last executing test programs:

3m25.67002558s ago: executing program 2 (id=585):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b80)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdb7b, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048801}, 0x0)

3m25.4621885s ago: executing program 2 (id=589):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000020000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000010800024000000002080005400000000f08000340000000000800064000000001"], 0x9c}}, 0x0)

3m25.21417112s ago: executing program 2 (id=594):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_FLAGS={0x8}]}, 0x1c}}, 0x20008000)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000240)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000)

3m25.038191448s ago: executing program 2 (id=599):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)

3m24.870017005s ago: executing program 2 (id=602):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

3m24.361991467s ago: executing program 2 (id=606):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)

3m23.959748984s ago: executing program 32 (id=606):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)

2m1.323834582s ago: executing program 0 (id=1527):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)

2m1.047711783s ago: executing program 0 (id=1531):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x80, &(0x7f0000000c00)={[{@umask={'umask', 0x3d, 0xe}}, {@nobarrier}, {}, {@nls={'nls', 0x3d, 'cp950'}}, {@creator={'creator', 0x3d, "feed9816"}}, {@uid}, {@uid}, {@gid}, {@force}, {@umask}, {@nobarrier}]}, 0x2, 0x6ff, &(0x7f0000000cc0)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f00000000c0))
unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200)

2m0.704370518s ago: executing program 0 (id=1536):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x58)

1m59.929548851s ago: executing program 0 (id=1541):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x800000, &(0x7f0000000000)={[{@type={'type', 0x3d, "de3fb575"}}, {}, {@gid}, {@nls={'nls', 0x3d, 'iso8859-6'}}]}, 0x1, 0x5d8, &(0x7f0000000cc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0)

1m59.358904036s ago: executing program 0 (id=1544):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000003c0)={0x0, 0xfffff, 0xffff, 0x9, 0x4, "00ff00000000000000008000", 0x6, 0x5})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff)

1m58.82275813s ago: executing program 0 (id=1554):
capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x8, 0x4, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r0}, 0x48)

1m58.478528704s ago: executing program 33 (id=1554):
capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x8, 0x4, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r0}, 0x48)

56.18766624s ago: executing program 1 (id=2156):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x4}, 0x8)

55.892113302s ago: executing program 1 (id=2160):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000024c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xfd, 0x6349, &(0x7f0000008b00)="$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")
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)

54.165125017s ago: executing program 1 (id=2183):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x102, 0x2000101, 0x7ffc})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x4, 0x0, 0x0, 0x6})

52.382437704s ago: executing program 1 (id=2197):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000040)={0xa0202, 0x0, 0x11}, 0x18)

52.130894115s ago: executing program 1 (id=2199):
mmap$qrtrtun(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x13, 0xffffffffffffffff, 0xffffffffffff7fff)
r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@datacow}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0)

51.059407042s ago: executing program 1 (id=2205):
setresuid(0x0, 0xee00, 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000000c0)="240000004e0025000307f4f900c504000a04f55f08000100020100020800038005000000", 0x24)

50.583068223s ago: executing program 34 (id=2205):
setresuid(0x0, 0xee00, 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000000c0)="240000004e0025000307f4f900c504000a04f55f08000100020100020800038005000000", 0x24)

12.608519737s ago: executing program 5 (id=2555):
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1000001a, 0x4)

12.401887646s ago: executing program 5 (id=2558):
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c)

12.137260888s ago: executing program 5 (id=2561):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x0)

11.763620834s ago: executing program 5 (id=2564):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x4444, &(0x7f00000088c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x9, 0x401, 0x4010})

9.541443s ago: executing program 5 (id=2576):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
process_madvise(r1, &(0x7f0000000640)=[{&(0x7f0000000000)="15", 0x1}], 0x1, 0x14, 0x0)

8.980006424s ago: executing program 5 (id=2581):
syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0)
fadvise64(r0, 0xb400, 0x40000c104, 0x3)

4.277228946s ago: executing program 3 (id=2614):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

3.931992091s ago: executing program 3 (id=2618):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

3.245415871s ago: executing program 7 (id=2627):
r0 = socket(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8927, &(0x7f0000000040)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x3, {0x0, 0xf1, 0x3}, 0x2}, 0x18)

2.965403933s ago: executing program 7 (id=2629):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8)
setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8)

2.747921972s ago: executing program 7 (id=2631):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001b40)=""/4065, 0xfe1}, {&(0x7f0000003b80)=""/4124, 0x101c}, {&(0x7f0000000240)=""/152, 0x98}], 0x3}, 0x20)

2.733527093s ago: executing program 4 (id=2632):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @multicast1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @broadcast}, 'sit0\x00'})
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'})

2.442200725s ago: executing program 4 (id=2634):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x402, &(0x7f0000000180)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@journal_checksum}]}, 0x1, 0x63a, &(0x7f0000000200)="$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")

2.32241522s ago: executing program 7 (id=2635):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x7, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {&(0x7f00000000c0)=[{0x0, 0x8000, {0x0}, 0xa}, {0x9fb, 0xd4, {0x0}, 0xfff}]}, 0x5})

2.09654644s ago: executing program 6 (id=2636):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0})

