last executing test programs:

2m21.971243817s ago: executing program 2 (id=244):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)

2m21.817831531s ago: executing program 2 (id=246):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x5, @local, 'wg2\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)

2m21.505117911s ago: executing program 2 (id=249):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0)
sendfile(r0, r1, 0x0, 0x201f00)

2m20.965043368s ago: executing program 2 (id=254):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x1400c, &(0x7f00000003c0)={[{@orlov}, {@nodioread_nolock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}]}, 0x1, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m20.117456103s ago: executing program 2 (id=267):
syz_io_uring_setup(0x7131, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, 0x0, 0x0, &(0x7f0000000000))
setreuid(0xee01, 0x0)
ioprio_get$uid(0x3, 0xee01)

2m19.193731922s ago: executing program 2 (id=276):
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000001080)=0xc, 0x4)
close(0x3)

2m19.062576275s ago: executing program 32 (id=276):
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000001080)=0xc, 0x4)
close(0x3)

3.469157604s ago: executing program 5 (id=1919):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))

3.441030165s ago: executing program 0 (id=1920):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x0)

3.350958967s ago: executing program 0 (id=1921):
syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f000000a380)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xdac, &(0x7f0000001200)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3.189435852s ago: executing program 5 (id=1924):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffa}]})
mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0)

3.044559727s ago: executing program 5 (id=1927):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)

2.865666882s ago: executing program 5 (id=1930):
r0 = socket(0x2, 0x3, 0xff)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{0x0}, {&(0x7f00000006c0)=""/242, 0xf2}], 0x2, 0x0, 0x0, 0x4c880}, 0x48800)

2.675946158s ago: executing program 5 (id=1934):
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000200)={[{@pquota}, {@discard}, {@swalloc}, {@grpid}, {@logbufs={'logbufs', 0x3d, 0x3}}, {@noalign}, {@inode64}, {@inode32}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0x3, 0x10003, '\x00', [{0x0, 0x5, 0xda7, 0xffffffffffffffff}, {0xffffffff, 0x5, 0x9, 0xa}], ['\x00', '\x00', '\x00']})

2.595430541s ago: executing program 0 (id=1936):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x52014, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8841}, 0x280048c6)

2.234591681s ago: executing program 0 (id=1944):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none, 0x9c0}, 0xe)

2.119401665s ago: executing program 0 (id=1946):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x0, 0x553b, &(0x7f00000024c0)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD")
io_setup(0x3ff, 0x0)
removexattr(&(0x7f0000000380)='./bus\x00', &(0x7f0000000400)=@known='system.advise\x00')

1.95516412s ago: executing program 3 (id=1948):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)

1.885431432s ago: executing program 3 (id=1951):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000004c0)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, 0xffffffffffffffff)

1.773017686s ago: executing program 3 (id=1954):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f00000001c0), 0x3, 0x469, &(0x7f0000000600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106)
fallocate(r0, 0x8, 0x4000, 0x10000)

1.684432878s ago: executing program 1 (id=1955):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xc, 0xac, &(0x7f0000000100)="$eJzs0jFqwzAUBuBnY7cdu3foDXwHn6BnMB3tzZNLJ9+nlyh07RFygwxZsygYyUP2QAh8H0hPP/8ikP7PP2+xRryvESmlJu2aSPPyNQ7TvLTjMEVEG3+RVWU+Bw+uLs/ZR/4DWz72uatKfzh9f+4rNx+/eT7d7+IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEPV63Wuo+vK8WXbLgEAAP//2Bwh+A==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x7fffffff}}, 0x18)

1.683870078s ago: executing program 4 (id=1956):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r1, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7917707fe9bce142b8971a5f2be0a4b037a87c58f573ded7240708000100020000008800"], 0x150}}, 0x0)

1.541516663s ago: executing program 4 (id=1957):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
close_range(r0, 0xffffffffffffffff, 0x2)
readahead(r0, 0x3, 0xfffffffffffffffc)

1.345102248s ago: executing program 4 (id=1958):
r0 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4)
recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001b00)=[{0x0}, {&(0x7f0000001700)=""/196, 0xc4}, {&(0x7f0000001800)=""/97, 0x61}, {&(0x7f0000001880)=""/99, 0x63}, {&(0x7f0000001900)=""/211, 0xd3}, {&(0x7f0000001a00)=""/197, 0xc5}], 0x6}, 0x0)

1.333209819s ago: executing program 3 (id=1959):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000400)={[{@umask={'umask', 0x3d, 0x8}}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@dmask={'dmask', 0x3d, 0x1ff}}, {@umask={'umask', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x400}}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x1, 0x1534, &(0x7f0000002d00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0)
getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000)

1.257777571s ago: executing program 1 (id=1960):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xe, 0x7ffffffe}]})
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4)

1.228148192s ago: executing program 1 (id=1961):
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xc)

1.054077208s ago: executing program 1 (id=1962):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30)

917.290981ms ago: executing program 3 (id=1963):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
getsockopt$MRT(r0, 0x0, 0xd0, 0x0, 0x0)

874.861583ms ago: executing program 4 (id=1964):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

741.835787ms ago: executing program 1 (id=1965):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x3fffff)

740.971847ms ago: executing program 3 (id=1975):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="d2fe03076003008cb89e08f088a8", 0x0, 0x8000d5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

606.842571ms ago: executing program 1 (id=1966):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@inlinecrypt}, {@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@bh}, {@errors_continue}, {@init_itable}, {@errors_remount}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@lazytime}, {@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@debug}]}, 0xfc, 0x575, &(0x7f0000000380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00)

606.718311ms ago: executing program 4 (id=1967):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$eJzs3c9OE10Yx/HfmSlteeHFUTAmxoVBia4M4Ma4aWKI1+BGI9KaEBqIiImysXFtvAD3bLwAL8KVMXGNK1deALsxZ3pKz7QzbYHQAfl+ktrO9Px5zsy0c56RZgTgwnq0sr93/7d9GClUKOmhFNi3bqok6aquVd9s7qzvNBv1QQ2FUlXJw0hJTdNXZm2zkVXV1ktqOJFdKmnaX4fTEcdx/KvoIFCkqnsOs94MpIr7dIZ+4bOs0rM80bPcCqXWGOM5i8yBDvRWM0XHAQAolmmf3wN3np928/cgkBbcad8////8v+B4T+aODooOoWDe+T/JsmJj9++l5K1uvmc06cp3ssSj9mPnYmW1j6zUBNOks8r+ZDGJJZh8ud5s3FvbatYDfVAtYfy8cE5STXWXs2ZF29/0fMa6tLK/sD+sdK6pZAwTdgzL3fhrNa/IbFanx93aozDfzHfzzET6rPrh/K8UG3/Mbk89nujGv5jX3Narp/Y5apfKGeVluxtK19MbduAow7yMRG5LxaHSFwiidJzlzFpl9dRqj24pryfXzmxmreUhteZsrS9ere7RnF/ztJlP5omZ1x991Yo3/w/s1l5Q/yczu5GkpDsyBo6nlJSM/FWtG5klg6OPBUfU3cYf9UIPNPP63e7GarPZ2B73CxvD2Du9mC8i9a7pHARnJcLjvbDfsf4aRY3t0nh6L59401XdTrGTmf4yld2N1YpfuD3Szgmxt8HOx3qE3jsX8IZGOMZvJRSmu9Pzy7wX/xPzD7NfHqad/3n5ymKS9Nh/ogHz9HjYtM1rcSkjN+heqv/Pa8m46/P5GdBUZgbX0mg5V1L31l3ptrdyf68yKOeKdEWH2fD5Z1b0Q8+5/g8AAAAAAAAAAAAAAAAAAHDejOPXGl53/B05AAAAAAAAAAAAAAAAAAAAAADHkH//36pO8f6/qd8BjHz/394bewI4kb8BAAD//+jIZ98=")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

598.564891ms ago: executing program 5 (id=1968):
syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000040)='./file1\x00', 0x2000041, &(0x7f0000000140)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@utf8no}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@uni_xlate}, {@utf8no}, {@uni_xlate}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x99dc}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}]}, 0x1, 0x372, &(0x7f0000000580)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

521.563504ms ago: executing program 0 (id=1969):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x7c37, 0x4)
sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10)

