last executing test programs:

5.596014326s ago: executing program 0 (id=13215):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x3004001, &(0x7f00000002c0)={[{@uid}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@nocompress}, {@hide}, {@overriderock}, {@session={'session', 0x3d, 0x62}}, {@session={'session', 0x3d, 0x5b}}, {@session={'session', 0x3d, 0x56}}, {}, {@showassoc}, {@overriderock}, {@check_relaxed}]}, 0xfe, 0xa36, &(0x7f00000018c0)="$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")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200)

4.834460295s ago: executing program 0 (id=13233):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
syz_usb_connect(0x0, 0x90, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cbe8d0205e040307c06e0102030109027e00010000000009044400000e0100000a240140000d0201020c240205010205090100010e0c240804010000a401883db20d240703020007e24dd0feeb710c24020603013f07ff00ea0e092403050101050109052406000005240000000d240f018d040000800004000f06241a0500180c"], 0x0)

3.418288378s ago: executing program 3 (id=13236):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='./file1\x00', 0xa00004, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp860'}}, {@gid_ignore}, {@dmode}, {@shortad}, {@nostrict}, {@utf8}, {@uid_ignore}, {}, {@longad}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@undelete}, {@nostrict}, {@nostrict}, {@uid_ignore}]}, 0x5, 0xc87, &(0x7f0000000780)="$eJzs3U1sHNd9APD/G5LiSm5jJk4VJ42DTVukMmO5+oopW4W7qmm2AWRZCMXcAnAlUurCFEmQVCMbbsv00kMPAYqih5yItkKBFA2Mpgh6ZFoXSC4+FDn1RLSwERQ9sEWAAC3SDWb2rbiiSOuDEkXJv59N/Xdn3pt5H6sZiuB/XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/96ukjR9MWO/oeQmMAgF1xdvwrR45tdf8HAB5b57f79z8AAAAAAAAAAAAAALBXpCjiqUgxf3Y9TVbvO2pnWgNXr02Mjm1dbX+qavZV5cuv2tFjx0986YWRk914pjX7IfXvt8/E6+PnT9dfmbsyvzC9uDg9VZ+YbV2cm5q+4yPstP5mw9UA1K+8cXXq0qXF+rHnj9+0+9rQB4NPHBw6NfLs4We6ZSdGx8bGN4rUesv333NDOrbL8NgXRRyOFM9958epGRFF7Hwsars795vtrzoxXHViYnSs6shMqzm7VO481x2IIqLeU6nRHaOt5yL6B3a1D9trRCyXzS8bPFx2b3y+udC8MDNdP9dcWGotteZmz6VOa8v+1KOIkyliJSLWBm893EAU0R8pvvXkerqQn/pRjcMXq8Tg7dtRPMA+3oGynfWBiJXiEZizPWwwingtUvzk3UNxMV9nqmvNFyJeK+P3Iq6X8eWIVH4wTkS8v8XniEdTfxTxp+X8n1pPU9X1oHtdOfPV+pdnL831lO1eV+7y/nDLlWIX7g9/ucW2/Zvi7tjj16ZaFNGsrvjr6d6/2QEAAAAAAAAAAAAAAADgftsfRXw6Urz6r79f5RVHlZf+5KmR3xn6xd6c8advc5yy7PMRsVzcWU7uvpwYeC6dS+kh5xJ/lNWiiD/I+X/feNiNAQAAAAAAAAAAAAAAAAAA+Egr4keR4qX3DqWV6F1TvDV7uX6+eWGmsypsd+3f7prp7Xa7XU+d2MhxMsflHFdyXM1xLccocv0cGzlO5ric40onfqx7vrW8Pfpy/RwbOU7muJzjSo6rOa7lGP25fo6NHCdzXM5xJcfVHNdyjD2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOOkiCJ+Fim++fX1FCkiGhGT0Ymrgw+7dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAaTAV8d1IUf/dxo1t/RGRqv87DpV/nIjGvjJ+IhojZXw5GqdzbFaxv/GNh9B+dmYgFfHDSDFYe+fGhOf5H+i8u/ExiOtvb7z7TH8n9nV3Dn0w+MTBJ0+NjH3u6e1ep60aMJxi9uq1+sTo2Nh4z+b+fPZP9Gwbyuct7k/XiYjFN996ozkzM71w7y/Kj8A9Vu/O5A7OvpsvUv9Dbur/74FBuLsXsdyZ4b3Snrt7Ef0P7+wP++/FzdeJ2m5fmNgV5f3//UjxG+/9W/eG37n/1+IXOu9u3OHjp3+4cf9/afOB7vD+37+53vCZVnn/L+8EW93/n+rZ9lL+bmSgP6K2dGV+4GBEbfHNtw63rjQvT1+enj1x5MiLIyMvHj8ysC+idqk1M93z6r4MFwAAAAAAAAAAAAAAAMDuSUX8VqRo/nA91SPiWpWvNXRq5NnDz/RFX5VvdVPe9uvj50/XX5m7Mr8wvbg4PVWfmG1dnJuavtPT1ap0r4nRsQfSmdva/4Dbv7/2ytz8mwuty7+3tOX+A7XTFxaXFpoXt94d+6OIaPRuGa4aPDE6VjV6ptWcraqe2zKZ/u4NpCL+PVJcPFFPn8/bcv7/5gz/uP72izc+C8ubD3TP+f+d/L/e/P/PHdjI//t4T9HynCkV8dNI8et/9nR8vmrngbhlzHK5v44Uwyc/m8vFvrJctw2d5wp0MgPLsv8dKf7+ZzeX7eZDPrVR9uhdDe4joJz/JyPFd//k2/EredvNz3/onf+N8Tuw+UD3cf6jJ//zkz3bDtz0vIIdd508/4cjxctPvRO/Wm353w99/kf3iQ2HOoU3ns/xgOb/l3q2DeXz/tr96jwAAAAAAAAAAMAjbCAV8TeR4vtj/emFvO1Ofv9vavOBHtDvf32qZ9vU/Vmv6LYvdjyoAAAAALBHDKQifhQpLi+9cyOH+ub87578z9/cyP8cTZv2Vj/n+1j13ID7+fO/XkP5vJM77zYAAAAAAAAAAAAAAAAAAADsKSkV8UJeT32yyuef2nY99dVI8ep/PpfLpYNlue468EPVn7Wzc7OHT8/MzNViqXlhZro+Pt+8OF3W/WSkWP+rz+a6RbW+ene9+c4a7xtrsS9EirG/7ZbtrMXeXZu8sx54rd2OOFqW/Xik+I+/u7lsXpo6rx1dHfdYWfYvIsXX/nHrsgc3yh4vy347Uvzga/Vu2QNl2e7zUT+1Ufb5i3PFA5gVAAAAAAAAAAAAAAAAAAAAPmoGUhF/HCn+68rKjVz+vP7/QM/byvW3e9b73+Ratc7/ULX+/3av72X9/+q5AsvbnRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4K1LMn11Pq4Pl+47amdbs1WsTo2NbV9ufqpp9Vfnyq3b02PETX3ph5GQ3fnj9++3T8fr4+dP1V+auzC9MLy5OT9UnZlsX56am7/gIO62/2XA1APUrb1ydunRpsX7s+eM37b429MHgEweHTo08e/iZbtmJ0bGx8Z4y/QP3fPZbpG2274si/jxSPPedH6fvD0YUsfOxuM1n50HbX3ViuOrExOhY1ZGZVnN2qdx5rjsQRUS9p1KjO0a3nYv/a7fbu9WVLTQilsvmlw0eLrs3Pt9caF6Yma6fay4stZZac7PnUqe1ZX/qUcTJFLESEWuDtx5uIIp4I1J868n19E+DEX3dcfji2fGvHDm2fTuKB9jHO1C2sz4QsVLcyZyxncEo4h8ixU/ePRT/PBjRH52v+ELEa2X8XsT16Mx3Kj8YJyLe3+JzxKOpP4r4n3L+T62ndwfL60H3unLmq/Uvz16a6ynbva7s8P7Qbrf/qIwP7/6wm/b4takWRfyguuKvp3/x9xoAAAAAAAAAAAAAAABgDynilyPFS+8dSlV+8I2c4tbs5fr55oWZTlpfN/evmzPdbrfb9dSJjRwnc1zOcSXH1RzXcowi18+xUcZauz2Z3y/nuJLjao5rOUZfrt9XpSu2G/n9ZI7LOa7kuJrjWo7Rn+vn2MhxMsflHFdyXM1xLcfYI7l7AAAAAAAAAAAAAAAAAADA46Wo/kvxza+vp/ZgZ33pyejEVeuBPvZ+HgAA//9+4PKL")
symlink(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3.232316917s ago: executing program 2 (id=13238):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0xc8, 0x8, 0x278, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff], [], 'batadv0\x00', 'wlan0\x00', {0xff}, {}, 0x11, 0x1, 0x2}, 0x0, 0x230, 0x278, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'\x00', {0x1, 0x1, 0x0, 0x5, 0x7ff, 0x7, 0x6, 0xfffffffd, 0x40, 0x20}, {0x100000000}}}, @common=@inet=@udp={{0x30}, {[0x4e24, 0x4e23], [0x4e23, 0x4e24]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x8001, 0x7, 0x2, 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x0, 0x1}, {0x1, 0x6, 0x3}, {0xffffffffffffffff, 0x3, 0x6}, 0x7, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488)

3.080557692s ago: executing program 2 (id=13239):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xfffffffffffffffe, 0x101000)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0xf194)

3.003864226s ago: executing program 0 (id=13240):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040))

2.899478942s ago: executing program 2 (id=13242):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x88000)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000340)={0x0, 0x1, 0x100a, 0xffffffffffffffff, 0x0, 0x0})

2.73615581s ago: executing program 3 (id=13244):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.635407779s ago: executing program 0 (id=13246):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
ioctl$BTRFS_IOC_INO_PATHS(r0, 0x80789440, &(0x7f0000000340)={0x103, 0x0, [0x7, 0x43c3, 0x2c, 0x8], 0x0})

2.512178783s ago: executing program 2 (id=13248):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000500)={[{@utf8}, {@dmask={'dmask', 0x3d, 0x1}}, {}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x8}}, {@fmask={'fmask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {}, {@namecase}]}, 0x1, 0x1530, &(0x7f0000006800)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f)

1.881783071s ago: executing program 3 (id=13251):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x1142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd=r0}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048051}, 0xc000)

1.881539964s ago: executing program 5 (id=13252):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xfffc, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0b00008058", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x24)

1.687271661s ago: executing program 4 (id=13253):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000180)=0x73, 0x4)

1.686212383s ago: executing program 2 (id=13254):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCREVOKE(r0, 0x40004580, 0x0)

1.573163184s ago: executing program 1 (id=13255):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)

1.52323205s ago: executing program 3 (id=13256):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000002100050126bd7000000000000200200000000000020000000c000c4000000000000003ff08000200"], 0x60}, 0x1, 0x0, 0x0, 0x200200d4}, 0x0)

1.373740179s ago: executing program 5 (id=13257):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x5e04, 0x4, 0x90, [0x0, 0x0, 0x200000002500], 0x2, 0x0, &(0x7f0000002500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x108)

1.271280345s ago: executing program 2 (id=13258):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800001, &(0x7f0000000100), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000002180)={0x2, 0x5, @start={0x0, 0x1, "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", "67e9e2a6e099a88fd86c909c29603bc3ddc16d91205943ae75bb95d16c60056366132c5010c4a78febb921a7d52dc54d6b90677663732930462a6cc1602d900ea9739e0713b9c131532f3c73af234f353bfeae997a37a196a1c1e0ca6acd041d46ceaa41f0fe5ccf5e30c8f00acc427143e4a4e7c6f5149c6d80c5e119cef8f84abfec7968506a1fdc67293f7f6679c8686608f764f2fc876791698ce9291a8b3703fc105a515a851e2b3f0fd3f8a8c4f8dbb16b6d52a6609638d64b4a1aed017febd5253ee58ba3ea4bad0b6a56540f309d90e79be4c3892aa5de131d8ddc2d12e982ed0a7dc1582c0ec9a5b637e05e82e41651f51d861f5b6d680c2eaf61d82752249a35dc642022514fe21fbed326a2d043906ca0a6963493e87782e8da557b604f9d301f4024f9d6416917713fb854271f15989dcbc40ed91c00dcf345b2e7723486de6eaed35e79525b1bf98223e5a9dddb2a38aeb31aaec0d57546f65050d907484591e1ba8c47c8416454bb6a024b5e26406bcdd0fec25a6263ebff0629694fa5620db376897ce5e30dcc4bd9474979627d2608f526715f50bdb0fbff0cae48fc7923cc897587edd06c31d816d8ba95f53a98f360d32f96a7995961adfd7037409d92c284f748ab1aa39b6046c322590100433919ba8d74d67308579b0e2af9e3acdefdfb5a128e58a2752974e92911c6cb3b76b7deb986950a65d9b847e7d2514ef132f5b5225813b7eff77fbff6f1d00ec6faf1b1c3e3b3b3d569efc6db420559dcb2618e1a12f7ea7e5d0f2ddfaaf5ec988228ac4d9fe9c645ba44e16fe0792f2c764ea4cd228737b8e940a6799a75b5dbff5d0acbc1c1d3e3aeea0cc74fbe75d2c88620aa4ae935b00ad311be6a27a189405776221835a26ab7227d2e9b6febe8fab88a20692f8f28396b9790dfb2198c3dfaa1f63d45109edbf54ce5508d1c3e585b2462e50e740de537feba47c2341bb96e4a5552579d714e1ee482fc85f4966851919b20a073dbcba591a157fd35b12e2f05bd29c4e99b94ab05b09cc2516b631581e3cdf33cedd1c00116225ed5a865648cc39e7782bc006177e63a6b1825c095e21dc8598eb22ad193f9533fa3f452c82d8b6da32da4f0766b951c2fb5996ae53d5fce4e0908e5998c56c2dee91d65dd066d2d3084c7ab70f9afccb573adf1af3675f25620a6a43c28f8c0d696b64bd2bb0cd9513798901192cb14d0521afb21af59aee17fa70951ba5057bb5e1b69fd1a0821ccd110068534615b9a46e2ad392db78b30a6e2220b499d43340db7ac0992a6204622d4db20ddcc17be20c85f9c73f352593f93c1c09e2ac17ac6caf27209e4385a556b5d351005038d5416d646b51397b7ab59db516a43a93df1c2676614ebfd838c72e2f40ee146ba0ae928b8aceaa037913474dbf47e131ae85a608986e0348aa438eddd6e"}, [0x6, 0x9, 0x9ca4, 0x9, 0x2, 0x5, 0x1ff, 0x6000000, 0x6, 0xf16, 0xfff, 0x1, 0x0, 0x4b, 0x0, 0x7ff, 0x2, 0x400, 0x333d56cc, 0x9, 0xba54, 0x2, 0x0, 0x1, 0x8, 0x5, 0x6, 0xaae9, 0x6, 0x1, 0x7, 0x80000000, 0xd, 0xdd86, 0x4, 0x6, 0x1, 0xc, 0x6, 0x4e10a48c, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x81, 0x8, 0xe1, 0x0, 0x8000000000000001, 0x9, 0x1, 0xffffffffffffff3e, 0x9, 0x8, 0x80, 0x4, 0x7, 0x2, 0x10, 0xcb, 0xffffffffffffffff, 0x5, 0x100000001, 0x81]})

1.270722039s ago: executing program 4 (id=13259):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x18, 0x301, 0x270bd24, 0x25dfdbfa, {0xf}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}]}, 0x28}}, 0x0)

1.262955984s ago: executing program 1 (id=13270):
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000d40), 0x8)

1.080362263s ago: executing program 3 (id=13260):
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x7, 0x7, 0xf, 0x5, 0x3ff, 0x7, 0xfffffffffffffffc, 0x80}, &(0x7f00000000c0)={0xb, 0x400000000d, 0x5, 0x7, 0x3ff, 0x9, 0x9, 0x1}, 0x0, 0x0, 0x0)

1.077745327s ago: executing program 5 (id=13261):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

982.217417ms ago: executing program 1 (id=13262):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b, 0xc001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x7}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xfffffffb}]}}}]}, 0x40}}, 0x20000844)

960.26894ms ago: executing program 4 (id=13263):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006580)={0x24, 0x2a, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x78, 0x0, 0x1, [@nested={0x4, 0x10a}]}]}, @nested={0x4, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

712.539176ms ago: executing program 5 (id=13264):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

702.029871ms ago: executing program 3 (id=13277):
r0 = syz_usb_connect_ath9k(0x3, 0x6b, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff42, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "5ac31ef7", {0x3, 0x107, 0x0, 0x0, 0x0, 0x4}})

698.323669ms ago: executing program 1 (id=13265):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)

689.859083ms ago: executing program 4 (id=13266):
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x105})

495.587094ms ago: executing program 0 (id=13267):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
file_getattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x18, 0x1000)

466.538205ms ago: executing program 4 (id=13268):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)

465.722554ms ago: executing program 1 (id=13269):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r0, 0x10c, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x4)

380.632366ms ago: executing program 5 (id=13271):
r0 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r0, 0x0, 0x0)

212.917738ms ago: executing program 1 (id=13272):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000500)=0x201)

212.798622ms ago: executing program 0 (id=13273):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12014101175129205705092006c70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

211.012421ms ago: executing program 5 (id=13274):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800001, &(0x7f0000000100), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000002780)={0x0, 0x9, @start={0x0, 0x0, "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", "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"}, [0x9, 0x1, 0x6, 0x6, 0x7, 0x78, 0x8000000000000000, 0x8, 0x8000000000000001, 0x3, 0xffff, 0x3, 0x6, 0x3, 0x1, 0x3, 0x7fffffff, 0x1000, 0x7f, 0x1, 0x32edb4c4, 0x5, 0x4000000000000000, 0xe263, 0x100000001, 0x1, 0x2, 0x2, 0x5d3d, 0x8, 0x4, 0x0, 0x2, 0x4, 0x412, 0x1, 0x1, 0x1535, 0xff, 0x1, 0xde9, 0xffffffffffffff81, 0x3, 0x40, 0x2, 0x10, 0x1, 0x5, 0x0, 0xcf0, 0x7, 0x81, 0xc, 0x0, 0x9, 0x434, 0x401, 0x7, 0x5, 0x0, 0x100000001, 0xdc5, 0x9, 0x5]})

