/8v+9t198/f/8K/n/cpH/70/+v4Dr/9cr/z/g8Zc7/z/o6/+Pvrl7ffl/eilb/j/2/S8PNalJ/w8AAAB1EPv+20JN9P8AAABQGbHvf0Woif4fAAAAKiP2/VtCTWrS/8v/y//L/8v/y//33n5x/j8n/18u8v/9yf8XkP+X/5f/X17+v8ebX/l/eilb/j/2/beHmtSk/wcAAIA6iH3/HaEm+n8AAACojNj3/79QE/0/AAAAVEbs+7eGmtSk/9/y8JXHv9T6Sv4/k/+X/69B/v/+Mfl/+f9qk//vT/6/gPy//L/8/zKv/7/YSvL/G4oejMooW/4/9v2vDDWpSf8PAAAAdRD7/leFmuj/AQAAoDJi339nqIn+HwAAACoj9v0ToSbrr/9/39A1rOT6/9XK///pXz19Zyb/L/9fsP2K5v/jNJD/rzn5//7k/wvI/8v/y/+vSf6f+ihb/j/2/XeFmqy//h8AAABYQuz77w410f8DAABAZcS+/55QE/0/AAAAVEbs+7eFmtSk/5f/r1b+P5L/l//vt/2K5v8T+f96k//voe0gXSf5/wn5f/n/9Tj+65n/H1/G8x9M/j+++5X/ZzDKlv+Pff+rQ01q0v8DAABAHcS+/95QE/0/AAAAVEbs+18TaqL/BwAAgMqIff99oSY16f/l/+X/5f/l/+X/e29f/n99kv/vb6X5/zHX/5f/l/8vRf7f9f9Zr8qW/499/2tDTWrS/wMAAEAdxL5/e6iJ/h8AAAAqI/7/zfz/ver/AQAAoIpi3z8ZalKT/n8V+f+FYfn/RP6/c/xlzf835P/l/+X/K0/+v791cv1/+f8S5f+bt8v/y//L/3Otypb/j33/60JNatL/AwAAQB3Evv+BUBP9PwAAAFRG7PunQk30/wAAAFAZse+fDjWpSf/v+v+1y/9vqHP+3/X/l5X/vynLMvl/+f91S/6/P/n/AvL/rv9ftfx/lsn/c0OVLf8f+/4doSY16f8BAACgDmLfvzPURP8PAAAAlRH7/l2hJvp/AAAAqIzY9+8ONalJ/y//X7v8f62v/y//7/r/8v/VJ//fn/x/Afl/+f+q5f9d/58brGz5/9j3PxhqUpP+HwAAAOog9v17Qk30/wAAAFAZse/fG2oS+v9e/68bAAAAWF9i378v1KQm//4v/1+R/P9v/V3HtuX/5f/7bX8w+f+N8v+hyv+XS0Xz/92HxTWT/y8g/y//L/8v/89AlS3/H/v+/aEmNen/AQAAoA5i3//6UBP9PwAAAFRG7Pv/f6iJ/h8AAAAqI/b9PxdqUpP+X/6/Ivn/LvL/8v/9tu/6//L/VVbR/P/AVCr/PyT/L/9frvHL/8v/s9j1z//Hr5aX/499/4FQk5r0/wAAAFAHse//+VAT/T8AAABURuz73xBqov8HAACAyoh9/8FQk5r0//L/8v/y//L/1yf//4asWxnz/83JI/9fLfL//VUq/+/6//L/JRu//L/8P4uV7fr/se9/Y6hJTfp/AAAAqIPY9z8UaqL/BwAAgMqIff+bQk30/wAAAFAZse9/ONSkJv2//L/8v/y//L/r//fevvz/+iT/35/8fwH5f/l/+X/5fwaqbPn/2Pe/OdSkJv0/AAAA1EHs+98SaqL/BwAAgMqIff9bQ030/wAAAFAZse9/W6hJTfp/+X/5f/l/+X/5/97bl/9fn+T/+5P/LyD/L/8v/y//z0CVLf8f+/5fCDWpSf8PAAAAdRD7/kdCTfT/AAAAUBmx7397qIn+HwAAACoj9v3vCDWpSf8v/y//L/8v/y//33v78v/rk/x/f/L/BeT/5f/l/+X/Gaiy5f9j3//OUJOa9P8AAABQB7Hv/8VQE/0/AAAAVEbs+98VaqL/BwAAgMqIff8vhZrUpP+X/5f/L1f+f+FC+3ry//L/2aDy/82V5P9rQf6/P/n/Aj3y/xvk/+X/5f/l/7lmZcv/x77/3aEmNen/AQAAoA5i3/+eUBP9PwAAAFRG7PvfG2qi/wcAAIDKiH3/o6EmNen/5f9LkP/P1jz/n55y+fL/WfatC2NZlsn/Z/L/iev/y/+vhPx/f/L/BVz/X/5f/l/+n4EqW/4/9v2PhZrUpP8HAACAOoh9/+OhJvp/AAAAqIzY978v1ET/DwAAAJUR+/73h5rUpP+X/y/O/3dnkXtx/f/O8a8u/1+l6/+PdMyPOuX/x9tezzQv5f/l/9eA/H9/8v8F5P9Dfj4bkv8vYf4/zOaNS6wv/08ZlS3/H/v+D4Sa1KT/BwAAgDqIff8vh5ro/wEAAKAyYt//K6Em+n8AAACojNj3/2qoSU36f/n/Elz/X/6/wvn/zvlRp/y/6/8vJv+/NuT/+5P/LyD/7/r/Zc7/F5D/p4zKlv+Pff+vhZos2fj96D+X8TQBAACAEol9/wdDTWry7/8AAABQB7HvPxRqov8HAACAyoh9/+FQk5r0/zcy/x+VK/8fr6gq/y//v+7y/yPy/zn5/3obXP7/FTdnmfy//L/8v/y//L/8P6tRtvx/7PuPhJrUpP8HAACAOoh9/6+Hmuj/AQAAoDJi33801ET/DwAAAJUR+/6ZUJOa9P+u/+/6/4PK//9M/v9G5/9d/z+Q/6831//vT/6/gPy//L/8v/w/A1W2/H/s+2dDTWrS/wMAAECFpV8Hx77/WKiJ/h8AAAAqI/b9x0NN9P8AAABQGbHv/1CoSU36f/l/+X/X/78R+f+RjuXl/3Py//L/gyD/35/8fwH5f/l/+X/5fwaqbPn/2PfPhZrUpP8HAACAOoh9/4dDTfT/AAAAUBmx7/9IqIn+HwAAACoj9v0nQk1q0v/L/8v/1z3/38iyi67/L//fa/vy/+uT/H9/8v8F5P/l/+X//4+9+3iy6yzzOH7HI0tqNvAHsGDNiiUsKLNhz5adq1ibaHKQTc5gMiabnHNOJuecsQGTczTJhipR7n6eR2rdq3Mk9VHfc97389k8I800fRtrZuqH6luv/p9Jza3/z91/RdzSyf4HAACAHuTuv2/cYv8DAABAM3L33y9usf8BAACgGbn77x+3dLL/9f/6/977/9VW3v/f/z+v/9+j/9f/T2Gtvz9yfl9/1v7/Lne98nL9v/5f/z9I/6//1/9zprn1/7n7HxC3dLL/AQAAoAe5+x8Yt9j/AAAA0Izc/Q+KW+x/AAAAaEbu/ivjlk72f8f9/42nf46k/9f/7/5Gz/3/9fp//f+yef9/mP5/hP5f/6//1/8zqbn1/7n7Hxy3dLL/AQAAoAe5+x8St9j/AAAA0Izc/Q+NW+x/AAAAaEbu/ofFLZ3s/477f+//6//LMvr/o97/P+Pn0f/r/zfR/w/T/4/Q/+v/9f/6fyY1t/4/d//D45ZO9j8AAAD0IHf/I+IW+x8AAACakbv/kXGL/Q8AAADNyN3/qLilk/2v/9f/6/+X0v8f0vv/+n/9/8Jdtzr1fxP0/+v0/yNG+v/VSv8/5Jz7+c0/3nI+/1no//X/rJtb/5+7/9Fxyz1Wq6MX+kMCAAAAs5K7/zFxSyd//w8AAAA9yN1/Im6x/wEAAKAZufuvils62f/6f/2//l//r//f/P31/8t0bv39sbN+vf4/nLX/v/MdrrhPv/2/9/+Hef9f/6//50xz6/9z918dt3Sy/wEAAKAHufsfG7fY/wAAANCM3P2Pi1vsfwAAAGhG7v7Hxy2d7H/9f2v9///v+7rT+v/d2kX/r//X/+v/W3fQ/l7/H7p+/3+nfqn/1//r//X/HMzc+v/c/U+IWzrZ/wAAANCD3P1PjFvsfwAAAGhG7v4nxS32PwAAADQjd/+T45ZO9r/+v7X+f//Xef9f/7/p++v/9f8t0/8P0/+PaOX9/wv8U7Ptfv6gtv359f/6f9bNrf/P3f+UuKWT/Q8AAAA9yN3/1LjF/gcAAIBm5O5/Wtxi/wMAAEAzcvc/PW7pZP/r//X/y+j/8zvo//X/F7//T/r/ZdL/D9P/j2il/79A2+7nl/759f/6f9bNrf/P3f+MuKWT/Q8AAAA9yN3/zLjF/gcAAIBm5O5/Vtxi/wMAAEAzcvc/O27pZP/r//X/y+j/vf+v//f+v/7/3Oj/h+n/R+j/9f/6f/0/k5pb/5+7/5q4pZP9DwAAAD3I3f+cuMX+BwAAgGbk7n9u3GL/AwAAQDNy9z8vbulk/+v/9f/6f/2//n/z99f/L5P+f5j+f4T+X/+v/9f/M6kZ9f+nfdXx1fPjlk72PwAAAPQgd/8L4hb7HwAAAJqRu/+FcYv9DwAAAM3I3f+iuKWT/a//n03/v5vztdX/76xWqwvu/++p/192/79z2j/P+nOp/9f/HwL9/7Al9v8n9P9F/z/vz6//1/+zbkb9/+6vc/e/OG7pZP8DAABAD3L3Xxu32P8AAADQjNz9L4lb7H8AAABoRu7+l8Ytnex//f9s+v9dbfX/3v8/889HT/2/9//X6f8Ph/5/2BL7/5X+v+j/5/359f/6f9bNrf/P3f+yuOnopRf8IwIAAAAzk7v/5XFLJ3//DwAAAD3I3f+KuMX+BwAAgIW6Zu13cve/Mm7pZP/r/6ft/4+e9nv6f/3/mX8+9P/6f/3/xaf/H6b/H6H/1//r//X/TGpu/X/u/lfFLZ3sfwAAAOhB7v7r4hb7HwAAAJqRu//VcYv9DwAAAM3I3f+auKWT/a//9/6//l//r//f/P31/8uk/x+m/x+h/9f/b7f/P3bqv9T/04bz6P9Pnjx54qL3/7n7Xxu3dLL/AQAAoAe5+18Xt9j/AAAA0Izc/a+PW+x/AAAAaEbu/jfELZ3sf/3/xej/92rFWff/+Ud9Wf3/VauV/l//r//X/w/T/w/T/4/Q/+v/vf+v/2dSc3v/P3f/G+OWTvY/AAAA9CB3/5viFvsfAAAAmpG7/81xi/0PAAAAzcjd/5a4pZP9r//3/v+C+n/v/+v/9/08C+v/b13p/w/FIvr/nbN//7n3/1fr//X/A7rr/+91t32/1P/r/1k3t/4/d/9b45ZO9j8AAAD0IHf/2+IW+x8AAACakbv/7XGL/Q8AAADNyN3/jrjpSCf7X/+v/9f/6//1/5u//yG//390tVrp/yewiP5/wNz7f+//6/+HdNf/n0H/r/9n3dz6/9z974xbOtn/AAAA0IPc/e+KW+x/AAAAaEbu/nfHLfY/AAAANCN3/3vilk72v/5f/6//1/833/9fvYj+3/v/E9H/Dzmi/x+j/9f/6//1/xyKbfX/ufvfG7d0sv8BAACgB7n73xe32P8AAADQjNz9749b7H8AAABoRu7+D8Qtje//o3H1//r/8+n/83Pq/9vq/4/Nrv8/vu9fr5P3//X/E9H/D9P/j9D/6//1/9fo/5nS3N7/z93/wbil8f0PAAAAPcnd/6G49R/d2v8AAADQjNz9H45b7H8AAABoRu7+j8Qtnex//b/+3/v/+v/m3//X/3dF/z9M/z9iTv3/3W9Z+3j6/3l//kb6f+//M6m59f+5+z8at3Sy/wEAAKAHufs/FrfY/wAAANCM3P0fj1vsfwAAAGhG7v7r45ZO9r/+X/+v/9f/6//3/hnq/9ug/x92OP3/jv7f+//Vz/9f/G+B/l//P/b1tGlu/X/u/k/ELZ3sfwAAAOhB7v5Pxi32PwAAADQjd/+n4hb7HwAAABbpyIbfy93/6bilk/2v/9f/6//1//r/zd9f/79M+v9h3v8/m9tde/qv9P/n2s/fad+vlvb+/5n//0v/r/9nenPr/3P3fyZu6WT/AwAAQA9y9382brH/AQAAoBm5+z8Xt9j/AAAA0Izc/Z+PWzrZ//p//X8z/f9tH0L/r//X/3dP/z9M/z/C+/9bfT9/6Z9f/6//Z93c+v/c/V+IWzrZ/wAAANCD3P1fjFvsfwAAAGhG7v4vxS32PwAAADRjd/dnXNbh/tf/b63/3/3X1/97/1//r//X/09L/z9M/z9C/6//1//r/5nU3Pr/L+9+1fHVV+KWTvY/AAAA9CB3/1fjFvsfAAAAmpG7/2txi/0PAAAAzcjd//W4pZP9r//3/v8y+v+TJ0+e0P/r//f/PKf6/5v0/xT9/zD9/wj9v/5f/6//Z1Jz6/9z938jbulk/wMAAEAPcvd/M26x/wEAAKAZufu/FbfY/wAAANCM3P3fjls62f/6/xn0/8f1/97/1/+vvP+v/5+I/n+znbj6/xEt9v/Hz/3H33Y/f1Db/vz6f/0/6+bW/+fu/07c0sn+BwAAgB7k7v9u3LK2/284xE8FAAAATCl3//fiFn//DwAAAM3I3f/9uKWT/a//P7z+/7Z/73p5/39ntfnz6//1//p//f/Fpv8fpv8f0WL/fx623c8v/fPr//X/rJtb/5+7/wdxy/7hd+n5/ZQAAADAnOTu/2Hc0snf/wMAAEAPcvffELfY/wAAANCM3P03xi2d7H/9/wze/2+w/z+c9/+P6//1/1P2/5fo/9ug/x+m/x+h/9f/6/8n6v/zT7P+v3dz6/9z9/8obulk/wMAAEAPcvf/OG6x/wEAAKAZuft/ErfY/wAAANCM3P03xS2n7f9NbXcr9P/6/+X2/97/1/97/1//v07/vzP43z3X/v/Y6mD9f9L/6//1/732/97/Z8/c+v/c/T+NW/z9PwAAACzOpWf5/dz9P4tb7H8AAABoRu7+n8ct9j8AAAA0I3f/L+KWmy/Z1kc6VPp//b/+X/+v/9/8/fX/y6T/H+b9/xH6/yn6+cv0/230/6uV/p+Dm1v/n7v/l3GLv/8HAACAZuTu/1XcYv8DAABAM3L3/zpusf8BAACgGbn7fxO3dLL/9f/6/wP2/7tppv5/j/5/j/5/M/3/4dD/D9P/j9D/e/9f/+/9fyY1t/4/d/9v45ZO9j8AAAD0IHf/7+IW+x8AAACakbv/93GL/Q8AAADNyN3/h7ilk/2/tf4//q3W/2+3/7/E+/+79P/6/03fX/+/TPr/Yfr/Efp//b/+X//PpObW/+fu/2Pc0sn+BwAAgB7k7v9T3GL/AwAAQDNy9/85brH/AQAAoBm5+/8St3Sy/73/33f/P8H7/xP1/5ffMT+7/v/U1+n/9+j/9f/nQ/8/TP+/Wf2D0v/r//X/+n8mNbf+P3f/X+OWTvY/AAAA9CB3/9/iFvsfAAAAmpG7/+a4xf4HAACAZuTu/3vc0sn+1//r/+fR/5+i/z/1dfr/Pfp//f/50P8P22b/f+/bj3/bi97/Hxv5APr//Aj6f/2//p9JzK3/z93/j7ilk/0PAAAAPcjd/8+4xf4HAACAZuTu/1fcYv8DAABAM3L3/ztu6WT/j/T/pyo5/f8g/f/+z6//3/znQ/+v/9f/X3z6/2He/x+h//f+v/5f/8+k5tb/5+6/JW7pZP8DAABAD3L33xq32P8AAADQjNz9/4lb7H8AAABoRu7+/8Ytnex/7/8vqf+/TP/fQf9/VP+v/9f/H4j+f5j+f4T+X/+v/9f/M6m59f+5+/8XAAD//zhVUCE=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

