last executing test programs:

4.916024947s ago: executing program 1 (id=1642):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@mpls_newroute={0x30, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "8cf4823719910aa872ffa7c9fcd7"}}]}, 0x30}}, 0x0)

4.644266882s ago: executing program 1 (id=1647):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0xc061, 0x6, 0x668, 0x3f8, 0x1f0, 0x4c8, 0x120, 0x0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x80}}}, {{@ipv6={@mcast1, @private2, [], [], 'vlan0\x00', 'pimreg1\x00'}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev, @private2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @private1, @empty, @private1, @dev, @loopback]}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8)

4.345871199s ago: executing program 1 (id=1652):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a87080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

3.919750672s ago: executing program 0 (id=1658):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
pread64(r0, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff)

3.900601782s ago: executing program 1 (id=1659):
semop(0x0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1)
semop(0x0, &(0x7f0000000000)=[{0x2, 0x9, 0xce7cc909bc97f406}], 0x1)

3.674932834s ago: executing program 0 (id=1662):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@overriderock}, {@map_acorn}, {@check_strict}, {}, {@block={'block', 0x3d, 0x400}}, {@map_normal}, {@unhide}, {@overriderock}]}, 0x1, 0xa00, &(0x7f00000003c0)="$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")
removexattr(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)=@random={'security.', ')%!}&\x00'})

3.624055906s ago: executing program 1 (id=1663):
syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000240)={[{@version_upgrade={'version_upgrade', 0x3d, 'compatible'}}, {@fsck}, {@background_compression={'background_compression', 0x3d, 'none'}}, {@very_degraded}, {@nocow}, {@background_compression={'background_compression', 0x3d, 'lz4'}}, {@compression={'compression', 0x3d, 'zstd'}}, {@norecovery}, {@norecovery}, {@discard}, {@nocow}, {@reconstruct_alloc}]}, 0x1, 0x5965, &(0x7f00000011c0)="$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")
open(&(0x7f00000000c0)='./file1\x00', 0x80000, 0x0)

3.329855894s ago: executing program 0 (id=1666):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./bus\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040))

1.95981833s ago: executing program 3 (id=1680):
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0)

1.796695989s ago: executing program 2 (id=1681):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0\x00', 0x2000080, &(0x7f00000022c0)=ANY=[], 0x0, 0x6d1, &(0x7f0000000140)="$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")
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@random={'osx.', 'com.apple.FinderInfo\x00'}, 0x0, 0x30)

1.749625058s ago: executing program 3 (id=1682):
pipe(&(0x7f00000002c0))
select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})

1.576265555s ago: executing program 3 (id=1684):
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x7e, 0x4, 0x3, 0x0, 0x3})

1.412688897s ago: executing program 2 (id=1686):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@nombcache}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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")
lstat(&(0x7f0000000040)='./file1\x00', 0x0)

1.391363167s ago: executing program 1 (id=1687):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=@newlink={0x4c, 0x10, 0x503, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1009}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80801}, 0x844)

1.315009194s ago: executing program 3 (id=1688):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x140, 0x258, 0x0, 0xfffffffd, 0x0, 0x0, {}, {}, {}, {0x4}})