0s ago: executing program 4 (id=13275):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800001, &(0x7f0000000100), 0x0, 0x559e, &(0x7f0000005680)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

kernel console output (not intermixed with test programs):

 callbacks suppressed
[ 1368.427945][T21087] loop4: lost filesystem error report for type 5 error -117
[ 1368.470633][ T5780] EXT4-fs error (device loop4): __ext4_get_inode_loc:4884: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1368.573088][ T5780] loop4: lost filesystem error report for type 5 error -117
[ 1368.577450][ T5780] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem
[ 1368.639005][ T5780] loop4: lost filesystem error report for type 5 error -117
[ 1368.639259][ T5780] EXT4-fs error (device loop4): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error
[ 1368.721428][ T5780] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[ 1368.937180][T26425] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1369.131242][T26425] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1369.170294][T26425] usb 6-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[ 1369.192210][T26425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1369.219681][T26425] usb 6-1: Product: syz
[ 1369.238428][T26425] usb 6-1: Manufacturer: syz
[ 1369.253477][T26425] usb 6-1: SerialNumber: syz
[ 1369.533111][T26425] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[ 1369.563479][T26425] command write [95] error -22
[ 1369.619164][T26425] usb 6-1: USB disconnect, device number 74
[ 1369.709747][ T1257] loop3: detected capacity change from 0 to 8
[ 1369.778823][ T1257] SQUASHFS error: Failed to read block 0x6de: -5
[ 1369.822401][ T1257] SQUASHFS error: Unable to read metadata cache entry [6dc]
[ 1369.845340][ T1257] SQUASHFS error: Unable to read directory block [26067d:ffff]
[ 1369.946480][ T1264] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1369.968724][ T1264] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1369.998373][ T1264] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1370.019610][ T1264] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1370.158444][ T1232] loop1: detected capacity change from 0 to 32768
[ 1370.201773][ T1270] usb usb7: usbfs: process 1270 (syz.3.11735) did not claim interface 0 before use
[ 1370.809776][ T1289] loop3: detected capacity change from 0 to 1024
[ 1370.850196][ T1289] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[ 1370.933385][ T1294] loop1: detected capacity change from 0 to 512
[ 1370.948516][ T1289] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.11741: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1370.958446][ T1287] loop2: detected capacity change from 0 to 4096
[ 1370.976036][ T1287] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[ 1370.987637][ T1289] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[ 1370.988691][ T1289] Quota error (device loop3): qtree_write_dquot: dquota write failed
[ 1371.005894][    C1] EXT4-fs (loop3): error count since last fsck: 1
[ 1371.005927][    C1] EXT4-fs (loop3): initial error at time 2000525262: ext4_map_blocks:791: inode 3: block 2
[ 1371.005994][    C1] EXT4-fs (loop3): last error at time 2000525262: ext4_map_blocks:791: inode 3: block 2
[ 1371.033459][ T1289] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.11741: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1371.048000][ T1289] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[ 1371.048337][ T1289] Quota error (device loop3): v2_write_file_info: Can't write info structure
[ 1371.108339][ T1289] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.11741: Failed to acquire dquot type 0
[ 1371.121049][ T1287] ntfs3(loop2): ino=19, mi_enum_attr
[ 1371.128212][ T1289] loop3: lost filesystem error report for type 5 error -117
[ 1371.131064][ T1289] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem
[ 1371.159895][ T1303] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[ 1371.168372][ T1294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1371.181351][ T1287] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[ 1371.189781][ T1289] loop3: lost filesystem error report for type 5 error -117
[ 1371.231917][ T1287] ntfs3(loop2): failed to convert "c46c" to iso8859-9
[ 1371.241552][ T1294] ext4 filesystem being mounted at /1983/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1371.269019][ T1289] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.11741: mark_inode_dirty error
[ 1371.300226][ T1289] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1371.301400][ T1287] ntfs3(loop2): ino=20, mi_enum_attr
[ 1371.316238][ T1289] EXT4-fs warning (device loop3): ext4_evict_inode:269: couldn't mark inode dirty (err -117)
[ 1371.343376][ T1289] EXT4-fs (loop3): 1 orphan inode deleted
[ 1371.372355][ T1289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1371.390810][T21087] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1371.435947][ T1294] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 1371.467494][T21087] Quota error (device loop3): remove_tree: Can't read quota data block 1
[ 1371.503967][T21087] EXT4-fs error (device loop3): ext4_release_dquot:7068: comm kworker/u8:16: Failed to release dquot type 0
[ 1371.585967][ T1289] EXT4-fs error (device loop3): __ext4_get_inode_loc:4884: comm syz.3.11741: Invalid inode table block 1 in block_group 0
[ 1371.647885][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1371.665840][ T1289] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem
[ 1371.700807][ T1289] EXT4-fs error (device loop3): ext4_setattr:5946: inode #2: comm syz.3.11741: mark_inode_dirty error
[ 1371.879920][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1371.904245][ T1126] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1371.962694][ T1126] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[ 1371.964714][ T1126] Quota error (device loop3): remove_tree: Can't read quota data block 1
[ 1372.004339][ T1126] EXT4-fs error (device loop3): ext4_release_dquot:7068: comm kworker/u8:10: Failed to release dquot type 0
[ 1372.024093][ T1126] loop3: lost filesystem error report for type 5 error -117
[ 1372.029973][ T5781] EXT4-fs error (device loop3): __ext4_get_inode_loc:4884: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1372.050477][ T5781] loop3: lost filesystem error report for type 5 error -117
[ 1372.051233][ T5781] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem
[ 1372.119978][ T5781] loop3: lost filesystem error report for type 5 error -117
[ 1372.120259][ T5781] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error
[ 1372.172778][ T5781] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[ 1372.919438][ T1353] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1372.957695][ T1353] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1372.990859][ T1353] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1373.011840][ T1353] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1373.104780][T26380] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1373.131397][ T1354] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[ 1373.166916][ T1354] bond1 (unregistering): Released all slaves
[ 1373.252862][ T1334] loop2: detected capacity change from 0 to 40427
[ 1373.262122][ T1334] F2FS-fs (loop2): build fault injection rate: 14
[ 1373.269404][ T1334] F2FS-fs (loop2): build fault injection type: 0xe4
[ 1373.275889][T26380] usb 1-1: Using ep0 maxpacket: 16
[ 1373.290381][ T1334] F2FS-fs (loop2): invalid crc value
[ 1373.290657][T26380] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[ 1373.334146][ T1359] bridge3: entered promiscuous mode
[ 1373.345446][ T1334] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x1fe/0x1060
[ 1373.349080][T26380] usb 1-1: config 0 has no interface number 0
[ 1373.362100][ T1359] bridge3: entered allmulticast mode
[ 1373.403062][T26380] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1373.461491][T26380] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1373.491017][T26380] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1373.528148][T26380] usb 1-1: Product: syz
[ 1373.543147][T26380] usb 1-1: SerialNumber: syz
[ 1373.579158][T26380] usb 1-1: config 0 descriptor??
[ 1373.633317][T26380] cm109 1-1:0.8: invalid payload size 208, expected 4
[ 1373.684433][T26380] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input78
[ 1373.699583][ T1374] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[ 1373.711018][ T1334] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1373.788219][ T1334] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1374.212744][T21279] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of commit_checkpoint+0xa0/0x540
[ 1374.241578][    C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1374.241837][  T803] usb 1-1: USB disconnect, device number 74
[ 1374.248540][    C0] cm109 1-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19
[ 1374.359473][  T803] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1374.570807][ T1393] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1374.594432][ T1395] netlink: 'syz.4.11791': attribute type 39 has an invalid length.
[ 1374.602713][ T1393] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1374.611050][ T1393] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1374.622468][T26418] usb 4-1: new low-speed USB device number 56 using dummy_hcd
[ 1374.633577][ T1393] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1374.812190][T26418] usb 4-1: config 8 has an invalid interface number: 137 but max is 0
[ 1374.831177][T26418] usb 4-1: config 8 has no interface number 0
[ 1374.851826][T26418] usb 4-1: string descriptor 0 read error: -22
[ 1374.864094][T26418] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e
[ 1374.900287][T26418] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1374.918080][ T1399] loop1: detected capacity change from 0 to 1024
[ 1374.953135][T26418] ttusb_dec_send_command: command bulk message failed: error -22
[ 1374.978873][ T1399] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1374.990466][T26418] ttusb-dec 4-1:8.137: probe with driver ttusb-dec failed with error -22
[ 1375.154288][ T1401] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[ 1375.167517][ T1401] bond3 (unregistering): Released all slaves
[ 1375.177315][T26418] usb 4-1: USB disconnect, device number 56
[ 1376.159465][ T1430] bridge3: the hash_elasticity option has been deprecated and is always 16
[ 1376.507205][ T1441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11813'.
[ 1376.550983][ T1441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11813'.
[ 1377.061471][ T1462] loop4: detected capacity change from 0 to 256
[ 1377.085306][ T1462] exfat: Deprecated parameter 'utf8'
[ 1377.117410][ T1462] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[ 1377.407900][ T1472] comedi comedi0: Minor 9 could not be opened
[ 1377.523347][ T1474] loop2: detected capacity change from 0 to 2048
[ 1377.610853][ T1474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1377.708516][ T1474] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[ 1377.786455][ T1487] loop1: detected capacity change from 0 to 1024
[ 1377.816381][T21279] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1377.842340][ T1487] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1378.195351][ T1506] netlink: 148 bytes leftover after parsing attributes in process `syz.1.11843'.
[ 1378.762602][ T1526] program syz.3.11854 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1380.069334][ T1565] loop5: detected capacity change from 0 to 4096
[ 1380.289049][ T1579] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 1380.353078][ T1577] loop4: detected capacity change from 0 to 1764
[ 1380.451320][ T1577] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1380.540974][ T1583] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1381.780642][ T1629] loop4: detected capacity change from 0 to 2048
[ 1381.839457][ T1629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1381.872212][ T1629] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[ 1381.945439][ T1636] vivid-007: =================  START STATUS  =================
[ 1381.953245][ T1636] vivid-007: Generate PTS: true
[ 1381.970619][ T1636] vivid-007: Generate SCR: true
[ 1381.982463][ T1636] tpg source WxH: 320x240 (Y'CbCr)
[ 1381.988530][ T1636] tpg field: 1
[ 1381.992402][ T1636] tpg crop: (0,0)/320x240
[ 1381.997989][ T1636] tpg compose: (0,0)/320x240
[ 1382.002624][ T1636] tpg colorspace: 8
[ 1382.006450][ T1636] tpg transfer function: 0/0
[ 1382.012027][ T1636] tpg Y'CbCr encoding: 0/0
[ 1382.016879][ T1636] tpg quantization: 0/0
[ 1382.023926][ T1636] tpg RGB range: 0/2
[ 1382.033209][ T1636] vivid-007: ==================  END STATUS  ==================
[ 1382.218716][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1382.566707][ T1658] usb usb1: usbfs: process 1658 (syz.2.11919) did not claim interface 0 before use
[ 1382.753242][ T1663] loop3: detected capacity change from 0 to 256
[ 1382.785397][ T1663] FAT-fs (loop3): Directory bread(block 1285) failed
[ 1382.800228][ T1663] FAT-fs (loop3): Directory bread(block 1286) failed
[ 1382.849474][ T1663] FAT-fs (loop3): Directory bread(block 1287) failed
[ 1382.893681][ T1663] FAT-fs (loop3): Directory bread(block 1288) failed
[ 1382.944814][ T1672] loop1: detected capacity change from 0 to 2048
[ 1382.984378][ T1663] FAT-fs (loop3): Directory bread(block 1285) failed
[ 1382.984467][ T1663] FAT-fs (loop3): Directory bread(block 1286) failed
[ 1382.984510][ T1663] FAT-fs (loop3): Directory bread(block 1287) failed
[ 1382.984552][ T1663] FAT-fs (loop3): Directory bread(block 1288) failed
[ 1382.984734][ T1663] FAT-fs (loop3): Directory bread(block 1285) failed
[ 1382.984778][ T1663] FAT-fs (loop3): Directory bread(block 1286) failed
[ 1382.992021][ T1672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1383.084752][ T1672] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[ 1383.262796][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1383.400682][ T1690] netlink: 'syz.0.11934': attribute type 10 has an invalid length.
[ 1383.431037][ T1690] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11934'.
[ 1383.626564][ T1698] loop3: detected capacity change from 0 to 256
[ 1383.683413][ T1698] exfat: Deprecated parameter 'utf8'
[ 1383.758455][ T1698] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[ 1384.063389][ T1711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11944'.
[ 1384.335850][ T1724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11948'.
[ 1384.433789][  T803] usb 6-1: new low-speed USB device number 75 using dummy_hcd
[ 1384.518152][ T1730] netlink: 'syz.1.11953': attribute type 6 has an invalid length.
[ 1384.620168][  T803] usb 6-1: config 8 has an invalid interface number: 137 but max is 0
[ 1384.642746][  T803] usb 6-1: config 8 has no interface number 0
[ 1384.649561][T26418] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1384.678977][  T803] usb 6-1: string descriptor 0 read error: -22
[ 1384.697006][  T803] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e
[ 1384.716555][  T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1384.767784][  T803] ttusb_dec_send_command: command bulk message failed: error -22
[ 1384.791872][  T803] ttusb-dec 6-1:8.137: probe with driver ttusb-dec failed with error -22
[ 1384.857989][T26418] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1384.883726][T26418] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1384.907810][T26418] usb 5-1: Product: syz
[ 1384.913632][T26418] usb 5-1: SerialNumber: syz
[ 1384.938831][T26418] usb 5-1: config 0 descriptor??
[ 1385.033794][  T803] usb 6-1: USB disconnect, device number 75
[ 1385.174520][T26418] hso 5-1:0.0: Can't find BULK endpoints
[ 1385.401707][  T803] usb 5-1: USB disconnect, device number 63
[ 1385.511667][ T1760] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1385.921226][ T1783] netlink: 'syz.3.11979': attribute type 4 has an invalid length.
[ 1385.929252][ T1783] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11979'.
[ 1385.950832][ T1783] .`: renamed from bond0 (while UP)
[ 1386.146837][   T30] audit: type=1326 audit(2000525276.393:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1788 comm="syz.0.11982" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4cd119ce59 code=0x0
[ 1386.316939][ T1794] loop5: detected capacity change from 0 to 256
[ 1386.342211][ T1794] exfat: Deprecated parameter 'utf8'
[ 1386.401462][ T1794] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[ 1386.703984][ T1805] loop1: detected capacity change from 0 to 256
[ 1386.745852][ T1805] exfat: Deprecated parameter 'utf8'
[ 1386.786704][ T1805] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[ 1387.097756][ T1815] netlink: 'syz.3.11991': attribute type 21 has an invalid length.
[ 1387.340474][T26380] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1387.495820][ T1830] loop5: detected capacity change from 0 to 256
[ 1387.515581][T26380] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1387.521393][ T1830] FAT-fs (loop5): Directory bread(block 1285) failed
[ 1387.542243][T26380] usb 2-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config
[ 1387.561714][ T1830] FAT-fs (loop5): Directory bread(block 1286) failed
[ 1387.577693][T26380] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[ 1387.599628][ T1830] FAT-fs (loop5): Directory bread(block 1287) failed
[ 1387.619546][T26380] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[ 1387.649424][ T1830] FAT-fs (loop5): Directory bread(block 1288) failed
[ 1387.675440][T26380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24395, setting to 1024
[ 1387.728799][T26380] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[ 1387.743416][ T1830] FAT-fs (loop5): Directory bread(block 1285) failed
[ 1387.774766][T26380] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[ 1387.789913][ T1830] FAT-fs (loop5): Directory bread(block 1286) failed
[ 1387.820321][T26380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1387.822868][ T1830] FAT-fs (loop5): Directory bread(block 1287) failed
[ 1387.852795][T26380] usb 2-1: Product: syz
[ 1387.864391][ T1830] FAT-fs (loop5): Directory bread(block 1288) failed
[ 1387.870966][T26380] usb 2-1: Manufacturer: syz
[ 1387.886532][ T1830] FAT-fs (loop5): Directory bread(block 1285) failed
[ 1387.893808][T26380] usb 2-1: SerialNumber: syz
[ 1387.909836][ T1830] FAT-fs (loop5): Directory bread(block 1286) failed
[ 1387.947667][T26380] usb 2-1: config 0 descriptor??
[ 1387.966636][ T1816] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1387.976449][ T1816] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1387.997495][    C0] usb 2-1: NFC: Urb failure (status -71)
[ 1388.006975][    C0] usb 2-1: NFC: Urb failure (status -71)
[ 1388.034887][T26380] usb 2-1: NFC: Unable to get FW version
[ 1388.061690][T26380] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -71
[ 1388.243681][ T1812] loop4: detected capacity change from 0 to 32768
[ 1388.300898][ T1812] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1388.326226][T26380] usb 2-1: USB disconnect, device number 57
[ 1388.398016][ T1812] XFS (loop4): Ending clean mount
[ 1388.690107][ T1860] loop3: detected capacity change from 0 to 64
[ 1388.723225][ T1860] syz.3.12013: attempt to access beyond end of device
[ 1388.723225][ T1860] loop3: rw=0, sector=16777216, nr_sectors = 2 limit=64
[ 1388.760565][ T1860] Buffer I/O error on dev loop3, logical block 8388608, async page read