0s ago: executing program 4 (id=1970):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy")
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40800, &(0x7f0000000240)={[{@noquota}, {@noblock_validity}, {@nogrpid}, {@data_journal}]}, 0xfe, 0x282, &(0x7f00000015c0)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.616 (6179)
[  155.804518][ T6177] JBD2: Ignoring recovery information on journal
[  155.808251][ T6179] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  155.894270][ T6179] BTRFS info (device loop1): force clearing of disk cache
[  155.910583][ T6179] BTRFS info (device loop1): enabling auto defrag
[  155.928079][ T6179] BTRFS info (device loop1): turning on flush-on-commit
[  155.948467][ T6179] BTRFS info (device loop1): max_inline at 0
[  155.966975][ T6177] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  155.980653][ T6179] BTRFS info (device loop1): enabling disk space caching
[  156.059558][ T6179] BTRFS info (device loop1): disk space caching is enabled
[  156.116394][ T6179] BTRFS info (device loop1): has skinny extents
[  156.354268][ T4197] ocfs2: Unmounting device (7,0) on (node local)
[  156.501436][ T6179] BTRFS info (device loop1): enabling ssd optimizations
[  156.522295][ T6179] BTRFS info (device loop1): clearing free space tree
[  156.531308][ T6179] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  156.542788][ T6179] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  156.729727][ T6220] EXT4-fs (loop4): Test dummy encryption mode enabled
[  156.802050][ T6220] EXT4-fs (loop4): Test dummy encryption mode enabled
[  156.866386][ T6220] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5
[  156.866386][ T6220] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  156.866386][ T6220] 
[  156.949522][ T6234] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  157.096570][ T6220] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,user_xattr,test_dummy_encryption=v1,nodiscard,data_err=ignore,noacl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  157.131712][ T5328] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  157.218946][ T3073] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22.
[  157.272748][ T4195] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  157.302199][ T4195] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  157.352064][ T4195] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  157.371181][ T6238] ntfs: volume version 3.1.
[  157.451291][ T3073] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22.
[  157.484960][ T4195] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22.
[  157.579595][ T6238] ntfs: (device loop0): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring.
[  158.201108][ T6241] set_capacity_and_notify: 4 callbacks suppressed
[  158.201125][ T6241] loop5: detected capacity change from 0 to 32768
[  158.419341][ T6262] loop3: detected capacity change from 0 to 4096
[  158.460464][ T6241] XFS (loop5): Mounting V5 Filesystem
[  158.515502][ T6262] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  158.615870][ T6262] ntfs: volume version 3.1.
[  158.643145][ T6241] XFS (loop5): Ending clean mount
[  158.751503][ T6262] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set ascii.  You might want to try to use the mount option nls=utf8.
[  158.824141][ T6262] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  158.875313][ T5027] XFS (loop5): Unmounting Filesystem
[  159.016288][ T6251] loop0: detected capacity change from 0 to 40427
[  159.125642][ T6251] F2FS-fs (loop0): Corrupted extension count (327717 + 1 > 64)
[  159.133664][ T6251] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  159.212198][ T6251] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff
[  159.231549][ T6278] netlink: 'syz.3.645': attribute type 16 has an invalid length.
[  159.252985][ T6251] F2FS-fs (loop0): invalid crc value
[  159.293250][ T6251] F2FS-fs (loop0): Found nat_bits in checkpoint
[  159.421870][ T6251] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  159.431247][ T6251] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  159.471783][ T6273] loop4: detected capacity change from 0 to 32768
[  159.537177][ T6268] loop1: detected capacity change from 0 to 32768
[  159.605904][ T4197] attempt to access beyond end of device
[  159.605904][ T4197] loop0: rw=2049, want=45104, limit=40427
[  159.644085][ T4203] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  159.662703][ T6273] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.643 (6273)
[  159.739303][ T6273] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  159.753718][ T6268] XFS (loop1): Mounting V5 Filesystem
[  159.773993][ T6273] BTRFS info (device loop4): setting nodatacow, compression disabled
[  159.804020][ T6273] BTRFS info (device loop4): turning on flush-on-commit
[  159.854153][ T6273] BTRFS info (device loop4): using free space tree
[  159.864281][ T6273] BTRFS info (device loop4): has skinny extents
[  159.886273][ T6268] XFS (loop1): Ending clean mount
[  159.903922][ T4203] usb 4-1: Using ep0 maxpacket: 16
[  159.916002][ T6268] XFS (loop1): Quotacheck needed: Please wait.
[  160.013313][ T6273] BTRFS info (device loop4): enabling ssd optimizations
[  160.024176][ T4203] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  160.032338][ T4203] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.132796][ T4203] usb 4-1: config 0 has no interface number 0
[  160.169261][ T4203] usb 4-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b
[  160.203995][ T4203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.247460][ T4203] usb 4-1: config 0 descriptor??
[  160.269152][ T6268] XFS (loop1): Quotacheck: Done.
[  160.382617][ T4194] XFS (loop1): Unmounting Filesystem
[  160.492234][ T5470] usb 4-1: USB disconnect, device number 6
[  160.689131][ T6323] loop0: detected capacity change from 0 to 64
[  161.347585][ T4197] hfs: node 4:3 still has 2 user(s)!
[  161.435352][ T6319] loop5: detected capacity change from 0 to 32768
[  161.520549][ T6319] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  161.548586][ T6319] JBD2: Ignoring recovery information on journal
[  161.795694][ T6319] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  161.891018][ T6332] loop1: detected capacity change from 0 to 32768
[  161.951084][ T6350] usb usb9: usbfs: process 6350 (syz.0.663) did not claim interface 0 before use
[  162.074780][ T5027] ocfs2: Unmounting device (7,5) on (node local)
[  162.751401][ T6343] loop4: detected capacity change from 0 to 32768
[  162.761911][ T6364] loop0: detected capacity change from 0 to 256
[  162.893857][ T6369] damon: kdamond (6369) starts
[  162.927951][ T6343] XFS (loop4): Mounting V5 Filesystem
[  163.108042][ T6348] XFS (loop3): Mounting V5 Filesystem
[  163.153196][ T6343] XFS (loop4): Ending clean mount
[  163.328595][ T6399] set_capacity_and_notify: 1 callbacks suppressed
[  163.328613][ T6399] loop1: detected capacity change from 0 to 256
[  163.343627][ T6348] XFS (loop3): Ending clean mount
[  163.417014][ T6403] device bridge0 entered promiscuous mode
[  163.471800][ T6348] XFS (loop3): Quotacheck needed: Please wait.
[  163.490291][ T4196] XFS (loop4): Unmounting Filesystem
[  163.648446][ T6348] XFS (loop3): Quotacheck: Done.
[  163.682229][ T6407] syz.0.683 uses obsolete (PF_INET,SOCK_PACKET)
[  163.784439][ T6407] loop0: detected capacity change from 0 to 1024
[  163.846191][ T6407] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  163.909202][ T4195] XFS (loop3): Unmounting Filesystem
[  164.034945][ T6407] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,dax=inode,dioread_nolock,nodelalloc,noblock_validity,jqfmt=vfsv0,,errors=continue. Quota mode: none.
[  164.291875][ T6422] loop5: detected capacity change from 0 to 256
[  164.443296][ T6422] FAT-fs (loop5): Directory bread(block 64) failed
[  164.473979][ T6422] FAT-fs (loop5): Directory bread(block 65) failed
[  164.480692][ T6422] FAT-fs (loop5): Directory bread(block 66) failed
[  164.502133][ T6411] loop1: detected capacity change from 0 to 32768
[  164.529205][ T6422] FAT-fs (loop5): Directory bread(block 67) failed
[  164.548718][ T6422] FAT-fs (loop5): Directory bread(block 68) failed
[  164.556765][ T6422] FAT-fs (loop5): Directory bread(block 69) failed
[  164.566432][ T6422] FAT-fs (loop5): Directory bread(block 70) failed
[  164.573659][ T6422] FAT-fs (loop5): Directory bread(block 71) failed
[  164.581806][ T6422] FAT-fs (loop5): Directory bread(block 72) failed
[  164.606609][ T6422] FAT-fs (loop5): Directory bread(block 73) failed
[  164.632807][ T6411] XFS (loop1): Mounting V5 Filesystem
[  164.751763][ T6411] XFS (loop1): Ending clean mount
[  164.776453][ T6411] XFS (loop1): Quotacheck needed: Please wait.
[  164.938181][ T6411] XFS (loop1): Quotacheck: Done.
[  165.062662][ T4194] XFS (loop1): Unmounting Filesystem
[  165.355044][ T6450] loop5: detected capacity change from 0 to 512
[  165.439972][ T6450] EXT4-fs (loop5): orphan cleanup on readonly fs
[  165.482776][ T6450] EXT4-fs error (device loop5): ext4_quota_enable:6440: comm syz.5.701: Bad quota inum: 16384, type: 0
[  165.563281][ T6450] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=16384). Please run e2fsck to fix.
[  165.624102][ T6450] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  165.641950][ T6453] loop4: detected capacity change from 0 to 64
[  165.652720][ T6450] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nobarrier,dioread_lock,usrjquota=,,errors=continue. Quota mode: writeback.
[  165.764985][ T6450] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  165.844897][   T26] audit: type=1800 audit(1779880537.659:14): pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.702" name="file1" dev="loop4" ino=18 res=0 errno=0
[  165.924301][ T6450] EXT4-fs error (device loop5): ext4_quota_enable:6440: comm syz.5.701: Bad quota inum: 16384, type: 0
[  165.982392][ T6446] loop0: detected capacity change from 0 to 32768
[  165.999022][ T6450] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=16384). Please run e2fsck to fix.
[  166.127191][ T6446] XFS (loop0): Mounting V5 Filesystem
[  166.230476][ T6472] loop1: detected capacity change from 0 to 4096
[  166.260674][ T6446] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  166.290371][ T6472] ntfs: (device loop1): parse_options(): Unrecognized mount option mft_zone_multipli	r.
[  166.309279][ T6446] XFS (loop0): Starting recovery (logdev: internal)
[  166.348306][ T6472] ntfs: (device loop1): parse_options(): Invalid uid option argument: 0xffffffffffffffff
[  166.442587][ T6446] XFS (loop0): Ending recovery (logdev: internal)
[  166.611876][   T26] audit: type=1800 audit(1779880538.419:15): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.698" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  166.730303][ T6491] netlink: 'syz.1.712': attribute type 1 has an invalid length.
[  166.790071][ T4197] XFS (loop0): Unmounting Filesystem
[  167.237716][ T6510] loop4: detected capacity change from 0 to 764
[  167.272227][ T6514] loop5: detected capacity change from 0 to 256
[  167.347937][ T6510] rock: directory entry would overflow storage
[  167.365268][ T6510] rock: sig=0x4654, size=5, remaining=4
[  167.423200][ T6514] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  167.629491][ T6518] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  168.007504][ T6530] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=4294967287, location=4294967287
[  168.076329][ T6530] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.615428][ T6541] set_capacity_and_notify: 5 callbacks suppressed
[  168.615445][ T6541] loop0: detected capacity change from 0 to 8192
[  168.723104][ T6541] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  168.738148][ T6541] REISERFS (device loop0): using ordered data mode
[  168.745688][ T6541] reiserfs: using flush barriers
[  168.754580][ T6541] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  168.771455][ T6541] REISERFS (device loop0): checking transaction log (loop0)
[  168.781525][ T6541] REISERFS (device loop0): Using r5 hash to sort names
[  168.789923][ T6541] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  169.042154][ T6568] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  169.224317][ T1108] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  169.621287][ T6588] vivid-001: disconnect
[  169.632713][ T6589] netlink: 436 bytes leftover after parsing attributes in process `syz.4.759'.
[  169.654508][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.663652][ T6587] vivid-001: reconnect
[  169.679318][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.691365][ T6589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.759'.
[  169.700912][ T1108] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  169.710956][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.769097][ T1108] usb 4-1: config 0 descriptor??
[  169.826938][ T6557] loop5: detected capacity change from 0 to 32768
[  169.982863][ T6600] loop0: detected capacity change from 0 to 512
[  170.147580][ T6600] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  170.226720][ T6600] EXT4-fs (loop0): 1 truncate cleaned up
[  170.241213][ T6600] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000010000,,errors=continue. Quota mode: none.
[  170.271741][ T6613] loop5: detected capacity change from 0 to 64
[  170.286171][ T1108] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  170.297147][ T1108] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  170.309202][ T1108] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  170.317499][ T1108] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  170.330682][ T1108] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  170.339180][ T1108] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  170.351951][ T1108] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  170.371245][ T1108] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[  170.470996][ T6617] netlink: 108 bytes leftover after parsing attributes in process `syz.1.771'.
[  170.494230][ T1108] arvo 0003:1E7D:30D4.0005: couldn't init struct arvo_device
[  170.509717][ T1108] arvo 0003:1E7D:30D4.0005: couldn't install keyboard
[  170.588007][ T1108] arvo: probe of 0003:1E7D:30D4.0005 failed with error -71
[  170.637270][ T1108] usb 4-1: USB disconnect, device number 7
[  170.679841][ T6623] loop1: detected capacity change from 0 to 64
[  170.731592][ T6621] loop5: detected capacity change from 0 to 4096
[  170.791808][ T6621] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  170.880411][ T6624] fido_id[6624]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  170.972721][ T6621] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  171.156293][ T6637] loop3: detected capacity change from 0 to 512
[  171.806230][ T6669] CUSE: unknown device info "�KJ�H+��ۤ2Lh��nL�1�`�Cc��n�����8���0���(�3նi��>f���_ٮ,��
�<�_e�F��"
[  171.848801][ T6669] CUSE: unknown device info "3�ܟ�,��̘�"
[  171.884044][ T6669] CUSE: unknown device info "J���2SZ�� !e/��������J�+-n��a4����D�|G$��5O~�q	��
[  171.884044][ T6669] f����z��X�SA�x��j��T�ǔ��w���xR�ɐQ��(hҏj	p�VdY0��|M?2J��I�v�^
R�@��"
[  171.984106][ T6669] CUSE: unknown device info "!To�}ݝ&|L+U��o��ϲ���"��FstV�:׌E�gJ�����<@c�����4�T�M�M|�����"
[  172.022406][ T6669] CUSE: DEVNAME unspecified
[  172.293671][ T6653] loop5: detected capacity change from 0 to 32768
[  172.406634][ T6653] XFS (loop5): Mounting V5 Filesystem
[  172.457975][ T6665] loop3: detected capacity change from 0 to 32768
[  172.486177][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.800'.
[  172.527754][ T6665] ERROR: (device loop3): dbAlloc: unable to allocate blocks
[  172.527754][ T6665] 
[  172.665723][ T6653] XFS (loop5): Ending clean mount
[  172.676068][ T6653] XFS (loop5): Quotacheck needed: Please wait.
[  172.806931][ T6653] XFS (loop5): Quotacheck: Done.
[  172.830486][ T6657] loop1: detected capacity change from 0 to 40427
[  172.882529][ T5027] XFS (loop5): Unmounting Filesystem
[  172.918219][ T6657] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  172.955054][ T6657] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  173.049513][ T6657] F2FS-fs (loop1): Found nat_bits in checkpoint
[  173.255454][ T6657] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  173.281972][ T6657] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  173.709195][ T4194] attempt to access beyond end of device
[  173.709195][ T4194] loop1: rw=2049, want=40968, limit=40427
[  173.844779][ T6723] loop5: detected capacity change from 0 to 1024
[  173.861850][ T6705] loop3: detected capacity change from 0 to 32768
[  173.870385][ T6719] loop0: detected capacity change from 0 to 1024