2.046763552s ago: executing program 7 (id=2637):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$eJzs3c1vHGcdB/DfvvolNLVyqEqEkJuWl1KaxEkJgQJtD3Dg0gOKuKFErltFpICSgNLKIq4sJA6c+AtASBwR4og48Af0wJUbJ05EspFAPTFo7OeJZze7Xbu2d9aez0dyZn7zzK6f8XdnXzIz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEN/9zvdWWhFx82dpwVLEp6IT0Y5YKOvliFhYXsrrdyPi2dhpjmciojcXUd5+55+nI16JiA/PRmxtr6+Wi6/ssx/f/uPff/eDM2/+7Q+9S//90/3Oq+PWe/DgV//588PDbTMAAAA0TVEURSt9zD+fPt+36+4UADAV+fW/SPLyU1//+p9v/mWW+qNWq9Vq9RTqqmK0h9UiIjaqtynfMzgcDwAnzEZ8VHcXqJH8G60bEWfq7gQw01p1d4BjsbW9vtpK+baqrwfLu+35XJCB/Ddaj6/vGDedZPgck2k9vjajE+fG9GdhSn2YJTn/9nD+N3fb+2m9485/Wsbl39+99Klxcv6d4fyHnJ782yPzb6qcf/dA+XfkDwAAAAAAMyz///9Szcd/5w6/Kfvyccd/l6fUBwAAAAAAAAA4aocd/+8x4/8BAADAzCo/q5d+c3Zv2bjvYiuX32hFPDW0PtAw6WKZxbr7AQAAAAAAAAAAAABN0t09h/dGK6IXEU8tLhZFUf5UDdcHddjbn3RN335osrqf5AEAYNeHZ/O1/L3dBa2I+Yi4kb7rr7e4uFgU8wuLxWKxMJffz/bn5ouFyufaPC2XzfX38Ya42y/KO5uv3K5q0uflSe3D91f+rn7R2UfHjkj6Y8aY5hoDB4D0AhWx5RXplCmKp8e9+YAB9v9TaCmW6n5cMfvqfpgCAAAAx68oiqKVvs77fDrm3667UwDAVOTX/+HjAoeq22PaI47m/tVqtVqtVn+iuqoY7WG1iIiN6m3K9wyG4weAE2YjPqq7C9RI/o3WjYhn6+4EMNNadXeAY7G1vb7aSvm2qq8HaXz3fC7IQP4brZ3b5duPmk4yfI7JtB5fm9GJc2P688yU+jBLcv7t4fxv7rb303rHnf+0jMu/v3PJXPPk/DvD+Q85Pfm3R+bfVDn/7oHy78gfAAAAAABmWP7//yXHf/MmAwAAAAAAAMCJs7W9vpqve83H/z8zYj3Xf55OOf/WQfNfSPPyP9Fy/u2h/L84tF6nMv/ojb39/9/b66u/v/+vT+fpfvOfyzOt9MhqpUdEK/2mVjdND7N1T9rsdfrlb+q12p1uOuen6L0dt+NOrMXlgXXb6e+x174y0F72tDfQfmWgvftE+9WB9l763oFiIbdfjNX4cdyJt3bay7a5Cds/P6G9mNCe8+94/m+knH/38c+575f5L6b21tC09OiD9hP7fXU66ve8fvuzv7x8/Jsz0WZ0Hm9bVbl9F2roz87f5Ew/fnpv7e7FB7fu37+7EmkysPRKpMkRy/n3dn7m9p7/n99tz8/71f310Qf9A+c/KzajOzb/5yvz5fa+OOW+1SHn308/Of+3Uvvo/f8k5z9+/3+phv4AAAAAAAAAAAAAAADAxymKYucS0dcj4lq6/qeuazMBgOnKr/9Fkper1Wq1Wq0+fXVVMdpr1SIi/lq9Tfme4eej7gwAmGX/i4h/1N0JaiP/Bsvf91dOX6i7M8BU3Xvv/R/eunNn7e69unsCAAAAAAAAAHxSefzP5cr4zy9ExNLQegPjv74Ry4cd/7ObZx4PMHrEA32Psdnud9qV4cafi53xuS+OG//7Qjw5/nceE7dT3Y4xehPa+xPa5ya0z49cupfWyAs9KnL+z1XGOy/zPz80/HoTxn8dHvO+CXL+FyqP5zL/LwytV82/+O3M5b+x3xU3oz2Q/6X77/7k0r333n/59ru33ll7Z+1HV1dWLl+9du369euX3r59Z+3y7r/H0+sZkPPPY187D7RZcv45c/k3S87/c6mWf7Pk/D+favk3S84/v9+Tf7Pk/PNnH/k3S87/xVTLv1ly/l9KtfybZWt7fa7M/6VUy79Z8v7/5VTLv1ly/i+nWv7NkvO/mGr5N0vO/1Kq95G/r4c/RXL++QiX/b9Zcv4rqZZ/s+T8r6Ra/s2S87+aavk3S87/lVTLv1ly/l9JtfybJed/LdXyb5ac/1dTLf9myflfT7X8myXn/7VUy79Zcv5fT7X8myXn/2qq5d8sOf9vpFr+zZLz/2aq5d8sOf9vpVr+zZLzfy3V8m+Wve//N2NmFmZ+cbR32IkZ2a6TNlP3MxMAAAAAAAAAAAAAMGwapxPXvY0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LvXGLnO+n7gZ/bmtUOIgRCc/A1sEmOMs2TXl/jCHxcTrg1QbgmFXrBd79os+IbXLoEi2TRQImFUVIGavmgLCLWRqgqr4gWtKM2LqpdXpX1B31RUlZAaVSEKqEhtRbPVzHmexzOzszO73vF69jyfj2T/dmfOzDlz5szsftf+7gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGh295tmP18riqL+p/HX5qJ4Qf3jjRObG5e97mZvIQAAALBa/9v4+7nb0gWHl3GjpmX+9hX/8K2FhYWF4oPDXxn98sJCumKiKEY3FEXjuujqv32o1rxM8FgxXhtq+nyox+qHe1w/0uP60R7Xj/W4fkOP68d7XL9oByyysfx5TOPOtjU+3Fzu0uL2YrRx3bYOt3qstmFoKP4sp6HWuM3C6IlirjhVzBbTLcuXy9Yay3/n7vq63l7EdQ01rWtr/Qj58aePx22ohX28rWVd1+4z+tEbi4mf/PjTx//owjN3dpo9d0PL/ZXbueOe+nZ+NlxSbmut2JD2SdzOoabt3NrhORlu2c5a43b1j9u387llbufwtc1cU+3P+Xgx1Pj4e439NNL8Y720n7aGy/7r3qIoLl/b7PZlFq2rGCo2tVwydO35GS+PyPp91A+lFxcjKzpO717GcVqfM9taj9P210R8/u8OtxtZYhuan6YffWZs0fO+0uM0qj/qpV4r7cdgv18rg3IMxuPie40H/XjHY3BbePyf3r70Mdjx2OlwDKbH3XQM3tPrGBwaG25sc3oSao3bXDsGd7UsP9xYU60xn97e/RicunD63NT8Jz/12rnTx07Onpw9s2fXruk9+/YdOHBg6sTcqdnp8u/r3NuDb1MxlF4D94R9F18Dr25btvlQXfha/16H411eh5vblu3363Ck/cHV1uYFufiYLl8bD9d3+viVoWKJ11jj+dm5+tdhetxNr8ORptdhx68pHV6HI8t4HdaXObdzed+zjDT96bQNN+prweamY7D9+5H2Y7Df348MyjE4Ho6Lf9m59NeCrWF7H59c6fcjw4uOwfRww