last executing test programs:

3m48.442367221s ago: executing program 3 (id=47):
r0 = socket(0x2, 0x3, 0xff)
shutdown(r0, 0x1)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020)

3m48.25727636s ago: executing program 3 (id=49):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800010, &(0x7f0000000180), 0x1, 0xb9a1, &(0x7f0000000840)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0)

3m45.343506138s ago: executing program 3 (id=72):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendto$packet(r1, &(0x7f0000000840)="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", 0x800, 0x40044081, 0x0, 0x0)

3m44.314046679s ago: executing program 3 (id=82):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x450, &(0x7f0000001000)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x40a8, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1200009, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m43.830589358s ago: executing program 3 (id=86):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000940)="195f02", 0x3}, {&(0x7f00000009c0)="264ffdb3fca1b89f35ea907b169f3deb322ffc4aeab74d0d9249f9e4d1a6f06e2c32f5cf242233bbff1ae8b311117c1c91d108fa054d8b627e19cdbab4", 0x3d}], 0x2, &(0x7f0000003dc0)=ANY=[], 0x90, 0x40000}}], 0x1, 0x0)

3m43.353319675s ago: executing program 3 (id=89):
r0 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d790", 0x2, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x26)
keyctl$update(0x2, r0, &(0x7f0000000240)="ac", 0x1)

3m42.827136787s ago: executing program 32 (id=89):
r0 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d790", 0x2, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x26)
keyctl$update(0x2, r0, &(0x7f0000000240)="ac", 0x1)

5.426428994s ago: executing program 1 (id=1741):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KIOCSOUND(r1, 0x4b2f, 0x0)

3.589227715s ago: executing program 1 (id=1754):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}]}]}]}, 0x34}}, 0x0)

3.406593573s ago: executing program 1 (id=1756):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0)

3.249026269s ago: executing program 1 (id=1758):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@main=@item_012={0x2, 0x0, 0xb, "fa9e"}, @main=@item_012={0x1, 0x0, 0xb, "b2"}]}}, 0x0}, 0x0)

2.463587676s ago: executing program 2 (id=1761):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d40)=@newqdisc={0x148, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x151, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x6, 0x8, 0x8, 0x2, 0x17, 0xe, 0x1}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4940}, 0x24008890)

2.282649824s ago: executing program 2 (id=1763):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ioctl$COMEDI_CMDTEST(r0, 0x8050640a, 0x0)

2.142383158s ago: executing program 2 (id=1764):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40841}, 0x20000000)

1.963796946s ago: executing program 2 (id=1766):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x2, 0x7}, 0x8)
sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)

1.748252567s ago: executing program 4 (id=1769):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

1.675196574s ago: executing program 0 (id=1770):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1)

1.566579955s ago: executing program 4 (id=1771):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x44, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r1, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004)

1.566399375s ago: executing program 0 (id=1772):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}])

1.501783971s ago: executing program 4 (id=1773):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132fff000"})
write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0xc0, 0x0, 0x0, @time, {}, {0x0, 0x81}, @connect={{0x6, 0x3}, {0xf9, 0x8}}}], 0x1c)

1.453232546s ago: executing program 1 (id=1774):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f0000000080)="3f031c000302140006001e0089003307258000000000000000c988a807008100000088a800ff", 0x26, 0x0, &(0x7f00000000c0)={0xc9, 0x8100, r1, 0x1, 0x8, 0x6, @local}, 0x14)

1.374351124s ago: executing program 0 (id=1775):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="440000001800010000000000000000000a002000000000000000000018001600140001000100000000000000000010000070000008000400", @ANYRES32=r2, @ANYBLOB="0600150008"], 0x44}}, 0x0)

1.338589118s ago: executing program 4 (id=1776):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
fcntl$notify(r0, 0x402, 0x252d26e48e370112)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='ns\x00')
getdents(r1, &(0x7f0000000000)=""/39, 0x82)

1.259605585s ago: executing program 1 (id=1777):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x82042, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

1.202391551s ago: executing program 0 (id=1778):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000fddbdf252b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000500340040000000080026006c090000240051"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

1.202067311s ago: executing program 4 (id=1779):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
io_setup(0x58, &(0x7f00000001c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}])
connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e)