1.159918022s ago: executing program 3 (id=1689):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20108c0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="34dd0f00135ea23c22845cc5474e7cd7e7ab01d33c4486b62e3b4f9822364f30c24779205bbd653e2b0e7bbbcba1e3dc78833fbb91474ba644d13b9a3bfddc66bfc8ba12f680d556b1b4d4a1ec5b55eeedc8454a11312f3025c08220a36ab6d8100e6a0836f341eb18f984b2a7feaef926859b77e733f9bb7220a2460746c81448ccc7a901e32427b8cc656a1b8a1c52fac1524d3a90fc424c13d6cc5708aa1ea205ddd2b967de4068647f1a5fade5146a344fd31daeeaeede8f61b1066ca3a10599230edf07182401e51b"], 0x1, 0x61f5, &(0x7f00000075c0)="$eJzs3U1vHVf9B/DfffRD/k2tLqr+I4TctDyU0iROSggUaLsoCzZdoGxRItetIlJASUBpZRFX3rBgxSsAIbFEiCViwQvogi07VqyIZCOBumLQ2OfE48m9vXYd37n2fD6SPfObM9c+4++d++A7MycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjed7+/0omIGz9LC5Yi/i96Ed2IhbJejoiF5aW8fj8inoud5ng2IgZzEeXtd749HfFqRHx8NmJre321XHz5gP146w9/++0Pzrz9198PLv7nj/d6r41b7/79X/77Tw+Ots0AAADQNkVRFJ30Nv9cen/fbbpTAMBU5Of/IsnLT339q3+8/edZ6o9arVar1VOoq4rRHlSLiNio3qZ8zeDjeAA4YTbik6a7QIPk32r9iDjTdCeAmdZpugMci63t9dVOyrdTfT5Y3m3Px4Lsy3+j8+j8jnHTSerHmEzr/rUZvXhmTH8WptSHWZLz79bzv7HbPkzrHXf+0zIu/+HuqU+tk/Pv1fOvOT35d0fm31Y5//6h8u/JHwAAAAAAZlj+//9Sw5//zh19Uw7k0z7/XZ5SHwAAAAAAAADgSTvq+H+PGP8PAAAAZlb5Xr3067N7y8Zdi61cfr0T8VRtfaBl0skyi033AwAAAAAAAAAAAADapL97DO/1TsQgIp5aXCyKovyqqteHddTbnwI71yxouhPA9DX9IA8AALs+Pls7l78TMR8R16O7c62/weLiYlHMLywWi8XCXH49O5ybLxYq7+vztFw2NzzAC+L+sCh/2HzldlWT/l8wqb3+88rfNSx6B+jYEzJIf80xzQ2FDQDJ7rPRlmekU6YonvZpAwdi/z+FlmKp6fsVs6/puykAAABw/IqiKDrpct7n0vh+3aY7BQBMRX7+r38ucKS6O6Y94sn8fLVarVar1Z+pripGe1AtImKjepvyNYPh+AHghNmIT5ruAg2Sf6v1I+K5pjsBzLRO0x3gWGxtr692Ur6d6vNBGt89HwuyL/+Nzs7t8u1HTSepH2MyrfvXZvTimTH9eXZKfZglOf9uPf8bu+3DtN5x5z8t4/If7pwy1z45/149/5rTk393ZP5tlfPvHyr/nvwBAAAAAGCG5f//L/n8N28yAAAAAAAAAJw4W9vrq/m81/z5/+dGrOf8z9Mp5985bP4LaV7+J1rOv1vL/8u19XqV+Ydv7u3//9peX/3dvX/+f54eNP+5PNNJ96xOukd00m/q9NP0KFv3uM1Bb1j+pkGn2+unY36KwbtxK27HWlzat243/T322lf2tZc9Hexrv7yvvf9Y+5V97YN03YFiIbdfiNX4cdyOd3bay7a5Cds/P6G9mNCe8+95/G+lnH+/8lXmv5jaO7Vp6eFH3cf2++p01O9549bnf3Hp+Ddnos3oPdq2qnL7zjfQn/Jv8lYM46d31+5cuH/z3r07K5EmZ6pLL0eaPGE5/8HO19ze4/8Lu+35cb+6vz78aHjo/GfFZvTH5v9CZb7c3pem3Lcm5PyH6Svn/05qH73/n+T8x+//LzfQHwAAAAAAAAAAAAAAAPg0RVHsnCL6RkRcTef/NHVuJgAwXfn5v0jycrVarVar1aevripGe71aRMRfqrcpXzP8fNQPAwBm2X8j4u9Nd4LGyL/F8vX+yumLTXcGmKq7H3z4w5u3b6/dudt0TwAAAAAAAACAzyqP/7lcGf/5xYhYqq23b/zXN2P5qON/9vPMowFGn/BA32Nsdoe9bmW48edjZ3zuC+PG/z4fj4//ncfE7VW3Y4zBhPbhhPa5Ce3zI5fupTXyRI+KnP/zlfHOy/zP1YZfb8P4r/Ux79sg53++cn8u8/9Sbb1q/sVvZi7/jYOuuBndfflfvPf+Ty7e/eDDV269f/O9tffWfnRlZeXSlatXr127dvHdW7fXLu1+P55ez4Ccfx772nGg7ZLzz5nLv11y/l9ItfzbJef/xVTLv11y/vn1nvzbJeef3/vIv11y/i+lWv7tkvP/Sqrl3y5b2+tzZf4vp1r+7ZL3/6+mWv7tkvN/JdXyb5ec/4VUy79dcv4XU32A/F0e/hTJ+edPuOz/7ZLzX0m1/Nsl53851fJvl5z/lVTLv11y/q+mWv7tkvP/Wqrl3y45/6upln+75Py/nurD5L9wjP1iOnL+11Jt/2+XnP83Ui3/dsn5fzPV8m+XnP9rqZZ/u+T8v5Vq+bdLzv/bqZZ/u+T8v5Nq+bdLzv/1VMu/Xfau/2/GjBkzeabpRyYAAAAAAAAAAAAAoG4ahxM3vY0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYe/uYuQ66/uBn1nv2muHEAMhOPkb2CQmhMRk13biF/5NMYEADVAKJBT6guN612bBb3jtEiiSTQMlEkZFFVXTi7aAojZSVRFVXNCK0lxUfbkq7QW9qagqITWqDAqoSG0F2WrmPM/jmdnZmVnveH32PJ+PlPx2Z86Z88yZ55yd366/cwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHa3vnnuc42iKJr/tf63tShe1Px689TW1m1vuNYjBAAAAFbrp63/P39DuuHgECu1LfN3r/rHry8uLi4WH9jwuxPjxWK6Y6ooJjYVReu+6Jl//2DjS23fB48Xk42xtu/HBmx+w4D7xwfcPzHg/o0D7t804P7JAfcv2QFLbC5/H9N6sB2tL7eWu7S4sZho3bejx1qPNzaNjcXf5bQ0WussThwt5ovjxVwx07F8uWyjtfw3b21u6+1F3NZY27a2N2fIDz91JI6hEfbxjo5tXX7M6PtvKqZ+9MNPHfnjs5du7lUH7oaOxyvHeedtzXF+JtxSjrVRbEr7JI5zrG2c23u8Jhs6xtlordf8unuczw85zg2Xh7mmul/zyWKs9fW3W/tpvP3Xemk/bQ+3/fftRVFcuDzs7mWWbKsYK7Z03DJ2+fWZLGdk8zGaU+mlxfiK5umtQ8zTZp3d0TlPu4+J+PrfGtYbX2YM7S/T9z+9ccnrvtJ5GjWf9XLHSvccHPWxUpU5GOfFt1tP+omec3BHeP6fumP5Odhz7vSYg+l5t83B2wbNwbGNG1pjTi9Co7XO5Tm4q2P5Da0tNVr1uTv6z8HpsydOTy984pOvnz9x+NjcsbmTe3btmtmzd+/+/funj84fn5sp/3+Fe7v6thRj6Ri4Ley7eAy8tmvZ9qm6+JXRHYeTfY7DrV3Ljvo4HO9+co21OSCXzuny2Hi4udMnL44VyxxjrdfnrtUfh+l5tx2H423HYc+fKT2Ow/EhjsPmMqfvGu49y3jbf73GcLV+Fmxtm4Pd70e65+Co349UZQ5Ohnnxr3ct/7NgexjvEztX+n5kw5I5mJ5uOPc0b0nv9yf3t0qveXlL847rNhbnFubO3PPY4bNnz+wqQlkTL2ubK93zdUvbcyqWzNexFc/Xg/OveuKWHrdvDftq8vXN/00u+1o1l7n3nv6vVeunW+/92XHr7iKUEVvr/dnrp3lzf6Zess/+bC7zmenVvxdPfWnb+XdimfNv7PtfKLeXHurxDRPj5fG7Ie2diY7zcedLNd46dzVa235+erjz8UT4b63Pxzf2OR9v61p21Ofjie4nF8/HjUG/7Vid7tdzMsyT4zP9z8fNZbbtXumcHO97Pr491EbY/68LnULqi9rmznLzNm1rfHwiPK/xuIXOebqnY/mJ0Js1t/X07iubp3feXj7WhvTsLlureTrVteyo52k6Xy03TxuDfvt2Zbpfz8kwL27c03+eNpd59t7Vnzs3xy/bzp0bB83BiQ0bm2OeSJOwPN8vbo5z8J7iSHGqOF7Mtu7d2JpPjda2dt433BzcGP5b63Pltj5z8M6uZUc9B9PPseXmXmN86ZMfge7XczLMiyfv6z8Hm8u8Zd9o37veGW5Jy7S9d+3+/dpyv/O6pWs3Xc3feTXH+Tf7+v9utrnM8f0r7TP776e7wy3X9dhP3cfvcsfUbLE2+2lbGOel/cvvp+Z4mst86cCQ8+lgURTnP/ZA6/e94e8rf37uO1/v+LtLr7/pnP/YAz+4/ujfrmT8AKx/L5RlS/mzru0vU8P8/R8AAABYF2LfPxZqov8HAACA2oh9f/xX4Yn+HwAAAGoj9v3joSaZ9P/b3nJp/oXzRUrmLwbx/rQbHiqXixnXmfD91OJlzdsfeGrux395frhtjxVF8ZOHfqPn8tseiuMqTYVxPvNg5+1LVzw/1PYffeTycu359S+Hx4/PZ9hp0CuCO1MUxTdv+EJrO1MfvNiqzz70aKu+98ITjzeXef5A+X1c/7mXlcv/QQj/Hjx6uGP958J++F6oM+/ovT/iel+7+Lrt+95/eXtxvcZtL2497Sc/VD5u/JycLz5eLh/383Lj/6vPP/215vKPvab3+M+P9R7/0+Fxn3rw0nxzxv3PK8vl21+D5vdxvc+G8cftPRXWv+er3+o5/mc+Vy5/+q3lco+GGrd/Z/h+x1svzbfvr8cahzueV/G2crm4/Znv/Hbr/vh48fG7xz956GLH/uieH8/+c/k4013Lx9vjdqK/6Np+83Ha52fc/tO/9WjHfh60/Wfe+9wrm4/bvf27u5bb0LV+9yc2/eFnv9Bze3E8B//sdMfzOfiecByH7T/5oTAfw/3/+8wXOrYbPfqezvNPXP7LW893PJ/o7T8qt//MG4+16n9M/fj3r3vR9S++8OrmviuKb7+vfLxB2z/2R6c6xv+Vm+5qvR7x/pjR797+cuL2z3x858lTC+fmZ9v2auuzc95ZjmfT5OYtzfHeEM6t3d8fOnX2w3NnpmamZopiqr4foXfFvhrqD8pyYaXr3/VIeD1v+b1vbrnjnz4fb/+Xh8vbL76j/Ln12rDcF8PtW8vXb7Gxyu0/eetNreO78Wz5fUeOfQS27/jP/UMtGJ5/9/uCON9Pv/zDrf3QvK/1cyMe16sc/3dny8f5Rtivi+GTmW+76fL22pePn41w8X3l8b7q/RdOc/F1/ZPwer/re+Xjx3HF5/vd8D7mW9s6z3dxfnzj/Fj347c+xeNCOJ8UF8r741Jxf198/qaew4ufQ1JcuLn1/e+kx7l5RU9zOQufWJg+Pn/y3GPTZ+cWzk4vfOKTh06cOnfy7KHWZ3ke+sig9S+fn7a0zk+zc3vvLWY2F0VxqphZgxPW1Rl/86vhxn/6kSOz+2bumJ07evjc0bOPnJ47c+zIwsKRudmFOw4fPTr38UHrz8/ev2v3gT37du88Nj97//4DB/Yc2Dl/8lRzGOWgBtg789GdJ88caq2ycP+9B3bdd9+9MztPnJqdu3/fzMzOc4PWb/1s2tlc+9d3npk7fvjs/Im5nQvzn5y7f9eBvXt3D/w0wBOnjy5MTZ85d3L63MLcmenyuUydbd3c/Nk3aH3qaeHfyvez3RrlB/EV7757b/p81qanPr3sQ5WLdH2A6KXwWTT/8JLT+4f5Pvb9E6EmmfT/AAAAkIPY928MNdH/AwAAQG3Evn9TqIn+HwAAAGoj9v2ToSaZ9P/y//L/w+X/y/tHmf/vlZ8v5P8rlf8//bEyV7re8/8xPy//n4drnP9f9fbl/+X/65f/Hz4/v97HL/8v/89SVcv/x75/c1Fk2f8DAABADmLfvyXURP8PAAAAtRH7/utCTfT/AAAAUBux739RqEkm/b/8/1D5/92DAlf1z/+P/vr/8v/y/2uS/48vjvx/Nlacv3//wx3fyv8H8v/y//L/8v/y/6zaxLL3XKv8f+z7rw81yaT/BwAAgBzEvv/FoSb6fwAAAKiN2PffEGqi/wcAAIDaiH3/1lCTTPp/+X/X/5f/l/+vdf5/tdf/bxuM/P/64Pr//cn/D3DF+f9J+f/1mP+fGO34q53/Hzh8+X+uiqpd/z/2/S8JNcmk/wcAAIAcxL7/paEm+n8AAACojdj3vyzURP8PAAAAtRH7/htDTTLp/+X/5f/l/+X/5f97b3/w9f/Lr+T/q0X+vz/5/wFc/z+v/P+Ix1/t/P+or/8/8WD3+vL/9FK1/H/s+18eapJJ/w8AAAA5iH3/TaEm+n8AAACojdj3vyLURP8PAAAAtRH7/m2hJpn0//L/VyP//9PW2vL/8v/d80P+v275/5L8f7XI//cn/z+A/L/8v/z/cPn/Hh9+Jf9PL1XL/8e+/+ZQk0z6fwAAAMhB7PtvCTVZpv9fHPJv2wAAAEB1xL7//4Wa+Ps/AAAA1Ebs+7eHmmTS/8v/u/6//H9e+f+7N8r/y//Xm/x/f/L/A8j/y//L/w95/f+lVpL/3zTowaiNquX/Y9//ylCTTPp/AAAAyEHs+18VaqL/BwAAgNqIff+rQ030/wAAAFAbse+fCjXJpP+X/69X/v9P//rJVxfy//L/A7Zf0/x/nAby/5mT/+9P/n8A+X/5f/n/Ncn/k4+q5f9j339rqEkm/T8AAADkIPb9t4Wa6P8BAACgNmLff3uoif4fAAAAaiP2/TtCTTLp/+X/65X/j+T/5f/7bb+m+f9E/j9v8v89tB2k8v8DyP/L/2ef/4/vfuX/GY2q5f9j3/+aUJNM+n8AAADIQez77wg10f8DAABAbcS+/7WhJvp/AAAAqI3Y998ZapJJ/y//L/8v/y//L//fe/vy/+uT/H9/K83/b5T/l/+X/88s/+/6/4xW1fL/se9/XahJJv0/AAAA5CD2/XeFmuj/AQAAoDbiv98s/92r/h8AAADqKPb9O0NNMun/5f/l/3PK/zfk/+X/5f9rT/6/P9f/H0D+X/5f/l/+n5GqWv4/9v2vDzXJpP8HAACAHMS+/55QE/0/AAAA1Ebs+6dDTfT/AAAAUBux758JNcmk/5f/l//PKf/v+v/y//L/9Sf/398o8v+L5+X/5f97k/+vYP6/KOT/uaaqlv+Pff+uUJNM+n8AAADIQez7d4ea6P8BAACgNmLfvyfURP8PAAAAtRH7/ntDTTLp/+X/5f/l/+X/5f97b1/+f32S/+/P9f8HkP+X/69b/t/1/7nGqpb/j33/faEmmfT/AAAAkIPY9+8NNdH/AwAAQG3Evn9fqEno/3v9u24AAABgfYl9//5Qk0z+/i//X5P8/2/+fce25f/l//ttfzT5/83y/6HK/1dLTfP/3YfFFZP/H0D+/6rl54uxkQzxmo1f/l/+nytTtfx/7PsPhJpk0v8DAABADmLf/4ZQE/0/AAAA1Ebs+/9/qIn+HwAAAGoj9v0/E2qSSf8v/1+T/H8X+X/5/37bd/1/+f86q2n+f2Rqlf8fk/9fT/l/1/+X/x+0PvV09fP/8avh8v+x778/1CST/h8AAAByEPv+nw010f8DAABAbcS+/42hJvp/AAAAqI3Y9x8MNcmk/5f/l/+/Wvn/C2Py/93zI6/8/xuLblXM/zcnj/x/vVQ4/z8xzPbl/13/X/5/Tcbf/aNmJOOX/5f/Z6mqXf8/9v1vCjXJpP8HAACAHMS+/4FQE/0/AAAA1Ebs+98caqL/BwAAgNqIff9bQk0y6f/l/+X/Xf9f/t/1/3tvX/5/fapw/n8o8v/y//L/63f88v/y/yxVtfx/7PsfDDXJpP8HAACAHMS+/62hJvp/AAAAqI3Y978t1ET/DwAAALUR+/63h5pk0v/L/8v/y//L/8v/996+/P/6JP/fn/z/APL/8v/y//L/jFTV8v+x7/+5UJNM+n8AAADIQez7Hwo10f8DAABAbcS+/x2hJvp/AAAAqI3Y978z1CST/l/+X/5f/l/+X/6/9/bl/9cn+f/+5P8HkP+X/5f/l/9npKqW/499/7tCTTLp/wEAACAHse//+VAT/T8AAADURuz73x1qov8HAACA2oh9/y+EmmTS/8v/y/9XK/+/eL59Pfl/+f9iVPn/5kry/1mQ/+9P/n+AHvn/TfL/8v/y//L/XLGq5f9j3/+eUJNM+n8AAADIQez73xtqov8HAACA2oh9//tCTfT/AAAAUBux73841CST/l/+P8v8f3rK1cv/u/6//L/r/8v/r478f3/y/wO4/r/8v/y//D8jVbX8f+z7Hwk1yaT/BwAAgBzEvv/9oSb6fwAAAKiN2Pf/YqiJ/h8AAABqI/b9Hwg1yaT/l//PMv9f4ev/1y3/P94xP3LK/0+2vZ5pXsr/y/+vAfn//uT/B5D/l/+vcv4/zObNy6wv/08VVS3/H/v+D4aaZNL/AwAAQA5i3/9LoSb6fwAAAKiN2Pf/cqiJ/h8AAABqI/b9vxJqkkn/X8P8/4VC/l/+vzL5/875kVP+3/X/l5L/Xxvy//3J/w8g/y//X+X8/wDy/1RR1fL/se//1VCTZRu/H/zXEE8TAAAAqJDY938o1CSTv/8DAABADmLffyjURP8PAAAAtRH7/kdDTTLp/2uY/1/l9f/jFVXl/+X/R53/H5P/l/+X/18Do8v/v+L6opD/l/+X/5f/l/+X/2c1qpb/j33/4VCTTPp/AAAAyEHs+38t1ET/DwAAALUR+/4joSb6fwAAAKiN2PfPhppk0v9fw/z/RDXz/67/f6X5/5/I/7v+fyD/35v8/9pw/f/+5P8HkP+X/5f/l/9npKqW/499/1yoSSb9PwAAANRY+nVw7PuPhpro/wEAAKA2Yt9/LNRE/w8AAAC1Efv+D4eaZNL/u/6//L/r/1+L/P94x/Ly/yX5f/n/UZD/70/+fwD5f/l/+X/5f0aqavn/2PfPh5pk0v8DAABADmLf/5FQE/0/AAAA1Ebs+z8aaqL/BwAAgNqIff/xUJNM+n/5f/n/3PP/jaK44Pr/o83/b5L/70n+f23I//cn/z+A/P9a5uevH8mgr934l5D/l/9nqarl/2PffyLUJJP+///Yu48mu85qj8MbY0vdI/gIjBkxhJH5CEyZUcWYaJODZXIGk3MwOedgosk552iTczTRUNWUW2stqfsc7S2pj/rs/b7PM1lXuhZ9hBtz/1f1qxcAAAB6kLv/vnGL/Q8AAADNyN1/v7jF/gcAAIBm5O6/f9zSyf7X/+v/e+//h628/3/wr2+t//f+/3r6/+Ox0t9fvv6vO1cUfs7+/y53vfpe+n/9v/5/lPf/9f/6fw6bW/+fu/8BcUsn+x8AAAB6kLv/gXGL/Q8AAADNyN1/Vdxi/wMAAEAzcvdfHbd0sv/1//p//b/+/0D/f6P+X/+/bN7/H6f/n6D/1//r//X/bNTc+v/c/Q+KWzrZ/wAAANCD3P0PjlvsfwAAAGhG7v6HxC32PwAAADQjd/9D45ZO9r/+X/+v/19K/3/C+/+Hfj/6f/3/Ovr/cfr/Cfp//b/+X//PRs2t/8/d/7C4pZP9DwAAAD3I3f/wuMX+BwAAgGbk7n9E3GL/AwAAQDNy9z8ybulk/+v/9f/6/6X0/8f0/r/+X/+/cNcPZ/6ZoP9fpf+fMNH/D4P+f8x59/Prf3vL+fznoP/X/7Nqbv1/7v5HxS13H4YTF/ubBAAAAGYld/+j45ZO/vwfAAAAepC7/5q4xf4HAACAZuTuPxW3dLL/9f/6f/2//l//v/7r6/+Xyfv/447e/9/5jve5d7/9v/f/x3n/f9P9/23fGfp/lm1u/X/u/mvjlk72PwAAAPQgd/9j4hb7HwAAAJqRu/+xcYv9DwAAAM3I3f+4uKWT/a//b63/v/2BX3dW/79fu+j/9f/6f/1/6/T/47z/P2H/H3O79UP9v/7f+//6f45mbv1/7v7Hxy2d7H8AAADoQe7+J8Qt9j8AAAA0I3f/E+MW+x8AAACakbv/SXFLJ/tf/99a/3/w13n/X/+/7uvr//X/LdP/j9P/T2jl/f+L/K7Zdj9/VNv+/Pp//T+r5tb/5+5/ctzSyf4HAACAHuTuf0rcYv8DAABAM3L3PzVusf8BAACgGbn7nxa3dLL/9f/6/2X0//kV5tT/7+3tHfoe0v+ftvT+P+n/l0n/P07/P6GV/v8ibbufX/rn1//r/1k1t/4/d//T45ZO9j8AAAD0IHf/M+IW+x8AAACakbv/mXGL/Q8AAADNyN3/rLilk/2v/9f/L6P/9/6//t/7//r/86P/H6f/n6D/1//r//X/bNTc+v/c/dfFLZ3sfwAAAOhB7v5nxy32PwAAADQjd/9z4hb7HwAAAJqRu/+5cUsn+1//r//X/+v/9f/rv77+f5n0/+P0/xM67/+HU/p//b/+n82aUf9/1q/aGZ4Xt3Sy/wEAAKAHufufH7fY/wAAANCM3P0viFvsfwAAAGhG7v4Xxi2d7H/9/2z6//2cr63+f3cYBv3/0Gn/v3vW38/6vtT/6/+Pgf5/nP5/Quf9/7b7+aV/fv2//p/Dds75v9nW+/+5+190+PN1sv8BAACgB7n7Xxy32P8AAADQjNz9L4lb7H8AAABoRu7+l8Ytnex//f9s+v99bfX/3v8//P3RU//v/f9V+v/jof8fp/+foP/X/+v/9f9s1FU3nf6/Zw/bVv+fu/9lcdOJKy76twgAAADMTO7+l8ctnfz5PwAAAPQgd/8r4hb7HwAAABbqupWfyd3/yrilk/2v/99s/3/irJ/T/+v/D39/6P/1//r/S0//P07/P0H/r//X/+v/2ai59f+5+18Vt3Sy/wEAAKAHufuvj1vsfwAAAGhG7v5Xxy32PwAAADQjd/9r4pZO9r/+3/v/+n/9/1T/f+Y5VP2//n/+9P/j9P8T9P/6/5HPf/i/nw7bQP9/8sz/qP+nDRfQ/+/t7V1zyfv/3P2vjVs62f8AAADQg9z9r4tb7H8AAABoRu7+18ct9j8AAAA047bdvzsMwxv2f9Tf/tf/d9r/57f6svr/U8Og//f+v/5f/z9O/z9O/z9B/6//9/6//p+Nmtv7/7n73xi3dLL/AQAAoAe5+98Ut9j/AAAA0Izc/W+OW+x/AAAAaEbu/rfELZ3sf/1/p/2/9//1//r/4+7/bx30/8diEf3/7rm//tz7/2v1//r/Ed31//e424Ef6v/1/6yaW/+fu/+tcUsn+x8AAAB6kLv/bXGL/Q8AAADNyN3/9rjF/gcAAIBm5O5/R9x0eSf7X/+v/9f/6//1/+u//jG//39iGAb9/wYsov8fMff+fzPv/x/+T/kZ+n/9/5I/v/5f/8+qufX/ufvfGbd0sv8BAACgB7n73xW32P8AAADQjNz9745b7H8AAABoRu7+98Qtnex//b/+X/+v/2++/792Ef2/9/83RP8/bh79/7np//X/S/78+n/9P+dvW/1/7v73xi2d7H8AAADoQe7+98Ut9j8AAAA0I3f/++MW+x8AAACakbv/A3FLJ/tf/6//v5D+Pz+n/r+t/v/ksfT/p4bhvPv/nQP/ep28/6//3xD9/7jz6f/3v7f1//p//X+v/f91+n82aW7v/+fuvyFu6WT/AwAAQA9y938wbv2/bu1/AAAAaEbu/g/FLfY/AAAANCN3/4fjlk72v/5f/+/9f/1/8+//6/+7ov8f5/3/Cfp//b/+3/v/bNTc+v/c/R+JWzrZ/wAAANCD3P0fjVvsfwAAAGhG7v6PxS32PwAAADQjd/+NcUsn+1//r//X/+v/9f+n/x7q/9ug/x93PP3/rv5f/1/9/O3iPwX6f/3/1K+nTXPr/3P3fzxu6WT/AwAAQA9y938ibrH/AQAAoBm5+z8Zt9j/AAAAsEiXr/m53P2fils62f/6f/2//l//r/9f//X1/8u0lf4/vyn0/97/D/30/3c68KOlvf9/+L+/9P/6fzZvbv1/7v5Pxy2d7H8AAADoQe7+z8Qt9j8AAAA0I3f/Z+MW+x8AAACakbv/c3FLJ/tf/6//1//r//X/67++/n+ZvP8/Tv8/Qf+/1ffzl/759f/6f1bNrf/P3f/5uKWT/Q8AAAA9yN3/hbjF/gcAAIBm5O7/Ytxi/wMAAEAz9nd/xmUd7n/9v/5f/6//1/+v//r6/2XS/4/T/0/Q/+v/9f/6fzZqbv3/l/Z/1c7w5bilk/0PAAAAPcjd/5W4xf4HAACAZuTu/2rcYv8DAABAM3L3fy1u6WT/6//1/8vo//f29q7R/+v/D/5+zvT/N+v/Kfr/cfr/Cfp//b/+X//PRs2t/8/d//W4pZP9DwAAAD3I3f+NuMX+BwAAgGbk7v9m3GL/AwAAQDNy938rbulk/+v/Z9D/7+j/vf+v/x+8/7/a/192+h/K+v8Lo/8fp/+f0GL/v3P+v/1t9/NHdck+/47+X//PxZpb/5+7/9txSyf7HwAAAHqQu/87cYv9DwAAAM3I3f/duMX+BwAAgGbk7v9e3NLJ/tf/H1//f9u/d728/787rP/8+n/9v/7f+/+Xmv5/nP5/Qov9/wXQ/3v/X//Pps2t/8/d//245eDwu+LCfpcAAADAnOTu/0Hc0smf/wMAAEAPcvf/MG6x/wEAAKAZuft/FLd0sv/1/zN4/7/B/t/7/+u/P/T/s+7/L9P/t+EC+/sbDv+E/j/o//X/+n/9/5H6//xu1v/3bm79f+7+H8ctnex/AAAA6EHu/p/ELfY/AAAANCN3/01xi/0PAAAAzcjdf3Pcctb+X9d2t0L/r//X/+v/9f/rv77+f5m8/z/ufPv/k8PR+v/Uff+/s/Kvr/+/hLb9+fX/3v9n1dz6/9z9P41b/Pk/AAAALM4V5/j53P0/i1vsfwAAAGhG7v6fxy32PwAAADQjd/8v4pZbLtvWRzpW+n/9v/5f/6//X//19f/LpP8f5/3/Cd7/30Q/f6X+v43+fxj0/xzd3Pr/3P2/jFv8+T8AAAA0I3f/r+IW+x8AAACakbv/13GL/Q8AAADNyN3/m7ilk/2v/9f/H7H/308z9f+n6f9P0/+vp/8/Hvr/cfr/Cfp/7//r/73/z0bNrf/P3f/buKWT/Q8AAAA9yN3/u7jF/gcAAIBm5O7/fdxi/wMAAEAzcvf/IW7pZP9vrf+Pf6v1/4vv/73/r//X/+v/Z0X/P67R/n93GAb9/wZsu59f+ufX/+v/WTW3/j93/x/jlk72PwAAAPQgd/+f4hb7HwAAAJqRu//PcYv9DwAAAM3I3f+XuKWT/e/9f/2//l//r/9f//X1/8uk/x/XaP9/5Pf/62+U/l//r//X/7NRc+v/c/f/NW7pZP8DAABAD3L3/y1usf8BAACgGbn7b4lb7H8AAABoRu7+v8ctnex//b/+X/+v/9f/r//6+v9l0v+P22b/f887TH/ZbfX/Rf+fH0H/r//X/7MRc+v/c/f/I27pZP8DAABAD3L3/zNusf8BAACgGbn7/xW32P8AAADQjNz9/45bOtn/E/3/yfoL9f+j9P8HP7/+f/33h/5f/6//v/T0/+O8/z9B/+/9f/2//p+Nmlv/n7v/P3FLJ/sfAAAAepC7/9a4xf4HAACAZuTu/2/cYv8DAABAM3L3/y9u6WT/e/9/Sf3/lfp//b/+X/+v/5+g/x+n/5+g/9f/6//1/2zU3Pr/3P3/DwAA//+2vUye")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c1242, 0x15c)