3tP/ZL0/f74gcbodFzeVb/ilrHi4vzs+fsfPXbhwvldRRhr4iVNx0r78bqp6TEVi47XoRUfr4fnXvH4XR0u3xz21fhr63+NL/lc1ZfZe3/356rx1a3z/my5dHcRRp+t9f7s9NW8vj9TluyyP+vLfHZq9d+Lp1za9P47usT7b8z9z5frS3f12PDoSPn6HU57Z7Tl/bj1qRppvHfVGut+bmp578ej4c9avx/f3uX9eEvbsv1+Px5tf3Dx/bjW66cdq9P+fI6H4+TUdPf34/oyW3av9Jgc6fp+fG+YtbD/XxOSQspFTcfOUsdtWtfIyGh4XCNxDa3H6Z6W5UdDNquv68nd13ec7ri3vK/h9OiuWavjdKJt2X4fp+n9aqnjtNbrp2/Xp/35HA/Hxe17uh+n9WWe2rv6986N8cOm986xXsfg6PBYfZtH00FYvt8vbIzH4P3F8eJscaqYaVw71jieao11TT6wvGNwLPxZ6/fKLV2OwR1ty/b7GExfx5Y69mojix98H7Q/n+PhuHjige7HYH2ZN+/v7/euO8IlaZmm713bf7621M+87mrbTTfyZ1717fzr/d1/Nltf5tSBlebM7vvpvnDJLR32U/vrd6nX1EyxNvtpS9jOZw4svZ/q21Nf5ssHl3k8HS6K4tLHH2z8vDf8+8qfXfz+t1r+3aXTv+lc+viDz9564m9Wsv0ArH/Pl2NT+bWu6V+mlvPv/wAAAMC6EHP/UJiJ/A8AAACVEXN//F/hifwPAAAAlRFz/0iYSSb5f8ubn5l7/lKRmvkLQbw+7YaHyuVix3U6fD6xcE398ge/MfvTv7i0vHUPFUXxs4d+o+PyWx6K21WaCNt59S2tly++4aVlrf/oI9eWa+6vfzXcf3w8yz0MOlVwp4ui+M5tX2ysZ+JDVxrzqYeONub7Lj/+WH2Z5w6Wn8fbP/2ScvnfD+XfwyeOtdz+6bAffhjm9Ds67494u29eec3W/R+4tr54u9o9L2w87Cc+XN5v/D05X3qsXD7u56W2/y+/8OQ368s/+qrO239pqPP2Pxnu9xth/vfLy+Wbn4P65/F2nwvbH9cXb3f/17/bcfuvfr5c/txby+WOhhnXvyN8vu2tz8w1769Ha8daHlfxtnK5uP7p7/924/p4f/H+27d//MiVlv3Rfnw89U/l/Uy1LR8vj+uJ/rxt/fX7aT4+4/qf/K2jLfu51/qvvu/pl9fvt33997UtN9x2+/bf2PQHn/tix/XF7Tn8p+daHs/h94bXcVj/Ex8Ox2O4/n+ufrFlvdHR97a+/8Tlv7r5Usvjid7+k3L9V99wsjH/feKnv3fLC2594eVX1vddUXzv/eX99Vr/yT8827L9X7tjZ+P5iNfHjn77+pcS13/+E5Nnzs5fnJtp2quN353zznJ7Noxv3FTf3tvCe2v750fOXvjI7PmJ6Ynpopio7q/Qu25fD/PZclxe6e13PhKez7t+9zubtv/jF+Ll//xwefmVd5Rft14dlvtSuHxz+fwt1Fa5/ifuvqPx+q49VX7e0mPvg63b/uPAshYMj7/9+4J4vJ976Uca+6F+XePrRnxdr3L7fzBT3s+3w35dCL+Z+Z47rq2vefn4uxGuvL98va96/4W3ufi8/nF4vt/1w/L+43bFx/uD8H3Md7e0vt/F4+Pbl4ba77/xWzwuh/eT4nJ5fVwq7u8rz93RcfPi7yEpLt/Z+Px30v3cuaKHuZT5T85PnZo7c/HRqQuz8xem5j/5qSOnz148c+FI43d5Hvlor9tfe3/a1Hh/mpndt7eY3lgUxdlieg3esG7M9tc/Wt72n3vk+Mz+6e0zsyeOXTxx4ZFzs+dPHp+fPz47M7/92IkTs5/odfu5mUO7dh/cs3/35Mm5mUMHDh7cc3By7szZ+maUG9XDvumPTZ45f6Rxk/lDew/ueuCBvdOTp8/OzB7aPz09ebHX7Rtfmybrt/71yfOzp45dmDs9Ozk/96nZQ7sO7tu3u+dvAzx97sT8xNT5i2emLs7Pnp8qH8vEhcbF9a99vW5PNc3/a/n9bLta+Yv4inffty/9fta6b3xmybsqF2n7BaLPhN9F8/cvOndgOZ/H3D8aZpJJ/gcAAIAcxNw/FmYi/wMAAEBlxNy/IcxE/gcAAIDKiLl/PMwkk/yv/6//v7z+f3m9/n9e/f9zHy97peu9/x/78/r/ebjJ/f9Vr1//X/+/ev3/5ffn1/v26//r/7PYoPX/Y+7fWBRZ5n8AAADIQcz9m8JM5H8AAACojJj7bwkzkf8BAACgMmLuf0GYSSb5P4f+/3s6LLbC/v/uXoWr6vf/1835/zcW+v/6/839//jk6P9nY8X9+w883PKp/n+g/6//r/+v/6//z6qNLnnNzer/x9x/a5hJJvkfAAAAchBz/wvDTOR/AAAAqIyY+28LM5H/AQAAoDJi7t8cZpJJ/s+h/9+J8/9Xtv/v/P/6//09/3/Txuj/rw/O/99d5/7/2C2LLtL/X2H/f1z/fz32/0f7u/2D3f/vufn6/9wQg3b+/5j7XxRmkkn+BwAAgBzE3P/iMBP5HwAAACoj5v6XhJnI/wAAAFAZMfffHmaSSf7X/9f/1//X/9f/77z+3uf/Lz/S/x8s+v/dOf9/D87/n1f/v8/bP9j9/36f/3/0Le231/+nk0Hr/8fc/9Iwk0zyPwAAAOQg5v47wkzkfwAAAKiMmPtfFmYi/wMAAEBlxNy/Jcwkk/yv/6//r/+v/6//33n9vfv/Jf3/waL/353+fw/6//r/+v/L6/93+OZX/59OevX/H3x9+T69Vv3/mPvvDDPJJP8DAABADmLuvyvMRP4HAACAyoi5//+Fmcj/AAAAUBkx928NM8kk/+v/6//r/+fV/79vTP9f/7/a9P+70//vQf9f/1//f5nn/19sJf3/Db3ujMro1f9/9337Gm+B7f3/DvmqL/3/mPtfHmaSSf4HAACAHMTc/4owE/kfAAAAKiPm/leGmcj/AAAAUBkx90+EmWSS//X/q9X//5O/euKVhf6//n+P9Ve0/x8PA/3/zOn/d6f/34P+v/6//v+a9P/Jx/X2/zvoS/8/5v67w0wyyf8AAACQg5j77wkzkf8BAACgMmLuvzfMRP4HAACAyoi5f1uYSSb5X/+/Wv3/SP9f/7/b+iva/0/0//Om/99B04tU/78H/X/9/+z7//G7X/1/+mPQ+v8x978qzCST/A8AAAA5iLl/e5iJ/A8AAACVEXP/q8NM5H8AAACojJj7d4SZZJL/9f/1//X/9f/1/zuvX/9/fdL/726l/f8x/X/9f/3/zPr/zv9Pfw1a/z/m/teEmWSS/wEAACAHMffvDDOR/wEAAKAy4v/fLP/fq/wPAAAAVRRz/2SYSSb5X/9f/z+n/n9N/1//X/+/8vT/u3P+/x70//X/9f/1/+mrQev/x9z/2jCTTPI/AAAA5CDm/vvDTOR/AAAAqIyY+6fCTOR/AAAAqIyY+6fDTDLJ//r/+v859f+d/1//X/+/+vT/u9P/70H/X/+/av3/otD/56YatP5/zP27wkwyyf8AAACQg5j7d4eZyP8AAABQGTH37wkzkf8BAACgMmLu3xtmkkn+1//X/9f/1//X/++8fv3/9alb//4ry7i9/n+g/6//r/9fjf6/8/9zkw1a/z/m/gfCTDLJ/wAAAJCDmPv3hZnI/wAAAFAZMffvDzMJ+b/T/+sGAAAA1peY+w+EmWTy7//6/xXp///m37WsW/9f/7/b+vvT/9+o/x+m/v9gqej5/9tfFtdtffb/n0+PX/9f/3+Qt1//X/+fxQat/x9z/8Ewk0zyPwAAAOQg5v7XhZnI/wAAAFAZMff//zAT+R8AAAAqI+b+14eZZJL/9f8r0v9vo/+v/99t/c7/r/9fZRXt//fN+uz/L3H+/yH9f/3/1W//WB+3X/9/Of3/Db3uhoq58f3/+NHy+v8x9x8KM8kk/wMAAEAOYu7/uTAT+R8AAAAqI+b+N4SZyP8AAABQGTH3Hw4zyST/6//r/+v/6//fmP7/G4p2g9j/rx88+v/Vov/fXaX6/87/r/8/YNuv/+/8/yw2aOf/j7n/jWEmmeR/AAAAyEHM/Q+Gmcj/AAAAUBkx978pzET+BwAAgMqIuf/NYSaZ5H/9f/1//X/9f+f/77x+/f/1Sf+/O/3/HvT/9f/1//X/6aub1//f0PH6mPvfEmaSSf4HAACAHMTc/9YwE/kfAAAAKiPm/reFmcj/AAAAUBkx9789zCST/K//r/+v/1/N/v+GLuvX/9f/rzL9/+70/3vQ/9f/1//X/6evBu38/zH3/3yYSSb5HwAAAHIQc/9DYSbyPwAAAFRGzP3vCDOR/wEAAKAyYu5/Z5hJJvlf/1//X/+/mv3/buvX/9f/rzL9/+70/3vQ/9f/1//X/6evBq3/H3P/u8JMMsn/AAAAkIOY+38hzET+BwAAgMqIuf/dYSbyPwAAAFRGzP3vCTPJJP/3p/9fK8pWq/5/M/3/6+n/L1xqvp3+v/5/0a/+f/1G+v9Z0P/vTv+/hw79/w36//r/+v/6/1y3Qev/x9z/3jCTTPI/AAAA5CDm/veFmcj/AAAAUBkx978/zET+BwAAgMqIuf/hMJNM8r/z/2fZ/08PefD6/87/r//v/P/6/6uj/9+d/n8Pzv+v/78u+/+jYX5sMn5t0v9nUAxa/z/m/kfCTDLJ/wAAAJCDmPs/EGYi/wMAAEBlxNz/i2Em8j8AAABURsz9HwwzyST/6/9n2f8f4PP/V63/P9JyfOTU/x9vej7Tcan/r/+/BvT/u9P/70H/X/9/kPv/4WjeuMTtnf+fQTRo/f+Y+z8UZpJJ/gcAAIAcxNz/S2Em8j8AAABURsz9vxxmIv8DAABAZcTc/ythJpnk/yz6/0OLF9P/1/9v3l/O/+/8/53Wr/+/Pun/d6f/34P+fz79/5H+b//NO/9/Sf+fQTRo/f+Y+381zGTJ4Pfsfy7jYQIAAAADJOb+D4eZZPLv/wAAAJCDmPuPhJnI/wAAAFAZMfcfDTPJJP9n0f/vYOn+fzyjqv6//r/+v/6//v961L/+/8tuLQr9f/1//f/K9v9vwPbr/+v/s9ig9f9j7j8WZpJJ/gcAAIAcxNz/a2Em8j8AAABURsz9x8NM5H8AAACojJj7Z8JMMsn/a93/b+r1jg5m/9/5/6+3//8z/X/9/0D/vzP9/7Xh/P/d6f/3oP+v/6//r/9PXw1a/z/m/tkwk0zyPwAAAFRY+nFwzP0nwkzkfwAAAKiMmPtPhpnI/wAAAFAZMfd/JMwkk/zv/P/6/87/fzP6/yMty+v/l/T/9f/7Qf+/O/3/HvT/9f/1//X/6atB6//H3D8XZpJJ/gcAAIAcxNz/0TAT+R8AAAAqI+b+j4WZyP8AAABQGTH3nwozyST/6//r/+fe/68VxWXn/9f/77R+/f/1Sf+/u/9j7z6a5DqrP463baVZwUtgzYqlWdkLXgBbdlSxNtHkYJmcwUSTwYDJOWeTc87Z5BxNMIaqoTw+50ij7rk90lx13/s8n8/m/KW/xbTwYOqH6luP/n8N/b/+X/+v/2dUU+v/c/dfFbd0sv8BAACgB7n77xu32P8AAADQjNz994tb7H8AAABoRu7++8ctnex//b/+v/f+f7GV9//3//Xt9/93/B3S/+v/N2Gpvz+2+q87KAo/sP+/2+VX31v/r//X/w/S/+v/9f+ca2r9f+7+B8Qtnex/AAAA6EHu/gfGLfY/AAAANCN3/4PiFvsfAAAAmpG7/+q4pZP9r//X/+v/9f/7+v+bvP+v/5837/8Pm0f/f/nu7q7+fxX9/7Q/v/5f/8+yqfX/ufsfHLd0sv8BAACgB7n7HxK32P8AAADQjNz9D41b7H8AAABoRu7+h8Utnex//b/+X/8/l/7/xIzf/4/vB/2//n8D9P/D5tH/e/9f/z/Pz6//1/+z7Pz7/wP/sT1K/5+7/+FxSyf7HwAAAHqQu/8RcYv9DwAAAM3I3f/IuMX+BwAAgGbk7n9U3NLJ/tf/6//1/3Pp/zf0/r/+X/8/czcszvwzQf+/TP+/xpr+f7HQ/w85dD+/+rc3n89/AP2//p9l59//H/gvNUr/n7v/0XHLlYvFiQv9TQIAAACTkrv/MXFLJ3/+DwAAAD3I3X9N3GL/AwAAQDNy95+OWzrZ//p//b/+X/+v/1/99fX/8+T9/2FH7//veuer7tNv/+/9/2He/x+7/7/9O6PJ/l9m3ZGp9f+5+6+NWzrZ/wAAANCD3P2PjVvsfwAAAGhG7v7HxS32PwAAADQjd//j45ZO9r/+f1r9f+YuF97/X7bv153V/+/VLvr/uff/99D/6//1/2vo/4d5/3+NvX/M7dQP9f/6f+//e/+fo5la/5+7/wlxSyf7HwAAAHqQu/+JcYv9DwAAAM3I3f+kuMX+BwAAgGbk7n9y3NLJ/tf/T6v/9/6//t/7//p//f/R6P+H6f/XaOX9/wv8rtl2P39U2/78+n/9P8um1v/n7n9K3NLJ/gcAAIAe5O5/atxi/wMAAEAzcvc/LW6x/wEAAKAZufufHrd0sv/1//r/efT/+RX0//r/i9//J/3/POn/h+n/12il/79A2+7n5/759f/6f5ZNrf/P3f+MuKWT/Q8AAAA9yN3/zLjF/gcAAIBm5O5/Vtxi/wMAAEAzcvc/O27pZP/r//X/8+j/vf+v//f+v/7/cPT/w/T/a+j/9f/6f/0/o5pa/5+7/7q4pZP9DwAAAD3I3f+cuMX+BwAAgGbk7n9u3GL/AwAAQDNy9z8vbulk/+v/V/X/t+j/9f/6f/2//n+m9P/D9P9r6P/1//p//T+jmlD/f9avOrV4ftzSyf4HAACAHuTuf0HcYv8DAABAM3L3vzBusf8BAACgGbn7r49bOtn/+v/JvP+/l/O11f/vLBYL/f+i0/5/56y/n/V9qf/X/2+A/n+Y/n8N/b/+X/+v/2dUE+r/936cu/9FcUsn+x8AAAB6kLv/xXGL/Q8AAADNyN3/krjF/gcAAIBm5O5/adzSyf7X/0+m/9/TVv/v/f9zvz966v+9/79M/78Z