1.101638291s ago: executing program 0 (id=1780):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x1, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$eJzs3c1vHGcdB/DfvvolNLVyqEqEkJuWl1KaxEkJgQJtD3Dg0gOKuKFErltFpICSgNLKIq4sJA6c+AtASBwR4og48Af0wJUbJ05EspFAPTFo7OeJZze7Xbu2d9aez0dyZn7zzK6f8XdnXzIz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEN/9zvdWWhFx82dpwVLEp6IT0Y5YKOvliFhYXsrrdyPi2dhpjmciojcXUd5+55+nI16JiA/PRmxtr6+Wi6/ssx/f/uPff/eDM2/+7Q+9S//90/3Oq+PWe/DgV//588PDbTMAAAA0TVEURSt9zD+fPt+36+4UADAV+fW/SPLyU1//+p9v/mWW+qNWq9Vq9RTqqmK0h9UiIjaqtynfMzgcDwAnzEZ8VHcXqJH8G60bEWfq7gQw01p1d4BjsbW9vtpK+baqrwfLu+35XJCB/Ddaj6/vGDedZPgck2k9vjajE+fG9GdhSn2YJTn/9nD+N3fb+2m9485/Wsbl39+99Klxcv6d4fyHnJ782yPzb6qcf/dA+XfkDwAAAAAAMyz///9Szcd/5w6/Kfvyccd/l6fUBwAAAAAAAAA4aocd/+8x4/8BAADAzCo/q5d+c3Zv2bjvYiuX32hFPDW0PtAw6WKZxbr7AQAAAAAAAAAAAABN0t09h/dGK6IXEU8tLhZFUf5UDdcHddjbn3RN335osrqf5AEAYNeHZ/O1/L3dBa2I+Yi4kb7rr7e4uFgU8wuLxWKxMJffz/bn5ouFyufaPC2XzfX38Ya42y/KO5uv3K5q0uflSe3D91f+rn7R2UfHjkj6Y8aY5hoDB4D0AhWx5RXplCmKp8e9+YAB9v9TaCmW6n5cMfvqfpgCAAAAx68oiqKVvs77fDrm3667UwDAVOTX/+HjAoeq22PaI47m/tVqtVqtVn+iuqoY7WG1iIiN6m3K9wyG4weAE2YjPqq7C9RI/o3WjYhn6+4EMNNadXeAY7G1vb7aSvm2qq8HaXz3fC7IQP4brZ3b5duPmk4yfI7JtB5fm9GJc2P688yU+jBLcv7t4fxv7rb303rHnf+0jMu/v3PJXPPk/DvD+Q85Pfm3R+bfVDn/7oHy78gfAAAAAABmWP7//yXHf/MmAwAAAAAAAMCJs7W9vpqve83H/z8zYj3Xf55OOf/WQfNfSPPyP9Fy/u2h/L84tF6nMv/ojb39/9/b66u/v/+vT+fpfvOfyzOt9MhqpUdEK/2mVjdND7N1T9rsdfrlb+q12p1uOuen6L0dt+NOrMXlgXXb6e+x174y0F72tDfQfmWgvftE+9WB9l763oFiIbdfjNX4cdyJt3bay7a5Cds/P6G9mNCe8+94/m+knH/38c+575f5L6b21tC09OiD9hP7fXU66ve8fvuzv7x8/Jsz0WZ0Hm9bVbl9F2roz87f5Ew/fnpv7e7FB7fu37+7EmkysPRKpMkRy/n3dn7m9p7/n99tz8/71f310Qf9A+c/KzajOzb/5yvz5fa+OOW+1SHn308/Of+3Uvvo/f8k5z9+/3+phv4AAAAAAAAAAAAAAADAxymKYucS0dcj4lq6/qeuazMBgOnKr/9Fkper1Wq1Wq0+fXVVMdpr1SIi/lq9Tfme4eej7gwAmGX/i4h/1N0JaiP/Bsvf91dOX6i7M8BU3Xvv/R/eunNn7e69unsCAAAAAAAAAHxSefzP5cr4zy9ExNLQegPjv74Ry4cd/7ObZx4PMHrEA32Psdnud9qV4cafi53xuS+OG//7Qjw5/nceE7dT3Y4xehPa+xPa5ya0z49cupfWyAs9KnL+z1XGOy/zPz80/HoTxn8dHvO+CXL+FyqP5zL/LwytV82/+O3M5b+x3xU3oz2Q/6X77/7k0r333n/59ru33ll7Z+1HV1dWLl+9du369euX3r59Z+3y7r/H0+sZkPPPY187D7RZcv45c/k3S87/c6mWf7Pk/D+favk3S84/v9+Tf7Pk/PNnH/k3S87/xVTLv1ly/l9KtfybZWt7fa7M/6VUy79Z8v7/5VTLv1ly/i+nWv7NkvO/mGr5N0vO/1Kq95G/r4c/RXL++QiX/b9Zcv4rqZZ/s+T8r6Ra/s2S87+aavk3S87/lVTLv1ly/l9JtfybJed/LdXyb5ac/1dTLf9myflfT7X8myXn/7VUy79Zcv5fT7X8myXn/2qq5d8sOf9vpFr+zZLz/2aq5d8sOf9vpVr+zZLzfy3V8m+Wve//N2NmFmZ+cbR32IkZ2a6TNlP3MxMAAAAAAAAAAAAAMGwapxPXvY0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LvXGLnO+n7gZ/bmtUOIgRCc/A1sEmOMs2TXl/jCHxcTrg1QbgmFXrBd79os+IbXLoEi2TRQImFUVIGavmgLCLWRqgqr4gWtKM2LqpdXpX1B31RUlZAaVSEKqEhtRbPVzHmexzOzszO73vF69jyfj2T/dmfOzDlz5szsftf+7gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGh295tmP18riqL+p/HX5qJ4Qf3jjRObG5e97mZvIQAAALBa/9v4+7nb0gWHl3GjpmX+9hX/8K2FhYWF4oPDXxn98sJCumKiKEY3FEXjuujqv32o1rxM8FgxXhtq+nyox+qHe1w/0uP60R7Xj/W4fkOP68d7XL9oByyysfx5TOPOtjU+3Fzu0uL2YrRx3bYOt3qstmFoKP4sp6HWuM3C6IlirjhVzBbTLcuXy9Yay3/n7vq63l7EdQ01rWtr/Qj58aePx22ohX28rWVd1+4z+tEbi4mf/PjTx//owjN3dpo9d0PL/ZXbueOe+nZ+NlxSbmut2JD2SdzOoabt3NrhORlu2c5a43b1j9u387llbufwtc1cU+3P+Xgx1Pj4e439NNL8Y720n7aGy/7r3qIoLl/b7PZlFq2rGCo2tVwydO35GS+PyPp91A+lFxcjKzpO717GcVqfM9taj9P210R8/u8OtxtZYhuan6YffWZs0fO+0uM0qj/qpV4r7cdgv18rg3IMxuPie40H/XjHY3BbePyf3r70Mdjx2OlwDKbH3XQM3tPrGBwaG25sc3oSao3bXDsGd7UsP9xYU60xn97e/RicunD63NT8Jz/12rnTx07Onpw9s2fXruk9+/YdOHBg6sTcqdnp8u/r3NuDb1MxlF4D94R9F18Dr25btvlQXfha/16H411eh5vblu3363Ck/cHV1uYFufiYLl8bD9d3+viVoWKJ11jj+dm5+tdhetxNr8ORptdhx68pHV6HI8t4HdaXObdzed+zjDT96bQNN+prweamY7D9+5H2Y7Df348MyjE4Ho6Lf9m59NeCrWF7H59c6fcjw4uOwfRww3tP/ZL0/f74gcbodFzeVb/ilrHi4vzs+fsfPXbhwvldRRhr4iVNx0r78bqp6TEVi47XoRUfr4fnXvH4XR0u3xz21fhr63+NL/lc1ZfZe3/356rx1a3z/my5dHcRRp+t9f7s9NW8vj9TluyyP+vLfHZq9d+Lp1za9P47usT7b8z9z5frS3f12PDoSPn6HU57Z7Tl/bj1qRppvHfVGut+bmp578ej4c9avx/f3uX9eEvbsv1+Px5tf3Dx/bjW66cdq9P+fI6H4+TUdPf34/oyW3av9Jgc6fp+fG+YtbD/XxOSQspFTcfOUsdtWtfIyGh4XCNxDa3H6Z6W5UdDNquv68nd13ec7ri3vK/h9OiuWavjdKJt2X4fp+n9aqnjtNbrp2/Xp/35HA/Hxe17uh+n9WWe2rv6986N8cOm986xXsfg6PBYfZtH00FYvt8vbIzH4P3F8eJscaqYaVw71jieao11TT6wvGNwLPxZ6/fKLV2OwR1ty/b7GExfx5Y69mojix98H7Q/n+PhuHjige7HYH2ZN+/v7/euO8IlaZmm713bf7621M+87mrbTTfyZ1717fzr/d1/Nltf5tSBlebM7vvpvnDJLR32U/vrd6nX1EyxNvtpS9jOZw4svZ/q21Nf5ssHl3k8HS6K4tLHH2z8vDf8+8qfXfz+t1r+3aXTv+lc+viDz9564m9Wsv0ArH/Pl2NT+bWu6V+mlvPv/wAAAMC6EHP/UJiJ/A8AAACVEXN//F/hifwPAAAAlRFz/0iYSSb5f8ubn5l7/lKRmvkLQbw+7YaHyuVix3U6fD6xcE398ge/MfvTv7i0vHUPFUXxs4d+o+PyWx6K21WaCNt59S2tly++4aVlrf/oI9eWa+6vfzXcf3w8yz0MOlVwp4ui+M5tX2ysZ+JDVxrzqYeONub7Lj/+WH2Z5w6Wn8fbP/2ScvnfD+XfwyeOtdz+6bAffhjm9Ds67494u29eec3W/R+4tr54u9o9L2w87Cc+XN5v/D05X3qsXD7u56W2/y+/8OQ368s/+qrO239pqPP2Pxnu9xth/vfLy+Wbn4P65/F2nwvbH9cXb3f/17/bcfuvfr5c/txby+WOhhnXvyN8vu2tz8w1769Ha8daHlfxtnK5uP7p7/924/p4f/H+27d//MiVlv3Rfnw89U/l/Uy1LR8vj+uJ/rxt/fX7aT4+4/qf/K2jLfu51/qvvu/pl9fvt33997UtN9x2+/bf2PQHn/tix/XF7Tn8p+daHs/h94bXcVj/Ex8Ox2O4/n+ufrFlvdHR97a+/8Tlv7r5Usvjid7+k3L9V99wsjH/feKnv3fLC2594eVX1vddUXzv/eX99Vr/yT8827L9X7tjZ+P5iNfHjn77+pcS13/+E5Nnzs5fnJtp2quN353zznJ7Noxv3FTf3tvCe2v750fOXvjI7PmJ6Ynpopio7q/Qu25fD/PZclxe6e13PhKez7t+9zubtv/jF+Ll//xwefmVd5Rft14dlvtSuHxz+fwt1Fa5/ifuvqPx+q49VX7e0mPvg63b/uPAshYMj7/9+4J4vJ976Uca+6F+XePrRnxdr3L7fzBT3s+3w35dCL+Z+Z47rq2vefn4uxGuvL98va96/4W3ufi8/nF4vt/1w/L+43bFx/uD8H3Md7e0vt/F4+Pbl4ba77/xWzwuh/eT4nJ5fVwq7u8rz93RcfPi7yEpLt/Z+Px30v3cuaKHuZT5T85PnZo7c/HRqQuz8xem5j/5qSOnz148c+FI43d5Hvlor9tfe3/a1Hh/mpndt7eY3lgUxdlieg3esG7M9tc/Wt72n3vk+Mz+6e0zsyeOXTxx4ZFzs+dPHp+fPz47M7/92IkTs5/odfu5mUO7dh/cs3/35Mm5mUMHDh7cc3By7szZ+maUG9XDvumPTZ45f6Rxk/lDew/ueuCBvdOTp8/OzB7aPz09ebHX7Rtfmybrt/71yfOzp45dmDs9Ozk/96nZQ7sO7tu3u+dvAzx97sT8xNT5i2emLs7Pnp8qH8vEhcbF9a99vW5PNc3/a/n9bLta+Yv4inffty/9fta6b3xmybsqF2n7BaLPhN9F8/cvOndgOZ/H3D8aZpJJ/gcAAIAcxNw/FmYi/wMAAEBlxNy/IcxE/gcAAIDKiLl/PMwkk/yv/6//v7z+f3m9/n9e/f9zHy97peu9/x/78/r/ebjJ/f9Vr1//X/+/ev3/5ffn1/v26//r/7PYoPX/Y+7fWBRZ5n8AAADIQcz9m8JM5H8AAACojJj7bwkzkf8BAACgMmLuf0GYSSb5P4f+/3s6LLbC/v/uXoWr6vf/1835/zcW+v/6/839//jk6P9nY8X9+w883PKp/n+g/6//r/+v/6//z6qNLnnNzer/x9x/a5hJJvkfAAAAchBz/wvDTOR/AAAAqIyY+28LM5H/AQAAoDJi7t8cZpJJ/s+h/9+J8/9Xtv/v/P/6//09/3/Txuj/rw/O/99d5/7/2C2LLtL/X2H/f1z/fz32/0f7u/2D3f/vufn6/9wQg3b+/5j7XxRmkkn+BwAAgBzE3P/iMBP5HwAAACoj5v6XhJnI/wAAAFAZMfffHmaSSf7X/9f/1//X/9f/77z+3uf/Lz/S/x8s+v/dOf9/D87/n1f/v8/bP9j9/36f/3/0Le231/+nk0Hr/8fc/9Iwk0zyPwAAAOQg5v47wkzkfwAAAKiMmPtfFmYi/wMAAEBlxNy/Jcwkk/yv/6//r/+v/6//33n9vfv/Jf3/waL/353+fw/6//r/+v/L6/93+OZX/59OevX/H3x9+T69Vv3/mPvvDDPJJP8DAABADmLuvyvMRP4HAACAyoi5//+Fmcj/AAAAUBkx928NM8kk/+v/6//r/+fV/79vTP9f/7/a9P+70//vQf9f/1//f5nn/19sJf3/Db3ujMro1f9/9337Gm+B7f3/DvmqL/3/mPtfHmaSSf4HAACAHMTc/4owE/kfAAAAKiPm/leGmcj/AAAAUBkx90+EmWSS//X/q9X//5O/euKVhf6//n+P9Ve0/x8PA/3/zOn/d6f/34P+v/6//v+a9P/Jx/X2/zvoS/8/5v67w0wyyf8AAACQg5j77wkzkf8BAACgMmLuvzfMRP4HAACAyoi5f1uYSSb5X/+/Wv3/SP9f/7/b+iva/0/0//Om/99B04tU/78H/X/9/+z7//G7X/1/+mPQ+v8x978qzCST/A8AAAA5iLl/e5iJ/A8AAACVEXP/q8NM5H8AAACojJj7d4SZZJL/9f/1//X/9f/1/zuvX/9/fdL/726l/f8x/X/9f/3/zPr/zv