[  173.892082][ T6723] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (46228!=20869)
[  173.997187][ T6705] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  174.123946][ T6705] JBD2: Ignoring recovery information on journal
[  174.286279][ T6705] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  174.318315][ T6723] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback.
[  174.467521][ T6723] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.816: bg 0: block 32: padding at end of block bitmap is not set
[  174.763656][ T4195] ocfs2: Unmounting device (7,3) on (node local)
[  174.842625][ T6745] loop4: detected capacity change from 0 to 8192
[  174.954069][ T6745] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  175.003565][ T6745] REISERFS (device loop4): using ordered data mode
[  175.021373][ T6757] loop1: detected capacity change from 0 to 1024
[  175.039547][ T6745] reiserfs: using flush barriers
[  175.076499][ T6745] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  175.113928][ T4462] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  175.164233][ T6745] REISERFS (device loop4): checking transaction log (loop4)
[  175.185374][ T6757] hfsplus: bad catalog entry type
[  175.323651][ T3073] hfsplus: b-tree write err: -5, ino 25
[  175.335674][ T3073] hfsplus: b-tree write err: -5, ino 4
[  175.341337][ T3073] hfsplus: b-tree write err: -5, ino 2
[  175.445354][ T6745] REISERFS (device loop4): Using tea hash to sort names
[  175.452994][ T6745] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  175.514241][ T4462] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.530435][ T6759] loop0: detected capacity change from 0 to 32768
[  175.544456][ T6745] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  175.555325][ T4462] usb 6-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00
[  175.572215][ T4462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.594720][ T4462] usb 6-1: config 0 descriptor??
[  175.650029][ T6759] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.830 (6759)
[  175.725869][ T6759] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  175.749500][ T6759] BTRFS info (device loop0): using free space tree
[  175.794261][ T6759] BTRFS info (device loop0): has skinny extents
[  176.029264][ T6795] loop1: detected capacity change from 0 to 1024
[  176.067748][ T6759] BTRFS info (device loop0): enabling ssd optimizations
[  176.087088][ T4462] hid (null): global environment stack underflow
[  176.163098][ T4462] hid (null): unknown global tag 0xd
[  176.195373][ T6804] netlink: 'syz.3.841': attribute type 10 has an invalid length.
[  176.240437][ T4462] logitech-hidpp-device 0003:046D:C090.0006: global environment stack underflow
[  176.283127][ T4462] logitech-hidpp-device 0003:046D:C090.0006: item 0 1 1 11 parsing failed
[  176.314369][ T6804] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.329863][ T4462] logitech-hidpp-device 0003:046D:C090.0006: hidpp_probe:parse failed
[  176.347335][ T4462] logitech-hidpp-device: probe of 0003:046D:C090.0006 failed with error -22
[  176.378443][ T6804] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  176.393255][ T4462] usb 6-1: USB disconnect, device number 3
[  176.440113][ T6810] netlink: 220 bytes leftover after parsing attributes in process `syz.4.843'.
[  176.464189][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'.
[  177.112777][ T6830] netlink: 'syz.5.853': attribute type 8 has an invalid length.
[  177.326050][ T6840] loop5: detected capacity change from 0 to 1024
[  177.466875][ T6850] loop4: detected capacity change from 0 to 64
[  177.494151][  T695] hfsplus: b-tree write err: -5, ino 25
[  177.499960][  T695] hfsplus: b-tree write err: -5, ino 4
[  177.553977][  T695] hfsplus: b-tree write err: -5, ino 2
[  177.593165][ T6857] loop3: detected capacity change from 0 to 1024
[  177.632775][ T6860] netlink: 324 bytes leftover after parsing attributes in process `syz.0.868'.
[  177.805650][ T6857] smb3: Unexpected value for 'rdma'
[  177.821585][ T6870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.872'.
[  178.013867][ T5494] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  178.326700][ T6902] netlink: 104 bytes leftover after parsing attributes in process `syz.1.888'.
[  178.368202][ T6897] FAT-fs (loop5): Directory bread(block 64) failed
[  178.374656][ T5494] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  178.385922][ T6897] FAT-fs (loop5): Directory bread(block 65) failed
[  178.392745][ T5494] usb 1-1: config 0 has no interface number 0
[  178.402944][ T6897] FAT-fs (loop5): Directory bread(block 66) failed
[  178.421828][ T6897] FAT-fs (loop5): Directory bread(block 67) failed
[  178.424619][   T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  178.432448][ T6897] FAT-fs (loop5): Directory bread(block 68) failed
[  178.464114][ T6897] FAT-fs (loop5): Directory bread(block 69) failed
[  178.470811][ T6897] FAT-fs (loop5): Directory bread(block 70) failed
[  178.493977][ T6897] FAT-fs (loop5): Directory bread(block 71) failed
[  178.511469][ T6897] FAT-fs (loop5): Directory bread(block 72) failed
[  178.528435][ T6897] FAT-fs (loop5): Directory bread(block 73) failed
[  178.553994][ T4244] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  178.564205][ T5494] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  178.597957][ T5494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.623891][ T5494] usb 1-1: Product: syz
[  178.629182][ T5494] usb 1-1: Manufacturer: syz
[  178.635097][ T5494] usb 1-1: SerialNumber: syz
[  178.642132][ T5494] usb 1-1: config 0 descriptor??
[  178.693987][   T23] usb 5-1: Using ep0 maxpacket: 8
[  178.824166][   T23] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  178.843872][   T23] usb 5-1: config 179 has no interface number 0
[  178.870182][   T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  178.892723][   T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  178.903915][ T6910] set_capacity_and_notify: 2 callbacks suppressed
[  178.903958][ T6910] loop1: detected capacity change from 0 to 2048
[  178.921945][ T6910] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  178.924276][ T5494] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  178.957805][   T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  178.974216][ T4244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.986045][ T5494] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  178.997783][ T4244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.020849][   T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  179.039554][ T6911] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  179.046117][ T5494] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  179.063496][ T4244] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  179.083846][   T23] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  179.097831][ T5494] usb 1-1: media controller created
[  179.107238][ T4244] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  179.124205][   T23] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  179.144236][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.157900][ T5494] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  179.166666][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.176895][ T4244] usb 4-1: config 0 descriptor??
[  179.214232][ T6890] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  179.309757][ T6913] loop1: detected capacity change from 0 to 512
[  179.468725][ T6890] udc-core: couldn't find an available UDC or it's busy
[  179.493913][ T6890] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  179.581307][ T5494] usb 1-1: USB disconnect, device number 6
[  179.666106][ T4244] plantronics 0003:047F:FFFF.0007: unbalanced delimiter at end of report description
[  179.690767][ T4244] plantronics 0003:047F:FFFF.0007: parse failed
[  179.706264][ T4244] plantronics: probe of 0003:047F:FFFF.0007 failed with error -22
[  179.727807][ T4249] usb 5-1: USB disconnect, device number 6
[  179.733946][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  179.734035][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  179.871156][ T5494] usb 4-1: USB disconnect, device number 8
[  179.940028][ T6939] netlink: 134700 bytes leftover after parsing attributes in process `syz.1.906'.
[  179.956174][ T6939] openvswitch: netlink: Message has 5 unknown bytes.
[  180.023651][ T6941] sp0: Synchronizing with TNC
[  180.033550][ T6943] nbd: must specify at least one socket
[  180.052794][ T6940] [U] �`
[  180.107940][ T6945] loop1: detected capacity change from 0 to 512
[  180.215171][ T6945] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback.
[  180.228551][ T6945] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.293208][ T6945] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.909: invalid size
[  180.374951][ T6945] EXT4-fs (loop1): Remounting filesystem read-only
[  180.633055][ T6976] loop0: detected capacity change from 0 to 128
[  180.705114][ T6976] EXT4-fs (loop0): Ignoring removed nobh option
[  180.765983][ T6976] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none.
[  180.813962][ T6976] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  181.175158][   T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  181.544121][   T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.563944][   T21] usb 2-1: config 0 interface 0 has no altsetting 0
[  181.589702][ T7027] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  181.709760][ T7031] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  181.734093][   T21] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  181.743164][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.759310][   T21] usb 2-1: Product: syz
[  181.775271][   T21] usb 2-1: Manufacturer: syz
[  181.779943][   T21] usb 2-1: SerialNumber: syz
[  181.794035][ T1108] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  181.805118][   T21] usb 2-1: config 0 descriptor??
[  181.846222][   T21] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  181.885873][ T7034] loop0: detected capacity change from 0 to 128
[  181.895673][   T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  181.943251][   T21] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  181.972065][ T7034] VFS: Found a Xenix FS (block size = 1024) on device loop0
[  181.983951][   T21] usb 2-1: media controller created
[  182.019115][   T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  182.035414][ T7013] loop3: detected capacity change from 0 to 32768
[  182.076736][ T4197] sysv_free_block: flc_count > flc_size
[  182.083154][ T4197] sysv_free_block: flc_count > flc_size
[  182.124342][ T4197] sysv_free_block: flc_count > flc_size
[  182.132340][ T7013] JBD2: Ignoring recovery information on journal
[  182.144081][ T4197] sysv_free_block: flc_count > flc_size
[  182.149699][ T4197] sysv_free_block: flc_count > flc_size
[  182.167629][   T21] DVB: Unable to find symbol tda10046_attach()
[  182.174138][   T21] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  182.179627][ T4197] sysv_free_block: flc_count > flc_size
[  182.182767][   T21] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  182.214031][ T1108] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  182.239094][ T4197] sysv_free_block: flc_count > flc_size
[  182.242089][ T1108] usb 6-1: config 0 has no interface number 0
[  182.255414][ T4197] sysv_free_block: flc_count > flc_size
[  182.261011][ T4197] sysv_free_block: flc_count > flc_size
[  182.276919][ T1108] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.289363][ T4197] sysv_free_block: flc_count > flc_size
[  182.305691][ T4197] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  182.313827][ T1108] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.325125][ T7013] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  182.356969][ T1108] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  182.413809][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.436516][ T1108] usb 6-1: config 0 descriptor??
[  182.498169][ T4195] ocfs2: Unmounting device (7,3) on (node local)
[  182.634183][   T21] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71
[  182.670451][   T21] usb 2-1: USB disconnect, device number 6
[  182.908948][ T7060] loop3: detected capacity change from 0 to 24
[  182.929220][ T1108] prodikeys 0003:041E:2801.0008: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1
[  182.949421][ T1108] hid_prodikeys: hid-prodikeys: failed to find output report
[  182.949421][ T1108] 
[  183.158187][   T13] usb 6-1: USB disconnect, device number 4
[  183.272110][ T7065] fido_id[7065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  183.425738][ T7075] netlink: 408 bytes leftover after parsing attributes in process `syz.4.964'.
[  183.455562][ T7075] netlink: 88 bytes leftover after parsing attributes in process `syz.4.964'.
[  183.494584][ T7071] loop1: detected capacity change from 0 to 8192
[  183.545970][ T7071] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  183.563933][ T7071] REISERFS (device loop1): using ordered data mode
[  183.573714][ T7071] reiserfs: using flush barriers
[  183.584063][ T7071] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  183.605534][ T7071] REISERFS (device loop1): checking transaction log (loop1)
[  183.697189][ T7052] loop0: detected capacity change from 0 to 40427
[  183.832661][ T7052] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  183.873843][ T7052] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  183.894660][ T7052] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x1ffff
[  183.940160][ T7052] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8
[  183.995652][ T7052] F2FS-fs (loop0): invalid crc value
[  184.056513][ T7071] REISERFS (device loop1): Using tea hash to sort names
[  184.076471][ T7052] F2FS-fs (loop0): Found nat_bits in checkpoint
[  184.096491][ T7071] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  184.101718][ T7089] loop5: detected capacity change from 0 to 2048
[  184.162866][ T7071] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  184.223255][ T7052] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  184.241945][ T7052] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  184.294695][ T7093] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  184.375452][ T7077] loop3: detected capacity change from 0 to 32768
[  184.405455][ T4197] attempt to access beyond end of device
[  184.405455][ T4197] loop0: rw=2049, want=45104, limit=40427
[  184.873446][ T7084] loop4: detected capacity change from 0 to 32768
[  185.008503][ T7084] XFS (loop4): Mounting V5 Filesystem
[  185.148279][ T7084] XFS (loop4): Ending clean mount
[  185.172541][ T7084] XFS (loop4): Quotacheck needed: Please wait.
[  185.335387][ T7084] XFS (loop4): Quotacheck: Done.
[  185.390040][ T7122] loop0: detected capacity change from 0 to 8
[  185.408546][ T7121] loop1: detected capacity change from 0 to 1024
[  185.411855][ T4196] XFS (loop4): Unmounting Filesystem
[  185.559944][ T7121] hfsplus: bad catalog entry type
[  185.701423][ T7122] SQUASHFS error: Failed to read block 0x2d7: -5
[  185.722555][  T144] hfsplus: b-tree write err: -5, ino 25
[  185.747421][  T144] hfsplus: b-tree write err: -5, ino 4
[  185.755649][ T7122] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  185.782637][  T144] hfsplus: b-tree write err: -5, ino 2
[  185.987674][   T26] audit: type=1326 audit(1779880557.799:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7130 comm="syz.5.985" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3994000e59 code=0x0
[  186.337502][ T7147] loop0: detected capacity change from 0 to 512
[  186.386948][ T7144] loop1: detected capacity change from 0 to 4096
[  186.441338][ T7147] EXT4-fs (loop0): inline encryption not supported
[  186.455032][ T7147] EXT4-fs (loop0): Test dummy encryption mode enabled
[  186.494868][ T7144] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  186.557818][ T7147] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 1: comm syz.0.992: invalid block
[  186.570680][ T7144] ntfs3: loop1: Failed to load $Extend.
[  186.614602][ T7147] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.992: couldn't read orphan inode 11 (err -117)
[  186.628487][ T7147] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,journal_dev=0x0000000000000005,max_dir_size_kb=0x0000000000000004,noquota,nodiscard,sb=0x00000000000000ff,inlinecrypt,debug_want_extra_isize=0x0000000000000004,test_dummy_encryption,,errors=continue. Quota mode: none.
[  186.852990][ T7155] loop5: detected capacity change from 0 to 8192
[  186.883914][   T21] Bluetooth: hci4: command 0x0405 tx timeout