1.11412558s ago: executing program 0 (id=1691):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @remote}, {}, 0x28, {0x2, 0x0, @empty}})

938.043407ms ago: executing program 4 (id=1693):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x8000)

811.38584ms ago: executing program 0 (id=1694):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x328, 0x240, 0x240, 0x98, 0x328, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'wlan1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@ah={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8)

688.78417ms ago: executing program 4 (id=1695):
madvise(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x66)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4)

675.377925ms ago: executing program 0 (id=1696):
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)

589.768669ms ago: executing program 2 (id=1697):
r0 = io_uring_setup(0x70d9, &(0x7f0000000700)={0x0, 0xcff9, 0x2, 0x2, 0x269})
io_uring_enter(r0, 0x6df6, 0x0, 0xb, 0x0, 0x0)

540.733078ms ago: executing program 4 (id=1698):
r0 = syz_open_dev$vbi(&(0x7f0000032680), 0x2, 0x2)
ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0)

382.542393ms ago: executing program 4 (id=1699):
r0 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x4be3, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000700)={0x0, 0x47425247, 0x2, @discrete={0x0, 0x1}})

333.965454ms ago: executing program 2 (id=1700):
r0 = socket$tipc(0x1e, 0x5, 0x0)
getpeername$tipc(r0, 0x0, 0x0)

249.483916ms ago: executing program 4 (id=1701):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0)

157.470693ms ago: executing program 2 (id=1702):
r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0)

64.722619ms ago: executing program 4 (id=1703):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000280))

5.579051ms ago: executing program 2 (id=1704):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffff512, 0x1, 0x2, 0x0, 0x1ff, 0x200}, 0x20)

0s ago: executing program 3 (id=1705):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x4, 0x0, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000180)="88ad6a24", 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