9Pfw1a/z/m/teEmWSS/wEAACAHMffvDDOR/wEAAKAy4v/fLP/fq/wPAAAAVRRz/2SYSSb5X/9f/z+n/n9N/1//X/+/8vT/u3P+/x70//X/9f/1/+mrQev/x9z/2jCTTPI/AAAA5CDm/vvDTOR/AAAAqIyY+6fCTOR/AAAAqIyY+6fDTDLJ//r/+v859f+d/1//X/+/+vT/u9P/70H/X/+/av3/otD/56YatP5/zP27wkwyyf8AAACQg5j7d4eZyP8AAABQGTH37wkzkf8BAACgMmLu3xtmkkn+1//X/9f/1//X/++8fv3/9alb//4ry7i9/n+g/6//r/9fjf6/8/9zkw1a/z/m/gfCTDLJ/wAAAJCDmPv3hZnI/wAAAFAZMffvDzMJ+b/T/+sGAAAA1peY+w+EmWTy7//6/xXp///m37WsW/9f/7/b+vvT/9+o/x+m/v9gqej5/9tfFtdtffb/n0+PX/9f/3+Qt1//X/+fxQat/x9z/8Ewk0zyPwAAAOQg5v7XhZnI/wAAAFAZMff//zAT+R8AAAAqI+b+14eZZJL/9f8r0v9vo/+v/99t/c7/r/9fZRXt//fN+uz/L3H+/yH9f/3/1W//WB+3X/9/Of3/Db3uhoq58f3/+NHy+v8x9x8KM8kk/wMAAEAOYu7/uTAT+R8AAAAqI+b+N4SZyP8AAABQGTH3Hw4zyST/6//r/+v/6//fmP7/G4p2g9j/rx88+v/Vov/fXaX6/87/r/8/YNuv/+/8/yw2aOf/j7n/jWEmmeR/AAAAyEHM/Q+Gmcj/AAAAUBkx978pzET+BwAAgMqIuf/NYSaZ5H/9f/1//X/9f+f/77x+/f/1Sf+/O/3/HvT/9f/1//X/6aub1//f0PH6mPvfEmaSSf4HAACAHMTc/9YwE/kfAAAAKiPm/reFmcj/AAAAUBkx9789zCST/K//r/+v/1/N/v+GLuvX/9f/rzL9/+70/3vQ/9f/1//X/6evBu38/zH3/3yYSSb5HwAAAHIQc/9DYSbyPwAAAFRGzP3vCDOR/wEAAKAyYu5/Z5hJJvlf/1//X/+/mv3/buvX/9f/rzL9/+70/3vQ/9f/1//X/6evBq3/H3P/u8JMMsn/AAAAkIOY+38hzET+BwAAgMqIuf/dYSbyPwAAAFRGzP3vCTPJJP/3p/9fK8pWq/5/M/3/6+n/L1xqvp3+v/5/0a/+f/1G+v9Z0P/vTv+/hw79/w36//r/+v/6/1y3Qev/x9z/3jCTTPI/AAAA5CDm/veFmcj/AAAAUBkx978/zET+BwAAgMqIuf/hMJNM8r/z/2fZ/08PefD6/87/r//v/P/6/6uj/9+d/n8Pzv+v/78u+/+jYX5sMn5t0v9nUAxa/z/m/kfCTDLJ/wAAAJCDmPs/EGYi/wMAAEBlxNz/i2Em8j8AAABURsz9HwwzyST/6/9n2f8f4PP/V63/P9JyfOTU/x9vej7Tcan/r/+/BvT/u9P/70H/X/9/kPv/4WjeuMTtnf+fQTRo/f+Y+z8UZpJJ/gcAAIAcxNz/S2Em8j8AAABURsz9vxxmIv8DAABAZcTc/ythJpnk/yz6/0OLF9P/1/9v3l/O/+/8/53Wr/+/Pun/d6f/34P+fz79/5H+b//NO/9/Sf+fQTRo/f+Y+381zGTJ4Pfsfy7jYQIAAAADJOb+D4eZZPLv/wAAAJCDmPuPhJnI/wAAAFAZMfcfDTPJJP9n0f/vYOn+fzyjqv6//r/+v/6//v961L/+/8tuLQr9f/1//f/K9v9vwPbr/+v/s9ig9f9j7j8WZpJJ/gcAAIAcxNz/a2Em8j8AAABURsz9x8NM5H8AAACojJj7Z8JMMsn/a93/b+r1jg5m/9/5/6+3//8z/X/9/0D/vzP9/7Xh/P/d6f/3oP+v/6//r/9PXw1a/z/m/tkwk0zyPwAAAFRY+nFwzP0nwkzkfwAAAKiMmPtPhpnI/wAAAFAZMfd/JMwkk/zv/P/6/87/fzP6/yMty+v/l/T/9f/7Qf+/O/3/HvT/9f/1//X/6atB6//H3D8XZpJJ/gcAAIAcxNz/0TAT+R8AAAAqI+b+j4WZyP8AAABQGTH3nwozyST/6//r/+fe/68VxWXn/9f/77R+/f/1Sf+/u/9j7z6a5DqrP463baVZwUtgzYqlWdkLXgBbdlSxNtHkYJmcwUSTwYDJOWeTc87Z5BxNMIaqoTw+50ij7rk90lx13/s8n8/m/KW/xbTwYOqH6luP/n8N/b/+X/+v/2dUU+v/c/dfFbd0sv8BAACgB7n77xu32P8AAADQjNz994tb7H8AAABoRu7++8ctnex//b/+v/f+f7GV9//3//Xt9/93/B3S/+v/N2Gpvz+2+q87KAo/sP+/2+VX31v/r//X/w/S/+v/9f+ca2r9f+7+B8Qtnex/AAAA6EHu/gfGLfY/AAAANCN3/4PiFvsfAAAAmpG7/+q4pZP9r//X/+v/9f/7+v+bvP+v/5837/8Pm0f/f/nu7q7+fxX9/7Q/v/5f/8+yqfX/ufsfHLd0sv8BAACgB7n7HxK32P8AAADQjNz9D41b7H8AAABoRu7+h8Utnex//b/+X/8/l/7/xIzf/4/vB/2//n8D9P/D5tH/e/9f/z/Pz6//1/+z7Pz7/wP/sT1K/5+7/+FxSyf7HwAAAHqQu/8RcYv9DwAAAM3I3f/IuMX+BwAAgGbk7n9U3NLJ/tf/6//1/3Pp/zf0/r/+X/8/czcszvwzQf+/TP+/xpr+f7HQ/w85dD+/+rc3n89/AP2//p9l59//H/gvNUr/n7v/0XHLlYvFiQv9TQIAAACTkrv/MXFLJ3/+DwAAAD3I3X9N3GL/AwAAQDNy95+OWzrZ//p//b/+X/+v/1/99fX/8+T9/2FH7//veuer7tNv/+/9/2He/x+7/7/9O6PJ/l9m3ZGp9f+5+6+NWzrZ/wAAANCD3P2PjVvsfwAAAGhG7v7HxS32PwAAADQjd//j45ZO9r/+f1r9f+YuF97/X7bv153V/+/VLvr/uff/99D/6//1/2vo/4d5/3+NvX/M7dQP9f/6f+//e/+fo5la/5+7/wlxSyf7HwAAAHqQu/+JcYv9DwAAAM3I3f+kuMX+BwAAgGbk7n9y3NLJ/tf/T6v/9/6//t/7//p//f/R6P+H6f/XaOX9/wv8rtl2P39U2/78+n/9P8um1v/n7n9K3NLJ/gcAAIAe5O5/atxi/wMAAEAzcvc/LW6x/wEAAKAZufufHrd0sv/1//r/efT/+RX0//r/i9//J/3/POn/h+n/12il/79A2+7n5/759f/6f5ZNrf/P3f+MuKWT/Q8AAAA9yN3/zLjF/gcAAIBm5O5/Vtxi/wMAAEAzcvc/O27pZP/r//X/8+j/vf+v//f+v/7/cPT/w/T/a+j/9f/6f/0/o5pa/5+7/7q4pZP9DwAAAD3I3f+cuMX+BwAAgGbk7n9u3GL/AwAAQDNy9z8vbulk/+v/V/X/t+j/9f/6f/2//n+m9P/D9P9r6P/1//p//T+jmlD/f9avOrV4ftzSyf4HAACAHuTuf0HcYv8DAABAM3L3vzBusf8BAACgGbn7r49bOtn/+v/JvP+/l/O11f/vLBYL/f+i0/5/56y/n/V9qf/X/2+A/n+Y/n8N/b/+X/+v/2dUE+r/936cu/9FcUsn+x8AAAB6kLv/xXGL/Q8AAADNyN3/krjF/gcAAIBm5O5/adzSyf7X/0+m/9/TVv/v/f9zvz966v+9/79M/78Z+v9h+v819P/6f/2//p9RTa3/z93/srjpxPEL/i0CAAAAE5O7/+VxSyd//g8AAAA9yN3/irjF/gcAAICZum7pZ3L3vzJu6WT/6//H7f9PnPVz+n/9/7nfH/p//b/+/+LT/w/T/6+h/9f/6//1/4xqav1/7v5XxS2d7H8AAADoQe7+G+IW+x8AAACakbv/1XGL/Q8AAADNyN3/mrilk/2v//f+v/5f/6//X/319f/zpP8fpv9fQ/9/YD9/mKex9f9H7v9Pnvk/9f+04Tz6/93d3Wsuev+fu/+1cUsn+x8AAAB6kLv/xrjF/gcAAIBm5O5/Xdxi/wMAAEAzcve/Pm7pZP/r/zvt//NbfV79/+nFYpL9/6X6//30/6vp/zdD/z9M/7+G/t/7/97/1/8zqqm9/5+7/w1xSyf7HwAAAHqQu/+NcYv9DwAAAM3I3f+muMX+BwAAgGbk7n9z3NLJ/tf/d9r/e//f+//6/033/7ct9P8bMYv+f+fgrz/1/v9a/b/+f0B3/f89777vh/p//T/Lptb/5+5/S9zSyf4HAACAHuTuf2vcYv8DAABAM3L3vy1usf8BAACgGbn73x43Hetk/+v/9f/6f/2//n/119/w+/8nFouF/n8Es+j/B0y9/x/n/f9z/1N+hv5f/z/nz6//1/+zbGr9f+7+d8Qtnex/AAAA6EHu/nfGLfY/AAAANCN3/7viFvsfAAAAmpG7/91xSyf7X/+v/9f/6/+b7/+vnUX/7/3/kej/h02j/z+Y/l//P+fPr//X/3N42+r/c/e/J27pZP8DAABAD3L3vzdusf8BAACgGbn73xe32P8AAADQjNz9749bOtn/+n/9//n0//k59f9t9f8nJ9f/n9r3r9fJ+//6/5Ho/4fp/9fQ/+v/9f/X6f8Z09Te/8/d/4G4pZP9DwAAAD3I3f/BuPU/3dr/AAAA0Izc/R+KW+x/AAAAaEbu/g/HLZ3sf/2//t/7//r/5t//1/93Rf8/TP+/hv5f/6//9/4/o5pa/5+7/yNxSyf7HwAAAHqQu/+jcYv9DwAAAM3I3f+xuMX+BwAAgGbk7r8pbulk/+v/9f/6f/2//v+Ov4f6/zbo/4dtpv/f0f/r/6ufvyT+U6D/1/+v+/W0aWr9f+7+j8ctnex/AAAAaM3xFT+Xu/8TcYv9DwAAAM3I3f/JuMX+BwAAgFk6tuLncvd/Km6Z5f5fVaEP0//r//X/+n/9/+qvr/+fp630//lNof/3/n/op/+/y74fze39/3P/++uyhf5f/8/Yptb/5+7/dNwyy/0PAAAArJK7/zNxi/0PAAAAzcjd/9m4xf4HAACAZuTu/1zc0sn+1//r//X/+n/9/+qvr/+fp9H6/5ML7//r//X/G34/f+6fX/+v/2fZ1Pr/3P2fj1s62f8AAADQg9z9X4hb7H8AAABoRu7+L8Yt9j8AAAA0Y2/3Z1zW4f7X/+v/9f/6f/3/6q+v/5+nrbz/r//X/+v/9+j/9f/6f841tf7/S3u/6tTiy3FLJ/sfAAAAepC7/ytxi/0PAAAAzcjd/9W4xf4HAACAZuTu/1rc0sn+1//va89P6/+n2v/v7u5eo/+/ZHGV/n9l/3/zjPv/6/X/I9P/D+u4/z92qA+g/9f/T77/P/e/Jc/Q/zNFU+v/c/d/PW7pZP8DAABAD3L3fyNusf8BAACgGbn7vxm32P8AAADQjNz934pbOtn/+v8JvP9/Sv/v/X/v/y+8/6//H4n+f1jH/f/htNj/nzr8b3/b/fxRbfvze/9f/8+yqfX/ufu/Hbd0sv8BAACgB7n7vxO32P8AAADQjNz9341b7H8AAABoRu7+78Utnex//f/m+v/b/73r5f3/ncXqz6//1//r//X/F5v+f5j+f40W+//zsO1+fu6fX/+v/2fZ1Pr/3P3fj1v2D7/j5/e7BAAAAKYkd/8P4pZO/vwfAAAAepC7/4dxi/0PAAAAzcjd/6O4pZP9r/+fwPv/Dfb/3v9f/f2h/590/3+p/r8N+v9h+v819P/6f/3/SP1/fjfr/3s3tf4/d/+P45ZO9j8AAAD0IHf/T+KWK3e29ZEAAACAkeXu/2nc4s//AQAAoBm5+2+OW87a/6va7lbo//X/+n/9v/5/9dfX/8+T/n/YYfv/k4uj9f9J/6//1//32v97/587bLj/P72u/8/d/7O4xZ//AwAAwOwcP+Dnc/f/PG6x/wEAAKAZuft/EbfY/wAAANCM3P2/jFtuuXRbH2mj9P/6f/3/mv7/1vgG1//r//X/s6D/H+b9/zX0/2P081fo/9vo/xcL/T9Ht+H+f+2Pc/f/Km7x5/8AAADQjNz9v45b7H8AAABoRu7+38Qt9j8AAAA0I3f/b+OWTva//l//f8T+fy/NbLr/9/6//j/o/+dB/z9s+/3/jYNfVv/fRP/v/f9G+n/v/zOGbfT/OwP//9z9v4tbOtn/AAAA0IPc/b+PW+x/AAAAaEbu/j/ELfY/AAAANCN3/x/jlk72/9b6//i3Wv8/+/6//ff/B/v/3YX+X/+v/58W/f+w7ff/w/T/+v85f379v/6fZdvo/wd/vPerTi3+FLd0sv8BAACgB7n7/xy32P8AAADQjNz9f4lb7H8AAABoRu7+v8Ytnex/7//r//X/3v/X/6/++vr/edL/D9P/r1Z/o/T/+n/9v/6fUU2t/8/d/7e4pZP9DwAAAD3I3f/3uMX+BwAAgGbk7r8lbrH/AQAAoBm5+/8RtzSx/4+t/Sv0/7Ps/yuP1v/r//X/+n/20/8P22b/f687rf+y3v/fev+fH0H/r//X/zOKqfX/ufv/Gbc0sf8BAACA2+Xu/1fcYv8DAABAM3L3/ztusf8BAACgGbn7b41bOtn/a/r/k/UX6v8Hef9//+fX/6/+/tD/6//1/xef/n+Y9//X0P97/1//r/9nVFPr/3P3/ydu6WT/AwAAQA9y998Wt9j/AAAA0Izc/f+NW+x/AAAAaEbu/v/FLZ3sf+//z6n/v0L/r//X/+v/9f9r6P+H6f/X0P/r//X/+n9GNbX+P3f//wMAAP//qbtNJQ==")
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xffa1, 0x2007bb})