7.205575564s ago: executing program 0 (id=1217):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "e2599803"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

6.513528671s ago: executing program 0 (id=1223):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x3, 0x1]}, 0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000340)={0x2, [0x3, 0xb]}, &(0x7f0000000380)=0x8)

6.413075263s ago: executing program 32 (id=1223):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x3, 0x1]}, 0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000340)={0x2, [0x3, 0xb]}, &(0x7f0000000380)=0x8)

4.599214497s ago: executing program 1 (id=1254):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x1000016, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x0)

4.424722072s ago: executing program 1 (id=1256):
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

3.552247583s ago: executing program 1 (id=1259):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x15, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x16, 0xf3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0x2, 0x6, {0x6, 0x5, "c4544ee2"}}, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

3.187631762s ago: executing program 3 (id=1260):
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x585c, 0x4)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x10)

3.092463514s ago: executing program 3 (id=1261):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000096, 0x0, 0x80}]})

3.040424526s ago: executing program 4 (id=1262):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendto$phonet(r0, 0x0, 0xfffffef3, 0x2004c810, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
connect$phonet_pipe(r0, &(0x7f0000000140)={0x23, 0x40, 0x80, 0x8}, 0x10)

2.970304197s ago: executing program 3 (id=1263):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0xe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x77, 0x8, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x40, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc4, 0x4, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="4031280000002821f70ba381030000000000000000cb4fdca0b67b480d54f365c5933e05"], 0x0, 0x0, 0x0, 0x0}, 0x0)

2.969717637s ago: executing program 4 (id=1264):
r0 = syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f00000015c0)='./file0\x00', 0x2000000, &(0x7f0000001400), 0x0, 0x559e, &(0x7f0000001600)="$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")
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000006bc0)={{r0}, 0x0, 0x4, @inherit={0x48, 0x0}, @subvolid=0xad})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2.394098422s ago: executing program 2 (id=1268):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000440)=[{0x99, 0x0, 0x0, 0x0}, {0x1000, 0x2000, 0x0, 0x0}, {0x8, 0x8000, 0x0, 0x0}], 0x3})

1.831512756s ago: executing program 4 (id=1269):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x8000)

1.492307324s ago: executing program 1 (id=1270):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6}, @device_b, @device_a, @initial, {0x8, 0xd85}}, 0x2a, @void}}]}, 0x3c}}, 0x0)

1.367714447s ago: executing program 1 (id=1271):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r2, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x40000)

1.154023312s ago: executing program 4 (id=1272):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x6, 0x37, 0x2, 0x9}]}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0)

1.086961613s ago: executing program 4 (id=1273):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
syz_emit_ethernet(0x1e, &(0x7f0000000540)={@multicast, @link_local, @void, {@can={0xc, {{0x4}, 0x6, 0x0, 0x0, 0x0, "194a519dbecd5071"}}}}, 0x0)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810000000000000000001100000024000980"], 0x38}}, 0x0)

1.078190184s ago: executing program 5 (id=1225):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000001c0)='./file2\x00', 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYBLOB, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="30873fbc8711048bea9eb55574810b5cbc454ced5a63c7941ba393a86e5b7a8fdcf7b75e9bd7459f7e129fadabeef1e9b084a7568c9ce90016069121b0700a4f948941c59d1e8e3f80ffa601a20f979dd6e1fe150ba283f14999be8b6fe530f67dbac2443da65608409abd01602b80fbbf5d2af3b0c444c5b6315227c272020000000000000040bd650d5c4a54e6cecfcfd2e41e9ec85c6a274e668e74b8cdd2c3cba6972ccffb41487a8202816ac3ba65bb5cb3d1323194c102f39aae52e46500849660e484f39210872d958d69f61e1311c51a34b64f81cb8a5cc30bf568185b0bb1f0d438777c833a9b362a10"], 0x21, 0x627f, &(0x7f0000001600)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000040)='./bus\x00', 0x2004ca9, 0x0, 0x0, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)

971.639767ms ago: executing program 1 (id=1274):
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0xb, 0x3, @generic=0x73, 0x7, 0x73, 0xff})

947.444917ms ago: executing program 4 (id=1275):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

793.809181ms ago: executing program 3 (id=1276):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x80000000, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f00000006c0)}}, {{&(0x7f0000000740)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000002180)}}, {{&(0x7f0000002340)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xe4f}, 0x1c, 0x0, 0x0, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4001c00)

701.924553ms ago: executing program 3 (id=1277):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0xc008aeba, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x5625e9b0})
ioctl$KVM_SET_PIT2(r1, 0x8010aebb, &(0x7f0000000280)={[{0x5, 0x2000, 0xfe, 0x0, 0x4, 0x0, 0x1, 0xfc, 0x5, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x42, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x5, 0x4, 0x3}, {0xffffffff, 0x0, 0x52, 0x1, 0x1, 0xfc, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x5, 0x26}], 0x200008})

594.487835ms ago: executing program 3 (id=1278):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0)

472.634678ms ago: executing program 2 (id=1279):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

379.093451ms ago: executing program 2 (id=1280):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmmsg(r0, &(0x7f0000002680)=[{{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000200)="5738948336c589775501e79c80f3", 0xe}], 0x1}}], 0x1, 0x40014)

332.824712ms ago: executing program 2 (id=1281):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x3c}}, 0x20000010)

196.853226ms ago: executing program 2 (id=1282):
r0 = socket$netlink(0x10, 0x3, 0x15)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0)

42.351389ms ago: executing program 5 (id=1283):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f00000000c0), 0x10)

0s ago: executing program 2 (id=1284):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x824}, 0x0)

kernel console output (not intermixed with test programs):