[  186.947111][ T7155] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  186.965169][ T7155] REISERFS (device loop5): using ordered data mode
[  186.971736][ T7155] reiserfs: using flush barriers
[  187.059183][ T7168] netlink: 'syz.1.1000': attribute type 1 has an invalid length.
[  187.067949][ T7155] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  187.116410][ T7168] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1000'.
[  187.156399][ T7168] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1000'.
[  187.234204][ T7155] REISERFS (device loop5): checking transaction log (loop5)
[  187.287592][ T7155] REISERFS (device loop5): Using r5 hash to sort names
[  187.307819][ T7155] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  187.619741][ T7192] loop1: detected capacity change from 0 to 128
[  187.633110][ T7149] loop4: detected capacity change from 0 to 32768
[  187.682209][ T7192] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  187.728189][ T7196] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.1014: inode has both inline data and extents flags
[  187.748207][ T7196] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1014: couldn't read orphan inode 15 (err -117)
[  187.813346][ T7196] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none.
[  187.873020][ T7149] JFS: metapage_get_blocks failed
[  187.927576][ T7149] ERROR: (device loop4): release_metapage: write_one_page() failed
[  187.927576][ T7149] 
[  187.977938][ T7149] ERROR: (device loop4): remounting filesystem as read-only
[  187.997384][ T7196] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  188.094093][  T277] ERROR: (device loop4): diUpdatePMap: the iag is outside the map
[  188.094093][  T277] 
[  188.407587][ T7227] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1027'.
[  188.438921][ T7223] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  188.525355][ T7232] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  188.582730][ T7232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.744493][   T13] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[  189.549554][ T7267] netlink: 'syz.3.1047': attribute type 4 has an invalid length.
[  189.585714][ T7267] netlink: 'syz.3.1047': attribute type 8 has an invalid length.
[  189.603325][ T7269] netlink: 'syz.0.1049': attribute type 1 has an invalid length.
[  189.611338][ T7226] set_capacity_and_notify: 4 callbacks suppressed
[  189.611354][ T7226] loop5: detected capacity change from 0 to 40427
[  189.617595][ T7267] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.1047'.
[  189.659043][ T7226] F2FS-fs (loop5): Corrupted extension count (327717 + 1 > 64)
[  189.672380][ T7226] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  189.703664][ T7226] F2FS-fs (loop5): invalid crc value
[  189.733249][ T7226] F2FS-fs (loop5): Found nat_bits in checkpoint
[  189.852181][ T7226] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  189.879462][ T7226] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  190.156913][ T7286] loop3: detected capacity change from 0 to 8192
[  190.222537][ T7286] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  190.257057][   T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  190.310719][ T7286] REISERFS (device loop3): using ordered data mode
[  190.353164][ T7286] reiserfs: using flush barriers
[  190.394168][ T7301] loop5: detected capacity change from 0 to 64
[  190.439911][ T7286] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  190.472524][   T26] audit: type=1800 audit(1779880562.279:17): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1062" name="file1" dev="loop5" ino=21 res=0 errno=0
[  190.560802][ T7286] REISERFS (device loop3): checking transaction log (loop3)
[  190.577542][ T7303] sp0: Synchronizing with TNC
[  190.592126][ T5027] hfs: node 4:3 still has 1 user(s)!
[  190.605480][ T7286] REISERFS (device loop3): Using r5 hash to sort names
[  190.612814][ T7286] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  190.636453][ T7286] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  190.694279][   T13] usb 1-1: config 0 has an invalid interface number: 192 but max is 2
[  190.708466][   T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.755132][   T13] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  190.786134][   T13] usb 1-1: config 0 has no interface number 1
[  190.792361][   T13] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0
[  190.806158][   T13] usb 1-1: too many endpoints for config 0 interface 192 altsetting 149: 169, using maximum allowed: 30
[  190.824932][   T13] usb 1-1: config 0 interface 192 altsetting 149 has 0 endpoint descriptors, different from the interface descriptor's value: 169
[  190.850071][   T13] usb 1-1: config 0 interface 0 has no altsetting 0
[  190.871270][   T13] usb 1-1: config 0 interface 0 has no altsetting 1
[  190.917511][   T13] usb 1-1: config 0 interface 192 has no altsetting 0
[  190.940377][   T13] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=56.d6
[  190.954398][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.008248][   T13] usb 1-1: config 0 descriptor??
[  191.214725][ T7314] loop1: detected capacity change from 0 to 136
[  191.300107][   T13] usb 1-1: USB disconnect, device number 7
[  191.506338][ T4244] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  191.705617][ T7338] loop3: detected capacity change from 0 to 256
[  191.756889][ T4244] usb 6-1: Using ep0 maxpacket: 8
[  191.813977][ T1108] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  191.874017][ T4244] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.915752][ T4244] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  191.948809][ T4244] usb 6-1: config 0 interface 0 has no altsetting 0
[  191.960430][ T4244] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  191.970965][ T4244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.992173][ T4244] usb 6-1: config 0 descriptor??
[  192.081522][ T7352] loop1: detected capacity change from 0 to 256
[  192.104003][ T1108] usb 5-1: Using ep0 maxpacket: 16
[  192.145095][ T7352] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  192.169242][ T7352] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  192.234208][ T1108] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  192.242539][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.294046][ T1108] usb 5-1: config 0 has no interface number 0
[  192.311029][ T7356] binder_alloc: binder_alloc_mmap_handler: 7355 200000ffe000-200001000000 already mapped failed -16
[  192.431121][ T7360] xt_l2tp: v2 tid > 0xffff: 37482740
[  192.446207][ T7345] loop0: detected capacity change from 0 to 32768
[  192.484131][ T1108] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  192.493231][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.497337][ T4244] kye 0003:0458:0138.0009: unknown main item tag 0x1
[  192.532571][ T1108] usb 5-1: Product: syz
[  192.540666][ T1108] usb 5-1: Manufacturer: syz
[  192.545505][ T1108] usb 5-1: SerialNumber: syz
[  192.566611][ T1108] usb 5-1: config 0 descriptor??
[  192.570900][ T4244] kye 0003:0458:0138.0009: unknown main item tag 0x0
[  192.606081][ T1108] usb 5-1: Found UVC 0.00 device syz (046d:08f3)
[  192.615981][ T4244] kye 0003:0458:0138.0009: unknown global tag 0xc
[  192.622448][ T4244] kye 0003:0458:0138.0009: item 0 1 1 12 parsing failed
[  192.623915][ T1108] usb 5-1: No valid video chain found.
[  192.672496][ T4244] kye 0003:0458:0138.0009: parse failed
[  192.729269][ T4244] kye: probe of 0003:0458:0138.0009 failed with error -22
[  192.779118][ T4244] usb 6-1: USB disconnect, device number 5
[  192.824404][ T1108] usb 5-1: USB disconnect, device number 8
[  192.860033][ T7345] XFS (loop0): Mounting V5 Filesystem
[  192.934389][ T7345] XFS (loop0): Ending clean mount
[  193.025203][ T4197] XFS (loop0): Unmounting Filesystem
[  193.450228][ T7398] loop4: detected capacity change from 0 to 512
[  193.539237][ T7398] EXT4-fs (loop4): orphan cleanup on readonly fs
[  193.597686][ T7398] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.1106: ea_inode with extended attributes
[  193.766167][ T7398] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1106: error while reading EA inode 11 err=-117
[  193.839476][ T7398] EXT4-fs (loop4): 1 orphan inode deleted
[  193.852183][ T7398] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,journal_ioprio=0x0000000000000000,discard,prjquota,nolazytime,init_itable=0x000000000000ffff,,errors=continue. Quota mode: writeback.
[  194.042355][ T7429] loop5: detected capacity change from 0 to 256
[  194.197364][ T7429] FAT-fs (loop5): Directory bread(block 1285) failed
[  194.223850][ T7429] FAT-fs (loop5): Directory bread(block 1286) failed
[  194.249997][ T7429] FAT-fs (loop5): Directory bread(block 1287) failed
[  194.301474][ T7429] FAT-fs (loop5): Directory bread(block 1288) failed
[  194.367074][ T7429] FAT-fs (loop5): Directory bread(block 1285) failed
[  194.407734][ T7429] FAT-fs (loop5): Directory bread(block 1286) failed
[  194.419138][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.419221][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.443497][ T7429] FAT-fs (loop5): Directory bread(block 1287) failed
[  194.450434][ T7429] FAT-fs (loop5): Directory bread(block 1288) failed
[  194.458281][ T7429] FAT-fs (loop5): Directory bread(block 1285) failed
[  194.466123][ T7429] FAT-fs (loop5): Directory bread(block 1286) failed
[  194.503845][   T23] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  194.723210][ T7448] loop0: detected capacity change from 0 to 2048
[  194.808455][ T7448] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  194.874200][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  194.904974][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  194.956769][   T23] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  195.001785][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.039377][   T23] usb 5-1: config 0 descriptor??
[  195.064749][ T7437] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  195.246977][ T7439] loop1: detected capacity change from 0 to 40427
[  195.374963][   T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  195.382744][ T7439] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  195.407047][ T7439] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  195.444033][ T7439] F2FS-fs (loop1): Found nat_bits in checkpoint
[  195.528071][   T23] elecom 0003:056E:010C.000A: unknown main item tag 0x3
[  195.553387][   T23] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  195.574257][   T23] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  195.581978][ T7439] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  195.589713][ T7439] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  195.609749][   T23] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  195.630408][   T23] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  195.637978][   T21] usb 4-1: Using ep0 maxpacket: 32
[  195.654091][   T23] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  195.661126][   T23] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  195.701028][   T23] elecom 0003:056E:010C.000A: unknown main item tag 0x0
[  195.725367][   T23] elecom 0003:056E:010C.000A: hidraw0: USB HID v0.08 Device [HID 056e:010c] on usb-dummy_hcd.4-1/input0
[  195.750469][   T23] usb 5-1: USB disconnect, device number 9
[  195.835856][ T7481] fido_id[7481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  195.914182][   T21] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  195.940882][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.957906][   T21] usb 4-1: Product: syz
[  195.962325][   T21] usb 4-1: Manufacturer: syz
[  195.967866][   T21] usb 4-1: SerialNumber: syz
[  195.983699][   T21] usb 4-1: config 0 descriptor??
[  196.239389][ T7493] loop5: detected capacity change from 0 to 1024
[  196.312810][ T7493] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 2: comm syz.5.1150: lblock 2 mapped to illegal pblock 2 (length 1)
[  196.337070][ T7493] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  196.364652][ T7493] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 48: comm syz.5.1150: lblock 0 mapped to illegal pblock 48 (length 1)
[  196.429758][ T7493] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  196.464065][ T7493] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1150: Failed to acquire dquot type 0
[  196.505206][   T23] Bluetooth: hci1: command 0x0406 tx timeout
[  196.520025][ T7493] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  196.539392][   T23] Bluetooth: hci2: command 0x0406 tx timeout
[  196.554216][   T23] Bluetooth: hci3: command 0x0406 tx timeout
[  196.560448][ T7493] EXT4-fs error (device loop5): ext4_evict_inode:284: inode #11: comm syz.5.1150: mark_inode_dirty error
[  196.582503][   T23] Bluetooth: hci0: command 0x0406 tx timeout
[  196.592173][ T7493] EXT4-fs warning (device loop5): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  196.614256][ T7493] EXT4-fs (loop5): 1 orphan inode deleted
[  196.630235][ T7493] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none.
[  196.658807][ T5328] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  196.707406][   T21] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  196.708960][ T7501] device veth0_to_team entered promiscuous mode
[  196.727959][ T5328] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  196.752653][ T5328] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0
[  196.916117][ T3109] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  196.940061][ T3109] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  196.950378][   T21] peak_usb: probe of 4-1:0.0 failed with error -71
[  196.957067][ T3109] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0
[  196.984395][ T5027] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  197.008389][ T5027] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  197.014957][   T21] usb 4-1: USB disconnect, device number 9
[  197.038343][ T7487] loop0: detected capacity change from 0 to 40427
[  197.063579][ T5027] EXT4-fs error (device loop5): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  197.100164][ T7492] loop1: detected capacity change from 0 to 32768
[  197.132162][ T7487] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  197.175293][ T7487] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  197.190696][ T7487] F2FS-fs (loop0): invalid crc value
[  197.199963][ T7487] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  197.314209][ T7511] loop5: detected capacity change from 0 to 1024
[  197.323310][ T7492] blkno = 8ed2c, nblocks = 1
[  197.356018][ T7492] ERROR: (device loop1): dbFree: block to be freed is outside the map
[  197.356018][ T7492] 
[  197.383006][ T7511] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  197.408295][ T7492] ERROR: (device loop1): remounting filesystem as read-only
[  197.426356][ T7492] ialloc: diAlloc returned -17!
[  197.465962][ T7519] loop4: detected capacity change from 0 to 256
[  197.481067][ T7487] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  197.492461][ T7487] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  197.551911][   T26] audit: type=1800 audit(1779880569.359:18): pid=7487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1148" name="file1" dev="loop0" ino=10 res=0 errno=0
[  197.641193][ T4197] attempt to access beyond end of device
[  197.641193][ T4197] loop0: rw=2049, want=45104, limit=40427
[  197.756453][ T7526] loop4: detected capacity change from 0 to 512
[  197.814854][ T7526] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  197.874689][ T7526] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  197.894642][ T7524] loop3: detected capacity change from 0 to 4096
[  197.925947][ T7526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856e01c, mo2=0102]
[  198.008808][ T7526] System zones: 1-12
[  198.034951][ T7526] EXT4-fs (loop4): orphan cleanup on readonly fs
[  198.045641][ T7524] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  198.110064][ T7526] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33619980: comm syz.4.1164: invalid block
[  198.165291][ T7524] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  198.217166][ T7526] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1164: invalid indirect mapped block 2 (level 2)
[  198.245445][ T7541] syz.1.1161 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  198.254367][ T7524] ntfs: volume version 3.1.
[  198.328310][ T7543] loop5: detected capacity change from 0 to 256
[  198.332006][ T7526] EXT4-fs (loop4): 1 truncate cleaned up