[ 1388.792502][ T1860] syz.3.12013: attempt to access beyond end of device
[ 1388.792502][ T1860] loop3: rw=0, sector=16777216, nr_sectors = 2 limit=64
[ 1388.806683][ T5780] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1388.842870][ T1860] Buffer I/O error on dev loop3, logical block 8388608, async page read
[ 1388.946622][ T1828] loop2: detected capacity change from 0 to 32768
[ 1389.028475][ T1828] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1389.071464][ T1873] loop5: detected capacity change from 0 to 2048
[ 1389.201259][ T1828] XFS (loop2): Ending clean mount
[ 1389.251563][ T1879] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1389.297971][ T1873] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1
[ 1389.404398][ T1873] Remounting filesystem read-only
[ 1389.555003][T21279] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1390.147286][ T1903] loop1: detected capacity change from 0 to 512
[ 1390.163999][ T1906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12030'.
[ 1390.177820][ T1903] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1390.228374][ T1903] EXT4-fs error (device loop1): mb_free_blocks:2046: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1390.247249][    C0] EXT4-fs (loop1): error count since last fsck: 1
[ 1390.253744][    C0] EXT4-fs (loop1): initial error at time 2000525280: mb_free_blocks:2046: inode 11: block 64
[ 1390.264069][    C0] EXT4-fs (loop1): last error at time 2000525280: mb_free_blocks:2046: inode 11: block 64
[ 1390.278626][ T1903] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.12028: corrupted inode contents
[ 1390.344663][ T1903] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1390.348879][ T1903] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #11: comm syz.1.12028: mark_inode_dirty error
[ 1390.419505][ T1903] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1390.420103][ T1903] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.12028: invalid indirect mapped block 1 (level 1)
[ 1390.500071][ T1903] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1390.500590][ T1903] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.12028: corrupted inode contents
[ 1390.583992][ T1903] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1390.584609][ T1903] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[ 1390.616514][ T1918] usb usb7: usbfs: process 1918 (syz.0.12035) did not claim interface 0 before use
[ 1390.636908][ T1903] loop1: lost filesystem error report for type 5 error -117
[ 1390.646824][ T1903] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.12028: corrupted inode contents
[ 1390.688727][ T1903] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1390.689241][ T1903] EXT4-fs error (device loop1): ext4_truncate:4690: inode #11: comm syz.1.12028: mark_inode_dirty error
[ 1390.721264][ T1903] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1390.721755][ T1903] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[ 1390.792525][ T1903] loop1: lost filesystem error report for type 5 error -117
[ 1390.793073][ T1903] EXT4-fs (loop1): 1 truncate cleaned up
[ 1390.840679][ T1928] netlink: 'syz.4.12039': attribute type 6 has an invalid length.
[ 1390.852759][ T1903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1390.899996][T26380] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1390.941126][ T1903] EXT4-fs error (device loop1): ext4_find_dest_de:2049: inode #2: block 13: comm syz.1.12028: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[ 1391.038261][T26425] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 1391.047393][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1391.062854][T26380] usb 4-1: Using ep0 maxpacket: 8
[ 1391.079069][T26380] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[ 1391.100250][T26380] usb 4-1: config 0 has no interface number 0
[ 1391.144688][ T1938] binder: 1937:1938 ioctl c0306201 2000000001c0 returned -22
[ 1391.162020][T26380] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1391.194710][T26380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1391.235979][ T1933] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1391.243245][T26380] usb 4-1: Product: syz
[ 1391.243995][T26425] usb 6-1: Using ep0 maxpacket: 32
[ 1391.257923][T26380] usb 4-1: Manufacturer: syz
[ 1391.279328][T26380] usb 4-1: SerialNumber: syz
[ 1391.292586][T26425] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 1391.314456][T26380] usb 4-1: config 0 descriptor??
[ 1391.315819][T26425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1391.362966][T26425] usb 6-1: Product: syz
[ 1391.370506][ T1942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12045'.
[ 1391.391439][T26425] usb 6-1: Manufacturer: syz
[ 1391.401157][T26425] usb 6-1: SerialNumber: syz
[ 1391.407061][ T1944] netlink: 'syz.2.12047': attribute type 4 has an invalid length.
[ 1391.422980][ T1944] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12047'.
[ 1391.443511][T26425] usb 6-1: config 0 descriptor??
[ 1391.449111][ T1944] .`: renamed from bond0 (while UP)
[ 1391.481651][T26425] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 1391.574369][T26380] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1391.608045][T26380] uvcvideo 4-1:0.31: Failed to initialize entity for entity 32774
[ 1391.642439][T26380] uvcvideo 4-1:0.31: Failed to register entities (-22).
[ 1391.864711][  T802] usb 4-1: USB disconnect, device number 57
[ 1391.902846][T26425] gspca_topro: reg_w err -71
[ 1391.968077][T26425] gspca_topro: Sensor soi763a
[ 1392.007519][T26425] usb 6-1: USB disconnect, device number 76
[ 1392.419914][ T1973] dvmrp1: entered allmulticast mode
[ 1392.525255][T26425] usb 3-1: new full-speed USB device number 75 using dummy_hcd
[ 1392.561204][ T1976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12063'.
[ 1392.578642][  T802] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1392.719528][T26425] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1392.749157][T26425] usb 3-1: not running at top speed; connect to a high speed hub
[ 1392.763576][  T802] usb 2-1: config index 0 descriptor too short (expected 1572, got 36)
[ 1392.781736][T26425] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1392.796020][  T802] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1392.817278][T26425] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1392.835602][  T802] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[ 1392.851567][T26425] usb 3-1: too many endpoints for config 1 interface 1 altsetting 23: 170, using maximum allowed: 30
[ 1392.873635][  T802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1392.899552][T26425] usb 3-1: config 1 interface 1 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 170
[ 1392.901044][  T802] usb 2-1: Product: syz
[ 1392.917466][ T1981] Process accounting paused
[ 1392.942917][T26425] usb 3-1: config 1 interface 1 has no altsetting 0
[ 1392.958210][ T1985] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12067'.
[ 1392.971547][T26425] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1392.971903][  T802] usb 2-1: Manufacturer: syz
[ 1392.998423][T26425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1393.023732][  T802] usb 2-1: SerialNumber: syz
[ 1393.030059][T26425] usb 3-1: Product: syz
[ 1393.049913][T26425] usb 3-1: Manufacturer: syz
[ 1393.069370][  T802] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input80
[ 1393.071167][T26425] usb 3-1: SerialNumber: syz
[ 1393.103327][ T1969] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1393.279411][  T802] bcm5974 2-1:1.0: could not read from device
[ 1393.326067][ T4981] bcm5974 2-1:1.0: could not read from device
[ 1393.371056][  T802] input: failed to attach handler mousedev to device input80, error: -5
[ 1393.381872][T26425] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22
[ 1393.407574][ T4981] bcm5974 2-1:1.0: could not read from device
[ 1393.426403][  T802] usb 2-1: USB disconnect, device number 58
[ 1393.446767][T26425] usb 3-1: USB disconnect, device number 75
[ 1393.500766][ T1995] loop4: detected capacity change from 0 to 512
[ 1393.533757][ T1995] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1393.576607][ T1995] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1393.627840][ T1995] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[ 1393.658965][ T1995] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[ 1393.672322][ T1995] EXT4-fs (loop4): 1 truncate cleaned up
[ 1393.688352][ T1995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1393.751104][ T1995] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 4: comm syz.4.12072: lblock 0 mapped to illegal pblock 4 (length 1)
[ 1393.768516][ T1995] EXT4-fs (loop4): Remounting filesystem read-only
[ 1393.855381][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1394.291138][ T2012] loop3: detected capacity change from 0 to 4096
[ 1394.339059][ T2012] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1394.389732][ T2012] NILFS (loop3): mounting unchecked fs
[ 1394.417067][ T2012] NILFS (loop3): recovery required for readonly filesystem
[ 1394.451534][ T2012] NILFS (loop3): write access will be enabled during recovery
[ 1394.488138][ T5717] udevd[5717]: incorrect nilfs2 checksum on /dev/loop3
[ 1394.552107][ T2012] NILFS (loop3): norecovery option specified, skipping roll-forward recovery
[ 1394.667969][ T2012] NILFS (loop3): couldn't remount because the filesystem is in an incomplete recovery state
[ 1394.715816][ T5717] udevd[5717]: incorrect nilfs2 checksum on /dev/loop3
[ 1394.746543][ T1999] loop5: detected capacity change from 0 to 32768
[ 1394.812273][ T1999] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1394.908688][ T1999] XFS (loop5): Ending clean mount
[ 1395.246755][ T5786] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1395.725870][ T2041] loop1: detected capacity change from 0 to 32768
[ 1395.768290][ T2060] netlink: 'syz.4.12101': attribute type 4 has an invalid length.
[ 1395.801799][ T2060] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12101'.
[ 1395.820065][ T2060] .`: renamed from bond0 (while UP)
[ 1395.888601][ T2063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12102'.
[ 1396.339280][  T803] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1396.437617][ T2083] loop4: detected capacity change from 0 to 64
[ 1396.512841][  T803] usb 6-1: config index 0 descriptor too short (expected 1572, got 36)
[ 1396.539277][  T803] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1396.574969][  T803] usb 6-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[ 1396.620932][  T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1396.646698][ T2084] bridge0: entered allmulticast mode
[ 1396.649187][  T803] usb 6-1: Product: syz
[ 1396.683725][  T803] usb 6-1: Manufacturer: syz
[ 1396.707266][  T803] usb 6-1: SerialNumber: syz
[ 1396.711593][ T2084] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[ 1396.765925][  T803] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input81
[ 1396.965707][ T4981] bcm5974 6-1:1.0: could not read from device
[ 1396.992949][ T2096] binder: 2095:2096 ioctl c0306201 0 returned -14
[ 1397.004222][  T803] bcm5974 6-1:1.0: could not read from device
[ 1397.044734][ T4981] bcm5974 6-1:1.0: could not read from device
[ 1397.125337][  T803] input: failed to attach handler mousedev to device input81, error: -5
[ 1397.165207][ T4981] bcm5974 6-1:1.0: could not read from device
[ 1397.178904][  T803] usb 6-1: USB disconnect, device number 77
[ 1397.296541][ T2110] netlink: 'syz.2.12125': attribute type 9 has an invalid length.
[ 1397.315151][ T2110] netlink: 'syz.2.12125': attribute type 7 has an invalid length.
[ 1397.348127][ T2110] netlink: 'syz.2.12125': attribute type 8 has an invalid length.
[ 1397.503412][ T2116] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12128'.
[ 1397.536720][T26380] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[ 1397.555554][ T2116] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12128'.
[ 1397.606519][ T2114] loop3: detected capacity change from 0 to 4096
[ 1397.673851][ T2114] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[ 1397.732042][T26380] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1397.760066][T26380] usb 2-1: not running at top speed; connect to a high speed hub
[ 1397.762200][ T2114] ntfs3(loop3): Failed to load $Extend (-22).
[ 1397.800998][T26380] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1397.823087][ T2114] ntfs3(loop3): Failed to initialize $Extend.
[ 1397.845685][T26380] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1397.890367][T26380] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[ 1397.920266][T26380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1397.950426][T26380] usb 2-1: Product: syz
[ 1397.965477][T26380] usb 2-1: Manufacturer: syz
[ 1397.987511][T26380] usb 2-1: SerialNumber: syz
[ 1398.272123][ T2134] loop3: detected capacity change from 0 to 512
[ 1398.276878][T26380] usb 2-1: 3:0: cannot get min/max values for control 4 (id 3)
[ 1398.295977][ T2134] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1398.321647][T26380] usb 2-1: 3:0: cannot get min/max values for control 8 (id 3)
[ 1398.351752][T26380] usb 2-1: 3:0: failed to get current value for ch 0 (-71)
[ 1398.360589][ T2137] loop5: detected capacity change from 0 to 256
[ 1398.366263][ T2134] EXT4-fs error (device loop3): mb_free_blocks:2046: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1398.383945][T26380] usb 2-1: 3:0: failed to get current value for ch 0 (-71)
[ 1398.401760][    C1] EXT4-fs (loop3): error count since last fsck: 1
[ 1398.408245][    C1] EXT4-fs (loop3): initial error at time 2000525287: mb_free_blocks:2046: inode 11: block 64
[ 1398.410790][T26380] usb 2-1: 3:0: cannot get min/max values for control 11 (id 3)
[ 1398.418530][    C1] EXT4-fs (loop3): last error at time 2000525287: mb_free_blocks:2046: inode 11: block 64
[ 1398.468122][ T2134] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.12136: corrupted inode contents
[ 1398.488490][ T2139] : entered promiscuous mode
[ 1398.512844][ T2137] FAT-fs (loop5): Directory bread(block 64) failed
[ 1398.516281][ T2134] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1398.524932][T26380] usb 2-1: 3:0: cannot get min/max values for control 12 (id 3)
[ 1398.548737][ T2137] FAT-fs (loop5): Directory bread(block 65) failed
[ 1398.555772][ T2134] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #11: comm syz.3.12136: mark_inode_dirty error
[ 1398.568447][ T2137] FAT-fs (loop5): Directory bread(block 66) failed
[ 1398.590809][ T2137] FAT-fs (loop5): Directory bread(block 67) failed
[ 1398.616773][ T2134] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1398.617962][ T2137] FAT-fs (loop5): Directory bread(block 68) failed
[ 1398.620586][ T2134] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.12136: invalid indirect mapped block 1 (level 1)
[ 1398.642526][ T2137] FAT-fs (loop5): Directory bread(block 69) failed
[ 1398.663597][ T2134] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1398.664128][ T2134] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.12136: corrupted inode contents
[ 1398.705385][ T2137] FAT-fs (loop5): Directory bread(block 70) failed
[ 1398.716490][ T2134] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1398.717029][ T2134] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[ 1398.735939][ T2137] FAT-fs (loop5): Directory bread(block 71) failed
[ 1398.743714][ T2137] FAT-fs (loop5): Directory bread(block 72) failed
[ 1398.763201][T26380] usb 2-1: USB disconnect, device number 59
[ 1398.794226][ T2137] FAT-fs (loop5): Directory bread(block 73) failed
[ 1398.812208][ T2134] loop3: lost filesystem error report for type 5 error -117
[ 1398.812712][ T2134] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.12136: corrupted inode contents
[ 1398.823776][ T6282] udevd[6282]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1398.926227][ T2134] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1398.926764][ T2134] EXT4-fs error (device loop3): ext4_truncate:4690: inode #11: comm syz.3.12136: mark_inode_dirty error
[ 1398.979081][ T2134] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1398.980088][ T2134] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[ 1399.039247][ T2134] loop3: lost filesystem error report for type 5 error -117
[ 1399.041163][ T2134] EXT4-fs (loop3): 1 truncate cleaned up
[ 1399.098875][ T2134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1399.190615][ T2122] loop2: detected capacity change from 0 to 32768
[ 1399.211844][ T2122] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12131 (2122)
[ 1399.273069][ T2122] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1399.274170][ T2134] EXT4-fs error (device loop3): ext4_find_dest_de:2049: inode #2: block 13: comm syz.3.12136: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[ 1399.295861][ T2122] BTRFS info (device loop2): using sha256 checksum algorithm
[ 1399.356414][ T2149] loop4: detected capacity change from 0 to 8
[ 1399.360724][ T2151] loop1: detected capacity change from 0 to 512
[ 1399.453919][ T2122] BTRFS info (device loop2): enabling ssd optimizations
[ 1399.501016][ T2151] EXT4-fs (loop1): revision level too high, forcing read-only mode
[ 1399.522001][ T2122] BTRFS info (device loop2): turning on async discard
[ 1399.567663][ T2151] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[ 1399.578351][ T2122] BTRFS info (device loop2): enabling free space tree
[ 1399.597514][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1399.648444][ T2151] System zones: 0-1, 15-15, 18-18, 34-34
[ 1399.701929][ T2151] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 1399.737982][ T2151] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[ 1399.768168][ T2151] EXT4-fs warning (device loop1): ext4_enable_quotas:7265: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1399.833008][ T2151] EXT4-fs (loop1): Cannot turn on quotas: error -22
[ 1399.874210][ T2151] EXT4-fs (loop1): 1 truncate cleaned up
[ 1399.885141][ T2172] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 1399.901088][ T2151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1399.985965][ T2177] netlink: 'syz.5.12149': attribute type 39 has an invalid length.
[ 1400.019855][T21279] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1400.103539][ T2151] fscrypt (loop1, inode 16): Error -61 getting encryption context
[ 1400.186622][T26418] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 1400.296729][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1400.397950][T26418] usb 1-1: config index 0 descriptor too short (expected 1572, got 36)
[ 1400.438759][T26418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1400.483261][T26418] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[ 1400.513530][T26418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1400.548342][T26418] usb 1-1: Product: syz
[ 1400.563699][T26418] usb 1-1: Manufacturer: syz
[ 1400.591723][T26418] usb 1-1: SerialNumber: syz
[ 1400.726224][T26418] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input82
[ 1400.933269][ T4981] bcm5974 1-1:1.0: could not read from device
[ 1401.005369][T26418] bcm5974 1-1:1.0: could not read from device
[ 1401.051787][ T4981] bcm5974 1-1:1.0: could not read from device
[ 1401.117170][T26418] input: failed to attach handler mousedev to device input82, error: -5
[ 1401.182659][ T4981] bcm5974 1-1:1.0: could not read from device
[ 1401.206427][ T4981] bcm5974 1-1:1.0: could not read from device