1.019245249s ago: executing program 2 (id=1781):
timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=<r0=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x41, 0x8}]})
socket(0x11, 0x3, 0x0)
timer_delete(r0)

866.453334ms ago: executing program 4 (id=1782):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x48c2, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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")
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x1, 0x5, 0x5})
r0 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x51)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0)

102.49816ms ago: executing program 2 (id=1783):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000300), &(0x7f0000000700)=r0}, 0x20)
recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x1)

0s ago: executing program 0 (id=1784):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x6, 0xc, 0x0, 0x3, 0x3})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x11)

kernel console output (not intermixed with test programs):

AT-fs (loop2): error, invalid access to FAT (entry 0xffffffff)
[  191.567139][ T5173] usb 2-1: Using ep0 maxpacket: 16
[  191.579487][ T5173] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.600271][ T5173] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  191.628103][ T5173] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  191.650973][ T5173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.686466][ T5173] usb 2-1: Product: syz
[  191.695575][ T5173] usb 2-1: Manufacturer: syz
[  191.703370][ T5173] usb 2-1: SerialNumber: syz
[  192.122832][ T5173] usb 2-1: 0:2 : does not exist
[  192.466550][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'.
[  192.535948][ T5173] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  192.580762][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.853'.
[  192.622692][ T5173] usb 2-1: USB disconnect, device number 5
[  193.144483][ T8501] loop0: detected capacity change from 0 to 128
[  193.165794][ T8501] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  193.217431][ T8501] hpfs: filesystem error: improperly stopped
[  193.223513][ T8501] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  193.277222][ T8501] hpfs: You really don't want any checks? You are crazy...
[  193.291065][ T8501] hpfs: hpfs_map_sector(): read error
[  193.297369][ T8501] hpfs: code page support is disabled
[  193.340116][ T8501] hpfs: hpfs_map_4sectors(): unaligned read
[  193.346191][ T8501] hpfs: hpfs_map_4sectors(): unaligned read
[  193.358612][ T8501] hpfs: filesystem error: unable to find root dir
[  193.580670][ T8512] loop0: detected capacity change from 0 to 1024
[  193.617082][ T8512] EXT4-fs: Ignoring removed oldalloc option
[  193.643407][ T8512] EXT4-fs: Ignoring removed bh option
[  193.668414][ T8512] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  193.751343][ T8512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.372473][ T8505] loop1: detected capacity change from 0 to 32768
[  194.412039][ T8505] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  194.481932][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.488649][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  194.502109][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  194.631923][ T5778] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  194.887273][ T8533] mkiss: ax0: crc mode is auto.
[  195.167230][ T8544] netlink: 52 bytes leftover after parsing attributes in process `syz.1.876'.
[  195.355347][ T8549] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  195.933855][ T8565] loop4: detected capacity change from 0 to 128
[  195.987134][   T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  195.996057][ T8565] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  196.033739][ T8567] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  196.052761][ T8565] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  196.207032][   T23] usb 3-1: Using ep0 maxpacket: 32
[  196.233397][ T6424] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  196.243974][   T23] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  196.257011][   T23] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  196.305713][   T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  196.316252][ T8569] loop0: detected capacity change from 0 to 512
[  196.325044][   T23] usb 3-1: config 1 has no interface number 0
[  196.343304][   T23] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  196.357824][ T8569] EXT4-fs: Ignoring removed nobh option
[  196.370049][ T8569] EXT4-fs (loop0): Test dummy encryption mode enabled
[  196.383609][   T23] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  196.407633][ T8569] EXT4-fs error (device loop0): __ext4_iget:5067: inode #11: block 1: comm syz.0.889: invalid block
[  196.428214][ T8569] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.889: couldn't read orphan inode 11 (err -117)
[  196.456066][ T8569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.465724][   T23] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  196.516038][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.526588][ T8569] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  196.553596][ T8557] loop1: detected capacity change from 0 to 32768
[  196.561697][   T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  196.652637][   T28] audit: type=1800 audit(1762962742.890:30): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.882" name="file1" dev="loop1" ino=4 res=0 errno=0
[  196.664605][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.784789][   T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  197.252360][   T23] usb 3-1: USB disconnect, device number 6
[  197.267698][   T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  197.318729][ T8580] loop0: detected capacity change from 0 to 1024
[  197.406867][ T8580] hfsplus: xattr searching failed
[  197.427949][ T8580] hfsplus: catalog searching failed
[  197.468844][ T8575] loop4: detected capacity change from 0 to 32768
[  197.491232][   T35] hfsplus: b-tree write err: -5, ino 4
[  197.497106][ T8575] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.892 (8575)
[  197.606197][ T8575] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  197.652674][ T8575] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  197.688514][ T8575] BTRFS info (device loop4): setting nodatacow, compression disabled
[  197.707593][ T8575] BTRFS info (device loop4): force clearing of disk cache
[  197.727317][ T8575] BTRFS info (device loop4): enabling ssd optimizations
[  197.755446][ T8575] BTRFS info (device loop4): using spread ssd allocation scheme
[  197.787107][ T8575] BTRFS info (device loop4): turning off barriers
[  197.793615][ T8575] BTRFS info (device loop4): disabling free space tree
[  197.830326][ T8575] BTRFS info (device loop4): not using ssd optimizations
[  197.876979][ T8575] BTRFS info (device loop4): not using spread ssd allocation scheme
[  198.111126][ T8575] BTRFS info (device loop4): rebuilding free space tree
[  198.161767][ T8575] BTRFS info (device loop4): disabling free space tree
[  198.207291][ T8575] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  198.237199][ T8575] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  198.527871][ T6170] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  198.712437][ T8616] loop1: detected capacity change from 0 to 4096
[  198.777915][ T8616] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  198.826667][ T8616] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  198.926205][ T8619] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  199.328822][ T8626] loop1: detected capacity change from 0 to 8
[  199.393801][ T8626] SQUASHFS error: zlib decompression failed, data probably corrupt
[  199.421156][ T8626] SQUASHFS error: Failed to read block 0x9b: -5
[  199.450880][ T8613] loop0: detected capacity change from 0 to 40427
[  199.466047][ T8626] SQUASHFS error: Unable to read metadata cache entry [99]
[  199.480499][ T8613] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  199.492279][ T8626] SQUASHFS error: Unable to read inode 0x127
[  199.505432][ T8613] F2FS-fs (loop0): Image doesn't support compression
[  199.530629][ T8613] F2FS-fs (loop0): Image doesn't support compression
[  199.550467][ T8613] F2FS-fs (loop0): invalid crc value
[  199.590876][ T8613] F2FS-fs (loop0): Found nat_bits in checkpoint
[  199.825509][ T8613] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  199.874595][ T8637] loop4: detected capacity change from 0 to 64
[  199.921537][ T8637] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  200.049353][ T5786] syz-executor: attempt to access beyond end of device
[  200.049353][ T5786] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  200.094206][ T8643] loop2: detected capacity change from 0 to 512
[  200.101041][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  200.113984][ T8643] EXT4-fs: Ignoring removed bh option
[  200.199026][ T8643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.226035][ T8643] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  200.362582][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.631649][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'.
[  201.038656][ T8662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.918'.
[  201.133449][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.919'.
[  201.157876][ T8664] netlink: 58 bytes leftover after parsing attributes in process `syz.0.919'.
[  201.202768][ T8640] loop1: detected capacity change from 0 to 40427
[  201.223046][ T8640] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  201.256770][ T8640] F2FS-fs (loop1): Image doesn't support compression
[  201.294282][ T8640] F2FS-fs (loop1): Image doesn't support compression
[  201.331632][ T8640] F2FS-fs (loop1): invalid crc value
[  201.359961][ T8640] F2FS-fs (loop1): Found nat_bits in checkpoint
[  201.472787][ T8640] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  201.642366][ T8640] F2FS-fs (loop1): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910
[  201.681401][ T5799] Bluetooth: hci1: command 0x0406 tx timeout
[  201.687885][ T5792] Bluetooth: hci0: command 0x0406 tx timeout
[  201.696570][ T5792] Bluetooth: hci2: command 0x0406 tx timeout
[  201.800398][ T8658] loop2: detected capacity change from 0 to 32768
[  201.809204][ T5785] syz-executor: attempt to access beyond end of device
[  201.809204][ T5785] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  201.872723][ T8658] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  201.881738][ T5785] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  201.881812][ T5785] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  202.133101][ T5788] ocfs2: Unmounting device (7,2) on (node local)
[  203.016608][ T8679] loop4: detected capacity change from 0 to 32768
[  203.075207][ T8679] 
[  203.075207][ T8679]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.075207][ T8679] 
[  203.149265][ T8679] non-latin1 character 0x3ff found in JFS file name
[  203.155940][ T8679] mount with iocharset=utf8 to access
[  203.222118][ T6170] 
[  203.222118][ T6170]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.222118][ T6170] 
[  203.241759][ T6170] 
[  203.241759][ T6170]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.241759][ T6170] 
[  203.249730][ T8697] loop0: detected capacity change from 0 to 1024
[  203.273760][ T8683] loop2: detected capacity change from 0 to 40427
[  203.363389][ T8683] F2FS-fs (loop2): Found nat_bits in checkpoint
[  203.597322][ T8683] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  203.857882][ T5788] syz-executor: attempt to access beyond end of device
[  203.857882][ T5788] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.914771][ T5788] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  203.942744][ T8711] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  204.346585][ T8719] net_ratelimit: 57 callbacks suppressed
[  204.346602][ T8719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  204.371129][ T8715] loop4: detected capacity change from 0 to 4096
[  204.398360][ T8715] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  204.494024][ T8715] ntfs: volume version 3.1.
[  204.754118][   T59] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  205.281941][ T8728] loop2: detected capacity change from 0 to 8192
[  205.323308][ T8733] program syz.1.948 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  205.358487][ T8728] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  205.415259][ T8728] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  205.477405][ T8728] REISERFS (device loop2): using ordered data mode
[  205.487606][ T8728] reiserfs: using flush barriers
[  205.502387][ T8728] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  205.587634][ T8728] REISERFS (device loop2): checking transaction log (loop2)
[  205.788388][ T8740] loop0: detected capacity change from 0 to 1024
[  205.826754][ T8740] EXT4-fs: Ignoring removed orlov option
[  205.952961][ T8740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.980855][ T8728] REISERFS (device loop2): Using tea hash to sort names
[  206.017415][ T8728] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  206.133560][ T8740] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4031: comm syz.0.950: Allocating blocks 481-513 which overlap fs metadata
[  206.153978][   T28] audit: type=1800 audit(1762962752.370:31): pid=8728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.940" name="file1" dev="loop2" ino=4 res=0 errno=0
[  206.174153][    C1] vkms_vblank_simulate: vblank timer overrun
[  206.294558][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.656080][ T8755] vivid-000: disconnect
[  206.661368][ T8751] vivid-000: reconnect
[  206.711128][ T8750] loop0: detected capacity change from 0 to 8192
[  206.757111][ T8750] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  206.817140][ T8750] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  206.826477][ T8750] REISERFS (device loop0): using ordered data mode
[  206.836630][ T8758] loop1: detected capacity change from 0 to 16
[  206.845183][ T8758] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  206.853965][ T8750] reiserfs: using flush barriers
[  206.870799][ T8750] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  206.892853][ T8750] REISERFS (device loop0): checking transaction log (loop0)
[  207.105289][ T8750] REISERFS (device loop0): Using tea hash to sort names
[  207.127472][ T8750] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  207.201632][ T8736] loop4: detected capacity change from 0 to 40427
[  207.250459][   T28] audit: type=1800 audit(1762962753.490:32): pid=8750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.963" name="file1" dev="loop0" ino=4 res=0 errno=0
[  207.308365][ T8736] F2FS-fs (loop4): Found nat_bits in checkpoint
[  207.467214][ T8736] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  207.704642][ T6170] syz-executor: attempt to access beyond end of device
[  207.704642][ T6170] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  207.747082][ T6170] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  207.902700][ T8760] loop2: detected capacity change from 0 to 32768
[  207.938407][ T8760] (syz.2.966,8760,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  207.975744][ T8760] (syz.2.966,8760,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  208.057314][ T8760] JBD2: Ignoring recovery information on journal
[  208.111834][ T8767] loop1: detected capacity change from 0 to 32768
[  208.126786][ T8767] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.959 (8767)
[  208.143885][ T8767] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  208.154581][ T8767] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  208.163554][ T8767] BTRFS info (device loop1): setting nodatacow, compression disabled
[  208.171993][ T8767] BTRFS info (device loop1): force clearing of disk cache
[  208.179493][ T8767] BTRFS info (device loop1): enabling ssd optimizations
[  208.188437][ T8767] BTRFS info (device loop1): using spread ssd allocation scheme
[  208.196162][ T8767] BTRFS info (device loop1): turning off barriers
[  208.203162][ T8767] BTRFS info (device loop1): disabling free space tree
[  208.210376][ T8767] BTRFS info (device loop1): not using ssd optimizations
[  208.219087][ T8767] BTRFS info (device loop1): not using spread ssd allocation scheme
[  208.282116][ T8760] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  208.397256][ T8767] BTRFS info (device loop1): rebuilding free space tree
[  208.445197][ T8767] BTRFS info (device loop1): disabling free space tree
[  208.462459][ T8767] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  208.498771][ T8767] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  208.681732][ T5788] ocfs2: Unmounting device (7,2) on (node local)
[  208.691196][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'.
[  208.735850][ T8792] netlink: 'syz.0.972': attribute type 18 has an invalid length.
[  208.765024][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'.
[  208.873344][ T5785] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  209.333210][ T8806] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.969'.
[  209.365312][ T8806] netlink: zone id is out of range
[  209.417120][ T8806] netlink: zone id is out of range
[  209.437635][ T8806] netlink: zone id is out of range
[  209.458555][ T8806] netlink: zone id is out of range
[  209.464308][ T8806] netlink: zone id is out of range
[  209.483618][ T8806] netlink: zone id is out of range
[  209.507057][ T8806] netlink: zone id is out of range
[  209.517964][ T8806] netlink: zone id is out of range
[  209.537484][ T8810] netlink: 'syz.2.970': attribute type 1 has an invalid length.
[  209.557388][ T8806] netlink: zone id is out of range
[  209.562576][ T8806] netlink: zone id is out of range
[  209.781226][ T8816] netlink: 'syz.2.974': attribute type 9 has an invalid length.
[  209.807380][ T8816] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.974'.
[  210.037997][ T8825] loop2: detected capacity change from 0 to 8
[  210.089184][ T8825] SQUASHFS error: zlib decompression failed, data probably corrupt
[  210.104432][ T8825] SQUASHFS error: Failed to read block 0x13e: -5
[  210.121049][ T8825] SQUASHFS error: Unable to read metadata cache entry [13c]
[  210.129475][ T8825] SQUASHFS error: Unable to read directory block [13c:26]
[  210.640360][ T8843] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.985'.
[  211.022836][ T8852] loop4: detected capacity change from 0 to 1024
[  211.050789][ T8852] EXT4-fs: Ignoring removed orlov option
[  211.148154][ T8852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.388299][ T6170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.350798][ T8867] loop1: detected capacity change from 0 to 32768
[  212.381741][ T8867] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  212.472759][ T8867] XFS (loop1): Ending clean mount
[  212.558184][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  212.579160][ T8884] loop2: detected capacity change from 0 to 1024
[  214.021971][ T8915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1010'.
[  214.274705][ T8923] loop4: detected capacity change from 0 to 4096
[  214.344870][ T8923] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  214.381914][ T8929] loop2: detected capacity change from 0 to 256
[  214.478858][ T8929] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  214.599484][ T8929] exFAT-fs (loop2): hint_cluster is invalid (1), rewind to the first cluster
[  214.625812][ T8929] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000)
[  214.660093][ T8929] exFAT-fs (loop2): Filesystem has been set read-only
[  214.677100][ T8929] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805cc72860 iblock : 9, err : -5)
[  214.700954][ T8929] syz.2.1019: attempt to access beyond end of device
[  214.700954][ T8929] loop2: rw=2049, sector=34359738488, nr_sectors = 8 limit=256
[  215.306778][ T8949] loop1: detected capacity change from 0 to 4096
[  215.328451][ T8949] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  215.359150][ T8955] netem: change failed
[  215.392559][ T8949] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  215.427096][ T8949] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  215.450132][ T8949] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  215.465395][ T8949] ntfs: volume version 3.1.
[  215.549054][ T8960] loop0: detected capacity change from 0 to 1024
[  215.558681][ T8949] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  215.649402][ T8960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.711118][ T6424] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  215.766594][ T5785] ntfs: (device loop1): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  215.829849][ T8966] loop2: detected capacity change from 0 to 1024
[  215.983177][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.006047][ T8966] hfsplus: invalid xattr key length: 0
[  216.043501][ T8969] loop1: detected capacity change from 0 to 1024
[  216.154726][ T6424] hfsplus: b-tree write err: -5, ino 8
[  216.807668][ T8996] loop4: detected capacity change from 0 to 256
[  216.885240][ T8996] FAT-fs (loop4): Directory bread(block 64) failed
[  216.907189][ T8996] FAT-fs (loop4): Directory bread(block 65) failed
[  216.913894][ T8996] FAT-fs (loop4): Directory bread(block 66) failed
[  216.924368][ T8996] FAT-fs (loop4): Directory bread(block 67) failed
[  216.950107][ T8996] FAT-fs (loop4): Directory bread(block 68) failed
[  216.956686][ T8996] FAT-fs (loop4): Directory bread(block 69) failed
[  216.973552][ T8996] FAT-fs (loop4): Directory bread(block 70) failed
[  216.980524][ T8996] FAT-fs (loop4): Directory bread(block 71) failed
[  216.988077][ T8996] FAT-fs (loop4): Directory bread(block 72) failed
[  216.994642][ T8996] FAT-fs (loop4): Directory bread(block 73) failed
[  217.002028][ T9000] loop2: detected capacity change from 0 to 512
[  217.027227][ T9000] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  217.165010][ T9000] EXT4-fs (loop2): 1 truncate cleaned up
[  217.178485][ T9000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.239742][ T9006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'.
[  217.273146][ T9006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'.
[  217.282313][   T28] audit: type=1800 audit(1762962763.510:33): pid=9000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1049" name="file1" dev="loop2" ino=15 res=0 errno=0
[  217.336790][ T9007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'.
[  217.368866][ T9008] EXT4-fs error (device loop2): __ext4_iget:5067: inode #12: block 2: comm syz.2.1049: invalid block
[  217.372839][ T9007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'.
[  217.394545][ T9008] EXT4-fs (loop2): Remounting filesystem read-only
[  217.395005][ T9007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'.
[  217.410389][ T9007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'.