[  198.389775][ T7547] overlayfs: unrecognized mount option "\']*=�����[\1\���07���$�ܲ�" or missing value
[  198.421374][ T7526] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,data=writeback,grpquota,abort,errors=continue. Quota mode: writeback.
[  198.654008][ T4249] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  198.655506][ T7526] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  198.764889][ T7526] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (17031!=33349)
[  198.789184][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1175'.
[  198.813025][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1175'.
[  198.841785][ T7556] netlink: 'syz.5.1175': attribute type 12 has an invalid length.
[  199.064208][ T4249] usb 2-1: config index 0 descriptor too short (expected 1572, got 36)
[  199.072562][ T4249] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  199.123222][ T7570] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000
[  199.137805][ T7570] tipc: Enabled bearer <udp:syz0>, priority 10
[  199.306806][ T4249] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  199.331834][ T4249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.357313][ T4249] usb 2-1: Product: syz
[  199.367435][ T4249] usb 2-1: Manufacturer: syz
[  199.386931][ T4249] usb 2-1: SerialNumber: syz
[  199.491253][ T4249] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input10
[  199.704867][ T3549] bcm5974 2-1:1.0: could not read from device
[  199.743983][ T4249] bcm5974 2-1:1.0: could not read from device
[  199.784022][ T3549] bcm5974 2-1:1.0: could not read from device
[  199.851234][ T4249] input: failed to attach handler mousedev to device input10, error: -5
[  199.889755][ T4249] usb 2-1: USB disconnect, device number 7
[  199.895704][ T3549] bcm5974 2-1:1.0: could not read from device
[  199.913368][ T3549] bcm5974 2-1:1.0: could not read from device
[  200.134080][   T13] tipc: Node number set to 2886997005
[  200.143307][ T7578] loop4: detected capacity change from 0 to 32768
[  200.205065][ T7581] loop0: detected capacity change from 0 to 32768
[  200.293574][ T7578] XFS (loop4): Mounting V5 Filesystem
[  200.437578][ T7578] XFS (loop4): Ending clean mount
[  200.454186][ T7578] XFS (loop4): Quotacheck needed: Please wait.
[  200.579715][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'.
[  200.603544][ T7578] XFS (loop4): Quotacheck: Done.
[  200.803364][ T4196] XFS (loop4): Unmounting Filesystem
[  201.112364][ T7638] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1208'.
[  201.164835][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'.
[  201.372212][ T7621] loop1: detected capacity change from 0 to 32768
[  201.634431][ T7649] loop5: detected capacity change from 0 to 16
[  201.687712][ T7649] erofs: (device loop5): mounted with root inode @ nid 36.
[  201.726790][ T7652] ubi8: attaching mtd0
[  201.773011][ T7652] ubi8: scanning is finished
[  201.816918][ T7626] loop0: detected capacity change from 0 to 32768
[  201.856978][ T7652] ubi8: empty MTD device detected
[  201.890137][ T7652] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record
[  201.999508][ T7626] XFS (loop0): Mounting V5 Filesystem
[  202.120918][ T4212] Bluetooth: hci4: link tx timeout
[  202.126655][ T4212] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  202.212373][ T7626] XFS (loop0): Ending clean mount
[  202.277110][ T7652] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  202.290590][ T4197] XFS (loop0): Unmounting Filesystem
[  202.333913][ T1108] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  202.353400][ T7679] loop4: detected capacity change from 0 to 512
[  202.491429][ T7679] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  202.525711][ T7681] loop5: detected capacity change from 0 to 4096
[  202.556899][ T7679] EXT4-fs (loop4): 1 truncate cleaned up
[  202.562600][ T7679] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none.
[  202.633891][ T1108] usb 4-1: Using ep0 maxpacket: 16
[  202.655944][ T7681] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  202.764242][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.795992][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.847693][ T1108] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  202.885996][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.894913][ T7692] netlink: 'syz.0.1230': attribute type 9 has an invalid length.
[  202.956869][ T1108] usb 4-1: config 0 descriptor??
[  203.227078][ T7708] loop0: detected capacity change from 0 to 2048
[  203.295155][ T4309]  loop0: p1 < > p4
[  203.295155][ T4309]  p4: <solaris:  cannot handle version 1577058305 vtoc>
[  203.372630][ T4309] loop0: p4 size 722688 extends beyond EOD, truncated
[  203.431407][ T7708]  loop0: p1 < > p4
[  203.431407][ T7708]  p4: <solaris:  cannot handle version 1577058305 vtoc>
[  203.443831][ T4249] Bluetooth: hci2: command 0x0811 tx timeout
[  203.466936][ T1108] apple 0003:05AC:024B.000B: report_id 0 is invalid
[  203.493817][ T1108] apple 0003:05AC:024B.000B: item 0 0 1 8 parsing failed
[  203.516896][ T1108] apple 0003:05AC:024B.000B: parse failed
[  203.522689][ T1108] apple: probe of 0003:05AC:024B.000B failed with error -22
[  203.532119][ T7708] loop0: p4 size 722688 extends beyond EOD, truncated
[  203.711749][ T4443] udevd[4443]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  203.713215][ T4309] udevd[4309]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  203.736861][ T7731] loop5: detected capacity change from 0 to 64
[  203.762959][ T4249] usb 4-1: USB disconnect, device number 10
[  203.852607][ T4445] udevd[4445]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  203.881756][ T4309] udevd[4309]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  204.025429][ T7737] usb usb8: usbfs: process 7737 (syz.5.1249) did not claim interface 0 before use
[  204.118729][ T7741] loop4: detected capacity change from 0 to 16
[  204.164004][ T4249] Bluetooth: hci4: command 0x0406 tx timeout
[  204.236362][ T7741] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  204.304053][ T7741] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  204.312472][ T7741] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version
[  204.388419][ T7749] netlink: 'syz.0.1255': attribute type 41 has an invalid length.
[  204.596235][ T7755] hfsplus: bad catalog entry type
[  204.754723][ T7770] ubi31: attaching mtd0
[  204.758978][ T7770] ubi31 error: ubi_attach_mtd_dev: bad VID header (42) or data offsets (106)
[  204.782865][ T5328] hfsplus: b-tree write err: -5, ino 25
[  204.788738][ T5328] hfsplus: b-tree write err: -5, ino 4
[  204.804119][ T5328] hfsplus: b-tree write err: -5, ino 2
[  205.179129][ T7792] set_capacity_and_notify: 1 callbacks suppressed
[  205.179145][ T7792] loop3: detected capacity change from 0 to 4096
[  205.203902][   T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  205.319657][ T7792] NILFS (loop3): invalid segment: Checksum error in segment payload
[  205.346726][ T7792] NILFS (loop3): trying rollback from an earlier position
[  205.418993][ T7792] NILFS (loop3): recovery complete
[  205.459254][ T7809] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  205.499200][ T7808] option changes via remount are deprecated (pid=7807 comm=syz.1.1284)
[  205.556503][ T7808] cgroup: option or name mismatch, new: 0x0 "func", old: 0x0 ""
[  205.604319][   T23] usb 6-1: unable to get BOS descriptor or descriptor too short
[  205.686943][   T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.689516][ T7815] loop1: detected capacity change from 0 to 256
[  205.713912][   T23] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  205.742690][ T7813] loop3: detected capacity change from 0 to 16
[  205.760018][ T7813] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  205.864364][ T7815] FAT-fs (loop1): Directory bread(block 64) failed
[  205.902003][ T7815] FAT-fs (loop1): Directory bread(block 65) failed
[  205.909069][   T23] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  205.938370][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.961401][ T7815] FAT-fs (loop1): Directory bread(block 66) failed
[  205.976140][   T23] usb 6-1: Product: syz
[  205.990583][   T23] usb 6-1: Manufacturer: syz
[  205.995753][ T7815] FAT-fs (loop1): Directory bread(block 67) failed
[  206.013954][   T23] usb 6-1: SerialNumber: syz
[  206.025543][ T7815] FAT-fs (loop1): Directory bread(block 68) failed
[  206.070809][ T7815] FAT-fs (loop1): Directory bread(block 69) failed
[  206.102651][ T7815] FAT-fs (loop1): Directory bread(block 70) failed
[  206.112759][ T7826] loop0: detected capacity change from 0 to 2048
[  206.125106][ T7815] FAT-fs (loop1): Directory bread(block 71) failed
[  206.132873][ T7815] FAT-fs (loop1): Directory bread(block 72) failed
[  206.146180][ T7815] FAT-fs (loop1): Directory bread(block 73) failed
[  206.187364][ T7830] loop4: detected capacity change from 0 to 2048
[  206.231995][ T7826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  206.248592][ T7830] EXT4-fs (loop4): Ignoring removed bh option
[  206.314064][ T4249] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  206.326846][   T23] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  206.377638][   T23] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor
[  206.396754][ T7830] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  206.434495][   T23] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  206.482662][   T23] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor
[  206.523464][   T23] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  206.594077][ T4249] usb 4-1: Using ep0 maxpacket: 32
[  206.624017][ T7842] loop4: detected capacity change from 0 to 64
[  206.695704][ T7842] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  206.706615][ T7844] loop1: detected capacity change from 0 to 1024
[  206.733993][   T23] usb 6-1: USB disconnect, device number 6
[  206.757168][ T4249] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  206.775215][ T4249] usb 4-1: config 0 has no interface number 0
[  206.792098][ T4249] usb 4-1: config 0 interface 184 has no altsetting 0
[  207.014728][ T4287] udevd[4287]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  207.031060][ T4249] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  207.043792][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.064813][ T4249] usb 4-1: Product: syz
[  207.076201][ T4249] usb 4-1: Manufacturer: syz
[  207.092400][ T4249] usb 4-1: SerialNumber: syz
[  207.148531][ T4249] usb 4-1: config 0 descriptor??
[  207.226589][ T4249] smsc75xx v1.0.0
[  207.351299][ T7865] loop4: detected capacity change from 0 to 256
[  207.476178][ T7865] FAT-fs (loop4): Directory bread(block 64) failed
[  207.493100][ T7865] FAT-fs (loop4): Directory bread(block 65) failed
[  207.502207][ T7865] FAT-fs (loop4): Directory bread(block 66) failed
[  207.514872][ T7865] FAT-fs (loop4): Directory bread(block 67) failed
[  207.521666][ T7865] FAT-fs (loop4): Directory bread(block 68) failed
[  207.535096][ T7865] FAT-fs (loop4): Directory bread(block 69) failed
[  207.541787][ T7865] FAT-fs (loop4): Directory bread(block 70) failed
[  207.572501][ T7865] FAT-fs (loop4): Directory bread(block 71) failed
[  207.587376][ T7865] FAT-fs (loop4): Directory bread(block 72) failed
[  207.614162][ T7865] FAT-fs (loop4): Directory bread(block 73) failed
[  207.638748][ T7875] loop1: detected capacity change from 0 to 256
[  207.653972][   T13] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  207.697180][ T7875] FAT-fs (loop1): Directory bread(block 64) failed
[  207.710655][ T7875] FAT-fs (loop1): Directory bread(block 65) failed
[  207.744177][ T7875] FAT-fs (loop1): Directory bread(block 66) failed
[  207.782687][ T7875] FAT-fs (loop1): Directory bread(block 67) failed
[  207.800558][ T7875] FAT-fs (loop1): Directory bread(block 68) failed
[  207.808456][ T7875] FAT-fs (loop1): Directory bread(block 69) failed
[  207.820064][ T7875] FAT-fs (loop1): Directory bread(block 70) failed
[  207.826924][ T7875] FAT-fs (loop1): Directory bread(block 71) failed
[  207.835558][ T7875] FAT-fs (loop1): Directory bread(block 72) failed
[  207.842122][ T7875] FAT-fs (loop1): Directory bread(block 73) failed
[  207.854245][ T4249] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  207.874219][ T4249] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  207.920371][ T4249] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  207.932100][ T4249] smsc75xx: probe of 4-1:0.184 failed with error -71
[  207.943039][ T4249] usb 4-1: USB disconnect, device number 11
[  208.109532][   T13] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  208.140101][   T13] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.184258][   T13] usb 6-1: config 0 interface 0 has no altsetting 0
[  208.211155][   T13] usb 6-1: New USB device found, idVendor=056a, idProduct=0144, bcdDevice= 0.00
[  208.234697][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'.
[  208.244023][   T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.269694][   T13] usb 6-1: config 0 descriptor??
[  208.642774][ T7909] loop4: detected capacity change from 0 to 4096
[  208.694104][ T5494] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  208.814014][   T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  208.814832][   T13] wacom 0003:056A:0144.000C: Unknown device_type for 'HID 056a:0144'. Ignoring.
[  209.029431][   T21] usb 6-1: USB disconnect, device number 7
[  209.064123][ T5494] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  209.072356][   T23] usb 2-1: Using ep0 maxpacket: 32
[  209.104156][ T5494] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.134192][ T5494] usb 4-1: config 0 has no interface number 0
[  209.141798][ T5494] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  209.166689][ T5494] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  209.196201][   T23] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  209.209125][ T5494] usb 4-1: config 0 interface 52 has no altsetting 0
[  209.227026][   T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.251422][   T23] usb 2-1: config 0 has no interface number 0
[  209.270491][   T23] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  209.329502][ T5494] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  209.343325][ T5494] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  209.382331][ T5494] usb 4-1: Manufacturer: syz
[  209.406935][ T5494] usb 4-1: config 0 descriptor??
[  209.451765][ T5494] hub 4-1:0.52: bad descriptor, ignoring hub
[  209.459024][ T5494] hub: probe of 4-1:0.52 failed with error -5
[  209.488655][   T23] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  209.506580][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.523260][   T23] usb 2-1: Product: syz
[  209.527888][   T23] usb 2-1: Manufacturer: syz
[  209.532523][   T23] usb 2-1: SerialNumber: syz
[  209.541960][   T23] usb 2-1: config 0 descriptor??
[  209.551219][ T7945] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  209.642206][   T23] radio-si470x 2-1:0.35: could not find interrupt in endpoint
[  209.663930][   T23] radio-si470x: probe of 2-1:0.35 failed with error -5
[  209.678257][ T5494] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input14
[  209.695914][ T7949] bridge: RTM_NEWNEIGH with invalid state 0x8
[  209.864125][   T23] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  209.872327][   T23] usbhid 2-1:0.35: couldn't find an input interrupt endpoint
[  210.019265][ T4249] usb 4-1: USB disconnect, device number 12
[  210.091803][   T13] usb 2-1: USB disconnect, device number 8
[  210.284302][ T7947] set_capacity_and_notify: 2 callbacks suppressed
[  210.284318][ T7947] loop0: detected capacity change from 0 to 32768
[  210.670459][ T7968] loop3: detected capacity change from 0 to 512
[  210.750220][ T7968] EXT4-fs (loop3): Test dummy encryption mode enabled
[  210.775535][ T7968] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  210.864846][ T7968] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.1345: bad orphan inode 131083
[  210.902024][ T7968] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none.
[  210.930817][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'.
[  210.995145][ T7975] netlink: 'syz.1.1347': attribute type 14 has an invalid length.
[  211.023344][ T7975] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1347'.
[  211.219694][ T7986] loop1: detected capacity change from 0 to 64
[  211.264887][ T7988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1352'.
[  211.441256][ T7994] loop0: detected capacity change from 0 to 512
[  211.480923][ T7998] loop1: detected capacity change from 0 to 64