07] EXT4-fs (loop2): 1 truncate cleaned up
[   92.689788][ T5107] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,noblock_validity,. Quota mode: none.
[   92.743279][ T5107] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.277: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   92.826896][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'.
[   92.835902][ T5107] EXT4-fs (loop2): Remounting filesystem read-only
[   92.838932][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'.
[   92.867469][ T5107] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem
[   92.877196][ T4229] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   92.911720][ T5107] EXT4-fs (loop2): Remounting filesystem read-only
[   92.925500][ T5129] loop1: detected capacity change from 0 to 1024
[   92.929247][ T5107] EXT4-fs warning (device loop2): ext4_rename_delete:3792: inode #2: comm syz.2.277: Deleting old file: nlink 4, error=-117
[   93.117077][   T26] audit: type=1800 audit(1785294009.939:20): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.287" name="file1" dev="loop1" ino=20 res=0 errno=0
[   93.246925][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.290443][ T4229] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   93.321483][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.363720][ T4229] usb 4-1: config 0 descriptor??
[   93.424418][ T5144] loop2: detected capacity change from 0 to 512
[   93.559252][ T5144] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   93.562964][ T5139] loop4: detected capacity change from 0 to 32768
[   93.597925][ T5144] EXT4-fs (loop2): orphan cleanup on readonly fs
[   93.610399][ T5144] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.294: Block bitmap for bg 0 marked uninitialized
[   93.660965][ T5139] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.292 (5139)
[   93.694638][ T5139] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[   93.704395][ T5139] BTRFS info (device loop4): using free space tree
[   93.709611][ T5144] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   93.712863][ T5139] BTRFS info (device loop4): has skinny extents
[   93.752849][ T5144] EXT4-fs (loop2): 1 orphan inode deleted
[   93.762640][ T5144] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   93.878606][ T5144] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[   93.894910][ T5144] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: none.
[   93.897806][ T4229] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[   93.916760][ T4229] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input11
[   93.949199][ T5144] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.294: Block bitmap for bg 0 marked uninitialized
[   93.974643][ T5144] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.294: Block bitmap for bg 0 marked uninitialized
[   93.989355][ T5139] BTRFS info (device loop4): enabling ssd optimizations
[   94.021495][ T5144] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.294: Block bitmap for bg 0 marked uninitialized
[   94.077862][ T4229] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[   94.146601][   T26] audit: type=1800 audit(1785294010.959:21): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.292" name="file1" dev="loop4" ino=260 res=0 errno=0
[   94.638521][ T4871] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   94.911255][ T5182] capability: warning: `syz.4.301' uses 32-bit capabilities (legacy support in use)
[   94.924377][ T5182] program syz.4.301 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.979912][ T1108] usb 4-1: USB disconnect, device number 6
[   95.339975][ T5201] loop1: detected capacity change from 0 to 128
[   95.388817][ T5203] overlayfs: upper fs does not support file handles, falling back to index=off.
[   95.401124][ T5203] overlayfs: fs on '.' does not support file handles, falling back to xino=off.
[   95.434573][ T5201] fuse: Invalid group_id
[   95.667912][ T5211] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   96.046364][ T5234] loop3: detected capacity change from 0 to 1024
[   96.142699][ T4871] kernel read not supported for file /dsp1 (pid: 4871 comm: kworker/1:12)
[   96.265312][ T5240] IPVS: persistence engine module ip_vs_pe_‘‚ not found
[   96.372365][ T5251] netlink: 'syz.4.331': attribute type 3 has an invalid length.
[   96.498680][ T5255] loop3: detected capacity change from 0 to 64
[   96.552130][ T5243] netlink: 'syz.1.329': attribute type 6 has an invalid length.
[   96.585213][ T5263] loop0: detected capacity change from 0 to 64
[   96.691392][ T5255] attempt to access beyond end of device
[   96.691392][ T5255] loop3: rw=2049, want=162, limit=64
[   96.737655][ T5255] Buffer I/O error on dev loop3, logical block 161, lost async page write
[   96.783076][ T5255] attempt to access beyond end of device
[   96.783076][ T5255] loop3: rw=2049, want=163, limit=64
[   96.839593][ T5255] Buffer I/O error on dev loop3, logical block 162, lost async page write
[   96.905159][ T5255] attempt to access beyond end of device
[   96.905159][ T5255] loop3: rw=2049, want=164, limit=64
[   96.921440][ T5274] loop4: detected capacity change from 0 to 512
[   96.929412][ T5255] Buffer I/O error on dev loop3, logical block 163, lost async page write
[   96.950733][ T5255] attempt to access beyond end of device
[   96.950733][ T5255] loop3: rw=2049, want=168, limit=64
[   96.967437][ T5255] Buffer I/O error on dev loop3, logical block 167, lost async page write
[   97.009887][ T5274] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[   97.019243][ T5255] attempt to access beyond end of device
[   97.019243][ T5255] loop3: rw=2049, want=170, limit=64
[   97.032142][ T5255] Buffer I/O error on dev loop3, logical block 169, lost async page write
[   97.041812][ T5255] attempt to access beyond end of device
[   97.041812][ T5255] loop3: rw=2049, want=172, limit=64
[   97.064829][ T5255] Buffer I/O error on dev loop3, logical block 171, lost async page write
[   97.075895][ T5255] attempt to access beyond end of device
[   97.075895][ T5255] loop3: rw=2049, want=173, limit=64
[   97.089168][ T5255] Buffer I/O error on dev loop3, logical block 172, lost async page write
[   97.118868][ T5274] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[   97.134474][ T5274] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.432643][ T5289] loop0: detected capacity change from 0 to 512
[   97.568575][ T5289] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   97.694702][ T5301] netlink: 'syz.1.353': attribute type 2 has an invalid length.
[   97.707029][ T5301] netlink: 14 bytes leftover after parsing attributes in process `syz.1.353'.
[   97.796597][ T5036] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   97.822716][ T5292] loop3: detected capacity change from 0 to 16384
[   97.912336][ T5305] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   98.078536][ T5036] usb 3-1: Using ep0 maxpacket: 16
[   98.386882][ T5036] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   98.406715][ T5036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.415251][ T5036] usb 3-1: Product: syz
[   98.455578][ T5036] usb 3-1: Manufacturer: syz
[   98.467771][ T5036] usb 3-1: SerialNumber: syz
[   98.485846][ T5036] r8152-cfgselector 3-1: config 0 descriptor??
[   98.621738][ T5332] loop3: detected capacity change from 0 to 256
[   98.713079][ T5334] IPVS: sh: UDP 0.0.0.0:0 - no destination available
[   98.719849][ T5332] FAT-fs (loop3): Directory bread(block 64) failed
[   98.751305][ T5336] bridge_slave_0: default FDB implementation only supports local addresses
[   98.758836][ T5332] FAT-fs (loop3): Directory bread(block 65) failed
[   98.817464][ T5332] FAT-fs (loop3): Directory bread(block 66) failed
[   98.835642][ T5332] FAT-fs (loop3): Directory bread(block 67) failed
[   98.854822][ T5332] FAT-fs (loop3): Directory bread(block 68) failed
[   98.881931][ T5332] FAT-fs (loop3): Directory bread(block 69) failed
[   98.896358][ T5340] loop1: detected capacity change from 0 to 8
[   98.928200][ T5332] FAT-fs (loop3): Directory bread(block 70) failed
[   98.959148][ T5332] FAT-fs (loop3): Directory bread(block 71) failed
[   98.982759][ T5332] FAT-fs (loop3): Directory bread(block 72) failed
[   99.008282][ T5036] r8152-cfgselector 3-1: Unknown version 0x0000
[   99.014726][ T5036] r8152-cfgselector 3-1: bad CDC descriptors
[   99.027601][ T5332] FAT-fs (loop3): Directory bread(block 73) failed
[   99.096910][ T5036] r8152-cfgselector 3-1: Unknown version 0x0000
[   99.129105][ T5036] r8152-cfgselector 3-1: USB disconnect, device number 4
[   99.751634][ T5383] netlink: 27 bytes leftover after parsing attributes in process `syz.2.391'.
[   99.829689][ T5386] loop0: detected capacity change from 0 to 512
[   99.893629][ T5392] netlink: 71 bytes leftover after parsing attributes in process `syz.1.396'.
[   99.928889][ T4228] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   99.956972][ T5386] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  100.010780][ T5386] EXT4-fs (loop0): 1 truncate cleaned up
[  100.017441][ T5386] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  100.055761][   T26] audit: type=1800 audit(1785294016.869:22): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.393" name="file1" dev="loop0" ino=15 res=0 errno=0
[  100.214754][ T5403] sctp: [Deprecated]: syz.3.399 (pid 5403) Use of int in maxseg socket option.
[  100.214754][ T5403] Use struct sctp_assoc_value instead
[  100.316882][ T4228] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  100.356653][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.425157][ T4228] usb 5-1: config 0 descriptor??
[  100.456910][ T4871] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  100.488252][ T4228] cp210x 5-1:0.0: cp210x converter detected
[  100.826849][ T4871] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  100.842131][ T4871] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.863428][ T4871] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  100.883820][ T4871] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.916702][ T4228] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  100.967376][ T4228] usb 5-1: cp210x converter now attached to ttyUSB0
[  101.039352][ T4871] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  101.093798][ T4871] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  101.132722][ T4871] usb 2-1: Product: syz
[  101.146855][ T4871] usb 2-1: Manufacturer: syz
[  101.175091][ T1111] usb 5-1: USB disconnect, device number 7
[  101.195010][ T1111] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  101.227725][ T4871] cdc_wdm 2-1:1.0: skipping garbage
[  101.232966][ T4871] cdc_wdm 2-1:1.0: skipping garbage
[  101.247356][ T1111] cp210x 5-1:0.0: device disconnected
[  101.273240][ T4871] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  101.287140][ T4871] cdc_wdm 2-1:1.0: Unknown control protocol
[  101.397894][ T5418] loop2: detected capacity change from 0 to 40427
[  101.462454][ T5418] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  101.505734][ T4228] usb 2-1: USB disconnect, device number 4
[  101.506063][ T5418] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  101.561874][ T5418] F2FS-fs (loop2): invalid crc value
[  101.613019][ T5418] F2FS-fs (loop2): Found nat_bits in checkpoint
[  101.671086][ T5418] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  101.679140][ T5418] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  101.780081][ T5418] F2FS-fs (loop2): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem
[  102.330712][ T5466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'.
[  102.703448][ T5488] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  102.842662][ T5496] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  103.063508][ T5508] loop1: detected capacity change from 0 to 256
[  103.103815][ T5508] exfat: Deprecated parameter 'utf8'
[  103.176779][ T5508] exfat: Deprecated parameter 'utf8'
[  103.182419][ T5508] exfat: Deprecated parameter 'namecase'
[  103.296448][ T5508] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  103.364557][ T5521] loop4: detected capacity change from 0 to 256
[  103.499063][ T5521] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  103.525093][ T5526] loop0: detected capacity change from 0 to 1024
[  103.551849][ T5521] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  103.607975][ T5526] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  103.652702][ T5526] EXT4-fs (loop0): inline encryption not supported
[  103.691941][ T5521] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d)
[  103.771935][ T5500] loop2: detected capacity change from 0 to 32768
[  103.793406][ T5526] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.451: lblock 2 mapped to illegal pblock 2 (length 1)
[  103.837299][ T5526] EXT4-fs (loop0): Remounting filesystem read-only
[  103.844803][ T5526] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  103.854500][ T5526] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.451: lblock 0 mapped to illegal pblock 48 (length 1)
[  103.870534][ T5500] XFS (loop2): Mounting V5 Filesystem
[  103.892811][ T5526] EXT4-fs (loop0): Remounting filesystem read-only
[  103.905526][ T5526] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  103.946652][ T5035] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  103.961270][ T5526] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.451: Failed to acquire dquot type 0
[  104.017019][ T5526] EXT4-fs (loop0): Remounting filesystem read-only
[  104.023876][ T5526] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  104.042898][ T5500] XFS (loop2): Ending clean mount
[  104.050634][ T5500] XFS (loop2): Quotacheck needed: Please wait.
[  104.094654][ T5526] EXT4-fs (loop0): Remounting filesystem read-only
[  104.094708][ T5526] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.451: mark_inode_dirty error
[  104.094907][ T5526] EXT4-fs (loop0): Remounting filesystem read-only
[  104.094921][ T5526] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  104.094991][ T5526] EXT4-fs (loop0): 1 orphan inode deleted
[  104.095007][ T5526] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,noblock_validity,auto_da_alloc,errors=remount-ro,mblk_io_submit,inlinecrypt,. Quota mode: none.
[  104.149281][ T5500] XFS (loop2): Quotacheck: Done.
[  104.156658][ T1346] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  104.160245][ T1346] EXT4-fs (loop0): Remounting filesystem read-only
[  104.160269][ T1346] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  104.160303][ T1346] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0
[  104.162501][ T1346] EXT4-fs (loop0): Remounting filesystem read-only
[  104.216796][ T5035] usb 4-1: Using ep0 maxpacket: 32
[  104.232475][ T4193] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  104.244353][ T4193] EXT4-fs (loop0): Remounting filesystem read-only
[  104.244377][ T4193] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  104.244633][ T4193] EXT4-fs (loop0): Remounting filesystem read-only
[  104.244649][ T4193] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  104.244812][ T4193] EXT4-fs (loop0): Remounting filesystem read-only
[  104.336800][ T5035] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  104.336830][ T5035] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.356771][ T5035] usb 4-1: config 0 descriptor??
[  104.409993][ T5546] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  104.685343][ T5538] loop1: detected capacity change from 0 to 40427
[  104.702880][ T4195] XFS (loop2): Unmounting Filesystem
[  104.740694][ T5538] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  104.763277][ T5538] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  104.772663][ T5035] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  104.793557][ T5035] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  104.845170][ T5538] F2FS-fs (loop1): invalid crc value
[  104.872364][ T5035] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  104.894708][ T5035] usb 4-1: media controller created
[  104.940414][ T5555] i2c i2c-0: new_device: Can't parse I2C address
[  104.952495][ T5538] F2FS-fs (loop1): Found nat_bits in checkpoint
[  104.969588][ T5035] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  105.087161][ T5035] az6027: usb out operation failed. (-71)
[  105.123588][ T5035] az6027: usb out operation failed. (-71)
[  105.146720][ T5035] stb0899_attach: Driver disabled by Kconfig
[  105.155438][ T5563] tipc: Started in network mode
[  105.160936][ T5035] az6027: no front-end attached
[  105.160936][ T5035] 
[  105.169331][ T5538] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  105.176710][ T5563] tipc: Node identity ac14140f, cluster identity 4711
[  105.187559][ T5538] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  105.226936][ T5563] tipc: New replicast peer: 255.255.255.255
[  105.234444][ T5563] tipc: Enabled bearer <udp:syz2>, priority 10
[  105.276677][ T5035] az6027: usb out operation failed. (-71)
[  105.285465][ T5035] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  105.304822][ T5035] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12
[  105.325155][ T5568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'.
[  105.344683][ T5538] attempt to access beyond end of device
[  105.344683][ T5538] loop1: rw=2049, want=45104, limit=40427
[  105.369897][ T5035] dvb-usb: schedule remote query interval to 400 msecs.
[  105.383836][ T5035] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  105.429208][ T5035] usb 4-1: USB disconnect, device number 7
[  105.567349][ T5035] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  105.752474][ T5579] loop3: detected capacity change from 0 to 512
[  105.878954][ T5579] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  105.975503][ T5579] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.468: bad orphan inode 15
[  106.077418][ T5579] ext4_test_bit(bit=14, block=18) = 1
[  106.095033][ T5579] is_bad_inode(inode)=0
[  106.105267][ T5579] NEXT_ORPHAN(inode)=1023
[  106.126442][ T5579] max_ino=32
[  106.130799][ T5579] i_nlink=0
[  106.158368][ T5579] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.468: bg 0: block 161: padding at end of block bitmap is not set
[  106.200693][ T5579] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  106.236770][ T5035] tipc: Node number set to 2886997007
[  106.250539][ T5579] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,nolazytime,,errors=continue. Quota mode: none.
[  106.283891][ T5579] ext2 filesystem being mounted at /98/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  106.449426][ T5577] loop4: detected capacity change from 0 to 32768
[  106.684910][ T5617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.476'.
[  106.849197][ T5626] loop3: detected capacity change from 0 to 128