[  217.546687][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.712652][ T9016] program syz.1.1056 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  219.058317][   T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  219.198173][ T9074] loop0: detected capacity change from 0 to 512
[  219.240311][ T9074] EXT4-fs (loop0): 1 truncate cleaned up
[  219.259528][   T23] usb 5-1: Using ep0 maxpacket: 8
[  219.275793][ T9074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.311291][   T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  219.344360][   T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  219.386175][   T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  219.420350][   T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  219.453291][ T9074] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1088: invalid indirect mapped block 234881024 (level 0)
[  219.483417][   T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  219.493143][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.585225][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.752110][   T23] usb 5-1: GET_CAPABILITIES returned 0
[  219.766849][   T23] usbtmc 5-1:16.0: can't read capabilities
[  219.965574][    T9] usb 5-1: USB disconnect, device number 5
[  220.069085][ T9079] loop2: detected capacity change from 0 to 32768
[  220.123420][ T9079] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  220.319106][ T9079] XFS (loop2): Ending clean mount
[  220.335776][ T9079] XFS (loop2): Quotacheck needed: Please wait.
[  220.396468][ T9079] XFS (loop2): Quotacheck: Done.
[  220.548776][ T5788] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  220.747621][ T9107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1092'.
[  220.756651][ T9107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1092'.
[  220.774747][ T9107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1092'.
[  220.817277][ T9107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1092'.
[  220.850264][ T9107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1092'.
[  220.877193][ T9107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1092'.
[  221.048241][ T9091] loop0: detected capacity change from 0 to 32768
[  221.188965][ T5851] kernel write not supported for file /ppp (pid: 5851 comm: kworker/1:4)
[  221.225429][ T9091] UFO tlock:0xffffc9000281a048
[  221.473959][ T9125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1101'.
[  221.501775][ T9125] sch_fq: defrate 0 ignored.
[  221.928711][ T9138] netlink: 'syz.2.1107': attribute type 2 has an invalid length.
[  222.107106][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1109'.
[  222.300144][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1110'.
[  222.309553][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1110'.
[  222.440876][ T9134] loop0: detected capacity change from 0 to 32768
[  222.514686][ T9134] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.523809][ T9146] loop1: detected capacity change from 0 to 8192
[  222.559737][ T1187] kernel write not supported for file /ppp (pid: 1187 comm: kworker/0:3)
[  222.569674][ T9146] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  222.622377][ T9146] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  222.677171][ T9146] REISERFS (device loop1): using ordered data mode
[  222.697038][ T9146] reiserfs: using flush barriers
[  222.717126][ T9146] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  222.718378][ T9134] XFS (loop0): Ending clean mount
[  222.778029][ T9146] REISERFS (device loop1): checking transaction log (loop1)
[  222.827115][ T9146] REISERFS (device loop1): Using r5 hash to sort names
[  222.827315][ T9134] XFS (loop0): Quotacheck needed: Please wait.
[  222.852829][ T9146] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  222.885219][ T9165] sch_fq: defrate 0 ignored.
[  222.977237][ T9134] XFS (loop0): Quotacheck: Done.
[  223.108897][ T9167] program syz.4.1114 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  223.240878][ T5786] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  223.790034][ T9163] loop2: detected capacity change from 0 to 32768
[  223.907888][ T9163] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  223.961677][ T9190] loop4: detected capacity change from 0 to 128
[  224.054686][   T28] audit: type=1800 audit(1762962770.290:34): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1122" name="file2" dev="loop4" ino=1048641 res=0 errno=0
[  224.105155][ T9190] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  224.118981][ T9163] XFS (loop2): Ending clean mount
[  224.127066][ T9190] FAT-fs (loop4): Filesystem has been set read-only
[  224.133709][ T9190] syz.4.1122: attempt to access beyond end of device
[  224.133709][ T9190] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  224.155811][ T9163] XFS (loop2): Quotacheck needed: Please wait.
[  224.165387][ T9190] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  224.174319][ T9190] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  224.183288][ T9190] syz.4.1122: attempt to access beyond end of device
[  224.183288][ T9190] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  224.206258][ T9191] syz.4.1122: attempt to access beyond end of device
[  224.206258][ T9191] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  224.227013][ T9191] syz.4.1122: attempt to access beyond end of device
[  224.227013][ T9191] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  224.265199][ T9190] syz.4.1122: attempt to access beyond end of device
[  224.265199][ T9190] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  224.291773][ T9163] XFS (loop2): Quotacheck: Done.
[  224.341878][ T9163] XFS (loop2): User initiated shutdown received.
[  224.348899][ T9163] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  224.357788][ T9190] syz.4.1122: attempt to access beyond end of device
[  224.357788][ T9190] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  224.362489][ T9163] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  224.404716][ T9190] syz.4.1122: attempt to access beyond end of device
[  224.404716][ T9190] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  224.433630][ T9190] syz.4.1122: attempt to access beyond end of device
[  224.433630][ T9190] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  224.452980][ T9190] syz.4.1122: attempt to access beyond end of device
[  224.452980][ T9190] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  224.473034][ T5788] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  224.490865][ T9190] syz.4.1122: attempt to access beyond end of device
[  224.490865][ T9190] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  225.141161][ T9199] sch_fq: defrate 0 ignored.
[  226.194069][ T9215] loop1: detected capacity change from 0 to 4096
[  226.221235][ T9215] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  226.303219][ T9210] loop2: detected capacity change from 0 to 32768
[  226.371578][ T9210] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  226.435108][   T28] audit: type=1800 audit(1762962772.670:35): pid=9215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1133" name="file1" dev="loop1" ino=33 res=0 errno=0
[  226.517228][   T28] audit: type=1800 audit(1762962772.740:36): pid=9215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1133" name="file3" dev="loop1" ino=31 res=0 errno=0
[  226.646510][ T9210] XFS (loop2): Ending clean mount
[  226.863578][ T5788] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  227.164980][ T9211] loop4: detected capacity change from 0 to 32768
[  227.371744][ T9211] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  227.411345][ T9242] loop2: detected capacity change from 0 to 128
[  227.494534][   T28] audit: type=1800 audit(1762962773.730:37): pid=9242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1137" name="file2" dev="loop2" ino=1048642 res=0 errno=0
[  227.534358][ T9242] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  227.582002][ T9242] FAT-fs (loop2): Filesystem has been set read-only
[  227.632580][ T9242] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  227.647135][ T9242] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  227.690779][    T9] hid-generic 0005:15C2:5508.0003: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa
[  227.815627][ T9231] loop0: detected capacity change from 0 to 32768
[  227.942294][ T9231] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  227.948137][ T9211] XFS (loop4): Ending clean mount
[  228.000598][ T9211] XFS (loop4): Quotacheck needed: Please wait.
[  228.103533][ T9211] XFS (loop4): Quotacheck: Done.
[  228.303005][ T9231] XFS (loop0): Ending clean mount
[  228.502658][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  228.644464][ T6170] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  228.781325][ T9268] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  228.969559][ T5851] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  229.192979][ T5851] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  229.201868][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.246583][ T5851] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  229.262359][ T9270] loop1: detected capacity change from 0 to 4096
[  229.278098][ T5851] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  229.286156][ T5851] usb 3-1: Manufacturer: syz
[  229.319237][ T5851] usb 3-1: config 0 descriptor??
[  229.471552][ T9270] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  229.527162][ T5851] rc_core: IR keymap rc-hauppauge not found
[  229.541892][ T5851] Registered IR keymap rc-empty
[  229.544589][ T9270] ntfs3: loop1: ino=1b, "file0" directory corrupted
[  229.572752][ T5851] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  229.608802][ T5851] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12
[  229.782047][ T5785] ntfs3: loop1: ino=9, ntfs_sync_fs failed, -22.
[  230.495004][ T5173] usb 3-1: USB disconnect, device number 7
[  230.942719][ T9293] syz.4.1151 uses obsolete (PF_INET,SOCK_PACKET)
[  231.214744][ T9292] loop1: detected capacity change from 0 to 4096
[  231.307276][ T5173] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  231.519326][ T5173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.543381][ T5173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.572472][ T5173] usb 1-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.00
[  231.604721][ T5173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.633519][ T5173] usb 1-1: config 0 descriptor??
[  232.094542][ T5173] wacom 0003:056A:010F.0004: hidraw1: USB HID v0.00 Device [HID 056a:010f] on usb-dummy_hcd.0-1/input0
[  232.113401][ T9299] loop2: detected capacity change from 0 to 32768
[  232.925315][ T9308] loop1: detected capacity change from 0 to 8192
[  232.950553][ T9308] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  233.110907][ T9308] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  233.139106][ T9308] REISERFS (device loop1): using ordered data mode
[  233.156058][ T9308] reiserfs: using flush barriers
[  233.201294][ T9308] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  233.239322][  T786] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  233.272057][ T9308] REISERFS (device loop1): checking transaction log (loop1)
[  233.437122][  T786] usb 5-1: Using ep0 maxpacket: 8
[  233.477641][  T786] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  233.507301][  T786] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  233.527105][  T786] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  233.551137][  T786] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  233.566642][  T786] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  233.583544][  T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.636072][ T9322] loop2: detected capacity change from 0 to 64
[  233.663734][ T9308] REISERFS (device loop1): Using tea hash to sort names
[  233.702785][ T9308] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  233.837463][  T786] usb 5-1: GET_CAPABILITIES returned 0
[  233.843035][  T786] usbtmc 5-1:16.0: can't read capabilities
[  234.075849][  T786] usb 5-1: USB disconnect, device number 6
[  234.095551][   T23] usb 1-1: USB disconnect, device number 4
[  235.021101][ T9337] loop2: detected capacity change from 0 to 256
[  235.046062][ T9326] loop0: detected capacity change from 0 to 32768
[  235.065954][ T9337] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb45ad1ca, utbl_chksum : 0xe619d30d)
[  235.338463][ T9342] No such timeout policy "syz0"
[  235.906790][ T9349] loop2: detected capacity change from 0 to 8192
[  235.947111][ T9349] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  236.008998][ T9349] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  236.057911][ T9349] REISERFS (device loop2): using ordered data mode
[  236.080494][ T9349] reiserfs: using flush barriers
[  236.108553][ T9349] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  236.136619][ T9349] REISERFS (device loop2): checking transaction log (loop2)
[  236.295935][ T9331] loop1: detected capacity change from 0 to 32768
[  236.383466][ T9331] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  236.435624][ T9349] REISERFS (device loop2): Using tea hash to sort names
[  236.457530][ T9349] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  236.485880][ T9331] XFS (loop1): Ending clean mount
[  237.051793][ T5785] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  237.259545][ T9382] net_ratelimit: 122 callbacks suppressed
[  237.259563][ T9382] dccp_invalid_packet: pskb_may_pull failed
[  237.797664][ T5873] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  237.960741][ T9391] loop2: detected capacity change from 0 to 4096
[  237.987026][ T5873] usb 1-1: Using ep0 maxpacket: 8
[  238.010480][ T5873] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  238.035562][ T5873] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  238.052160][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.073059][   T11] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting
[  238.074102][ T5873] usb 1-1: config 0 descriptor??
[  238.127484][ T9391] ntfs3: loop2: ino=3, ntfs_set_state failed, -22.
[  238.134071][ T9391] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  238.163610][ T5873] gspca_main: vc032x-2.14.0 probing 046d:0892
[  238.170057][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.215351][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.277048][   T28] audit: type=1800 audit(1762962784.510:38): pid=9391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1192" name="file1" dev="loop2" ino=30 res=0 errno=0
[  238.318272][ T9391] ntfs3: loop2: ino=1e, "file1" attr_set_size
[  238.345943][ T9395] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  238.421207][   T35] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22.
[  238.467949][ T5788] ntfs3: loop2: ino=3, ntfs_set_state failed, -22.
[  238.496991][ T5788] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  238.504047][ T5788] ntfs3: loop2: ino=3, ntfs_set_state failed, -22.
[  238.524699][   T12] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22.
[  238.552072][ T9389] loop4: detected capacity change from 0 to 32768
[  238.588901][ T9397] __nla_validate_parse: 6 callbacks suppressed
[  238.588949][ T9397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1195'.
[  238.633187][ T9389] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  238.821061][ T9389] XFS (loop4): Ending clean mount
[  238.899615][ T9389] XFS (loop4): Quotacheck needed: Please wait.
[  239.004385][ T9389] XFS (loop4): Quotacheck: Done.
[  239.011660][ T5873] gspca_vc032x: reg_w err -71
[  239.023854][ T5873] vc032x: probe of 1-1:0.0 failed with error -71
[  239.068073][ T5873] usb 1-1: USB disconnect, device number 5
[  239.165028][ T9415] dccp_invalid_packet: pskb_may_pull failed
[  239.205084][ T9389] XFS (loop4): User initiated shutdown received.
[  239.223170][ T9389] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  239.286008][ T9389] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  239.384507][ T6170] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  239.501796][ T9422] loop2: detected capacity change from 0 to 4096
[  240.325308][ T9443] loop0: detected capacity change from 0 to 64
[  240.899070][ T9452] loop4: detected capacity change from 0 to 64
[  240.906845][ T9452] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  240.928509][ T9454] No such timeout policy "syz0"
[  241.800453][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'.
[  241.881202][ T9479] program syz.1.1227 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  242.389097][ T9494] loop2: detected capacity change from 0 to 4096
[  242.462092][ T9494] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  242.484211][ T9494] ntfs3: loop2: Failed to load $Extend (-22).
[  242.497144][ T9494] ntfs3: loop2: Failed to initialize $Extend.
[  242.604610][ T9494] ntfs3: loop2: ino=1e, attr_set_size
[  242.869631][ T9508] loop4: detected capacity change from 0 to 2048
[  242.944470][ T9508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  242.960342][ T9514] erspan0: entered promiscuous mode
[  243.736998][   T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  243.859655][ T9523] loop1: detected capacity change from 0 to 32768
[  243.892222][ T9523] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  243.941374][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.953511][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.963410][   T23] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  243.973362][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.985453][   T23] usb 3-1: config 0 descriptor??
[  244.071336][ T9523] XFS (loop1): Ending clean mount
[  244.231488][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  244.240973][ T9547] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1254'.
[  244.421604][   T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  244.472673][   T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  244.507028][   T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  244.517844][   T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  244.545318][   T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  244.567168][   T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  244.574211][   T23] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  244.617716][   T23] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  244.728047][   T23] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00
[  244.954270][   T23] cp2112 0003:10C4:EA90.0005: error requesting SMBus config
[  244.986347][   T23] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71
[  245.017909][   T23] usb 3-1: USB disconnect, device number 8
[  245.367628][ T5800] Bluetooth: hci3: command tx timeout
[  245.692724][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'.
[  246.089085][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'.
[  246.284905][ T9607] loop2: detected capacity change from 0 to 1024
[  246.413215][   T28] audit: type=1800 audit(1762962792.650:39): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1277" name="file1" dev="loop2" ino=20 res=0 errno=0
[  246.664526][ T9615] loop1: detected capacity change from 0 to 2048
[  246.762834][ T9615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.797896][ T9622] misc userio: No port type given on /dev/userio
[  246.857118][ T9615] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  247.220885][ T9597] loop0: detected capacity change from 0 to 40427
[  247.244779][ T9597] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  247.265475][ T9597] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  247.322034][ T9597] F2FS-fs (loop0): invalid crc value
[  247.366613][ T9597] F2FS-fs (loop0): Found nat_bits in checkpoint
[  247.588329][ T9597] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  247.615507][ T9597] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  247.688875][   T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm kworker/u4:1: bg 0: block 345: padding at end of block bitmap is not set
[  247.699338][ T9644] loop2: detected capacity change from 0 to 256
[  247.747078][   T12] EXT4-fs (loop1): Remounting filesystem read-only
[  247.805672][   T49] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4868: inode #15: block 3: len 13: ext4_ext_map_blocks returned -5
[  247.845764][ T9644] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  248.014534][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.511782][ T9656] loop0: detected capacity change from 0 to 1024
[  248.512710][ T9658] loop2: detected capacity change from 0 to 64
[  248.570737][ T9656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.696338][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.020764][ T9646] loop4: detected capacity change from 0 to 40427
[  249.051138][ T9646] F2FS-fs (loop4): invalid crc value
[  249.065443][ T9646] F2FS-fs (loop4): Found nat_bits in checkpoint
[  249.222829][ T9646] F2FS-fs (loop4): Start checkpoint disabled!
[  249.235659][ T9646] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  249.686766][   T49] bio_check_eod: 4737 callbacks suppressed
[  249.686782][   T49] kworker/u4:3: attempt to access beyond end of device
[  249.686782][   T49] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  249.727075][   T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  249.737282][   T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  249.740444][ T9680] loop1: detected capacity change from 0 to 2048
[  249.802050][ T9668] loop2: detected capacity change from 0 to 32768
[  249.803753][ T9680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  249.848816][ T9668] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  250.149362][ T9668] XFS (loop2): Ending clean mount
[  250.374577][ T5788] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  250.813204][ T9688] loop0: detected capacity change from 0 to 32768
[  250.898341][ T9688] ERROR: (device loop0): dbAllocBits: leaf page corrupt
[  250.898341][ T9688] 
[  250.915960][ T9688] ERROR: (device loop0): remounting filesystem as read-only
[  250.970264][ T9703] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  251.127429][ T5873] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  251.317113][ T5873] usb 5-1: Using ep0 maxpacket: 16
[  251.331315][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.342516][ T5873] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  251.358060][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.374896][ T5873] usb 5-1: config 0 descriptor??
[  251.469552][  T786] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  251.652177][ T9709] loop1: detected capacity change from 0 to 32768
[  251.666346][ T9709] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.1315 (9709)
[  251.687300][  T786] usb 3-1: Using ep0 maxpacket: 16
[  251.740463][  T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.755481][ T9709] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  251.766490][  T786] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  251.796842][ T9709] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  251.819323][  T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.827456][ T9709] BTRFS info (device loop1): using free space tree