[ 1401.209822][T26418] usb 1-1: USB disconnect, device number 75
[ 1401.466974][ T2209] loop4: detected capacity change from 0 to 8
[ 1401.515332][ T2209] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1401.552615][ T2209] SQUASHFS error: Failed to read block 0x1dd: -5
[ 1401.590614][ T2209] SQUASHFS error: Unable to read metadata cache entry [1db]
[ 1401.609850][ T2209] SQUASHFS error: Unable to read inode 0xa7
[ 1401.996689][ T2222] netlink: 'syz.0.12171': attribute type 39 has an invalid length.
[ 1402.030615][ T2197] loop3: detected capacity change from 0 to 32768
[ 1402.101163][ T2197] JBD2: Ignoring recovery information on journal
[ 1402.123733][ T2220] loop4: detected capacity change from 0 to 4096
[ 1402.159910][ T2227] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[ 1402.164799][ T2220] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[ 1402.248367][ T2231] netlink: 108 bytes leftover after parsing attributes in process `syz.5.12175'.
[ 1402.269044][ T2231] netlink: 108 bytes leftover after parsing attributes in process `syz.5.12175'.
[ 1402.294889][ T2197] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1402.420859][ T2220] ntfs3(loop4): ino=19, mi_enum_attr
[ 1402.449847][ T2220] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 1402.542053][ T2205] loop1: detected capacity change from 0 to 32768
[ 1402.606031][ T2205] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1402.607638][ T2220] ntfs3(loop4): failed to convert "c46c" to iso8859-9
[ 1402.709284][ T2220] ntfs3(loop4): ino=20, mi_enum_attr
[ 1402.715912][ T2205] XFS (loop1): Ending clean mount
[ 1402.910997][ T2250] loop2: detected capacity change from 0 to 512
[ 1402.918719][ T2250] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1403.000191][ T2254] cgroup: release_agent respecified
[ 1403.024919][ T2250] EXT4-fs error (device loop2): mb_free_blocks:2046: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1403.050787][    C1] EXT4-fs (loop2): error count since last fsck: 1
[ 1403.057267][    C1] EXT4-fs (loop2): initial error at time 2000525292: mb_free_blocks:2046: inode 11: block 64
[ 1403.067507][    C1] EXT4-fs (loop2): last error at time 2000525292: mb_free_blocks:2046: inode 11: block 64
[ 1403.136870][ T2250] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.12180: corrupted inode contents
[ 1403.190125][ T5771] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1403.224313][ T2250] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1403.226599][ T2250] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #11: comm syz.2.12180: mark_inode_dirty error
[ 1403.296082][ T5781] ocfs2: Unmounting device (7,3) on (node local)
[ 1403.329420][ T2250] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1403.330023][ T2250] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.12180: invalid indirect mapped block 1 (level 1)
[ 1403.362236][ T2250] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1403.366061][ T2250] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.12180: corrupted inode contents
[ 1403.490897][ T2250] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1403.491502][ T2250] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[ 1403.559830][ T2250] loop2: lost filesystem error report for type 5 error -117
[ 1403.560356][ T2250] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.12180: corrupted inode contents
[ 1403.675604][ T2250] EXT4-fs error (device loop2): ext4_truncate:4690: inode #11: comm syz.2.12180: mark_inode_dirty error
[ 1403.759551][ T2250] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[ 1403.805793][ T2250] loop2: lost filesystem error report for type 5 error -117
[ 1403.810131][ T2250] EXT4-fs (loop2): 1 truncate cleaned up
[ 1403.929504][ T2250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1404.050018][ T2250] EXT4-fs error (device loop2): ext4_find_dest_de:2049: inode #2: block 13: comm syz.2.12180: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[ 1404.311084][T21279] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1405.186148][ T2317] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1405.659752][ T2299] loop5: detected capacity change from 0 to 32768
[ 1405.736296][ T2299] dmapctl: leaf value 127 too large at index 344
[ 1405.765289][ T2329] loop4: detected capacity change from 0 to 4096
[ 1405.773629][ T2299] ERROR: (device loop5): dbFindCtl: Corrupt dmapctl page
[ 1405.773629][ T2299] 
[ 1405.851197][T26418] usb 3-1: new low-speed USB device number 76 using dummy_hcd
[ 1406.002633][ T2329] ntfs3(loop4): ino=b, Correct links count -> 1.
[ 1406.032238][ T2329] ntfs3(loop4): ino=18, mi_enum_attr
[ 1406.052956][ T2329] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 1406.077507][T26418] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1406.113732][T26418] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1406.153918][T26418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1406.442558][T26418] usb 3-1: string descriptor 0 read error: -71
[ 1406.478111][T26418] hub 3-1:32.0: bad descriptor, ignoring hub
[ 1406.514390][T26418] hub 3-1:32.0: probe with driver hub failed with error -5
[ 1406.606640][ T2354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12228'.
[ 1406.651403][ T2354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12228'.
[ 1406.771627][T26418] usb 3-1: USB disconnect, device number 76
[ 1406.789293][ T2361] netlink: 'syz.5.12224': attribute type 3 has an invalid length.
[ 1406.818242][ T2361] netlink: 'syz.5.12224': attribute type 3 has an invalid length.
[ 1406.844277][ T2361] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12224'.
[ 1406.862831][ T2356] erspan1: entered promiscuous mode
[ 1406.881399][ T2356] erspan1: entered allmulticast mode
[ 1407.214468][ T2375] tmpfs: Bad value for 'mpol'
[ 1407.396014][ T2384] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1407.931939][ T2408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12253'.
[ 1407.964964][ T2410] loop5: detected capacity change from 0 to 512
[ 1407.974753][T14229] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1407.999021][ T2410] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1408.061459][ T2410] EXT4-fs error (device loop5): mb_free_blocks:2046: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1408.084566][    C1] EXT4-fs (loop5): error count since last fsck: 1
[ 1408.091059][    C1] EXT4-fs (loop5): initial error at time 2000525296: mb_free_blocks:2046: inode 11: block 64
[ 1408.101328][    C1] EXT4-fs (loop5): last error at time 2000525296: mb_free_blocks:2046: inode 11: block 64
[ 1408.130889][ T2410] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #11: comm syz.5.12254: corrupted inode contents
[ 1408.172340][T14229] usb 2-1: config 0 has no interfaces?
[ 1408.181331][ T2410] fserror_report: 2 callbacks suppressed
[ 1408.181688][ T2410] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1408.189265][T14229] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[ 1408.202731][ T2410] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #11: comm syz.5.12254: mark_inode_dirty error
[ 1408.226509][T14229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1408.255632][T14229] usb 2-1: Product: syz
[ 1408.275098][T14229] usb 2-1: Manufacturer: syz
[ 1408.296322][ T2410] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1408.296860][T14229] usb 2-1: SerialNumber: syz
[ 1408.296887][ T2410] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.12254: invalid indirect mapped block 1 (level 1)
[ 1408.336846][T14229] usb 2-1: config 0 descriptor??
[ 1408.377571][ T2410] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1408.378073][ T2410] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #11: comm syz.5.12254: corrupted inode contents
[ 1408.434640][ T2410] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1408.435198][ T2410] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[ 1408.482099][ T2410] loop5: lost filesystem error report for type 5 error -117
[ 1408.482752][ T2410] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #11: comm syz.5.12254: corrupted inode contents
[ 1408.523464][ T2430] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12261'.
[ 1408.526232][ T2410] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1408.545304][ T2410] EXT4-fs error (device loop5): ext4_truncate:4690: inode #11: comm syz.5.12254: mark_inode_dirty error
[ 1408.607236][ T2410] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1408.607854][ T2410] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[ 1408.635757][T26418] usb 2-1: USB disconnect, device number 60
[ 1408.659851][ T2410] loop5: lost filesystem error report for type 5 error -117
[ 1408.660417][ T2410] EXT4-fs (loop5): 1 truncate cleaned up
[ 1408.685676][ T2410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1408.779818][ T2410] EXT4-fs error (device loop5): ext4_find_dest_de:2049: inode #2: block 13: comm syz.5.12254: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[ 1408.899319][ T5786] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1408.947989][ T2446] loop3: detected capacity change from 0 to 256
[ 1408.951702][  T803] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1409.142874][T26419] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1409.150761][  T803] usb 5-1: Using ep0 maxpacket: 8
[ 1409.170702][  T803] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1409.191171][  T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1409.217540][  T803] usb 5-1: Product: syz
[ 1409.232705][  T803] usb 5-1: Manufacturer: syz
[ 1409.248343][  T803] usb 5-1: SerialNumber: syz
[ 1409.273546][  T803] usb 5-1: config 0 descriptor??
[ 1409.294123][  T803] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1409.327173][T26419] usb 3-1: config index 0 descriptor too short (expected 1572, got 36)
[ 1409.350554][T26419] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1409.400285][T26419] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[ 1409.423568][T26419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1409.442781][T26419] usb 3-1: Product: syz
[ 1409.453639][T26419] usb 3-1: Manufacturer: syz
[ 1409.463542][T26419] usb 3-1: SerialNumber: syz
[ 1409.536880][T26419] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input83
[ 1409.720164][ T4981] bcm5974 3-1:1.0: could not read from device
[ 1409.734076][  T803] gspca_sq930x: ucbus_write failed -71
[ 1409.754279][  T803] sq930x 5-1:0.0: probe with driver sq930x failed with error -71
[ 1409.767125][T26419] bcm5974 3-1:1.0: could not read from device
[ 1409.790978][  T803] usb 5-1: USB disconnect, device number 64
[ 1409.919631][ T2478] netlink: 260 bytes leftover after parsing attributes in process `syz.3.12281'.
[ 1409.933092][ T4981] bcm5974 3-1:1.0: could not read from device
[ 1410.020223][T26419] input: failed to attach handler mousedev to device input83, error: -5
[ 1410.034560][ T4981] bcm5974 3-1:1.0: could not read from device
[ 1410.048515][ T4981] bcm5974 3-1:1.0: could not read from device
[ 1410.062445][T26419] usb 3-1: USB disconnect, device number 77
[ 1410.430986][ T2489] loop4: detected capacity change from 0 to 512
[ 1410.458420][ T2489] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1410.499468][ T2489] EXT4-fs error (device loop4): mb_free_blocks:2046: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1410.521294][    C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1410.527787][    C1] EXT4-fs (loop4): initial error at time 2000525299: mb_free_blocks:2046: inode 11: block 64
[ 1410.538106][    C1] EXT4-fs (loop4): last error at time 2000525299: mb_free_blocks:2046: inode 11: block 64
[ 1410.619221][ T2489] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.12282: corrupted inode contents
[ 1410.687412][ T2489] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1410.687945][ T2489] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #11: comm syz.4.12282: mark_inode_dirty error
[ 1410.694189][ T2503] usb usb1: usbfs: process 2503 (syz.0.12290) did not claim interface 0 before use
[ 1410.741711][ T2489] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1410.748675][ T2489] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.12282: invalid indirect mapped block 1 (level 1)
[ 1410.831541][ T2489] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1410.832065][ T2489] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.12282: corrupted inode contents
[ 1410.910942][ T2489] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1410.911487][ T2489] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[ 1410.993857][ T2489] loop4: lost filesystem error report for type 5 error -117
[ 1410.994361][ T2489] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.12282: corrupted inode contents
[ 1411.069235][ T2489] EXT4-fs error (device loop4): ext4_truncate:4690: inode #11: comm syz.4.12282: mark_inode_dirty error
[ 1411.117008][ T2489] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[ 1411.155240][ T2489] loop4: lost filesystem error report for type 5 error -117
[ 1411.158755][ T2489] EXT4-fs (loop4): 1 truncate cleaned up
[ 1411.221546][ T2489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1411.327453][ T2526] loop3: detected capacity change from 0 to 128
[ 1411.399870][ T2489] EXT4-fs error (device loop4): ext4_find_dest_de:2049: inode #2: block 13: comm syz.4.12282: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[ 1411.642013][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1411.901523][T26419] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1411.957913][ T2558] loop5: detected capacity change from 0 to 256
[ 1412.076712][ T2558] FAT-fs (loop5): error, clusters badly computed (0 != 128)
[ 1412.098407][T26419] usb 4-1: config index 0 descriptor too short (expected 1572, got 36)
[ 1412.110411][ T2558] FAT-fs (loop5): Filesystem has been set read-only
[ 1412.123671][T26419] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1412.139921][ T2558] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1412.142999][T26419] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[ 1412.171188][T26419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1412.211757][T26419] usb 4-1: Product: syz
[ 1412.233089][T26419] usb 4-1: Manufacturer: syz
[ 1412.253130][T26419] usb 4-1: SerialNumber: syz
[ 1412.300101][T26419] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input84
[ 1412.504662][ T4981] bcm5974 4-1:1.0: could not read from device
[ 1412.547465][T26419] bcm5974 4-1:1.0: could not read from device
[ 1412.585490][ T4981] bcm5974 4-1:1.0: could not read from device
[ 1412.615914][T26419] input: failed to attach handler mousedev to device input84, error: -5
[ 1412.631031][ T2583] loop4: detected capacity change from 0 to 512
[ 1412.640940][ T4981] bcm5974 4-1:1.0: could not read from device
[ 1412.644655][ T2584] netlink: 'syz.1.12323': attribute type 3 has an invalid length.
[ 1412.661691][T26419] usb 4-1: USB disconnect, device number 58
[ 1412.679145][ T2583] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1412.689537][ T2584] netlink: 'syz.1.12323': attribute type 3 has an invalid length.
[ 1412.716685][ T2584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12323'.
[ 1412.737905][ T2583] EXT4-fs error (device loop4): mb_free_blocks:2046: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1412.754962][    C0] EXT4-fs (loop4): error count since last fsck: 1
[ 1412.761439][    C0] EXT4-fs (loop4): initial error at time 2000525301: mb_free_blocks:2046: inode 11: block 64
[ 1412.771752][    C0] EXT4-fs (loop4): last error at time 2000525301: mb_free_blocks:2046: inode 11: block 64
[ 1412.778023][ T2583] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.12322: corrupted inode contents
[ 1412.892018][ T2583] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #11: comm syz.4.12322: mark_inode_dirty error
[ 1412.935819][ T2589] program syz.5.12325 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1412.969435][ T2589] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1412.977920][ T2583] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.12322: invalid indirect mapped block 1 (level 1)
[ 1413.031458][ T2583] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.12322: corrupted inode contents
[ 1413.088641][ T2583] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[ 1413.123742][ T2583] loop4: lost filesystem error report for type 5 error -117
[ 1413.125556][ T2583] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.12322: corrupted inode contents
[ 1413.190292][ T2583] EXT4-fs error (device loop4): ext4_truncate:4690: inode #11: comm syz.4.12322: mark_inode_dirty error
[ 1413.229614][ T2583] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[ 1413.255269][ T2583] loop4: lost filesystem error report for type 5 error -117
[ 1413.255856][ T2583] EXT4-fs (loop4): 1 truncate cleaned up
[ 1413.291994][ T2583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1413.463085][ T2583] EXT4-fs error (device loop4): ext4_find_dest_de:2049: inode #2: block 13: comm syz.4.12322: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[ 1413.567308][T26425] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1413.653326][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1413.716056][ T2611] loop3: detected capacity change from 0 to 164
[ 1413.752673][T26425] usb 6-1: config 0 has no interfaces?
[ 1413.774418][T26425] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[ 1413.784130][ T2611] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1413.820099][T26425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1413.847746][T26425] usb 6-1: Product: syz
[ 1413.858157][T26425] usb 6-1: Manufacturer: syz
[ 1413.870142][T26425] usb 6-1: SerialNumber: syz
[ 1413.906582][T26425] usb 6-1: config 0 descriptor??
[ 1414.020061][ T2621] loop2: detected capacity change from 0 to 256
[ 1414.176302][ T2621] FAT-fs (loop2): Directory bread(block 64) failed
[ 1414.203341][T14229] usb 6-1: USB disconnect, device number 78
[ 1414.220921][ T2621] FAT-fs (loop2): Directory bread(block 65) failed
[ 1414.241317][ T2621] FAT-fs (loop2): Directory bread(block 66) failed
[ 1414.255611][ T2621] FAT-fs (loop2): Directory bread(block 67) failed
[ 1414.295293][ T2621] FAT-fs (loop2): Directory bread(block 68) failed
[ 1414.327247][ T2621] FAT-fs (loop2): Directory bread(block 69) failed
[ 1414.342312][ T2621] FAT-fs (loop2): Directory bread(block 70) failed
[ 1414.366007][ T2621] FAT-fs (loop2): Directory bread(block 71) failed
[ 1414.388686][ T2621] FAT-fs (loop2): Directory bread(block 72) failed
[ 1414.398020][ T2621] FAT-fs (loop2): Directory bread(block 73) failed
[ 1414.561308][  T802] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[ 1414.713671][ T2652] loop2: detected capacity change from 0 to 512
[ 1414.729860][ T2652] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1414.759221][  T802] usb 2-1: config 0 has an invalid interface number: 200 but max is 0
[ 1414.778439][  T802] usb 2-1: config 0 has no interface number 0
[ 1414.800274][ T2652] EXT4-fs error (device loop2): mb_free_blocks:2046: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1414.801893][  T802] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85
[ 1414.827340][  T802] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1414.828330][    C1] EXT4-fs (loop2): error count since last fsck: 1
[ 1414.837439][  T802] usb 2-1: config 0 interface 200 has no altsetting 0
[ 1414.843741][    C1] EXT4-fs (loop2): initial error at time 2000525303: mb_free_blocks:2046: inode 11: block 64
