last executing test programs:

5m8.661246332s ago: executing program 3 (id=582):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f}, 0xc)
recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x2a, 0x0}, 0x1}], 0x1, 0x4986beeb32c8c15f, 0x0)

5m8.487976865s ago: executing program 3 (id=583):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0)
ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1)

5m8.326318268s ago: executing program 3 (id=584):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1e, {0x4207958d, 0x7, 0x4, 0xfffffff8, 0x1, 0x800, 0xeb7c, 0x0, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

5m8.073635921s ago: executing program 3 (id=586):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x1)

5m7.814732025s ago: executing program 3 (id=589):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="6d9311000000f8dbdf25010000000c00030003"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880)

5m7.030703898s ago: executing program 3 (id=594):
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2a9e524, [{{0x9, 0x2, 0x48}}]}}, 0x0)
eventfd(0x1ff)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80a41, 0x0)

5m6.414431668s ago: executing program 32 (id=594):
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2a9e524, [{{0x9, 0x2, 0x48}}]}}, 0x0)
eventfd(0x1ff)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80a41, 0x0)

1m53.062645969s ago: executing program 0 (id=2059):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000080)=0x1f, 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000040))

1m52.922740811s ago: executing program 0 (id=2061):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80)

1m52.725354764s ago: executing program 0 (id=2062):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x18, r1, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)

1m52.561632897s ago: executing program 0 (id=2064):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1m51.73696361s ago: executing program 0 (id=2068):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x8001}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4814}, 0x840)

1m50.896024783s ago: executing program 0 (id=2072):
r0 = syz_usbip_server_init(0x1)
syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write$usbip_server(r0, &(0x7f00000000c0)=ANY=[], 0x30)

1m50.359152382s ago: executing program 33 (id=2072):
r0 = syz_usbip_server_init(0x1)
syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write$usbip_server(r0, &(0x7f00000000c0)=ANY=[], 0x30)

1m22.21394312s ago: executing program 5 (id=2263):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x67, 0x4)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4)

1m22.046498653s ago: executing program 5 (id=2265):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, 0x0, 0x0)

1m20.3602571s ago: executing program 5 (id=2272):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000800)={0x60, r1, 0x1, 0x70bd28, 0x25dfdbf8, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048044}, 0x4044)

1m20.068821305s ago: executing program 5 (id=2275):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/306], 0x1, 0xc32, &(0x7f0000000e00)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]})

1m19.429338265s ago: executing program 5 (id=2281):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc)
bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x8000}, 0xc)

1m19.09962701s ago: executing program 2 (id=2285):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x70bd26, 0x0, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x4840)

1m18.970735992s ago: executing program 2 (id=2286):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x91dabd4b569e2c23, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

1m18.954141103s ago: executing program 2 (id=2287):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f00000068c0)=ANY=[@ANYBLOB='uni_xlate=1,iocharset=cp949,shortname=winnt,codepage=864,nonumtail=0,iocharset=cp85xlate=0,nonumtail=0,shortname=lower,uni_xlate=1,shortname=win95,shortname=win95,iocharset=iso8859-14,\x00\x00\x00\x00\x00\x00\x00'], 0x81, 0x29b, &(0x7f0000000580)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1m18.884282724s ago: executing program 5 (id=2288):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x3, 0xffffffffffffffff, 0x5}}, 0x30)

1m18.372527022s ago: executing program 34 (id=2288):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x3, 0xffffffffffffffff, 0x5}}, 0x30)

1m18.358388892s ago: executing program 2 (id=2290):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/306], 0x1, 0xc32, &(0x7f0000000e00)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]})

1m17.743501842s ago: executing program 2 (id=2293):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendmmsg$inet(r0, &(0x7f0000008780)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002540)="52bde97687", 0x5}], 0x1, &(0x7f00000027c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xda}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

1m16.998662453s ago: executing program 2 (id=2296):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)=0x7)

1m16.455610352s ago: executing program 35 (id=2296):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)=0x7)

6.450099638s ago: executing program 4 (id=2730):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0\x00', 0x181f438, 0x0, 0x1, 0x0, &(0x7f0000000140))
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180))

4.267403352s ago: executing program 4 (id=2742):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x0, 0x6, "df8af5", 0xc, 0x4})

3.083058131s ago: executing program 4 (id=2750):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0xff}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4008890)

2.871002405s ago: executing program 4 (id=2753):
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0)
inotify_rm_watch(r0, r1)

2.680331558s ago: executing program 4 (id=2755):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x880452, 0x0, 0xf8, 0x0, &(0x7f00000000c0))
chown(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xee01, 0x0)

1.644292434s ago: executing program 7 (id=2766):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x140, 0x2, 0x3, 0x2, 0x7, 0x2, 0x7fff, 0x6, 0x1007, 0xc72d, 0x4, 0xf, 0x2009, 0x8, 0x4ce, 0x9e9b, 0x101, 0x5, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]})

1.614335994s ago: executing program 1 (id=2767):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

1.569040365s ago: executing program 6 (id=2768):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000c00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000001240)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@hopopts={0x32}], {0xf5ff, 0x0, 0x8}}}}}}, 0x0)

1.383079558s ago: executing program 7 (id=2769):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8a}]}}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0xc7c)

1.28484809s ago: executing program 1 (id=2770):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x17f, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"})

1.210710141s ago: executing program 6 (id=2771):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x14, r1, 0x1, 0x0, 0xffffffff, {{}, {@void, @void}}}, 0x14}}, 0x4008000)

1.017831424s ago: executing program 1 (id=2772):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x5a1b5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004804}, 0x0)

1.005944874s ago: executing program 7 (id=2773):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
sendfile(r1, r0, &(0x7f0000000000)=0x9, 0x80000000000006)

887.858626ms ago: executing program 6 (id=2774):
unshare(0x24020400)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x8)

692.359029ms ago: executing program 7 (id=2775):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x3}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)

691.823289ms ago: executing program 6 (id=2776):
r0 = socket(0x10, 0x2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x1c, &(0x7f0000002d40), &(0x7f0000000180)=0xc)

629.16321ms ago: executing program 1 (id=2777):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0xc7f}], 0x2c)
sendto$inet6(r0, &(0x7f0000000040)="e4", 0x29fb8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)

484.120713ms ago: executing program 7 (id=2778):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x2, 0xfff, 0x8, 0x1, 0x1f, 0x4, 0x1}}]}}]}, 0x44}}, 0x4000010)

378.815284ms ago: executing program 6 (id=2779):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2)
open(&(0x7f0000000580)='./bus\x00', 0x84e42, 0x1df2a23c5997fa57)

375.847994ms ago: executing program 4 (id=2780):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b0, &(0x7f0000000b80)="$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")
setxattr$security_ima(&(0x7f0000000340)='./file1\x00', &(0x7f0000000300), &(0x7f00000003c0)=@sha1={0x1, "17fd72674e608a87e092a271a2ce7add25be06a2"}, 0x15, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2a443, 0x69)

349.818625ms ago: executing program 1 (id=2781):
unshare(0x20000400)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0)
fadvise64(r0, 0x9154, 0x5, 0x5)

200.739017ms ago: executing program 7 (id=2782):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)

146.880728ms ago: executing program 1 (id=2783):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xb368f4ff5519c3e8}, 0x850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

0s ago: executing program 6 (id=2784):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3bdH6Q6O0SN02WXFVTgCvUL3FWegu267iyDCnkQhMiHExoTo+yR7MmPr5RnB4o1HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACc0t9iMf318/OwaZz1ppl2ngYAAACosyoW0/KPcdUfpfF3aehj6mcRkUdEXe3ei1c7MXspTrHn/uJeDr8jygjb/zFIx5uI+JqOqw+n/hQAAADg5VrO5pOqWq9O43MnRJeqSZv87beW4mURUYz/tRQt354+PerWzeH5oe33ux8/9lzNjkutnNiKxktmbpRTbv22oh3WSz/322Z4p8mqJu8uHQAAoCu7lUCHVQgAAAAd+37uBDiP8q1nWoufFvAPqia9EHy90wMAAAAu0LGrngEAAIDnaPTg1bL+v4D9/97/t/8fAAAAPFm1/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACntCoW0+VsPmkaZ72p8edLRN14jXaeBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtmfdxSGYTAIg5tEeXVCF/D9b2kW7NatmxkQfPxbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK48jpfnGa/GTLbR60zy7nkl+XRqfDs1fp0b/yRj3f0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2Z+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Ll/37ipOADgX5/vrrSACAFlCEJUYoCFptfS0pUBFDHwJyBF6bUErvxoM9CqAmVhQ5m7IBgRQgKFrf9D51bqUrYONxSJqQPIPrt5PYo4qGJfk89Hen5fW47f9zlRlK+fcwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG389m6cF5uFSdypjt28d3W96G9N9YXr27eXi1bE2T9c/6u9Snz+vZzuZEvtJQIAAMDBkdf1fUQ/ejurRdBZKOv/Xn1OUfN/9+wkruv56bq/7uvav2i//nL3xQcDLUzGKS56bmM0PP73VLr5Hs5znj33r2d0yztfPnvJy29I572tF8a98n5m39y48U6/DA81kS0A8H8cq/sqqP8eKvpBm4kBcGB0q1a4U9X/+UK7OQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ob8VT9dxFhHL3d24cOve1fWyn9q/vn17uW6nr13bTq9ZXKIXEec2RsPjTU3kCXDp8pWP10aj4cXmg1cior3Rq+CDGc6JaDNDweMGnepnfbavOhoR7efcftDyLyYAAPadXtWKuv5Ob2e1OJYtRvz5/cP1/2tJHGn9P9Wn9f/dD0/fTMdK6/9BYzOcfyubFz5buXT5yhsbF9bOD88PP3nzxOCtwckzp06dWSmflax4YgIAAMDj6Vctrf87ixHjqfX/I0kcM9b/n387+DIdK1f/P9Luol/bmQAAABxszx/94/fsEcezfj++WNvcvDiYbLP71f6JybaFVP+zQ1VL6/98se2sAAAAgCaMt7KH1v/PJnHMuP7/zA8v/ZReM4+Iw9X6/7H1T0dnm5tOS+7PdFYT/06851MFAABgrh2uWrr+3yvf/+88eOWhExGvvzqJq48BnKn+z9/9+sd0rPT9/5PNTXEudZYm96PslyK6S21nBAAAwH72VNWKYv+33s7qRz8feb/v/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACApv0VAAD//+NPQpo=")
r0 = open(&(0x7f0000000340)='./file1\x00', 0x14b27e, 0x6)
read$FUSE(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