[  211.686067][ T7994] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,acl,,errors=continue. Quota mode: writeback.
[  211.698790][ T7994] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.734243][ T7994] EXT4-fs error (device loop0): ext4_get_first_dir_block:3597: inode #12: comm syz.0.1355: Attempting to read directory block (0) that is past i_size (3)
[  212.017628][ T8015] loop1: detected capacity change from 0 to 1764
[  212.097405][ T8006] loop5: detected capacity change from 0 to 8192
[  212.103562][ T8022] loop3: detected capacity change from 0 to 512
[  212.163715][ T8022] EXT4-fs (loop3): Ignoring removed oldalloc option
[  212.201651][ T8006] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  212.201768][ T8006] REISERFS (device loop5): using ordered data mode
[  212.201780][ T8006] reiserfs: using flush barriers
[  212.203042][ T8006] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  212.203370][ T8006] REISERFS (device loop5): checking transaction log (loop5)
[  212.218051][ T8006] REISERFS (device loop5): Using r5 hash to sort names
[  212.218357][ T8006] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  212.260807][ T8022] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.1368: bad orphan inode 32
[  212.261154][ T8022] ext4_test_bit(bit=31, block=4) = 0
[  212.261173][ T8022] EXT4-fs (loop3): 1 truncate cleaned up
[  212.261192][ T8022] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,oldalloc,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback.
[  212.358985][ T8028] loop1: detected capacity change from 0 to 1024
[  212.430571][ T8028] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  212.540064][ T8030] loop0: detected capacity change from 0 to 2048
[  212.592144][ T8030] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  212.592511][ T8030] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  212.600911][ T8030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  213.137149][   T26] audit: type=1326 audit(1779880584.949:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.0.1381" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4128dafe59 code=0x0
[  213.554357][ T8068] netlink: 'syz.3.1388': attribute type 1 has an invalid length.
[  213.562280][ T8066] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  213.583937][ T8068] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.1388'.
[  213.608503][ T8066] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  213.656382][ T8070] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  213.676968][ T8066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  213.867503][ T8072] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1389'.
[  213.935539][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'.
[  213.983145][ T8048] XFS (loop1): Mounting V5 Filesystem
[  214.127320][ T8048] XFS (loop1): Ending clean mount
[  214.349345][ T4194] XFS (loop1): Unmounting Filesystem
[  214.471858][ T8101] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1400'.
[  214.519152][ T8101] tipc: Enabling of bearer <ud�:s> rejected, media not registered
[  215.233437][ T8109] syz.0.1404 (8109): drop_caches: 2
[  215.251260][ T8109] syz.0.1404 (8109): drop_caches: 2
[  215.304149][ T8090] non-latin1 character 0xffff found in JFS file name
[  215.329800][ T8122] FAT-fs (loop5): Directory bread(block 64) failed
[  215.333376][ T8125] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  215.353845][ T8090] mount with iocharset=utf8 to access
[  215.413975][ T8122] FAT-fs (loop5): Directory bread(block 65) failed
[  215.420640][ T8122] FAT-fs (loop5): Directory bread(block 66) failed
[  215.479162][ T8122] FAT-fs (loop5): Directory bread(block 67) failed
[  215.513958][ T8122] FAT-fs (loop5): Directory bread(block 68) failed
[  215.532985][ T8122] FAT-fs (loop5): Directory bread(block 69) failed
[  215.594060][ T8122] FAT-fs (loop5): Directory bread(block 70) failed
[  215.600741][ T8122] FAT-fs (loop5): Directory bread(block 71) failed
[  215.652024][ T8122] FAT-fs (loop5): Directory bread(block 72) failed
[  215.688397][ T8122] FAT-fs (loop5): Directory bread(block 73) failed
[  216.099181][ T8161] set_capacity_and_notify: 6 callbacks suppressed
[  216.099196][ T8161] loop3: detected capacity change from 0 to 128
[  216.195760][ T8161] EXT4-fs (loop3): Test dummy encryption mode enabled
[  216.234715][ T8161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  216.242735][ T8161] System zones: 1-3, 19-19, 35-36
[  216.368208][ T8161] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,nolazytime,dax=inode,jqfmt=vfsv0,dioread_lock,usrjquota=.,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  216.429255][ T8161] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.436572][ T8175] hugetlbfs: Bad value for 'size'
[  216.610469][ T8183] loop0: detected capacity change from 0 to 128
[  216.826973][ T8170] loop5: detected capacity change from 0 to 32768
[  216.961923][ T8170] JBD2: Ignoring recovery information on journal
[  217.053561][ T8209] loop0: detected capacity change from 0 to 128
[  217.068687][ T8170] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  217.136630][ T8209] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  217.171740][ T8213] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  217.180927][ T8213] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  217.185343][ T8209] hpfs: filesystem error: improperly stopped
[  217.189801][ T8213] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  217.189896][ T8213] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  217.316787][ T8209] 
[  217.319222][ T8209] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  217.338522][ T8209] hpfs: You really don't want any checks? You are crazy...
[  217.351813][ T8209] hpfs: hpfs_map_sector(): read error
[  217.376442][ T5027] ocfs2: Unmounting device (7,5) on (node local)
[  217.392393][ T8209] hpfs: code page support is disabled
[  217.436391][ T8209] hpfs: hpfs_map_4sectors(): unaligned read
[  217.442589][ T8209] hpfs: hpfs_map_4sectors(): unaligned read
[  217.472393][ T8209] hpfs: filesystem error: unable to find root dir
[  217.842957][ T8238] loop1: detected capacity change from 0 to 1764
[  217.969953][ T8238] iso9660: Corrupted directory entry in block 2 of inode 1920
[  218.212115][ T8256] loop0: detected capacity change from 0 to 64
[  218.223932][ T8254] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  218.337637][ T8262] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1476'.
[  218.368233][ T8263] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1475'.
[  218.535818][ T8272] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[  218.690180][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1484'.
[  218.715341][ T8282] program syz.5.1486 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  218.847766][ T8289] loop5: detected capacity change from 0 to 64
[  219.160538][ T8296] loop5: detected capacity change from 0 to 16
[  219.231340][ T8296] erofs: (device loop5): mounted with root inode @ nid 36.
[  219.558322][   T13] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  219.572034][ T8266] loop0: detected capacity change from 0 to 32768
[  219.707309][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1498'.
[  219.735273][ T8266] ERROR: (device loop0): diAllocAG: numfree > numinos
[  219.735273][ T8266] 
[  219.814891][ T8266] ialloc: diAlloc returned -5!
[  219.968619][   T13] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  219.990573][   T13] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  220.062075][   T13] usb 5-1: config 0 interface 0 has no altsetting 0
[  220.079744][   T13] usb 5-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00
[  220.117143][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.177271][   T13] usb 5-1: config 0 descriptor??
[  220.659466][   T13] wacom 0003:056A:0059.000D: unknown main item tag 0x3
[  220.700164][   T13] wacom 0003:056A:0059.000D: unknown main item tag 0x0
[  220.744040][   T13] wacom 0003:056A:0059.000D: unknown main item tag 0x0
[  220.771913][   T13] wacom 0003:056A:0059.000D: unknown main item tag 0x0
[  220.789614][   T13] wacom 0003:056A:0059.000D: unknown main item tag 0x0
[  220.799731][   T13] wacom 0003:056A:0059.000D: unknown main item tag 0x0
[  220.818051][   T13] wacom 0003:056A:0059.000D: unknown main item tag 0x0
[  220.828172][   T13] wacom 0003:056A:0059.000D: unknown main item tag 0x0
[  220.860944][   T13] wacom 0003:056A:0059.000D: hidraw0: USB HID v0.04 Device [HID 056a:0059] on usb-dummy_hcd.4-1/input0
[  220.926226][   T13] usb 5-1: USB disconnect, device number 10
[  220.959750][ T8346] loop5: detected capacity change from 0 to 1024
[  221.172257][ T8348] fido_id[8348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  221.200207][ T8331] loop1: detected capacity change from 0 to 32768
[  221.234980][ T8331] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1508 (8331)
[  221.330508][ T8312] syz.3.1499 (8312): drop_caches: 2
[  221.340623][ T8346] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  221.357357][ T8331] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  221.372821][ T8331] BTRFS info (device loop1): enabling auto defrag
[  221.379829][ T8331] BTRFS info (device loop1): force clearing of disk cache
[  221.413877][ T4462] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  221.423031][ T8331] BTRFS info (device loop1): turning on sync discard
[  221.467507][ T8331] BTRFS info (device loop1): enabling disk space caching
[  221.515836][ T8331] BTRFS info (device loop1): setting nodatacow, compression disabled
[  221.543908][ T8331] BTRFS info (device loop1): disk space caching is enabled
[  221.562058][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1518'.
[  221.571596][ T8331] BTRFS info (device loop1): has skinny extents
[  221.693912][ T4462] usb 1-1: Using ep0 maxpacket: 8
[  221.829602][ T8369] loop4: detected capacity change from 0 to 1024
[  221.837022][ T4462] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  221.847618][ T4462] usb 1-1: config 0 has no interface number 0
[  221.866706][ T8369] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  221.889334][ T8331] BTRFS info (device loop1): enabling ssd optimizations
[  221.919638][ T8331] BTRFS info (device loop1): clearing free space tree
[  221.938858][ T8331] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  221.993876][ T8331] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  222.080187][ T4462] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  222.099804][ T4462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.139960][ T4462] usb 1-1: Product: syz
[  222.159598][ T4462] usb 1-1: Manufacturer: syz
[  222.177339][ T4462] usb 1-1: SerialNumber: syz
[  222.197378][ T4462] usb 1-1: config 0 descriptor??
[  222.205606][ T8362] loop3: detected capacity change from 0 to 32768
[  222.309543][ T8362] JBD2: Ignoring recovery information on journal
[  222.562385][ T8362] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  222.701396][ T4462] usb 1-1: USB disconnect, device number 8
[  222.845382][ T4195] ocfs2: Unmounting device (7,3) on (node local)
[  223.129950][   T23] hid-generic 0000:0000:0000.000E: item fetching failed at offset 0/1
[  223.197769][ T8412] loop5: detected capacity change from 0 to 4096
[  223.207877][   T23] hid-generic: probe of 0000:0000:0000.000E failed with error -22
[  223.362048][ T8412] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  223.606476][ T8427] loop0: detected capacity change from 0 to 1024
[  223.737350][ T8424] loop4: detected capacity change from 0 to 8192
[  223.769529][ T8427] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: none.
[  223.826318][ T8427] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.0.1544: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1
[  223.907582][ T8440] loop3: detected capacity change from 0 to 16
[  223.942813][ T8427] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem
[  223.959232][ T8424] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  223.990937][ T8440] erofs: (device loop3): mounted with root inode @ nid 36.
[  224.012321][ T8443] netlink: 'syz.1.1549': attribute type 13 has an invalid length.
[  224.027596][ T8424] REISERFS (device loop4): using ordered data mode
[  224.043898][ T8427] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #2: comm syz.0.1544: Deleting old file: nlink 1, error=-117
[  224.086081][ T8424] reiserfs: using flush barriers
[  224.119425][ T8443] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.1549'.
[  224.146681][ T8424] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  224.208648][ T8424] REISERFS (device loop4): checking transaction log (loop4)
[  224.267117][ T8445] loop5: detected capacity change from 0 to 4096
[  224.283553][ T8424] REISERFS (device loop4): Using r5 hash to sort names
[  224.322938][ T8445] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  224.333283][ T8424] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  224.452643][ T8424] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  224.573437][ T8453] QAT: Invalid ioctl 21531
[  225.005077][ T8467] loop0: detected capacity change from 0 to 8
[  225.068261][ T8473] bridge0: Device is already in use.
[  225.116768][ T8467] SQUASHFS error: Failed to read block 0x2d7: -5
[  225.155993][ T8467] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  225.196379][ T8477] loop1: detected capacity change from 0 to 164
[  225.375185][ T8447] XFS (loop3): Mounting V5 Filesystem
[  225.525025][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'.
[  225.554073][ T4203] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  225.580031][ T8447] XFS (loop3): Ending clean mount
[  225.597150][ T8447] XFS (loop3): Quotacheck needed: Please wait.
[  225.710957][ T8447] XFS (loop3): Quotacheck: Done.
[  225.822348][ T4195] XFS (loop3): Unmounting Filesystem
[  225.951350][ T4203] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  225.973794][ T4203] usb 6-1: config 0 has no interface number 0
[  225.984451][ T4203] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  226.031351][ T4203] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  226.091981][ T4203] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64
[  226.142296][ T4203] usb 6-1: config 0 interface 2 has no altsetting 0
[  226.303327][ T4196] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  226.309995][ T4196] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  226.324067][   T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  226.337649][ T4203] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f
[  226.372090][ T4203] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.419465][ T4203] usb 6-1: Product: syz
[  226.428256][ T4203] usb 6-1: Manufacturer: syz
[  226.432901][ T4203] usb 6-1: SerialNumber: syz
[  226.462575][ T4203] usb 6-1: config 0 descriptor??
[  226.498437][ T8481] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  226.529600][ T8481] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  226.556526][ T8530] set_capacity_and_notify: 3 callbacks suppressed
[  226.556541][ T8530] loop3: detected capacity change from 0 to 1024
[  226.564549][   T23] usb 1-1: Using ep0 maxpacket: 32
[  226.662640][ T8532] loop4: detected capacity change from 0 to 64
[  226.682130][ T8534] loop1: detected capacity change from 0 to 512
[  226.706169][   T23] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  226.715068][   T23] usb 1-1: config 0 has no interface number 0
[  226.787497][ T8532] hfs: hfs: Invalid key length: 94
[  226.808528][ T8534] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1589: bg 0: block 376: padding at end of block bitmap is not set
[  226.861570][ T4196] hfs: node 4:3 still has 1 user(s)!
[  226.876202][   T23] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  226.943023][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.954201][ T8534] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1589: inode #1: comm syz.1.1589: iget: illegal inode #
[  227.004438][   T23] usb 1-1: Product: syz
[  227.010345][ T8534] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1589: error while reading EA inode 1 err=-117
[  227.029888][   T23] usb 1-1: Manufacturer: syz
[  227.039011][ T4203] usb 6-1: USB disconnect, device number 8
[  227.050958][   T23] usb 1-1: SerialNumber: syz
[  227.087319][   T23] usb 1-1: config 0 descriptor??
[  227.165481][ T8534] EXT4-fs (loop1): 1 orphan inode deleted
[  227.175575][   T23] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  227.181992][ T8534] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000007,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,noquota,dioread_lock,noblock_validity,nojournal_checksum,,errors=continue. Quota mode: none.