[  107.072868][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'.
[  107.285840][ T5647] loop1: detected capacity change from 0 to 2048
[  107.309127][ T5649] loop3: detected capacity change from 0 to 512
[  107.318657][ T5643] loop4: detected capacity change from 0 to 8192
[  107.398290][ T5649] EXT4-fs error (device loop3): ext4_get_journal_inode:5187: comm syz.3.492: inode #2147418112: comm syz.3.492: iget: illegal inode #
[  107.402694][ T5647] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.490681][ T5649] EXT4-fs (loop3): no journal found
[  107.496735][ T5649] EXT4-fs (loop3): can't get journal size
[  107.536410][ T5649] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  107.557735][ T5649] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  107.566203][ T5649] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,lazytime,noload,nobarrier,errors=continue,,errors=continue. Quota mode: none.
[  107.660977][   T26] audit: type=1804 audit(1785294024.479:23): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.491" name=2F6E6577726F6F742F3130392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop1" ino=1367 res=1 errno=0
[  107.718118][ T5649] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  107.806477][ T5665] tap0: tun_chr_ioctl cmd 1074025677
[  107.814452][ T5665] tap0: linktype set to 804
[  107.961417][ T5671] netlink: 16142 bytes leftover after parsing attributes in process `syz.2.501'.
[  108.035110][ T5676] loop1: detected capacity change from 0 to 64
[  108.142165][ T5676] attempt to access beyond end of device
[  108.142165][ T5676] loop1: rw=0, want=414, limit=64
[  108.188409][ T5676] Trying to free block not in datazone
[  108.204507][ T5688] attempt to access beyond end of device
[  108.204507][ T5688] loop1: rw=0, want=414, limit=64
[  108.284791][ T5688] Buffer I/O error on dev loop1, logical block 206, async page read
[  108.293479][ T5695] program syz.4.511 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.323127][ T4718] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  108.356735][   T26] audit: type=1800 audit(1785294025.169:24): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.499" name="file1" dev="loop1" ino=5 res=0 errno=0
[  108.586758][ T4718] usb 3-1: Using ep0 maxpacket: 32
[  108.717044][ T4718] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  108.732733][ T5698] loop4: detected capacity change from 0 to 32768
[  108.773417][ T5698] XFS (loop4): Mounting V5 Filesystem
[  108.818114][ T5698] XFS (loop4): Ending clean mount
[  108.866321][ T4198] XFS (loop4): Unmounting Filesystem
[  108.905687][ T4718] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  108.922737][ T4718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.931152][ T4718] usb 3-1: Product: syz
[  108.935375][ T4718] usb 3-1: Manufacturer: syz
[  108.945234][ T4718] usb 3-1: SerialNumber: syz
[  108.966021][ T5708] loop1: detected capacity change from 0 to 32768
[  108.975675][ T4718] usb 3-1: config 0 descriptor??
[  109.027859][ T4718] usb 3-1: bad CDC descriptors
[  109.040829][ T5708] JBD2: Ignoring recovery information on journal
[  109.057080][ T4718] usb 3-1: unsupported MDLM descriptors
[  109.143636][ T5708] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  109.255219][ T1111] usb 3-1: USB disconnect, device number 5
[  109.334177][ T5708] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  109.334273][ T5708] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  109.380787][ T5725] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  109.380818][ T5725] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  109.403407][ T5708] OCFS2: File system is now read-only.
[  109.498923][ T4189] ocfs2: Unmounting device (7,1) on (node local)
[  109.562961][ T5719] loop3: detected capacity change from 0 to 32768
[  109.682882][ T5733] kvm [5732]: vcpu2, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop
[  109.702413][ T5719] XFS (loop3): Mounting V5 Filesystem
[  109.835792][ T5719] XFS (loop3): Ending clean mount
[  110.016983][ T4259] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  110.056087][ T4196] XFS (loop3): Unmounting Filesystem
[  110.185663][ T5760] loop2: detected capacity change from 0 to 1024
[  110.431641][ T4259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.472948][ T4259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.493720][ T4259] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  110.506620][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.524218][  T145] hfsplus: b-tree write err: -5, ino 8
[  110.532000][ T4259] usb 2-1: config 0 descriptor??
[  110.641106][ T5779] loop2: detected capacity change from 0 to 512
[  110.659883][ T5779] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002]
[  110.669307][ T5779] System zones: 1-12
[  110.675863][ T5779] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.541: missing EA_INODE flag
[  110.689707][ T5779] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.541: error while reading EA inode 12 err=-117
[  110.703227][ T5779] EXT4-fs (loop2): 1 orphan inode deleted
[  110.709356][ T5779] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback.
[  110.842983][ T5783] loop2: detected capacity change from 0 to 256
[  110.856809][ T5036] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  110.864635][ T5035] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  111.039644][ T4259] playstation 0003:054C:0DF2.0006: unknown main item tag 0x4
[  111.047704][ T4259] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  111.059992][ T4259] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[  111.136856][ T5036] usb 4-1: Using ep0 maxpacket: 16
[  111.142108][ T5035] usb 5-1: Using ep0 maxpacket: 8
[  111.247002][ T4259] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 9: -71
[  111.263588][ T5794] mmap: syz.2.547 (5794) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  111.276406][ T5036] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.294439][ T4259] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -71
[  111.304820][ T5036] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.315457][ T5035] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.350259][ T4259] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense
[  111.356208][ T5787] loop0: detected capacity change from 0 to 32768
[  111.359830][ T5035] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.371922][ T5796] netlink: 56 bytes leftover after parsing attributes in process `syz.2.548'.
[  111.380278][ T5036] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  111.399363][ T4259] playstation 0003:054C:0DF2.0006: Failed to create dualsense.
[  111.409977][ T4259] playstation: probe of 0003:054C:0DF2.0006 failed with error -71
[  111.418268][ T5035] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  111.425330][ T5787] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.543 (5787)
[  111.433076][ T5036] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  111.463642][ T4259] usb 2-1: USB disconnect, device number 5
[  111.480124][ T5035] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  111.516619][ T5035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.534624][ T5036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.545710][ T5035] usb 5-1: config 0 descriptor??
[  111.565931][ T5036] usb 4-1: config 0 descriptor??
[  111.584734][ T5787] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  111.620959][ T5797] fido_id[5797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  111.632388][ T5787] BTRFS info (device loop0): using free space tree
[  111.663201][ T5801] loop2: detected capacity change from 0 to 256
[  111.683610][ T5787] BTRFS info (device loop0): has skinny extents
[  111.705480][ T5801] exfat: Unknown parameter 'zero_size_dir'
[  111.842984][ T5787] BTRFS info (device loop0): enabling ssd optimizations
[  111.892948][ T5824] loop2: detected capacity change from 0 to 512
[  112.030162][ T5035] dragonrise 0003:0079:0006.0007: hidraw0: USB HID v0.0b Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0
[  112.062359][ T5824] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  112.078861][ T5036] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  112.100719][ T5035] dragonrise 0003:0079:0006.0007: no inputs found
[  112.126784][ T5824] System zones: 0-2, 18-18, 34-35
[  112.152895][ T5036] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  112.173377][ T5035] dragonrise 0003:0079:0006.0007: force feedback init failed
[  112.190125][ T5824] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  112.210087][ T5036] microsoft 0003:045E:07DA.0008: No inputs registered, leaving
[  112.232696][ T5834] loop1: detected capacity change from 0 to 4096
[  112.240464][ T5824] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.262847][ T5036] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  112.294122][ T5036] microsoft 0003:045E:07DA.0008: no inputs found
[  112.347620][ T5036] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[  112.407527][ T5036] usb 4-1: USB disconnect, device number 9
[  112.535428][ T5836] fido_id[5836]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  112.736179][ T5834] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  112.779313][ T5840] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  112.814819][ T4718] usb 5-1: USB disconnect, device number 8
[  112.906090][ T5848] loop0: detected capacity change from 0 to 256
[  113.227421][ T5871] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  113.234722][ T5871] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  113.271532][ T4586] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  113.288093][ T5871] vhci_hcd vhci_hcd.0: Device attached
[  113.496751][ T1108] vhci_hcd: vhci_device speed not set
[  113.586649][ T1108] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  113.687477][ T4586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  113.719082][ T4586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.731104][ T5888] EXT4-fs (loop4): orphan cleanup on readonly fs
[  113.750728][ T5888] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  113.760247][ T4586] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  113.770236][ T5888] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  113.791516][ T5888] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.576: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 57856(57856)
[  113.835015][ T4586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.882817][ T4586] usb 2-1: config 0 descriptor??
[  113.901746][ T5878] XFS (loop2): Mounting V5 Filesystem
[  113.904656][ T5888] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.576: couldn't read orphan inode 13 (err -117)
[  113.927075][ T5888] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  113.988952][ T5888] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.576: inode #15: comm syz.4.576: iget: illegal inode #
[  114.019504][ T5878] XFS (loop2): Starting recovery (logdev: internal)
[  114.047434][ T5884] 
[  114.047434][ T5884]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.047434][ T5884] 
[  114.070738][ T5878] XFS (loop2): Ending recovery (logdev: internal)
[  114.124554][ T5884] 
[  114.124554][ T5884]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.124554][ T5884] 
[  114.154730][ T5884] 
[  114.154730][ T5884]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.154730][ T5884] 
[  114.166094][ T5884] 
[  114.166094][ T5884]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.166094][ T5884] 
[  114.197555][ T5884] 
[  114.197555][ T5884]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.197555][ T5884] 
[  114.276988][ T5884] 
[  114.276988][ T5884]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.276988][ T5884] 
[  114.294923][ T4195] XFS (loop2): Unmounting Filesystem
[  114.308381][ T5884] 
[  114.308381][ T5884]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.308381][ T5884] 
[  114.368838][  T278] 
[  114.368838][  T278]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.368838][  T278] 
[  114.411878][ T4586] elan 0003:04F3:0755.0009: unknown main item tag 0x0
[  114.426117][ T5884] 
[  114.426117][ T5884]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.426117][ T5884] 
[  114.430658][ T4586] elan 0003:04F3:0755.0009: unknown main item tag 0x0
[  114.439887][ T5884] 
[  114.439887][ T5884]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.439887][ T5884] 
[  114.456397][ T5901] set_capacity_and_notify: 3 callbacks suppressed
[  114.456410][ T5901] loop4: detected capacity change from 0 to 4096
[  114.465213][ T4586] elan 0003:04F3:0755.0009: failed to start in urb: -90
[  114.473492][ T5884] 
[  114.473492][ T5884]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.473492][ T5884] 
[  114.487555][ T4586] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  114.524984][ T5884] 
[  114.524984][ T5884]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.524984][ T5884] 
[  114.557757][  T278] 
[  114.557757][  T278]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.557757][  T278] 
[  114.580945][ T5903] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.600842][ T5901] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  114.653404][ T5901] NILFS (loop4): mounting fs with errors
[  114.667483][ T5902] 
[  114.667483][ T5902]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.667483][ T5902] 
[  114.720965][ T5902] 
[  114.720965][ T5902]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.720965][ T5902] 
[  114.779894][ T5902] 
[  114.779894][ T5902]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.779894][ T5902] 
[  114.802064][ T4718] usb 2-1: USB disconnect, device number 6
[  114.803692][ T5901] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  114.840116][ T5902] 
[  114.840116][ T5902]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.840116][ T5902] 
[  114.897495][  T278] 
[  114.897495][  T278]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.897495][  T278] 
[  114.917202][ T5908] MPI: mpi too large (113216 bits)
[  114.932710][ T4196] 
[  114.932710][ T4196]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.932710][ T4196] 
[  114.968729][ T4196] 
[  114.968729][ T4196]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  114.968729][ T4196] 
[  115.211877][ T5918] loop4: detected capacity change from 0 to 512
[  115.255842][ T5922] loop2: detected capacity change from 0 to 128
[  115.262278][ T5918] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  115.444008][ T5930] netlink: 104 bytes leftover after parsing attributes in process `syz.1.590'.
[  115.697792][ T5942] loop2: detected capacity change from 0 to 256
[  115.811073][ T5948] loop4: detected capacity change from 0 to 136
[  115.964997][ T5948] overlayfs: failed to clone lowerpath
[  116.264944][ T5872] vhci_hcd: connection reset by peer
[  116.283336][  T155] vhci_hcd: stop threads
[  116.290776][  T155] vhci_hcd: release socket
[  116.312533][  T155] vhci_hcd: disconnect device
[  116.341651][ T5973] loop0: detected capacity change from 0 to 8
[  116.468640][ T5973] SQUASHFS error: Failed to read block 0x6e6: -5
[  116.496779][ T5973] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  116.521324][ T5973] SQUASHFS error: Unable to read directory block [6e4:0]
[  116.674730][ T5989] netlink: 'syz.1.619': attribute type 1 has an invalid length.
[  116.762898][ T5994] loop4: detected capacity change from 0 to 4096
[  116.816880][ T4586] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  116.854043][ T5994] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  116.878022][ T5994] EXT4-fs (loop4): shut down requested (1)
[  117.086657][ T4586] usb 4-1: Using ep0 maxpacket: 8
[  117.117934][ T5035] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  117.354236][ T6030] loop4: detected capacity change from 0 to 64
[  117.442594][ T4586] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  117.453991][ T6030] hfs: session requires an argument
[  117.469266][ T6030] hfs: unable to parse mount options
[  117.471181][ T4586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.503985][ T4586] usb 4-1: Product: syz
[  117.508740][ T5035] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  117.529725][ T4586] usb 4-1: Manufacturer: syz
[  117.535113][ T4586] usb 4-1: SerialNumber: syz
[  117.543972][ T5035] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  117.583637][ T5035] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  117.616663][ T4586] usb 4-1: config 0 descriptor??
[  117.678835][ T4586] gspca_main: se401-2.14.0 probing 047d:5003
[  117.730060][ T6045] netlink: 56 bytes leftover after parsing attributes in process `syz.4.644'.
[  117.776843][ T5035] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  117.801052][ T5035] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.826597][ T5035] usb 3-1: Product: syz
[  117.832121][ T5035] usb 3-1: Manufacturer: syz
[  117.845884][ T5035] usb 3-1: SerialNumber: syz
[  117.897026][ T6000] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  117.927384][ T6000] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  117.943028][ T5035] oti6858 3-1:1.0: oti6858 converter detected
[  117.963350][ T5035] usb 3-1: oti6858 converter now attached to ttyUSB0
[  117.985679][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'.
[  118.013956][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.120307][ T4586] gspca_se401: Too many frame sizes
[  118.167055][ T4871] Bluetooth: hci4: command 0x0405 tx timeout
[  118.351886][ T6044] loop0: detected capacity change from 0 to 40427
[  118.355584][ T4586] usb 4-1: USB disconnect, device number 10
[  118.381258][ T6044] F2FS-fs (loop0): Corrupted extension count (33554469 + 1 > 64)
[  118.395147][ T6044] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  118.425799][ T6044] F2FS-fs (loop0): invalid crc value
[  118.434131][ T6070] loop1: detected capacity change from 0 to 4096
[  118.459120][ T6044] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  118.506718][ T5035] usb 3-1: USB disconnect, device number 6
[  118.530439][ T5035] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  118.546942][ T5035] oti6858 3-1:1.0: device disconnected
[  118.556919][ T4871] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  118.623865][ T6044] F2FS-fs (loop0): recover fsync data on readonly fs
[  118.637509][ T6044] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30
[  118.644889][ T6044] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  118.683487][ T6044] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix.
[  118.700653][ T6044] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix.
[  118.737609][ T1108] vhci_hcd: vhci_device speed not set
[  118.825814][ T6076] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  118.843589][ T4871] usb 5-1: Using ep0 maxpacket: 32