T27] uclogic 0003:5543:0081.001D: failed probing pen v2 parameters: -71
[  345.761258][   T27] uclogic 0003:5543:0081.001D: failed probing parameters: -71
[  345.779971][   T27] uclogic: probe of 0003:5543:0081.001D failed with error -71
[  345.804848][   T27] usb 1-1: USB disconnect, device number 15
[  345.921498][    T8] usb 5-1: Using ep0 maxpacket: 16
[  345.925688][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  345.925740][    T8] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[  345.925766][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.930435][    T8] usb 5-1: config 0 descriptor??
[  346.179543][T11352] loop2: detected capacity change from 0 to 2048
[  346.224498][T11352] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  346.265666][T11352] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  346.367941][    T8] pyra 0003:1E7D:2C24.001E: unknown main item tag 0xd
[  346.396818][    T8] pyra 0003:1E7D:2C24.001E: unknown main item tag 0x0
[  346.414535][    T8] pyra 0003:1E7D:2C24.001E: unknown main item tag 0x0
[  346.431042][    T8] pyra 0003:1E7D:2C24.001E: unknown main item tag 0x0
[  346.438149][    T8] pyra 0003:1E7D:2C24.001E: unknown main item tag 0x0
[  346.468841][    T8] pyra 0003:1E7D:2C24.001E: unknown main item tag 0x0
[  346.496649][    T8] pyra 0003:1E7D:2C24.001E: unknown main item tag 0x0
[  346.525948][    T8] pyra 0003:1E7D:2C24.001E: hidraw0: USB HID v0.09 Device [HID 1e7d:2c24] on usb-dummy_hcd.4-1/input0
[  346.597165][T11360] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  346.666441][T11365] loop1: detected capacity change from 0 to 64
[  346.684199][ T5810] usb 5-1: USB disconnect, device number 10
[  346.770741][T11361] fido_id[11361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  346.813070][   T28] audit: type=1800 audit(1782305086.378:181): pid=11365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2034" name="file1" dev="loop1" ino=21 res=0 errno=0
[  346.855847][T11365] hfs: request for non-existent node -16318464 in B*Tree
[  346.891419][T11365] hfs: request for non-existent node -16318464 in B*Tree
[  346.978110][T11367] loop2: detected capacity change from 0 to 4096
[  346.991378][ T1081] hfs: request for non-existent node -16318464 in B*Tree
[  347.016804][ T1081] hfs: request for non-existent node -16318464 in B*Tree
[  347.087333][T11371] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  347.411696][T11378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2042'.
[  347.476279][T11378] team0: Device vlan2 is already an upper device of the team interface
[  347.736225][T11388] loop0: detected capacity change from 0 to 64
[  347.852235][T11388] hfs: bad catalog entry type 65409
[  348.066454][T11392] loop4: detected capacity change from 0 to 4096
[  348.112001][T11396] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  348.503911][T11386] loop2: detected capacity change from 0 to 32768
[  348.553049][T11386] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  348.668864][T11386] XFS (loop2): Ending clean mount
[  348.685382][T11386] XFS (loop2): Quotacheck needed: Please wait.
[  348.801797][T11386] XFS (loop2): Quotacheck: Done.
[  349.014802][ T5777] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  349.676257][T11414] loop4: detected capacity change from 0 to 40427
[  349.695404][T11414] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  349.711864][T11414] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  349.728897][T11414] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7
[  349.751397][T11414] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff
[  349.767697][T11414] F2FS-fs (loop4): Image doesn't support compression
[  349.792396][T11414] F2FS-fs (loop4): invalid crc value
[  349.809913][T11414] F2FS-fs (loop4): Found nat_bits in checkpoint
[  349.999186][T11414] F2FS-fs (loop4): Start checkpoint disabled!
[  350.091651][T11438] loop0: detected capacity change from 0 to 512
[  350.099684][T11414] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  350.114414][T11414] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  350.228316][T11438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.262946][T11442] loop1: detected capacity change from 0 to 512
[  350.310336][T11438] ext4 filesystem being mounted at /513/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  350.328082][T11442] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  350.375845][T11414] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x181/0x910
[  350.733515][T11446] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2054'.
[  350.783178][   T12] kworker/u4:1: attempt to access beyond end of device
[  350.783178][   T12] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  350.814752][   T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  350.822603][   T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  350.829564][   T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  350.907703][ T5776] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /513/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  350.965786][ T5776] EXT4-fs (loop0): Remounting filesystem read-only
[  351.051096][T11448] loop2: detected capacity change from 0 to 1024
[  351.096526][T11448] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  351.457953][T11450] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  351.496795][T11450] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  351.567230][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.595468][T11444] loop1: detected capacity change from 0 to 40427
[  351.655810][T11444] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  351.695210][T11444] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  351.715624][T11444] F2FS-fs (loop1): build fault injection attr: rate: 64, type: 0x7ffff
[  351.739986][T11444] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x5
[  351.788328][   T32] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.806179][T11444] F2FS-fs (loop1): invalid crc value
[  351.876078][T11444] F2FS-fs (loop1): Found nat_bits in checkpoint
[  352.000265][   T32] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.026912][T11444] F2FS-fs (loop1): Start checkpoint disabled!
[  352.081340][T11444] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  352.088510][T11444] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  352.211337][T11444] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of __f2fs_setxattr+0x1e0/0x1310
[  352.289693][   T32] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.484925][   T32] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.583975][   T11] kworker/u4:0: attempt to access beyond end of device
[  352.583975][   T11] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  352.611981][T11466] loop2: detected capacity change from 0 to 2048
[  352.625817][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  352.639515][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  352.647246][T11466] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  352.765052][ T5764] udevd[5764]: incorrect nilfs2 checksum on /dev/loop2
[  352.781034][ T5810] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  352.824960][T11467] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  352.905292][   T28] audit: type=1800 audit(1782305092.468:182): pid=11466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2078" name="file1" dev="loop2" ino=15 res=0 errno=0
[  352.995536][ T5810] usb 5-1: Using ep0 maxpacket: 32
[  353.027339][ T5810] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  353.051981][ T5810] usb 5-1: config 0 has no interface number 0
[  353.058181][ T5810] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  353.093586][ T5810] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  353.131677][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.162730][ T5810] usb 5-1: Product: syz
[  353.167003][ T5810] usb 5-1: Manufacturer: syz
[  353.200600][ T5810] usb 5-1: SerialNumber: syz
[  353.223007][ T5810] usb 5-1: config 0 descriptor??
[  353.269455][ T5810] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  353.301637][ T5810] em28xx 5-1:0.132: Video interface 132 found:
[  353.360460][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  353.402352][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  353.413164][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  353.423762][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  353.452207][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  353.459671][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  353.647576][T11478] netlink: 'syz.1.2076': attribute type 4 has an invalid length.
[  353.656790][ T5810] em28xx 5-1:0.132: unknown em28xx chip ID (39)
[  353.946642][T11471] lo speed is unknown, defaulting to 1000
[  353.946896][ T5810] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  353.999405][ T5810] em28xx 5-1:0.132: board has no eeprom
[  354.082073][ T5810] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  354.089998][ T5810] em28xx 5-1:0.132: analog set to bulk mode.
[  354.159948][   T27] em28xx 5-1:0.132: Registering V4L2 extension
[  354.183901][ T5810] usb 5-1: USB disconnect, device number 11
[  354.204062][ T5810] em28xx 5-1:0.132: Disconnecting em28xx
[  354.708713][T11509] loop1: detected capacity change from 0 to 512
[  354.755644][   T27] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  354.790577][   T27] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  354.819037][   T27] em28xx 5-1:0.132: No AC97 audio processor
[  354.863644][   T27] usb 5-1: Decoder not found
[  354.868424][   T27] em28xx 5-1:0.132: failed to create media graph
[  354.892681][   T27] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  354.945187][   T27] em28xx 5-1:0.132: Remote control support is not available for this card.
[  354.996335][ T5810] em28xx 5-1:0.132: Closing input extension
[  355.105465][T11519] loop4: detected capacity change from 0 to 512
[  355.146162][ T5810] em28xx 5-1:0.132: Freeing device
[  355.169363][T11519] EXT4-fs: Ignoring removed orlov option
[  355.204255][T11519] EXT4-fs: Ignoring removed mblk_io_submit option
[  355.253903][T11518] loop1: detected capacity change from 0 to 4096
[  355.308857][T11519] EXT4-fs error (device loop4): ext4_iget_extra_inode:4739: inode #15: comm syz.4.2092: corrupted in-inode xattr: e_value size too large
[  355.337471][T11518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.400456][T11519] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2092: couldn't read orphan inode 15 (err -117)
[  355.488757][T11519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.521141][ T5085] Bluetooth: hci1: command tx timeout
[  355.594236][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.639610][T11471] chnl_net:caif_netlink_parms(): no params data found
[  355.813827][ T7322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.157459][T11523] loop2: detected capacity change from 0 to 32768
[  356.173927][T11523] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2093 (11523)
[  356.213152][T11523] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  356.306339][T11523] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  356.368498][T11523] BTRFS info (device loop2): use zlib compression, level 3
[  356.375962][T11523] BTRFS info (device loop2): using free space tree
[  356.514410][T11471] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.524198][T11471] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.531899][T11471] bridge_slave_0: entered allmulticast mode
[  356.542464][T11471] bridge_slave_0: entered promiscuous mode
[  356.611680][T11523] BTRFS info (device loop2): enabling ssd optimizations
[  356.618741][T11523] BTRFS info (device loop2): auto enabling async discard
[  356.643297][   T32] hsr_slave_0: left promiscuous mode
[  356.711902][   T32] hsr_slave_1: left promiscuous mode
[  356.770552][T11523] BTRFS error (device loop2): target device  is invalid!
[  356.801296][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  356.819308][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  356.851684][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  356.866310][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.886735][T11575] loop4: detected capacity change from 0 to 64
[  356.903693][ T5777] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  356.921658][   T32] bridge_slave_1: left allmulticast mode
[  356.927381][   T32] bridge_slave_1: left promiscuous mode
[  356.972555][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.012532][   T32] bridge_slave_0: left allmulticast mode
[  357.018273][   T32] bridge_slave_0: left promiscuous mode
[  357.034330][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.201695][   T32] veth1_macvtap: left promiscuous mode
[  357.207322][   T32] veth0_macvtap: left promiscuous mode
[  357.271263][   T32] veth1_vlan: left promiscuous mode
[  357.303394][   T32] veth0_vlan: left promiscuous mode
[  357.590862][ T5085] Bluetooth: hci1: command tx timeout
[  357.648799][T11586] loop1: detected capacity change from 0 to 8192
[  357.680539][T11586] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  358.401011][   T27] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  358.580895][   T27] usb 2-1: Using ep0 maxpacket: 16
[  358.599791][   T27] usb 2-1: config 0 interface 0 has no altsetting 0
[  358.614040][   T27] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  358.647122][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.674973][   T27] usb 2-1: config 0 descriptor??
[  358.913162][   T32] team0 (unregistering): Port device team_slave_1 removed
[  358.988427][   T32] team0 (unregistering): Port device team_slave_0 removed
[  359.080474][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  359.111364][   T27] hid (null): invalid report_size -1607087867
[  359.120304][   T27] hid (null): unknown global tag 0xe
[  359.154764][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  359.173624][   T27] hid-rmi 0003:06CB:81A7.001F: invalid report_size -1607087867
[  359.188089][   T27] hid-rmi 0003:06CB:81A7.001F: item 0 4 1 7 parsing failed
[  359.200587][   T27] hid-rmi 0003:06CB:81A7.001F: parse failed
[  359.213471][   T27] hid-rmi: probe of 0003:06CB:81A7.001F failed with error -22
[  359.317587][   T27] usb 2-1: USB disconnect, device number 17
[  359.671306][ T5085] Bluetooth: hci1: command tx timeout
[  359.703146][   T32] bond0 (unregistering): Released all slaves
[  359.820411][T11471] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.828912][T11471] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.836452][T11471] bridge_slave_1: entered allmulticast mode
[  359.843985][T11471] bridge_slave_1: entered promiscuous mode
[  360.034166][T11471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.071728][T11471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.169684][T11471] team0: Port device team_slave_0 added
[  360.252596][T11471] team0: Port device team_slave_1 added
[  360.385389][T11471] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.414269][T11471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.497326][T11471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  360.541635][T11471] batman_adv: batadv0: Adding interface: batadv_slave_1
[  360.548669][T11471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.652061][T11471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  360.773869][T11612] loop4: detected capacity change from 0 to 8192
[  360.820501][T11612] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  360.836029][   T32] IPVS: stop unused estimator thread 0...
[  360.860701][T11471] hsr_slave_0: entered promiscuous mode
[  360.931943][T11612] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  360.982575][T11471] hsr_slave_1: entered promiscuous mode