[ 1414.843808][    C1] EXT4-fs (loop2): last error at time 2000525303: mb_free_blocks:2046: inode 11: block 64
[ 1414.854065][  T802] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[ 1414.880345][  T802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1414.888507][  T802] usb 2-1: Product: syz
[ 1414.892923][  T802] usb 2-1: Manufacturer: syz
[ 1414.897561][  T802] usb 2-1: SerialNumber: syz
[ 1414.904378][ T2652] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.12348: corrupted inode contents
[ 1414.933220][  T802] usb 2-1: config 0 descriptor??
[ 1414.969389][ T2652] fserror_report: 8 callbacks suppressed
[ 1414.969850][ T2652] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1415.008535][ T2652] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #11: comm syz.2.12348: mark_inode_dirty error
[ 1415.054167][ T2652] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1415.054907][ T2652] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.12348: invalid indirect mapped block 1 (level 1)
[ 1415.115268][ T2652] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1415.115939][ T2652] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.12348: corrupted inode contents
[ 1415.167691][ T2652] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1415.168482][ T2652] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[ 1415.201707][  T802] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input85
[ 1415.220449][ T2652] loop2: lost filesystem error report for type 5 error -117
[ 1415.220983][ T2652] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.12348: corrupted inode contents
[ 1415.247157][T26380] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 1415.265196][  T802] usb 2-1: USB disconnect, device number 61
[ 1415.279809][ T2652] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1415.287984][ T2652] EXT4-fs error (device loop2): ext4_truncate:4690: inode #11: comm syz.2.12348: mark_inode_dirty error
[ 1415.320616][ T2652] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1415.322444][ T2652] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[ 1415.364284][ T2652] loop2: lost filesystem error report for type 5 error -117
[ 1415.365540][ T2652] EXT4-fs (loop2): 1 truncate cleaned up
[ 1415.422826][ T2652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1415.435554][T26380] usb 1-1: Using ep0 maxpacket: 16
[ 1415.447172][T26380] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1415.467460][T26380] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1415.511043][T26380] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1415.550879][T26380] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1415.571626][ T2652] EXT4-fs error (device loop2): ext4_find_dest_de:2049: inode #2: block 13: comm syz.2.12348: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[ 1415.600627][T26380] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[ 1415.621064][T26380] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1415.636553][T26380] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1415.656826][T26380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1415.702962][T26380] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[ 1415.788980][T21279] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1415.932161][T26380] scsi host1: usb-storage 1-1:1.0
[ 1416.073335][ T2697] loop4: detected capacity change from 0 to 256
[ 1416.145227][T26425] usb 1-1: USB disconnect, device number 76
[ 1416.229085][ T2697] FAT-fs (loop4): Directory bread(block 64) failed
[ 1416.253735][ T2697] FAT-fs (loop4): Directory bread(block 65) failed
[ 1416.280923][ T2697] FAT-fs (loop4): Directory bread(block 66) failed
[ 1416.288295][ T2703] loop1: detected capacity change from 0 to 256
[ 1416.319578][ T2697] FAT-fs (loop4): Directory bread(block 67) failed
[ 1416.345195][ T2697] FAT-fs (loop4): Directory bread(block 68) failed
[ 1416.371775][ T2697] FAT-fs (loop4): Directory bread(block 69) failed
[ 1416.387197][ T2703] FAT-fs (loop1): Directory bread(block 64) failed
[ 1416.396201][ T2697] FAT-fs (loop4): Directory bread(block 70) failed
[ 1416.396487][ T2675] loop3: detected capacity change from 0 to 32768
[ 1416.403676][ T2703] FAT-fs (loop1): Directory bread(block 65) failed
[ 1416.416016][ T2697] FAT-fs (loop4): Directory bread(block 71) failed
[ 1416.423386][ T2697] FAT-fs (loop4): Directory bread(block 72) failed
[ 1416.435708][ T2675] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.12358 (2675)
[ 1416.461904][ T2697] FAT-fs (loop4): Directory bread(block 73) failed
[ 1416.468973][ T2703] FAT-fs (loop1): Directory bread(block 66) failed
[ 1416.485492][ T2703] FAT-fs (loop1): Directory bread(block 67) failed
[ 1416.513035][ T2703] FAT-fs (loop1): Directory bread(block 68) failed
[ 1416.546877][ T2703] FAT-fs (loop1): Directory bread(block 69) failed
[ 1416.555971][ T2675] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1416.582419][ T2703] FAT-fs (loop1): Directory bread(block 70) failed
[ 1416.583193][ T2710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12369'.
[ 1416.599034][ T2675] BTRFS info (device loop3): using sha256 checksum algorithm
[ 1416.614295][ T2703] FAT-fs (loop1): Directory bread(block 71) failed
[ 1416.634075][ T2703] FAT-fs (loop1): Directory bread(block 72) failed
[ 1416.655676][ T2703] FAT-fs (loop1): Directory bread(block 73) failed
[ 1416.824166][ T2675] BTRFS info (device loop3): enabling ssd optimizations
[ 1416.874988][ T2675] BTRFS info (device loop3): turning on async discard
[ 1416.908087][ T2675] BTRFS info (device loop3): enabling free space tree
[ 1417.211878][ T5781] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1417.498143][ T2756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12383'.
[ 1417.549159][ T2756] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12383'.
[ 1418.289077][ T2787] loop4: detected capacity change from 0 to 512
[ 1418.318247][ T2787] EXT4-fs: Ignoring removed orlov option
[ 1418.407323][ T2787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1418.481205][ T2787] ext4 filesystem being mounted at /2077/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1418.601062][ T2787] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:337: inode #15: comm syz.4.12393: verity file corrupted; can't find descriptor
[ 1418.660935][ T2787] EXT4-fs (loop4): Remounting filesystem read-only
[ 1418.704922][ T2787] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size
[ 1418.789291][ T2809] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12403'.
[ 1418.918587][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1419.002301][ T2817] loop1: detected capacity change from 0 to 256
[ 1419.011572][ T2816] IPVS: length: 126 != 8
[ 1419.125232][ T2817] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[ 1419.329427][ T2827] netlink: 'syz.5.12410': attribute type 49 has an invalid length.
[ 1419.331994][ T2828] loop2: detected capacity change from 0 to 64
[ 1419.370065][ T2828] MINIX-fs: mounting file system with errors, running fsck is recommended
[ 1419.414536][ T2828] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[ 1419.478311][ T2827] bond0: (slave bond_slave_0): Releasing backup interface
[ 1419.618558][ T2827] bond_slave_0: entered promiscuous mode
[ 1419.641067][ T2827] bond_slave_0: entered allmulticast mode
[ 1420.829780][ T2841] loop4: detected capacity change from 0 to 32768
[ 1420.879708][ T2841] JBD2: Ignoring recovery information on journal
[ 1420.887012][ T2891] fjî: entered promiscuous mode
[ 1420.982887][ T2841] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1421.106998][ T2902] loop1: detected capacity change from 0 to 256
[ 1421.281716][ T2902] FAT-fs (loop1): Directory bread(block 64) failed
[ 1421.325091][ T2902] FAT-fs (loop1): Directory bread(block 65) failed
[ 1421.363385][ T2902] FAT-fs (loop1): Directory bread(block 66) failed
[ 1421.397630][ T2902] FAT-fs (loop1): Directory bread(block 67) failed
[ 1421.435934][ T2902] FAT-fs (loop1): Directory bread(block 68) failed
[ 1421.470971][ T2902] FAT-fs (loop1): Directory bread(block 69) failed
[ 1421.499150][ T2902] FAT-fs (loop1): Directory bread(block 70) failed
[ 1421.525516][ T2902] FAT-fs (loop1): Directory bread(block 71) failed
[ 1421.549886][ T2902] FAT-fs (loop1): Directory bread(block 72) failed
[ 1421.565684][ T2902] FAT-fs (loop1): Directory bread(block 73) failed
[ 1421.784653][ T5780] ocfs2: Unmounting device (7,4) on (node local)
[ 1421.957751][ T2924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1422.146633][ T2933] QAT: failed to copy from user cfg_data.
[ 1423.410675][T26380] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1423.471716][ T2978] loop1: detected capacity change from 0 to 1024
[ 1423.595147][ T2982] fjî: entered promiscuous mode
[ 1423.603603][T26380] usb 6-1: Using ep0 maxpacket: 16
[ 1423.642932][T26380] usb 6-1: config 0 has an invalid interface number: 246 but max is 0
[ 1423.657792][ T2978] hfsplus: found bad thread record in catalog
[ 1423.662738][T26380] usb 6-1: config 0 has no interface number 0
[ 1423.689202][T26380] usb 6-1: config 0 interface 246 has no altsetting 0
[ 1423.718738][T26380] usb 6-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27
[ 1423.734651][T26380] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1423.745134][ T2978] hfsplus: found bad thread record in catalog
[ 1423.768043][T26380] usb 6-1: Product: syz
[ 1423.787736][T26380] usb 6-1: Manufacturer: syz
[ 1423.800666][ T2978] hfsplus: found bad thread record in catalog
[ 1423.814060][T26380] usb 6-1: SerialNumber: syz
[ 1423.844462][T26380] usb 6-1: config 0 descriptor??
[ 1424.023942][T21067] hfsplus: found bad thread record in catalog
[ 1424.166411][T26380] usb 6-1: USB disconnect, device number 79
[ 1424.486593][ T3010] loop3: detected capacity change from 0 to 256
[ 1424.560330][ T3010] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[ 1424.686530][ T3014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1425.041728][ T3020] loop5: detected capacity change from 0 to 2048
[ 1425.123846][ T3029] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1425.346334][ T3006] loop4: detected capacity change from 0 to 32768
[ 1425.365268][ T3006] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.12478 (3006)
[ 1425.449076][ T3006] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1425.483839][ T3006] BTRFS info (device loop4): using sha256 checksum algorithm
[ 1425.612438][T26380] usb 3-1: new full-speed USB device number 78 using dummy_hcd
[ 1425.672747][ T3006] BTRFS info (device loop4): enabling ssd optimizations
[ 1425.711399][ T3006] BTRFS info (device loop4): turning on async discard
[ 1425.769995][ T3006] BTRFS info (device loop4): enabling free space tree
[ 1425.788148][T26380] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1425.822218][T26380] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[ 1425.846256][T26380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1425.877936][T26380] usb 3-1: Product: syz
[ 1425.899476][T26380] usb 3-1: Manufacturer: syz
[ 1425.917746][T26380] usb 3-1: SerialNumber: syz
[ 1425.928734][ T3006] Process accounting resumed
[ 1425.955523][T26380] usb 3-1: config 0 descriptor??
[ 1426.060066][ T5780] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1426.160228][ T1786] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1426.213757][T26380] cdc_subset 3-1:0.0: probe with driver cdc_subset failed with error -22
[ 1426.280312][ T3075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12506'.
[ 1426.328511][  T802] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 1426.361945][ T1786] usb 2-1: Using ep0 maxpacket: 16
[ 1426.382500][ T1786] usb 2-1: config 0 has an invalid interface number: 246 but max is 0
[ 1426.392590][ T1786] usb 2-1: config 0 has no interface number 0
[ 1426.416663][ T1786] usb 2-1: config 0 interface 246 has no altsetting 0
[ 1426.438683][ T1786] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27
[ 1426.464254][ T1786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1426.472879][T26380] usb 3-1: USB disconnect, device number 78
[ 1426.490810][ T1786] usb 2-1: Product: syz
[ 1426.500690][ T1786] usb 2-1: Manufacturer: syz
[ 1426.513640][ T1786] usb 2-1: SerialNumber: syz
[ 1426.522824][  T802] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1426.544803][  T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1426.564233][ T1786] usb 2-1: config 0 descriptor??
[ 1426.585339][  T802] usb 1-1: config 0 descriptor??
[ 1426.865461][ T1786] usb 2-1: USB disconnect, device number 62
[ 1426.924894][ T3092] netlink: 76 bytes leftover after parsing attributes in process `syz.5.12513'.
[ 1427.059006][  T802] ath6kl: Failed to submit usb control message: -71
[ 1427.074361][  T802] ath6kl: unable to send the bmi data to the device: -71
[ 1427.090864][  T802] ath6kl: Unable to send get target info: -71
[ 1427.126133][  T802] ath6kl: Failed to init ath6kl core: -71
[ 1427.142696][  T802] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1427.165668][  T802] usb 1-1: USB disconnect, device number 77
[ 1427.781879][  T802] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1427.791722][ T3108] loop3: detected capacity change from 0 to 2048
[ 1427.835268][ T3108] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1427.879926][ T3108] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1427.939450][ T3115] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12524'.
[ 1427.973988][  T802] usb 6-1: Using ep0 maxpacket: 16
[ 1427.990791][  T802] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1428.023912][  T802] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1428.056283][  T802] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1428.097748][  T802] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1428.131707][  T802] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[ 1428.170073][  T802] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1428.199391][  T802] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1428.231463][  T802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1428.283273][  T802] ums-sddr09 6-1:1.0: USB Mass Storage device detected
[ 1428.405241][ T3097] loop4: detected capacity change from 0 to 32768
[ 1428.546337][  T802] scsi host1: usb-storage 6-1:1.0
[ 1428.728941][ T3134] loop3: detected capacity change from 0 to 2048
[ 1428.781252][ T3134] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[ 1428.820171][  T802] usb 6-1: USB disconnect, device number 80
[ 1428.952341][ T3134] UDF-fs: unknown compression code (0)
[ 1429.835099][T26425] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1429.943495][ T3180] syz.0.12554: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1429.975945][ T3180] CPU: 1 UID: 0 PID: 3180 Comm: syz.0.12554 Not tainted syzkaller #0 PREEMPT(full) 
[ 1429.975996][ T3180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1429.976020][ T3180] Call Trace:
[ 1429.976032][ T3180]  <TASK>
[ 1429.976047][ T3180]  dump_stack_lvl+0x100/0x190
[ 1429.976092][ T3180]  warn_alloc.cold+0x95/0x1c1
[ 1429.976135][ T3180]  ? __pfx_warn_alloc+0x10/0x10
[ 1429.976184][ T3180]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1429.976232][ T3180]  ? mark_held_locks+0x40/0x70
[ 1429.976285][ T3180]  ? lockdep_hardirqs_on+0x78/0x100
[ 1429.976356][ T3180]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1429.976404][ T3180]  ? stack_depot_save_flags+0x479/0x9d0
[ 1429.976477][ T3180]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1429.976531][ T3180]  ? xskq_create+0xfb/0x1d0
[ 1429.976580][ T3180]  __vmalloc_node_range_noprof+0x136c/0x1630
[ 1429.976639][ T3180]  ? xskq_create+0xfb/0x1d0
[ 1429.976699][ T3180]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1429.976761][ T3180]  ? xskq_create+0xfb/0x1d0
[ 1429.976809][ T3180]  vmalloc_user_noprof+0x9e/0xe0
[ 1429.976850][ T3180]  ? xskq_create+0xfb/0x1d0
[ 1429.976898][ T3180]  xskq_create+0xfb/0x1d0
[ 1429.976949][ T3180]  xsk_setsockopt+0x743/0xab0
[ 1429.976991][ T3180]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1429.977044][ T3180]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1429.977089][ T3180]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1429.977137][ T3180]  ? find_held_lock+0x2b/0x80
[ 1429.977202][ T3180]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1429.977249][ T3180]  ? aa_sock_opt_perm+0xfe/0x1b0
[ 1429.977318][ T3180]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1429.977374][ T3180]  do_sock_setsockopt+0xf3/0x1d0
[ 1429.977430][ T3180]  __sys_setsockopt+0x195/0x220
[ 1429.977477][ T3180]  __x64_sys_setsockopt+0xbd/0x160
[ 1429.977514][ T3180]  ? do_syscall_64+0x90/0x870
[ 1429.977570][ T3180]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1429.977618][ T3180]  ? lockdep_hardirqs_on+0x78/0x100
[ 1429.977676][ T3180]  do_syscall_64+0x115/0x870
[ 1429.977740][ T3180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1429.977782][ T3180] RIP: 0033:0x7f4cd119ce59
[ 1429.977813][ T3180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1429.977853][ T3180] RSP: 002b:00007f4cd2020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1429.977890][ T3180] RAX: ffffffffffffffda RBX: 00007f4cd1415fa0 RCX: 00007f4cd119ce59
[ 1429.977917][ T3180] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[ 1429.977942][ T3180] RBP: 00007f4cd1232d6f R08: 0000000000000004 R09: 0000000000000000
[ 1429.977967][ T3180] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1429.977992][ T3180] R13: 00007f4cd1416038 R14: 00007f4cd1415fa0 R15: 00007ffeee9e4dc8
[ 1429.978045][ T3180]  </TASK>
[ 1429.978494][ T3180] Mem-Info:
[ 1429.980688][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 1430.034468][ T3180] active_anon:9942 inactive_anon:0 isolated_anon:0
[ 1430.034468][ T3180]  active_file:4928 inactive_file:55575 isolated_file:0
[ 1430.034468][ T3180]  unevictable:768 dirty:398 writeback:0
[ 1430.034468][ T3180]  slab_reclaimable:9316 slab_unreclaimable:106904
[ 1430.034468][ T3180]  mapped:36769 shmem:1319 pagetables:3713
[ 1430.034468][ T3180]  sec_pagetables:0 bounce:0
[ 1430.034468][ T3180]  kernel_misc_reclaimable:0
[ 1430.034468][ T3180]  free:1265872 free_pcp:8872 free_cma:0
[ 1430.314443][T26425] usb 5-1: Using ep0 maxpacket: 8
[ 1430.333122][T26425] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1430.363310][ T3180] Node 0 active_anon:39860kB inactive_anon:0kB active_file:19712kB inactive_file:222100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147068kB dirty:1672kB writeback:0kB shmem:3644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13368kB pagetables:14892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1430.421453][ T3180] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1430.425313][T26425] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1430.463495][ T3180] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1430.531950][ T3180] lowmem_reserve[]: 0 2477 2479 2479 2479
[ 1430.553103][ T3180] Node 0 DMA32 free:1106640kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39860kB inactive_anon:0kB active_file:19712kB inactive_file:222100kB unevictable:1536kB writepending:1672kB zspages:0kB present:3129332kB managed:2537396kB mlocked:0kB bounce:0kB free_pcp:31304kB local_pcp:20256kB free_cma:0kB
[ 1430.572507][T26425] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1430.668774][T26425] usb 5-1: Product: syz
[ 1430.682613][T26425] usb 5-1: Manufacturer: syz
[ 1430.687165][ T3180] lowmem_reserve[]: 0 0 1 1 1
[ 1430.704772][T26425] usb 5-1: SerialNumber: syz