+v9h+v819P/6f/2//p9RTa3/z93/srjpxPEL/i0CAAAAE5O7/+VxSyd//g8AAAA9yN3/irjF/gcAAICZum7pZ3L3vzJu6WT/6//H7f9PnPVz+n/9/7nfH/p//b/+/+LT/w/T/6+h/9f/6//1/4xqav1/7v5XxS2d7H8AAADoQe7+G+IW+x8AAACakbv/1XGL/Q8AAADNyN3/mrilk/2v//f+v/5f/6//X/319f/zpP8fpv9fQ/9/YD9/mKex9f9H7v9Pnvk/9f+04Tz6/93d3Wsuev+fu/+1cUsn+x8AAAB6kLv/xrjF/gcAAIBm5O5/Xdxi/wMAAEAzcve/Pm7pZP/r/zvt//NbfV79/+nFYpL9/6X6//30/6vp/zdD/z9M/7+G/t/7/97/1/8zqqm9/5+7/w1xSyf7HwAAAHqQu/+NcYv9DwAAAM3I3f+muMX+BwAAgGbk7n9z3NLJ/tf/d9r/e//f+//6/033/7ct9P8bMYv+f+fgrz/1/v9a/b/+f0B3/f89777vh/p//T/Lptb/5+5/S9zSyf4HAACAHuTuf2vcYv8DAABAM3L3vy1usf8BAACgGbn73x43Hetk/+v/9f/6f/2//n/119/w+/8nFouF/n8Es+j/B0y9/x/n/f9z/1N+hv5f/z/nz6//1/+zbGr9f+7+d8Qtnex/AAAA6EHu/nfGLfY/AAAANCN3/7viFvsfAAAAmpG7/91xSyf7X/+v/9f/6/+b7/+vnUX/7/3/kej/h02j/z+Y/l//P+fPr//X/3N42+r/c/e/J27pZP8DAABAD3L3vzdusf8BAACgGbn73xe32P8AAADQjNz9749bOtn/+n/9//n0//k59f9t9f8nJ9f/n9r3r9fJ+//6/5Ho/4fp/9fQ/+v/9f/X6f8Z09Te/8/d/4G4pZP9DwAAAD3I3f/BuPU/3dr/AAAA0Izc/R+KW+x/AAAAaEbu/g/HLZ3sf/2//t/7//r/5t//1/93Rf8/TP+/hv5f/6//9/4/o5pa/5+7/yNxSyf7HwAAAHqQu/+jcYv9DwAAAM3I3f+xuMX+BwAAgGbk7r8pbulk/+v/9f/6f/2//v+Ov4f6/zbo/4dtpv/f0f/r/6ufvyT+U6D/1/+v+/W0aWr9f+7+j8ctnex/AAAAaM3xFT+Xu/8TcYv9DwAAAM3I3f/JuMX+BwAAgFk6tuLncvd/Km6Z5f5fVaEP0//r//X/+n/9/+qvr/+fp630//lNof/3/n/op/+/y74fze39/3P/++uyhf5f/8/Yptb/5+7/dNwyy/0PAAAArJK7/zNxi/0PAAAAzcjd/9m4xf4HAACAZuTu/1zc0sn+1//r//X/+n/9/+qvr/+fp9H6/5ML7//r//X/G34/f+6fX/+v/2fZ1Pr/3P2fj1s62f8AAADQg9z9X4hb7H8AAABoRu7+L8Yt9j8AAAA0Y2/3Z1zW4f7X/+v/9f/6f/3/6q+v/5+nrbz/r//X/+v/9+j/9f/6f841tf7/S3u/6tTiy3FLJ/sfAAAAepC7/ytxi/0PAAAAzcjd/9W4xf4HAACAZuTu/1rc0sn+1//va89P6/+n2v/v7u5eo/+/ZHGV/n9l/3/zjPv/6/X/I9P/D+u4/z92qA+g/9f/T77/P/e/Jc/Q/zNFU+v/c/d/PW7pZP8DAABAD3L3fyNusf8BAACgGbn7vxm32P8AAADQjNz934pbOtn/+v8JvP9/Sv/v/X/v/y+8/6//H4n+f1jH/f/htNj/nzr8b3/b/fxRbfvze/9f/8+yqfX/ufu/Hbd0sv8BAACgB7n7vxO32P8AAADQjNz9341b7H8AAABoRu7+78Utnex//f/m+v/b/73r5f3/ncXqz6//1//r//X/F5v+f5j+f40W+//zsO1+fu6fX/+v/2fZ1Pr/3P3fj1v2D7/j5/e7BAAAAKYkd/8P4pZO/vwfAAAAepC7/4dxi/0PAAAAzcjd/6O4pZP9r/+fwPv/Dfb/3v9f/f2h/590/3+p/r8N+v9h+v819P/6f/3/SP1/fjfr/3s3tf4/d/+P45ZO9j8AAAD0IHf/T+KWK3e29ZEAAACAkeXu/2nc4s//AQAAoBm5+2+OW87a/6va7lbo//X/+n/9v/5/9dfX/8+T/n/YYfv/k4uj9f9J/6//1//32v97/587bLj/P72u/8/d/7O4xZ//AwAAwOwcP+Dnc/f/PG6x/wEAAKAZuft/EbfY/wAAANCM3P2/jFtuuXRbH2mj9P/6f/3/mv7/1vgG1//r//X/s6D/H+b9/zX0/2P081fo/9vo/xcL/T9Ht+H+f+2Pc/f/Km7x5/8AAADQjNz9v45b7H8AAABoRu7+38Qt9j8AAAA0I3f/b+OWTva//l//f8T+fy/NbLr/9/6//j/o/+dB/z9s+/3/jYNfVv/fRP/v/f9G+n/v/zOGbfT/OwP//9z9v4tbOtn/AAAA0IPc/b+PW+x/AAAAaEbu/j/ELfY/AAAANCN3/x/jlk72/9b6//i3Wv8/+/6//ff/B/v/3YX+X/+v/58W/f+w7ff/w/T/+v85f379v/6fZdvo/wd/vPerTi3+FLd0sv8BAACgB7n7/xy32P8AAADQjNz9f4lb7H8AAABoRu7+v8Ytnex/7//r//X/3v/X/6/++vr/edL/D9P/r1Z/o/T/+n/9v/6fUU2t/8/d/7e4pZP9DwAAAD3I3f/3uMX+BwAAgGbk7r8lbrH/AQAAoBm5+/8RtzSx/4+t/Sv0/7Ps/yuP1v/r//X/+n/20/8P22b/f687rf+y3v/fev+fH0H/r//X/zOKqfX/ufv/Gbc0sf8BAACA2+Xu/1fcYv8DAABAM3L3/ztusf8BAACgGbn7b41bOtn/a/r/k/UX6v8Hef9//+fX/6/+/tD/6//1/xef/n+Y9//X0P97/1//r/9nVFPr/3P3/ydu6WT/AwAAQA9y998Wt9j/AAAA0Izc/f+NW+x/AAAAaEbu/v/FLZ3sf+//z6n/v0L/r//X/+v/9f9r6P+H6f/X0P/r//X/+n9GNbX+P3f//wMAAP//qbtNJQ==")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1.891884198s ago: executing program 6 (id=2638):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000380)=ANY=[@ANYBLOB='uni_xlate=0,uni_xlate=1,iocharset=cp869,shortname=win95,codepage=949,flush,allow_utime=00000000000000000177777,shortname=lower,utf8=1,umask=0000000000010,nonumtail=0,utf8=0,\x00'/184], 0xfe, 0x34e, &(0x7f0000000440)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001f80)=""/4094, 0xffe)