[  360.991063][T11612] REISERFS (device loop4): using ordered data mode
[  361.022484][T11612] reiserfs: using flush barriers
[  361.031084][T11471] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  361.046575][T11612] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  361.053190][T11471] Cannot create hsr debugfs directory
[  361.102765][T11612] REISERFS (device loop4): checking transaction log (loop4)
[  361.153852][T11612] REISERFS (device loop4): Using r5 hash to sort names
[  361.156985][T11628] loop2: detected capacity change from 0 to 1024
[  361.178306][T11612] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  361.750869][ T5085] Bluetooth: hci1: command tx timeout
[  361.901751][T11471] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  361.972464][T11471] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  361.989157][T11471] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  362.032818][T11471] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  362.066910][T11641] loop2: detected capacity change from 0 to 1024
[  362.192240][T11641] hfsplus: bad catalog entry type
[  362.328226][   T11] hfsplus: b-tree write err: -5, ino 25
[  362.358170][   T11] hfsplus: b-tree write err: -5, ino 4
[  362.372328][   T11] hfsplus: b-tree write err: -5, ino 2
[  362.531665][T11471] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.623089][T11471] 8021q: adding VLAN 0 to HW filter on device team0
[  362.656872][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.664184][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.747626][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.754862][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.437551][T11647] loop1: detected capacity change from 0 to 32768
[  363.530051][T11647] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  363.625653][T11471] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.666709][T11647] XFS (loop1): Ending clean mount
[  363.732677][ T5782] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  363.939356][ T5773] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  364.002160][ T5782] usb 3-1: Using ep0 maxpacket: 32
[  364.033757][ T5782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.052642][ T5782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.063438][ T5782] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  364.076813][ T5782] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  364.086727][ T5782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.117915][ T5782] usb 3-1: config 0 descriptor??
[  364.667630][ T5782] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0020/input/input24
[  364.696617][T11673] loop4: detected capacity change from 0 to 40427
[  364.731803][T11673] F2FS-fs (loop4): invalid crc value
[  364.759329][T11471] veth0_vlan: entered promiscuous mode
[  364.801742][ T5782] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0020/input/input25
[  364.833228][T11673] F2FS-fs (loop4): Found nat_bits in checkpoint
[  364.849188][T11471] veth1_vlan: entered promiscuous mode
[  364.933536][ T5782] kye 0003:0458:5011.0020: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[  365.029845][ T5782] usb 3-1: USB disconnect, device number 16
[  365.074433][T11471] veth0_macvtap: entered promiscuous mode
[  365.113091][T11673] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  365.136772][T11471] veth1_macvtap: entered promiscuous mode
[  365.213174][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.276935][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.301038][T11706] fido_id[11706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  365.317933][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.346380][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.404844][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.447225][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.510255][T11471] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.535781][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  365.580877][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.621668][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  365.664600][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.690832][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  365.712002][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.800741][T11471] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.849908][T11471] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.905821][T11471] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.931223][T11471] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.970830][T11471] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.053300][T11726] loop1: detected capacity change from 0 to 8
[  366.135083][T11726] SQUASHFS error: Unable to read directory block [629:46]
[  366.305465][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.337382][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.487046][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.522548][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.198466][T11760] loop1: detected capacity change from 0 to 512
[  367.289835][T11760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  367.384819][T11760] ext4 filesystem being mounted at /526/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  367.546314][T11760] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #2: comm syz.1.2154: corrupted inode contents
[  367.617854][T11760] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #2: comm syz.1.2154: mark_inode_dirty error
[  367.682883][T11760] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #2: comm syz.1.2154: corrupted inode contents
[  367.974595][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.010710][T11785] netlink: 'syz.4.2158': attribute type 1 has an invalid length.
[  368.277095][T11758] loop2: detected capacity change from 0 to 32768
[  368.312907][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  368.323524][T11758] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2153 (11758)
[  368.409490][T11794] loop4: detected capacity change from 0 to 256
[  368.448917][T11758] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  368.462295][T11794] exfat: Deprecated parameter 'namecase'
[  368.468049][T11794] exfat: Deprecated parameter 'namecase'
[  368.500433][T11758] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  368.524994][T11794] exfat: Deprecated parameter 'namecase'
[  368.542871][T11758] BTRFS info (device loop2): using free space tree
[  368.615439][T11794] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd6f0c8a0, utbl_chksum : 0xe619d30d)
[  368.762593][T11758] BTRFS info (device loop2): enabling ssd optimizations
[  368.769679][T11758] BTRFS info (device loop2): auto enabling async discard
[  369.131902][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'.
[  369.161774][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2167'.
[  369.213513][ T5777] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  369.464278][T11834] loop1: detected capacity change from 0 to 128
[  369.543254][T11834] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  369.625832][T11834] hpfs: filesystem error: improperly stopped
[  369.633117][T11834] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  369.643542][T11834] hpfs: You really don't want any checks? You are crazy...
[  369.651452][T11834] hpfs: Code page index out of array
[  369.661297][T11834] hpfs: code page support is disabled
[  369.667607][T11834] hpfs: hpfs_map_4sectors(): unaligned read
[  369.694407][T11834] hpfs: hpfs_map_4sectors(): unaligned read
[  369.700399][T11834] hpfs: filesystem error: unable to find root dir
[  370.651263][T11863] loop4: detected capacity change from 0 to 1024
[  370.751112][T11863] hfsplus: bad catalog entry type
[  370.977561][ T1094] hfsplus: b-tree write err: -5, ino 25
[  370.991118][ T1094] hfsplus: b-tree write err: -5, ino 4
[  370.996766][ T1094] hfsplus: b-tree write err: -5, ino 2
[  371.172378][T11868] loop1: detected capacity change from 0 to 4096
[  371.209321][T11868] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  371.223231][   T28] audit: type=1326 audit(1782305110.768:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3059ce59 code=0x7ffc0000
[  371.308641][   T28] audit: type=1326 audit(1782305110.768:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3059ce59 code=0x7ffc0000
[  371.411505][   T28] audit: type=1326 audit(1782305110.818:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f0a3059ce59 code=0x7ffc0000
[  371.514794][   T28] audit: type=1326 audit(1782305110.828:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3059ce59 code=0x7ffc0000
[  371.586474][   T28] audit: type=1326 audit(1782305110.828:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f0a3059ce59 code=0x7ffc0000
[  371.714619][   T28] audit: type=1326 audit(1782305110.828:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3059ce59 code=0x7ffc0000
[  371.860918][   T28] audit: type=1326 audit(1782305110.828:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.2185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3059ce59 code=0x7ffc0000
[  372.007731][T11855] loop2: detected capacity change from 0 to 40427
[  372.052292][T11855] F2FS-fs (loop2): invalid crc value
[  372.073613][T11855] F2FS-fs (loop2): Found nat_bits in checkpoint
[  372.090871][    T8] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  372.239986][T11855] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  372.301779][    T8] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  372.335464][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  372.371760][    T8] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  372.421538][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.474440][    T8] usb 5-1: config 0 descriptor??
[  372.607026][T11906] loop5: detected capacity change from 0 to 2048
[  372.667436][T11909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2193'.
[  372.720440][T11906] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  372.925730][    T8] ryos 0003:1E7D:3232.0021: unknown main item tag 0x2
[  372.965363][    T8] ryos 0003:1E7D:3232.0021: unknown main item tag 0x6
[  373.001531][    T8] ryos 0003:1E7D:3232.0021: ignoring exceeding usage max
[  373.081141][T11915] loop1: detected capacity change from 0 to 256
[  373.088584][T11915] exfat: Deprecated parameter 'namecase'
[  373.136479][    T8] ryos 0003:1E7D:3232.0021: hidraw0: USB HID v0.81 Device [HID 1e7d:3232] on usb-dummy_hcd.4-1/input0
[  373.206178][    T8] usb 5-1: USB disconnect, device number 12
[  373.275117][T11915] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d)
[  373.376121][T11921] ipvlan2: entered allmulticast mode
[  373.399006][T11921] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  373.467076][T11919] fido_id[11919]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  373.895968][T11933] loop5: detected capacity change from 0 to 256
[  374.249999][T11943] loop5: detected capacity change from 0 to 1024
[  374.980920][    T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  375.188118][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.245963][    T8] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  375.286763][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.302393][    T8] usb 2-1: config 0 descriptor??
[  375.509708][T11987] loop4: detected capacity change from 0 to 64
[  375.536030][    T8] usbhid 2-1:0.0: can't add hid device: -71
[  375.553269][    T8] usbhid: probe of 2-1:0.0 failed with error -71
[  375.591257][    T8] usb 2-1: USB disconnect, device number 18
[  376.000213][T12000] loop2: detected capacity change from 0 to 8192
[  376.163475][ T5782] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  376.210004][    T8] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  376.314984][T12006] loop2: detected capacity change from 0 to 8192
[  376.382876][ T5782] usb 5-1: Using ep0 maxpacket: 16
[  376.391716][ T5782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.411297][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  376.445383][ T5782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.460947][    T8] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40
[  376.490606][ T5782] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  376.503807][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.525243][    T8] usb 2-1: config 0 descriptor??
[  376.530499][ T5782] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  376.564047][ T5782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.573156][    T8] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26
[  376.616516][ T5782] usb 5-1: config 0 descriptor??
[  376.803315][T12010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2230'.
[  376.826419][    C0] usb 2-1: pegasus_irq - nonzero urb status received: -71
[  376.834270][    C0] usb 2-1: pegasus_irq - nonzero urb status received: -71
[  376.841791][    C0] usb 2-1: pegasus_irq - nonzero urb status received: -71
[  376.851020][    C0] usb 2-1: pegasus_irq - nonzero urb status received: -71
[  376.859440][    C0] usb 2-1: pegasus_irq - nonzero urb status received: -71
[  376.870908][    C0] usb 2-1: pegasus_irq - nonzero urb status received: -71
[  376.880897][    C0] usb 2-1: pegasus_irq - nonzero urb status received: -71
[  376.888488][    T8] usb 2-1: USB disconnect, device number 19
[  376.888569][    C0] usb 2-1: pegasus_irq - nonzero urb status received: -71
[  376.901712][    C0] usb 2-1: pegasus_irq - usb_submit_urb failed with result -19
[  376.922377][ T5125] usb 2-1: control msg error: -71
[  377.171378][ T5782] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0022/input/input27
[  377.197515][T12014] loop2: detected capacity change from 0 to 8192
[  377.228379][T12014] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  377.268461][T12014] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  377.297189][ T5782] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  377.320355][T12005] loop5: detected capacity change from 0 to 40427
[  377.331087][T12014] REISERFS (device loop2): using ordered data mode
[  377.347682][T12005] F2FS-fs (loop5): invalid crc value
[  377.358950][T12014] reiserfs: using flush barriers
[  377.393621][T12014] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  377.421722][ T5782] usb 5-1: USB disconnect, device number 13
[  377.458607][T12005] F2FS-fs (loop5): Found nat_bits in checkpoint
[  377.486674][T12014] REISERFS (device loop2): checking transaction log (loop2)
[  377.528329][T12016] fido_id[12016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  377.543472][T12014] REISERFS (device loop2): Using rupasov hash to sort names
[  377.543543][T12014] REISERFS (device loop2): using 3.5.x disk format
[  377.543771][T12014] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  377.543922][T12014] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  377.544012][T12014] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  377.544117][T12014] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  377.681168][T12014] REISERFS warning (device loop2): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=255, len=3 - odd
[  377.812163][T12005] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  378.170534][T12028] loop2: detected capacity change from 0 to 256
[  378.248773][T12028] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfe5fe6b3, utbl_chksum : 0xe619d30d)
[  378.556797][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  378.563318][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  378.814380][T12046] loop2: detected capacity change from 0 to 256