[  227.273396][ T8550] loop4: detected capacity change from 0 to 764
[  227.397130][   T23] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  227.429409][   T23] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  227.496771][ T4444] udevd[4444]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  227.772337][ T8565] loop3: detected capacity change from 0 to 64
[  227.882073][ T4244] usb 1-1: USB disconnect, device number 9
[  227.895862][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  227.916283][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1607'.
[  227.940961][ T4244] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  227.964891][ T8574] loop4: detected capacity change from 0 to 1024
[  227.974817][ T8575] sp0: Synchronizing with TNC
[  228.007749][ T4244] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  228.029396][ T8574] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  228.046773][ T8574] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  228.055823][ T4244] quatech2 1-1:0.51: device disconnected
[  228.191072][ T8574] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,noblock_validity,jqfmt=vfsold,dioread_nolock,,errors=continue. Quota mode: none.
[  228.532759][ T8588] loop3: detected capacity change from 0 to 2048
[  228.563435][ T8590] loop4: detected capacity change from 0 to 1024
[  228.625681][ T8590] hfsplus: request for non-existent node 3 in B*Tree
[  228.626569][ T8588] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  228.653848][ T8590] hfsplus: request for non-existent node 3 in B*Tree
[  228.722480][ T8590] hfsplus: request for non-existent node 4 in B*Tree
[  228.747056][ T8588] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  228.762008][ T8590] hfsplus: request for non-existent node 4 in B*Tree
[  228.787763][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'.
[  228.808083][ T8583] loop1: detected capacity change from 0 to 32768
[  228.877732][ T8583] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1612 (8583)
[  228.925222][ T8583] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  228.972969][ T8596] device macsec1 entered promiscuous mode
[  228.994340][ T8583] BTRFS info (device loop1): force zlib compression, level 3
[  229.049430][ T8583] BTRFS info (device loop1): turning on flush-on-commit
[  229.096158][ T8583] BTRFS info (device loop1): max_inline at 4096
[  229.102522][ T8583] BTRFS info (device loop1): using free space tree
[  229.192737][ T8583] BTRFS info (device loop1): has skinny extents
[  229.270615][ T8600] loop3: detected capacity change from 0 to 4096
[  229.385819][ T8583] BTRFS info (device loop1): enabling ssd optimizations
[  229.424970][ T8600] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  229.457832][ T8600] NILFS (loop3): mounting unchecked fs
[  229.477752][ T8626] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  229.528765][ T8600] NILFS (loop3): recovery complete
[  229.562135][ T8627] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  230.287852][ T8643] netlink: 'syz.4.1631': attribute type 3 has an invalid length.
[  230.307335][ T8645] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  230.434892][ T8653] netlink: 'syz.1.1634': attribute type 66 has an invalid length.
[  230.533903][ T4466] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  230.682281][ T8668] exfat: Deprecated parameter 'utf8'
[  230.752748][ T8668] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d)
[  230.933177][ T4466] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.969229][ T4466] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  231.000041][ T4466] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  231.095580][ T8684] EXT4-fs (loop4): inline encryption not supported
[  231.194945][ T8684] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.1650: bad orphan inode 15
[  231.231043][ T4466] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  231.246217][ T4466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.256034][ T4466] usb 4-1: Product: syz
[  231.260372][ T4466] usb 4-1: Manufacturer: syz
[  231.265599][ T4466] usb 4-1: SerialNumber: syz
[  231.276031][ T8684] ext4_test_bit(bit=14, block=5) = 0
[  231.281378][ T8684] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,inlinecrypt,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none.
[  231.342412][ T8684] EXT4-fs (loop4): can't enable nombcache during remount
[  231.380617][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1653'.
[  231.738578][ T8711] set_capacity_and_notify: 5 callbacks suppressed
[  231.738595][ T8711] loop0: detected capacity change from 0 to 256
[  231.956499][ T4466] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS
[  231.962660][ T4466] cdc_ncm 4-1:1.0: bind() failure
[  231.985755][ T8714] loop4: detected capacity change from 0 to 4096
[  232.017798][ T4466] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  232.034790][ T4466] cdc_ncm 4-1:1.1: bind() failure
[  232.056684][ T4466] usb 4-1: USB disconnect, device number 13
[  232.070424][ T8714] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  232.138040][ T8714] ntfs: (device loop4): check_mft_mirror(): $MFTMirr location mismatch.  Run chkdsk.
[  232.149569][ T8714] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  232.237949][ T8714] ntfs: volume version 3.1.
[  232.241096][ T8723] vivid-008: disconnect
[  232.255185][ T8714] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  232.265437][ T8714] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota.
[  232.276658][ T8722] vivid-008: reconnect
[  232.283224][ T8714] ntfs: (device loop4): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  232.305246][ T8714] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  232.315581][ T8714] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  232.333212][ T8714] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  232.414770][ T8714] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp865.  You might want to try to use the mount option nls=utf8.
[  232.725149][ T8742] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1678'.
[  232.762145][ T8749] loop0: detected capacity change from 0 to 512
[  232.841537][ T8749] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  232.874228][ T8749] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  232.914054][ T8756] program syz.5.1683 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  232.921974][ T8749] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  232.967883][ T8749] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  232.982382][ T8749] EXT4-fs (loop0): 1 truncate cleaned up
[  232.988244][ T8749] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  233.152495][ T4244] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  233.187678][ T8760] loop4: detected capacity change from 0 to 4096
[  233.350442][ T8771] loop1: detected capacity change from 0 to 128
[  233.368998][ T8772] loop0: detected capacity change from 0 to 1764
[  233.440500][ T8771] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  233.478680][ T8771] hpfs: filesystem error: improperly stopped
[  233.486662][ T8771] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  233.504070][ T8760] ntfs3: loop4: failed to convert "0000" to iso8859-6
[  233.521260][ T8771] hpfs: You really don't want any checks? You are crazy...
[  233.535635][ T8771] hpfs: hpfs_map_sector(): read error
[  233.547895][ T8760] ntfs3: loop4: failed to convert "0030" to iso8859-6
[  233.556924][ T4244] usb 4-1: unable to get BOS descriptor or descriptor too short
[  233.580423][ T8771] hpfs: code page support is disabled
[  233.585976][ T8771] hpfs: hpfs_map_4sectors(): unaligned read
[  233.598019][ T8760] ntfs3: loop4: failed to convert name for inode 1e.
[  233.613752][ T8760] ntfs3: loop4: failed to convert "0032" to iso8859-6
[  233.618667][ T4244] usb 4-1: not running at top speed; connect to a high speed hub
[  233.631431][ T8760] ntfs3: loop4: failed to convert "0033" to iso8859-6
[  233.636978][ T8771] hpfs: hpfs_map_4sectors(): unaligned read
[  233.660982][ T8771] hpfs: filesystem error: unable to find root dir
[  233.702938][ T8774] loop5: detected capacity change from 0 to 8192
[  233.734600][ T4244] usb 4-1: config index 0 descriptor too short (expected 28771, got 10)
[  233.743010][ T4244] usb 4-1: config 114 has too many interfaces: 95, using maximum allowed: 32
[  233.780178][ T4244] usb 4-1: config 114 descriptor has 1 excess byte, ignoring
[  233.789205][ T4244] usb 4-1: config 114 has 0 interfaces, different from the descriptor's value: 95
[  233.922624][ T8774] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  233.978872][ T4244] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f
[  233.985806][ T8774] REISERFS (device loop5): using ordered data mode
[  233.994698][ T8774] reiserfs: using flush barriers
[  234.006726][ T8774] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  234.035093][ T4244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.065244][ T8787] loop0: detected capacity change from 0 to 128
[  234.076671][ T4244] usb 4-1: Product: syz
[  234.080909][ T4244] usb 4-1: Manufacturer: syz
[  234.107190][ T4244] usb 4-1: SerialNumber: syz
[  234.149364][ T8774] REISERFS (device loop5): checking transaction log (loop5)
[  234.400005][ T4244] usb 4-1: USB disconnect, device number 14
[  234.450431][ T8774] REISERFS (device loop5): Using tea hash to sort names
[  234.454128][ T8795] loop0: detected capacity change from 0 to 2048
[  234.481681][ T8774] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  234.543961][ T8795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  234.802590][ T8799] x_tables: ip_tables: tcp match: only valid for protocol 6
[  234.836789][ T8801] IPv6: syztnl0: Disabled Multicast RS
[  235.033861][ T8805] loop0: detected capacity change from 0 to 1024
[  235.134832][ T8805] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  235.162580][ T8805] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  235.231117][ T8805] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal
[  235.292046][ T8797] (syz.1.1704,8797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  235.343587][ T8797] (syz.1.1704,8797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  235.439451][ T8797] JBD2: Ignoring recovery information on journal
[  235.607669][ T8797] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  235.832234][ T4194] ocfs2: Unmounting device (7,1) on (node local)
[  235.933763][ T8823] ntfs: volume version 3.1.
[  236.163564][ T8809] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  236.204591][ T8809] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  236.209156][ T8807] XFS (loop3): Mounting V5 Filesystem
[  236.258283][ T8809] F2FS-fs (loop5): invalid crc value
[  236.382713][ T8809] F2FS-fs (loop5): Found nat_bits in checkpoint
[  236.396577][ T8807] XFS (loop3): Ending clean mount
[  236.582702][ T8809] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  236.605840][ T8809] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  236.664368][ T4195] XFS (loop3): Unmounting Filesystem
[  237.114604][ T8843] set_capacity_and_notify: 4 callbacks suppressed
[  237.114620][ T8843] loop0: detected capacity change from 0 to 32768
[  237.235628][ T8843] ERROR: (device loop0): diAllocAG: nfreeinos = 0, but iag on freelist
[  237.235628][ T8843] 
[  237.316731][ T8843] ERROR: (device loop0): remounting filesystem as read-only
[  237.338876][ T8843] ialloc: diAlloc returned -5!
[  237.544871][   T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  237.794564][   T23] usb 2-1: Using ep0 maxpacket: 32
[  237.913872][   T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.943927][   T23] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.966592][   T23] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.987067][   T23] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  238.033968][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  238.067494][   T23] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  238.104788][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.135168][   T23] usb 2-1: config 0 descriptor??
[  238.506357][ T8892] loop5: detected capacity change from 0 to 32768
[  238.558187][ T8892] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1745 (8892)
[  238.590532][ T8892] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  238.621712][ T8892] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  238.645694][   T23] corsair-psu 0003:1B1C:1C09.000F: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0
[  238.683798][ T8892] BTRFS info (device loop5): use zstd compression, level 3
[  238.721502][ T8892] BTRFS info (device loop5): using free space tree
[  238.738943][ T8892] BTRFS info (device loop5): has skinny extents
[  238.816092][   T23] corsair-psu 0003:1B1C:1C09.000F: unable to initialize device (-38)
[  238.864364][   T23] corsair-psu: probe of 0003:1B1C:1C09.000F failed with error -38
[  238.936159][   T23] usb 2-1: USB disconnect, device number 9
[  239.038683][ T8941] loop3: detected capacity change from 0 to 1764
[  239.060940][ T8951] loop0: detected capacity change from 0 to 64
[  239.153468][ T8892] BTRFS info (device loop5): enabling ssd optimizations
[  239.167599][   T26] kauditd_printk_skb: 15 callbacks suppressed
[  239.167615][   T26] audit: type=1800 audit(1779880611.224:20): pid=8951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1762" name="file1" dev="loop0" ino=21 res=0 errno=0
[  239.332726][ T8954] fido_id[8954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  239.563015][ T8963] loop1: detected capacity change from 0 to 2048
[  239.693399][ T8963] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  239.712977][ T8971] loop0: detected capacity change from 0 to 128
[  239.854199][ T8971] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  239.888858][ T8978] comedi comedi1: mpc624: I/O port conflict (0x100,16)
[  239.915221][ T8971] hpfs: filesystem error: improperly stopped
[  239.927595][ T8971] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  239.965389][ T8971] hpfs: You really don't want any checks? You are crazy...
[  240.037269][ T8971] hpfs: hpfs_map_sector(): read error
[  240.092650][ T8971] hpfs: code page support is disabled
[  240.147374][ T8971] hpfs: hpfs_map_4sectors(): unaligned read
[  240.153396][ T8971] hpfs: hpfs_map_4sectors(): unaligned read
[  240.194751][ T8971] hpfs: filesystem error: unable to find root dir
[  240.215464][ T8984] loop3: detected capacity change from 0 to 256
[  240.348754][ T8984] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d)
[  240.818697][ T8990] loop0: detected capacity change from 0 to 32768
[  240.825290][   T26] audit: type=1400 audit(1779880612.908:21): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A4BB284132960AB0EC7C873CFF3EB09BFFB78A08C1060ACEBD68C681F4EB06507909110374F83A9CA6CF1A22A152E4424641EA1201497E3A973866BE7F8659A0119BA2D92304E687C61DF4D960D941CFAB0AC10F5861C9B38D760E8B906A47E2CF457A255A8C061FE8E4C805DC7D3B0124BD25494ED2D54BE8AEF5615C6FD7C4FAC3CF7DA8F20AA026998926069FC3032289822655A10BB16E1E6C08002CC0435A6667F338D23DC07810124F374749CEB5F78713B7DAD2FE3044A243139A1B5170D5BCFDBCD8748AC706DDDCBBD0B1F20F52C143DA1E74B736AC64A66616EA3069133AC3A pid=8993 comm="syz.4.1783"
[  240.907623][ T8990] XFS (loop0): sunit and swidth must be specified together
[  241.121136][ T9012] loop1: detected capacity change from 0 to 1024
[  241.601878][ T9032] device team_slave_0 entered promiscuous mode
[  241.608931][ T9032] device team_slave_1 entered promiscuous mode
[  241.617829][ T9030] loop4: detected capacity change from 0 to 4096
[  241.652503][ T9032] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  241.751192][ T9033] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  241.935506][ T9030] NILFS (loop4): nilfs_sufile_do_free: segment 7 is already clean
[  242.085915][ T9022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1795 (9022)
[  242.111442][ T9042] set_capacity_and_notify: 1 callbacks suppressed
[  242.111461][ T9042] loop3: detected capacity change from 0 to 512
[  242.181720][ T9022] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  242.219363][ T9022] BTRFS info (device loop0): setting nodatasum
[  242.227865][ T9022] BTRFS info (device loop0): force zlib compression, level 3
[  242.297853][ T9022] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  242.307300][ T9022] BTRFS info (device loop0): use zstd compression, level 3
[  242.374206][ T9051] loop1: detected capacity change from 0 to 1024
[  242.401995][ T9056] loop5: detected capacity change from 0 to 8