c000003e syscall=202 compat=0 ip=0x7f9e5798e929 code=0x7ffc0000
[  125.106756][   T30] audit: type=1326 audit(1750146108.078:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f9e5798e929 code=0x7ffc0000
[  125.138196][ T6593] netlink: 'syz.2.242': attribute type 1 has an invalid length.
[  125.142860][ T6554] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  125.147223][ T6593] netlink: 'syz.2.242': attribute type 1 has an invalid length.
[  125.171940][   T30] audit: type=1326 audit(1750146108.078:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5798e929 code=0x7ffc0000
[  125.230630][ T6554]   allowing incompatible features above 0.0: (unknown version)
[  125.238329][ T6554]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  125.283417][   T30] audit: type=1326 audit(1750146108.078:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5798e929 code=0x7ffc0000
[  125.292567][ T5850] bcachefs (loop0): shutdown complete
[  125.338097][ T6554] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  125.390251][ T6554] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  125.425602][ T6554] bcachefs (loop4): Version upgrade required:
[  125.425602][ T6554] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  125.425602][ T6554] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  125.425602][ T6554]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  125.533111][ T6554] bcachefs (loop4): dropping and reconstructing all alloc info
[  125.622811][ T6554] bcachefs (loop4): accounting_read... done
[  125.657326][ T6554] bcachefs (loop4): alloc_read... done
[  125.663734][ T6554] bcachefs (loop4): snapshots_read... done
[  125.683334][ T6554] bcachefs (loop4): done starting filesystem
[  125.760615][ T5854] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  125.879345][ T5840] bcachefs (loop4): shutting down
[  125.903289][ T6606] syz.2.249: attempt to access beyond end of device
[  125.903289][ T6606] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0
[  125.930569][ T5854] usb 4-1: Using ep0 maxpacket: 32
[  125.956921][ T5854] usb 4-1: config 0 has an invalid interface number: 146 but max is 0
[  125.989593][ T5854] usb 4-1: config 0 has no interface number 0
[  126.019711][ T5854] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  126.040174][ T6606] vxfs: unable to read disk superblock at 1
[  126.049274][ T5840] bcachefs (loop4): shutdown complete
[  126.069208][ T6606] syz.2.249: attempt to access beyond end of device
[  126.069208][ T6606] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0
[  126.074740][ T5854] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  126.133339][ T6606] vxfs: unable to read disk superblock at 8
[  126.161618][ T6606] vxfs: can't find superblock.
[  126.168252][ T5854] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  126.205844][ T5854] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  126.216591][ T5854] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  126.233120][ T5854] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  126.260396][ T5854] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  126.290393][ T5854] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1
[  126.309019][ T5854] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  126.329100][ T5854] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  126.344600][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.390634][ T5854] usb 4-1: Product: syz
[  126.394864][ T5854] usb 4-1: Manufacturer: syz
[  126.420556][ T5854] usb 4-1: SerialNumber: syz
[  126.436361][ T5854] usb 4-1: config 0 descriptor??
[  126.451579][ T6599] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  126.470793][ T6599] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  126.484084][ T5854] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[  126.535365][ T5854] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[  126.586255][ T5854] scsi host1: microtekX6
[  126.691371][ T6621] loop0: detected capacity change from 0 to 2048
[  126.721942][ T5854] usb 4-1: USB disconnect, device number 3
[  126.741619][   T55] microtek usb (rev 0.4.3): error -19 submitting URB
[  126.804167][ T6621] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.999335][ T6629] netlink: 'syz.1.259': attribute type 1 has an invalid length.
[  127.120711][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  127.310531][   T24] usb 3-1: Using ep0 maxpacket: 16
[  127.334476][   T24] usb 3-1: config 0 descriptor has 1 excess byte, ignoring
[  127.372556][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  127.410999][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  127.431327][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188
[  127.458804][   T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  127.481887][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.507790][   T24] usb 3-1: Product: syz
[  127.516698][   T24] usb 3-1: Manufacturer: syz
[  127.523182][   T24] usb 3-1: SerialNumber: syz
[  127.550111][   T24] usb 3-1: config 0 descriptor??
[  127.570273][ T6627] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  127.600899][ T6627] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  127.645796][ T6645] loop3: detected capacity change from 0 to 256
[  127.656126][    C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71)
[  127.662879][   T24] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected
[  127.670092][    C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71)
[  127.717407][ T6645] FAT-fs (loop3): Directory bread(block 64) failed
[  127.768558][ T6645] FAT-fs (loop3): Directory bread(block 65) failed
[  127.777770][ T6645] FAT-fs (loop3): Directory bread(block 66) failed
[  127.808375][ T6645] FAT-fs (loop3): Directory bread(block 67) failed
[  127.853470][ T6645] FAT-fs (loop3): Directory bread(block 68) failed
[  127.860071][ T6645] FAT-fs (loop3): Directory bread(block 69) failed
[  127.873551][   T30] audit: type=1326 audit(1750146110.888:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7018e929 code=0x7ffc0000
[  127.912741][ T6645] FAT-fs (loop3): Directory bread(block 70) failed
[  127.919654][   T24] usb 3-1: USB disconnect, device number 2
[  127.956361][   T24] mcba_usb 3-1:0.0 can0: device disconnected
[  127.957304][ T6645] FAT-fs (loop3): Directory bread(block 71) failed
[  127.969719][ T6645] FAT-fs (loop3): Directory bread(block 72) failed
[  127.997868][ T6645] FAT-fs (loop3): Directory bread(block 73) failed
[  127.998658][   T30] audit: type=1326 audit(1750146110.888:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7018e929 code=0x7ffc0000
[  128.074357][   T30] audit: type=1326 audit(1750146110.948:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fbc7018e929 code=0x7ffc0000
[  128.097290][   T30] audit: type=1326 audit(1750146110.948:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7018e929 code=0x7ffc0000
[  128.145395][   T30] audit: type=1326 audit(1750146110.948:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7018e929 code=0x7ffc0000
[  128.170645][ T6653] dlm: non-version read from control device 90
[  129.251843][ T6692] loop3: detected capacity change from 0 to 1024
[  129.365683][ T6692] syz.3.286: attempt to access beyond end of device
[  129.365683][ T6692] loop3: rw=0, sector=393308, nr_sectors = 2 limit=1024
[  129.527089][ T6701] loop0: detected capacity change from 0 to 64
[  130.055062][ T6719] loop1: detected capacity change from 0 to 512
[  130.064086][ T6718] xt_TCPMSS: Only works on TCP SYN packets
[  130.202317][ T6719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.240549][ T5956] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  130.249221][ T6727] loop2: detected capacity change from 0 to 512
[  130.273044][ T6731] netlink: 44 bytes leftover after parsing attributes in process `syz.0.301'.
[  130.306650][ T6719] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.396253][ T6719] Quota error (device loop1): do_check_range: Getting block 1702428675 out of range 1-5
[  130.439638][ T5956] usb 5-1: config 0 has an invalid interface number: 120 but max is 0
[  130.449970][ T5956] usb 5-1: config 0 has no interface number 0
[  130.481314][ T6719] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  130.498205][ T5956] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  130.516617][ T6719] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.297: Failed to acquire dquot type 1
[  130.528341][ T5956] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  130.544795][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.625312][ T5956] usb 5-1: config 0 descriptor??
[  130.688527][ T5956] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input7
[  130.747928][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.955322][ T5956] usb 5-1: USB disconnect, device number 3
[  130.991382][ T6748] netlink: 'syz.2.308': attribute type 21 has an invalid length.
[  131.013514][ T6748] netlink: 132 bytes leftover after parsing attributes in process `syz.2.308'.
[  131.060848][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  131.164081][ T6752] netlink: 'syz.3.309': attribute type 20 has an invalid length.
[  131.214686][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'.
[  131.238269][   T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  131.250637][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.266383][ T6752] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1711276041)
[  131.284486][   T24] usb 1-1: Product: syz
[  131.298993][   T24] usb 1-1: Manufacturer: syz
[  131.309268][ T6752] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  131.331727][ T6758] tmpfs: Bad value for 'mpol'
[  131.336612][   T24] usb 1-1: SerialNumber: syz
[  131.368071][   T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  131.446670][ T5913] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  131.774166][ T6762] bond1: entered promiscuous mode
[  131.809792][ T6762] bond1: entered allmulticast mode
[  131.836535][ T6762] 8021q: adding VLAN 0 to HW filter on device bond1
[  131.952175][ T5854] usb 1-1: USB disconnect, device number 3
[  132.448894][ T6790] ieee802154 phy0 wpan0: encryption failed: -90
[  132.500295][ T5913] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  132.521033][ T5913] ath9k_htc: Failed to initialize the device
[  132.549405][ T5854] usb 1-1: ath9k_htc: USB layer deinitialized
[  132.571203][   T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  132.671146][ T6796] loop4: detected capacity change from 0 to 64
[  132.747161][   T43] usb 2-1: Using ep0 maxpacket: 8
[  132.789224][   T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.834394][   T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  132.843442][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  132.843527][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  132.890038][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  132.940516][   T43] usb 2-1: SerialNumber: syz
[  132.966772][   T43] usb 2-1: config 0 descriptor??
[  132.996898][   T43] usb 2-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  133.043474][   T43] usb 2-1: Failed to create links for entity 255
[  133.049879][   T43] usb 2-1: Failed to register entities (-22).
[  133.194849][ T6807] loop3: detected capacity change from 0 to 2048
[  133.247886][ T5942] usb 2-1: USB disconnect, device number 4
[  133.263719][ T6807] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  133.278061][ T6769] loop2: detected capacity change from 0 to 32768
[  133.299070][ T6807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.310492][ T5926] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  133.357655][ T6811] netlink: 268 bytes leftover after parsing attributes in process `syz.0.333'.
[  133.373449][ T6769] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  133.391468][ T6807] afs: Unexpected value for 'dyn'
[  133.412566][ T6769] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  133.494806][ T6769] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  133.503211][ T5926] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  133.529394][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.557034][ T5926] usb 5-1: Product: syz
[  133.573446][ T5926] usb 5-1: Manufacturer: syz
[  133.578124][ T5926] usb 5-1: SerialNumber: syz
[  133.624202][ T5926] usb 5-1: config 0 descriptor??
[  133.678946][ T6769] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  133.858829][ T5926] hso 5-1:0.0: Failed to find BULK IN ep
[  133.880727][ T5926] usb-storage 5-1:0.0: USB Mass Storage device detected
[  133.921247][   T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  134.099478][ T6825] loop3: detected capacity change from 0 to 512
[  134.108301][ T5926] usb 5-1: USB disconnect, device number 4
[  134.130616][   T43] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  134.163621][   T43] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  134.170833][ T6825] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  134.206098][   T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  134.240148][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.260953][ T6825] EXT4-fs (loop3): orphan cleanup on readonly fs
[  134.289431][ T6825] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.339: bad orphan inode 15
[  134.307157][ T6815] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  134.345051][   T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  134.358854][ T6825] ext4_test_bit(bit=14, block=18) = 1
[  134.366038][ T6825] is_bad_inode(inode)=0
[  134.370244][ T6825] NEXT_ORPHAN(inode)=1023
[  134.381086][ T6825] max_ino=32
[  134.386406][ T6825] i_nlink=0
[  134.397394][ T6825] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.339: corrupted xattr block 19: e_value size too large
[  134.413742][ T6825] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  134.480065][ T6825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  134.564545][ T6836] loop1: detected capacity change from 0 to 256
[  134.618578][ T6836] FAT-fs (loop1): Directory bread(block 1285) failed
[  134.630819][ T6836] FAT-fs (loop1): Directory bread(block 1286) failed
[  134.694574][   T43] usb 1-1: USB disconnect, device number 4
[  134.706009][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.736198][ T6836] FAT-fs (loop1): Directory bread(block 1287) failed
[  134.795376][ T6836] FAT-fs (loop1): Directory bread(block 1288) failed
[  134.835061][ T6836] FAT-fs (loop1): Directory bread(block 1289) failed
[  134.890866][ T6836] FAT-fs (loop1): Directory bread(block 1290) failed
[  134.931009][ T6836] FAT-fs (loop1): Directory bread(block 1291) failed
[  134.979304][ T6836] FAT-fs (loop1): Directory bread(block 1292) failed
[  134.994042][ T6836] FAT-fs (loop1): Directory bread(block 1293) failed
[  135.040721][ T6836] FAT-fs (loop1): Directory bread(block 1294) failed
[  135.289125][ T6850] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  135.296823][ T6850] IPv6: NLM_F_CREATE should be set when creating new route
[  135.304407][ T6850] IPv6: NLM_F_CREATE should be set when creating new route
[  135.555310][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'.
[  135.826472][ T6870] netlink: 56 bytes leftover after parsing attributes in process `syz.3.358'.
[  135.972416][ T6877] loop1: detected capacity change from 0 to 8
[  136.332466][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'.
[  136.377732][ T6889] loop3: detected capacity change from 0 to 2048
[  136.416554][ T6894] capability: warning: `syz.0.369' uses deprecated v2 capabilities in a way that may be insecure
[  136.480097][ T6889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.676380][ T6889] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #12: block 9: comm syz.3.367: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0
[  136.764223][ T6889] EXT4-fs (loop3): Remounting filesystem read-only
[  136.924517][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.127827][ T6918] netlink: 'syz.0.381': attribute type 4 has an invalid length.
[  137.146564][ T6918] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.381'.
[  137.162725][ T6920] xt_cgroup: invalid path, errno=-2
[  138.031222][ T6916] loop2: detected capacity change from 0 to 32768
[  138.057229][ T6916] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.380 (6916)
[  138.083173][ T6945] xt_TCPMSS: Only works on TCP SYN packets
[  138.130604][ T6916] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.181503][ T6916] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  138.215500][ T6916] BTRFS info (device loop2): disk space caching is enabled
[  138.240557][ T6916] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  138.463546][ T6916] BTRFS info (device loop2): rebuilding free space tree
[  138.545449][ T6916] BTRFS info (device loop2): disabling free space tree
[  138.555771][ T6916] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  138.584223][ T6916] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  138.725584][ T6977] loop0: detected capacity change from 0 to 512
[  138.761277][ T6936] loop3: detected capacity change from 0 to 32768
[  138.800803][ T6936] (syz.3.388,6936,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  138.903769][ T6977] EXT4-fs (loop0): 1 orphan inode deleted
[  138.917094][ T6936] (syz.3.388,6936,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  138.941758][   T59] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  138.995328][ T6977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.016569][   T59] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1
[  139.056954][ T5842] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  139.067497][ T6977] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.097786][ T6936] (syz.3.388,6936,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  139.167067][ T6936] JBD2: Ignoring recovery information on journal
[  139.275092][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.306784][ T6936] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  139.578619][ T6936] (syz.3.388,6936,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x1fb6df54. Applying ECC.
[  139.640511][ T6936] (syz.3.388,6936,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0xfc4047c
[  139.679995][ T6936] (syz.3.388,6936,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  139.749503][ T6936] (syz.3.388,6936,0):ocfs2_quota_read:201 ERROR: status = -5
[  139.785588][ T6936] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 3
[  139.841459][ T6936] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  139.920568][ T6936] (syz.3.388,6936,0):ocfs2_acquire_dquot:890 ERROR: status = -5
[  139.929910][ T6936] (syz.3.388,6936,0):ocfs2_mknod:314 ERROR: status = -5
[  139.975044][ T6936] (syz.3.388,6936,0):ocfs2_mknod:502 ERROR: status = -5
[  140.013865][ T6936] (syz.3.388,6936,0):ocfs2_mkdir:658 ERROR: status = -5
[  140.127243][ T7011] loop4: detected capacity change from 0 to 512
[  140.241083][ T7011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.313284][ T7011] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  140.333963][ T5841] ocfs2: Unmounting device (7,3) on (node local)
[  140.454332][ T7011] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  140.465637][ T7021] No such timeout policy "syz0"
[  140.598497][ T6996] loop0: detected capacity change from 0 to 32768
[  140.608021][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.677726][ T6996] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  140.793164][ T6996] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  140.827542][ T7029] loop2: detected capacity change from 0 to 8
[  140.847822][ T7029] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  140.899319][ T6996] ocfs2: Unmounting device (7,0) on (node local)
[  140.916245][ T7029] cramfs: Error -3 while decompressing!
[  140.917987][ T5862] udevd[5862]: incorrect cramfs checksum on /dev/loop2
[  140.949089][ T7029] cramfs: ffffffff99bc7bc8(26)->ffff888068d1d000(4096)
[  140.995907][ T7029] cramfs: Error -3 while decompressing!
[  141.024249][ T5862] udevd[5862]: incorrect cramfs checksum on /dev/loop2
[  141.039026][ T7029] cramfs: ffffffff99bc7be2(26)->ffff88806c9e6000(4096)
[  141.060647][ T7029] cramfs: Error -3 while decompressing!
[  141.090058][ T7029] cramfs: ffffffff99bc7bfc(16)->ffff88806ce40000(4096)
[  141.098698][ T7035] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.424'.
[  141.123831][ T5862] udevd[5862]: incorrect cramfs checksum on /dev/loop2
[  141.135149][ T7029] cramfs: Error -3 while decompressing!
[  141.174905][ T7029] cramfs: ffffffff99bc7bc8(26)->ffff888068d1d000(4096)
[  141.243388][ T7039] netlink: 10 bytes leftover after parsing attributes in process `syz.3.426'.
[  141.265088][ T5862] udevd[5862]: incorrect cramfs checksum on /dev/loop2
[  141.341764][ T7041] loop0: detected capacity change from 0 to 512
[  141.360905][ T7041] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  141.403766][ T7041] EXT4-fs (loop0): 1 truncate cleaned up
[  141.458606][ T7041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.749042][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.810576][   T30] audit: type=1326 audit(1750146124.838:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.1.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7018e929 code=0x7ffc0000
[  141.920326][   T30] audit: type=1326 audit(1750146124.878:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.1.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7018e929 code=0x7ffc0000
[  142.005990][   T30] audit: type=1326 audit(1750146124.878:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.1.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fbc7018e929 code=0x7ffc0000
[  142.047829][ T7067] loop2: detected capacity change from 0 to 164
[  142.056209][ T7062] loop0: detected capacity change from 0 to 2048
[  142.080993][   T30] audit: type=1326 audit(1750146124.878:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.1.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7018e929 code=0x7ffc0000
[  142.152264][ T7062] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  142.183025][ T7062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.207440][   T30] audit: type=1326 audit(1750146124.878:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.1.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7018e929 code=0x7ffc0000
[  142.270632][ T7067] iso9660: Corrupted directory entry in block 4 of inode 1792
[  142.345826][ T7072] loop3: detected capacity change from 0 to 1024