[  378.882626][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  378.927183][T12046] FAT-fs (loop2): Filesystem has been set read-only
[  378.978009][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.000850][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.040419][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.088238][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.119115][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.163305][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.183038][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.201676][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.241800][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.303562][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.324928][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.344190][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.366501][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.411773][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.447505][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.469254][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.495172][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.547331][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.567222][T12067] loop1: detected capacity change from 0 to 4096
[  379.607517][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.638943][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.689824][T12072] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  379.707419][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.732201][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.751579][T12046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  379.760422][   T28] audit: type=1800 audit(1782305119.318:190): pid=12046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2243" name="file2" dev="loop2" ino=1048763 res=0 errno=0
[  379.838830][T12067] syz.1.2253: attempt to access beyond end of device
[  379.838830][T12067] loop1: rw=0, sector=88498, nr_sectors = 2 limit=4096
[  379.936393][T12067] NILFS (loop1): I/O error reading node block for GC (ino=129, vblocknr=32768)
[  379.957279][T12067] NILFS (loop1): error -5 preparing GC: cannot read source blocks
[  380.821014][ T5614] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  380.864260][T12086] loop4: detected capacity change from 0 to 32768
[  380.882773][T12101] loop2: detected capacity change from 0 to 4096
[  380.920907][T12101] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  380.955404][T12101] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[  380.966770][T12101] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  380.981125][T12101] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  381.013212][ T5614] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[  381.031685][ T5614] usb 6-1: config 0 has no interface number 0
[  381.044457][ T5614] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  381.061276][T12086] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  381.103287][ T5614] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  381.114079][ T5614] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.132550][ T5614] usb 6-1: Product: syz
[  381.141757][ T5614] usb 6-1: Manufacturer: syz
[  381.146437][ T5614] usb 6-1: SerialNumber: syz
[  381.164639][T12101] ntfs: volume version 3.1.
[  381.177030][ T5614] usb 6-1: config 0 descriptor??
[  381.239073][ T5614] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[  381.311284][T12088] loop1: detected capacity change from 0 to 40427
[  381.330348][T12088] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288)
[  381.369945][T12088] F2FS-fs (loop1): invalid crc value
[  381.385590][T12101] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccyrillic.  You might want to try to use the mount option nls=utf8.
[  381.421822][ T7322] ocfs2: Unmounting device (7,4) on (node local)
[  381.458853][T12088] F2FS-fs (loop1): Found nat_bits in checkpoint
[  381.468927][T12101] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x45.
[  381.579050][ T5782] usb 6-1: USB disconnect, device number 2
[  381.623259][ T5782] yurex 6-1:0.50: USB YUREX #0 now disconnected
[  381.709349][T12088] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  381.800632][T12107] loop2: detected capacity change from 0 to 2048
[  381.869014][T12107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  382.615491][T12125] loop5: detected capacity change from 0 to 2048
[  382.628050][T12127] ieee802154 phy0 wpan0: encryption failed: -22
[  382.660489][T12125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  382.679201][T12121] loop2: detected capacity change from 0 to 4096
[  382.823353][T12125] overlayfs: upper fs needs to support d_type.
[  382.839813][T12121] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  382.867278][   T28] audit: type=1326 audit(1782305122.428:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.4.2278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82a119ce59 code=0x0
[  382.927673][T12125] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  382.972783][T12125] overlayfs: failed to set xattr on upper
[  382.992837][T12125] overlayfs: ...falling back to index=off.
[  383.011864][T12125] overlayfs: ...falling back to uuid=null.
[  383.208558][T11471] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[  383.242709][T11471] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[  383.305656][T12138] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2282'.
[  383.315218][T12138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2282'.
[  383.694114][   T32] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.707279][T12148] loop2: detected capacity change from 0 to 256
[  383.731240][ T5811] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  383.916748][   T32] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.943828][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  383.969837][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  384.006017][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  384.026920][ T5811] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  384.046034][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.084885][ T5811] usb 2-1: config 0 descriptor??
[  384.104136][   T32] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.224168][   T32] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.286642][T12153] loop4: detected capacity change from 0 to 128
[  384.301820][T12151] loop2: detected capacity change from 0 to 2048
[  384.322326][T12151] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  384.393527][T12153] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  384.415952][T12153] ext4 filesystem being mounted at /429/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  384.459229][T12151] overlayfs: upper fs needs to support d_type.
[  384.523867][T12151] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  384.564153][ T5811] hid-picolcd 0003:04D8:F002.0023: unbalanced collection at end of report description
[  384.574039][T12151] overlayfs: failed to set xattr on upper
[  384.615651][T12151] overlayfs: ...falling back to index=off.
[  384.624036][ T5811] hid-picolcd 0003:04D8:F002.0023: device report parse failed
[  384.634436][T12151] overlayfs: ...falling back to uuid=null.
[  384.652903][ T5811] hid-picolcd: probe of 0003:04D8:F002.0023 failed with error -22
[  384.799290][ T7322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  384.835730][ T5811] usb 2-1: USB disconnect, device number 20
[  384.927597][ T5777] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  384.951729][ T5777] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  385.206132][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  385.234668][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  385.248203][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  385.261907][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  385.279025][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  385.288944][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  385.403750][T12164] lo speed is unknown, defaulting to 1000
[  385.597719][T12167] loop4: detected capacity change from 0 to 8192
[  386.214573][ T5811] IPVS: starting estimator thread 0...
[  386.331443][T12187] IPVS: using max 18 ests per chain, 43200 per kthread
[  386.385762][T12164] chnl_net:caif_netlink_parms(): no params data found
[  386.491708][ T5614] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  386.695476][ T5614] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  386.729696][ T5614] usb 2-1: config 0 has no interface number 0
[  386.753698][ T5614] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  386.780866][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.792109][ T5614] usb 2-1: Product: syz
[  386.796359][ T5614] usb 2-1: Manufacturer: syz
[  386.810869][ T5614] usb 2-1: SerialNumber: syz
[  386.831644][ T5614] usb 2-1: config 0 descriptor??
[  386.860850][ T5614] usb 2-1: selecting invalid altsetting 1
[  386.868397][ T5614] dvb_ttusb_budget: ttusb_init_controller: error
[  386.912381][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  386.925306][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  386.936332][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  386.950934][ T5614] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  386.969814][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  387.002180][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  387.011078][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  387.131128][T12164] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.133793][ T5614] DVB: Unable to find symbol stv0299_attach()
[  387.155592][T12164] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.183356][T12164] bridge_slave_0: entered allmulticast mode
[  387.208989][ T5614] DVB: Unable to find symbol tda8083_attach()
[  387.216230][ T5614] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  387.218184][T12164] bridge_slave_0: entered promiscuous mode
[  387.260969][ T5614] usb 2-1: USB disconnect, device number 21
[  387.272405][T12164] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.301805][T12164] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.309116][T12164] bridge_slave_1: entered allmulticast mode
[  387.343082][T12164] bridge_slave_1: entered promiscuous mode
[  387.357284][ T5778] Bluetooth: hci1: command tx timeout
[  387.551777][T12164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.574499][T12202] lo speed is unknown, defaulting to 1000
[  387.583719][T12164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  387.742327][   T32] hsr_slave_0: left promiscuous mode
[  387.758886][   T32] hsr_slave_1: left promiscuous mode
[  387.782742][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.801532][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.822000][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.829600][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.860960][   T32] bridge_slave_1: left allmulticast mode
[  387.866689][   T32] bridge_slave_1: left promiscuous mode
[  387.881372][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.910278][   T32] bridge_slave_0: left allmulticast mode
[  387.931629][   T32] bridge_slave_0: left promiscuous mode
[  387.937476][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.112281][   T32] veth1_macvtap: left promiscuous mode
[  388.117929][   T32] veth0_macvtap: left promiscuous mode
[  388.139504][   T32] veth1_vlan: left promiscuous mode
[  388.165963][   T32] veth0_vlan: left promiscuous mode
[  389.111198][ T5778] Bluetooth: hci2: command tx timeout
[  389.434033][ T5778] Bluetooth: hci1: command tx timeout
[  389.699769][T12240] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  389.717331][T12240] comedi comedi3: 8255: I/O port conflict (0x10000,4)
[  389.724693][T12240] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  389.731515][T12240] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  389.738053][T12240] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  389.745200][T12240] comedi comedi3: 8255: I/O port conflict (0x85,4)
[  389.778618][T12240] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  389.787875][T12240] comedi comedi3: 8255: I/O port conflict (0xa,4)
[  389.794772][T12240] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  389.802687][T12240] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  389.809219][T12240] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  389.816214][T12240] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  389.828554][T12240] comedi comedi3: 8255: I/O port conflict (0x78b4042d,4)
[  389.873256][   T32] team0 (unregistering): Port device team_slave_1 removed
[  389.962754][   T32] team0 (unregistering): Port device team_slave_0 removed
[  390.063357][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  390.158234][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  390.537578][T12244] loop1: detected capacity change from 0 to 32768
[  390.556565][T12244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2310 (12244)
[  390.584421][T12244] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  390.598817][T12244] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  390.608396][T12244] BTRFS info (device loop1): using free space tree
[  390.697007][T12244] BTRFS info (device loop1): enabling ssd optimizations
[  390.723186][T12244] BTRFS info (device loop1): auto enabling async discard
[  390.916679][ T5773] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  391.014302][   T32] bond0 (unregistering): Released all slaves
[  391.198433][ T5778] Bluetooth: hci2: command tx timeout
[  391.312212][T12164] team0: Port device team_slave_0 added
[  391.383028][T12164] team0: Port device team_slave_1 added
[  391.510936][ T5778] Bluetooth: hci1: command tx timeout
[  391.552622][T12164] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.559648][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.680973][T12164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  391.733731][T12164] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.760976][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.820620][T12164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  392.152253][T12164] hsr_slave_0: entered promiscuous mode
[  392.160412][T12164] hsr_slave_1: entered promiscuous mode
[  392.190879][T12164] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  392.198921][T12164] Cannot create hsr debugfs directory
[  392.278485][T12280] loop4: detected capacity change from 0 to 2048
[  392.300297][T12202] chnl_net:caif_netlink_parms(): no params data found
[  392.327127][T12280] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=27485, location=27485
[  392.375835][T12280] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  392.675086][T12263] loop1: detected capacity change from 0 to 32768
[  392.784394][T12263] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  392.800415][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.088889][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.114229][T12263] XFS (loop1): Ending clean mount
[  393.128224][T12263] XFS (loop1): Quotacheck needed: Please wait.
[  393.257008][T12263] XFS (loop1): Quotacheck: Done.
[  393.281004][ T5778] Bluetooth: hci2: command tx timeout
[  393.308035][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.342394][T12202] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.390141][T12202] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.424353][T12202] bridge_slave_0: entered allmulticast mode
[  393.433302][T12202] bridge_slave_0: entered promiscuous mode
[  393.519490][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  393.598398][ T5778] Bluetooth: hci1: command tx timeout