1.887604099s ago: executing program 4 (id=2639):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x43}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004090)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700880000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4800)

1.731479646s ago: executing program 3 (id=2640):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200))
ioctl$EVIOCGABS20(r0, 0x40044591, 0x0)

1.609566901s ago: executing program 4 (id=2641):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200018, &(0x7f0000000100)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x6}}, {@norecovery}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@mblk_io_submit}, {@norecovery}]}, 0x3, 0x5a8, &(0x7f0000000a40)="$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")
setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000280)={0x0, 0xfb, 0x381, 0x4, 0x3, '\x00', "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"}, 0x381, 0x1)
rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00')

1.419557219s ago: executing program 3 (id=2642):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
listen(r0, 0x80000000)

1.091532423s ago: executing program 3 (id=2643):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0xf7e)
read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000)

821.492715ms ago: executing program 6 (id=2644):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020202001400020077673200000000000000000000000000090001"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0)

798.304796ms ago: executing program 4 (id=2645):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c720000f5ffffff2fad0a4883cdbba10a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)

550.291567ms ago: executing program 4 (id=2646):
r0 = syz_usbip_server_init(0x1)
syz_usb_connect(0x0, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608"], 0x0)
write$usbip_server(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35)

514.799988ms ago: executing program 6 (id=2647):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001280), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, r1, 0x407, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000)

185.424522ms ago: executing program 7 (id=2648):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe)
recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x10043)

185.112102ms ago: executing program 6 (id=2649):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x20200)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x5, 0x0, 0xff, 0x105})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x5, 0x0, 0x9, 0x8})

70.723787ms ago: executing program 3 (id=2650):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x588, &(0x7f0000000600)="$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")
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x27d, 0xe, 0x0, 0x8, 0x1})

0s ago: executing program 6 (id=2651):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fcntl$notify(r0, 0x402, 0x37)
getdents(r0, &(0x7f0000000100)=""/31, 0x1f)

kernel console output (not intermixed with test programs):