[  142.725073][ T7084] kernel read not supported for file / òœ7³ÏøâW)ës“§Ç!Q�öì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|�Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 7084 comm: syz.0.445)
[  142.805893][   T30] audit: type=1800 audit(1750146125.838:22): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.445" name=A0F29C1437B3CFF8C3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=10202 res=0 errno=0
[  143.101130][ T7096] kAFS: unable to lookup cell 'mS²jQ€·”œ­=È A4Z1Ë¡8'
[  143.212208][ T7100] loop2: detected capacity change from 0 to 512
[  143.331459][ T7100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.372551][ T7100] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.489862][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.659596][ T7119] loop1: detected capacity change from 0 to 128
[  143.757304][ T7123] loop2: detected capacity change from 0 to 256
[  143.814834][ T7119] FAT-fs (loop1): error, invalid access to FAT (entry 0x0005ffff)
[  143.880507][ T7119] FAT-fs (loop1): Filesystem has been set read-only
[  144.182704][ T7132] loop2: detected capacity change from 0 to 64
[  144.828491][ T7149] syz.2.478: attempt to access beyond end of device
[  144.828491][ T7149] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0
[  144.890768][ T7149] syz.2.478: attempt to access beyond end of device
[  144.890768][ T7149] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0
[  144.920679][ T7149] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  144.938877][ T7121] loop0: detected capacity change from 0 to 32768
[  144.983707][ T7121] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.465 (7121)
[  145.014531][ T7149] syz.2.478: attempt to access beyond end of device
[  145.014531][ T7149] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0
[  145.056395][ T7121] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  145.074980][ T7121] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  145.085437][ T7149] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  145.088083][ T7121] BTRFS info (device loop0): using free-space-tree
[  145.112659][ T7157] netlink: 'syz.3.482': attribute type 1 has an invalid length.
[  145.126762][ T7149] syz.2.478: attempt to access beyond end of device
[  145.126762][ T7149] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0
[  145.143807][ T7157] netlink: 224 bytes leftover after parsing attributes in process `syz.3.482'.
[  145.149193][ T7163] loop4: detected capacity change from 0 to 256
[  145.156334][ T7149] syz.2.478: attempt to access beyond end of device
[  145.156334][ T7149] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0
[  145.173229][ T7149] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  145.183027][ T7149] syz.2.478: attempt to access beyond end of device
[  145.183027][ T7149] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0
[  145.196903][ T7149] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  145.209079][ T7149] syz.2.478: attempt to access beyond end of device
[  145.209079][ T7149] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0
[  145.261258][ T7149] syz.2.478: attempt to access beyond end of device
[  145.261258][ T7149] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0
[  145.306863][ T7163] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  145.360680][ T7149] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  145.421296][ T7149] syz.2.478: attempt to access beyond end of device
[  145.421296][ T7149] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0
[  145.479503][ T7149] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  145.535648][ T7149] syz.2.478: attempt to access beyond end of device
[  145.535648][ T7149] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0
[  145.553529][ T7181] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  145.578454][ T5850] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  145.608632][ T7149] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  145.620853][ T7149] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  145.691072][ T7149] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1)
[  145.819503][ T7185] loop4: detected capacity change from 0 to 256
[  145.925714][ T7188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.490'.
[  145.952342][ T7185] FAT-fs (loop4): Directory bread(block 64) failed
[  145.967570][ T7185] FAT-fs (loop4): Directory bread(block 65) failed
[  145.975065][ T7185] FAT-fs (loop4): Directory bread(block 66) failed
[  146.020202][ T7185] FAT-fs (loop4): Directory bread(block 67) failed
[  146.049168][ T7185] FAT-fs (loop4): Directory bread(block 68) failed
[  146.072530][ T7185] FAT-fs (loop4): Directory bread(block 69) failed
[  146.098053][ T7185] FAT-fs (loop4): Directory bread(block 70) failed
[  146.116996][ T7185] FAT-fs (loop4): Directory bread(block 71) failed
[  146.126063][ T7185] FAT-fs (loop4): Directory bread(block 72) failed
[  146.136860][ T7185] FAT-fs (loop4): Directory bread(block 73) failed
[  146.594949][ T7201] loop3: detected capacity change from 0 to 4096
[  146.649375][ T7201] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  147.941104][ T7260] loop1: detected capacity change from 0 to 64
[  148.489737][ T7278] netlink: 'syz.4.531': attribute type 10 has an invalid length.
[  148.614445][ T7278] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  149.022651][   T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  149.190583][   T24] usb 4-1: Using ep0 maxpacket: 32
[  149.210202][   T24] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=88.ea
[  149.250557][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.258626][   T24] usb 4-1: Product: syz
[  149.302248][   T24] usb 4-1: Manufacturer: syz
[  149.320700][   T24] usb 4-1: SerialNumber: syz
[  149.373310][   T24] usb 4-1: config 0 descriptor??
[  149.403027][   T24] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints
[  149.586641][   T24] usb 4-1: USB disconnect, device number 4
[  149.590741][ T5942] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  149.764252][ T5942] usb 5-1: config 0 has an invalid interface number: 75 but max is 0
[  149.783065][ T5942] usb 5-1: config 0 has no interface number 0
[  149.789351][ T5942] usb 5-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=cd.d2
[  149.818880][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.830689][ T7288] loop1: detected capacity change from 0 to 32768
[  149.876438][ T5942] usb 5-1: config 0 descriptor??
[  150.046495][ T7306] loop2: detected capacity change from 0 to 32768
[  150.087773][ T7288] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  150.087800][ T7288]   allowing incompatible features above 0.0: (unknown version)
[  150.087814][ T7288]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  150.119950][ T7306] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.544 (7306)
[  150.124201][ T5942] usb 5-1: string descriptor 0 read error: -71
[  150.156468][ T5942] usb 5-1: Found UVC 0.00 device <unnamed> (1bcf:0b40)
[  150.156503][ T5942] usb 5-1: Forcing UVC version to 1.0a
[  150.156527][ T5942] usb 5-1: No valid video chain found.
[  150.158824][ T7306] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  150.158906][ T7306] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  150.158941][ T7306] BTRFS info (device loop2): disk space caching is enabled
[  150.158959][ T7306] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  150.161590][ T5942] usb 5-1: USB disconnect, device number 5
[  150.358465][ T7288] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  150.370884][ T7288] bcachefs (loop1): initializing new filesystem
[  150.380252][ T7306] BTRFS info (device loop2): rebuilding free space tree
[  150.442915][ T7288] bcachefs (loop1): going read-write
[  150.464234][ T7306] BTRFS info (device loop2): disabling free space tree
[  150.489520][ T7306] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  150.519974][ T7306] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  150.530943][ T7288] bcachefs (loop1): marking superblocks
[  150.612061][ T7288] bcachefs (loop1): initializing freespace
[  150.646647][ T7306] BTRFS error (device loop2): balance: invalid convert metadata profile raid0
[  150.657841][ T7288] bcachefs (loop1): done initializing freespace
[  150.696529][ T7288] bcachefs (loop1): reading snapshots table
[  150.753589][ T7288] bcachefs (loop1): reading snapshots done
[  150.796704][ T5842] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  150.889381][ T7288] bcachefs (loop1):  loop1: Superblock write was silently dropped! (seq 0 expected 42)
[  150.924243][ T7288] bcachefs (loop1): done starting filesystem
[  151.093133][ T7313] loop0: detected capacity change from 0 to 32768
[  151.125873][ T7351] loop2: detected capacity change from 0 to 256
[  151.152323][ T7288] syz.1.536 (7288) used greatest stack depth: 16472 bytes left
[  151.228538][ T5849] bcachefs (loop1): shutting down
[  151.290586][ T5849] bcachefs (loop1): going read-only
[  151.313751][ T5849] bcachefs (loop1): finished waiting for writes to stop
[  151.468851][ T5849] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  151.671207][ T5849] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  151.728476][ T5849] bcachefs (loop1): clean shutdown complete, journal seq 4
[  151.767403][ T5849] bcachefs (loop1): marking filesystem clean
[  151.913191][ T5849] bcachefs (loop1): shutdown complete
[  152.936170][ T7403] overlayfs: missing 'lowerdir'
[  153.234401][ T7417] netlink: 'syz.4.588': attribute type 29 has an invalid length.
[  153.242659][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'.
[  153.683010][ T7427] loop3: detected capacity change from 0 to 8
[  153.781194][ T7427] SQUASHFS error: Failed to read block 0x1ec: -5
[  153.787595][ T7427] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  154.038930][ T7412] loop0: detected capacity change from 0 to 32768
[  154.456090][ T7421] loop2: detected capacity change from 0 to 32768
[  154.480283][ T7421] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.590 (7421)
[  154.545177][ T7412] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  154.545206][ T7412]   allowing incompatible features above 0.0: (unknown version)
[  154.545221][ T7412]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  154.581198][ T7421] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  154.581283][ T7421] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  154.581344][ T7421] BTRFS info (device loop2): using free-space-tree
[  154.830618][ T7412] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  154.838955][ T7412] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  154.923142][ T7463] loop1: detected capacity change from 0 to 4096
[  154.923954][ T7412] bcachefs (loop0): Version upgrade required:
[  154.923954][ T7412] Version upgrade from 0.10: bkey_renumber to 1.7: mi_btree_bitmap incomplete
[  154.923954][ T7412] Doing incompatible version upgrade from 0.10: bkey_renumber to 1.28: inode_has_case_insensitive
[  154.923954][ T7412]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  155.111204][ T5842] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.225842][ T7429] loop4: detected capacity change from 0 to 32768
[  155.229451][ T7412] bcachefs (loop0): dropping and reconstructing all alloc info
[  155.297360][ T7429] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  155.378200][ T7412] bcachefs (loop0): accounting_read...
[  155.412299][ T7429] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  155.451127][ T7412]  done
[  155.453957][ T7412] bcachefs (loop0): alloc_read...
[  155.487333][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'.
[  155.503211][ T7412]  done
[  155.506017][ T7412] bcachefs (loop0): snapshots_read...
[  155.523095][ T7429] gfs2: fsid=syz:syz.0: no journals!
[  155.523589][ T7412]  done
[  155.575781][ T7412] bcachefs (loop0): check_allocations...
[  155.677891][ T7480] netlink: 'syz.2.605': attribute type 16 has an invalid length.
[  155.743176][ T7480] netlink: 'syz.2.605': attribute type 17 has an invalid length.
[  155.805930][ T7412]  done
[  155.872654][ T7412] bcachefs (loop0): going read-write
[  155.892957][ T7412] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1
[  155.892957][ T7412] rw journal devs:
[  156.009576][ T7484] Cannot find del_set index 0 as target
[  156.054321][ T7412] bcachefs (loop0): done starting filesystem
[  156.229309][ T5850] bcachefs (loop0): shutting down
[  156.260531][ T5850] bcachefs (loop0): going read-only
[  156.294513][ T5850] bcachefs (loop0): finished waiting for writes to stop
[  156.402117][ T5850] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10
[  156.440634][ T5850] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10
[  156.510795][ T5850] bcachefs (loop0): unclean shutdown complete, journal seq 10
[  156.575551][ T7499] lo: entered promiscuous mode
[  156.578482][ T5850] bcachefs (loop0): done going read-only, filesystem not clean
[  156.596630][ T7499] netlink: 112 bytes leftover after parsing attributes in process `syz.4.614'.
[  156.631032][ T7499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  156.743115][ T5850] bcachefs (loop0): shutdown complete
[  156.992482][ T7507] netlink: 'syz.3.618': attribute type 10 has an invalid length.
[  157.058581][ T7507] lo: entered promiscuous mode
[  157.064165][   T30] audit: type=1326 audit(1750146140.098:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d92d8e929 code=0x7ffc0000
[  157.094867][ T7507] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  157.129611][   T30] audit: type=1326 audit(1750146140.128:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d92d8e929 code=0x7ffc0000
[  157.204407][   T30] audit: type=1326 audit(1750146140.128:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7d92d8e929 code=0x7ffc0000
[  157.286363][   T30] audit: type=1326 audit(1750146140.158:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d92dc11e5 code=0x7ffc0000
[  157.323706][ T7514] trusted_key: encrypted_key: insufficient parameters specified
[  157.373529][   T30] audit: type=1326 audit(1750146140.188:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d92d8e929 code=0x7ffc0000
[  157.429029][   T30] audit: type=1326 audit(1750146140.318:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7d92d8e929 code=0x7ffc0000
[  157.619850][ T7493] loop2: detected capacity change from 0 to 32768
[  157.693994][ T7493] 
[  157.693994][ T7493]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  157.693994][ T7493] 
[  157.763845][ T7493] ERROR: (device loop2): diWrite: ixpxd invalid
[  157.763845][ T7493] 
[  157.798653][ T7493] ERROR: (device loop2): txCommit: 
[  157.798653][ T7493] 
[  157.967732][ T5842] 
[  157.967732][ T5842]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  157.967732][ T5842] 
[  158.008207][ T5842] 
[  158.008207][ T5842]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.008207][ T5842] 
[  158.813521][ T7562] xt_CT: You must specify a L4 protocol and not use inversions on it
[  158.834016][ T7560] syz.2.644 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  159.110515][   T30] audit: type=1400 audit(1750146142.138:29): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=7568 comm="syz.2.649"
[  159.334492][ T7577] netlink: 'syz.2.653': attribute type 1 has an invalid length.
[  159.400557][ T7577] netlink: 224 bytes leftover after parsing attributes in process `syz.2.653'.
[  159.647575][ T7587] loop2: detected capacity change from 0 to 164
[  159.702851][ T7587] Unsupported NM flag settings (8)
[  160.349749][ T7611] netlink: 'syz.3.667': attribute type 1 has an invalid length.
[  160.673642][ T7622] QAT: Invalid ioctl -805268419
[  160.706619][ T7628] netlink: 'syz.1.676': attribute type 21 has an invalid length.
[  160.714162][ T7629] loop3: detected capacity change from 0 to 16
[  160.770845][ T7629] erofs (device loop3): mounted with root inode @ nid 36.
[  160.993957][ T7636] loop4: detected capacity change from 0 to 1024
[  161.138288][ T7636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.394054][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.650577][ T5956] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  161.850889][ T5956] usb 3-1: Using ep0 maxpacket: 32
[  161.858374][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  161.913523][ T5956] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  161.936115][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.954560][ T5956] usb 3-1: Product: syz
[  161.958791][ T5956] usb 3-1: Manufacturer: syz
[  161.976710][ T7668] loop1: detected capacity change from 0 to 64
[  161.978460][ T5956] usb 3-1: SerialNumber: syz
[  162.044922][ T5956] usb 3-1: config 0 descriptor??
[  162.057856][ T5956] hub 3-1:0.0: bad descriptor, ignoring hub
[  162.068063][ T7668] bio_check_eod: 2 callbacks suppressed
[  162.068084][ T7668] syz.1.696: attempt to access beyond end of device
[  162.068084][ T7668] loop1: rw=0, sector=128, nr_sectors = 2 limit=64
[  162.073938][ T5956] hub 3-1:0.0: probe with driver hub failed with error -5
[  162.097546][ T5956] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8
[  162.143445][ T7668] Trying to free block not in datazone
[  162.150239][ T5956] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22
[  162.188439][ T7668] Trying to free block not in datazone
[  162.203353][ T7668] Trying to free block not in datazone
[  162.209909][ T7668] Trying to free block not in datazone
[  162.222341][ T7668] Trying to free block not in datazone
[  162.227846][ T7668] Trying to free block not in datazone
[  162.236854][ T7650] loop0: detected capacity change from 0 to 32768
[  162.236913][ T7668] minix_free_block (loop1:6): bit already cleared
[  162.255471][ T7650] btrfs: Deprecated parameter 'usebackuproot'
[  162.255496][ T7650] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  162.303548][ T7650] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.686 (7650)
[  162.329920][ T5956] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -22
[  162.352836][ T7662] loop4: detected capacity change from 0 to 32768
[  162.375383][ T7662] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.690 (7662)
[  162.388424][ T7650] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  162.401716][ T7650] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  162.412814][ T7650] BTRFS info (device loop0): using free-space-tree
[  162.428421][ T7662] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  162.461302][ T7662] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  162.484728][ T5956] usb 3-1: USB disconnect, device number 3
[  162.499944][ T7662] BTRFS info (device loop4): using free-space-tree
[  162.699525][ T7650] BTRFS info (device loop0): rebuilding free space tree
[  162.808458][ T7662] BTRFS info (device loop4): rebuilding free space tree
[  163.082066][ T5840] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  163.135414][ T5850] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  163.222954][ T7717] netlink: 60 bytes leftover after parsing attributes in process `syz.3.703'.
[  163.240720][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'.
[  163.288144][ T7717] netlink: 60 bytes leftover after parsing attributes in process `syz.3.703'.
[  164.339327][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.717'.
[  164.353804][ T7748] loop3: detected capacity change from 0 to 1024
[  164.430375][ T7748] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  164.572941][ T7755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.721'.
[  164.729792][ T7758] loop0: detected capacity change from 0 to 2048
[  164.749560][ T5848] Bluetooth: hci2: unexpected cc 0x040d length: 63 > 7
[  164.885976][ T7765] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.939382][ T7758] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=32528, name_len=0
[  164.986873][ T7758] Remounting filesystem read-only
[  165.061771][ T7771] loop4: detected capacity change from 0 to 512
[  165.118092][ T7771] EXT4-fs (loop4): orphan cleanup on readonly fs
[  165.138450][ T7771] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.727: casefold flag without casefold feature
[  165.158452][ T7771] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.727: couldn't read orphan inode 15 (err -117)
[  165.193631][ T7771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  165.432433][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.434487][ T7780] netlink: 'syz.0.730': attribute type 18 has an invalid length.
[  165.775146][ T7792] netlink: 'syz.1.737': attribute type 21 has an invalid length.
[  165.804342][ T7792] netlink: 'syz.1.737': attribute type 1 has an invalid length.
[  165.814448][ T7792] netlink: 132 bytes leftover after parsing attributes in process `syz.1.737'.
[  166.136283][ T7804] netlink: 'syz.2.743': attribute type 3 has an invalid length.
[  166.290557][   T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  166.465294][   T24] usb 1-1: too many configurations: 89, using maximum allowed: 8
[  166.495381][   T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  166.517021][ T7816] netlink: 32 bytes leftover after parsing attributes in process `syz.4.748'.
[  166.526553][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.540890][   T24] usb 1-1: Product: syz
[  166.556028][   T24] usb 1-1: Manufacturer: syz
[  166.564518][   T24] usb 1-1: SerialNumber: syz
[  166.601478][   T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  166.621632][   T43] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  166.903961][ T7824] loop3: detected capacity change from 0 to 1024
[  166.923994][ T7823] loop2: detected capacity change from 0 to 2048
[  167.010534][ T7828] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.084099][   T24] usb 1-1: USB disconnect, device number 5
[  167.180969][ T7823] CPU: 1 UID: 0 PID: 7823 Comm: syz.2.752 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  167.181021][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  167.181050][ T7823] Call Trace:
[  167.181062][ T7823]  <TASK>
[  167.181073][ T7823]  dump_stack_lvl+0x189/0x250
[  167.181113][ T7823]  ? rcu_is_watching+0x15/0xb0
[  167.181147][ T7823]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.181180][ T7823]  ? kmem_cache_alloc_noprof+0x21a/0x3c0
[  167.181219][ T7823]  ? __asan_memset+0x22/0x50
[  167.181249][ T7823]  ? nilfs_btree_alloc_path+0x5e5/0x610
[  167.181287][ T7823]  nilfs_btree_last_key+0x491/0x620
[  167.181323][ T7823]  nilfs_bmap_last_key+0x7a/0x130
[  167.181348][ T7823]  nilfs_truncate_bmap+0xfe/0x340
[  167.181374][ T7823]  ? __pfx_nilfs_truncate_bmap+0x10/0x10