[  393.762901][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.825637][T12202] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.881079][T12202] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.915553][T12202] bridge_slave_1: entered allmulticast mode
[  393.947380][T12202] bridge_slave_1: entered promiscuous mode
[  394.154377][T12164] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  394.244817][T12164] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  394.296527][T12202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.337359][T12202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.380254][T12164] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  394.481130][T12164] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  394.593918][T12202] team0: Port device team_slave_0 added
[  394.616870][T12202] team0: Port device team_slave_1 added
[  394.830254][T12336] loop1: detected capacity change from 0 to 1024
[  394.838173][T12202] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.871024][T12202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.923104][T12336] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  394.970834][T12202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.025987][T12202] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.049169][T12202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.130845][T12202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.231495][   T12] tipc: Left network mode
[  395.361476][ T5778] Bluetooth: hci2: command tx timeout
[  395.394647][T12346] loop1: detected capacity change from 0 to 256
[  395.404616][T12202] hsr_slave_0: entered promiscuous mode
[  395.462915][T12202] hsr_slave_1: entered promiscuous mode
[  395.495054][T12202] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  395.514528][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.532043][T12202] Cannot create hsr debugfs directory
[  395.559091][T12346] FAT-fs (loop1): Filesystem has been set read-only
[  395.579396][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.614833][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.635883][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.684188][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.720001][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.730481][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.748238][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.788198][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.824216][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.840499][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.849728][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.883366][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.892804][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.901570][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.910162][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.918847][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.927670][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.936683][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.961038][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  395.998302][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.039785][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.084116][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.116442][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.142448][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.174627][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.186182][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.195525][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.214614][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.245667][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.289937][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.301243][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.309849][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.364575][T12365] loop4: detected capacity change from 0 to 256
[  396.366106][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.400647][T12365] FAT-fs (loop4): Directory bread(block 64) failed
[  396.405322][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.417632][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.434793][T12365] FAT-fs (loop4): Directory bread(block 65) failed
[  396.441970][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.451462][T12164] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.462952][T12365] FAT-fs (loop4): Directory bread(block 66) failed
[  396.469553][T12365] FAT-fs (loop4): Directory bread(block 67) failed
[  396.477711][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.508827][T12365] FAT-fs (loop4): Directory bread(block 68) failed
[  396.521542][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.529307][T12365] FAT-fs (loop4): Directory bread(block 69) failed
[  396.530125][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.552431][T12365] FAT-fs (loop4): Directory bread(block 70) failed
[  396.559721][T12365] FAT-fs (loop4): Directory bread(block 71) failed
[  396.581738][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.590367][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.612021][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.613172][T12365] FAT-fs (loop4): Directory bread(block 72) failed
[  396.632584][T12365] FAT-fs (loop4): Directory bread(block 73) failed
[  396.636844][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.660819][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.677260][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.722505][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.734955][T12164] 8021q: adding VLAN 0 to HW filter on device team0
[  396.752390][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.794300][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.826486][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.850355][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.876848][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.887090][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.903840][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.913710][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.941692][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.950497][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  396.973853][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.981100][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.001837][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.010533][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.051017][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.083457][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.109290][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.155214][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.164425][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.176494][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.211940][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.219164][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.232398][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.234676][T12373] loop4: detected capacity change from 0 to 1024
[  397.252776][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.262901][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.286033][T12373] EXT4-fs: Ignoring removed oldalloc option
[  397.314543][T12373] EXT4-fs: Ignoring removed orlov option
[  397.322572][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.341327][T12373] EXT4-fs: Ignoring removed oldalloc option
[  397.349653][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.359726][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.367972][T12373] EXT4-fs: Ignoring removed nomblk_io_submit option
[  397.377722][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.386790][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.396487][T12346] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  397.429331][   T28] audit: type=1800 audit(1782305136.988:192): pid=12346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2328" name="file2" dev="loop1" ino=1048769 res=0 errno=0
[  397.512474][T12373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  397.807321][ T7322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.972240][T12202] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  398.055442][   T12] hsr_slave_0: left promiscuous mode
[  398.135680][   T12] hsr_slave_1: left promiscuous mode
[  398.159708][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  398.181372][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.203650][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  398.232581][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.251956][   T12] bridge_slave_1: left allmulticast mode
[  398.257783][   T12] bridge_slave_1: left promiscuous mode
[  398.285340][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.330150][   T12] bridge_slave_0: left allmulticast mode
[  398.335999][   T12] bridge_slave_0: left promiscuous mode
[  398.348399][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.419988][   T12] veth1_macvtap: left promiscuous mode
[  398.427246][   T12] veth0_macvtap: left promiscuous mode
[  398.433819][   T12] veth1_vlan: left promiscuous mode
[  398.439222][   T12] veth0_vlan: left promiscuous mode
[  398.460853][    T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  398.661068][    T8] usb 5-1: Using ep0 maxpacket: 16
[  398.673988][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  398.690538][    T8] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  398.706457][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.721752][    T8] usb 5-1: config 0 descriptor??
[  399.182194][    T8] kone 0003:1E7D:2CED.0024: unknown main item tag 0xd
[  399.193827][    T8] kone 0003:1E7D:2CED.0024: unknown main item tag 0x0
[  399.208214][    T8] kone 0003:1E7D:2CED.0024: unknown main item tag 0x0
[  399.215434][    T8] kone 0003:1E7D:2CED.0024: unknown main item tag 0x0
[  399.229971][    T8] kone 0003:1E7D:2CED.0024: unknown main item tag 0x0
[  399.237253][    T8] kone 0003:1E7D:2CED.0024: unknown global tag 0xc
[  399.244030][    T8] kone 0003:1E7D:2CED.0024: item 0 1 1 12 parsing failed
[  399.252157][    T8] kone 0003:1E7D:2CED.0024: parse failed
[  399.257926][    T8] kone: probe of 0003:1E7D:2CED.0024 failed with error -22
[  399.411663][    T8] usb 5-1: USB disconnect, device number 14
[  399.534442][   T12] team0 (unregistering): Port device team_slave_1 removed
[  399.589300][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  399.655286][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  400.222084][   T12] bond0 (unregistering): Released all slaves
[  400.375153][T12202] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  400.387561][T12202] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  400.416570][T12202] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  400.613058][   T28] audit: type=1326 audit(1782305140.178:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.1.2348" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f365039ce59 code=0x0
[  400.828866][T12202] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.889346][   T12] IPVS: stop unused estimator thread 0...
[  400.906427][T12202] 8021q: adding VLAN 0 to HW filter on device team0
[  400.936277][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.943614][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  401.004127][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.011439][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state
[  401.119422][T12164] 8021q: adding VLAN 0 to HW filter on device batadv0
[  401.740307][T12202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  402.270646][T12164] veth0_vlan: entered promiscuous mode
[  402.314460][T12164] veth1_vlan: entered promiscuous mode
[  402.392179][ T5085] Bluetooth: hci2: command tx timeout
[  402.474695][T12164] veth0_macvtap: entered promiscuous mode
[  402.510434][T12164] veth1_macvtap: entered promiscuous mode
[  402.591904][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  402.631138][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.681117][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  402.706670][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.745104][T12164] batman_adv: batadv0: Interface activated: batadv_slave_0
[  402.777659][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  402.804881][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.831033][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  402.850822][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.873289][T12164] batman_adv: batadv0: Interface activated: batadv_slave_1
[  402.910248][T12164] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.934529][T12164] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.944268][T12444] loop4: detected capacity change from 0 to 32768
[  402.951381][T12164] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  402.960133][T12164] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.018890][T12444] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  403.064725][T12202] veth0_vlan: entered promiscuous mode
[  403.075065][T12480] loop1: detected capacity change from 0 to 512
[  403.173013][T12202] veth1_vlan: entered promiscuous mode
[  403.194900][T12444] XFS (loop4): Ending clean mount
[  403.219261][T12480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  403.227366][T12444] XFS (loop4): Quotacheck needed: Please wait.
[  403.296551][T12480] ext4 filesystem being mounted at /589/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  403.385837][T12202] veth0_macvtap: entered promiscuous mode
[  403.450206][T12202] veth1_macvtap: entered promiscuous mode
[  403.479256][T12444] XFS (loop4): Quotacheck: Done.
[  403.558955][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.605785][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.649912][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.666931][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.679173][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  403.695005][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.741151][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.760835][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.780518][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.796410][T12202] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.808033][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.819694][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.847737][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.848160][ T7322] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  403.871028][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.885066][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.896042][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.908367][T12202] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.976988][T12202] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.998121][T12202] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.014764][T12202] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.026276][T12202] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.097916][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.141797][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.461469][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.469390][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.609708][T12503] ip6gretap1: entered allmulticast mode
[  404.634852][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.654868][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.081721][ T5840] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  405.292105][ T5840] usb 7-1: Using ep0 maxpacket: 32