8] device veth1_macvtap entered promiscuous mode
[  226.779891][ T9148] device macsec0 left promiscuous mode
[  226.803456][ T9150] loop1: detected capacity change from 0 to 1024
[  226.805388][ T5960] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  226.826501][ T9154] loop5: detected capacity change from 0 to 64
[  226.878882][ T9131] loop6: detected capacity change from 0 to 40427
[  226.929750][   T26] audit: type=1800 audit(1779143415.936:37): pid=9150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1782" name="file1" dev="loop1" ino=20 res=0 errno=0
[  226.959170][ T9131] F2FS-fs (loop6): invalid crc value
[  226.971211][ T9131] F2FS-fs (loop6): Found nat_bits in checkpoint
[  227.063365][ T4323] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  227.145514][ T9131] F2FS-fs (loop6): recover fsync data on readonly fs
[  227.181589][ T9131] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  227.254107][ T4323] usb 5-1: Using ep0 maxpacket: 16
[  227.272328][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.303691][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.324062][ T9163] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  227.330860][ T4323] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  227.354846][ T9163] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  227.385987][ T4355] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  227.403054][ T9163] EXT4-fs (loop3): 1 truncate cleaned up
[  227.422842][ T4323] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[  227.447388][ T9163] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  227.462334][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.495128][ T4323] usb 5-1: config 0 descriptor??
[  227.597410][ T4355] usb 6-1: config 0 has an invalid interface number: 117 but max is 0
[  227.636217][ T4355] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.677949][ T4355] usb 6-1: config 0 has no interface number 0
[  227.686650][ T4355] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  227.726773][ T4355] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  227.769619][ T4355] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  227.793521][ T4355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.803959][ T4355] usb 6-1: Product: syz
[  227.808632][ T4355] usb 6-1: Manufacturer: syz
[  227.813400][ T4355] usb 6-1: SerialNumber: syz
[  227.821183][ T4355] usb 6-1: config 0 descriptor??
[  227.834615][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  227.965669][ T4323] a4tech 0003:09DA:000A.000E: unknown main item tag 0x4
[  227.993285][ T4323] a4tech 0003:09DA:000A.000E: unknown main item tag 0x5
[  228.013642][ T4323] a4tech 0003:09DA:000A.000E: unknown main item tag 0x7
[  228.034159][ T4323] a4tech 0003:09DA:000A.000E: collection stack underflow
[  228.055202][ T4323] a4tech 0003:09DA:000A.000E: item 0 2 0 12 parsing failed
[  228.072912][ T4323] a4tech 0003:09DA:000A.000E: parse failed
[  228.085388][ T4323] a4tech: probe of 0003:09DA:000A.000E failed with error -22
[  228.167000][ T5777] usb 5-1: USB disconnect, device number 13
[  228.358195][ T9186] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1796'.
[  228.389711][ T9186] sch_fq: defrate 4294967295 ignored.
[  228.452957][ T5777] usb 6-1: USB disconnect, device number 5
[  228.494895][ T9192] set_capacity_and_notify: 1 callbacks suppressed
[  228.494911][ T9192] loop6: detected capacity change from 0 to 1024
[  228.583198][ T4355] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  228.600198][ T5925] hfsplus: b-tree write err: -5, ino 25
[  228.622183][ T5925] hfsplus: b-tree write err: -5, ino 4
[  228.627759][ T5925] hfsplus: b-tree write err: -5, ino 2
[  228.807140][ T4355] usb 2-1: Using ep0 maxpacket: 32
[  228.814317][ T4355] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  228.839794][ T4355] usb 2-1: config 0 has no interface number 0
[  228.863558][ T4355] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  228.888238][ T4355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.906804][ T4355] usb 2-1: Product: syz
[  228.915197][ T4355] usb 2-1: Manufacturer: syz
[  228.920097][ T4355] usb 2-1: SerialNumber: syz
[  228.927744][ T4355] usb 2-1: config 0 descriptor??
[  228.942411][ T4355] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  228.952201][ T4355] usb 2-1: selecting invalid altsetting 1
[  228.959978][ T4355] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  228.970873][ T4355] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  228.982175][ T4355] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  228.990761][ T4355] usb 2-1: media controller created
[  229.019800][ T4355] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  229.153613][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1809'.
[  229.360472][ T9224] device vlan2 entered promiscuous mode
[  229.381074][ T9224] device macvlan0 entered promiscuous mode
[  229.493822][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1814'.
[  229.520498][ T9229] device gretap0 entered promiscuous mode
[  229.527579][ T9229] device macvlan2 entered promiscuous mode
[  229.732755][ T9242] loop6: detected capacity change from 0 to 256
[  229.750541][ T9242] exfat: Deprecated parameter 'utf8'
[  229.766451][ T9242] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d)
[  230.150129][ T4355] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  230.164633][ T4355] zl10353_read_register: readreg error (reg=127, ret==-110)
[  230.199263][ T4355] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  230.263594][ T4355] usb 2-1: USB disconnect, device number 9
[  230.396500][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1829'.
[  230.528332][ T9273] netlink: 'syz.3.1834': attribute type 5 has an invalid length.
[  232.092418][ T9334] loop6: detected capacity change from 0 to 4096
[  232.116889][ T9334] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  232.157627][   T48] Bluetooth: hci3: command 0x0000 tx timeout
[  232.181675][ T9334] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  232.462066][ T9350] loop4: detected capacity change from 0 to 2048
[  232.510684][ T9350] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  232.541143][ T9350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.629516][ T4323] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  232.679379][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1871'.
[  232.820358][ T4323] usb 4-1: Using ep0 maxpacket: 8
[  232.828973][ T4323] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[  232.859304][ T4323] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  232.890612][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.898664][ T4323] usb 4-1: Product: syz
[  232.920564][ T4323] usb 4-1: Manufacturer: syz
[  232.926847][ T4323] usb 4-1: SerialNumber: syz
[  232.956287][ T4323] usb 4-1: config 0 descriptor??
[  232.982639][ T4323] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  233.000844][ T4323] usb 4-1: setting power ON
[  233.005578][ T4323] dvb-usb: bulk message failed: -22 (2/0)
[  233.042221][ T4323] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  233.079936][ T4323] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  233.086439][ T9366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1876'.
[  233.098301][ T4323] usb 4-1: media controller created
[  233.140334][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  233.184003][ T9347] dvb-usb: bulk message failed: -22 (3/0)
[  233.189785][ T9347] dvb-usb: bulk message failed: -22 (4/0)
[  233.214873][ T9347] cxusb: i2c read failed
[  233.221764][ T4323] usb 4-1: selecting invalid altsetting 6
[  233.227532][ T4323] usb 4-1: digital interface selection failed (-22)
[  233.244605][ T4323] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  233.272684][ T4323] usb 4-1: setting power OFF
[  233.298830][ T4323] dvb-usb: bulk message failed: -22 (2/0)
[  233.317606][ T4323] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  233.327765][ T4323] (NULL device *): no alternate interface
[  233.399288][ T4323] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  233.451775][ T4323] usb 4-1: USB disconnect, device number 9
[  233.798862][ T5298] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  233.984516][ T5298] usb 2-1: Using ep0 maxpacket: 16
[  234.005397][ T5298] usb 2-1: unable to get BOS descriptor or descriptor too short