[  167.181407][ T7823]  ? nilfs_transaction_begin+0x52a/0x710
[  167.181432][ T7823]  ? __pfx_nilfs_get_block+0x10/0x10
[  167.181468][ T7823]  nilfs_truncate+0x279/0x4e0
[  167.181508][ T7823]  ? __pfx_nilfs_truncate+0x10/0x10
[  167.181551][ T7823]  ? truncate_setsize+0xcf/0xf0
[  167.181587][ T7823]  nilfs_setattr+0x206/0x2b0
[  167.181612][ T7823]  ? __pfx_nilfs_setattr+0x10/0x10
[  167.181644][ T7823]  ? try_break_deleg+0x79/0x130
[  167.181674][ T7823]  ? __pfx_nilfs_setattr+0x10/0x10
[  167.181697][ T7823]  notify_change+0xb33/0xe40
[  167.181742][ T7823]  do_truncate+0x1a4/0x220
[  167.181767][ T7823]  ? __pfx_do_truncate+0x10/0x10
[  167.181784][ T7823]  ? apparmor_file_truncate+0x23e/0x2d0
[  167.181834][ T7823]  path_openat+0x306c/0x3830
[  167.181863][ T7823]  ? arch_stack_walk+0xfc/0x150
[  167.181926][ T7823]  ? __pfx_path_openat+0x10/0x10
[  167.181953][ T7823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.182001][ T7823]  do_filp_open+0x1fa/0x410
[  167.182028][ T7823]  ? __lock_acquire+0xab9/0xd20
[  167.182060][ T7823]  ? __pfx_do_filp_open+0x10/0x10
[  167.182120][ T7823]  ? _raw_spin_unlock+0x28/0x50
[  167.182143][ T7823]  ? alloc_fd+0x64c/0x6c0
[  167.182180][ T7823]  do_sys_openat2+0x121/0x1c0
[  167.182208][ T7823]  ? __se_sys_futex+0x36f/0x400
[  167.182234][ T7823]  ? __pfx_do_sys_openat2+0x10/0x10
[  167.182272][ T7823]  ? rcu_is_watching+0x15/0xb0
[  167.182311][ T7823]  __x64_sys_creat+0x8f/0xc0
[  167.182345][ T7823]  do_syscall_64+0xfa/0x3b0
[  167.182372][ T7823]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.182422][ T7823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.182443][ T7823]  ? clear_bhb_loop+0x60/0xb0
[  167.182470][ T7823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.182492][ T7823] RIP: 0033:0x7f07de38e929
[  167.182518][ T7823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.182536][ T7823] RSP: 002b:00007f07df269038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  167.182558][ T7823] RAX: ffffffffffffffda RBX: 00007f07de5b5fa0 RCX: 00007f07de38e929
[  167.182574][ T7823] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000100
[  167.182587][ T7823] RBP: 00007f07de410b39 R08: 0000000000000000 R09: 0000000000000000
[  167.182600][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.182613][ T7823] R13: 0000000000000000 R14: 00007f07de5b5fa0 R15: 00007ffcd66e3fa8
[  167.182649][ T7823]  </TASK>
[  167.182659][ T7823] NILFS (loop2): btree level mismatch (ino=16): 1 != 7
[  167.632132][ T7823] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16)
[  167.694671][   T43] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  167.714242][ T7823] Remounting filesystem read-only
[  167.722238][   T43] ath9k_htc: Failed to initialize the device
[  167.740486][   T24] usb 1-1: ath9k_htc: USB layer deinitialized
[  167.749664][ T7823] NILFS (loop2): error -5 truncating bmap (ino=16)
[  167.875461][ T5842] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  168.474070][ T7869] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  168.812755][ T5848] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  168.821373][ T5848] Bluetooth: hci2: Injecting HCI hardware error event
[  168.830292][ T5848] Bluetooth: hci2: hardware error 0x00
[  168.940373][ T7881] loop1: detected capacity change from 0 to 512
[  169.015107][ T7881] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  169.077552][ T7858] loop4: detected capacity change from 0 to 40427
[  169.090321][ T7858] F2FS-fs (loop4): heap/no_heap options were deprecated
[  169.105646][ T7881] EXT4-fs (loop1): 1 truncate cleaned up
[  169.115925][ T7858] F2FS-fs (loop4): invalid crc value
[  169.122090][ T7858] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  169.178044][ T7881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.288252][ T7881] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.781: Logical block already allocated
[  169.375215][ T7881] EXT4-fs (loop1): Remounting filesystem read-only
[  169.467081][ T7858] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  169.488681][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.525216][ T7864] loop2: detected capacity change from 0 to 32768
[  169.567805][ T7864] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.772 (7864)
[  169.630136][ T7864] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  169.646888][ T7864] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  169.681904][ T7864] BTRFS info (device loop2): using free-space-tree
[  169.699187][ T7896] loop0: detected capacity change from 0 to 8
[  169.841291][ T7896] SQUASHFS error: Failed to read block 0x636: -5
[  169.847954][ T7896] SQUASHFS error: Unable to read metadata cache entry [634]
[  169.871165][ T7896] SQUASHFS error: Unable to read metadata cache entry [634]
[  169.878551][ T7896] SQUASHFS error: Unable to read directory block [629:0]
[  170.061365][ T5842] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  170.160342][ T7917] loop0: detected capacity change from 0 to 512
[  170.191487][ T7917] EXT4-fs: Ignoring removed mblk_io_submit option
[  170.260622][ T7917] EXT4-fs: Ignoring removed nomblk_io_submit option
[  170.333955][ T7917] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  170.385050][ T7917] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  170.467914][ T7891] loop3: detected capacity change from 0 to 32768
[  170.507237][ T7917] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.790: Allocating blocks 41-42 which overlap fs metadata
[  170.528747][ T7917] Quota error (device loop0): write_blk: dquota write failed
[  170.542033][ T7917] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  170.551656][ T7917] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.790: Allocating blocks 41-42 which overlap fs metadata
[  170.566098][ T7891] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.784 (7891)
[  170.598328][ T7917] Quota error (device loop0): write_blk: dquota write failed
[  170.620103][ T7917] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  170.648732][ T7917] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.790: Failed to acquire dquot type 1
[  170.679157][ T7891] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  170.708130][ T7917] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  170.750973][ T7891] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  170.802018][ T7891] BTRFS info (device loop3): using free-space-tree
[  170.804704][ T7917] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #12: comm syz.0.790: corrupted inode contents
[  170.874345][ T7917] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #12: comm syz.0.790: mark_inode_dirty error
[  170.916513][ T7917] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #12: comm syz.0.790: corrupted inode contents
[  170.951480][ T7917] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.790: mark_inode_dirty error
[  170.983789][ T5848] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  171.034979][ T7917] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #12: comm syz.0.790: corrupted inode contents
[  171.111618][ T7917] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  171.193311][ T7917] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #12: comm syz.0.790: corrupted inode contents
[  171.280582][ T7917] EXT4-fs error (device loop0): ext4_truncate:4597: inode #12: comm syz.0.790: mark_inode_dirty error
[  171.326237][ T7917] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  171.392613][ T7917] EXT4-fs (loop0): 1 truncate cleaned up
[  171.408856][ T5841] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  171.413238][ T7917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.528802][ T7917] Quota error (device loop0): write_blk: dquota write failed
[  171.588022][ T7917] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  171.629466][ T7917] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.790: Failed to acquire dquot type 1
[  171.815529][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.200508][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  172.261482][ T7984] netlink: 152 bytes leftover after parsing attributes in process `syz.0.813'.
[  172.324383][ T7987] loop3: detected capacity change from 0 to 2048
[  172.360711][ T5942] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  172.392222][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.411019][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  172.419946][   T24] usb 2-1: config 1 has no interface number 0
[  172.426916][   T24] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  172.433412][ T7987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.464076][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  172.477156][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.486963][   T24] usb 2-1: Product: syz
[  172.491457][   T24] usb 2-1: Manufacturer: syz
[  172.496582][   T24] usb 2-1: SerialNumber: syz
[  172.514407][   T24] usb 2-1: selecting invalid altsetting 1
[  172.545413][ T5942] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86
[  172.577420][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.602503][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024
[  172.640973][ T5942] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024
[  172.683268][ T5942] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  172.730746][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.771663][ T5942] usb 5-1: config 0 descriptor??
[  172.801987][ T7981] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  172.818168][ T5942] gspca_main: spca561-2.14.0 probing abcd:cdee
[  172.907455][ T8000] xt_policy: too many policy elements
[  172.926938][   T24] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS
[  172.940592][   T24] cdc_ncm 2-1:1.1: bind() failure
[  172.985582][   T24] usb 2-1: USB disconnect, device number 5
[  173.083812][ T5942] spca561 5-1:0.0: probe with driver spca561 failed with error -22
[  173.112491][ T5942] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  173.130323][ T5942] usb 5-1: MIDIStreaming interface descriptor not found
[  173.179499][ T8005] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  173.229812][ T8005] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  173.281368][ T5942] usb 5-1: USB disconnect, device number 6
[  173.373868][ T8011] loop0: detected capacity change from 0 to 128
[  173.420131][ T8011] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  173.562795][   T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  173.606322][ T8016] loop1: detected capacity change from 0 to 256
[  173.807199][ T8019] loop2: detected capacity change from 0 to 4096
[  173.871654][ T8019] NILFS (loop2): invalid segment: Checksum error in segment payload
[  173.898609][ T8019] NILFS (loop2): trying rollback from an earlier position
[  173.960231][ T8019] NILFS (loop2): recovery complete
[  174.037754][ T8028] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.331718][ T8036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.339068][ T8036] IPv6: NLM_F_CREATE should be set when creating new route
[  174.346428][ T8036] IPv6: NLM_F_CREATE should be set when creating new route
[  174.353904][ T8036] IPv6: NLM_F_CREATE should be set when creating new route
[  174.686679][ T8048] netlink: 'syz.0.845': attribute type 1 has an invalid length.
[  174.785324][ T8048] netlink: 224 bytes leftover after parsing attributes in process `syz.0.845'.
[  175.014071][ T8057] ALSA: mixer_oss: invalid OSS volume ''
[  175.045523][ T8057] ALSA: mixer_oss: invalid OSS volume 'Ü?ü×Ó%‰$ U¥!¾ÿ=À,>Qw¦½e~«v×ù'
[  175.108133][ T8057] ALSA: mixer_oss: invalid OSS volume '¹…~X›;èÐo«
Ö…­ŸãB@§%hq¤az8'
[  175.150560][ T8057] ALSA: mixer_oss: invalid OSS volume 'B”ñ7ëD`^ÑV›®()(zÍP«ä÷|‘—? l'
[  175.180627][ T8057] ALSA: mixer_oss: invalid OSS volume 'Ò0»'r'
[  175.187206][ T8057] ALSA: mixer_oss: invalid OSS volume '½ºÏÇ_µÑ}\ÜCbÒs°RDp’=OpŽ™‘ûSZà”ü'
[  175.248592][ T8057] ALSA: mixer_oss: invalid OSS volume '£Ùm5‹àõ"Ú›g+çòæ½y'
[  175.297392][ T8057] ALSA: mixer_oss: invalid OSS volume 'VÀÇt[´\hA2O:õÁ‹³L±âí'
[  175.308882][ T8068] loop4: detected capacity change from 0 to 512
[  175.321489][ T8057] ALSA: mixer_oss: invalid OSS volume '…@¢íÈ•ûN+ºû­¸©á™%.§ås_ö¶Ê'
[  175.329869][ T8057] ALSA: mixer_oss: invalid OSS volume '&õ'
[  175.342622][ T8068] EXT4-fs: Ignoring removed mblk_io_submit option
[  175.365377][ T8057] ALSA: mixer_oss: invalid OSS volume '
­EºIŽ²]a¸Çg³LKèŸRmrð¥ÝN{ûšk'
[  175.377878][ T8057] ALSA: mixer_oss: invalid OSS volume 'àH}+S<1›œüˆ“�b|Ÿá&èznF%Ÿþíì
E'
[  175.410985][ T8074] loop1: detected capacity change from 0 to 1024
[  175.440900][ T8057] ALSA: mixer_oss: invalid OSS volume '±Îßûl2/>ŠX‚‰¾«?Ë'
[  175.459188][ T8057] ALSA: mixer_oss: invalid OSS volume '1gE'
[  175.467356][ T8068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.505956][ T8068] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.562098][ T8068] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.854: corrupted xattr block 33: overlapping e_value 
[  175.692921][ T8083] netlink: 32 bytes leftover after parsing attributes in process `syz.0.860'.
[  175.758980][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.795061][ T2974] hfsplus: b-tree write err: -5, ino 4
[  175.970935][ T8088] netlink: 224 bytes leftover after parsing attributes in process `syz.4.862'.
[  175.977304][ T8092] loop2: detected capacity change from 0 to 1024
[  175.986703][ T8091] netlink: 72 bytes leftover after parsing attributes in process `syz.0.865'.
[  175.986732][ T8091] netlink: 72 bytes leftover after parsing attributes in process `syz.0.865'.
[  176.033177][ T8092] EXT4-fs: Ignoring removed nobh option
[  176.114828][ T8092] EXT4-fs: Ignoring removed bh option
[  176.238215][ T8092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.380075][ T8079] loop3: detected capacity change from 0 to 32768
[  176.451758][ T8079] ERROR: (device loop3): dbAlloc: unable to allocate blocks
[  176.451758][ T8079] 
[  176.494742][ T8079] jfs_create: dtInsert returned -EIO
[  176.516795][ T8079] ERROR: (device loop3): jfs_create: 
[  176.516795][ T8079] 
[  176.534048][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.140238][ T8123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.188343][ T8165] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  178.477127][ T8176] loop2: detected capacity change from 0 to 256
[  178.584981][ T8176] FAT-fs (loop2): Directory bread(block 64) failed
[  178.614621][ T8176] FAT-fs (loop2): Directory bread(block 65) failed
[  178.625608][ T8176] FAT-fs (loop2): Directory bread(block 66) failed
[  178.648100][ T8176] FAT-fs (loop2): Directory bread(block 67) failed
[  178.654251][ T8180] loop4: detected capacity change from 0 to 128
[  178.660742][ T8176] FAT-fs (loop2): Directory bread(block 68) failed
[  178.667513][ T8176] FAT-fs (loop2): Directory bread(block 69) failed
[  178.690716][ T8176] FAT-fs (loop2): Directory bread(block 70) failed
[  178.721791][ T8176] FAT-fs (loop2): Directory bread(block 71) failed
[  178.748756][ T8176] FAT-fs (loop2): Directory bread(block 72) failed
[  178.754795][ T8182] loop0: detected capacity change from 0 to 2048
[  178.783480][ T8176] FAT-fs (loop2): Directory bread(block 73) failed
[  178.819164][ T8182] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.068704][ T8180] EXT4-fs (loop4): Test dummy encryption mode enabled
[  179.136539][ T8180] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  179.151199][ T8180] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  179.207013][ T8180] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  179.311123][ T8180] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.907: bg 0: bad block bitmap checksum
[  179.435584][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.916'.
[  179.470586][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.916'.
[  179.511938][ T8205] netlink: 4612 bytes leftover after parsing attributes in process `syz.3.916'.
[  179.515145][ T5840] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  179.818294][ T8219] IPv6: NLM_F_CREATE should be specified when creating new route
[  180.230655][ T8235] netlink: 132 bytes leftover after parsing attributes in process `syz.0.932'.
[  180.414943][ T8242] loop1: detected capacity change from 0 to 128
[  180.530546][   T30] audit: type=1400 audit(1750146163.558:30): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=8245 comm="syz.2.938"
[  181.220596][   T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  181.364931][ T8277] loop4: detected capacity change from 0 to 4096
[  181.374985][ T8277] EXT4-fs (loop4): Test dummy encryption mode enabled
[  181.422581][   T43] usb 2-1: config 0 has an invalid interface number: 117 but max is 0
[  181.431058][   T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.431735][ T8277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.450501][   T43] usb 2-1: config 0 has no interface number 0
[  181.459960][   T43] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  181.470559][   T43] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  181.486471][   T43] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  181.502057][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.510115][   T43] usb 2-1: Product: syz
[  181.514403][   T43] usb 2-1: Manufacturer: syz
[  181.519065][   T43] usb 2-1: SerialNumber: syz
[  181.528641][   T43] usb 2-1: config 0 descriptor??
[  181.740758][ T5913] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  181.826876][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.923539][ T5913] usb 3-1: Using ep0 maxpacket: 16
[  181.956684][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short
[  181.974709][   T43] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71
[  182.000301][ T8294] netlink: 676 bytes leftover after parsing attributes in process `syz.4.960'.
[  182.010771][ T5913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.040655][   T43] usb 2-1: USB disconnect, device number 6
[  182.059358][ T8297] netlink: 'syz.0.962': attribute type 11 has an invalid length.
[  182.060542][ T5913] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  182.087815][ T8294] netlink: 676 bytes leftover after parsing attributes in process `syz.4.960'.
[  182.127599][ T5913] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  182.157234][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.172643][ T5913] usb 3-1: Product: syz
[  182.180147][ T5913] usb 3-1: Manufacturer: syz
[  182.190472][ T5913] usb 3-1: SerialNumber: syz
[  182.264882][ T8300] loop3: detected capacity change from 0 to 8
[  182.293196][ T8300] SQUASHFS error: lzo decompression failed, data probably corrupt
[  182.319444][ T8300] SQUASHFS error: Failed to read block 0x91: -5
[  182.326970][ T8300] SQUASHFS error: Unable to read metadata cache entry [8f]
[  182.335973][ T8300] SQUASHFS error: Unable to read inode 0x11f
[  182.453767][ T5913] usb 3-1: USB disconnect, device number 4
[  182.614372][ T5956] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  182.690265][ T8313] loop1: detected capacity change from 0 to 256
[  182.801502][ T5956] usb 4-1: Using ep0 maxpacket: 16
[  182.819531][ T8313] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  182.849493][ T5956] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  182.858853][ T5956] usb 4-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config
[  182.859527][ T8319] dlm: plock device version mismatch: kernel (1.2.0), user (1.33554432.0)
[  182.879411][ T8313] FAT-fs (loop1): Filesystem has been set read-only
[  182.889547][ T5956] usb 4-1: config 0 has no interface number 0
[  182.935116][ T5956] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  182.958740][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.977125][ T5956] usb 4-1: Product: syz
[  183.000481][ T5956] usb 4-1: Manufacturer: syz
[  183.005158][ T5956] usb 4-1: SerialNumber: syz
[  183.041842][ T5956] usb 4-1: config 0 descriptor??
[  183.057028][ T5956] usb 4-1: Found UVC 0.00 device syz (046c:14e8)
[  183.078374][ T5956] usb 4-1: No valid video chain found.
[  183.266407][   T43] usb 4-1: USB disconnect, device number 5
[  183.379655][ T8332] cgroup: Invalid name
[  183.384701][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'.
[  184.353062][ T8372] netlink: 220 bytes leftover after parsing attributes in process `syz.3.998'.
[  184.528892][ T8379] loop1: detected capacity change from 0 to 512
[  184.587320][ T8379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  184.642215][ T8385] loop0: detected capacity change from 0 to 736
[  184.713035][ T8379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.727775][ T8379] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.785870][ T8379] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.1003: Abort forced by user
[  184.870574][ T8385] rock: directory entry would overflow storage
[  184.877164][ T8385] rock: sig=0x3b10, size=4, remaining=3
[  184.885998][ T8379] EXT4-fs (loop1): Remounting filesystem read-only
[  184.930603][ T8379] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  185.166025][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.503788][ T8408] MTD: Attempt to mount non-MTD device "/dev/nbd3"
[  185.532217][ T8408] cramfs: wrong magic
[  185.632173][ T8381] loop2: detected capacity change from 0 to 32768
[  185.737629][ T8417] loop0: detected capacity change from 0 to 512
[  185.758450][ T8381] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  185.848352][ T8417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.873082][ T8417] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  185.900750][ T8381] ocfs2: Unmounting device (7,2) on (node local)
[  185.935999][ T8427] netlink: 'syz.3.1024': attribute type 2 has an invalid length.
[  185.946711][ T8427] netlink: 'syz.3.1024': attribute type 1 has an invalid length.
[  185.955899][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'.
[  186.151394][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.508892][ T8443] 8021q: adding VLAN 0 to HW filter on device bond1
[  187.408430][ T8480] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  187.674138][ T8491] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1050'.
[  188.173339][ T8509] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  188.386100][ T8517] loop4: detected capacity change from 0 to 16
[  188.442591][ T8517] erofs (device loop4): mounted with root inode @ nid 36.
[  188.766612][ T8522] loop0: detected capacity change from 0 to 2048