[  242.408705][ T9042] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  242.408805][ T9022] BTRFS info (device loop0): turning on flush-on-commit
[  242.428067][ T9022] BTRFS info (device loop0): enabling auto defrag
[  242.434671][ T9022] BTRFS info (device loop0): max_inline at 4096
[  242.441625][ T9022] BTRFS info (device loop0): using free space tree
[  242.448339][ T9022] BTRFS info (device loop0): has skinny extents
[  242.485531][ T9042] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.573429][ T9042] EXT4-fs error (device loop3): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.3.1803: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  242.584346][ T9051] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  242.648424][ T9042] EXT4-fs error (device loop3): ext4_get_first_dir_block:3608: inode #12: comm syz.3.1803: directory missing '.'
[  242.651300][ T9061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1807'.
[  242.854826][ T9022] BTRFS info (device loop0): enabling ssd optimizations
[  243.265683][ T9102] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  243.353351][ T9099] loop3: detected capacity change from 0 to 4096
[  243.393242][ T9096] loop5: detected capacity change from 0 to 4096
[  243.508989][ T9099] EXT4-fs (loop3): inline encryption not supported
[  243.565920][ T9099] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  243.587876][ T9099] System zones: 0-5
[  243.673133][ T9099] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,delalloc,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback.
[  243.740023][ T9113] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  243.828559][ T9116] loop1: detected capacity change from 0 to 512
[  243.960826][ T9096] NILFS (loop5): nilfs_sufile_do_free: segment 7 is already clean
[  244.010815][ T9116] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.1828: corrupted inode contents
[  244.105479][ T9116] EXT4-fs (loop1): Remounting filesystem read-only
[  244.199453][ T9116] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  244.246017][ T9116] EXT4-fs (loop1): Remounting filesystem read-only
[  244.298319][ T9128] loop3: detected capacity change from 0 to 128
[  244.304812][ T9116] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.1828: corrupted inode contents
[  244.355034][ T9124] loop4: detected capacity change from 0 to 4096
[  244.362214][ T9116] EXT4-fs (loop1): Remounting filesystem read-only
[  244.399356][ T9128] VFS: Found a Xenix FS (block size = 1024) on device loop3
[  244.408951][ T9116] EXT4-fs error (device loop1): ext4_evict_inode:332: inode #15: comm syz.1.1828: mark_inode_dirty error
[  244.482643][ T9116] EXT4-fs (loop1): Remounting filesystem read-only
[  244.489542][ T9116] EXT4-fs (loop1): 1 orphan inode deleted
[  244.520702][ T9116] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,debug_want_extra_isize=0x0000000000000004,discard,nobarrier,. Quota mode: none.
[  244.557676][ T4195] sysv_free_block: flc_count > flc_size
[  244.593315][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1836'.
[  244.617734][ T4195] sysv_free_block: flc_count > flc_size
[  244.631516][ T4195] sysv_free_block: flc_count > flc_size
[  244.637578][ T4195] sysv_free_block: flc_count > flc_size
[  244.644084][ T4195] sysv_free_block: flc_count > flc_size
[  244.670006][ T4195] sysv_free_block: flc_count > flc_size
[  244.699484][ T4195] sysv_free_block: flc_count > flc_size
[  244.733383][ T4195] sysv_free_block: flc_count > flc_size
[  244.762076][ T4195] sysv_free_block: flc_count > flc_size
[  244.767711][ T4195] sysv_free_block: flc_count > flc_size
[  244.804447][ T4195] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  244.973017][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1841'.
[  245.225111][ T9156] loop4: detected capacity change from 0 to 1764
[  245.231973][ T9157] loop3: detected capacity change from 0 to 1024
[  245.263240][ T9157] EXT4-fs (loop3): inline encryption not supported
[  245.345432][ T9157] EXT4-fs (loop3): Ignoring removed bh option
[  245.378931][ T9157] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  245.389031][ T9159] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  245.478853][ T9157] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c028, mo2=0002]
[  245.498718][ T9157] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,dioread_nolock,barrier=0x0000000000000004,bh,errors=continue,init_itable,errors=remount-ro,noblock_validity,max_batch_time=0x0000000000000005,lazytime,noblock_validity,journal_dev=0x0000000000000005,debug,. Quota mode: none.
[  245.558044][ T9158] NILFS (loop1): nilfs_sufile_do_free: segment 7 is already clean
[  245.715343][ T9143] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1840 (9143)
[  245.767021][ T9161] SQUASHFS error: Unable to read directory block [2c0:35]
[  245.821643][ T9143] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  245.858904][ T9143] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  245.889871][ T9143] BTRFS info (device loop5): use zstd compression, level 3
[  245.946143][ T9143] BTRFS info (device loop5): using free space tree
[  245.952930][ T9143] BTRFS info (device loop5): has skinny extents
[  245.992938][ T9165] Attempt to read inode for relocated directory
[  246.413961][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'.
[  246.439834][ T9156] iso9660: Corrupted directory entry in block 0 of inode 1920
[  246.516384][ T9143] BTRFS info (device loop5): enabling ssd optimizations
[  246.588288][ T9143] BTRFS warning (device loop5): can't clear the compat:0 feature bit while mounted
[  246.686111][ T9205] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1858'.
[  247.435473][ T9235] set_capacity_and_notify: 5 callbacks suppressed
[  247.435489][ T9235] loop1: detected capacity change from 0 to 256
[  247.582324][ T9241] [U] 
[  247.689023][ T9237] loop4: detected capacity change from 0 to 8192
[  247.803755][ T9243] loop0: detected capacity change from 0 to 8192
[  247.877602][ T9254] loop3: detected capacity change from 0 to 512
[  247.933645][ T9243] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  247.958248][ T9243] REISERFS (device loop0): using ordered data mode
[  247.966199][ T9243] reiserfs: using flush barriers
[  247.979486][ T9243] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  248.010326][ T9260] loop4: detected capacity change from 0 to 1024
[  248.026823][ T9254] EXT4-fs (loop3): Ignoring removed bh option
[  248.038668][ T9254] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  248.080127][ T9260] EXT4-fs (loop4): inline encryption not supported
[  248.096403][ T9260] EXT4-fs (loop4): Ignoring removed bh option
[  248.104343][ T9260] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  248.119682][ T9243] REISERFS (device loop0): checking transaction log (loop0)
[  248.214820][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1887'.
[  248.216665][ T9254] EXT4-fs (loop3): 1 truncate cleaned up
[  248.294413][ T9260] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c028, mo2=0002]
[  248.317163][ T9260] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,dioread_nolock,barrier=0x0000000000000004,bh,errors=continue,init_itable,errors=remount-ro,noblock_validity,max_batch_time=0x0000000000000005,lazytime,noblock_validity,journal_dev=0x0000000000000005,debug,. Quota mode: none.
[  248.346905][ T9254] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  248.459827][ T9243] REISERFS (device loop0): Using tea hash to sort names
[  248.534931][ T9243] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  248.958183][ T9289] netlink: 'syz.3.1895': attribute type 1 has an invalid length.
[  249.187200][ T4254] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  249.423277][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'.
[  249.434956][ T4254] usb 5-1: Using ep0 maxpacket: 16
[  249.442352][ T9309] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1906'.
[  249.593556][ T4254] usb 5-1: config index 0 descriptor too short (expected 18, got 10)
[  249.602534][ T4254] usb 5-1: config 1 descriptor has 1 excess byte, ignoring
[  249.622130][ T4254] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  249.724953][ T9324] loop0: detected capacity change from 0 to 128
[  249.748828][ T9324] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  249.798389][ T9324] System zones: 1-3, 19-19, 35-36
[  249.804011][ T4254] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  249.814494][ T9324] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none.
[  249.826636][ T4254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.834764][ T4254] usb 5-1: Product: syz
[  249.839159][ T4254] usb 5-1: Manufacturer: syz
[  249.843867][ T4254] usb 5-1: SerialNumber: syz
[  249.849556][ T9324] ext4 filesystem being mounted at /350/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  249.895642][ T9328] loop1: detected capacity change from 0 to 1024
[  249.907975][ T9333] loop5: detected capacity change from 0 to 64
[  249.969315][ T9333] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  250.063854][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1915'.
[  250.168958][ T4254] usb 5-1: USB disconnect, device number 11
[  250.343981][ T9339] loop0: detected capacity change from 0 to 4096
[  250.473886][ T9339] NILFS (loop0): invalid segment: Checksum error in segment payload
[  250.492930][ T9339] NILFS (loop0): trying rollback from an earlier position
[  250.545413][ T9339] NILFS (loop0): recovery complete
[  250.592853][ T9355] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  250.972681][ T9372] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1937'.
[  251.033876][ T9372] unsupported nlmsg_type 40
[  251.821003][ T9410] loop3: detected capacity change from 0 to 512
[  251.864474][ T9410] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  251.913914][ T9412] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  251.966075][ T9410] EXT4-fs (loop3): 1 truncate cleaned up
[  251.978680][ T9410] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  252.211678][ T9370] XFS (loop5): Mounting V5 Filesystem
[  252.398919][ T9429] exfat: Deprecated parameter 'utf8'
[  252.428062][ T9393] set_capacity_and_notify: 3 callbacks suppressed
[  252.428078][ T9393] loop0: detected capacity change from 0 to 40427
[  252.455572][ T9393] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  252.464002][ T9393] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  252.487465][ T9370] XFS (loop5): Ending clean mount
[  252.515437][ T9429] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  252.568261][ T9370] XFS (loop5): Quotacheck needed: Please wait.
[  252.575713][ T9393] F2FS-fs (loop0): Found nat_bits in checkpoint
[  252.601236][ T9440] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  252.815606][ T9370] XFS (loop5): Quotacheck: Done.
[  252.821634][ T9393] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  252.828764][ T9393] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  252.935035][ T9452] loop4: detected capacity change from 0 to 64
[  252.966626][ T9454] loop1: detected capacity change from 0 to 1024
[  253.293546][ T5027] XFS (loop5): Unmounting Filesystem
[  253.337527][ T9454] EXT4-fs (loop1): inline encryption not supported
[  253.344165][ T9454] EXT4-fs (loop1): Ignoring removed bh option
[  253.392187][ T9454] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  253.539226][ T9454] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c028, mo2=0002]
[  253.555831][    T9] ------------[ cut here ]------------
[  253.563182][ T9454] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,dioread_nolock,barrier=0x0000000000000004,bh,errors=continue,init_itable,errors=remount-ro,noblock_validity,max_batch_time=0x0000000000000005,lazytime,noblock_validity,journal_dev=0x0000000000000005,debug,. Quota mode: none.
[  253.564557][    T9] kernel BUG at fs/hfs/inode.c:447!
[  253.591565][    C1] vkms_vblank_simulate: vblank timer overrun
[  253.742140][    T9] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  253.748278][    T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
[  253.755603][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  253.765721][    T9] Workqueue: writeback wb_workfn (flush-7:4)
[  253.771762][    T9] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[  253.777354][    T9] Code: 8d ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 40 a0 8d ff e9 47 fe ff ff e8 76 81 48 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[  253.797009][    T9] RSP: 0018:ffffc90000ce73c0 EFLAGS: 00010293
[  253.803117][    T9] RAX: ffffffff8230b49a RBX: ffff88805ff3e318 RCX: ffff88813fe90000
[  253.811128][    T9] RDX: 0000000000000000 RSI: ffffffff8c4e3600 RDI: 0000000000000000
[  253.819135][    T9] RBP: ffffc90000ce7550 R08: ffff88813fe90000 R09: 0000000000000003
[  253.827145][    T9] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  253.835152][    T9] R13: 1ffff9200019ce7c R14: 0000000000000000 R15: ffff88805ff3e2d8
[  253.843164][    T9] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  253.852226][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  253.858856][    T9] CR2: 00007fc0912e4000 CR3: 0000000075328000 CR4: 00000000003506e0
[  253.866872][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  253.874876][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  253.882893][    T9] Call Trace:
[  253.886201][    T9]  <TASK>
[  253.889174][    T9]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  253.894585][    T9]  ? __writeback_single_inode+0x471/0xda0
[  253.900344][    T9]  ? __rwlock_init+0x140/0x140
[  253.905148][    T9]  __writeback_single_inode+0x6c3/0xda0
[  253.910730][    T9]  writeback_sb_inodes+0xa4e/0x1680
[  253.915976][    T9]  ? queue_io+0x550/0x550
[  253.920348][    T9]  ? rcu_is_watching+0x11/0xa0
[  253.925262][    T9]  wb_writeback+0x45d/0xbe0
[  253.929822][    T9]  ? rcu_lock_release+0x20/0x20
[  253.934730][    T9]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  253.940788][    T9]  ? mark_lock+0x94/0x320
[  253.945154][    T9]  ? _raw_spin_unlock_irq+0x1f/0x40
[  253.950390][    T9]  wb_workfn+0x43a/0xf20
[  253.954676][    T9]  ? inode_wait_for_writeback+0x220/0x220
[  253.960444][    T9]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  253.966735][    T9]  ? read_lock_is_recursive+0x10/0x10
[  253.972149][    T9]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  253.978096][    T9]  ? _raw_spin_unlock+0x40/0x40
[  253.983683][    T9]  ? _raw_spin_unlock_irq+0x1f/0x40
[  253.989331][    T9]  process_one_work+0x85f/0x1010
[  253.994914][    T9]  ? worker_detach_from_pool+0x240/0x240
[  254.001019][    T9]  ? lockdep_hardirqs_off+0x70/0x100
[  254.006360][    T9]  ? _raw_spin_lock_irq+0xb7/0xf0
[  254.011536][    T9]  ? _raw_spin_lock_irqsave+0x100/0x100
[  254.017305][    T9]  ? wq_worker_running+0x97/0x170
[  254.022461][    T9]  worker_thread+0xaa6/0x1290
[  254.027195][    T9]  kthread+0x436/0x520
[  254.031556][    T9]  ? rcu_lock_release+0x20/0x20
[  254.036696][    T9]  ? kthread_blkcg+0xd0/0xd0
[  254.041418][    T9]  ret_from_fork+0x1f/0x30
[  254.045885][    T9]  </TASK>
[  254.048963][    T9] Modules linked in:
[  254.052978][    C1] vkms_vblank_simulate: vblank timer overrun
[  254.112740][    T9] ---[ end trace ba15a0aca8957a47 ]---
[  254.118430][    T9] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[  254.142007][    T9] Code: 8d ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 40 a0 8d ff e9 47 fe ff ff e8 76 81 48 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[  254.194890][    T9] RSP: 0018:ffffc90000ce73c0 EFLAGS: 00010293
[  254.201031][    T9] RAX: ffffffff8230b49a RBX: ffff88805ff3e318 RCX: ffff88813fe90000
[  254.265435][ T9461] loop5: detected capacity change from 0 to 256
[  254.267555][    T9] RDX: 0000000000000000 RSI: ffffffff8c4e3600 RDI: 0000000000000000
[  254.284572][    T9] RBP: ffffc90000ce7550 R08: ffff88813fe90000 R09: 0000000000000003
[  254.292691][    T9] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  254.300706][    T9] R13: 1ffff9200019ce7c R14: 0000000000000000 R15: ffff88805ff3e2d8
[  254.315633][    T9] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  254.324973][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  254.331655][    T9] CR2: 000000110c2ab924 CR3: 000000007d33c000 CR4: 00000000003506e0
[  254.339684][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  254.347774][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  254.355878][    T9] Kernel panic - not syncing: Fatal exception
[  254.362342][    T9] Kernel Offset: disabled
[  254.366691][    T9] Rebooting in 86400 seconds..