[ 1430.708237][ T3180] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[ 1430.760724][ T3180] lowmem_reserve[]: 0 0 0 0 0
[ 1430.767942][ T3180] Node 1 Normal free:3941376kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4096kB local_pcp:4096kB free_cma:0kB
[ 1430.819470][ T3180] lowmem_reserve[]: 0 0 0 0 0
[ 1430.824324][ T3180] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1430.852130][ T3180] Node 0 DMA32: 5268*4kB (UME) 5726*8kB (UME) 4143*16kB (UME) 528*32kB (UME) 543*64kB (UME) 848*128kB (UME) 600*256kB (UM) 368*512kB (UME) 226*1024kB (UME) 9*2048kB (UM) 54*4096kB (UM) = 1106416kB
[ 1430.927191][ T3180] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1430.939104][    T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1430.962373][ T3180] Node 1 Normal: 0*4kB 8*8kB (UM) 8*16kB (UM) 8*32kB (UM) 7*64kB (UM) 5*128kB (UM) 6*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 0*2048kB 960*4096kB (M) = 3941376kB
[ 1430.985075][T26425] usb 5-1: Invalid connection information received from device
[ 1430.994185][ T3180] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1431.023964][ T3180] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1431.049601][ T3180] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1431.079167][ T3180] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1431.097137][ T3180] 61482 total pagecache pages
[ 1431.105336][    T9] usb 2-1: Using ep0 maxpacket: 16
[ 1431.117017][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1431.129465][    T9] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1431.146681][ T3180] 0 pages in swap cache
[ 1431.164956][ T3180] Free swap  = 124996kB
[ 1431.169214][    T9] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1431.187631][ T3180] Total swap = 124996kB
[ 1431.203833][    T9] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1431.214652][ T3180] 2097051 pages RAM
[ 1431.221327][  T803] usb 5-1: USB disconnect, device number 65
[ 1431.225246][ T3180] 0 pages HighMem/MovableOnly
[ 1431.245936][    T9] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[ 1431.258303][ T3180] 430810 pages reserved
[ 1431.267491][ T3180] 0 pages cma reserved
[ 1431.276744][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1431.294519][    T9] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1431.311871][ T3222] netlink: 59 bytes leftover after parsing attributes in process `syz.3.12569'.
[ 1431.335466][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1431.351789][ T3222] netlink: 59 bytes leftover after parsing attributes in process `syz.3.12569'.
[ 1431.373553][    T9] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[ 1431.462891][ T3228] openvswitch: netlink: Message has 1 unknown bytes.
[ 1431.470079][ T3228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1431.606205][    T9] scsi host1: usb-storage 2-1:1.0
[ 1431.690340][ T3237] loop5: detected capacity change from 0 to 1764
[ 1431.902689][    T9] usb 2-1: USB disconnect, device number 63
[ 1432.066397][ T3251] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12581'.
[ 1432.265299][ T3257] ip6t_srh: unknown srh match flags  4000
[ 1432.339886][ T3261] netlink: 'syz.3.12586': attribute type 6 has an invalid length.
[ 1432.363786][ T3261] netlink: 176 bytes leftover after parsing attributes in process `syz.3.12586'.
[ 1432.946683][ T3281] loop1: detected capacity change from 0 to 256
[ 1432.980183][ T3281] exfat: Deprecated parameter 'namecase'
[ 1433.003099][ T3281] exfat: Deprecated parameter 'namecase'
[ 1433.023654][ T3281] exfat: Deprecated parameter 'utf8'
[ 1433.059161][ T3243] loop2: detected capacity change from 0 to 32768
[ 1433.082310][ T3281] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[ 1433.167069][ T3285] loop4: detected capacity change from 0 to 1764
[ 1433.202199][ T3243] ERROR: (device loop2): dtSearch: stack overrun!
[ 1433.202199][ T3243] 
[ 1433.272212][ T3243] ERROR: (device loop2): remounting filesystem as read-only
[ 1433.278320][ T3285] iso9660: Corrupted directory entry in block 0 of inode 1792
[ 1433.318402][ T3243] btstack dump:
[ 1433.340662][ T3243] bn = 0, index = 4
[ 1433.346723][ T3287] loop3: detected capacity change from 0 to 4096
[ 1433.370212][ T3243] bn = 0, index = 4
[ 1433.385422][ T3243] bn = 0, index = 4
[ 1433.409903][ T3243] bn = 0, index = 4
[ 1433.412803][ T3287] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[ 1433.437938][ T3243] bn = 0, index = 4
[ 1433.448311][ T3287] UDF-fs: Scanning with blocksize 512 failed
[ 1433.457790][ T3243] bn = 0, index = 4
[ 1433.466377][ T3291] loop5: detected capacity change from 0 to 2048
[ 1433.475622][ T3243] bn = 0, index = 4
[ 1433.495820][ T3243] bn = 0, index = 0
[ 1433.498352][ T3287] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1433.509038][ T3243] jfs_lookup: dtSearch returned -5
[ 1433.516153][ T3291] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1433.561999][ T3287] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328)
[ 1433.581988][ T3291] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1434.204778][ T1786] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1434.419213][ T1786] usb 3-1: Using ep0 maxpacket: 16
[ 1434.456136][ T1786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1434.496942][ T1786] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1434.540848][ T1786] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1434.586080][ T1786] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1434.625426][ T1786] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[ 1434.672388][ T1786] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1434.706838][ T1786] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1434.743474][ T1786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1434.801107][ T1786] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[ 1435.064702][ T1786] scsi host1: usb-storage 3-1:1.0
[ 1435.345643][ T1786] usb 3-1: USB disconnect, device number 79
[ 1435.452739][ T3347] loop1: detected capacity change from 0 to 4096
[ 1435.485540][ T3347] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[ 1435.653835][ T3347] ntfs3(loop1): ino=19, mi_enum_attr
[ 1435.688829][ T3347] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[ 1435.855120][ T3370] openvswitch: netlink: IPv6 tunnel dst address is zero
[ 1435.935453][ T3365] loop5: detected capacity change from 0 to 4096
[ 1436.130864][ T3365] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 1436.263273][ T3377] loop3: detected capacity change from 0 to 1024
[ 1436.293745][ T3365] ntfs3(loop5): ino=9, ntfs_sync_fs failed, -22.
[ 1436.327636][ T3377] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[ 1436.372276][ T3377] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1436.420680][ T3377] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: inode #32: comm syz.3.12635: iget: special inode unallocated
[ 1436.479840][ T3377] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[ 1436.480121][ T3377] EXT4-fs (loop3): Remounting filesystem read-only
[ 1436.489309][    C0] EXT4-fs (loop3): error count since last fsck: 1
[ 1436.489347][    C0] EXT4-fs (loop3): initial error at time 2000525323: ext4_get_journal_inode:5896: inode 32
[ 1436.489406][    C0] EXT4-fs (loop3): last error at time 2000525323: ext4_get_journal_inode:5896: inode 32
[ 1436.644806][ T3377] EXT4-fs (loop3): no journal found
[ 1436.669542][ T3377] EXT4-fs (loop3): can't get journal size
[ 1436.703507][ T3377] EXT4-fs (loop3): filesystem is read-only
[ 1436.717709][ T3377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1436.940716][  T802] usb 2-1: new low-speed USB device number 64 using dummy_hcd
[ 1437.113979][  T802] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1437.141126][  T802] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1437.170403][  T802] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[ 1437.204352][  T802] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1437.234638][  T802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1437.267648][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1437.288360][ T3385] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1437.332924][  T802] hub 2-1:1.0: bad descriptor, ignoring hub
[ 1437.355691][  T802] hub 2-1:1.0: probe with driver hub failed with error -5
[ 1437.390772][  T802] cdc_wdm 2-1:1.0: skipping garbage
[ 1437.413233][  T802] cdc_wdm 2-1:1.0: skipping garbage
[ 1437.435036][  T802] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1437.468614][  T802] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1437.616080][ T3410] veth3: entered promiscuous mode
[ 1437.634193][ T3410] veth3: entered allmulticast mode
[ 1437.731885][  T802] usb 2-1: USB disconnect, device number 64
[ 1439.373471][ T3475] loop2: detected capacity change from 0 to 1024
[ 1439.618858][ T3483] openvswitch: netlink: push_nsh: missing base or metadata attributes
[ 1439.641245][ T3483] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1439.899183][ T3490] ieee802154 phy1 wpan1: encryption failed: -22
[ 1440.501122][ T3512] ieee802154 phy1 wpan1: encryption failed: -90
[ 1440.736119][ T3521] netlink: 'syz.1.12696': attribute type 10 has an invalid length.
[ 1440.798840][  T803] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1440.928694][ T6002] kworker/0:5 (6002) used greatest stack depth: 17992 bytes left
[ 1440.938533][  T802] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 1441.001677][  T803] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1441.057921][  T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1441.080262][  T803] usb 4-1: Product: syz
[ 1441.088826][  T803] usb 4-1: Manufacturer: syz
[ 1441.098261][  T803] usb 4-1: SerialNumber: syz
[ 1441.153867][  T802] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1441.171814][  T803] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1441.177283][  T802] usb 1-1: config 4 has an invalid interface number: 138 but max is 0
[ 1441.219578][  T802] usb 1-1: config 4 has no interface number 0
[ 1441.227670][T26419] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1441.254682][  T802] usb 1-1: config 4 interface 138 has no altsetting 0
[ 1441.289326][  T802] usb 1-1: string descriptor 0 read error: -22
[ 1441.314129][  T802] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8
[ 1441.360244][  T802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1441.468291][ T3536] netlink: 'syz.1.12703': attribute type 10 has an invalid length.
[ 1441.509610][ T3536] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12703'.
[ 1441.698617][  T802] catc 1-1:4.138: Missing or invalid endpoints
[ 1442.074452][T14229] usb 1-1: USB disconnect, device number 78
[ 1442.270931][ T3542] loop4: detected capacity change from 0 to 4096
[ 1442.625845][ T3542] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 1442.694548][T26419] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1442.738566][T26425] usb 4-1: USB disconnect, device number 59
[ 1442.755209][T26419] ath9k_htc: Failed to initialize the device
[ 1442.766368][T26425] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1442.835617][ T3542] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22.
[ 1443.125366][ T3558] loop1: detected capacity change from 0 to 512
[ 1443.219528][ T3558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1443.259995][ T3558] ext4 filesystem being mounted at /2137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1443.322306][T26419] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1443.375415][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1443.473703][ T3573] TCP: TCP_TX_DELAY enabled
[ 1443.514420][T26419] usb 6-1: Using ep0 maxpacket: 8
[ 1443.552022][T26419] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1443.601453][T26419] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1443.633113][T26419] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1443.666904][T26419] usb 6-1: Product: syz
[ 1443.684006][T26419] usb 6-1: Manufacturer: syz
[ 1443.705250][T26419] usb 6-1: SerialNumber: syz
[ 1443.828889][ T3583] loop3: detected capacity change from 0 to 2048
[ 1443.875607][ T3583] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1443.997799][T26419] usb 6-1: Invalid connection information received from device
[ 1444.022457][   T30] audit: type=1800 audit(2000525330.541:373): pid=3583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12727" name="file1" dev="loop3" ino=1367 res=0 errno=0
[ 1444.255992][    T9] usb 6-1: USB disconnect, device number 81
[ 1444.628031][ T3607] comedi: No check for data length of config insn id 8 is implemented
[ 1444.676259][ T3610] ieee802154 phy1 wpan1: encryption failed: -22
[ 1444.696229][ T3607] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[ 1444.708306][ T3611] kAFS: unable to lookup cell 'Þ({FúA'
[ 1444.710125][ T3613] The dccp option matching is deprecated and scheduled to be removed in 2027.
[ 1444.710125][ T3613] Please contact the netfilter-devel mailing list or update your nftables rules.
[ 1444.748255][ T3607] comedi: Assuming n=15 is correct
[ 1445.255666][    T9] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 1445.426674][    T9] usb 1-1: Using ep0 maxpacket: 32
[ 1445.450825][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1445.480690][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1445.491677][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1445.501165][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1445.544116][    T9] usb 1-1: config 0 descriptor??
[ 1445.584670][    T9] hub 1-1:0.0: USB hub found
[ 1445.658442][   T30] audit: type=1400 audit(2000525332.076:374): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=3645 comm="syz.5.12758"
[ 1445.794552][    T9] hub 1-1:0.0: 26 ports detected
[ 1445.821480][    T9] hub 1-1:0.0: insufficient power available to use all downstream ports
[ 1446.022414][    T9] hub 1-1:0.0: hub_hub_status failed (err = -71)
[ 1446.069880][    T9] hub 1-1:0.0: config failed, can't get hub status (err -71)
[ 1446.108436][    T9] usbhid 1-1:0.0: can't add hid device: -71
[ 1446.135026][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1446.208428][    T9] usb 1-1: USB disconnect, device number 79
[ 1446.527771][ T3678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1447.124802][ T3696] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2
[ 1447.261733][ T3705] netlink: 'syz.1.12786': attribute type 1 has an invalid length.
[ 1447.423937][ T3668] loop2: detected capacity change from 0 to 32768
[ 1447.457812][ T3668] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12769 (3668)
[ 1447.553802][ T3668] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1447.592908][ T3668] BTRFS info (device loop2): using sha256 checksum algorithm
[ 1447.791292][ T3668] BTRFS info (device loop2): enabling ssd optimizations
[ 1447.837850][ T3668] BTRFS info (device loop2): turning on async discard
[ 1447.863948][ T3737] bridge3: entered promiscuous mode
[ 1447.878283][ T3668] BTRFS info (device loop2): enabling free space tree
[ 1447.882285][ T3737] bridge3: entered allmulticast mode
[ 1448.131581][T21279] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1448.671512][ T3763] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12809'.
[ 1448.708705][ T3766] Cannot find map_set index 135 as target
[ 1448.722496][ T3763] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12809'.
[ 1449.420607][ T3793] loop5: detected capacity change from 0 to 64
[ 1449.427948][ T3794] netlink: 'syz.4.12823': attribute type 2 has an invalid length.
[ 1449.747667][ T3800] openvswitch: netlink: Flow key attribute not present in set flow.
[ 1449.784000][ T3804] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1450.089057][ T3812] program syz.4.12833 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1450.364182][ T3823] loop4: detected capacity change from 0 to 64
[ 1451.186531][ T3853] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1451.560772][ T3865] netlink: 'syz.4.12859': attribute type 7 has an invalid length.
[ 1451.880443][ T3875] netlink: 520 bytes leftover after parsing attributes in process `syz.1.12862'.
[ 1451.895989][ T3847] loop2: detected capacity change from 0 to 32768
[ 1451.922926][ T3847] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12850 (3847)
[ 1451.995858][ T3847] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1452.028993][ T3847] BTRFS info (device loop2): using sha256 checksum algorithm
[ 1452.190668][ T3847] BTRFS info (device loop2): enabling ssd optimizations
[ 1452.212993][ T3847] BTRFS info (device loop2): turning on async discard
[ 1452.222746][ T3847] BTRFS info (device loop2): enabling free space tree
[ 1452.290895][T26425] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 1452.434066][T21279] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1452.526243][T26425] usb 1-1: Using ep0 maxpacket: 8
[ 1452.586197][T26425] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1452.615562][T26425] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=a1.8c
[ 1452.640510][ T3905] loop1: detected capacity change from 0 to 2048
[ 1452.646947][T26425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1452.682503][ T3905] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1452.765035][T26425] usb 1-1: config 0 descriptor??
[ 1452.861389][T26425] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[ 1452.908305][T26425] gspca_stv06xx: st6422 sensor detected
[ 1453.359633][ T3922] bridge5: entered promiscuous mode
[ 1453.376506][ T3922] bridge5: entered allmulticast mode
[ 1453.408145][ T3925] loop2: detected capacity change from 0 to 64
[ 1453.429404][T26425] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71
[ 1453.481319][T26425] usb 1-1: USB disconnect, device number 80
[ 1453.916730][ T3940] loop4: detected capacity change from 0 to 256
[ 1453.943985][ T3940] exfat: Deprecated parameter 'utf8'
[ 1454.031912][ T3940] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d)
[ 1455.185470][ T3988] netlink: 520 bytes leftover after parsing attributes in process `syz.2.12911'.
[ 1455.293713][ T3990] loop5: detected capacity change from 0 to 256
[ 1455.354530][ T3990] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[ 1455.794983][ T4009] loop5: detected capacity change from 0 to 764
[ 1456.088620][ T4019] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12926'.
[ 1456.114237][ T4021] netlink: 'syz.3.12927': attribute type 1 has an invalid length.
[ 1456.120348][ T4019] netlink: 43 bytes leftover after parsing attributes in process `syz.5.12926'.
[ 1456.139498][ T4019] netlink: 'syz.5.12926': attribute type 6 has an invalid length.
[ 1456.141518][ T4021] netlink: 1000 bytes leftover after parsing attributes in process `syz.3.12927'.
[ 1456.150662][ T4019] netlink: 'syz.5.12926': attribute type 5 has an invalid length.
[ 1456.177864][ T4019] netlink: 43 bytes leftover after parsing attributes in process `syz.5.12926'.
[ 1456.198613][ T4014] loop1: detected capacity change from 0 to 4096
[ 1456.229864][ T4014] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[ 1456.897504][ T4043] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[ 1456.914912][ T4046] overlay: ./file0 is not a directory
[ 1457.197292][ T4055] 9p: Unknown Cache mode or invalid value fscach
[ 1457.211927][ T4058] loop3: detected capacity change from 0 to 256
[ 1457.232149][ T4058] exfat: Deprecated parameter 'utf8'
[ 1457.320430][ T4058] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d)
[ 1457.451630][ T4061] loop5: detected capacity change from 0 to 2048