[  118.872073][ T6076] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.136967][ T4871] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  119.157268][ T4871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.196655][ T4871] usb 5-1: Product: syz
[  119.219178][ T4871] usb 5-1: Manufacturer: syz
[  119.234121][ T4871] usb 5-1: SerialNumber: syz
[  119.246923][ T1111] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  119.270660][ T4871] usb 5-1: config 0 descriptor??
[  119.323949][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'.
[  119.348150][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'.
[  119.457869][ T1236] hfsplus: b-tree write err: -5, ino 25
[  119.463891][ T1236] hfsplus: b-tree write err: -5, ino 4
[  119.496836][ T1236] hfsplus: b-tree write err: -5, ino 2
[  119.502565][ T1236] hfsplus: b-tree write err: -5, ino 26
[  119.531823][ T6104] set_capacity_and_notify: 2 callbacks suppressed
[  119.531840][ T6104] loop0: detected capacity change from 0 to 256
[  119.552347][ T1236] hfsplus: b-tree write err: -5, ino 27
[  119.637003][ T1111] usb 2-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config
[  119.673528][ T6104] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d)
[  119.691654][ T6098] loop2: detected capacity change from 0 to 32768
[  119.809196][ T6098] XFS (loop2): Mounting V5 Filesystem
[  119.825591][ T1111] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  119.835901][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.844317][ T1111] usb 2-1: Product: syz
[  119.849555][ T1111] usb 2-1: Manufacturer: syz
[  119.854298][ T1111] usb 2-1: SerialNumber: syz
[  119.864923][ T6118] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  119.899873][ T6098] XFS (loop2): Ending clean mount
[  119.982151][ T6098] XFS (loop2): User initiated shutdown received.
[  120.014441][ T6098] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  120.016952][ T4871] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  120.037276][ T6098] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  120.074310][ T6128] loop0: detected capacity change from 0 to 128
[  120.112834][ T6128] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  120.128478][ T4195] XFS (loop2): Unmounting Filesystem
[  120.181735][ T6128] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  120.212723][ T6132] x_tables: duplicate underflow at hook 3
[  120.222985][ T6132] xt_TCPMSS: Only works on TCP SYN packets
[  120.277211][ T1111] usb 2-1: unit 1 not found!
[  120.281861][ T1111] usb 2-1: unit 108 not found!
[  120.308291][ T4871] peak_usb: probe of 5-1:0.0 failed with error -71
[  120.351008][ T4871] usb 5-1: USB disconnect, device number 9
[  120.360084][ T1111] usb 2-1: USB disconnect, device number 7
[  120.424987][  T155] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  120.515657][ T4915] udevd[4915]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  120.803776][ T6142] loop0: detected capacity change from 0 to 4096
[  120.866028][ T6148] loop3: detected capacity change from 0 to 256
[  120.894777][ T6151] netlink: 'syz.1.688': attribute type 11 has an invalid length.
[  120.915355][ T6142] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  120.945555][ T6151] netlink: 'syz.1.688': attribute type 11 has an invalid length.
[  120.963491][ T6142] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  120.973373][ T6151] netlink: 2704 bytes leftover after parsing attributes in process `syz.1.688'.
[  120.994420][ T6142] ntfs3: loop0: Failed to load $Extend.
[  121.220983][ T6163] loop3: detected capacity change from 0 to 16
[  121.365315][ T6163] erofs: (device loop3): mounted with root inode @ nid 36.
[  121.383544][ T6169] team0: Device vlan2 is already an upper device of the team interface
[  121.628945][ T6175] loop0: detected capacity change from 0 to 2048
[  121.652432][ T6177] loop4: detected capacity change from 0 to 1024
[  121.681274][ T6165] loop1: detected capacity change from 0 to 32768
[  121.731403][ T6175] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.760296][   T26] audit: type=1800 audit(1785294038.579:25): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.696" name="file1" dev="loop1" ino=4 res=0 errno=0
[  121.795408][ T6177] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 2: comm syz.4.701: lblock 2 mapped to illegal pblock 2 (length 1)
[  121.806662][ T4871] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  121.823736][ T6177] EXT4-fs (loop4): Remounting filesystem read-only
[  121.864972][ T6177] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  121.881787][   T26] audit: type=1804 audit(1785294038.669:26): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.700" name=2F6E6577726F6F742F3133322F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop0" ino=1367 res=1 errno=0
[  121.930184][ T6177] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.701: lblock 0 mapped to illegal pblock 48 (length 1)
[  121.993120][ T6177] EXT4-fs (loop4): Remounting filesystem read-only
[  122.071552][ T6177] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  122.121461][ T6177] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.701: Failed to acquire dquot type 0
[  122.168104][ T6177] EXT4-fs (loop4): Remounting filesystem read-only
[  122.195887][ T6177] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  122.238949][ T6177] EXT4-fs (loop4): Remounting filesystem read-only
[  122.245742][ T6177] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.701: mark_inode_dirty error
[  122.296796][ T4871] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  122.315866][ T4871] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.334404][ T6177] EXT4-fs (loop4): Remounting filesystem read-only
[  122.356632][ T4871] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  122.371916][ T6177] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  122.413072][ T4871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.432896][ T6177] EXT4-fs (loop4): 1 orphan inode deleted
[  122.457705][ T3095] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  122.461097][ T6177] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,nojournal_checksum,errors=remount-ro,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,. Quota mode: none.
[  122.524591][ T3095] EXT4-fs (loop4): Remounting filesystem read-only
[  122.534131][ T3095] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  122.542552][ T4871] hub 4-1:4.0: USB hub found
[  122.579607][ T3095] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0
[  122.621186][ T3095] EXT4-fs (loop4): Remounting filesystem read-only
[  122.646060][ T6199] loop1: detected capacity change from 0 to 8192
[  122.718099][ T6199] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  122.729848][ T6199] REISERFS (device loop1): using ordered data mode
[  122.759666][ T6199] reiserfs: using flush barriers
[  122.803107][ T6199] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  122.856800][ T4871] hub 4-1:4.0: 2 ports detected
[  122.864097][ T4871] usb 4-1: selecting invalid altsetting 1
[  122.890171][ T4871] hub 4-1:4.0: Using single TT (err -22)
[  122.913902][ T6199] REISERFS (device loop1): checking transaction log (loop1)
[  122.956902][ T4198] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  122.957973][ T6199] REISERFS (device loop1): Using r5 hash to sort names
[  123.011151][ T4198] EXT4-fs (loop4): Remounting filesystem read-only
[  123.022504][ T6199] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  123.032021][ T4198] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  123.058179][ T6199] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  123.069957][ T4198] EXT4-fs (loop4): Remounting filesystem read-only
[  123.100238][ T4198] EXT4-fs error (device loop4): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  123.125593][ T4198] EXT4-fs (loop4): Remounting filesystem read-only
[  123.214039][ T6199] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  123.248532][ T6199] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  123.264369][ T6199] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  123.325605][ T4871] usb 4-1: USB disconnect, device number 11
[  124.553397][ T6283] set_capacity_and_notify: 2 callbacks suppressed
[  124.553413][ T6283] loop2: detected capacity change from 0 to 512
[  124.654862][ T6283] EXT4-fs (loop2): Test dummy encryption mode enabled
[  124.746993][ T6283] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,stripe=0x0000000000000007,barrier=0x0000000000000006,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback.
[  124.817680][ T6258] loop3: detected capacity change from 0 to 32768
[  124.916995][ T6301] loop1: detected capacity change from 0 to 512
[  124.997324][ T6258] XFS (loop3): Mounting V5 Filesystem
[  125.090557][ T6314] loop2: detected capacity change from 0 to 4096
[  125.151752][ T6301] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  125.173222][ T6258] XFS (loop3): Ending clean mount
[  125.200268][ T6301] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  125.269392][ T6258] XFS (loop3): Quotacheck needed: Please wait.
[  125.323326][ T6326] loop4: detected capacity change from 0 to 1024
[  125.380297][ T6314] EXT4-fs (loop2): Test dummy encryption mode enabled
[  125.442555][ T6314] EXT4-fs (loop2): Can't change test_dummy_encryption on remount
[  125.498608][ T6258] XFS (loop3): Quotacheck: Done.
[  125.575427][ T6314] binder: 6310:6314 ioctl c018620c 200000000000 returned -22
[  125.704237][ T4196] XFS (loop3): Unmounting Filesystem
[  125.731662][ T6336] loop4: detected capacity change from 0 to 1024
[  125.867243][ T6336] EXT4-fs error (device loop4): ext4_fill_super:4872: comm syz.4.737: inode #2: comm syz.4.737: iget: illegal inode #
[  125.888884][ T6336] EXT4-fs (loop4): get root inode failed
[  125.894713][ T6336] EXT4-fs (loop4): mount failed
[  125.923067][ T6341] loop2: detected capacity change from 0 to 256
[  126.056329][ T6341] exfat: Deprecated parameter 'utf8'
[  126.069933][ T6341] exfat: Deprecated parameter 'namecase'
[  126.075793][ T6341] exfat: Deprecated parameter 'namecase'
[  126.119636][ T6341] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  126.140264][ T6334] loop0: detected capacity change from 0 to 40427
[  126.206734][ T6334] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  126.214603][ T6334] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  126.248868][ T6334] F2FS-fs (loop0): invalid crc value
[  126.326637][ T5035] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  126.329946][ T6334] F2FS-fs (loop0): Found nat_bits in checkpoint
[  126.552773][ T6334] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  126.579111][ T6334] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  126.634299][ T6362] loop4: detected capacity change from 0 to 64
[  126.678135][ T5035] usb 2-1: not running at top speed; connect to a high speed hub
[  126.792366][ T5035] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.806438][ T5035] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  126.865006][ T5035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.958578][ T5035] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected
[  126.977350][ T5035] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81
[  126.985510][ T5035] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1
[  127.005909][ T5035] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84
[  127.018978][ T5035] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2
[  127.056040][ T5035] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  127.067750][ T5035] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88
[  127.106075][ T5035] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6
[  127.129201][ T5035] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  127.184758][ T6379] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available
[  127.450531][ T6383] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  127.609240][ T1108] usb 2-1: USB disconnect, device number 8
[  127.640517][ T1108] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  127.700490][ T6377] loop4: detected capacity change from 0 to 32768
[  127.708876][ T1108] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  127.744139][ T1108] keyspan 2-1:1.0: device disconnected
[  127.886020][ T6377] XFS (loop4): Mounting V5 Filesystem
[  128.096468][ T6377] XFS (loop4): Ending clean mount
[  128.200082][ T6381] XFS (loop3): Mounting V5 Filesystem
[  128.291243][ T6381] XFS (loop3): Ending clean mount
[  128.337421][ T4198] XFS (loop4): Unmounting Filesystem
[  128.354543][   T26] audit: type=1800 audit(1785294045.169:27): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.757" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  128.390567][ T6381] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  128.405229][ T6390] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.761 (6390)
[  128.433567][ T6390] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  128.506190][ T6390] BTRFS info (device loop2): using free space tree
[  128.550179][ T6390] BTRFS info (device loop2): has skinny extents
[  128.625597][ T4196] XFS (loop3): Unmounting Filesystem
[  128.926679][ T6390] BTRFS info (device loop2): enabling ssd optimizations
[  128.997142][   T26] audit: type=1800 audit(1785294045.819:28): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.761" name="file1" dev="loop2" ino=260 res=0 errno=0
[  129.233245][ T6425] XFS (loop1): Mounting V5 Filesystem
[  129.466118][ T6443] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  129.483005][ T6443] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  129.507076][ T6443] F2FS-fs (loop4): invalid crc value
[  129.537793][ T6443] F2FS-fs (loop4): Found nat_bits in checkpoint
[  129.802580][ T6443] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  129.812516][ T6425] XFS (loop1): Ending clean mount
[  129.830308][ T6443] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  129.973841][ T4189] XFS (loop1): Unmounting Filesystem
[  130.226717][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  130.256686][ T6460] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  130.516661][ T6460] usb 4-1: Using ep0 maxpacket: 8
[  130.626888][ T1108] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  130.636889][ T6460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  130.646388][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.659611][ T6460] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  130.661951][ T1108] usb 3-1: config 0 descriptor??
[  130.690521][ T6460] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  130.703321][ T6460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.717652][ T1108] cp210x 3-1:0.0: cp210x converter detected
[  130.722850][ T6460] usb 4-1: config 0 descriptor??
[  130.886899][ T6459] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  131.134742][ T6459] usb 5-1: Using ep0 maxpacket: 8
[  131.147001][ T1108] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  131.210998][ T1108] usb 3-1: cp210x converter now attached to ttyUSB0
[  131.211901][ T6460] sunplus 0003:04FC:05D8.000A: unknown main item tag 0x0
[  131.242879][ T6511] set_capacity_and_notify: 4 callbacks suppressed
[  131.242895][ T6511] loop0: detected capacity change from 0 to 8192
[  131.248372][ T6515] loop1: detected capacity change from 0 to 512
[  131.263415][ T6460] sunplus 0003:04FC:05D8.000A: unknown main item tag 0x0
[  131.271432][ T6459] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  131.280387][ T6460] sunplus 0003:04FC:05D8.000A: unknown main item tag 0x0
[  131.296901][ T6459] usb 5-1: config 179 has no interface number 0
[  131.297801][ T6511] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  131.303303][ T6459] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  131.303332][ T6459] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  131.303357][ T6459] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  131.363675][ T6460] sunplus 0003:04FC:05D8.000A: unknown main item tag 0x0
[  131.376212][ T6460] sunplus 0003:04FC:05D8.000A: unknown main item tag 0x0
[  131.389762][ T6515] EXT4-fs (loop1): Ignoring removed nobh option
[  131.392294][ T6460] sunplus 0003:04FC:05D8.000A: unknown main item tag 0x0
[  131.404535][ T6460] sunplus 0003:04FC:05D8.000A: unbalanced collection at end of report description
[  131.405945][ T6515] EXT4-fs (loop1): Ignoring removed orlov option
[  131.435272][ T6460] sunplus: probe of 0003:04FC:05D8.000A failed with error -22
[  131.446262][ T6459] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  131.463590][ T6460] usb 4-1: USB disconnect, device number 12
[  131.469836][ T6515] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  131.472187][ T6459] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  131.521827][ T6459] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  131.561280][ T6459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.571238][ T6515] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #16: comm syz.1.793: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  131.591737][ T6463] usb 3-1: USB disconnect, device number 7
[  131.608002][ T6463] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  131.617398][ T6484] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  131.629257][ T6463] cp210x 3-1:0.0: device disconnected
[  131.633137][ T6515] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.793: couldn't read orphan inode 16 (err -117)
[  131.676306][ T6515] EXT4-fs (loop1): 1 orphan inode deleted
[  131.682668][ T6515] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none.
[  131.760690][ T6515] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  131.816840][ T6515] overlayfs: failed to verify upper (/file0, ino=12, err=-28)
[  131.825173][ T6515] overlayfs: failed to verify index dir 'upper' xattr
[  131.838334][ T6515] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  131.937117][ T6459] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input14
[  132.117516][ T1108] usb 5-1: USB disconnect, device number 10
[  132.137193][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  132.147197][ T1108] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  132.290147][ T6542] program syz.1.804 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  132.366975][ T6545] loop1: detected capacity change from 0 to 8
[  132.370725][ T6541] serio: Serial port ptm0
[  132.416468][ T6545] SQUASHFS error: zlib decompression failed, data probably corrupt
[  132.426043][ T6545] SQUASHFS error: Failed to read block 0x9b: -5
[  132.433404][ T6545] SQUASHFS error: Unable to read metadata cache entry [99]
[  132.441708][ T6545] SQUASHFS error: Unable to read inode 0x127
[  132.625751][ T6554] loop3: detected capacity change from 0 to 136
[  132.682293][ T6559] loop1: detected capacity change from 0 to 512