[  188.822349][ T8528] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  188.933316][ T8522] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  189.032822][ T8522] Remounting filesystem read-only
[  189.343222][ T8502] loop3: detected capacity change from 0 to 32768
[  189.471565][ T8520] loop1: detected capacity change from 0 to 32768
[  189.719895][ T8520] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  189.918443][ T8502] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  189.918474][ T8502]   allowing incompatible features above 0.0: (unknown version)
[  189.918489][ T8502]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  190.117746][ T8502] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  190.177100][ T8502] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  190.222369][ T8502] bcachefs (loop3): Version upgrade required:
[  190.222369][ T8502] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  190.222369][ T8502] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  190.222369][ T8502]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  190.242969][ T5849] ocfs2: Unmounting device (7,1) on (node local)
[  190.385483][ T8502] bcachefs (loop3): dropping and reconstructing all alloc info
[  190.502596][ T8502] bcachefs (loop3): invalid bkey in btree_node btree=snapshots level=0: u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent  268435456 children          0          0 subvol 1 tree 0
[  190.502683][ T8502]   bad parent node (268435456 <= 4294967295), deleting
[  190.632407][ T8547] loop2: detected capacity change from 0 to 32768
[  190.669912][ T8502] bcachefs (loop3): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing
[  190.703975][ T8547] __jfs_setxattr: xattr_size = 74, new_size = 12820
[  190.770923][ T8502] bcachefs (loop3): check_topology...
[  190.773411][ T8502] bcachefs (loop3): btree root snapshots unreadable, must recover from scan
[  190.851967][ T8502] bcachefs (loop3): no nodes found for btree snapshots, continuing
[  190.904199][ T8502]  done
[  190.914550][ T8502] bcachefs (loop3): accounting_read... done
[  190.990501][ T8502] bcachefs (loop3): alloc_read... done
[  191.074769][ T8502] bcachefs (loop3): snapshots_read... done
[  191.110707][ T8502] bcachefs (loop3): check_allocations... done
[  191.260274][ T8502] bcachefs (loop3): going read-write
[  191.303098][ T8502] bcachefs (loop3): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  191.340537][ T8502] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10
[  191.366929][ T8502] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10
[  191.459589][ T8502] bcachefs (loop3): unclean shutdown complete, journal seq 11
[  191.501760][ T8502] bcachefs (loop3): error in recovery: EINTRemergency read only at seq 11
[  191.511334][ T8502] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR
[  191.519694][ T8502] bcachefs (loop3): shutting down
[  191.589765][ T8502] bcachefs (loop3): shutdown complete
[  191.757220][ T8607] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1090'.
[  192.294044][ T8628] loop1: detected capacity change from 0 to 256
[  192.434710][ T8628] FAT-fs (loop1): Directory bread(block 64) failed
[  192.450467][ T8628] FAT-fs (loop1): Directory bread(block 65) failed
[  192.500665][ T8628] FAT-fs (loop1): Directory bread(block 66) failed
[  192.507262][ T8628] FAT-fs (loop1): Directory bread(block 67) failed
[  192.573244][ T8628] FAT-fs (loop1): Directory bread(block 68) failed
[  192.586081][ T8628] FAT-fs (loop1): Directory bread(block 69) failed
[  192.602747][ T8628] FAT-fs (loop1): Directory bread(block 70) failed
[  192.633945][ T8628] FAT-fs (loop1): Directory bread(block 71) failed
[  192.665067][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'.
[  192.680901][ T8628] FAT-fs (loop1): Directory bread(block 72) failed
[  192.687481][ T8628] FAT-fs (loop1): Directory bread(block 73) failed
[  193.067148][ T8614] loop2: detected capacity change from 0 to 32768
[  193.091008][ T8614] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1092 (8614)
[  193.140901][ T8614] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.171106][ T8614] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  193.179698][ T8614] BTRFS info (device loop2): using free-space-tree
[  193.193415][ T8649] xt_CT: You must specify a L4 protocol and not use inversions on it
[  193.359697][ T8659] loop4: detected capacity change from 0 to 1024
[  193.801546][ T5842] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.857805][ T8680] loop4: detected capacity change from 0 to 1024
[  193.887823][ T8680] EXT4-fs: Ignoring removed bh option
[  193.971551][ T8680] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  194.020673][ T8680] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  194.069084][ T8680] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0000]
[  194.136554][ T8502] bcachefs: bch2_fs_get_tree() error: EINTR
[  194.204694][ T8680] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.1113: lblock 2 mapped to illegal pblock 2 (length 1)
[  194.257161][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  194.258534][ T8680] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  194.263986][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  194.340613][ T8680] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.1113: lblock 0 mapped to illegal pblock 48 (length 1)
[  194.397822][ T8680] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  194.415957][ T8680] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1113: Failed to acquire dquot type 0
[  194.430628][ T8680] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  194.468678][ T8680] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1113: mark_inode_dirty error
[  194.542360][ T8680] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  194.602055][ T8680] EXT4-fs (loop4): 1 orphan inode deleted
[  194.621059][   T12] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  194.663955][ T8680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.721526][   T12] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  194.740583][   T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0
[  194.992347][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.015339][   T59] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  195.088476][   T59] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  195.123809][   T59] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0
[  195.175476][ T5840] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  195.280200][ T5840] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  195.325136][ T5840] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  195.380305][ T8722] x_tables: ip6_tables: mh match: only valid for protocol 135
[  195.771135][ T8737] xt_l2tp: v2 tid > 0xffff: 4294967295
[  195.796507][ T8739] loop3: detected capacity change from 0 to 256
[  196.200077][ T8752] netlink: 'syz.0.1149': attribute type 10 has an invalid length.
[  196.240725][ T8753] loop1: detected capacity change from 0 to 2048
[  196.276764][ T8753] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  196.308550][ T8752] veth0_vlan: left promiscuous mode
[  196.365019][ T8752] veth0_vlan: entered promiscuous mode
[  196.473734][ T8752] team0: Device veth0_vlan failed to register rx_handler
[  196.514316][ T8757] loop3: detected capacity change from 0 to 256
[  196.897819][ T8764] loop2: detected capacity change from 0 to 1764
[  197.109569][ T8726] loop4: detected capacity change from 0 to 40427
[  197.223534][ T8781] loop3: detected capacity change from 0 to 64
[  197.262203][ T8780] loop2: detected capacity change from 0 to 1024
[  197.272320][ T8781] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  197.536722][ T8726] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  197.644773][   T13] hfsplus: b-tree write err: -5, ino 4
[  197.987035][   T30] audit: type=1326 audit(1750146181.018:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5798e929 code=0x7ffc0000
[  198.081865][   T30] audit: type=1326 audit(1750146181.018:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5798e929 code=0x7ffc0000
[  198.192972][   T30] audit: type=1326 audit(1750146181.018:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f9e5798e929 code=0x7ffc0000
[  198.289763][   T30] audit: type=1326 audit(1750146181.018:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5798e929 code=0x7ffc0000
[  198.305943][ T8803] loop1: detected capacity change from 0 to 256
[  198.398534][ T8803] MINIX-fs: mounting file system with errors, running fsck is recommended
[  198.408989][   T30] audit: type=1326 audit(1750146181.018:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5798e929 code=0x7ffc0000
[  198.517091][ T8803] Trying to free block not in datazone
[  198.531941][ T8803] Trying to free block not in datazone
[  199.845462][ T8826] loop4: detected capacity change from 0 to 32768
[  200.248822][ T8826] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=accounting_read,nojournal_transaction_names,read_only,version_upgrade=incompatible
[  200.248855][ T8826]   allowing incompatible features above 0.0: (unknown version)
[  200.248870][ T8826]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  200.450531][ T8826] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  200.489016][ T8826] bcachefs (loop4): recovering from clean shutdown, journal seq 13
[  200.520817][ T8826] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  200.520817][ T8826]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  200.602201][ T8826] bcachefs (loop4): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 0.0: (unknown version)
[  200.602201][ T8826] 
[  200.753428][ T8826] bcachefs (loop4): accounting_read... done
[  200.826161][ T8826] bcachefs (loop4): done starting filesystem
[  200.940497][ T5956] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  201.071060][ T5840] bcachefs (loop4): shutting down
[  201.145905][ T5956] usb 2-1: Using ep0 maxpacket: 16
[  201.173414][ T5840] bcachefs (loop4): shutdown complete
[  201.194484][ T5956] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  201.217121][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.246170][ T5956] usb 2-1: Product: syz
[  201.274679][ T5956] usb 2-1: Manufacturer: syz
[  201.279366][ T5956] usb 2-1: SerialNumber: syz
[  201.556158][ T5956] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  201.629062][ T5956] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71
[  201.639328][ T5942] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  201.681650][ T5956] usb 2-1: USB disconnect, device number 7
[  201.698141][ T8910] loop3: detected capacity change from 0 to 1764
[  201.727885][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  201.803425][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  201.821806][ T5942] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  201.851302][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.869964][ T5942] usb 1-1: Product: syz
[  201.889016][ T5942] usb 1-1: Manufacturer: syz
[  201.897968][ T5942] usb 1-1: SerialNumber: syz
[  201.923710][ T5942] usb 1-1: config 0 descriptor??
[  201.946586][ T5942] gm12u320 1-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8
[  201.980292][ T5942] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5
[  202.031525][ T5942] usb-storage 1-1:0.0: USB Mass Storage device detected
[  202.074109][ T5942] usb-storage 1-1:0.0: device ignored
[  202.206338][ T5942] usb 1-1: USB disconnect, device number 6
[  202.444653][ T8909] loop2: detected capacity change from 0 to 32768
[  203.511741][ T8950] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[  204.011970][ T8938] loop1: detected capacity change from 0 to 32768
[  204.029829][ T8961] netlink: 'syz.3.1248': attribute type 5 has an invalid length.
[  204.137065][ T8938] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  204.443620][ T8938] XFS (loop1): Ending clean mount
[  204.486417][ T8938] XFS (loop1): Quotacheck needed: Please wait.
[  204.676606][ T8938] XFS (loop1): Quotacheck: Done.
[  204.778948][ T8990] kAFS: No cell specified
[  204.946939][ T5849] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  204.964683][ T8998] loop3: detected capacity change from 0 to 256
[  205.271795][ T8998] FAT-fs (loop3): Directory bread(block 64) failed
[  205.300682][ T8998] FAT-fs (loop3): Directory bread(block 65) failed
[  205.308567][ T8998] FAT-fs (loop3): Directory bread(block 66) failed
[  205.345461][ T8998] FAT-fs (loop3): Directory bread(block 67) failed
[  205.365170][ T8998] FAT-fs (loop3): Directory bread(block 68) failed
[  205.380612][ T8998] FAT-fs (loop3): Directory bread(block 69) failed
[  205.415560][ T8998] FAT-fs (loop3): Directory bread(block 70) failed
[  205.440646][ T8998] FAT-fs (loop3): Directory bread(block 71) failed
[  205.447348][ T8998] FAT-fs (loop3): Directory bread(block 72) failed
[  205.471290][ T5942] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  205.489523][ T8998] FAT-fs (loop3): Directory bread(block 73) failed
[  205.587864][ T8965] loop4: detected capacity change from 0 to 32768
[  205.588780][ T8998] FAT-fs (loop3): Filesystem has been set read-only
[  205.625869][   T30] audit: type=1800 audit(1750146188.648:36): pid=8998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1259" name="cpu.stat" dev="loop3" ino=1048613 res=0 errno=0
[  205.668549][ T5942] usb 3-1: Using ep0 maxpacket: 8
[  205.679162][ T8998] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006c61)
[  205.694865][ T5942] usb 3-1: config index 0 descriptor too short (expected 4096, got 18)
[  205.703568][ T5942] usb 3-1: config 0 has too many interfaces: 72, using maximum allowed: 32
[  205.720955][ T5942] usb 3-1: config 0 has an invalid interface descriptor of length 4, skipping
[  205.743378][ T5942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.753930][ T5942] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 72
[  205.764540][ T5942] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  205.773783][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.821755][ T8965] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  205.891991][ T5942] usb 3-1: config 0 descriptor??
[  206.111349][ T5942] usb 3-1: string descriptor 0 read error: -71
[  206.117877][ T8965] XFS (loop4): Ending clean mount
[  206.140932][ T5942] usb 3-1: USB disconnect, device number 5
[  206.146167][ T8965] XFS (loop4): Quotacheck needed: Please wait.
[  206.250575][ T8965] XFS (loop4): Quotacheck: Done.
[  206.376547][ T5840] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  206.487739][ T9040] Driver unsupported XDP return value 0 on prog  (id 37) dev N/A, expect packet loss!
[  207.505874][ T9068] netlink: 'syz.3.1285': attribute type 303 has an invalid length.
[  207.949886][ T9082] loop3: detected capacity change from 0 to 64
[  208.034842][ T9087] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1294'.
[  208.066337][ T9087] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1294'.
[  208.241131][ T9052] loop1: detected capacity change from 0 to 32768
[  208.275114][ T9052] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1277 (9052)
[  208.355852][ T9052] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  208.396406][ T9052] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  208.431314][ T9052] BTRFS info (device loop1): using free-space-tree
[  208.657340][ T9052] BTRFS info (device loop1): rebuilding free space tree
[  208.974407][ T5849] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  209.430056][ T9138] loop3: detected capacity change from 0 to 4096
[  209.533014][ T9138] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  209.560814][ T9151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.632375][ T9153] netlink: 'syz.1.1319': attribute type 32 has an invalid length.
[  209.802932][ T9138] ntfs3(loop3): ino=19, mi_enum_attr
[  209.830979][ T9138] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  209.968585][ T9138] ntfs3(loop3): failed to convert "c46c" to cp864
[  210.022594][ T9138] ntfs3(loop3): ino=20, mi_enum_attr
[  210.069156][ T9161] netlink: 'syz.4.1323': attribute type 13 has an invalid length.
[  210.360467][   T30] audit: type=1400 audit(1750146193.378:37): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  210.699518][ T9178] [U] 
[  210.806866][ T9177] loop1: detected capacity change from 0 to 2048
[  210.915660][ T9177] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  210.986896][ T9185] loop3: detected capacity change from 0 to 64
[  210.995386][ T9187] netlink: 'syz.2.1337': attribute type 10 has an invalid length.
[  211.024620][ T9187] veth0_vlan: left promiscuous mode
[  211.040928][ T9187] veth0_vlan: entered promiscuous mode
[  211.053769][ T9187] team0: Device veth0_vlan failed to register rx_handler
[  211.178679][ T9185] hfs: request for non-existent node 56 in B*Tree
[  211.204543][ T9185] hfs: request for non-existent node 56 in B*Tree
[  211.244197][ T9185] hfs: request for non-existent node 57 in B*Tree
[  211.270862][ T9185] hfs: request for non-existent node 57 in B*Tree
[  211.383222][ T9193] loop1: detected capacity change from 0 to 256
[  211.474104][ T9193] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  211.530925][ T9193] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  211.668848][ T9193] exFAT-fs (loop1): valid_size(150994954) is greater than size(10)
[  211.740932][   T30] audit: type=1800 audit(1750146194.768:38): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1339" name="file1" dev="loop1" ino=1048614 res=0 errno=0
[  211.835636][ T9207] loop2: detected capacity change from 0 to 64
[  212.277216][ T9222] loop4: detected capacity change from 0 to 256
[  212.348603][ T9223] bond0: (slave bond_slave_0): Releasing backup interface
[  212.737324][ T9234] loop4: detected capacity change from 0 to 256
[  212.912686][ T9241] openvswitch: netlink: Unknown key attributes 2
[  213.406731][ T9256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1362'.
[  213.539323][ T9216] loop1: detected capacity change from 0 to 32768
[  213.619183][ T9216] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  213.766782][ T9216] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  213.843395][ T9216] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #3923116032
[  213.914664][ T9216] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  213.996643][ T9216] OCFS2: File system is now read-only.
[  214.023076][ T9216] (syz.1.1348,9216,1):ocfs2_search_chain:1817 ERROR: status = -30
[  214.070471][ T9216] (syz.1.1348,9216,1):ocfs2_search_chain:1940 ERROR: status = -30
[  214.127325][ T9216] (syz.1.1348,9216,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  214.188257][ T9216] (syz.1.1348,9216,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  214.242430][ T9216] (syz.1.1348,9216,1):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  214.295397][ T9216] (syz.1.1348,9216,1):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  214.327746][ T9216] (syz.1.1348,9216,1):ocfs2_mknod_locked:638 ERROR: status = -30
[  214.358094][ T9216] (syz.1.1348,9216,1):ocfs2_mknod:385 ERROR: status = -30
[  214.381109][ T9216] (syz.1.1348,9216,1):ocfs2_mknod:502 ERROR: status = -30
[  214.403063][ T9216] (syz.1.1348,9216,1):ocfs2_create:675 ERROR: status = -30
[  214.604383][ T5849] ocfs2: Unmounting device (7,1) on (node local)
[  214.618921][ T9297] loop4: detected capacity change from 0 to 1024
[  214.690746][ T9301] loop2: detected capacity change from 0 to 64
[  214.700183][ T9303] netlink: 'syz.0.1380': attribute type 4 has an invalid length.
[  214.760526][ T9303] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1380'.
[  214.952283][ T9303] : renamed from bond0 (while UP)
[  215.108887][ T9309] netlink: 'syz.1.1379': attribute type 16 has an invalid length.
[  215.139516][ T9309] netlink: 'syz.1.1379': attribute type 3 has an invalid length.
[  215.177470][ T9309] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1379'.
[  215.354413][ T9321] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1387'.
[  215.665577][ T9331] syz.2.1390 uses obsolete (PF_INET,SOCK_PACKET)
[  215.922732][ T9340] ±ÿ: renamed from team_slave_1 (while UP)
[  216.235090][   T30] audit: type=1326 audit(1750146199.268:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7018e929 code=0x7ffc0000
[  216.363923][   T30] audit: type=1326 audit(1750146199.298:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fbc7018e929 code=0x7ffc0000
[  216.392088][ T9357] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1402'.
[  216.462293][   T30] audit: type=1326 audit(1750146199.298:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.1.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7018e929 code=0x7ffc0000
[  216.814482][ T5154] Bluetooth: hci1: command 0x0406 tx timeout
[  216.821867][ T5853] Bluetooth: hci0: command 0x0406 tx timeout
[  216.827951][ T5853] Bluetooth: hci4: command 0x0406 tx timeout
[  216.834519][ T5853] Bluetooth: hci3: command 0x0406 tx timeout
[  216.854398][ T9373] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  217.205726][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'.
[  217.303184][ T9388] /dev/nullb0: Can't open blockdev
[  217.544855][ T9401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1422'.
[  217.908612][ T9415] loop4: detected capacity change from 0 to 1024
[  217.928967][ T9415] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  217.983818][ T9415] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  218.020963][ T9415] EXT4-fs (loop4): orphan cleanup on readonly fs
[  218.083977][ T9415] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.1430: Invalid inode table block 0 in block_group 0
[  218.144266][ T9415] EXT4-fs (loop4): Remounting filesystem read-only
[  218.174206][ T9415] Quota error (device loop4): write_blk: dquota write failed
[  218.184518][ T9426] openvswitch: netlink: IP tunnel dst address not specified
[  218.211370][   T24] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  218.212547][ T9415] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  218.266548][ T9415] EXT4-fs (loop4): 1 truncate cleaned up
[  218.312751][ T9415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  218.322891][ T9431] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  218.341119][   T43] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  218.403416][   T24] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  218.438225][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.438254][   T24] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  218.479444][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'.