[  251.874873][  T786] usb 3-1: config 0 descriptor??
[  251.881585][ T5873] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  251.987668][ T9709] BTRFS info (device loop1): enabling ssd optimizations
[  251.994721][ T9709] BTRFS info (device loop1): auto enabling async discard
[  252.291758][ T5785] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  252.353483][ T5873] usb 5-1: USB disconnect, device number 7
[  252.394378][  T786] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  252.759976][ T5873] usb 3-1: USB disconnect, device number 9
[  252.807341][ T5173] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  252.845501][ T9713] loop0: detected capacity change from 0 to 32768
[  252.864611][ T9713] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1316 (9713)
[  252.892923][ T9713] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  252.907899][ T9713] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  252.916763][ T9713] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  252.931177][ T9713] BTRFS info (device loop0): force zstd compression, level 3
[  252.942063][ T9713] BTRFS info (device loop0): turning on sync discard
[  252.953817][ T9713] BTRFS info (device loop0): force clearing of disk cache
[  252.964649][ T9713] BTRFS info (device loop0): enabling disk space caching
[  252.977688][ T9713] BTRFS info (device loop0): turning off discard
[  252.984627][ T9713] BTRFS info (device loop0): disk space caching is enabled
[  253.049025][ T5173] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  253.067090][ T9713] BTRFS info (device loop0): enabling ssd optimizations
[  253.075054][ T5173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.083333][ T9713] BTRFS info (device loop0): rebuilding free space tree
[  253.111150][ T5173] usb 2-1: Product: syz
[  253.117425][ T5173] usb 2-1: Manufacturer: syz
[  253.127044][ T5173] usb 2-1: SerialNumber: syz
[  253.129547][ T9713] BTRFS info (device loop0): disabling free space tree
[  253.144789][ T5173] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  253.149616][ T9713] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  253.179272][ T9713] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  253.215203][   T23] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  253.462146][ T9731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.498305][ T9731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.521360][ T5786] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  253.756053][  T786] usb 2-1: USB disconnect, device number 6
[  254.004249][ T9761] loop4: detected capacity change from 0 to 128
[  254.048531][ T9761] EXT4-fs: Ignoring removed nobh option
[  254.112892][ T9761] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  254.153822][ T9761] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.177375][ T9765] loop2: detected capacity change from 0 to 256
[  254.218178][ T9765] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  254.274074][ T9761] fscrypt (loop4, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop4' because it doesn't have stable inode numbers
[  254.376702][ T6170] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  254.557853][   T23] usb 2-1: Service connection timeout for: 256
[  254.564117][   T23] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  254.618303][   T23] ath9k_htc: Failed to initialize the device
[  254.631315][  T786] usb 2-1: ath9k_htc: USB layer deinitialized
[  254.726173][ T9771] loop0: detected capacity change from 0 to 2048
[  254.802143][ T9771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  255.067921][ T9777] netlink: 'syz.2.1331': attribute type 25 has an invalid length.
[  255.088426][ T9777] netlink: 'syz.2.1331': attribute type 7 has an invalid length.
[  255.116929][ T9777] netlink: 'syz.2.1331': attribute type 1 has an invalid length.
[  255.146139][ T9777] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1331'.
[  255.165688][ T9777] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.346971][   T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  255.438437][ T9767] loop1: detected capacity change from 0 to 40427
[  255.465997][ T9767] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  255.480002][ T9783] capability: warning: `syz.2.1334' uses 32-bit capabilities (legacy support in use)
[  255.492007][ T9767] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  255.517007][ T9767] F2FS-fs (loop1): invalid crc value
[  255.541141][   T23] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  255.559337][   T23] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  255.570173][ T9767] F2FS-fs (loop1): Found nat_bits in checkpoint
[  255.588742][   T23] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  255.624091][   T23] usb 1-1: config 220 has no interface number 2
[  255.640845][   T23] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  255.684607][   T23] usb 1-1: config 220 interface 0 has no altsetting 0
[  255.717157][   T23] usb 1-1: config 220 interface 76 has no altsetting 0
[  255.724093][   T23] usb 1-1: config 220 interface 1 has no altsetting 0
[  255.755427][ T9767] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  255.764446][   T23] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  255.774494][ T9770] loop4: detected capacity change from 0 to 40427
[  255.781084][ T9767] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  255.788772][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.796802][   T23] usb 1-1: Product: syz
[  255.810694][ T9770] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[  255.820683][   T23] usb 1-1: Manufacturer: syz
[  255.825323][   T23] usb 1-1: SerialNumber: syz
[  255.832798][ T9770] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  255.860940][ T9770] F2FS-fs (loop4): invalid crc value
[  255.879364][ T9770] F2FS-fs (loop4): Found nat_bits in checkpoint
[  255.912047][ T9767] syz.1.1326: attempt to access beyond end of device
[  255.912047][ T9767] loop1: rw=2051, sector=65536, nr_sectors = 65536 limit=40427
[  255.935236][ T9767] F2FS-fs (loop1): Issue discard(8192, 8192, 8192) failed, ret: -5
[  255.936930][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  255.957031][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  256.067855][ T9770] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  256.074974][ T9770] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  256.100519][   T23] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  256.115150][   T23] usb 1-1: No valid video chain found.
[  256.147267][   T23] usb 1-1: selecting invalid altsetting 0
[  256.198956][   T23] usb 1-1: selecting invalid altsetting 0
[  256.217509][   T23] usbtest: probe of 1-1:220.1 failed with error -22
[  256.245127][   T23] usb 1-1: USB disconnect, device number 6
[  256.340545][ T6170] syz-executor: attempt to access beyond end of device
[  256.340545][ T6170] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  256.356983][ T6170] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  256.527267][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  256.729371][    T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  256.754129][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.786967][    T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  256.795977][    T9] usb 3-1: config 1 has no interface number 1
[  256.818694][ T9803] loop1: detected capacity change from 0 to 128
[  256.827199][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  256.845109][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  256.855865][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.864393][    T9] usb 3-1: Product: syz
[  256.869118][    T9] usb 3-1: Manufacturer: syz
[  256.873761][    T9] usb 3-1: SerialNumber: syz
[  256.914077][ T9803] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  256.966227][ T9803] ext4 filesystem being mounted at /364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  257.107243][    T9] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  257.129696][    T9] usb 3-1: MIDIStreaming interface descriptor not found
[  257.216422][    T9] usb 3-1: USB disconnect, device number 10
[  257.315066][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  257.351967][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  257.599319][ T9815] loop0: detected capacity change from 0 to 4096
[  257.968315][ T9809] loop4: detected capacity change from 0 to 32768
[  258.080842][ T9826] loop2: detected capacity change from 0 to 64
[  258.119628][ T9809] UFO tlock:0xffffc9000281a120
[  258.152168][ T9809] MetaData crosses page boundary!!
[  258.187221][ T9809] lblock = 6300000010, size  = -820051968
[  258.202354][ T9809] CPU: 1 PID: 9809 Comm: syz.4.1338 Not tainted syzkaller #0
[  258.209795][ T9809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  258.219908][ T9809] Call Trace:
[  258.223228][ T9809]  <TASK>
[  258.226206][ T9809]  dump_stack_lvl+0x16c/0x230
[  258.230983][ T9809]  ? __wake_up_bit+0x1e0/0x1e0
[  258.235802][ T9809]  ? show_regs_print_info+0x20/0x20
[  258.241080][ T9809]  ? load_image+0x3b0/0x3b0
[  258.245644][ T9809]  ? folio_unlock+0x118/0x2e0
[  258.250385][ T9809]  __get_metapage+0xaac/0xfa0
[  258.255120][ T9809]  dtReadFirst+0xd5/0x920
[  258.259534][ T9809]  jfs_readdir+0x8d4/0x3a90
[  258.264197][ T9809]  ? aa_file_perm+0x120/0xec0
[  258.268944][ T9809]  ? dtInitRoot+0x670/0x670
[  258.273546][ T9809]  ? __up_read+0x280/0x670
[  258.278011][ T9809]  ? down_write+0x162/0x1f0
[  258.282571][ T9809]  ? down_read_killable+0x340/0x340
[  258.287822][ T9809]  ? end_current_label_crit_section+0x149/0x170
[  258.294118][ T9809]  ? dtInitRoot+0x670/0x670
[  258.298674][ T9809]  wrap_directory_iterator+0x92/0xd0
[  258.304018][ T9809]  iterate_dir+0x1c2/0x580
[  258.308505][ T9809]  __se_sys_getdents+0xe9/0x260
[  258.313415][ T9809]  ? __x64_sys_getdents+0x80/0x80
[  258.318496][ T9809]  ? fillonedir+0x430/0x430
[  258.323066][ T9809]  ? lockdep_hardirqs_on+0x98/0x150
[  258.328311][ T9809]  do_syscall_64+0x55/0xb0
[  258.332788][ T9809]  ? clear_bhb_loop+0x40/0x90
[  258.337509][ T9809]  ? clear_bhb_loop+0x40/0x90
[  258.342226][ T9809]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  258.348162][ T9809] RIP: 0033:0x7faa5c18f6c9
[  258.352627][ T9809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.372274][ T9809] RSP: 002b:00007faa5d060038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  258.380734][ T9809] RAX: ffffffffffffffda RBX: 00007faa5c3e5fa0 RCX: 00007faa5c18f6c9
[  258.388732][ T9809] RDX: 0000000000000030 RSI: 0000200000000000 RDI: 0000000000000004
[  258.396734][ T9809] RBP: 00007faa5c211f91 R08: 0000000000000000 R09: 0000000000000000
[  258.404723][ T9809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  258.412715][ T9809] R13: 00007faa5c3e6038 R14: 00007faa5c3e5fa0 R15: 00007fffc9c27748
[  258.420720][ T9809]  </TASK>
[  258.423842][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  258.507067][ T9809] bread failed!
[  258.510632][ T9809] jfs_readdir: unexpected rc = -5 from dtReadNext
[  258.619770][    T9] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  258.629104][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.653680][    T9] usb 2-1: config 0 descriptor??
[  258.676592][    T9] gspca_main: cpia1-2.14.0 probing 0813:0001
[  259.041212][ T9840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1355'.
[  259.062271][ T9838] loop4: detected capacity change from 0 to 4096
[  259.090124][    T9] cpia1 2-1:0.0: unexpected state after lo power cmd: 00
[  259.381671][ T9832] loop0: detected capacity change from 0 to 32768
[  259.429751][ T9832] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1351 (9832)
[  259.477296][ T9832] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  259.502973][    T9] gspca_cpia1: usb_control_msg 02, error -71
[  259.506670][ T9832] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  259.526788][ T9843] loop2: detected capacity change from 0 to 4096
[  259.542013][    T9] gspca_cpia1: usb_control_msg 05, error -71
[  259.554432][ T9832] BTRFS info (device loop0): using free space tree
[  259.554911][    T9] cpia1 2-1:0.0: unexpected systemstate: 00
[  259.585894][ T9843] EXT4-fs: Ignoring removed mblk_io_submit option
[  259.603158][ T9843] EXT4-fs (loop2): Test dummy encryption mode enabled
[  259.635874][    T9] usb 2-1: USB disconnect, device number 7
[  259.636627][ T9843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.717443][ T9832] BTRFS info (device loop0): enabling ssd optimizations
[  259.742957][ T9832] BTRFS info (device loop0): auto enabling async discard
[  259.785135][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.049523][ T5786] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  260.651265][ T9880] netlink: 'syz.0.1367': attribute type 2 has an invalid length.
[  260.675841][ T9880] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1367'.
[  261.302958][ T9886] loop4: detected capacity change from 0 to 32768
[  261.331410][ T9886] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.1366 (9886)
[  261.377092][ T5173] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  261.394601][ T9886] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  261.424782][ T9886] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  261.445718][ T9886] BTRFS info (device loop4): using free space tree
[  261.592354][ T9886] BTRFS info (device loop4): enabling ssd optimizations
[  261.615480][ T5173] usb 2-1: Using ep0 maxpacket: 32
[  261.636942][ T9886] BTRFS info (device loop4): auto enabling async discard
[  261.659523][ T5173] usb 2-1: config 0 interface 0 has no altsetting 0
[  261.675968][ T5173] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  261.707165][ T5173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.748094][ T5173] usb 2-1: config 0 descriptor??
[  261.979918][ T6170] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  262.192162][ T5173] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0
[  262.230757][ T5173] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0
[  262.261392][ T5173] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0
[  262.288995][ T5173] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0
[  262.317250][ T5173] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0
[  262.367595][ T5173] corsair-cpro 0003:1B1C:0C10.0008: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0
[  262.481616][ T5173] corsair-cpro: probe of 0003:1B1C:0C10.0008 failed with error -71
[  262.552024][ T5173] usb 2-1: USB disconnect, device number 8
[  262.664535][ T9925] fido_id[9925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  263.524318][ T9923] loop4: detected capacity change from 0 to 32768
[  264.110659][ T9943] loop0: detected capacity change from 0 to 2048
[  264.149439][ T9943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.181132][ T9943] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.390984][ T9950] loop4: detected capacity change from 0 to 1024
[  264.488912][ T9950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  264.586690][ T9950] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.707536][ T9950] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #15: comm syz.4.1389: lblock 0 mapped to illegal pblock 0 (length 1)
[  264.766531][ T9950] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  264.806133][ T9950] EXT4-fs (loop4): This should not happen!! Data will be lost
[  264.806133][ T9950] 
[  264.857124][ T9958] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #15: comm syz.4.1389: lblock 0 mapped to illegal pblock 0 (length 1)
[  264.912514][   T28] audit: type=1800 audit(1762962811.140:40): pid=9958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1389" name="file1" dev="loop4" ino=15 res=0 errno=0
[  265.013347][ T6170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  265.216348][ T1088] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm kworker/u4:5: bg 0: block 345: padding at end of block bitmap is not set
[  265.234487][ T1088] EXT4-fs (loop0): Remounting filesystem read-only
[  265.253264][   T59] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4868: inode #15: block 3: len 13: ext4_ext_map_blocks returned -5
[  265.456535][ T9970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1396'.
[  265.644168][ T9975] team0: entered promiscuous mode
[  265.658656][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.668447][ T9975] team_slave_0: entered promiscuous mode
[  265.674376][ T9975] team_slave_1: entered promiscuous mode
[  265.703146][ T9974] team0: left promiscuous mode
[  265.718830][ T9974] team_slave_0: left promiscuous mode
[  265.745320][ T9974] team_slave_1: left promiscuous mode
[  266.243497][ T9986] vivid-002: disconnect
[  266.261531][ T9985] vivid-002: reconnect
[  267.242584][T10003] loop0: detected capacity change from 0 to 128
[  267.366188][T10003] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  267.406224][T10003] ext4 filesystem being mounted at /363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  267.500194][T10006] overlayfs: conflicting options: metacopy=off,verity=on
[  267.684766][ T9995] loop1: detected capacity change from 0 to 40427
[  267.749067][ T9995] F2FS-fs (loop1): invalid crc value
[  267.785794][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  267.812694][ T9995] F2FS-fs (loop1): Found nat_bits in checkpoint
[  268.059268][ T9995] F2FS-fs (loop1): Start checkpoint disabled!
[  268.094206][ T9995] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  268.146110][T10016] loop2: detected capacity change from 0 to 512
[  268.160162][T10013] loop0: detected capacity change from 0 to 4096
[  268.187669][T10013] EXT4-fs: Ignoring removed mblk_io_submit option
[  268.203170][T10016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.242587][T10013] EXT4-fs (loop0): Test dummy encryption mode enabled
[  268.276311][T10016] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.299868][T10013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.409745][T10016] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  268.445958][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.505441][   T35] kworker/u4:2: attempt to access beyond end of device
[  268.505441][   T35] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  268.541985][   T35] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  268.550629][   T35] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  268.634800][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.841026][T10026] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1417'.
[  269.283181][T10033] loop0: detected capacity change from 0 to 512
[  269.389240][T10011] loop4: detected capacity change from 0 to 40427
[  269.404953][   T28] audit: type=1800 audit(1762963583.778:41): pid=10033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1422" name="file1" dev="loop0" ino=1048644 res=0 errno=0
[  269.431257][T10011] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[  269.477157][T10011] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  269.510834][T10011] F2FS-fs (loop4): invalid crc value
[  269.530413][T10011] F2FS-fs (loop4): Found nat_bits in checkpoint
[  269.615316][   T49] FAT-fs (loop0): error, invalid FAT chain (i_pos 2306, last_block 8)
[  269.646576][   T49] FAT-fs (loop0): Filesystem has been set read-only
[  269.666321][   T49] FAT-fs (loop0): error, corrupted file size (i_pos 2306, 2058)
[  269.683645][T10011] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  269.698911][T10011] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  269.881146][ T6170] syz-executor: attempt to access beyond end of device
[  269.881146][ T6170] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  269.942448][ T6170] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  269.948288][T10045] netlink: 'syz.0.1424': attribute type 20 has an invalid length.
[  270.284835][T10037] loop1: detected capacity change from 0 to 32768
[  270.362807][T10037] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  270.507268][T10062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1430'.
[  270.549209][T10037] XFS (loop1): Ending clean mount
[  270.596048][T10037] XFS (loop1): Quotacheck needed: Please wait.
[  270.717414][T10037] XFS (loop1): Quotacheck: Done.
[  270.935201][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  271.465566][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1434'.
[  271.574800][T10084] loop4: detected capacity change from 0 to 256
[  271.619059][T10084] FAT-fs (loop4): Directory bread(block 1285) failed
[  271.660363][T10084] FAT-fs (loop4): FAT read failed (blocknr 1281)
[  271.928891][T10090] loop1: detected capacity change from 0 to 4096
[  272.264203][T10098] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1447'.
[  272.332986][T10100] loop1: detected capacity change from 0 to 256
[  272.534636][T10100] FAT-fs (loop1): Directory bread(block 64) failed
[  272.541354][T10100] FAT-fs (loop1): Directory bread(block 65) failed
[  272.572916][T10100] FAT-fs (loop1): Directory bread(block 66) failed
[  272.579870][T10100] FAT-fs (loop1): Directory bread(block 67) failed
[  272.618509][T10100] FAT-fs (loop1): Directory bread(block 68) failed
[  272.625099][T10100] FAT-fs (loop1): Directory bread(block 69) failed
[  272.665630][T10100] FAT-fs (loop1): Directory bread(block 70) failed
[  272.672228][T10100] FAT-fs (loop1): Directory bread(block 71) failed
[  272.713221][T10100] FAT-fs (loop1): Directory bread(block 72) failed
[  272.719834][T10100] FAT-fs (loop1): Directory bread(block 73) failed
[  272.773554][ T5800] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  272.863428][T10086] loop2: detected capacity change from 0 to 40427
[  272.896813][T10108] loop0: detected capacity change from 0 to 64
[  272.920029][T10086] F2FS-fs (loop2): invalid crc value
[  272.975978][T10086] F2FS-fs (loop2): Found nat_bits in checkpoint
[  273.188328][T10086] F2FS-fs (loop2): Start checkpoint disabled!
[  273.237051][T10086] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  273.304486][T10096] loop4: detected capacity change from 0 to 32768
[  273.342220][T10096] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1446 (10096)
[  273.396207][T10096] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  273.427513][T10096] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  273.442707][T10096] BTRFS info (device loop4): setting nodatasum
[  273.456311][T10096] BTRFS info (device loop4): force zlib compression, level 3
[  273.480524][T10096] BTRFS info (device loop4): enabling ssd optimizations
[  273.491433][T10096] BTRFS info (device loop4): allowing degraded mounts
[  273.499986][T10096] BTRFS info (device loop4): using free space tree
[  273.709083][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1458'.
[  273.783771][   T59] kworker/u4:4: attempt to access beyond end of device
[  273.783771][   T59] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  273.808047][   T59] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  273.815712][   T59] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  273.930527][T10139] loop1: detected capacity change from 0 to 1024