[  132.772875][ T6559] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  132.868376][ T6559] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.810: invalid indirect mapped block 32768 (level 2)
[  132.899193][ T1434] ieee802154 phy0 wpan0: encryption failed: -22
[  132.906494][ T1434] ieee802154 phy1 wpan1: encryption failed: -22
[  132.912837][ T6566] loop3: detected capacity change from 0 to 4096
[  132.946491][ T6559] EXT4-fs (loop1): Remounting filesystem read-only
[  132.954695][ T6559] EXT4-fs (loop1): 1 orphan inode deleted
[  132.963435][ T6559] EXT4-fs (loop1): 1 truncate cleaned up
[  132.970179][ T6559] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback.
[  133.093172][ T6566] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  133.177911][   T26] audit: type=1800 audit(1785294049.999:29): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.814" name="file3" dev="loop3" ino=31 res=0 errno=0
[  133.382062][ T6590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.826'.
[  133.564696][ T6600] loop1: detected capacity change from 0 to 256
[  133.582309][ T6600] exfat: Deprecated parameter 'namecase'
[  133.634209][ T6600] exfat: Deprecated parameter 'namecase'
[  133.722788][ T6600] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  133.942050][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.014627][ T6594] loop0: detected capacity change from 0 to 32768
[  134.081201][ T6614] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  134.088764][ T6614] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  134.121334][   T26] audit: type=1800 audit(1785294050.939:30): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.827" name="file1" dev="loop0" ino=4 res=0 errno=0
[  134.246894][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'.
[  134.264592][ T6592] loop2: detected capacity change from 0 to 40427
[  134.331476][ T6621] loop4: detected capacity change from 0 to 256
[  134.389692][ T6592] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  134.417893][ T6621] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  134.439811][ T6592] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  134.497507][ T6592] F2FS-fs (loop2): invalid crc value
[  134.597865][ T6625] EXT4-fs (loop3): 1 orphan inode deleted
[  134.604566][ T6625] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  134.639800][ T6625] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.651593][   T26] audit: type=1800 audit(1785294051.479:31): pid=6621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.841" name="file2" dev="loop4" ino=1048640 res=0 errno=0
[  134.671571][ T6621] exFAT-fs (loop4): hint_cluster is invalid (17)
[  134.679276][ T6592] F2FS-fs (loop2): Found nat_bits in checkpoint
[  134.752790][ T6621] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff)
[  134.836634][ T6621] exFAT-fs (loop4): Filesystem has been set read-only
[  134.849447][   T26] audit: type=1800 audit(1785294051.479:32): pid=6621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.841" name="file2" dev="loop4" ino=1048640 res=0 errno=0
[  134.868043][ T6621] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff)
[  134.953143][ T6592] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  134.961045][ T6592] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  135.213026][ T6647] netlink: 'syz.1.852': attribute type 1 has an invalid length.
[  135.268638][ T6650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.321407][ T6647] netlink: 'syz.1.852': attribute type 2 has an invalid length.
[  135.844273][ T6673] EXT4-fs (loop4): Ignoring removed orlov option
[  135.898672][ T6673] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  136.025551][ T6673] EXT4-fs (loop4): 1 truncate cleaned up
[  136.050460][ T6673] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[  136.096164][ T6679] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled
[  136.133984][ T6679] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  136.236853][ T6679] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=./file0,nouid32,user_xattr,nodiscard,dioread_nolock,,errors=continue. Quota mode: writeback.
[  136.286783][ T6679] ext4 filesystem being mounted at /161/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.505944][ T6700] set_capacity_and_notify: 7 callbacks suppressed
[  136.505960][ T6700] loop1: detected capacity change from 0 to 128
[  136.557139][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'.
[  136.581147][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'.
[  136.598721][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'.
[  136.696945][ T6700] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  136.720636][ T6712] loop3: detected capacity change from 0 to 8
[  136.745283][ T6700] hpfs: filesystem error: improperly stopped
[  136.746780][ T6714] netlink: 36 bytes leftover after parsing attributes in process `syz.2.880'.
[  136.788217][ T6700] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  136.854194][ T6700] hpfs: You really don't want any checks? You are crazy...
[  136.872677][ T6700] hpfs: hpfs_map_sector(): read error
[  136.897676][ T6700] hpfs: code page support is disabled
[  136.967370][ T6700] hpfs: hpfs_map_4sectors(): unaligned read
[  136.974004][ T6700] hpfs: hpfs_map_4sectors(): unaligned read
[  137.007479][ T6720] device veth1_macvtap left promiscuous mode
[  137.023220][ T6700] hpfs: filesystem error: unable to find root dir
[  137.155662][ T6725] device veth1_macvtap entered promiscuous mode
[  137.204746][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  137.218839][ T6700] hpfs: hpfs_map_4sectors(): unaligned read
[  137.225933][ T6700] hpfs: hpfs_map_sector(): read error
[  137.261402][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'.
[  137.295959][ T6733] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached
[  137.313881][ T6708] loop0: detected capacity change from 0 to 40427
[  137.395077][ T6708] F2FS-fs (loop0): invalid crc value
[  137.461765][ T6708] F2FS-fs (loop0): Found nat_bits in checkpoint
[  137.582310][ T6751] loop1: detected capacity change from 0 to 512
[  137.643515][ T6708] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  137.723019][ T4193] attempt to access beyond end of device
[  137.723019][ T4193] loop0: rw=2049, want=45104, limit=40427
[  137.896616][ T6460] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  138.066719][ T6463] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  138.146709][ T6460] usb 3-1: Using ep0 maxpacket: 32
[  138.154592][ T6760] loop3: detected capacity change from 0 to 32768
[  138.183374][ T6760] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.899 (6760)
[  138.254231][ T6760] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  138.266776][ T6460] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  138.282061][ T6760] BTRFS info (device loop3): using free space tree
[  138.285246][ T6460] usb 3-1: config 0 has no interface number 0
[  138.303520][ T6760] BTRFS info (device loop3): has skinny extents
[  138.328561][ T6771] netlink: 'syz.0.903': attribute type 1 has an invalid length.
[  138.344089][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'.
[  138.442360][ T6760] BTRFS info (device loop3): enabling ssd optimizations
[  138.460521][ T6460] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  138.473947][ T6460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.482998][ T6460] usb 3-1: Product: syz
[  138.488214][ T6460] usb 3-1: Manufacturer: syz
[  138.494167][ T6460] usb 3-1: SerialNumber: syz
[  138.502652][ T6460] usb 3-1: config 0 descriptor??
[  138.512097][   T26] audit: type=1800 audit(1785294055.329:33): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.899" name="file1" dev="loop3" ino=260 res=0 errno=0
[  138.515352][ T6789] loop0: detected capacity change from 0 to 4096
[  138.549278][ T6460] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  138.590143][ T6463] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  138.590562][ T6789] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  138.601235][ T6463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.617017][ T6463] usb 5-1: Product: syz
[  138.624101][ T6463] usb 5-1: Manufacturer: syz
[  138.629937][ T6463] usb 5-1: SerialNumber: syz
[  138.639008][ T6463] usb 5-1: config 0 descriptor??
[  138.678585][ T6463] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  138.772385][   T26] audit: type=1800 audit(1785294055.589:34): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.904" name="file3" dev="loop0" ino=31 res=0 errno=0
[  138.797236][ T6460] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  138.836473][ T6460] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  139.332084][ T1111] usb 3-1: USB disconnect, device number 8
[  139.346600][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  139.365472][ T1111] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  139.420459][ T1111] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  139.437866][ T1111] quatech2 3-1:0.51: device disconnected
[  139.476095][ T6816] loop0: detected capacity change from 0 to 64
[  139.536745][ T6463] gspca_sunplus: reg_w_riv err -71
[  139.542635][ T6463] sunplus: probe of 5-1:0.0 failed with error -71
[  139.550124][ T6458] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  139.573265][ T6463] usb 5-1: USB disconnect, device number 11
[  139.784351][ T6820] loop3: detected capacity change from 0 to 8192
[  139.890257][ T6820] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  139.909056][ T6820] REISERFS (device loop3): using ordered data mode
[  139.915862][ T6820] reiserfs: using flush barriers
[  139.933850][ T6458] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  139.948988][ T6458] usb 2-1: config 1 has no interface number 0
[  139.955240][ T6820] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  139.989898][ T6458] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64
[  140.041163][ T6458] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 8
[  140.060148][ T6822] loop0: detected capacity change from 0 to 32768
[  140.070245][ T6820] REISERFS (device loop3): checking transaction log (loop3)
[  140.088354][ T6820] REISERFS (device loop3): Using r5 hash to sort names
[  140.099780][ T6820] REISERFS (device loop3): using 3.5.x disk format
[  140.117040][ T6820] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  140.139887][ T6822] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 scanned by syz.0.918 (6822)
[  140.180924][ T6822] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  140.215983][ T6822] BTRFS info (device loop0): using free space tree
[  140.235491][ T6822] BTRFS info (device loop0): has skinny extents
[  140.250633][ T6458] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  140.258892][ T6838] loop2: detected capacity change from 0 to 256
[  140.277503][ T6458] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.332482][ T6458] usb 2-1: Product: syz
[  140.375288][ T6838] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a3b, chksum : 0xd53fbf7b, utbl_chksum : 0xe619d30d)
[  140.413631][ T6458] usb 2-1: Manufacturer: syz
[  140.440766][ T6458] usb 2-1: SerialNumber: syz
[  140.522661][ T6805] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  140.527697][ T6854] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  140.580572][ T6805] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  140.605330][ T6822] BTRFS info (device loop0): enabling ssd optimizations
[  140.618675][ T6458] usb 2-1: Error in usbnet_get_endpoints (-22)
[  140.710360][   T26] audit: type=1800 audit(1785294057.529:35): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.918" name="file1" dev="loop0" ino=260 res=0 errno=0
[  141.271022][ T6878] hpfs: hpfs_map_sector(): read error
[  141.338804][ T6878] hpfs: filesystem error: can't load hotfix map; already mounted read-only
[  141.369794][ T6878] hpfs: hpfs_map_sector(): read error
[  141.378682][ T6868] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff
[  141.414919][ T6868] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x724
[  141.465933][ T6868] F2FS-fs (loop3): invalid crc value
[  141.494448][ T6868] F2FS-fs (loop3): Found nat_bits in checkpoint
[  141.583040][ T6868] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0
[  141.649266][ T6868] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  141.794193][ T6891] set_capacity_and_notify: 3 callbacks suppressed
[  141.795588][ T6891] loop2: detected capacity change from 0 to 16
[  141.802464][ T6868] F2FS-fs (loop3) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x7f4/0x1f80
[  141.872671][ T6868] attempt to access beyond end of device
[  141.872671][ T6868] loop3: rw=2049, want=45104, limit=40427
[  141.900624][ T6891] erofs: (device loop2): mounted with root inode @ nid 36.
[  141.961547][ T6891] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89
[  141.985818][ T6891] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89
[  141.996026][ T6891] attempt to access beyond end of device
[  141.996026][ T6891] loop2: rw=524288, want=34359738368, limit=16
[  142.029773][ T6891] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89
[  142.064688][ T6891] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[  142.081694][   T26] audit: type=1800 audit(1785294058.899:36): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.938" name="file2" dev="loop2" ino=89 res=0 errno=0
[  142.158810][ T6900] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  142.165420][ T6900] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  142.172524][ T6900] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  142.180941][ T6900] comedi comedi3: 8255: I/O port conflict (0xfff,4)
[  142.198265][ T6900] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  142.205731][ T6900] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  142.226664][ T6900] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  142.249271][ T6900] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  142.255784][ T6460] usb 2-1: USB disconnect, device number 9
[  142.300126][ T6900] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  142.341984][ T6900] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  142.362265][ T6900] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  142.762121][ T6930] loop4: detected capacity change from 0 to 512
[  142.771962][ T6932] Invalid ELF header len 1
[  142.919284][ T6930] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  142.937124][ T6930] UDF-fs: Scanning with blocksize 512 failed
[  142.947850][ T6930] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  142.959126][ T6930] UDF-fs: Scanning with blocksize 1024 failed
[  142.985332][ T6930] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  143.013013][ T6930] UDF-fs: Scanning with blocksize 2048 failed
[  143.029238][ T6930] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  143.046604][ T6945] netlink: 'syz.1.961': attribute type 5 has an invalid length.
[  143.054287][ T6930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.054645][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.960'.
[  143.719197][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'.
[  143.761076][ T6979] loop0: detected capacity change from 0 to 16
[  143.809464][ T6979] erofs: (device loop0): mounted with root inode @ nid 36.
[  143.992286][ T6985] loop2: detected capacity change from 0 to 64
[  144.052430][ T6985] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  144.387602][ T1108] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  144.879217][ T7009] loop3: detected capacity change from 0 to 40427
[  144.939856][ T7009] F2FS-fs (loop3): invalid crc value
[  144.958547][ T7009] F2FS-fs (loop3): Found nat_bits in checkpoint
[  144.996996][ T1108] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  145.015178][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  145.025010][ T1108] usb 3-1: Product: syz
[  145.029994][ T1108] usb 3-1: Manufacturer: syz
[  145.035135][ T1108] usb 3-1: SerialNumber: syz
[  145.056198][ T1108] usb 3-1: config 0 descriptor??
[  145.074387][ T7009] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  145.199585][ T4196] attempt to access beyond end of device
[  145.199585][ T4196] loop3: rw=2049, want=45104, limit=40427
[  145.286774][ T6459] Process accounting resumed
[  145.377588][ T6459] usb 3-1: USB disconnect, device number 9
[  145.543117][ T7048] loop1: detected capacity change from 0 to 256
[  145.569481][ T7044] loop4: detected capacity change from 0 to 8192
[  145.624382][ T7048] FAT-fs (loop1): Directory bread(block 64) failed
[  145.642310][ T7048] FAT-fs (loop1): Directory bread(block 65) failed
[  145.654156][ T7048] FAT-fs (loop1): Directory bread(block 66) failed
[  145.680793][ T7048] FAT-fs (loop1): Directory bread(block 67) failed
[  145.705467][ T7048] FAT-fs (loop1): Directory bread(block 68) failed
[  145.721457][ T7044] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  145.750269][ T7048] FAT-fs (loop1): Directory bread(block 69) failed
[  145.751535][ T7044] REISERFS (device loop4): using ordered data mode
[  145.764928][ T7044] reiserfs: using flush barriers
[  145.780234][ T7044] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  145.797088][ T7044] REISERFS (device loop4): checking transaction log (loop4)
[  145.805886][ T7048] FAT-fs (loop1): Directory bread(block 70) failed
[  145.812952][ T7048] FAT-fs (loop1): Directory bread(block 71) failed
[  145.819789][ T7048] FAT-fs (loop1): Directory bread(block 72) failed
[  145.826441][ T7048] FAT-fs (loop1): Directory bread(block 73) failed
[  145.860672][ T7056] loop0: detected capacity change from 0 to 512
[  145.976665][ T7056] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  146.149667][ T7044] REISERFS (device loop4): Using r5 hash to sort names
[  146.173387][ T7044] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  146.292931][ T7044] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3385, free_space(entry_count) 2
[  146.316940][ T7044] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  146.335655][ T7044] REISERFS (device loop4): Remounting filesystem read-only
[  146.519462][ T7052] loop3: detected capacity change from 0 to 40427
[  146.543672][ T7052] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  146.589481][ T7052] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  146.598448][ T7067] loop0: detected capacity change from 0 to 4096
[  146.624550][ T7052] F2FS-fs (loop3): invalid crc value
[  146.682004][ T7052] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  146.750045][ T7067] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  146.820786][ T7052] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  146.836682][ T7079] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 154: padding at end of block bitmap is not set
[  146.841348][ T7052] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  146.887040][  T144] wlan0: Trigger new scan to find an IBSS to join