[  218.505453][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.514242][   T24] usb 1-1: Product: syz
[  218.518466][   T24] usb 1-1: Manufacturer: syz
[  218.535410][   T24] usb 1-1: SerialNumber: syz
[  218.542585][ T9435] netlink: 'syz.2.1440': attribute type 1 has an invalid length.
[  218.551055][   T43] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  218.566803][ T9435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  218.580472][   T43] usb 4-1: config 0 interface 0 has no altsetting 0
[  218.607089][   T24] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  218.626397][   T43] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  218.639969][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.656821][   T43] usb 4-1: Product: syz
[  218.662083][   T43] usb 4-1: Manufacturer: syz
[  218.666765][   T43] usb 4-1: SerialNumber: syz
[  218.702855][   T43] usb 4-1: config 0 descriptor??
[  218.722367][   T43] usb 4-1: selecting invalid altsetting 0
[  218.956632][ T5942] usb 4-1: USB disconnect, device number 6
[  219.039357][   T24] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  219.059086][ T9447] AppArmor: change_hat: Invalid input, NULL hat and NULL magic
[  219.129239][   T24] usb 1-1: USB disconnect, device number 7
[  219.459892][ T9460] netlink: 'syz.2.1453': attribute type 1 has an invalid length.
[  219.980956][ T9484] futex_wake_op: syz.1.1464 tries to shift op by -1; fix this program
[  220.272944][ T9492] xt_recent: Unsupported userspace flags (000000de)
[  220.681072][ T9507] netlink: 'syz.1.1475': attribute type 2 has an invalid length.
[  220.707012][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'.
[  220.801700][ T5942] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  220.815416][ T9507] : entered promiscuous mode
[  220.875946][ T9481] loop4: detected capacity change from 0 to 32768
[  220.923239][ T9481] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1462 (9481)
[  220.986683][ T5942] usb 4-1: too many configurations: 96, using maximum allowed: 8
[  220.993913][ T9481] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  221.044165][ T5942] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  221.051604][ T9481] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  221.080507][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.094809][ T5942] usb 4-1: Product: syz
[  221.104928][ T5942] usb 4-1: Manufacturer: syz
[  221.115560][ T5942] usb 4-1: SerialNumber: syz
[  221.124880][ T9481] BTRFS info (device loop4): using free-space-tree
[  221.161390][ T5942] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  221.213978][ T5956] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  221.472742][ T5942] usb 4-1: USB disconnect, device number 7
[  221.489451][ T9481] BTRFS info (device loop4): resizing devid 3
[  221.556869][ T9481] BTRFS info (device loop4): resizer unable to find device 3
[  221.715470][ T5840] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  222.331853][ T5956] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  222.339407][ T5956] ath9k_htc: Failed to initialize the device
[  222.424204][ T5942] usb 4-1: ath9k_htc: USB layer deinitialized
[  222.517820][ T9569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.538067][ T9599] loop4: detected capacity change from 0 to 512
[  223.590775][ T5956] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  223.621880][ T9599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.681871][ T9599] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.764127][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.788746][ T9578] loop1: detected capacity change from 0 to 32768
[  223.800491][ T5956] usb 3-1: Using ep0 maxpacket: 16
[  223.810171][ T5956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  223.836693][ T9578] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1500 (9578)
[  223.853843][ T9585] loop3: detected capacity change from 0 to 32768
[  223.861137][ T5956] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  223.885099][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.911969][ T9578] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  223.932223][ T9585] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1503 (9585)
[  223.939067][ T5956] usb 3-1: config 0 descriptor??
[  223.984306][ T5956] gspca_main: spca501-2.14.0 probing 0000:0000
[  224.001478][ T9578] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  224.030909][ T9585] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  224.049522][ T9578] BTRFS info (device loop1): disk space caching is enabled
[  224.059974][ T9578] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  224.084147][ T9585] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  224.131107][ T9585] BTRFS info (device loop3): using free-space-tree
[  224.398844][ T5956] gspca_spca501: reg write: error -71
[  224.428893][ T5956] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00
[  224.483402][ T9578] BTRFS info (device loop1): rebuilding free space tree
[  224.494810][ T5956] spca501 3-1:0.0: probe with driver spca501 failed with error -22
[  224.555624][ T5956] usb 3-1: USB disconnect, device number 6
[  224.563808][ T9578] BTRFS info (device loop1): disabling free space tree
[  224.593647][ T9578] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  224.644838][ T9578] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  224.719049][ T5841] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  224.961932][ T5849] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  225.039559][ T9659] netlink: 'syz.0.1522': attribute type 10 has an invalid length.
[  225.104863][ T9659] 8021q: adding VLAN 0 to HW filter on device 
[  225.215190][ T9659] team0: Port device  added
[  225.915062][ T9681] xt_addrtype: ipv6 does not support BROADCAST matching
[  226.160518][ T5942] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  226.263353][ T9695] loop4: detected capacity change from 0 to 64
[  226.362061][ T5942] usb 2-1: Using ep0 maxpacket: 8
[  226.387266][ T5942] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  226.416852][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.430844][ T9695] hfs: inconsistency in B*Tree (1,0,2,2,3)
[  226.439246][ T9694] loop2: detected capacity change from 0 to 4096
[  226.447174][ T5942] usb 2-1: Product: syz
[  226.460130][ T5942] usb 2-1: Manufacturer: syz
[  226.477930][ T5942] usb 2-1: SerialNumber: syz
[  226.480891][ T9699] openvswitch: netlink: IP tunnel dst address not specified
[  226.503256][ T9694] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  226.515282][ T5942] usb 2-1: config 0 descriptor??
[  226.532238][ T5942] gspca_main: se401-2.14.0 probing 047d:5003
[  226.948229][ T5942] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  226.987484][ T5942] se401 2-1:0.0: probe with driver se401 failed with error -71
[  227.042811][ T5942] usb 2-1: USB disconnect, device number 8
[  227.676921][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1560'.
[  227.861783][ T9741] dlm: no local IP address has been set
[  227.867791][ T9741] dlm: cannot start dlm midcomms -107
[  227.894426][ T5942] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  228.093463][ T5942] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  228.109455][ T5942] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.113010][ T9751] loop3: detected capacity change from 0 to 256
[  228.137563][ T5942] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  228.166043][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.221245][ T5942] hub 2-1:4.0: USB hub found
[  228.424853][ T5942] hub 2-1:4.0: config failed, hub has too many ports! (err -19)
[  228.583989][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1571'.
[  228.646106][ T9764] bridge_slave_1: left allmulticast mode
[  228.721068][ T9764] bridge_slave_1: left promiscuous mode
[  228.749187][ T9764] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.776526][   T10] usb 2-1: USB disconnect, device number 9
[  228.822086][ T9764] bridge_slave_0: left allmulticast mode
[  228.868613][ T9764] bridge_slave_0: left promiscuous mode
[  228.887757][ T9764] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.074875][ T9770] _ÐZ`Ô€@ÿÿ: entered promiscuous mode
[  229.922787][ T9812] sctp: [Deprecated]: syz.4.1589 (pid 9812) Use of int in max_burst socket option.
[  229.922787][ T9812] Use struct sctp_assoc_value instead
[  230.539959][ T9834] netdevsim netdevsim4: loading /lib/firmware// failed with error -22
[  230.551957][   T30] audit: type=1326 audit(1750146213.588:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.0.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cab8e929 code=0x7ffc0000
[  230.611084][ T9834] netdevsim netdevsim4: Direct firmware load for / failed with error -22
[  230.653530][   T30] audit: type=1326 audit(1750146213.608:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.0.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fb5cab8e929 code=0x7ffc0000
[  230.670596][ T9834] netdevsim netdevsim4: Falling back to sysfs fallback for: /
[  230.744598][   T30] audit: type=1326 audit(1750146213.608:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.0.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cab8e929 code=0x7ffc0000
[  230.838646][   T30] audit: type=1326 audit(1750146213.608:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.0.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cab8e929 code=0x7ffc0000
[  230.867910][ T9850] netlink: 'syz.1.1607': attribute type 1 has an invalid length.
[  230.905907][ T9850] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1607'.
[  231.499070][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1619'.
[  231.532257][ T9876] autofs4:pid:9876:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e)
[  231.587145][ T9876] autofs4:pid:9876:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e)
[  231.979645][ T9888] ÿ: renamed from bond_slave_0 (while UP)
[  232.047825][ T9862] loop3: detected capacity change from 0 to 32768
[  232.068867][ T9862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1613 (9862)
[  232.140677][ T9862] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  232.184288][ T9862] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  232.235932][ T9862] BTRFS info (device loop3): disk space caching is enabled
[  232.255231][ T9862] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  232.450551][ T9919] syz.2.1635 (9919): /proc/9919/oom_adj is deprecated, please use /proc/9919/oom_score_adj instead.
[  232.493535][ T9862] BTRFS info (device loop3): rebuilding free space tree
[  232.553100][ T9862] BTRFS info (device loop3): disabling free space tree
[  232.562256][ T9926] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  232.593638][ T9862] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  232.614061][ T9926] overlayfs: conflicting options: userxattr,redirect_dir=on
[  232.624774][ T9862] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  232.934851][ T5841] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  233.470507][   T30] audit: type=1326 audit(1750146216.478:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d92d8e929 code=0x7ffc0000
[  233.520502][   T30] audit: type=1326 audit(1750146216.478:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d92d8e929 code=0x7ffc0000
[  233.600717][ T9958] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1652'.
[  233.629279][   T30] audit: type=1326 audit(1750146216.508:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f7d92d8e929 code=0x7ffc0000
[  233.740604][   T30] audit: type=1326 audit(1750146216.508:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d92d8e929 code=0x7ffc0000
[  233.789946][ T9962] loop4: detected capacity change from 0 to 2048
[  233.826876][   T30] audit: type=1326 audit(1750146216.508:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d92d8e929 code=0x7ffc0000
[  233.900340][ T9962] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  234.166955][ T9974] loop3: detected capacity change from 0 to 4096
[  234.222249][ T9974] EXT4-fs: Ignoring removed nomblk_io_submit option
[  234.315877][ T9974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.333987][ T9983] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1665'.
[  234.412371][ T9974] EXT4-fs error (device loop3): ext4_empty_dir:3093: inode #12: block 80: comm syz.3.1660: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  234.528928][ T9986] loop4: detected capacity change from 0 to 4096
[  234.531034][ T9974] EXT4-fs (loop3): Remounting filesystem read-only
[  234.590443][ T9974] EXT4-fs warning (device loop3): ext4_empty_dir:3095: inode #12: comm syz.3.1660: directory missing '..'
[  234.602043][ T9991] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.618457][ T9986] NILFS error (device loop4): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  234.658143][ T9986] Remounting filesystem read-only
[  234.836135][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.974495][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1671'.
[  235.112577][ T9999] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  235.293658][ T9980] loop1: detected capacity change from 0 to 32768
[  235.594314][ T9980] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,background_compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  235.594346][ T9980]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  235.700894][ T9980] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  235.719551][ T9980] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  235.764249][ T9980] bcachefs (loop1): superblock requires following recovery passes to be run:
[  235.764249][ T9980]   recovery_pass_empty,check_unreachable_inodes,lookup_root_inode
[  235.791137][ T9980] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  235.791137][ T9980]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  235.857368][ T9980] bcachefs (loop1): dropping and reconstructing all alloc info
[  235.934881][ T9980] bcachefs (loop1): accounting_read... done
[  235.947746][ T9980] bcachefs (loop1): alloc_read... done
[  235.990602][ T9980] bcachefs (loop1): snapshots_read... done
[  235.997779][ T9980] bcachefs (loop1): done starting filesystem
[  236.052386][T10026] loop2: detected capacity change from 0 to 1024
[  236.346651][ T5849] bcachefs (loop1): shutting down
[  236.466802][T10036] loop2: detected capacity change from 0 to 512
[  236.471058][ T5849] bcachefs (loop1): shutdown complete
[  236.562454][T10036] EXT4-fs (loop2): orphan cleanup on readonly fs
[  236.649846][T10036] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  236.677519][T10036] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  236.745882][T10036] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1686: attempt to clear invalid blocks 2 len 1
[  236.800718][T10036] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1686: invalid indirect mapped block 1819239214 (level 0)
[  236.844845][T10036] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1686: invalid indirect mapped block 1819239214 (level 1)
[  236.871776][T10036] EXT4-fs (loop2): 1 truncate cleaned up
[  236.879283][T10036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  236.921319][T10049] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1693'.
[  237.005201][T10036] EXT4-fs error (device loop2): ext4_lookup:1784: inode #2: comm syz.2.1686: 'file1' linked to parent dir
[  237.116365][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.410552][   T43] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  237.520327][T10047] loop3: detected capacity change from 0 to 32768
[  237.587641][   T43] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  237.614337][   T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  237.655918][   T43] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  237.709151][   T43] usb 1-1: config 1 has no interface number 1
[  237.719943][  T112] ------------[ cut here ]------------
[  237.726449][  T112] WARNING: fs/jfs/jfs_dmap.c:2867 at dbAdjTree+0x454/0x4e0, CPU#0: jfsCommit/112
[  237.729558][   T43] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  237.736143][  T112] Modules linked in:
[  237.749016][   T43] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  237.755269][  T112] CPU: 0 UID: 0 PID: 112 Comm: jfsCommit Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  237.769760][   T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  237.778028][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  237.797266][  T112] RIP: 0010:dbAdjTree+0x454/0x4e0
[  237.802653][  T112] Code: 5a ff ff ff e8 6d ea 81 fe eb 05 e8 66 ea 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 f7 2d 08 cc e8 4d ea 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  237.823544][  T112] RSP: 0018:ffffc900026c7988 EFLAGS: 00010293
[  237.829670][  T112] RAX: ffffffff833e8123 RBX: ffff8880701db010 RCX: ffff88801e3e5a00
[  237.838375][  T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  237.838513][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.846448][  T112] RBP: 0000000000020056 R08: ffffea0001c076c7 R09: 1ffffd4000380ed8
[  237.846473][  T112] R10: dffffc0000000000 R11: fffff94000380ed9 R12: ffff8880701db018
[  237.846490][  T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  237.846507][  T112] FS:  0000000000000000(0000) GS:ffff888125c40000(0000) knlGS:0000000000000000
[  237.846526][  T112] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  237.846543][  T112] CR2: 00007fcb789f3178 CR3: 00000000731e8000 CR4: 00000000003526f0
[  237.846563][  T112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  237.846577][  T112] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  237.913066][   T43] usb 1-1: Product: syz
[  237.919598][  T112] Call Trace:
[  237.926755][  T112]  <TASK>
[  237.929740][  T112]  ? __pfx_lock_metapage+0x10/0x10
[  237.935025][  T112]  dbJoin+0x238/0x300
[  237.939067][  T112]  ? do_read_cache_folio+0x4c6/0x590
[  237.944500][  T112]  dbFreeBits+0x4e1/0xdb0
[  237.948895][  T112]  dbFree+0x336/0x650
[  237.952968][  T112]  txFreeMap+0x7ff/0xde0
[  237.957257][  T112]  txUpdateMap+0x308/0x9c0
[  237.961816][  T112]  jfs_lazycommit+0x43f/0xa90
[  237.963682][   T43] usb 1-1: Manufacturer: syz
[  237.966542][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[  237.976446][  T112]  ? __pfx_default_wake_function+0x10/0x10
[  237.979918][   T43] usb 1-1: SerialNumber: syz
[  237.982383][  T112]  ? __kthread_parkme+0x7b/0x200
[  237.982414][  T112]  ? __kthread_parkme+0x1a1/0x200
[  237.982443][  T112]  kthread+0x711/0x8a0
[  238.002759][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[  238.008047][  T112]  ? __pfx_kthread+0x10/0x10
[  238.008087][  T112]  ? _raw_spin_unlock_irq+0x23/0x50
[  238.018823][  T112]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.018861][  T112]  ? __pfx_kthread+0x10/0x10
[  238.018899][  T112]  ret_from_fork+0x3fc/0x770
[  238.034089][  T112]  ? __pfx_ret_from_fork+0x10/0x10
[  238.034134][  T112]  ? __switch_to_asm+0x39/0x70
[  238.034154][  T112]  ? __switch_to_asm+0x33/0x70
[  238.034172][  T112]  ? __pfx_kthread+0x10/0x10
[  238.034195][  T112]  ret_from_fork_asm+0x1a/0x30
[  238.034228][  T112]  </TASK>
[  238.034250][  T112] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  238.034264][  T112] CPU: 0 UID: 0 PID: 112 Comm: jfsCommit Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  238.034287][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  238.034299][  T112] Call Trace:
[  238.034309][  T112]  <TASK>
[  238.034317][  T112]  dump_stack_lvl+0x99/0x250
[  238.034350][  T112]  ? __asan_memcpy+0x40/0x70
[  238.034385][  T112]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.034425][  T112]  ? __pfx__printk+0x10/0x10
[  238.034486][  T112]  panic+0x2db/0x790
[  238.034532][  T112]  ? __pfx_panic+0x10/0x10
[  238.034585][  T112]  ? ret_from_fork_asm+0x1a/0x30
[  238.034615][  T112]  __warn+0x334/0x4c0
[  238.034651][  T112]  ? dbAdjTree+0x454/0x4e0
[  238.034685][  T112]  ? dbAdjTree+0x454/0x4e0
[  238.034714][  T112]  report_bug+0x2be/0x4f0
[  238.034744][  T112]  ? dbAdjTree+0x454/0x4e0
[  238.034775][  T112]  ? dbAdjTree+0x454/0x4e0
[  238.034803][  T112]  ? dbAdjTree+0x456/0x4e0
[  238.034832][  T112]  handle_bug+0x84/0x160
[  238.034883][  T112]  exc_invalid_op+0x1a/0x50
[  238.034919][  T112]  asm_exc_invalid_op+0x1a/0x20
[  238.034943][  T112] RIP: 0010:dbAdjTree+0x454/0x4e0
[  238.034975][  T112] Code: 5a ff ff ff e8 6d ea 81 fe eb 05 e8 66 ea 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 f7 2d 08 cc e8 4d ea 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  238.034996][  T112] RSP: 0018:ffffc900026c7988 EFLAGS: 00010293
[  238.035022][  T112] RAX: ffffffff833e8123 RBX: ffff8880701db010 RCX: ffff88801e3e5a00
[  238.035041][  T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  238.035058][  T112] RBP: 0000000000020056 R08: ffffea0001c076c7 R09: 1ffffd4000380ed8
[  238.035088][  T112] R10: dffffc0000000000 R11: fffff94000380ed9 R12: ffff8880701db018
[  238.035106][  T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  238.035133][  T112]  ? dbAdjTree+0x453/0x4e0
[  238.035169][  T112]  ? dbAdjTree+0x453/0x4e0
[  238.035196][  T112]  ? __pfx_lock_metapage+0x10/0x10
[  238.035237][  T112]  dbJoin+0x238/0x300
[  238.035265][  T112]  ? do_read_cache_folio+0x4c6/0x590
[  238.035302][  T112]  dbFreeBits+0x4e1/0xdb0
[  238.035346][  T112]  dbFree+0x336/0x650
[  238.035386][  T112]  txFreeMap+0x7ff/0xde0
[  238.035423][  T112]  txUpdateMap+0x308/0x9c0
[  238.035463][  T112]  jfs_lazycommit+0x43f/0xa90
[  238.035498][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[  238.035525][  T112]  ? __pfx_default_wake_function+0x10/0x10
[  238.035561][  T112]  ? __kthread_parkme+0x7b/0x200
[  238.035586][  T112]  ? __kthread_parkme+0x1a1/0x200
[  238.035618][  T112]  kthread+0x711/0x8a0
[  238.035649][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[  238.035674][  T112]  ? __pfx_kthread+0x10/0x10
[  238.035705][  T112]  ? _raw_spin_unlock_irq+0x23/0x50
[  238.035733][  T112]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.035760][  T112]  ? __pfx_kthread+0x10/0x10
[  238.035791][  T112]  ret_from_fork+0x3fc/0x770
[  238.035830][  T112]  ? __pfx_ret_from_fork+0x10/0x10
[  238.035880][  T112]  ? __switch_to_asm+0x39/0x70
[  238.035906][  T112]  ? __switch_to_asm+0x33/0x70
[  238.035931][  T112]  ? __pfx_kthread+0x10/0x10
[  238.035959][  T112]  ret_from_fork_asm+0x1a/0x30
[  238.036003][  T112]  </TASK>
[  238.039568][  T112] Kernel Offset: disabled