[  405.307194][ T5840] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  405.324936][T12499] loop1: detected capacity change from 0 to 32768
[  405.331540][ T5840] usb 7-1: config 0 has no interface number 0
[  405.343916][ T5840] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  405.371735][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.399601][ T5840] usb 7-1: Product: syz
[  405.415285][T12499] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  405.448657][ T5840] usb 7-1: Manufacturer: syz
[  405.454068][ T5840] usb 7-1: SerialNumber: syz
[  405.491429][ T5840] usb 7-1: config 0 descriptor??
[  405.503971][ T5840] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  405.518239][ T5840] usb 7-1: selecting invalid altsetting 1
[  405.524615][ T5840] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  405.538454][ T5840] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  405.549451][ T5840] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  405.558174][ T5840] usb 7-1: media controller created
[  405.588762][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  405.626917][T12499] XFS (loop1): Ending clean mount
[  405.849260][ T5773] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  406.718730][ T5840] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  406.737868][T12558] loop1: detected capacity change from 0 to 512
[  406.752759][ T5840] zl10353_read_register: readreg error (reg=127, ret==-110)
[  406.773589][ T5840] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  406.850423][T12558] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.2373: corrupted in-inode xattr: invalid ea_ino
[  406.906211][T12558] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2373: couldn't read orphan inode 15 (err -117)
[  406.931044][ T5840] usb 7-1: USB disconnect, device number 2
[  407.036581][T12558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.251994][T12544] loop4: detected capacity change from 0 to 32768
[  407.254552][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.503241][T12576] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2377'.
[  407.579434][T12544] JFS: charset not found
[  408.583508][T12604] loop6: detected capacity change from 0 to 1024
[  408.665717][T12604] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  409.396265][T12597] loop4: detected capacity change from 0 to 40427
[  409.449663][T12597] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  409.469904][T12597] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  409.515337][T12597] F2FS-fs (loop4): invalid crc value
[  409.587314][T12599] loop1: detected capacity change from 0 to 32768
[  409.634598][T12599] (syz.1.2386,12599,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  409.680009][T12599] (syz.1.2386,12599,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  409.791982][T12599] JBD2: Ignoring recovery information on journal
[  409.900925][T12597] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  409.908082][T12597] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  410.064109][T12599] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  410.234098][T12616] loop7: detected capacity change from 0 to 32768
[  410.372559][T12616] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  410.407583][ T7322] syz-executor: attempt to access beyond end of device
[  410.407583][ T7322] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  410.488767][ T7322] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  410.566686][T12616] XFS (loop7): Ending clean mount
[  410.592399][T12649] loop6: detected capacity change from 0 to 1024
[  410.625875][T12616] XFS (loop7): Quotacheck needed: Please wait.
[  410.686290][ T5773] ocfs2: Unmounting device (7,1) on (node local)
[  410.702422][T12649] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.937489][T12616] XFS (loop7): Quotacheck: Done.
[  411.035965][T12649] EXT4-fs warning (device loop6): empty_inline_dir:1864: bad inline directory (dir #12) - no `..'
[  411.230057][T12164] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.251617][T12202] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  411.948007][T12676] loop1: detected capacity change from 0 to 256
[  411.990321][T12676] exfat: Deprecated parameter 'namecase'
[  412.005492][T12676] exfat: Deprecated parameter 'namecase'
[  412.049541][T12676] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d)
[  412.138323][T12676] overlay: filesystem on ./bus not supported
[  412.209906][T12679] loop4: detected capacity change from 0 to 4096
[  412.273483][T12679] EXT4-fs: Ignoring removed i_version option
[  412.313500][T12679] EXT4-fs: Ignoring removed oldalloc option
[  412.356056][T12679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  412.400563][T12679] EXT4-fs (loop4): Test dummy encryption mode enabled
[  412.444082][T12679] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal
[  413.250902][   T27] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  413.447339][T12681] loop6: detected capacity change from 0 to 40427
[  413.485013][T12681] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  413.498268][   T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  413.520872][T12681] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  413.529489][   T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  413.562293][   T27] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  413.577783][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  413.579522][T12681] F2FS-fs (loop6): invalid crc value
[  413.600802][   T27] usb 2-1: SerialNumber: syz
[  413.852240][   T27] usb 2-1: 0:2 : does not exist
[  413.921726][   T27] usb 2-1: USB disconnect, device number 22
[  414.006607][T12681] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  414.019747][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  414.051156][T12681] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  414.369203][T12164] syz-executor: attempt to access beyond end of device
[  414.369203][T12164] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  414.450348][T12164] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  414.486487][T12707] loop7: detected capacity change from 0 to 32768
[  414.548832][T12707] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  414.739014][T12707] XFS (loop7): Ending clean mount
[  414.791837][T12707] XFS (loop7): Quotacheck needed: Please wait.
[  414.931650][T12707] XFS (loop7): Quotacheck: Done.
[  415.254879][T12202] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  415.731352][ T5837] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[  415.897608][T12724] loop4: detected capacity change from 0 to 65536
[  415.953290][ T5837] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  415.970792][ T5837] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  415.985605][T12724] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  415.992115][ T5837] usb 7-1: config 0 interface 0 has no altsetting 0
[  416.025607][ T5837] usb 7-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00
[  416.091971][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.110940][T12724] XFS (loop4): Ending clean mount
[  416.147070][ T5837] usb 7-1: config 0 descriptor??
[  416.181448][T12752] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  416.358597][ T7322] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  416.663059][ T5837] lg-g15 0003:046D:C227.0025: unknown main item tag 0x7
[  416.705994][ T5837] lg-g15 0003:046D:C227.0025: hidraw0: USB HID v0.0c Device [HID 046d:c227] on usb-dummy_hcd.6-1/input0
[  416.974212][ T5837] usb 7-1: USB disconnect, device number 3
[  417.247892][ T5837] IPVS: starting estimator thread 0...
[  417.365992][T12791] IPVS: using max 17 ests per chain, 40800 per kthread
[  419.159022][T12856] batadv0: entered promiscuous mode
[  419.171314][T12856] macvtap1: entered promiscuous mode
[  419.179427][T12856] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  419.197803][T12856] batadv0: left promiscuous mode
[  419.664120][T12854] loop1: detected capacity change from 0 to 32768
[  419.711830][T12854] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  419.850274][T12854] XFS (loop1): Ending clean mount
[  419.928041][T12879] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2453'.
[  419.947184][T12879] IPVS: Unknown mcast interface: vetN1_macvtap
[  419.959490][ T5773] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  420.454458][T12892] loop4: detected capacity change from 0 to 512
[  420.498943][T12892] EXT4-fs: Ignoring removed nomblk_io_submit option
[  420.536946][T12892] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  420.615317][T12892] EXT4-fs (loop4): 1 truncate cleaned up
[  420.628916][T12892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  420.855250][T12904] loop1: detected capacity change from 0 to 512
[  420.921639][T12904] FAT-fs (loop1): Directory bread(block 199916) failed
[  420.944521][T12904] FAT-fs (loop1): Directory bread(block 199917) failed
[  420.952202][T12904] FAT-fs (loop1): Directory bread(block 199918) failed
[  420.959134][T12904] FAT-fs (loop1): Directory bread(block 199919) failed
[  420.959609][ T7322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.967240][T12904] FAT-fs (loop1): Directory bread(block 199920) failed
[  420.982961][T12904] FAT-fs (loop1): Directory bread(block 199921) failed
[  420.989894][T12904] FAT-fs (loop1): Directory bread(block 199922) failed
[  420.998070][T12904] FAT-fs (loop1): Directory bread(block 199923) failed
[  421.041575][T12904] FAT-fs (loop1): Directory bread(block 199916) failed
[  421.049345][T12904] FAT-fs (loop1): Directory bread(block 199917) failed
[  421.196644][T12907] loop6: detected capacity change from 0 to 4096
[  421.305368][T12911] vxcan1: MTU too low for tipc bearer
[  421.329508][T12911] tipc: Enabling of bearer <eth:vxcan1> rejected, failed to enable media
[  421.496359][T12915] loop1: detected capacity change from 0 to 2048
[  421.633132][T12921] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  421.743911][T12925] loop6: detected capacity change from 0 to 1024
[  422.004975][T12932] loop7: detected capacity change from 0 to 512
[  422.040693][T12932] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  422.049130][T12932] EXT4-fs (loop7): orphan cleanup on readonly fs
[  422.065757][T12932] EXT4-fs warning (device loop7): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  422.125481][T12932] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  422.192697][T12932] EXT4-fs error (device loop7): ext4_ext_check_inode:530: inode #13: comm syz.7.2470: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  422.279138][T12932] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.2470: couldn't read orphan inode 13 (err -117)
[  422.351972][T12932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  422.546771][T12932] EXT4-fs: Cannot specify journal on remount
[  422.739412][T12202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.213713][T12964] loop4: detected capacity change from 0 to 64
[  423.278242][T12964] hfs: unable to read volume bitmap
[  423.314861][T12964] hfs: can't find a HFS filesystem on dev loop4
[  423.415474][T12939] loop6: detected capacity change from 0 to 32768
[  423.443209][T12964] netlink: 'syz.4.2480': attribute type 1 has an invalid length.
[  423.451204][T12939] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.2471 (12939)
[  423.477059][T12939] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  423.527261][T12939] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  423.575626][T12939] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  423.598625][T12939] BTRFS info (device loop6): use zstd compression, level 3
[  423.639546][T12939] BTRFS info (device loop6): using free space tree
[  423.671319][T12973] loop1: detected capacity change from 0 to 512
[  423.685376][T12973] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2483: inode has both inline data and extents flags
[  423.750466][T12973] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2483: couldn't read orphan inode 15 (err -117)
[  423.795677][T12973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  423.891476][T12939] BTRFS info (device loop6): enabling ssd optimizations
[  423.940883][T12939] BTRFS info (device loop6): auto enabling async discard
[  424.103140][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.342799][T12164] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  424.465608][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2490'.
[  424.495177][T13006] EXT4-fs: Ignoring removed bh option
[  424.588762][T13006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  425.102671][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  425.223842][T13028] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2496'.
[  425.262901][T13024] set_capacity_and_notify: 1 callbacks suppressed
[  425.262917][T13024] loop4: detected capacity change from 0 to 1024
[  425.609400][T13038] loop1: detected capacity change from 0 to 64
[  426.207931][T13060] loop1: detected capacity change from 0 to 512
[  426.282856][T13060] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002]
[  426.384706][T13065] usb usb8: usbfs: process 13065 (syz.6.2509) did not claim interface 14 before use
[  426.411929][T13060] System zones: 1-12
[  426.452185][T13060] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #15: comm syz.1.2507: corrupted inode contents
[  426.498364][T13060] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  426.560841][T13060] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #15: comm syz.1.2507: corrupted inode contents
[  426.593975][T13060] EXT4-fs error (device loop1): ext4_evict_inode:302: inode #15: comm syz.1.2507: mark_inode_dirty error
[  426.618320][T13060] EXT4-fs (loop1): 1 orphan inode deleted
[  426.626544][T13060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  426.679302][T13071] loop7: detected capacity change from 0 to 512
[  426.691440][T13072] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  426.736955][T13071] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  426.886255][T13044] loop4: detected capacity change from 0 to 32768
[  426.894694][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.904338][T13044] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.2501 (13044)
[  426.920301][T13044] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  426.922824][T13071] EXT4-fs (loop7): 1 truncate cleaned up
[  426.932429][T13044] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  426.945800][T13044] BTRFS info (device loop4): enabling ssd optimizations
[  426.954593][T13071] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  426.979510][T13044] BTRFS info (device loop4): not using ssd optimizations
[  426.987733][T13044] BTRFS info (device loop4): turning off barriers
[  426.995580][T13044] BTRFS info (device loop4): using free space tree
[  427.114088][   T28] audit: type=1800 audit(1782305166.678:194): pid=13071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2510" name="file0" dev="loop7" ino=13 res=0 errno=0
[  427.482065][T13044] BTRFS warning (device loop4): this kernel does not support the incompat:16,incompat:23,incompat:36,incompat:43,incompat:46,incompat:48,incompat:49,incompat:54,incompat:60,incompat:62,incompat:63 feature bits
[  427.564341][T12202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.701659][ T7322] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  427.965467][T13115] vlan2: entered promiscuous mode
[  428.031465][T13115] macvtap0: entered promiscuous mode
[  428.740612][T13131] loop1: detected capacity change from 0 to 4096