[  147.229146][ T4196] attempt to access beyond end of device
[  147.229146][ T4196] loop3: rw=2049, want=45104, limit=40427
[  147.351576][ T7100] pimreg1: tun_chr_ioctl cmd 35108
[  147.637738][ T7114] sp0: Synchronizing with TNC
[  147.908969][ T7091] loop0: detected capacity change from 0 to 32768
[  148.059453][ T7130] loop4: detected capacity change from 0 to 256
[  148.080314][ T7131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1038'.
[  148.525110][ T7111] loop2: detected capacity change from 0 to 40427
[  148.647804][ T7111] F2FS-fs (loop2): invalid crc value
[  148.688555][ T7111] F2FS-fs (loop2): Found nat_bits in checkpoint
[  148.857878][ T7163] program syz.4.1050 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  148.911743][ T5033] Bluetooth: hci2: command 0x0401 tx timeout
[  148.943107][ T7111] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  149.172003][ T7111] attempt to access beyond end of device
[  149.172003][ T7111] loop2: rw=2049, want=45192, limit=40427
[  149.192518][ T7179] program syz.4.1054 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  149.249131][ T7175] kvm [7174]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled wrmsr: 0x4000005d data 0x6
[  149.328432][ T7181] attempt to access beyond end of device
[  149.328432][ T7181] loop2: rw=2049, want=45232, limit=40427
[  149.367221][ T7181] attempt to access beyond end of device
[  149.367221][ T7181] loop2: rw=2049, want=45184, limit=40427
[  149.547268][ T4195] attempt to access beyond end of device
[  149.547268][ T4195] loop2: rw=2049, want=45240, limit=40427
[  149.771285][ T7206] loop1: detected capacity change from 0 to 512
[  149.926970][  T155] wlan0: Trigger new scan to find an IBSS to join
[  149.935010][ T7206] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nombcache,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  149.956303][ T7212] device team0 entered promiscuous mode
[  149.956705][ T6460] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  149.979338][ T7206] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.990359][ T7212] device team_slave_0 entered promiscuous mode
[  150.057256][ T7212] device team_slave_1 entered promiscuous mode
[  150.080864][ T7212] device team0 left promiscuous mode
[  150.104190][ T7212] device team_slave_0 left promiscuous mode
[  150.121510][ T7212] device team_slave_1 left promiscuous mode
[  150.216209][    C1] vkms_vblank_simulate: vblank timer overrun
[  150.233810][ T6460] usb 5-1: Using ep0 maxpacket: 32
[  150.289900][ T7225] loop1: detected capacity change from 0 to 128
[  150.366752][ T6460] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  150.376639][ T6460] usb 5-1: config 0 has no interface number 0
[  150.383471][ T6460] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  150.396823][ T6459] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  150.433739][ T7225] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  150.464875][ T7225] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.494284][   T26] audit: type=1800 audit(1785294067.309:37): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1077" name="file1" dev="loop1" ino=104 res=0 errno=0
[  150.515067][    C1] vkms_vblank_simulate: vblank timer overrun
[  150.556934][ T6460] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  150.567205][ T6460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.577378][ T6460] usb 5-1: Product: syz
[  150.581975][ T6460] usb 5-1: Manufacturer: syz
[  150.586706][ T6460] usb 5-1: SerialNumber: syz
[  150.593560][ T6460] usb 5-1: config 0 descriptor??
[  150.603275][ T7221] loop3: detected capacity change from 0 to 40427
[  150.627799][ T7202] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  150.693702][ T7221] F2FS-fs (loop3): invalid crc value
[  150.713644][ T7221] F2FS-fs (loop3): Found nat_bits in checkpoint
[  150.764627][ T7221] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  150.772740][ T6459] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.792071][ T6459] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  150.811923][ T6459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.825199][ T6459] usb 3-1: config 0 descriptor??
[  150.839566][ T7221] attempt to access beyond end of device
[  150.839566][ T7221] loop3: rw=2049, want=45192, limit=40427
[  150.860093][ T7202] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  150.860237][ T7221] attempt to access beyond end of device
[  150.860237][ T7221] loop3: rw=2049, want=45232, limit=40427
[  150.879437][ T7221] attempt to access beyond end of device
[  150.879437][ T7221] loop3: rw=2049, want=45184, limit=40427
[  150.896036][  T155] wlan0: Creating new IBSS network, BSSID 02:c5:1d:a9:2e:5d
[  150.916729][ T1108] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  150.927783][ T4196] attempt to access beyond end of device
[  150.927783][ T4196] loop3: rw=2049, want=45240, limit=40427
[  151.316895][ T6459] ath6kl: Unsupported hardware version: 0x0
[  151.329959][ T6459] ath6kl: Failed to init ath6kl core: -22
[  151.353578][ T6460] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  151.357556][ T1108] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  151.364346][ T6460] asix: probe of 5-1:0.188 failed with error -71
[  151.381682][ T1108] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  151.387791][ T6460] usb 5-1: USB disconnect, device number 12
[  151.404664][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.404777][ T6459] ath6kl_usb: probe of 3-1:0.0 failed with error -22
[  151.471478][ T1108] gspca_main: stv0680-2.14.0 probing 041e:4007
[  151.525554][ T5033] usb 3-1: USB disconnect, device number 10
[  151.852753][ T7242] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15
[  152.058796][ T7248] loop3: detected capacity change from 0 to 128
[  152.155437][ T7236] loop0: detected capacity change from 0 to 40427
[  152.183873][ T7236] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  152.191500][ T7236] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  152.253228][ T7236] F2FS-fs (loop0): invalid crc value
[  152.281976][ T7257] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1089'.
[  152.327013][ T7236] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  152.451157][ T7236] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  152.463715][ T7236] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  152.613054][ T4193] attempt to access beyond end of device
[  152.613054][ T4193] loop0: rw=2049, want=45104, limit=40427
[  152.648726][ T7275] loop2: detected capacity change from 0 to 2048
[  152.696866][ T1108] stv0680 2-1:4.0: Could not get descriptor 0200
[  152.705647][ T7275] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  152.846109][ T7279] netlink: 'syz.4.1098': attribute type 11 has an invalid length.
[  152.916683][ T1108] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  152.925114][ T1108] stv0680 2-1:4.0: last error: 34,  command = 0x4
[  152.945651][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1099'.
[  152.967147][ T1108] usb 2-1: USB disconnect, device number 10
[  153.133145][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1101'.
[  153.166213][ T7287] netlink: 'syz.2.1101': attribute type 1 has an invalid length.
[  153.179111][ T7287] device gretap0 entered promiscuous mode
[  153.615417][ T7318] loop1: detected capacity change from 0 to 256
[  153.620180][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'.
[  153.698901][ T7318] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  153.794623][ T7324] loop4: detected capacity change from 0 to 64
[  153.812890][ T7323] loop3: detected capacity change from 0 to 512
[  153.951194][ T7324] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  153.981629][ T7323] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nombcache,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  154.077437][ T7323] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.336628][ T1111] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  154.354031][ T7334] loop3: detected capacity change from 0 to 256
[  154.535289][   T26] audit: type=1326 audit(1785294071.349:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.3.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a922e99 code=0x7ffc0000
[  154.595884][   T26] audit: type=1326 audit(1785294071.399:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.3.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a922e99 code=0x7ffc0000
[  154.666638][ T6460] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  154.695571][ T7347] loop2: detected capacity change from 0 to 1024
[  154.697088][   T26] audit: type=1326 audit(1785294071.399:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.3.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a922e99 code=0x7ffc0000
[  154.739089][ T7351] loop0: detected capacity change from 0 to 512
[  154.752177][   T26] audit: type=1326 audit(1785294071.399:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.3.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f557a922e99 code=0x7ffc0000
[  154.784636][   T26] audit: type=1326 audit(1785294071.399:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.3.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a922e99 code=0x7ffc0000
[  154.812771][ T7350] loop3: detected capacity change from 0 to 4096
[  154.819787][   T26] audit: type=1326 audit(1785294071.399:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.3.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a922e99 code=0x7ffc0000
[  154.820859][ T7347] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  154.863818][ T7351] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  154.868088][   T26] audit: type=1326 audit(1785294071.399:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.3.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a922e99 code=0x7ffc0000
[  154.902727][ T7351] UDF-fs: Scanning with blocksize 512 failed
[  154.912701][ T7350] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  154.922740][ T7351] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  154.936848][ T1111] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  154.966140][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  154.975449][   T26] audit: type=1326 audit(1785294071.399:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.3.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f557a8e36ce code=0x7ffc0000
[  155.007127][ T6460] usb 2-1: Using ep0 maxpacket: 16
[  155.010391][ T7351] UDF-fs: Scanning with blocksize 1024 failed
[  155.028051][ T1111] usb 5-1: Product: syz
[  155.046984][ T1111] usb 5-1: Manufacturer: syz
[  155.054596][ T1111] usb 5-1: SerialNumber: syz
[  155.076046][ T7351] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  155.076234][ T1111] usb 5-1: config 0 descriptor??
[  155.097984][   T26] audit: type=1326 audit(1785294071.399:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.3.1124" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a922e99 code=0x7ffc0000
[  155.114199][ T7351] UDF-fs: Scanning with blocksize 2048 failed
[  155.142970][ T6460] usb 2-1: config 0 interface 0 has no altsetting 0
[  155.150513][ T6460] usb 2-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.00
[  155.159779][ T6460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.218956][ T6460] usb 2-1: config 0 descriptor??
[  155.231957][ T7351] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  155.317689][ T7351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  155.430875][ T6458] usb 5-1: USB disconnect, device number 13
[  155.718402][ T6460] wacom 0003:056A:0304.000B: unknown main item tag 0x2
[  155.735837][ T6460] wacom 0003:056A:0304.000B: unknown main item tag 0x6
[  155.760757][ T6460] wacom 0003:056A:0304.000B: ignoring exceeding usage max
[  155.803225][ T7377] loop0: detected capacity change from 0 to 736
[  155.824279][ T6460] wacom 0003:056A:0304.000B: hidraw0: USB HID v0.81 Device [HID 056a:0304] on usb-dummy_hcd.1-1/input0
[  155.984433][ T6463] usb 2-1: USB disconnect, device number 11
[  156.116006][ T7385] fido_id[7385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  156.244779][ T7389] binder: BC_ATTEMPT_ACQUIRE not supported
[  156.276684][ T7389] binder: 7388:7389 ioctl c0306201 2000000003c0 returned -22
[  156.412627][ T7395] loop4: detected capacity change from 0 to 512
[  156.517444][ T7395] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  156.733149][ T7383] loop2: detected capacity change from 0 to 32768
[  157.178194][ T7425] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  157.479724][ T7438] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  157.492813][ T7438] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  157.939802][ T7464] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  158.096588][ T1108] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  158.305547][ T7482] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  158.344008][ T7492] i2c i2c-0: delete_device: Can't parse I2C address
[  158.366707][ T1108] usb 2-1: Using ep0 maxpacket: 32
[  158.394973][ T7482] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,discard,nolazytime,jqfmt=vfsv0,quota,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,,errors=continue. Quota mode: writeback.
[  158.444835][ T7490] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  158.530718][ T7499] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  158.536880][ T1108] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  158.553478][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.565597][ T1108] usb 2-1: config 0 descriptor??
[  158.593146][ T7499] REISERFS (device loop0): using ordered data mode
[  158.602312][ T7499] reiserfs: using flush barriers
[  158.634946][ T7499] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  158.655341][ T7499] REISERFS (device loop0): checking transaction log (loop0)
[  158.670336][ T7499] REISERFS (device loop0): Using r5 hash to sort names
[  158.675563][ T7507] set_capacity_and_notify: 7 callbacks suppressed
[  158.675580][ T7507] loop3: detected capacity change from 0 to 256
[  158.707060][ T7499] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  158.836918][ T1108] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  158.863448][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  158.927005][ T1108] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  158.964480][ T1108] usb 2-1: media controller created
[  159.031889][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  159.043293][ T7460] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  159.106742][ T1108] az6027: usb out operation failed. (-71)
[  159.147226][ T1108] az6027: usb out operation failed. (-71)
[  159.159847][ T1108] stb0899_attach: Driver disabled by Kconfig
[  159.177715][ T1108] az6027: no front-end attached
[  159.177715][ T1108] 
[  159.236911][ T1108] az6027: usb out operation failed. (-71)
[  159.248455][ T1108] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  159.268448][ T1108] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19
[  159.288603][ T1108] dvb-usb: schedule remote query interval to 400 msecs.
[  159.295851][ T1108] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  159.313905][ T1108] usb 2-1: USB disconnect, device number 12
[  159.354663][ T1108] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  159.564965][ T7525] loop2: detected capacity change from 0 to 256
[  159.683702][ T7525] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  159.723719][ T7525] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  159.758365][ T7525] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  159.994657][ T7546] netlink: 884 bytes leftover after parsing attributes in process `syz.1.1211'.
[  160.255386][ T7554] netlink: 'syz.2.1215': attribute type 7 has an invalid length.
[  160.365687][ T7529] loop0: detected capacity change from 0 to 32768
[  160.394731][ T7542] loop4: detected capacity change from 0 to 32768
[  160.416771][ T6463] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  160.447419][ T7529] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  160.479101][   T26] kauditd_printk_skb: 8 callbacks suppressed
[  160.479142][   T26] audit: type=1800 audit(1785294077.299:55): pid=7542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1209" name="file1" dev="loop4" ino=4 res=0 errno=0
[  160.678437][ T6463] usb 2-1: Using ep0 maxpacket: 32
[  160.684449][ T7558] loop4: detected capacity change from 0 to 512
[  160.805736][ T7558] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  160.808865][ T6463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.876893][ T6463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.916644][ T6463] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  160.940555][ T6463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.955133][   T26] audit: type=1804 audit(1785294077.769:56): pid=7558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1218" name="/newroot/265/file0/bus" dev="loop4" ino=1048687 res=1 errno=0
[  160.962905][ T7556] loop2: detected capacity change from 0 to 32768
[  161.004759][ T6463] usb 2-1: config 0 descriptor??
[  161.068892][ T6463] hub 2-1:0.0: USB hub found
[  161.070540][ T7556] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1216 (7556)
[  161.098000][ T7562] netlink: 'syz.3.1220': attribute type 14 has an invalid length.
[  161.098437][ T7556] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  161.136699][ T7556] BTRFS info (device loop2): use zlib compression, level 3
[  161.144528][ T7556] BTRFS info (device loop2): using free space tree
[  161.241899][ T7556] BTRFS info (device loop2): has skinny extents
[  161.287233][ T6463] hub 2-1:0.0: 1 port detected
[  161.412437][ T7591] loop4: detected capacity change from 0 to 256
[  161.419750][ T7556] BTRFS info (device loop2): enabling ssd optimizations
[  161.570427][ T7591] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  161.765678][ T6463] usb 2-1: USB disconnect, device number 13
[  161.794697][ T4915] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop2 scanned by udevd (4915)
[  162.062119][ T7609] loop4: detected capacity change from 0 to 1024
[  162.168560][ T7601] chnl_net:caif_netlink_parms(): no params data found
[  162.183102][ T7609] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  162.196939][ T7609] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.301169][ T7609] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.1235: lblock 0 mapped to illegal pblock 0 (length 1)
[  162.324001][ T7617] loop1: detected capacity change from 0 to 128
[  162.461136][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.462062][ T7617] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985
[  162.468705][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.469939][ T7601] device bridge_slave_0 entered promiscuous mode