[  273.948943][T10139] EXT4-fs: Ignoring removed orlov option
[  273.973358][T10139] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  273.983427][    T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  274.028403][T10139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.049428][ T6170] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  274.072015][T10139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.173895][    T8] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  274.203180][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  274.235524][    T8] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  274.256175][    T8] usb 1-1: config 1 has no interface number 1
[  274.283451][    T8] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  274.344364][    T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  274.370910][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.378985][    T8] usb 1-1: Product: syz
[  274.408967][    T8] usb 1-1: Manufacturer: syz
[  274.413633][    T8] usb 1-1: SerialNumber: syz
[  274.638095][T10146] loop1: detected capacity change from 0 to 512
[  274.703533][T10150] loop4: detected capacity change from 0 to 256
[  274.708892][    T8] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  274.757690][    T8] usb 1-1: MIDIStreaming interface descriptor not found
[  274.768251][T10146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.792860][T10150] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  274.857987][T10146] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.915583][    T8] usb 1-1: USB disconnect, device number 7
[  275.030721][ T9812] udevd[9812]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  275.147994][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.545339][T10162] loop1: detected capacity change from 0 to 256
[  275.871404][T10168] loop1: detected capacity change from 0 to 4096
[  275.876554][T10154] loop2: detected capacity change from 0 to 32768
[  275.934082][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  275.953505][T10154] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  275.974056][T10168] ntfs: volume version 3.1.
[  276.128952][    T9] usb 5-1: Using ep0 maxpacket: 8
[  276.145903][    T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  276.184160][    T9] usb 5-1: config 179 has no interface number 0
[  276.209185][    T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  276.246929][    T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  276.293119][    T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  276.330016][    T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  276.353273][T10154] XFS (loop2): Ending clean mount
[  276.370601][    T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  276.391007][    T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  276.404088][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.404953][T10154] XFS (loop2): Quotacheck needed: Please wait.
[  276.420695][T10166] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  276.558167][T10154] XFS (loop2): Quotacheck: Done.
[  276.592285][T10188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1474'.
[  276.800765][    T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input16
[  277.037926][ T5788] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.144960][    T8] usb 5-1: USB disconnect, device number 8
[  277.145021][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  277.159290][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  277.169931][    T8] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  277.183532][T10194] loop0: detected capacity change from 0 to 2048
[  277.306141][T10194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.324217][T10194] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.400115][   T28] audit: type=1800 audit(1762963592.177:42): pid=10194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1478" name="bus" dev="loop0" ino=18 res=0 errno=0
[  277.514554][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.811701][T10200] loop1: detected capacity change from 0 to 32768
[  277.835318][T10200] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1481 (10200)
[  277.911634][T10200] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  277.962002][T10200] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  277.986154][T10200] BTRFS info (device loop1): enabling auto defrag
[  278.029386][T10200] BTRFS info (device loop1): max_inline at 0
[  278.035471][T10200] BTRFS info (device loop1): force clearing of disk cache
[  278.050897][T10200] BTRFS info (device loop1): turning on sync discard
[  278.066394][T10200] BTRFS info (device loop1): using free space tree
[  278.345396][T10200] BTRFS info (device loop1): enabling ssd optimizations
[  278.368509][T10200] BTRFS info (device loop1): rebuilding free space tree
[  278.467091][T10232] tmpfs: Bad value for 'mpol'
[  278.755554][T10238] loop2: detected capacity change from 0 to 512
[  278.795366][T10238] EXT4-fs: Ignoring removed oldalloc option
[  278.847714][T10238] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1479: dx entry: limit 1024 != root limit 124
[  278.862206][T10238] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1479: Corrupt directory, running e2fsck is recommended
[  278.906356][T10238] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  278.919095][T10238] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.1479: corrupted in-inode xattr: invalid ea_ino
[  278.951401][T10238] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1479: couldn't read orphan inode 15 (err -117)
[  279.002043][T10238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.063438][T10238] EXT4-fs error (device loop2): ext4_xattr_set_entry:1682: inode #2: comm syz.2.1479: corrupted xattr entries
[  279.098325][ T5785] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  279.179534][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.607471][T10254] loop4: detected capacity change from 0 to 1024
[  279.975086][T10265] loop0: detected capacity change from 0 to 128
[  280.008761][T10265] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  280.063237][T10265] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  280.333804][   T11] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  280.933804][T10269] loop4: detected capacity change from 0 to 32768
[  280.977144][T10286] loop1: detected capacity change from 0 to 4096
[  280.988342][T10289] loop0: detected capacity change from 0 to 64
[  281.127710][   T28] audit: type=1800 audit(1762963596.094:43): pid=10289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1509" name="file1" dev="loop0" ino=21 res=0 errno=0
[  281.542953][T10291] loop0: detected capacity change from 0 to 256
[  281.640200][T10293] loop2: detected capacity change from 0 to 64
[  282.102340][T10297] loop4: detected capacity change from 0 to 4096
[  282.168786][T10305] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  282.406274][T10310] erspan0: entered promiscuous mode
[  283.046323][T10322] loop4: detected capacity change from 0 to 4096
[  283.380078][T10314] loop0: detected capacity change from 0 to 32768
[  283.475975][T10314] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  283.617286][T10314] XFS (loop0): Ending clean mount
[  283.840448][ T5786] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  284.124967][T10350] tmpfs: Bad value for 'size'
[  284.145442][T10351] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1534'.
[  284.160515][T10351] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1534'.
[  284.412460][T10359] loop0: detected capacity change from 0 to 512
[  284.427964][T10359] EXT4-fs: Ignoring removed bh option
[  284.462516][T10359] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  285.209701][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  285.406974][    T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  285.423797][    T9] usb 1-1: config 0 has no interface number 0
[  285.436168][T10385] loop2: detected capacity change from 0 to 2048
[  285.458765][    T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  285.463565][T10385] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18881, location=18881
[  285.476349][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.493780][T10361] loop1: detected capacity change from 0 to 40427
[  285.507806][    T9] usb 1-1: Product: syz
[  285.512039][    T9] usb 1-1: Manufacturer: syz
[  285.528582][    T9] usb 1-1: SerialNumber: syz
[  285.538139][T10361] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  285.565263][    T9] usb 1-1: config 0 descriptor??
[  285.581355][T10361] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  285.599542][   T28] audit: type=1800 audit(1762963600.776:44): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1549" name="bus" dev="loop2" ino=1367 res=0 errno=0
[  285.632339][T10361] F2FS-fs (loop1): invalid crc value
[  285.682441][T10361] F2FS-fs (loop1): Found nat_bits in checkpoint
[  285.808197][    T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  285.826683][    T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  285.867282][    T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  285.875386][    T9] usb 1-1: media controller created
[  285.920089][T10361] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  285.942870][T10361] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  285.994895][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  286.119950][    T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  286.187296][    T9] usb 1-1: USB disconnect, device number 8
[  286.399641][   T28] audit: type=1400 audit(1762963601.616:45): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A202020202030206B420A4C617A79467265653A202020202020202020202020202030206B420A416E6F6E4875676550616765733A20202020202020202030206B420A53686D656D506D644D61707065643A202020202020202030206B420A46696C65506D644D61707065643A20202020202020202030206B420A5368617265645F48756765746C623A202020202020202030206B420A50 pid=10401 comm="syz.4.1555"
[  286.818152][   T23] kernel write not supported for file /snd/seq (pid: 23 comm: kworker/1:0)
[  286.914593][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  286.999959][T10413] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  287.009876][T10413] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  287.018646][T10413] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  287.027538][T10413] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  287.142206][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  287.154973][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  287.181039][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  287.212014][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  287.242652][    T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  287.257244][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.280697][    T9] usb 3-1: Product: syz
[  287.284928][    T9] usb 3-1: Manufacturer: syz
[  287.287121][T10407] loop4: detected capacity change from 0 to 32768
[  287.295525][    T9] usb 3-1: SerialNumber: syz
[  287.320187][T10407] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1558 (10407)
[  287.341037][    T9] usb 3-1: config 0 descriptor??
[  287.401733][T10407] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  287.434523][T10407] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  287.470854][T10407] BTRFS info (device loop4): enabling ssd optimizations
[  287.492499][T10407] BTRFS info (device loop4): using spread ssd allocation scheme
[  287.512254][T10407] BTRFS info (device loop4): disabling free space tree
[  287.523821][T10407] BTRFS info (device loop4): max_inline at 0
[  287.529892][T10407] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  287.567621][T10407] BTRFS info (device loop4): use lzo compression, level 0
[  287.571542][    T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  287.583018][    T9] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  287.587398][T10407] BTRFS info (device loop4): turning off barriers
[  287.631921][T10407] BTRFS error (device loop4): support for check_integrity* not compiled in!
[  287.668921][T10407] BTRFS error (device loop4): cannot disable free space tree
[  287.704244][T10407] BTRFS error (device loop4): open_ctree failed: -22
[  287.781057][    T8] usb 1-1: Using ep0 maxpacket: 8
[  287.813339][   T23] usb 3-1: USB disconnect, device number 11
[  287.820002][    T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  287.838453][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.892320][    T8] pvrusb2: Hardware description: Terratec Grabster AV400
[  287.914785][    T8] pvrusb2: **********
[  287.918844][    T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  287.973945][    T8] pvrusb2: Important functionality might not be entirely working.
[  287.992960][    T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  288.027121][    T8] pvrusb2: **********
[  288.121690][ T2319] pvrusb2: Invalid write control endpoint
[  288.317647][ T2319] pvrusb2: Invalid write control endpoint
[  288.323859][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  288.353051][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  288.370887][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  288.390946][ T2319] pvrusb2: Device being rendered inoperable
[  288.405161][T10417] pvrusb2: Killing an I2C write to 0 that is too large (desired=8192 limit=61)
[  288.430566][    T8] usb 1-1: USB disconnect, device number 9
[  288.432474][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  288.463887][T10419] loop1: detected capacity change from 0 to 32768
[  288.470635][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  288.515192][ T2319] pvrusb2: Attached sub-driver cx25840
[  288.532498][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  288.563396][T10419] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  288.580986][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  288.767830][T10419] XFS (loop1): Ending clean mount
[  288.911069][T10440] loop4: detected capacity change from 0 to 16
[  288.954828][T10440] erofs: (device loop4): mounted with root inode @ nid 36.
[  289.025198][ T5785] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  289.439522][T10442] loop0: detected capacity change from 0 to 4096
[  289.551885][T10446] loop4: detected capacity change from 0 to 64
[  290.031475][T10436] loop2: detected capacity change from 0 to 40427
[  290.048076][T10436] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  290.088332][T10436] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  290.130391][T10436] F2FS-fs (loop2): invalid crc value
[  290.166601][T10436] F2FS-fs (loop2): Found nat_bits in checkpoint
[  290.334443][T10436] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  290.341650][T10436] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  290.799448][T10448] loop1: detected capacity change from 0 to 40427
[  290.845980][T10448] F2FS-fs (loop1): invalid crc value
[  290.911871][T10448] F2FS-fs (loop1): Found nat_bits in checkpoint
[  291.045039][T10467] loop0: detected capacity change from 0 to 128
[  291.096999][T10448] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  291.139150][T10467] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  291.166221][T10467] ext4 filesystem being mounted at /415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  291.393047][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  291.419340][ T5785] syz-executor: attempt to access beyond end of device
[  291.419340][ T5785] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  291.443394][ T5785] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  291.763140][T10482] tap0: tun_chr_ioctl cmd 1074025677
[  291.768707][T10482] tap0: linktype set to 805
[  292.961650][T10513] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1597'.
[  293.311385][T10492] loop0: detected capacity change from 0 to 40427
[  293.354809][T10492] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  293.381687][T10492] F2FS-fs (loop0): Image doesn't support compression
[  293.433112][T10492] F2FS-fs (loop0): invalid crc value
[  293.471035][T10492] F2FS-fs (loop0): Found nat_bits in checkpoint
[  293.691845][T10492] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  293.825983][T10492] syz.0.1588: attempt to access beyond end of device
[  293.825983][T10492] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  293.864422][T10492] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  293.885526][T10538] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1607'.
[  293.919487][T10539] block nbd0: server does not support multiple connections per device.
[  293.955681][T10539] block nbd0: shutting down sockets
[  294.434845][T10550] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1614'.
[  294.840309][T10556] loop2: detected capacity change from 0 to 8192
[  294.909703][T10556] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  294.933443][T10556] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  295.020049][T10556] REISERFS (device loop2): using ordered data mode
[  295.066846][T10556] reiserfs: using flush barriers
[  295.152918][T10556] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  295.211896][T10556] REISERFS (device loop2): checking transaction log (loop2)
[  295.246806][T10556] REISERFS (device loop2): Using r5 hash to sort names
[  295.278018][T10556] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  296.200060][T10567] loop0: detected capacity change from 0 to 32768
[  296.315183][T10567] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  296.504063][T10567] XFS (loop0): Ending clean mount
[  296.530835][T10567] XFS (loop0): Quotacheck needed: Please wait.
[  296.639429][T10608] loop2: detected capacity change from 0 to 2048
[  296.678021][T10567] XFS (loop0): Quotacheck: Done.
[  296.687022][T10608] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  296.715121][T10608] NILFS (loop2): mounting unchecked fs
[  296.766560][T10574] loop4: detected capacity change from 0 to 32768
[  296.792813][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  296.877482][T10608] NILFS (loop2): recovery complete
[  296.894538][T10574] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  296.918369][T10621] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  297.101257][T10574] XFS (loop4): Ending clean mount
[  297.118765][T10574] XFS (loop4): Quotacheck needed: Please wait.
[  297.257125][T10574] XFS (loop4): Quotacheck: Done.
[  297.396728][ T6170] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  297.677373][ T1187] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  297.867440][ T1187] usb 3-1: Using ep0 maxpacket: 16
[  297.879807][ T1187] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.905946][ T1187] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.928086][ T1187] usb 3-1: config 0 interface 0 has no altsetting 0
[  297.962970][ T1187] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  297.972097][ T1187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.044286][ T1187] usb 3-1: config 0 descriptor??
[  298.093354][T10642] Bluetooth: MGMT ver 1.22
[  298.371769][T10644] loop1: detected capacity change from 0 to 4096
[  298.410431][T10644] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  298.700557][    T9] usb 3-1: USB disconnect, device number 12
[  298.980531][T10662] loop4: detected capacity change from 0 to 512
[  299.027772][T10662] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  299.078811][T10662] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.1645: bg 0: block 104: invalid block bitmap
[  299.099724][T10662] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  299.130721][T10662] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1645: invalid indirect mapped block 1 (level 1)
[  299.154643][T10662] EXT4-fs (loop4): 1 truncate cleaned up
[  299.170044][T10662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.191613][ T1187] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  299.381558][ T6170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.382131][ T1187] usb 2-1: Using ep0 maxpacket: 8
[  299.408188][ T1187] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping
[  299.429914][ T1187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  299.462240][ T1187] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad
[  299.474729][ T1187] usb 2-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3
[  299.513538][ T1187] usb 2-1: Product: syz
[  299.519674][ T1187] usb 2-1: Manufacturer: syz
[  299.524340][ T1187] usb 2-1: SerialNumber: syz
[  299.583379][ T1187] usb 2-1: config 0 descriptor??
[  299.605304][   T28] audit: type=1326 audit(1762963615.475:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.4.1649" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa5c18f6c9 code=0x0
[  299.613555][ T1187] smsusb:smsusb_probe: board id=2, interface number 0
[  299.677867][ T1187] smsusb:smsusb_probe: Device initialized with return code -19
[  299.871671][ T1187] usb 2-1: USB disconnect, device number 9
[  300.307961][T10693] loop0: detected capacity change from 0 to 512
[  300.317863][T10693] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  300.332399][T10693] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  300.363861][T10693] EXT4-fs error (device loop0): __ext4_iget:5067: inode #15: block 1803188595: comm syz.0.1657: invalid block
[  300.410449][T10693] EXT4-fs (loop0): Remounting filesystem read-only
[  300.428671][T10693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.550180][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.820155][ T5873] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  301.001584][ T5873] usb 5-1: Using ep0 maxpacket: 32
[  301.033563][ T5873] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  301.048665][ T5873] usb 5-1: config 0 has no interface number 0
[  301.055246][ T5873] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  301.077168][ T5173] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  301.088500][ T5873] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  301.104425][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.126451][ T5873] usb 5-1: Product: syz
[  301.133324][ T5873] usb 5-1: Manufacturer: syz
[  301.138352][ T5873] usb 5-1: SerialNumber: syz
[  301.161871][ T5873] usb 5-1: config 0 descriptor??
[  301.173672][T10698] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  301.203486][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'.
[  301.280863][ T5173] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  301.308869][ T5173] usb 2-1: config 0 has no interface number 0
[  301.315988][ T5173] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  301.339574][ T5173] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  301.350345][ T5173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.358551][ T5173] usb 2-1: Product: syz
[  301.363018][ T5173] usb 2-1: Manufacturer: syz
[  301.367741][ T5173] usb 2-1: SerialNumber: syz
[  301.386034][T10698] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  301.394598][ T5173] usb 2-1: config 0 descriptor??