[ 1457.509451][ T4061] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1458.126889][ T4082] Process accounting paused
[ 1458.751751][ T4106] netlink: 'syz.3.12968': attribute type 1 has an invalid length.
[ 1458.780161][ T4108] loop5: detected capacity change from 0 to 256
[ 1458.782159][ T4106] netlink: 220 bytes leftover after parsing attributes in process `syz.3.12968'.
[ 1458.811645][ T4108] exfat: Deprecated parameter 'utf8'
[ 1458.879348][ T4108] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d)
[ 1459.385305][ T4091] loop2: detected capacity change from 0 to 32768
[ 1459.415426][ T4091] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12960 (4091)
[ 1459.503896][ T4091] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1459.505594][ T4128] loop4: detected capacity change from 0 to 1024
[ 1459.549036][ T4091] BTRFS info (device loop2): using sha256 checksum algorithm
[ 1459.586824][ T4128] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1459.740576][ T4091] BTRFS info (device loop2): enabling ssd optimizations
[ 1459.774892][ T4091] BTRFS info (device loop2): turning on async discard
[ 1459.805300][ T4091] BTRFS info (device loop2): enabling free space tree
[ 1460.203959][T21279] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1460.397997][ T4118] loop3: detected capacity change from 0 to 32768
[ 1460.708815][ T4122] loop5: detected capacity change from 0 to 32768
[ 1460.811842][ T4122] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1461.022263][ T4122] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[ 1461.057653][ T4122] XFS (loop5): Tail block (0x29) overwrite detected. Updated to 0x30
[ 1461.150390][ T4122] XFS (loop5): Ending clean mount
[ 1461.397660][ T4188] raw_sendmsg: syz.1.12997 forgot to set AF_INET. Fix it!
[ 1461.428534][ T5786] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1462.075826][ T4206] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[ 1462.197678][ T4210] netlink: 184 bytes leftover after parsing attributes in process `syz.0.13008'.
[ 1462.544410][ T4222] loop3: detected capacity change from 0 to 512
[ 1462.578289][ T4222] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1462.625352][ T4228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13015'.
[ 1462.656551][ T4222] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.13013: bad orphan inode 131083
[ 1462.687740][ T4222] loop3: lost filesystem error report for type 5 error -117
[ 1462.692500][ T4222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1462.888697][ T4222] EXT4-fs error (device loop3): ext4_find_dest_de:2049: inode #2: block 13: comm syz.3.13013: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1
[ 1463.076553][ T4236] loop5: detected capacity change from 0 to 4096
[ 1463.105303][ T4236] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[ 1463.139865][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1463.263972][    T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 1463.302476][ T4208] loop1: detected capacity change from 0 to 32768
[ 1463.435424][    T9] usb 1-1: Using ep0 maxpacket: 8
[ 1463.467522][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1463.526775][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1463.594170][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1463.638760][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1463.673341][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1463.749323][    T9] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1463.778860][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1463.819724][    T9] usb 1-1: Product: syz
[ 1463.842241][    T9] usb 1-1: Manufacturer: syz
[ 1463.868133][    T9] usb 1-1: SerialNumber: syz
[ 1463.918699][    T9] usb 1-1: config 0 descriptor??
[ 1463.995284][    T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input87
[ 1464.252585][    T9] usb 1-1: USB disconnect, device number 81
[ 1464.391480][ T4275] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1464.639704][ T4285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13045'.
[ 1465.067548][ T4300] netlink: 'syz.0.13052': attribute type 39 has an invalid length.
[ 1465.387031][ T4314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13059'.
[ 1465.387399][ T4316] cgroup: Unexpected value for 'nofavordynmods'
[ 1465.708952][ T4326] openvswitch: netlink: IPv4 tun info is not correct
[ 1465.761615][ T4330] loop3: detected capacity change from 0 to 16
[ 1465.798848][ T4330] erofs (device loop3): mounted with root inode @ nid 36.
[ 1465.854552][ T4330] erofs (device loop3): xattr_isize 12 of nid 86 is not supported yet
[ 1466.187504][ T4345] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[ 1467.364858][ T4373] loop3: detected capacity change from 0 to 4096
[ 1467.388069][ T4373] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[ 1467.439383][ T4357] loop4: detected capacity change from 0 to 32768
[ 1467.472214][ T4357] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.13080 (4357)
[ 1467.543123][ T4373] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[ 1467.574685][ T4357] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1467.578456][ T4373] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[ 1467.629036][ T4357] BTRFS info (device loop4): using sha256 checksum algorithm
[ 1467.793638][ T4357] BTRFS info (device loop4): enabling ssd optimizations
[ 1467.809703][T21078] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[ 1467.838409][ T5781] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[ 1467.845249][ T4357] BTRFS info (device loop4): turning on async discard
[ 1467.857581][ T4397] netlink: 45 bytes leftover after parsing attributes in process `syz.5.13093'.
[ 1467.878499][ T4399] loop1: detected capacity change from 0 to 256
[ 1467.893849][ T5781] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[ 1467.904107][ T4357] BTRFS info (device loop4): enabling free space tree
[ 1467.939030][ T5781] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[ 1467.975454][ T4399] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[ 1467.986006][T21087] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[ 1468.121034][ T4399] exFAT-fs (loop1): error, data valid size is invalid(-281474976706560)
[ 1468.128433][ T4402] loop2: detected capacity change from 0 to 128
[ 1468.216820][ T5780] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1468.261461][ T4404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1468.622896][ T4410] PM: Enabling pm_trace changes system date and time during resume.
[ 1468.622896][ T4410] PM: Correct system time has to be restored manually after resume.
[ 1469.010852][ T4421] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[ 1469.082760][ T4427] loop3: detected capacity change from 0 to 64
[ 1469.599237][ T4444] loop1: detected capacity change from 0 to 8
[ 1469.618775][ T4445] xt_l2tp: invalid flags combination: c
[ 1469.630395][ T4444] MTD: Attempt to mount non-MTD device "/dev/loop1"
[ 1469.653456][ T4444] cramfs: empty filesystem
[ 1469.782459][ T6816] udevd[6816]: incorrect cramfs checksum on /dev/loop1
[ 1470.156937][ T4460] netlink: 45 bytes leftover after parsing attributes in process `syz.0.13123'.
[ 1470.276976][ T4463] netlink: 'syz.2.13124': attribute type 2 has an invalid length.
[ 1470.639229][ T4437] loop4: detected capacity change from 0 to 32768
[ 1470.686644][ T4437] jfs_strtoUCS: char2uni returned -22.
[ 1470.702999][ T4437] charset = cp864, char = 0x9f
[ 1470.809892][T26425] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1471.038721][T26425] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1471.069209][ T4455] loop1: detected capacity change from 0 to 32768
[ 1471.072931][T26425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1471.106733][ T4455] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.13120 (4455)
[ 1471.122901][T26425] usb 3-1: Product: syz
[ 1471.141604][T26425] usb 3-1: Manufacturer: syz
[ 1471.163491][ T4482] loop3: detected capacity change from 0 to 4096
[ 1471.171511][T26425] usb 3-1: SerialNumber: syz
[ 1471.211037][ T4482] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[ 1471.217319][ T4455] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1471.221408][T26425] usb 3-1: config 0 descriptor??
[ 1471.270432][ T4455] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1471.291410][T26425] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1471.342565][ T4482] ntfs3(loop3): ino=19, mi_enum_attr
[ 1471.365118][ T4482] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[ 1471.434047][ T4482] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[ 1471.465897][ T4455] BTRFS info (device loop1): enabling ssd optimizations
[ 1471.520646][ T4455] BTRFS info (device loop1): turning on async discard
[ 1471.576217][ T4455] BTRFS info (device loop1): enabling free space tree
[ 1471.656666][ T4482] ntfs3(loop3): mft corrupted
[ 1471.721602][T26425] gspca_sunplus: reg_w_riv err -71
[ 1471.748767][T26425] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[ 1471.787036][T26425] usb 3-1: USB disconnect, device number 80
[ 1471.916345][ T5771] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1473.561621][ T4521] loop1: detected capacity change from 0 to 32768
[ 1473.581142][ T4521] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.13143 (4521)
[ 1473.652358][ T4553] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[ 1473.669318][ T4521] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1473.694998][ T4521] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1473.873903][ T4521] BTRFS info (device loop1): enabling ssd optimizations
[ 1473.927388][ T4521] BTRFS info (device loop1): turning on async discard
[ 1473.971198][ T4521] BTRFS info (device loop1): enabling free space tree
[ 1474.331757][ T5771] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1474.691655][ T4601] xt_limit: Overflow, try lower: 167772/2147483648
[ 1474.835466][ T4606] netlink: 17 bytes leftover after parsing attributes in process `syz.3.13178'.
[ 1475.326180][ T4621] loop2: detected capacity change from 0 to 2048
[ 1475.381225][ T4623] netlink: 'syz.5.13187': attribute type 4 has an invalid length.
[ 1475.439114][ T4627] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1475.686613][ T4627] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[ 1475.735151][ T4627] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[ 1475.770659][ T4627] Remounting filesystem read-only
[ 1475.797368][T21078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1475.817687][ T4637] loop4: detected capacity change from 0 to 64
[ 1475.839957][T21279] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[ 1476.818575][ T4676] loop3: detected capacity change from 0 to 1024
[ 1477.247275][ T4690] loop3: detected capacity change from 0 to 256
[ 1477.337369][ T4690] FAT-fs (loop3): Directory bread(block 64) failed
[ 1477.344206][ T4690] FAT-fs (loop3): Directory bread(block 65) failed
[ 1477.351728][ T4690] FAT-fs (loop3): Directory bread(block 66) failed
[ 1477.358310][ T4690] FAT-fs (loop3): Directory bread(block 67) failed
[ 1477.365444][ T4690] FAT-fs (loop3): Directory bread(block 68) failed
[ 1477.373561][ T4690] FAT-fs (loop3): Directory bread(block 69) failed
[ 1477.380168][ T4690] FAT-fs (loop3): Directory bread(block 70) failed
[ 1477.386797][ T4690] FAT-fs (loop3): Directory bread(block 71) failed
[ 1477.394581][ T4690] FAT-fs (loop3): Directory bread(block 72) failed
[ 1477.401180][ T4690] FAT-fs (loop3): Directory bread(block 73) failed
[ 1477.885037][  T802] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 1478.078024][  T802] usb 1-1: Using ep0 maxpacket: 32
[ 1478.099301][  T802] usb 1-1: config 0 has an invalid interface number: 68 but max is 0
[ 1478.131502][  T802] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[ 1478.167498][  T802] usb 1-1: config 0 has no interface number 0
[ 1478.202157][  T802] usb 1-1: New USB device found, idVendor=045e, idProduct=0703, bcdDevice=6e.c0
[ 1478.234605][  T802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1478.251403][  T802] usb 1-1: Product: syz
[ 1478.267201][  T802] usb 1-1: Manufacturer: syz
[ 1478.281164][  T802] usb 1-1: SerialNumber: syz
[ 1478.308623][  T802] usb 1-1: config 0 descriptor??
[ 1478.453574][ T4713] loop5: detected capacity change from 0 to 4096
[ 1478.479573][ T4713] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[ 1478.557055][  T802] uvcvideo 1-1:0.68: Found Unit with invalid ID 0
[ 1478.573283][  T802] uvcvideo 1-1:0.68: Found UVC 0.40 device syz (045e:0703)
[ 1478.593734][  T802] uvcvideo 1-1:0.68: No valid video chain found.
[ 1478.619586][  T802] usb 1-1: USB disconnect, device number 82
[ 1478.674425][ T4713] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[ 1478.705323][ T4713] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[ 1478.762661][ T4698] loop4: detected capacity change from 0 to 32768
[ 1478.940139][ T1126] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[ 1478.942067][ T4706] loop1: detected capacity change from 0 to 32768
[ 1478.957208][ T4706] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.13226 (4706)
[ 1479.012030][ T5786] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[ 1479.039919][ T5786] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 1479.079364][ T5786] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[ 1479.103219][ T4706] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1479.125955][ T4706] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1479.137087][ T1126] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[ 1479.291932][ T4728] loop3: detected capacity change from 0 to 2048
[ 1479.322111][ T4706] BTRFS info (device loop1): enabling ssd optimizations
[ 1479.369743][ T4706] BTRFS info (device loop1): turning on async discard
[ 1479.384876][ T4706] BTRFS info (device loop1): enabling free space tree
[ 1479.423940][ T4728] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1479.739570][ T5771] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1480.065432][ T4752] loop5: detected capacity change from 0 to 4096
[ 1480.118870][ T4760] loop2: detected capacity change from 0 to 256
[ 1480.158850][ T4760] exfat: Deprecated parameter 'utf8'
[ 1480.181449][ T4752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1480.214679][ T4760] exfat: Deprecated parameter 'namecase'
[ 1480.368373][ T4760] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[ 1480.624109][ T5786] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1481.100715][ T4780] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13256'.
[ 1481.945864][T21067] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1482.052436][T26425] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1482.122426][ T4810] loop4: detected capacity change from 0 to 64
[ 1482.177938][ T4810] hfs: unable to locate alternate MDB
[ 1482.206948][ T4810] hfs: continuing without an alternate MDB
[ 1482.247733][T26425] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1482.279478][   T30] audit: type=1800 audit(2000525366.331:375): pid=4810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13268" name="file1" dev="loop4" ino=22 res=0 errno=0
[ 1482.336864][T26425] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1482.363761][T26425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1482.394276][T26425] usb 4-1: Product: syz
[ 1482.402977][T26425] usb 4-1: Manufacturer: syz
[ 1482.419357][T26425] usb 4-1: SerialNumber: syz
[ 1482.420242][T21067] 
[ 1482.426293][T21067] ======================================================
[ 1482.433179][ T4788] loop2: detected capacity change from 0 to 32768
[ 1482.433306][T21067] WARNING: possible circular locking dependency detected
[ 1482.446694][T21067] syzkaller #0 Not tainted
[ 1482.451110][T21067] ------------------------------------------------------
[ 1482.458120][T21067] kworker/u8:0/21067 is trying to acquire lock:
[ 1482.464349][T21067] ffff888052c2d870 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0
[ 1482.475109][T21067] 
[ 1482.475109][T21067] but task is already holding lock:
[ 1482.482460][T21067] ffff88804e6c20a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330
[ 1482.492010][T21067] 
[ 1482.492010][T21067] which lock already depends on the new lock.
[ 1482.492010][T21067] 
[ 1482.502407][T21067] 
[ 1482.502407][T21067] the existing dependency chain (in reverse order) is:
[ 1482.511411][T21067] 
[ 1482.511411][T21067] -> #1 (&tree->tree_lock#2/1){+.+.}-{4:4}:
[ 1482.519538][T21067]        __mutex_lock+0x1a4/0x1b10
[ 1482.524683][T21067]        hfs_find_init+0x273/0x330
[ 1482.529811][T21067]        hfs_ext_read_extent+0x19d/0x9d0
[ 1482.535475][T21067]        hfs_get_block+0x576/0x830
[ 1482.540614][T21067]        block_read_full_folio+0x36c/0x8e0
[ 1482.546448][T21067]        filemap_read_folio+0xfc/0x3b0
[ 1482.551921][T21067]        do_read_cache_folio+0x2d7/0x6b0
[ 1482.557569][T21067]        read_cache_page+0x5b/0x1b0
[ 1482.562786][T21067]        __hfs_bnode_create+0x718/0x9a0
[ 1482.568349][T21067]        hfs_bnode_find+0x2d5/0xd30
[ 1482.573563][T21067]        hfs_brec_find+0x39d/0x620
[ 1482.578686][T21067]        hfs_brec_read+0x26/0x120
[ 1482.583725][T21067]        hfs_cat_find_brec+0xdc/0x2a0
[ 1482.589116][T21067]        hfs_fill_super+0x58d/0x7e0
[ 1482.594326][T21067]        get_tree_bdev_flags+0x38c/0x620
[ 1482.599992][T21067]        vfs_get_tree+0x92/0x320
[ 1482.604947][T21067]        path_mount+0x7d0/0x23d0
[ 1482.609896][T21067]        __x64_sys_mount+0x293/0x310
[ 1482.615195][T21067]        do_syscall_64+0x115/0x870
[ 1482.620332][T21067]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1482.626752][T21067] 
[ 1482.626752][T21067] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}:
[ 1482.635986][T21067]        __lock_acquire+0x14b8/0x2630
[ 1482.641372][T21067]        lock_acquire+0x1b1/0x370
[ 1482.646402][T21067]        __mutex_lock+0x1a4/0x1b10
[ 1482.651536][T21067]        hfs_extend_file+0xa6/0xcf0
[ 1482.656761][T21067]        hfs_bmap_reserve+0x2ab/0x3a0
[ 1482.662152][T21067]        __hfs_ext_write_extent+0x3c4/0x510
[ 1482.668157][T21067]        hfs_ext_write_extent+0x1b7/0x200
[ 1482.673900][T21067]        hfs_write_inode+0xce/0xab0
[ 1482.679100][T21067]        __writeback_single_inode+0xcd4/0x1350
[ 1482.685280][T21067]        writeback_sb_inodes+0x766/0x1c60
[ 1482.691027][T21067]        wb_writeback+0x1bf/0xb90
[ 1482.696075][T21067]        wb_workfn+0x14f/0xc00
[ 1482.700864][T21067]        process_one_work+0xa0e/0x1980
[ 1482.706369][T21067]        worker_thread+0x5ef/0xe50
[ 1482.711490][T21067]        kthread+0x370/0x450
[ 1482.716085][T21067]        ret_from_fork+0x72b/0xd50
[ 1482.721206][T21067]        ret_from_fork_asm+0x1a/0x30
[ 1482.726507][T21067] 
[ 1482.726507][T21067] other info that might help us debug this:
[ 1482.726507][T21067] 
[ 1482.736748][T21067]  Possible unsafe locking scenario:
[ 1482.736748][T21067] 
[ 1482.744185][T21067]        CPU0                    CPU1
[ 1482.749538][T21067]        ----                    ----
[ 1482.754892][T21067]   lock(&tree->tree_lock#2/1);
[ 1482.759795][T21067]                                lock(&HFS_I(tree->inode)->extents_lock);
[ 1482.768305][T21067]                                lock(&tree->tree_lock#2/1);
[ 1482.775704][T21067]   lock(&HFS_I(tree->inode)->extents_lock);
[ 1482.781687][T21067] 
[ 1482.781687][T21067]  *** DEADLOCK ***
[ 1482.781687][T21067] 
[ 1482.789816][T21067] 3 locks held by kworker/u8:0/21067:
[ 1482.795186][T21067]  #0: ffff888020a80140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[ 1482.805943][T21067]  #1: ffffc900024cfd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[ 1482.817825][T21067]  #2: ffff88804e6c20a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330
[ 1482.827824][T21067] 
[ 1482.827824][T21067] stack backtrace:
[ 1482.833709][T21067] CPU: 0 UID: 0 PID: 21067 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1482.833752][T21067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1482.833779][T21067] Workqueue: writeback wb_workfn (flush-7:4)
[ 1482.833846][T21067] Call Trace:
[ 1482.833859][T21067]  <TASK>
[ 1482.833874][T21067]  dump_stack_lvl+0x100/0x190
[ 1482.833909][T21067]  print_circular_bug.cold+0x178/0x1c7
[ 1482.833970][T21067]  check_noncircular+0x146/0x160
[ 1482.834005][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.834058][T21067]  __lock_acquire+0x14b8/0x2630
[ 1482.834102][T21067]  ? __pfx_stack_trace_save+0x10/0x10
[ 1482.834163][T21067]  lock_acquire+0x1b1/0x370
[ 1482.834201][T21067]  ? hfs_extend_file+0xa6/0xcf0
[ 1482.834259][T21067]  ? __pfx___might_resched+0x10/0x10
[ 1482.834306][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.834349][T21067]  ? add_lock_to_list+0x99/0x110
[ 1482.834407][T21067]  __mutex_lock+0x1a4/0x1b10
[ 1482.834462][T21067]  ? hfs_extend_file+0xa6/0xcf0
[ 1482.834517][T21067]  ? hfs_extend_file+0xa6/0xcf0
[ 1482.834574][T21067]  ? hfs_write_inode+0xce/0xab0
[ 1482.834606][T21067]  ? __writeback_single_inode+0xcd4/0x1350
[ 1482.834664][T21067]  ? __pfx___mutex_lock+0x10/0x10
[ 1482.834719][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.834762][T21067]  ? lock_acquire+0x1b1/0x370
[ 1482.834805][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.834853][T21067]  ? trace_contention_end+0x122/0x170
[ 1482.834897][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.834944][T21067]  ? hfs_extend_file+0xa6/0xcf0
[ 1482.834998][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.835055][T21067]  hfs_extend_file+0xa6/0xcf0
[ 1482.835112][T21067]  ? __pfx_hfs_extend_file+0x10/0x10
[ 1482.835167][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.835218][T21067]  hfs_bmap_reserve+0x2ab/0x3a0
[ 1482.835274][T21067]  __hfs_ext_write_extent+0x3c4/0x510
[ 1482.835329][T21067]  ? hfs_find_init+0x273/0x330
[ 1482.835368][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.835415][T21067]  hfs_ext_write_extent+0x1b7/0x200
[ 1482.835471][T21067]  ? __pfx_hfs_ext_write_extent+0x10/0x10
[ 1482.835533][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.835576][T21067]  ? __mpage_writepages+0x1a8/0x210
[ 1482.835611][T21067]  ? __pfx___mpage_writepages+0x10/0x10
[ 1482.835647][T21067]  hfs_write_inode+0xce/0xab0
[ 1482.835682][T21067]  ? __pfx_hfs_write_inode+0x10/0x10
[ 1482.835714][T21067]  ? __lock_acquire+0x4a5/0x2630
[ 1482.835766][T21067]  ? __writeback_single_inode+0x454/0x1350
[ 1482.835823][T21067]  ? __writeback_single_inode+0x454/0x1350
[ 1482.835884][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.835934][T21067]  __writeback_single_inode+0xcd4/0x1350
[ 1482.835995][T21067]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1482.836052][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.836096][T21067]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1482.836144][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.836191][T21067]  writeback_sb_inodes+0x766/0x1c60
[ 1482.836258][T21067]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1482.836315][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.836387][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.836430][T21067]  ? rcu_is_watching+0x12/0xc0
[ 1482.836480][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.836523][T21067]  ? queue_io+0x287/0x540
[ 1482.836571][T21067]  wb_writeback+0x1bf/0xb90
[ 1482.836631][T21067]  ? __pfx_wb_writeback+0x10/0x10
[ 1482.836693][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.836736][T21067]  ? mark_held_locks+0x40/0x70
[ 1482.836774][T21067]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1482.836823][T21067]  wb_workfn+0x14f/0xc00
[ 1482.836885][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.836928][T21067]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1482.836979][T21067]  ? __pfx_wb_workfn+0x10/0x10
[ 1482.837037][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.837083][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.837127][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.837171][T21067]  ? rcu_is_watching+0x12/0xc0
[ 1482.837220][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.837267][T21067]  process_one_work+0xa0e/0x1980
[ 1482.837319][T21067]  ? __pfx_process_one_work+0x10/0x10
[ 1482.837360][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.837410][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.837457][T21067]  worker_thread+0x5ef/0xe50
[ 1482.837506][T21067]  ? kthread+0x13a/0x450
[ 1482.837541][T21067]  ? __pfx_worker_thread+0x10/0x10
[ 1482.837581][T21067]  kthread+0x370/0x450
[ 1482.837615][T21067]  ? __pfx_kthread+0x10/0x10
[ 1482.837653][T21067]  ret_from_fork+0x72b/0xd50
[ 1482.837694][T21067]  ? __pfx_ret_from_fork+0x10/0x10
[ 1482.837735][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1482.837778][T21067]  ? __switch_to+0x800/0x1100
[ 1482.837827][T21067]  ? __switch_to_asm+0x39/0x70
[ 1482.837877][T21067]  ? __pfx_kthread+0x10/0x10
[ 1482.837915][T21067]  ret_from_fork_asm+0x1a/0x30
[ 1482.837972][T21067]  </TASK>
[ 1483.309026][ T4788] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.13258 (4788)
[ 1483.325352][T26425] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1483.335692][T21067] hfs: new node 0 already hashed?
[ 1483.344068][T21067] ------------[ cut here ]------------
[ 1483.349633][T21067] 1
[ 1483.349649][T21067] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#0: kworker/u8:0/21067
[ 1483.362260][T21067] Modules linked in:
[ 1483.366175][T21067] CPU: 0 UID: 0 PID: 21067 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1483.375783][T21067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1483.385906][T21067] Workqueue: writeback wb_workfn (flush-7:4)
[ 1483.391991][T21067] RIP: 0010:hfs_bnode_create.cold+0x41/0x49
[ 1483.397924][T21067] Code: 95 94 63 0a e9 a7 4d d1 01 e8 7b 22 e1 00 4c 89 f7 e8 83 94 63 0a e8 6e 22 e1 00 89 ee 48 c7 c7 80 e7 d1 8b e8 40 e1 fa ff 90 <0f> 0b 90 e9 a9 50 d1 01 e8 52 22 e1 00 e8 8d 4c 4d 00 e9 05 53 d1
[ 1483.403317][ T4817] loop5: detected capacity change from 0 to 32768
[ 1483.417709][T21067] RSP: 0018:ffffc900024cf020 EFLAGS: 00010282
[ 1483.417748][T21067] RAX: 000000000000001f RBX: ffff88803623b100 RCX: 0000000000000000
[ 1483.417775][T21067] RDX: 000000000000001f RSI: ffffffff81e72a69 RDI: fffff52000499df5
[ 1483.417801][T21067] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 1483.417828][T21067] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000
[ 1483.462627][T21067] R13: ffff88804e6c2000 R14: ffff88804e6c20d8 R15: 0000000000000000
[ 1483.470659][T21067] FS:  0000000000000000(0000) GS:ffff888124384000(0000) knlGS:0000000000000000
[ 1483.472086][T26419] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1483.479646][T21067] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1483.479677][T21067] CR2: 00007fd089f55000 CR3: 0000000091730000 CR4: 0000000000350ef0
[ 1483.497970][ T4788] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1483.503498][T21067] Call Trace:
[ 1483.503513][T21067]  <TASK>
[ 1483.503528][T21067]  ? _raw_spin_unlock+0x28/0x50
[ 1483.524675][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.530375][T21067]  ? hfs_bnode_put+0x208/0x480
[ 1483.535185][T21067]  hfs_bmap_alloc+0x5a7/0x6b0
[ 1483.539967][T21067]  ? __pfx_hfs_bmap_alloc+0x10/0x10
[ 1483.545214][T21067]  ? __asan_memcpy+0x3c/0x60
[ 1483.549873][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.555538][T21067]  ? hfs_bnode_read.part.0+0x298/0x330
[ 1483.561064][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.566728][T21067]  ? folio_mark_accessed+0xf3/0x1040
[ 1483.572084][T21067]  hfs_btree_inc_height.isra.0+0xff/0x820
[ 1483.573786][ T4817] BTRFS info: device /dev/loop5 (7:5) using temp-fsid bd20f6bf-0826-40c0-8173-10da9e98884b
[ 1483.577844][T21067]  ? rcu_is_watching+0x12/0xc0
[ 1483.577906][T21067]  ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10
[ 1483.599009][T21067]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1483.604312][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.609383][ T4788] BTRFS info (device loop2): using sha256 checksum algorithm
[ 1483.609985][T21067]  ? _raw_spin_unlock+0x28/0x50
[ 1483.610039][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.627939][T21067]  ? hfs_bnode_put+0x208/0x480
[ 1483.628278][ T4817] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13274 (4817)
[ 1483.632743][T21067]  hfs_brec_insert+0x8ba/0xc20
[ 1483.632814][T21067]  ? __pfx_hfs_brec_insert+0x10/0x10
[ 1483.655707][T21067]  ? hfs_bmap_reserve+0x2c5/0x3a0
[ 1483.660788][T21067]  __hfs_ext_write_extent+0x3ef/0x510
[ 1483.666254][T21067]  ? hfs_find_init+0x273/0x330
[ 1483.671057][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.676764][T21067]  hfs_ext_write_extent+0x1b7/0x200
[ 1483.682017][T21067]  ? __pfx_hfs_ext_write_extent+0x10/0x10
[ 1483.687821][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.693497][T21067]  ? __mpage_writepages+0x1a8/0x210
[ 1483.698777][T21067]  ? __pfx___mpage_writepages+0x10/0x10
[ 1483.704361][T21067]  hfs_write_inode+0xce/0xab0
[ 1483.709101][T21067]  ? __pfx_hfs_write_inode+0x10/0x10
[ 1483.714408][T21067]  ? __lock_acquire+0x4a5/0x2630
[ 1483.719424][T21067]  ? __writeback_single_inode+0x454/0x1350
[ 1483.725285][T21067]  ? __writeback_single_inode+0x454/0x1350
[ 1483.731202][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.736874][T21067]  __writeback_single_inode+0xcd4/0x1350
[ 1483.742612][T21067]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1483.748734][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.754439][T21067]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1483.759681][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.765387][T21067]  writeback_sb_inodes+0x766/0x1c60
[ 1483.770642][T21067]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1483.776362][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.782058][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.787763][T21067]  ? rcu_is_watching+0x12/0xc0
[ 1483.792573][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.795905][ T4788] BTRFS info (device loop2): enabling ssd optimizations
[ 1483.798316][T21067]  ? queue_io+0x287/0x540
[ 1483.809601][T21067]  wb_writeback+0x1bf/0xb90
[ 1483.814158][T21067]  ? __pfx_wb_writeback+0x10/0x10
[ 1483.819271][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.824940][T21067]  ? mark_held_locks+0x40/0x70
[ 1483.829867][T21067]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1483.835116][T21067]  wb_workfn+0x14f/0xc00
[ 1483.839435][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.845106][T21067]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1483.851032][T21067]  ? __pfx_wb_workfn+0x10/0x10
[ 1483.855849][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.861557][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.867223][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.872967][T21067]  ? rcu_is_watching+0x12/0xc0
[ 1483.877770][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.883484][T21067]  process_one_work+0xa0e/0x1980
[ 1483.888467][T21067]  ? __pfx_process_one_work+0x10/0x10
[ 1483.893899][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.899573][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.905279][T21067]  worker_thread+0x5ef/0xe50
[ 1483.909910][T21067]  ? kthread+0x13a/0x450
[ 1483.914263][T21067]  ? __pfx_worker_thread+0x10/0x10
[ 1483.919407][T21067]  kthread+0x370/0x450
[ 1483.923547][T21067]  ? __pfx_kthread+0x10/0x10
[ 1483.928167][T21067]  ret_from_fork+0x72b/0xd50
[ 1483.932796][T21067]  ? __pfx_ret_from_fork+0x10/0x10
[ 1483.937977][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1483.944444][T21067]  ? __switch_to+0x800/0x1100
[ 1483.949238][T21067]  ? __switch_to_asm+0x39/0x70
[ 1483.954047][T21067]  ? __pfx_kthread+0x10/0x10
[ 1483.958693][T21067]  ret_from_fork_asm+0x1a/0x30
[ 1483.963505][T21067]  </TASK>
[ 1483.966562][T21067] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1483.973856][T21067] CPU: 0 UID: 0 PID: 21067 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1483.983437][T21067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1483.993505][T21067] Workqueue: writeback wb_workfn (flush-7:4)
[ 1483.999587][T21067] Call Trace:
[ 1484.002867][T21067]  <TASK>
[ 1484.005799][T21067]  dump_stack_lvl+0x100/0x190
[ 1484.010504][T21067]  vpanic+0x552/0x970
[ 1484.014506][T21067]  ? __pfx_vpanic+0x10/0x10
[ 1484.019030][T21067]  ? lock_release+0x245/0x310
[ 1484.023741][T21067]  panic+0xd1/0xe0
[ 1484.027480][T21067]  ? __pfx_panic+0x10/0x10
[ 1484.031923][T21067]  ? check_panic_on_warn+0x1f/0x90
[ 1484.037057][T21067]  check_panic_on_warn.cold+0x19/0x34
[ 1484.042456][T21067]  ? hfs_bnode_create.cold+0x41/0x49
[ 1484.047774][T21067]  __warn.cold+0x191/0x328
[ 1484.052218][T21067]  __report_bug+0x296/0x3d0
[ 1484.056752][T21067]  ? hfs_bnode_create.cold+0x41/0x49
[ 1484.062066][T21067]  ? __pfx___report_bug+0x10/0x10
[ 1484.067123][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.072784][T21067]  ? preempt_schedule_thunk+0x16/0x30
[ 1484.078217][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.083879][T21067]  ? preempt_count_add+0x76/0x150
[ 1484.088940][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.094635][T21067]  ? __wake_up_klogd+0xe2/0x140
[ 1484.099516][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.105180][T21067]  ? vprintk_emit+0x1c9/0x6b0
[ 1484.109899][T21067]  ? __pfx_vprintk_emit+0x10/0x10
[ 1484.114963][T21067]  ? hfs_bnode_create.cold+0x41/0x49
[ 1484.120293][T21067]  report_bug+0xb2/0x220
[ 1484.124572][T21067]  ? hfs_bnode_create.cold+0x41/0x49
[ 1484.129884][T21067]  handle_bug+0x16a/0x2a0
[ 1484.134231][T21067]  exc_invalid_op+0x17/0x50
[ 1484.138752][T21067]  asm_exc_invalid_op+0x1a/0x20
[ 1484.143620][T21067] RIP: 0010:hfs_bnode_create.cold+0x41/0x49
[ 1484.149544][T21067] Code: 95 94 63 0a e9 a7 4d d1 01 e8 7b 22 e1 00 4c 89 f7 e8 83 94 63 0a e8 6e 22 e1 00 89 ee 48 c7 c7 80 e7 d1 8b e8 40 e1 fa ff 90 <0f> 0b 90 e9 a9 50 d1 01 e8 52 22 e1 00 e8 8d 4c 4d 00 e9 05 53 d1
[ 1484.169182][T21067] RSP: 0018:ffffc900024cf020 EFLAGS: 00010282
[ 1484.175273][T21067] RAX: 000000000000001f RBX: ffff88803623b100 RCX: 0000000000000000
[ 1484.183257][T21067] RDX: 000000000000001f RSI: ffffffff81e72a69 RDI: fffff52000499df5
[ 1484.191248][T21067] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 1484.199232][T21067] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000
[ 1484.207217][T21067] R13: ffff88804e6c2000 R14: ffff88804e6c20d8 R15: 0000000000000000
[ 1484.215213][T21067]  ? vprintk_emit+0x1c9/0x6b0
[ 1484.219942][T21067]  ? _raw_spin_unlock+0x28/0x50
[ 1484.224828][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.230498][T21067]  ? hfs_bnode_put+0x208/0x480
[ 1484.235301][T21067]  hfs_bmap_alloc+0x5a7/0x6b0
[ 1484.240023][T21067]  ? __pfx_hfs_bmap_alloc+0x10/0x10
[ 1484.245260][T21067]  ? __asan_memcpy+0x3c/0x60
[ 1484.249880][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.255546][T21067]  ? hfs_bnode_read.part.0+0x298/0x330
[ 1484.261038][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.266701][T21067]  ? folio_mark_accessed+0xf3/0x1040
[ 1484.272028][T21067]  hfs_btree_inc_height.isra.0+0xff/0x820
[ 1484.277786][T21067]  ? rcu_is_watching+0x12/0xc0
[ 1484.282594][T21067]  ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10
[ 1484.288965][T21067]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1484.294238][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.299901][T21067]  ? _raw_spin_unlock+0x28/0x50
[ 1484.304780][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.310450][T21067]  ? hfs_bnode_put+0x208/0x480
[ 1484.315253][T21067]  hfs_brec_insert+0x8ba/0xc20
[ 1484.320106][T21067]  ? __pfx_hfs_brec_insert+0x10/0x10
[ 1484.325430][T21067]  ? hfs_bmap_reserve+0x2c5/0x3a0
[ 1484.330497][T21067]  __hfs_ext_write_extent+0x3ef/0x510
[ 1484.335910][T21067]  ? hfs_find_init+0x273/0x330
[ 1484.340695][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.346361][T21067]  hfs_ext_write_extent+0x1b7/0x200
[ 1484.351605][T21067]  ? __pfx_hfs_ext_write_extent+0x10/0x10
[ 1484.357373][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.363073][T21067]  ? __mpage_writepages+0x1a8/0x210
[ 1484.368296][T21067]  ? __pfx___mpage_writepages+0x10/0x10
[ 1484.373867][T21067]  hfs_write_inode+0xce/0xab0
[ 1484.378565][T21067]  ? __pfx_hfs_write_inode+0x10/0x10
[ 1484.383869][T21067]  ? __lock_acquire+0x4a5/0x2630
[ 1484.388852][T21067]  ? __writeback_single_inode+0x454/0x1350
[ 1484.394703][T21067]  ? __writeback_single_inode+0x454/0x1350
[ 1484.400553][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.406222][T21067]  __writeback_single_inode+0xcd4/0x1350
[ 1484.411902][T21067]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1484.418013][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.423677][T21067]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1484.428912][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.434577][T21067]  writeback_sb_inodes+0x766/0x1c60
[ 1484.439838][T21067]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1484.445521][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.451215][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.456876][T21067]  ? rcu_is_watching+0x12/0xc0
[ 1484.461676][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.467337][T21067]  ? queue_io+0x287/0x540
[ 1484.471739][T21067]  wb_writeback+0x1bf/0xb90
[ 1484.476296][T21067]  ? __pfx_wb_writeback+0x10/0x10
[ 1484.481372][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.487043][T21067]  ? mark_held_locks+0x40/0x70
[ 1484.491832][T21067]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1484.497074][T21067]  wb_workfn+0x14f/0xc00
[ 1484.501369][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.507034][T21067]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1484.512905][T21067]  ? __pfx_wb_workfn+0x10/0x10
[ 1484.517714][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.523378][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.529072][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.534732][T21067]  ? rcu_is_watching+0x12/0xc0
[ 1484.539531][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.545195][T21067]  process_one_work+0xa0e/0x1980
[ 1484.550171][T21067]  ? __pfx_process_one_work+0x10/0x10
[ 1484.555569][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.561239][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.566904][T21067]  worker_thread+0x5ef/0xe50
[ 1484.571529][T21067]  ? kthread+0x13a/0x450
[ 1484.575790][T21067]  ? __pfx_worker_thread+0x10/0x10
[ 1484.580932][T21067]  kthread+0x370/0x450
[ 1484.585023][T21067]  ? __pfx_kthread+0x10/0x10
[ 1484.589634][T21067]  ret_from_fork+0x72b/0xd50
[ 1484.594251][T21067]  ? __pfx_ret_from_fork+0x10/0x10
[ 1484.599389][T21067]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1484.605050][T21067]  ? __switch_to+0x800/0x1100
[ 1484.609761][T21067]  ? __switch_to_asm+0x39/0x70
[ 1484.614560][T21067]  ? __pfx_kthread+0x10/0x10
[ 1484.619174][T21067]  ret_from_fork_asm+0x1a/0x30
[ 1484.623983][T21067]  </TASK>
[ 1484.627759][T21067] Kernel Offset: disabled
[ 1484.632074][T21067] Rebooting in 86400 seconds..