[  428.886103][T13135] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  429.007315][T13131] NILFS (loop1): nilfs_sufile_do_free: segment 6 is already clean
[  429.028631][T13131] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean
[  429.251485][T13110] loop7: detected capacity change from 0 to 40427
[  429.286381][T13110] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504)
[  429.331491][T13110] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  429.366707][T13110] F2FS-fs (loop7): invalid crc value
[  429.373418][T13110] F2FS-fs (loop7): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  429.427520][T13110] F2FS-fs (loop7): Found nat_bits in checkpoint
[  429.612342][T13110] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  429.650180][T13110] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  429.748294][T13128] loop4: detected capacity change from 0 to 32768
[  429.849723][T13128] read_mapping_page failed!
[  429.855957][T12202] syz-executor: attempt to access beyond end of device
[  429.855957][T12202] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  429.865580][T13128] ERROR: (device loop4): txCommit: 
[  429.865580][T13128] 
[  429.886208][T12202] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  430.140506][T13137] loop6: detected capacity change from 0 to 32768
[  430.287398][T13137] JBD2: Ignoring recovery information on journal
[  430.446973][T13137] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  430.846277][T13164] veth0_to_bond: entered allmulticast mode
[  430.874800][T12164] ocfs2: Unmounting device (7,6) on (node local)
[  431.083894][T13143] loop1: detected capacity change from 0 to 40427
[  431.112417][T13143] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  431.148388][T13143] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  431.170617][T13143] F2FS-fs (loop1): invalid crc_offset: 33558524
[  431.202380][T13143] F2FS-fs (loop1): Found nat_bits in checkpoint
[  431.214405][T13170] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2532'.
[  431.407326][T13143] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  431.437571][T13143] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  431.661778][T13182] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2534'.
[  432.238733][T13199] loop6: detected capacity change from 0 to 64
[  433.350625][T13232] loop6: detected capacity change from 0 to 1024
[  433.458180][T13204] loop4: detected capacity change from 0 to 32768
[  433.621425][ T1094] hfsplus: b-tree write err: -5, ino 25
[  433.628367][ T1094] hfsplus: b-tree write err: -5, ino 4
[  433.665348][T13204] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  433.665348][T13204] 
[  433.687662][ T1094] hfsplus: b-tree write err: -5, ino 2
[  433.706334][ T1094] hfsplus: b-tree write err: -5, ino 26
[  433.762262][T13204] ERROR: (device loop4): remounting filesystem as read-only
[  433.801138][T13204] ERROR: (device loop4): diWrite: ixpxd invalid
[  433.801138][T13204] 
[  433.827713][T13204] ERROR: (device loop4): txCommit: 
[  433.827713][T13204] 
[  434.318639][T13256] loop6: detected capacity change from 0 to 512
[  434.375753][T13256] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  434.495515][T13256] EXT4-fs (loop6): 1 truncate cleaned up
[  434.530414][T13256] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  434.702230][   T28] audit: type=1800 audit(1782305174.258:195): pid=13256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2559" name="file0" dev="loop6" ino=13 res=0 errno=0
[  434.967429][T12164] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.449688][T13292] loop6: detected capacity change from 0 to 512
[  435.518307][T13294] loop7: detected capacity change from 0 to 1024
[  435.536822][T13292] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  435.603755][T13294] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.628953][T13299] loop4: detected capacity change from 0 to 512
[  435.716607][T13299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  435.751310][T13292] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[  435.819671][T13299] ext4 filesystem being mounted at /516/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  435.956159][T12202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.977589][T13299] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  436.026538][T13299] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  436.041156][T13299] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.2573: Failed to acquire dquot type 0
[  436.077668][T13276] loop1: detected capacity change from 0 to 32768
[  436.123062][T13276] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.2564 (13276)
[  436.256157][T13276] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  436.306225][T13276] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  436.325036][ T7322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  436.363980][T13276] BTRFS info (device loop1): using free space tree
[  436.697918][T13276] BTRFS info (device loop1): enabling ssd optimizations
[  436.733557][T13276] BTRFS info (device loop1): auto enabling async discard
[  437.208676][ T5773] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  437.499466][T13352] netlink: 'syz.6.2583': attribute type 280 has an invalid length.
[  437.800883][   T28] audit: type=1326 audit(1782305177.358:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.6.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135f99ce59 code=0x7ffc0000
[  437.921343][   T28] audit: type=1326 audit(1782305177.358:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.6.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135f99ce59 code=0x7ffc0000
[  437.947057][T13361] vlan2: entered promiscuous mode
[  437.955295][T13361] macvtap0: entered promiscuous mode
[  437.962467][T13359] loop6: detected capacity change from 0 to 512
[  438.006225][T13359] journal_path: Lookup failure for './file0'
[  438.026511][   T28] audit: type=1326 audit(1782305177.448:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.6.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f135f99ce59 code=0x7ffc0000
[  438.063462][T13335] loop7: detected capacity change from 0 to 32768
[  438.066777][T13359] EXT4-fs: error: could not find journal device path
[  438.240367][   T28] audit: type=1326 audit(1782305177.448:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.6.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f135f99cbc2 code=0x7ffc0000
[  438.340335][T13335] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  438.380422][   T28] audit: type=1326 audit(1782305177.448:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.6.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f135f95d68e code=0x7ffc0000
[  438.412321][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2588'.
[  438.468190][   T28] audit: type=1326 audit(1782305177.448:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.6.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f135f99cc87 code=0x7ffc0000
[  438.610409][   T28] audit: type=1326 audit(1782305177.528:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.6.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f135f95d68e code=0x7ffc0000
[  438.719378][T13335] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  438.790503][T13335] XFS (loop7): Starting recovery (logdev: internal)
[  438.875849][T13390] loop4: detected capacity change from 0 to 512
[  438.899621][T13335] XFS (loop7): Ending recovery (logdev: internal)
[  438.984209][T13390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.056313][T13390] ext4 filesystem being mounted at /522/w��5�T��)�`)Y�F�nA��@T<�3�ڂ$���r�cnH�<�p�r��>�wC�" ��-������8 supports timestamps until 2038-01-19 (0x7fffffff)
[  439.197096][T12202] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  439.236039][T13399] loop1: detected capacity change from 0 to 512
[  439.269755][T13399] EXT4-fs: Ignoring removed i_version option
[  439.288747][T13399] EXT4-fs: Ignoring removed nobh option
[  439.299512][T13399] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  439.352551][T13399] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2595: invalid indirect mapped block 4294967295 (level 1)
[  439.367068][ T7322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.412226][T13399] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2595: invalid indirect mapped block 4294967295 (level 1)
[  439.434743][T13399] EXT4-fs (loop1): 2 truncates cleaned up
[  439.445595][T13399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.521458][T13403] loop6: detected capacity change from 0 to 256
[  439.528945][T13403] exfat: Deprecated parameter 'namecase'
[  439.641034][T13403] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  439.801705][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  439.801720][   T28] audit: type=1800 audit(1782305179.358:215): pid=13403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2597" name="file1" dev="loop6" ino=1048782 res=0 errno=0
[  439.981923][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.021490][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  440.027891][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  440.206423][   T28] audit: type=1326 audit(1782305179.768:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.1.2599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365039ce59 code=0x7ffc0000
[  440.269291][T13422] loop6: detected capacity change from 0 to 256
[  440.303109][   T28] audit: type=1326 audit(1782305179.768:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.1.2599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365039ce59 code=0x7ffc0000
[  440.331748][   T28] audit: type=1326 audit(1782305179.768:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.1.2599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365039ce59 code=0x7ffc0000
[  440.361045][   T28] audit: type=1326 audit(1782305179.798:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.1.2599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365039ce59 code=0x7ffc0000
[  440.409325][T13422] FAT-fs (loop6): Directory bread(block 64) failed
[  440.426425][T13422] FAT-fs (loop6): Directory bread(block 65) failed
[  440.457629][T13422] FAT-fs (loop6): Directory bread(block 66) failed
[  440.496460][T13422] FAT-fs (loop6): Directory bread(block 67) failed
[  440.509316][   T28] audit: type=1326 audit(1782305179.798:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.1.2599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f365039ce59 code=0x7ffc0000
[  440.542927][T13422] FAT-fs (loop6): Directory bread(block 68) failed
[  440.549544][T13422] FAT-fs (loop6): Directory bread(block 69) failed
[  440.578337][T13422] FAT-fs (loop6): Directory bread(block 70) failed
[  440.596063][T13422] FAT-fs (loop6): Directory bread(block 71) failed
[  440.608192][   T28] audit: type=1326 audit(1782305179.798:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.1.2599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365039ce59 code=0x7ffc0000
[  440.641648][T13428] hugetlbfs: Bad value '�' for mount option 'size'
[  440.641648][T13428] 
[  440.671009][T13422] FAT-fs (loop6): Directory bread(block 72) failed
[  440.677632][T13422] FAT-fs (loop6): Directory bread(block 73) failed
[  440.758577][   T28] audit: type=1326 audit(1782305179.798:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.1.2599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365039ce59 code=0x7ffc0000
[  440.851304][   T28] audit: type=1326 audit(1782305179.798:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.1.2599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365039ce59 code=0x7ffc0000
[  440.906859][   T28] audit: type=1326 audit(1782305179.798:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.1.2599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f365039ce59 code=0x7ffc0000
[  441.229693][T13444] loop4: detected capacity change from 0 to 128
[  441.342768][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2613'.
[  441.580642][T13455] loop1: detected capacity change from 0 to 4096
[  441.615611][T13455] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  441.689997][T13455] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  441.729066][T13455] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[  442.326808][T13483] loop4: detected capacity change from 0 to 512
[  442.408177][T13483] EXT4-fs (loop4): 1 truncate cleaned up
[  442.419417][T13483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.427684][T13485] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2626'.
[  442.476635][T13483] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 4095 (only 1 groups)
[  442.569310][ T7322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.750113][T13493] loop4: detected capacity change from 0 to 1024
[  442.993495][T13480] ERROR: (device loop1): dbAlloc: the hint is outside the map
[  442.993495][T13480] 
[  443.051276][T13480] ERROR: (device loop1): remounting filesystem as read-only
[  443.060333][T13480] ERROR: (device loop1): diWrite: ixpxd invalid
[  443.060333][T13480] 
[  443.082795][T13480] ERROR: (device loop1): txCommit: 
[  443.082795][T13480] 
[  443.160654][T13499] netlink: 822 bytes leftover after parsing attributes in process `syz.4.2630'.
[  443.276619][T13501] IPVS: Error connecting to the multicast addr
[  443.447317][T13507] set_capacity_and_notify: 1 callbacks suppressed
[  443.447334][T13507] loop4: detected capacity change from 0 to 512
[  443.574896][T13507] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  443.627241][T13507] EXT4-fs (loop4): 1 truncate cleaned up
[  443.644522][T13507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.882424][T13512] loop6: detected capacity change from 0 to 4096
[  443.925491][T13512] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512).
[  444.049410][T13512] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  444.059245][ T7322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.107184][T13512] ntfs3: loop6: Failed to load $Extend (-22).
[  444.137223][T13512] ntfs3: loop6: Failed to initialize $Extend.
[  444.265476][T13512] ntfs3: loop6: ino=0, attr_set_size
[  444.305199][T13512] ntfs3: loop6: ino=0, attr_set_size
[  444.971843][T13549] loop4: detected capacity change from 0 to 512
[  444.990169][T13549] EXT4-fs: Ignoring removed i_version option
[  445.008126][T13549] EXT4-fs: Ignoring removed nobh option
[  445.056989][T13549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  445.113191][T13552] loop7: detected capacity change from 0 to 1024
[  445.137223][T13549] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2650: invalid indirect mapped block 4294967295 (level 1)
[  445.168804][T13549] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2650: invalid indirect mapped block 4294967295 (level 1)
[  445.191228][T13549] EXT4-fs (loop4): 2 truncates cleaned up
[  445.209594][T13549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.731501][ T7322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.146519][T13577] loop6: detected capacity change from 0 to 512
[  446.252334][T13577] __quota_error: 5 callbacks suppressed
[  446.252353][T13577] Quota error (device loop6): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[  446.374609][T13577] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  446.407244][T13577] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.2657: Failed to acquire dquot type 1
[  446.452494][T13555] loop1: detected capacity change from 0 to 40427
[  446.478771][T13577] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.2657: bg 0: block 495: padding at end of block bitmap is not set