[  301.409091][ T5173] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[  302.008195][ T5873] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  302.033076][ T5873] asix: probe of 5-1:0.188 failed with error -71
[  302.048330][ T5873] usb 5-1: USB disconnect, device number 9
[  302.140093][T10724] loop2: detected capacity change from 0 to 32768
[  302.164303][T10724] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  302.265029][T10724] XFS (loop2): Ending clean mount
[  302.274709][T10724] XFS (loop2): Quotacheck needed: Please wait.
[  302.332814][T10724] XFS (loop2): Quotacheck: Done.
[  302.437792][ T5788] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  302.851353][T10741] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  303.090328][T10748] loop0: detected capacity change from 0 to 512
[  303.121620][T10748] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1677: inode has both inline data and extents flags
[  303.156840][T10748] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1677: couldn't read orphan inode 15 (err -117)
[  303.231966][T10748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.391385][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.647562][T10743] loop4: detected capacity change from 0 to 32768
[  303.715222][T10743] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  303.736381][T10743] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  303.761036][   T23] usb 2-1: USB disconnect, device number 10
[  303.804244][   T23] yurex 2-1:0.50: USB YUREX #0 now disconnected
[  303.973759][T10743] XFS (loop4): Ending clean mount
[  304.026230][T10743] XFS (loop4): Quotacheck needed: Please wait.
[  304.083229][  T786] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  304.129781][  T786] XFS (loop4): Unmount and run xfs_repair
[  304.140604][  T786] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  304.162881][  T786] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  304.188281][  T786] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  304.212747][  T786] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  304.241619][  T786] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  304.266059][  T786] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  304.299670][  T786] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  304.327702][  T786] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  304.344383][  T786] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  304.373468][   T59] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  304.418466][T10743] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  304.762640][  T786] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  304.781310][  T786] XFS (loop4): Unmount and run xfs_repair
[  304.801579][ T6170] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  304.810413][  T786] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  304.819018][  T786] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  304.828772][  T786] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  304.840188][  T786] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  304.855860][  T786] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  304.864974][  T786] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  304.874007][  T786] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  304.883447][  T786] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  304.893136][  T786] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  304.905447][  T786] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  304.920093][  T786] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  304.942113][  T786] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  304.957376][T10781] loop2: detected capacity change from 0 to 8
[  305.039104][T10784] program syz.1.1689 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  305.076395][T10765] loop0: detected capacity change from 0 to 32768
[  305.199564][T10765] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  305.357326][T10765] XFS (loop0): Ending clean mount
[  305.656023][ T5786] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  305.698250][T10798] syzkaller0: tun_chr_ioctl cmd 1074025680
[  306.056234][T10814] loop2: detected capacity change from 0 to 1024
[  306.153292][T10814] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  306.184207][T10814] hfsplus: xattr searching failed
[  306.197407][T10817] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  306.287506][ T1088] hfsplus: b-tree write err: -5, ino 4
[  306.625982][T10824] loop2: detected capacity change from 0 to 128
[  306.650369][T10824] EXT4-fs: Ignoring removed nobh option
[  306.736470][T10824] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  306.757565][T10812] loop4: detected capacity change from 0 to 32768
[  306.798536][T10824] ext4 filesystem being mounted at /413/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  306.887211][   T11] JFS: metapage_get_blocks failed
[  306.939901][T10812] JFS: metapage_get_blocks failed
[  306.945278][  T111] blkno = 50030, nblocks = 1
[  306.949934][  T111] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[  306.949934][  T111] 
[  306.972346][   T59] JFS: metapage_get_blocks failed
[  306.992705][  T111] ERROR: (device loop4): remounting filesystem as read-only
[  307.010435][  T111] blkno = 5002c, nblocks = 4
[  307.026439][  T111] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[  307.026439][  T111] 
[  307.077665][ T5788] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  307.421910][T10816] loop1: detected capacity change from 0 to 40427
[  307.441183][T10816] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  307.458958][T10816] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  307.467318][T10816] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  307.527835][T10816] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  307.568645][T10816] F2FS-fs (loop1): Image doesn't support compression
[  307.604514][ T6170] JFS: metapage_get_blocks failed
[  307.614907][T10816] F2FS-fs (loop1): invalid crc value
[  307.633123][ T6170] JFS: metapage_get_blocks failed
[  307.710277][T10816] F2FS-fs (loop1): Found nat_bits in checkpoint
[  307.810538][T10816] F2FS-fs (loop1): Start checkpoint disabled!
[  307.820069][T10816] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  307.832978][T10816] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  307.939400][T10816] syz.1.1699: attempt to access beyond end of device
[  307.939400][T10816] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  308.066832][T10846] F2FS-fs (loop1): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910
[  308.328263][T10852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  308.375427][T10857] loop4: detected capacity change from 0 to 64
[  308.488299][   T11] kworker/u4:0: attempt to access beyond end of device
[  308.488299][   T11] loop1: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  308.554906][   T11] kworker/u4:0: attempt to access beyond end of device
[  308.554906][   T11] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  308.602435][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  308.609423][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  308.811463][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  308.870012][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1713'.
[  308.906751][T10865] netlink: 'syz.4.1713': attribute type 21 has an invalid length.
[  309.014040][    T9] usb 3-1: config 0 has an invalid interface number: 11 but max is 0
[  309.030637][    T9] usb 3-1: config 0 has no interface number 0
[  309.056858][    T9] usb 3-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[  309.083590][    T9] usb 3-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  309.115846][    T9] usb 3-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024
[  309.137959][    T9] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca
[  309.154339][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.173657][    T9] usb 3-1: Product: syz
[  309.192447][    T9] usb 3-1: Manufacturer: syz
[  309.207088][    T9] usb 3-1: SerialNumber: syz
[  309.231505][    T9] usb 3-1: config 0 descriptor??
[  309.249789][T10859] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  309.257306][T10859] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  309.454640][T10877] loop1: detected capacity change from 0 to 256
[  309.492129][    T9] usb 3-1: Error in usbnet_get_endpoints (-71)
[  309.531516][    T9] usb 3-1: USB disconnect, device number 13
[  309.670297][T10877] FAT-fs (loop1): Directory bread(block 64) failed
[  309.680897][T10877] FAT-fs (loop1): Directory bread(block 65) failed
[  309.705807][T10877] FAT-fs (loop1): Directory bread(block 66) failed
[  309.721606][T10877] FAT-fs (loop1): Directory bread(block 67) failed
[  309.729211][T10877] FAT-fs (loop1): Directory bread(block 68) failed
[  309.736380][T10877] FAT-fs (loop1): Directory bread(block 69) failed
[  309.745214][T10877] FAT-fs (loop1): Directory bread(block 70) failed
[  309.755065][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'.
[  309.764102][T10877] FAT-fs (loop1): Directory bread(block 71) failed
[  309.764190][T10886] netlink: 'syz.0.1721': attribute type 6 has an invalid length.
[  309.770779][T10877] FAT-fs (loop1): Directory bread(block 72) failed
[  309.808447][T10877] FAT-fs (loop1): Directory bread(block 73) failed
[  310.555396][ T5173] kernel read not supported for file /input/event1 (pid: 5173 comm: kworker/1:3)
[  311.539087][T10929] loop1: detected capacity change from 0 to 1024
[  311.540173][T10929] EXT4-fs: Ignoring removed i_version option
[  311.540196][T10929] EXT4-fs: Ignoring removed mblk_io_submit option
[  311.552167][T10929] EXT4-fs (loop1): stripe (6) is not aligned with cluster size (16), stripe is disabled
[  311.582208][T10929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.648749][T10929] EXT4-fs: can't change dax mount option while remounting
[  311.700508][T10915] loop2: detected capacity change from 0 to 40427
[  311.711227][T10915] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  311.711257][T10915] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  311.713147][T10915] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7
[  311.713215][T10915] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff
[  311.713245][T10915] F2FS-fs (loop2): Image doesn't support compression
[  311.725074][T10915] F2FS-fs (loop2): invalid crc value
[  311.747521][T10915] F2FS-fs (loop2): Found nat_bits in checkpoint
[  311.785614][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.789633][T10917] loop0: detected capacity change from 0 to 32768
[  311.867160][T10917] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  311.937885][T10917] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  311.953060][T10915] F2FS-fs (loop2): Start checkpoint disabled!
[  311.961140][T10915] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  311.961161][T10915] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  312.068088][ T5786] ocfs2: Unmounting device (7,0) on (node local)
[  312.411066][ T1088] F2FS-fs (loop2): inject checkpoint error in f2fs_balance_fs of __write_node_page+0xe97/0x17f0
[  312.411196][ T1088] kworker/u4:5: attempt to access beyond end of device
[  312.411196][ T1088] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  312.411434][ T1088] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  312.411714][ T1088] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  312.411936][ T1088] F2FS-fs (loop2): Stopped filesystem due to reason: 1
[  312.516602][   T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  312.687911][   T23] usb 2-1: Using ep0 maxpacket: 16
[  312.691999][   T23] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  312.692026][   T23] usb 2-1: config 0 has no interface number 0
[  312.692070][   T23] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  312.692096][   T23] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  312.694104][   T23] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  312.694134][   T23] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  312.694156][   T23] usb 2-1: Product: syz
[  312.694180][   T23] usb 2-1: SerialNumber: syz
[  312.696772][   T23] usb 2-1: config 0 descriptor??
[  312.705380][   T23] cm109 2-1:0.8: invalid payload size 0, expected 4
[  312.716163][   T23] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input18
[  312.921835][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  313.436652][ T5873] usb 2-1: USB disconnect, device number 11
[  313.461104][T10957] loop0: detected capacity change from 0 to 4096
[  313.461769][ T5873] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  313.510691][T10959] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  314.017566][T10975] loop2: detected capacity change from 0 to 512
[  314.026600][T10975] EXT4-fs: Ignoring removed oldalloc option
[  314.041167][T10975] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46593!=33349)
[  314.108350][T10975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  314.230889][ T1187] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  314.283474][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.451731][ T1187] usb 5-1: Using ep0 maxpacket: 16
[  314.465560][ T1187] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  314.476217][ T1187] usb 5-1: config 0 has no interface number 0
[  314.482609][ T1187] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  314.513056][ T1187] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  314.537724][ T1187] usb 5-1: config 0 interface 41 has no altsetting 0
[  314.552524][ T1187] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  314.562493][ T1187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.575718][ T1187] usb 5-1: Product: syz
[  314.579952][ T1187] usb 5-1: Manufacturer: syz
[  314.584940][ T1187] usb 5-1: SerialNumber: syz
[  314.603152][ T1187] usb 5-1: config 0 descriptor??
[  314.608962][T10972] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  314.619012][T10972] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  314.699966][ T5173] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  314.741117][T10980] loop0: detected capacity change from 0 to 32768
[  314.805740][T10980] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  314.826296][T10972] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  314.859246][T10972] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  314.900652][ T5173] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  314.925920][ T5173] usb 2-1: config 0 interface 0 has no altsetting 0
[  314.954929][ T5173] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[  314.965498][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  314.971944][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  314.981307][ T5173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.993108][ T5173] usb 2-1: config 0 descriptor??
[  315.022371][T10995] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  315.082037][ T1187] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  315.111751][ T1187] CoreChips: probe of 5-1:0.41 failed with error -71
[  315.145652][ T1187] usb 5-1: USB disconnect, device number 10
[  315.183283][ T5786] ocfs2: Unmounting device (7,0) on (node local)
[  315.217691][T10997] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1761'.
[  315.413430][ T5173] apple 0003:05AC:027A.000A: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0
[  315.614693][ T1187] usb 2-1: USB disconnect, device number 12
[  316.639048][   T28] audit: type=1326 audit(1762963633.366:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.2.1781" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e8578f6c9 code=0x0
[  317.157904][T11030] loop1: detected capacity change from 0 to 32768
[  317.185050][T11030] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1777 (11030)
[  317.192365][T11036] loop0: detected capacity change from 0 to 32768
[  317.234378][T11030] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  317.275853][T11030] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  317.313789][T11036] JFS: block map error in dbBackSplit
[  317.318730][T11030] BTRFS info (device loop1): using free space tree
[  317.327077][T11036] ERROR: (device loop0): dbDiscardAG: -EIO
[  317.327077][T11036] 
[  317.361821][T11036] syz.0.1780: attempt to access beyond end of device
[  317.361821][T11036] loop0: rw=2051, sector=2629632, nr_sectors = 8192 limit=32768
[  317.393479][T11036] JFS: sb_issue_discard(ffff88801b7b6000, 328704, 1024, GFP_NOFS, 0) = -5 => failed!
[  317.416499][T11036] blkno = 50400, nblocks = 400
[  317.461399][T11036] ERROR: (device loop0): dbFree: block to be freed is outside the map
[  317.461399][T11036] 
[  317.472149][T11030] BTRFS info (device loop1): enabling ssd optimizations
[  317.490488][T11030] BTRFS info (device loop1): auto enabling async discard
[  317.601661][ T5786] BUG: Bad page state in process syz-executor  pfn:7f37b
[  317.627872][ T5786] page:ffffea0001fcdec0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x7f37b
[  317.677370][ T5786] flags: 0xfff1800000820c(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  317.710265][ T5786] page_type: 0xffffffff()
[  317.719065][ T5786] raw: 00fff1800000820c ffffea0000bb4248 ffffc9000475f900 0000000000000000
[  317.737997][ T5786] raw: 0000000000000004 ffff888078c58c98 00000000ffffffff 0000000000000000
[  317.755116][T11041] loop4: detected capacity change from 0 to 32768
[  317.773000][ T5785] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  317.773462][ T5786] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  317.820209][ T5786] page_owner tracks the page as allocated
[  317.833633][ T5786] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 11036, tgid 11035 (syz.0.1780), ts 317281717511, free_ts 315832862660
[  317.852639][T11041] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  317.869131][ T5786]  post_alloc_hook+0x1cd/0x210
[  317.874002][ T5786]  get_page_from_freelist+0x195c/0x19f0
[  317.888852][T11041] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  317.918302][ T5786]  __alloc_pages+0x1e3/0x460
[  317.923000][ T5786]  folio_alloc+0x1e/0x30
[  317.927676][ T5786]  filemap_alloc_folio+0xdf/0x470
[  317.935877][ T5786]  do_read_cache_folio+0x36c/0x7e0
[  317.941064][ T5786]  do_read_cache_page+0x32/0x250
[  317.947438][ T5786]  __get_metapage+0x31a/0xfa0
[  317.952165][ T5786]  dbAllocCtl+0xd4/0x9b0
[  317.956738][ T5786]  dbAllocAG+0x1e7/0xfe0
[  317.961046][ T5786]  dbDiscardAG+0x2ce/0x8f0
[  317.965620][ T5786]  jfs_ioc_trim+0x42f/0x660
[  317.970163][ T5786]  jfs_ioctl+0x2b9/0x3d0
[  317.974485][ T5786]  __se_sys_ioctl+0xfd/0x170
[  317.979328][ T5786]  do_syscall_64+0x55/0xb0
[  317.984576][ T5786]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  317.993425][ T5786] page last free stack trace:
[  318.002572][ T5786]  free_unref_page_prepare+0x7ce/0x8e0
[  318.008216][ T5786]  free_unref_page_list+0xbe/0x860
[  318.013480][ T5786]  release_pages+0x1fa0/0x2220
[  318.018289][ T5786]  tlb_flush_mmu+0x368/0x4f0
[  318.022961][ T5786]  tlb_finish_mmu+0xc3/0x1d0
[  318.027601][ T5786]  exit_mmap+0x3f0/0xb50
[  318.032150][ T5786]  __mmput+0x118/0x3c0
[  318.036282][ T5786]  exit_mm+0x1da/0x2c0
[  318.040395][ T5786]  do_exit+0x88e/0x23c0
[  318.046951][ T5786]  do_group_exit+0x21b/0x2d0
[  318.052777][ T5786]  get_signal+0x12fc/0x1400
[  318.057353][ T5786]  arch_do_signal_or_restart+0x9c/0x7b0
[  318.063018][ T5786]  exit_to_user_mode_loop+0x70/0x110
[  318.068365][ T5786]  exit_to_user_mode_prepare+0xf6/0x180
[  318.088317][ T5786]  syscall_exit_to_user_mode+0x1a/0x50
[  318.093866][ T5786]  do_syscall_64+0x61/0xb0
[  318.110154][ T5786] Modules linked in:
[  318.114126][ T5786] CPU: 1 PID: 5786 Comm: syz-executor Not tainted syzkaller #0
[  318.121724][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  318.131822][ T5786] Call Trace:
[  318.135117][ T5786]  <TASK>
[  318.138070][ T5786]  dump_stack_lvl+0x16c/0x230
[  318.142809][ T5786]  ? show_regs_print_info+0x20/0x20
[  318.148057][ T5786]  ? swiotlb_print_info+0x70/0x70
[  318.153126][ T5786]  ? dump_page+0xba7/0x14d0
[  318.157692][ T5786]  bad_page+0x14b/0x170
[  318.161878][ T5786]  free_unref_page_prepare+0x887/0x8e0
[  318.167364][ T5786]  free_unref_page_list+0xbe/0x860
[  318.172496][ T5786]  ? __folio_memcg+0x63/0x160
[  318.177200][ T5786]  ? folio_memcg+0x127/0x480
[  318.181825][ T5786]  release_pages+0x1fa0/0x2220
[  318.186654][ T5786]  ? lru_cache_disable+0x30/0x30
[  318.191640][ T5786]  ? mlock_drain_local+0x79/0x490
[  318.196692][ T5786]  ? mlock_drain_local+0x79/0x490
[  318.201746][ T5786]  ? mlock_drain_local+0x28d/0x490
[  318.206873][ T5786]  __folio_batch_release+0x71/0xe0
[  318.212014][ T5786]  truncate_inode_pages_range+0x358/0xf00
[  318.217770][ T5786]  ? mapping_evict_folio+0x510/0x510
[  318.223110][ T5786]  ? proc_nr_inodes+0x230/0x230
[  318.227995][ T5786]  ? do_raw_spin_unlock+0x121/0x230
[  318.233253][ T5786]  ? _raw_spin_unlock+0x28/0x40
[  318.238144][ T5786]  dbUnmount+0x109/0x180
[  318.242439][ T5786]  jfs_umount+0x258/0x3c0
[  318.246829][ T5786]  jfs_put_super+0x8c/0x190
[  318.251374][ T5786]  ? jfs_free_inode+0x30/0x30
[  318.256093][ T5786]  generic_shutdown_super+0x134/0x2b0
[  318.261521][ T5786]  kill_block_super+0x44/0x90
[  318.266254][ T5786]  deactivate_locked_super+0x97/0x100
[  318.271681][ T5786]  cleanup_mnt+0x429/0x4c0
[  318.276149][ T5786]  task_work_run+0x1ce/0x250
[  318.280790][ T5786]  ? task_work_cancel+0x240/0x240
[  318.285869][ T5786]  ? exit_to_user_mode_loop+0x3b/0x110
[  318.291386][ T5786]  exit_to_user_mode_loop+0xe6/0x110
[  318.296733][ T5786]  exit_to_user_mode_prepare+0xf6/0x180
[  318.302326][ T5786]  syscall_exit_to_user_mode+0x1a/0x50
[  318.308171][ T5786]  do_syscall_64+0x61/0xb0
[  318.312639][ T5786]  ? clear_bhb_loop+0x40/0x90
[  318.317349][ T5786]  ? clear_bhb_loop+0x40/0x90
[  318.322064][ T5786]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  318.327992][ T5786] RIP: 0033:0x7f1a02d909f7
[  318.332461][ T5786] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  318.352196][ T5786] RSP: 002b:00007fffab166438 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  318.360667][ T5786] RAX: 0000000000000000 RBX: 00007f1a02e11d7d RCX: 00007f1a02d909f7
[  318.368677][ T5786] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffab1664f0
[  318.376688][ T5786] RBP: 00007fffab1664f0 R08: 0000000000000000 R09: 0000000000000000
[  318.384713][ T5786] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffab167580
[  318.392726][ T5786] R13: 00007f1a02e11d7d R14: 000000000004e20a R15: 00007fffab1675c0
[  318.400763][ T5786]  </TASK>
[  318.437292][ T5786] Disabling lock debugging due to kernel taint
[  318.460796][ T6170] ocfs2: Unmounting device (7,4) on (node local)
[  318.529907][   T59] wlan1: Trigger new scan to find an IBSS to join
[  318.712805][T11063] Falling back ldisc for ttyS3.
[  321.345766][ T1088] wlan1: Trigger new scan to find an IBSS to join
[  324.250424][   T49] wlan1: Trigger new scan to find an IBSS to join
[  325.099355][   T59] wlan1: Creating new IBSS network, BSSID 5e:60:6f:80:61:95