[  162.496109][ T7601] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.503554][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.511864][ T7601] device bridge_slave_1 entered promiscuous mode
[  162.527178][ T7617] ; already mounted read-only
[  162.535351][ T7617] hpfs: filesystem error: improperly stopped
[  162.545619][ T7617] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  162.553798][ T7617] hpfs: You really don't want any checks? You are crazy...
[  162.562066][ T7617] hpfs: hpfs_map_sector(): read error
[  162.568042][ T7617] hpfs: code page support is disabled
[  162.593774][ T7617] hpfs: hpfs_map_4sectors(): unaligned read
[  162.608364][ T7617] hpfs: hpfs_map_4sectors(): unaligned read
[  162.614516][ T7617] hpfs: filesystem error: unable to find root dir
[  162.726095][ T7617] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim
[  162.743579][ T7601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.781463][ T7601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.933812][ T7601] team0: Port device team_slave_0 added
[  162.972814][ T7601] team0: Port device team_slave_1 added
[  163.059052][ T7601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.106865][ T1108] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  163.121484][ T7601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.148229][    C1] vkms_vblank_simulate: vblank timer overrun
[  163.246566][ T7601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.305498][ T7601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.343179][ T7601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.405244][ T7601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.422241][ T1108] usb 5-1: Using ep0 maxpacket: 8
[  163.458622][ T7601] device hsr_slave_0 entered promiscuous mode
[  163.465903][ T7601] device hsr_slave_1 entered promiscuous mode
[  163.474079][ T7601] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.484394][ T7601] Cannot create hsr debugfs directory
[  163.567628][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  163.586804][ T1108] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  163.607872][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.629761][ T1108] usb 5-1: config 0 descriptor??
[  163.634472][ T7655] loop3: detected capacity change from 0 to 32768
[  163.647681][ T7601] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  163.659350][ T7601] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  163.671013][ T7601] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  163.680493][ T7601] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  163.750297][ T7655] XFS (loop3): Mounting V5 Filesystem
[  163.759418][ T7601] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.779608][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  163.792929][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  163.824768][ T7655] XFS (loop3): Ending clean mount
[  163.837078][ T7601] 8021q: adding VLAN 0 to HW filter on device team0
[  163.888808][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  163.899706][ T1108] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  163.915043][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  163.946604][ T5035] Bluetooth: hci1: command 0x0409 tx timeout
[  163.987438][ T7410] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.994959][ T7410] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.010154][ T4196] XFS (loop3): Unmounting Filesystem
[  164.021565][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  164.037740][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  164.063800][ T7410] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.071363][ T7410] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.085254][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  164.096985][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  164.121360][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  164.155903][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  164.164268][ T5035] usb 5-1: USB disconnect, device number 14
[  164.228836][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  164.241103][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  164.253085][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  164.264464][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  164.275622][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  164.288546][ T7601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  164.300446][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  164.439945][ T1346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  164.448615][ T1346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  164.478067][ T7601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.497118][ T1108] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  164.685189][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  164.723562][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  164.774034][ T7601] device veth0_vlan entered promiscuous mode
[  164.791661][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  164.838317][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  164.875517][ T7601] device veth1_vlan entered promiscuous mode
[  164.884276][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  164.897035][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.917257][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  164.924963][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  164.946368][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  164.954451][ T1108] usb 2-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00
[  164.966362][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.988620][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  164.998368][ T1108] usb 2-1: config 0 descriptor??
[  165.009687][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  165.033863][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  165.074013][ T7601] device veth0_macvtap entered promiscuous mode
[  165.095972][ T7601] device veth1_macvtap entered promiscuous mode
[  165.106682][ T6459] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  165.123735][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.144182][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.154699][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.165885][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.177095][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.188935][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.199340][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.210695][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.225762][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.243866][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.258874][ T7601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.269510][ T1346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  165.288324][ T1346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  165.300089][ T7699] loop4: detected capacity change from 0 to 32768
[  165.307626][ T1346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  165.327287][ T1346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  165.347352][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.358414][ T7699] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1264 (7699)
[  165.372654][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.376800][ T6459] usb 4-1: Using ep0 maxpacket: 16
[  165.388253][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.401878][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.412936][ T7699] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  165.424564][ T7699] BTRFS info (device loop4): using free space tree
[  165.431584][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.443349][ T7699] BTRFS info (device loop4): has skinny extents
[  165.452771][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.463772][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.474931][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.488511][ T1108] ortek 0003:05A4:8003.000C: item fetching failed at offset 4/6
[  165.493672][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.507434][ T1108] ortek: probe of 0003:05A4:8003.000C failed with error -22
[  165.523047][ T6459] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 119, changing to 10
[  165.559743][ T6459] usb 4-1: config 0 interface 0 has no altsetting 0
[  165.567268][ T6459] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  165.581556][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.584490][ T6459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.592648][ T5035] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  165.617407][ T6459] usb 4-1: config 0 descriptor??
[  165.624409][ T7601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.638060][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  165.648899][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  165.668344][ T7601] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.678856][ T7601] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.688917][ T7601] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.693635][ T4872] usb 2-1: USB disconnect, device number 14
[  165.698832][ T7601] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.739926][ T7699] BTRFS info (device loop4): enabling ssd optimizations
[  165.836010][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.848258][ T7699] overlayfs: workdir and upperdir must reside under the same mount
[  165.861648][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.890822][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  165.909875][ T5035] usb 3-1: Using ep0 maxpacket: 32
[  165.924085][ T1346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.986583][ T1346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.999207][ T1346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  166.011172][ T4588] Bluetooth: hci1: command 0x041b tx timeout
[  166.071357][ T5035] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  166.082935][ T7701] udc-core: couldn't find an available UDC or it's busy
[  166.095755][ T7701] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  166.106579][ T5035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.129055][ T5035] usb 3-1: config 0 descriptor??
[  166.149166][ T6459] monterey 0003:0566:3004.000D: fixing up button/consumer in HID report descriptor
[  166.161218][ T6459] monterey 0003:0566:3004.000D: unknown main item tag 0x2
[  166.169496][ T6459] monterey 0003:0566:3004.000D: unknown main item tag 0x0
[  166.177015][ T6459] monterey 0003:0566:3004.000D: unknown main item tag 0x0
[  166.184860][ T6459] monterey 0003:0566:3004.000D: unknown main item tag 0x0
[  166.193106][ T6459] monterey 0003:0566:3004.000D: unknown main item tag 0x0
[  166.200717][ T6459] monterey 0003:0566:3004.000D: unknown main item tag 0x0
[  166.208003][ T6459] monterey 0003:0566:3004.000D: unknown main item tag 0x0
[  166.217093][ T6459] monterey 0003:0566:3004.000D: unknown main item tag 0x0
[  166.235225][ T6459] monterey 0003:0566:3004.000D: unknown main item tag 0x4
[  166.262353][ T6459] monterey 0003:0566:3004.000D: unknown main item tag 0x0
[  166.286086][ T6459] monterey 0003:0566:3004.000D: unknown main item tag 0x0
[  166.295354][ T6459] monterey 0003:0566:3004.000D: unknown main item tag 0x0
[  166.313740][ T6459] monterey 0003:0566:3004.000D: item fetching failed at offset 39/40
[  166.325327][ T6459] monterey: probe of 0003:0566:3004.000D failed with error -22
[  166.371816][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'.
[  166.397070][ T5035] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  166.463498][ T5035] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  166.497807][ T5035] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  166.505241][ T5035] usb 3-1: media controller created
[  166.541913][ T7615] usb 4-1: USB disconnect, device number 13
[  166.573956][ T5035] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  166.605793][ T7710] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  166.696715][ T5035] az6027: usb out operation failed. (-71)
[  166.711941][ T7744] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1273'.
[  166.721742][ T5035] az6027: usb out operation failed. (-71)
[  166.737013][ T5035] stb0899_attach: Driver disabled by Kconfig
[  166.743127][ T5035] az6027: no front-end attached
[  166.743127][ T5035] 
[  166.796923][ T5035] az6027: usb out operation failed. (-71)
[  166.816770][ T5035] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  166.832446][ T5035] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20
[  166.862005][ T5035] dvb-usb: schedule remote query interval to 400 msecs.
[  166.869700][ T5035] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  166.881779][ T5035] usb 3-1: USB disconnect, device number 11
[  166.996032][ T5035] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  167.066807][ T4588] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  167.146719][ T1108] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  167.150656][ T7743] loop5: detected capacity change from 0 to 32768
[  167.280150][ T7743] add_index: next_index = 0.  Resetting!
[  167.293245][ T7743] find_entry called with index >= next_index
[  167.313822][ T7743] find_entry called with index >= next_index
[  167.329173][ T7743] find_entry called with index >= next_index
[  167.358338][ T7743] find_entry called with index >= next_index
[  167.397035][ T1108] usb 5-1: Using ep0 maxpacket: 32
[  167.415669][ T7743] find_entry called with index >= next_index
[  167.431792][ T7743] find_entry called with index >= next_index
[  167.444167][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1281'.
[  167.460663][ T7743] find_entry called with index >= next_index
[  167.483276][ T7743] read_mapping_page failed!
[  167.497251][ T4588] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  167.512120][ T7743] ERROR: (device loop5): txCommit: 
[  167.512120][ T7743] 
[  167.528382][ T4588] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  167.547216][ T1108] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.559109][ T7743] ERROR: (device loop5): remounting filesystem as read-only
[  167.582498][ T1108] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.586085][ T7765] netlink: 'syz.2.1282': attribute type 1 has an invalid length.
[  167.606772][ T4588] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  167.616197][ T4588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.623247][ T7765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1282'.
[  167.652790][  T277] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0)
[  167.668041][ T7747] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  167.669155][  T277] ------------[ cut here ]------------
[  167.703903][  T277] kernel BUG at fs/jfs/jfs_txnmgr.c:932!
[  167.712853][  T277] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  167.719957][  T277] CPU: 1 PID: 277 Comm: jfsCommit Not tainted syzkaller #0
[  167.728099][  T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  167.739541][  T277] RIP: 0010:txUnlock+0xc7d/0xcb0
[  167.745254][  T277] Code: f9 7b e2 06 0f 0b e8 42 0b a6 fe 48 c7 c7 40 52 62 8a 48 c7 c6 29 4e 62 8a ba a4 03 00 00 48 c7 c1 00 5d 62 8a e8 d3 7b e2 06 <0f> 0b e8 1c 0b a6 fe 48 c7 c7 40 52 62 8a 48 c7 c6 29 4e 62 8a ba
[  167.768829][  T277] RSP: 0018:ffffc90002cafd30 EFLAGS: 00010246
[  167.775183][  T277] RAX: 0000000000000037 RBX: 0000000000000000 RCX: eb039bf71b65bf00
[  167.783726][  T277] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  167.792054][  T277] RBP: ffff888071d496c8 R08: ffff8880b9133d7f R09: 1ffff110172267af
[  167.800139][  T277] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffffc90002824520
[  167.808791][  T277] R13: dffffc0000000000 R14: 00000000000004a4 R15: ffff88807752d894
[  167.817193][  T277] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  167.826488][  T277] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  167.833160][  T277] CR2: 0000001b32c22ff8 CR3: 0000000062529000 CR4: 00000000003506e0
[  167.842673][  T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  167.850643][  T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  167.858786][  T277] Call Trace:
[  167.862340][  T277]  <TASK>
[  167.865277][  T277]  ? _raw_spin_lock_irqsave+0x100/0x100
[  167.870850][  T277]  ? lockdep_hardirqs_on+0x94/0x140
[  167.876141][  T277]  jfs_lazycommit+0x598/0xb60
[  167.881917][  T277]  ? txFreelock+0x5a0/0x5a0
[  167.886524][  T277]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  167.893134][  T277]  ? sched_dynamic_update+0x210/0x210
[  167.899335][  T277]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  167.905269][  T277]  ? __kthread_parkme+0x14e/0x1b0
[  167.911533][  T277]  kthread+0x42e/0x520
[  167.915935][  T277]  ? txFreelock+0x5a0/0x5a0
[  167.920625][  T277]  ? kthread_blkcg+0xd0/0xd0
[  167.925311][  T277]  ret_from_fork+0x1f/0x30
[  167.929823][  T277]  </TASK>
[  167.932843][  T277] Modules linked in:
[  167.940028][ T1108] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  167.955511][ T1108] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  167.981199][ T1108] usb 5-1: Product: syz
[  167.986276][ T1108] usb 5-1: Manufacturer: syz
[  168.013082][  T277] ---[ end trace 9ef736923855902b ]---
[  168.030240][  T277] RIP: 0010:txUnlock+0xc7d/0xcb0
[  168.035566][  T277] Code: f9 7b e2 06 0f 0b e8 42 0b a6 fe 48 c7 c7 40 52 62 8a 48 c7 c6 29 4e 62 8a ba a4 03 00 00 48 c7 c1 00 5d 62 8a e8 d3 7b e2 06 <0f> 0b e8 1c 0b a6 fe 48 c7 c7 40 52 62 8a 48 c7 c6 29 4e 62 8a ba
[  168.057494][ T1108] hub 5-1:4.0: USB hub found
[  168.065450][  T277] RSP: 0018:ffffc90002cafd30 EFLAGS: 00010246
[  168.071888][  T277] RAX: 0000000000000037 RBX: 0000000000000000 RCX: eb039bf71b65bf00
[  168.084260][  T277] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  168.092717][ T4588] Bluetooth: hci1: command 0x040f tx timeout
[  168.099176][  T277] RBP: ffff888071d496c8 R08: ffff8880b9133d7f R09: 1ffff110172267af
[  168.107981][  T277] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffffc90002824520
[  168.116124][  T277] R13: dffffc0000000000 R14: 00000000000004a4 R15: ffff88807752d894
[  168.124961][  T277] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  168.134413][  T277] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  168.141180][  T277] CR2: 00007f78fc09f580 CR3: 00000000296af000 CR4: 00000000003506f0
[  168.149305][  T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  168.157496][  T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  168.166184][  T277] Kernel panic - not syncing: Fatal exception
[  168.172722][  T277] Kernel Offset: disabled
[  168.177478][  T277] Rebooting in 86400 seconds..