[  446.515894][T13555] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  446.532536][T13555] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  446.557801][T13577] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  446.589949][T13555] F2FS-fs (loop1): Found nat_bits in checkpoint
[  446.610300][T13577] EXT4-fs (loop6): 1 truncate cleaned up
[  446.625251][T13594] loop4: detected capacity change from 0 to 128
[  446.658528][T13577] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  446.699642][T13594] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  446.720941][T13577] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  446.827852][T13555] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  446.882298][T13555] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  447.071832][T12164] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.203548][ T5773] syz-executor: attempt to access beyond end of device
[  447.203548][ T5773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  447.257515][ T5773] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  448.171005][ T5840] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  448.363468][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  448.401323][ T5840] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  448.450916][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  448.492405][ T5840] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  448.534230][ T5840] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  448.544026][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.564317][ T5840] usb 5-1: Product: syz
[  448.568563][ T5840] usb 5-1: Manufacturer: syz
[  448.604340][ T5840] usb 5-1: SerialNumber: syz
[  448.630535][ T5840] usb 5-1: config 0 descriptor??
[  448.662656][ T5840] ums-isd200 5-1:0.0: USB Mass Storage device detected
[  448.981827][ T5840] ums-isd200: probe of 5-1:0.0 failed with error -22
[  449.125665][T13653] loop1: detected capacity change from 0 to 4096
[  449.157610][T13620] loop7: detected capacity change from 0 to 40427
[  449.180385][ T5840] usb 5-1: USB disconnect, device number 15
[  449.212983][T13653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.264507][T13620] F2FS-fs (loop7): Found nat_bits in checkpoint
[  449.458214][T13642] loop6: detected capacity change from 0 to 32768
[  449.529670][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.538708][T13620] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  449.559080][T13642] JBD2: Ignoring recovery information on journal
[  449.762074][T13642] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  450.122394][T12164] ocfs2: Unmounting device (7,6) on (node local)
[  450.880841][   T27] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  451.101468][   T27] usb 2-1: Using ep0 maxpacket: 8
[  451.133484][   T27] usb 2-1: unable to get BOS descriptor or descriptor too short
[  451.159196][   T27] usb 2-1: config 4 interface 0 has no altsetting 0
[  451.177737][   T27] usb 2-1: string descriptor 0 read error: -22
[  451.191534][   T27] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  451.226349][   T27] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  451.263151][   T27] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  451.299237][   T27] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  451.327107][T13710] ip6gretap1: entered promiscuous mode
[  451.337771][   T27] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  451.349280][   T27] usb 2-1: media controller created
[  451.375798][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  451.600425][T13717] loop6: detected capacity change from 0 to 256
[  452.472679][   T27] zl10353_read_register: readreg error (reg=127, ret==0)
[  452.482449][T13685] usb 2-1: dvb_usb_au6610: wlen=4100, aborting
[  452.549086][   T27] usb 2-1: USB disconnect, device number 23
[  453.190955][   T27] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  453.391123][   T27] usb 7-1: Using ep0 maxpacket: 8
[  453.398529][   T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  453.411474][   T27] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  453.434995][   T27] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  453.446656][   T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.458694][   T27] usb 7-1: config 0 descriptor??
[  453.591265][T13269] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  453.803121][T13269] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  453.826651][T13269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.843054][T13269] usb 2-1: Product: syz
[  453.858554][T13269] usb 2-1: Manufacturer: syz
[  453.870915][T13269] usb 2-1: SerialNumber: syz
[  453.892635][T13269] usb 2-1: config 0 descriptor??
[  453.917996][T13269] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  453.926810][   T27] logitech 0003:046D:C294.0026: unknown main item tag 0x0
[  453.926909][   T27] logitech 0003:046D:C294.0026: unknown main item tag 0x4
[  453.926938][   T27] logitech 0003:046D:C294.0026: unknown main item tag 0xd
[  453.926965][   T27] logitech 0003:046D:C294.0026: item fetching failed at offset 38/41
[  453.928789][   T27] logitech 0003:046D:C294.0026: parse failed
[  453.970260][   T27] logitech: probe of 0003:046D:C294.0026 failed with error -22
[  453.979252][T13787] loop4: detected capacity change from 0 to 64
[  453.997292][T13269] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  454.042642][T13269] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  454.069181][T13269] usb 2-1: media controller created
[  454.131134][T13770] dvb-usb: bulk message failed: -22 (7/0)
[  454.160392][T13269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  454.163131][ T5840] usb 7-1: USB disconnect, device number 4
[  454.378690][T13269] DVB: Unable to find symbol mt352_attach()
[  454.505340][T13269] DVB: Unable to find symbol nxt6000_attach()
[  454.522122][T13269] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  454.569245][T13269] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29
[  454.618567][T13269] dvb-usb: schedule remote query interval to 1000 msecs.
[  454.639858][T13269] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  454.663145][T13269] dvb-usb: bulk message failed: -22 (7/0)
[  454.680113][T13269] dvb-usb: bulk message failed: -22 (7/0)
[  454.721322][T13269] usb 2-1: USB disconnect, device number 24
[  454.747116][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2718'.
[  454.899935][T13269] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  455.234634][T13819] loop6: detected capacity change from 0 to 128
[  455.303695][T13819] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  455.425940][T13819] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  455.496832][T13269] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  455.541871][T13819] FAT-fs (loop6): error, invalid access to FAT (entry 0x0ffffe00)
[  455.577862][T13828] loop7: detected capacity change from 0 to 64
[  455.587536][T13819] FAT-fs (loop6): Filesystem has been set read-only
[  455.710071][T13269] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  455.740803][T13269] usb 2-1: config 0 has no interface number 0
[  455.767065][T13269] usb 2-1: too many endpoints for config 0 interface 1 altsetting 0: 64, using maximum allowed: 30
[  455.795823][T13269] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64
[  455.858197][T13269] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[  455.890760][T13269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.922607][T13269] usb 2-1: config 0 descriptor??
[  456.145082][T13269] usb 2-1: string descriptor 0 read error: -71
[  456.195033][T13269] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  456.327332][T13269] snd-usb-audio: probe of 2-1:0.1 failed with error -2
[  456.375851][T13269] usb 2-1: USB disconnect, device number 25
[  456.618447][T13849] loop7: detected capacity change from 0 to 512
[  456.741084][T13849] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  456.807565][T13849] EXT4-fs error (device loop7): ext4_iget_extra_inode:4739: inode #15: comm syz.7.2732: corrupted in-inode xattr: e_value size too large
[  456.881296][T13849] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.2732: couldn't read orphan inode 15 (err -117)
[  456.929732][T13849] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.204732][T12202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.437555][ T5085] Bluetooth: hci3: command 0x0406 tx timeout
[  457.558758][T13845] loop6: detected capacity change from 0 to 32768
[  457.654764][T13842] loop4: detected capacity change from 0 to 32768
[  457.670551][T13845] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  457.726777][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2738'.
[  457.770065][T13874] netlink: 'syz.1.2738': attribute type 14 has an invalid length.
[  457.801388][T13874] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2738'.
[  457.843691][T13842] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  457.868659][T13845] XFS (loop6): Ending clean mount
[  457.907911][T13842] JBD2: Ignoring recovery information on journal
[  457.972367][T13842] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  458.101534][T12164] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  458.422372][ T7322] ocfs2: Unmounting device (7,4) on (node local)
[  458.479285][T13891] loop1: detected capacity change from 0 to 256
[  458.597370][T13891] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  459.212470][T13914] loop6: detected capacity change from 0 to 1024
[  459.255542][T13914] hfsplus: bad catalog entry type
[  459.315085][ T2970] hfsplus: b-tree write err: -5, ino 25
[  459.334478][ T2970] hfsplus: b-tree write err: -5, ino 4
[  459.340056][ T2970] hfsplus: b-tree write err: -5, ino 2
[  460.010315][   T28] audit: type=1326 audit(1782305199.568:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13912 comm="syz.1.2747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365039ce59 code=0x7fc00000
[  460.045776][T13941] loop6: detected capacity change from 0 to 164
[  460.129117][T13941] iso9660: Corrupted directory entry in block 2 of inode 1792
[  460.547128][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  461.038916][T13969] genirq: Flags mismatch irq 2. 00000000 (pcl812) vs. 00000000 (das16m1)
[  461.050311][T13939] loop4: detected capacity change from 0 to 32768
[  461.132122][T13939] (syz.4.2755,13939,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  461.183151][T13939] (syz.4.2755,13939,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  461.271502][ T5778] Bluetooth: hci0: command 0x0406 tx timeout
[  461.307496][T13939] JBD2: Ignoring recovery information on journal
[  461.449551][T13939] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  461.696785][T13987] ipvlan2: entered promiscuous mode
[  462.234654][T14006] loop6: detected capacity change from 0 to 64
[  462.355239][T14006] hfs: hfs: Invalid key length: 94
[  462.392699][   T28] audit: type=1800 audit(1782305201.948:231): pid=14006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2779" name="bus" dev="loop6" ino=22 res=0 errno=0
[  462.422539][ T7322] ocfs2: Unmounting device (7,4) on (node local)
[  462.559047][   T11] ------------[ cut here ]------------
[  462.565546][   T11] kernel BUG at fs/hfs/inode.c:449!
[  462.596928][   T11] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  462.603091][   T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0
[  462.610500][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  462.620605][   T11] Workqueue: writeback wb_workfn (flush-7:6)
[  462.626680][   T11] RIP: 0010:hfs_write_inode+0x87b/0x880
[  462.632277][   T11] Code: c7 c1 00 63 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 6f fe ff ff 48 c7 c7 00 63 30 97 e8 ff 1d 84 ff e9 5e fe ff ff e8 a5 a9 2b ff <0f> 0b 0f 1f 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 bf
[  462.651931][   T11] RSP: 0018:ffffc90000107340 EFLAGS: 00010293
[  462.658037][   T11] RAX: ffffffff825b3bab RBX: ffff88805d375ca8 RCX: ffff88801a673c00
[  462.666072][   T11] RDX: 0000000000000000 RSI: ffffffff8d339400 RDI: 0000000000000000
[  462.674085][   T11] RBP: ffffc900001074d0 R08: ffff88801a673c00 R09: 0000000000000003
[  462.682093][   T11] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  462.690111][   T11] R13: 1ffff92000020e6c R14: ffff88805d375c58 R15: 0000000000000000
[  462.698160][   T11] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  462.707134][   T11] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  462.713766][   T11] CR2: 000055e3d9a930d8 CR3: 0000000050c80000 CR4: 00000000003506e0
[  462.721780][   T11] Call Trace:
[  462.725087][   T11]  <TASK>
[  462.728052][   T11]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  462.733506][   T11]  ? __rwlock_init+0x150/0x150
[  462.738327][   T11]  __writeback_single_inode+0x720/0xee0
[  462.743939][   T11]  writeback_sb_inodes+0x813/0x1020
[  462.749200][   T11]  ? queue_io+0x530/0x530
[  462.753596][   T11]  ? move_expired_inodes+0x726/0x770
[  462.758963][   T11]  ? rcu_is_watching+0x15/0xb0
[  462.763773][   T11]  ? queue_io+0x3ba/0x530
[  462.768167][   T11]  wb_writeback+0x45e/0xbe0
[  462.772717][   T11]  ? queue_io+0x2d1/0x530
[  462.777087][   T11]  ? percpu_ref_tryget+0x250/0x250
[  462.782267][   T11]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  462.788301][   T11]  ? __lock_acquire+0x7d80/0x7d80
[  462.793372][   T11]  ? _raw_spin_unlock_irq+0x23/0x50
[  462.798629][   T11]  wb_workfn+0x400/0xe60
[  462.802927][   T11]  ? inode_wait_for_writeback+0x230/0x230
[  462.808702][   T11]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  462.814743][   T11]  ? __lock_acquire+0x7d80/0x7d80
[  462.819807][   T11]  ? read_lock_is_recursive+0x20/0x20
[  462.825217][   T11]  ? _raw_spin_unlock_irq+0x23/0x50
[  462.830469][   T11]  ? process_scheduled_works+0x975/0x1600
[  462.836230][   T11]  ? process_scheduled_works+0x975/0x1600
[  462.841989][   T11]  process_scheduled_works+0xa60/0x1600
[  462.847592][   T11]  ? worker_attach_to_pool+0x370/0x370
[  462.853101][   T11]  ? assign_work+0x3cc/0x5d0
[  462.857737][   T11]  worker_thread+0xa5e/0xfe0
[  462.862377][   T11]  kthread+0x2fa/0x390
[  462.866477][   T11]  ? pr_cont_work+0x550/0x550
[  462.871195][   T11]  ? kthread_blkcg+0xd0/0xd0
[  462.875824][   T11]  ret_from_fork+0x48/0x80
[  462.880279][   T11]  ? kthread_blkcg+0xd0/0xd0
[  462.884922][   T11]  ret_from_fork_asm+0x11/0x20
[  462.889769][   T11]  </TASK>
[  462.892868][   T11] Modules linked in:
[  462.904988][   T11] ---[ end trace 0000000000000000 ]---
[  462.910516][   T11] RIP: 0010:hfs_write_inode+0x87b/0x880
[  462.917067][   T11] Code: c7 c1 00 63 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 6f fe ff ff 48 c7 c7 00 63 30 97 e8 ff 1d 84 ff e9 5e fe ff ff e8 a5 a9 2b ff <0f> 0b 0f 1f 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 bf
[  462.937303][   T11] RSP: 0018:ffffc90000107340 EFLAGS: 00010293
[  462.944049][   T11] RAX: ffffffff825b3bab RBX: ffff88805d375ca8 RCX: ffff88801a673c00
[  462.982577][T14018] loop4: detected capacity change from 0 to 512
[  462.983703][   T11] RDX: 0000000000000000 RSI: ffffffff8d339400 RDI: 0000000000000000
[  462.998629][   T11] RBP: ffffc900001074d0 R08: ffff88801a673c00 R09: 0000000000000003
[  463.007400][   T11] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  463.024665][   T11] R13: 1ffff92000020e6c R14: ffff88805d375c58 R15: 0000000000000000
[  463.034893][   T11] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  463.046172][   T11] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  463.053966][   T11] CR2: 000055d214177950 CR3: 000000000cf32000 CR4: 00000000003506e0
[  463.062089][   T11] Kernel panic - not syncing: Fatal exception
[  463.068758][   T11] Kernel Offset: disabled
[  463.073097][   T11] Rebooting in 86400 seconds..