[  234.020708][ T5298] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  234.050651][ T5298] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  234.080406][ T5298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.105215][ T5298] usb 2-1: Product: syz
[  234.109466][ T5298] usb 2-1: Manufacturer: syz
[  234.145251][ T5298] usb 2-1: SerialNumber: syz
[  234.262134][ T9411] loop3: detected capacity change from 0 to 1024
[  234.282806][ T9411] EXT4-fs: Ignoring removed nobh option
[  234.314668][ T9411] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  234.353057][ T9411] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block
[  234.353057][ T9411] 
[  234.378943][ T5298] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  234.401064][ T5298] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  234.593778][ T5298] usb 2-1: 2:1 : can't get High Capability descriptor
[  234.842811][ T5298] usb 2-1: USB disconnect, device number 10
[  234.848019][ T9401] loop5: detected capacity change from 0 to 32768
[  234.917902][ T4318] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  235.118555][ T4318] usb 4-1: Using ep0 maxpacket: 32
[  235.126735][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.161472][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.198745][ T4318] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  235.207830][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.258290][ T4318] usb 4-1: config 0 descriptor??
[  235.679381][ T4318] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0
[  235.693393][ T4318] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0
[  235.704787][ T9444] loop1: detected capacity change from 0 to 4096
[  235.741524][ T4318] zydacron 0003:13EC:0006.000F: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0
[  235.747586][ T9444] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  235.882518][ T3598] usb 4-1: USB disconnect, device number 10
[  236.135827][ T4283] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22.
[  236.150068][ T4283] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22.
[  236.211998][ T4283] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  236.239776][ T9457] fido_id[9457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  236.927445][ T9451] loop5: detected capacity change from 0 to 32768
[  237.101782][ T9451] XFS (loop5): Mounting V5 Filesystem
[  237.132019][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1922'.
[  237.246072][ T9451] XFS (loop5): Ending clean mount
[  237.333919][ T9511] loop3: detected capacity change from 0 to 512
[  237.444922][ T9511] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  237.445013][ T9511] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  237.452721][ T9511] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 3: comm syz.3.1924: lblock 8 mapped to illegal pblock 3 (length 26)
[  237.459263][ T9520] UBIFS error (pid: 9520): cannot open "upperdir=./file1,", error -22
[  237.576815][ T5836] XFS (loop5): Unmounting Filesystem
[  237.613829][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  237.924454][ T9531] blktrace: Concurrent blktraces are not allowed on loop7
[  238.225193][ T9543] loop6: detected capacity change from 0 to 128
[  238.315685][ T9545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  238.359073][ T9543] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  238.455048][ T9543] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.695712][ T9562] loop5: detected capacity change from 0 to 128
[  238.767771][ T8496] EXT4-fs (loop6): unmounting filesystem.
[  238.794553][ T9562] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  238.925466][ T9562] ext4 filesystem being mounted at /262/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  239.101799][ T5836] EXT4-fs (loop5): unmounting filesystem.
[  239.128036][ T9576] blktrace: Concurrent blktraces are not allowed on loop7
[  239.340128][ T9585] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0
[  239.608887][ T9592] loop5: detected capacity change from 0 to 4096
[  239.705682][ T9601] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  239.770948][ T9564] loop4: detected capacity change from 0 to 40427
[  239.824784][ T9564] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff
[  239.862493][ T9564] F2FS-fs (loop4): invalid crc value
[  239.918071][ T9564] F2FS-fs (loop4): Found nat_bits in checkpoint
[  240.046539][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1956'.
[  240.075216][ T9611] block nbd0: Unsupported socket: should be TCP or UNIX.
[  240.098819][ T9564] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  240.159408][ T9614] loop3: detected capacity change from 0 to 128
[  240.204594][ T9614] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  240.314037][ T9614] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  240.437299][ T4275] syz-executor: attempt to access beyond end of device
[  240.437299][ T4275] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  240.452804][    T9] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  240.707528][   T26] audit: type=1326 audit(1779143429.664:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.3.1964" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536579ce59 code=0x7ffc0000
[  240.799822][   T26] audit: type=1326 audit(1779143429.704:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.3.1964" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f536579ce59 code=0x7ffc0000
[  240.922727][   T26] audit: type=1326 audit(1779143429.704:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.3.1964" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536579ce59 code=0x7ffc0000
[  241.049328][   T26] audit: type=1326 audit(1779143429.704:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.3.1964" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f536579ce59 code=0x7ffc0000
[  241.175215][   T26] audit: type=1326 audit(1779143429.704:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.3.1964" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536579ce59 code=0x7ffc0000
[  241.717179][ T5547] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  241.930296][ T5547] usb 6-1: not running at top speed; connect to a high speed hub
[  241.955866][ T5547] usb 6-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40
[  241.986017][ T5547] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.014208][ T9666] loop3: detected capacity change from 0 to 256
[  242.030923][ T5547] usb 6-1: Product: syz
[  242.035162][ T5547] usb 6-1: Manufacturer: syz
[  242.069304][ T9666] exfat: Deprecated parameter 'utf8'
[  242.074812][ T5547] usb 6-1: SerialNumber: syz
[  242.107106][ T9666] exfat: Deprecated parameter 'utf8'
[  242.314178][ T5547] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  242.334460][ T9655] loop4: detected capacity change from 0 to 32768
[  242.345535][ T5547] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  242.383882][ T9666] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d)
[  242.463840][ T5547] snd-usb-audio: probe of 6-1:1.0 failed with error -71
[  242.517532][ T5547] usb 6-1: USB disconnect, device number 6
[  242.558726][ T9655] 
[  242.558726][ T9655]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  242.558726][ T9655] 
[  242.687627][ T9655] jfs_create: dtInsert returned -EIO
[  242.702989][ T5299] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  242.716873][ T9673] loop6: detected capacity change from 0 to 4096
[  242.753314][ T4287] Bluetooth: hci0: command 0x0406 tx timeout
[  242.763981][ T9655] ERROR: (device loop4): jfs_create: 
[  242.763981][ T9655] 
[  243.110128][ T5299] usb 2-1: Using ep0 maxpacket: 32
[  243.152306][ T4275] 
[  243.152306][ T4275]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  243.152306][ T4275] 
[  243.229832][ T4275] 
[  243.229832][ T4275]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  243.229832][ T4275] 
[  243.229900][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  243.324746][ T5299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  243.345532][ T5299] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.411004][ T5299] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.466644][ T5299] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  243.548816][ T5299] usb 2-1: config 0 interface 0 has no altsetting 0
[  243.569082][ T9676] loop3: detected capacity change from 0 to 131072
[  243.613182][ T5299] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  243.631863][ T9676] F2FS-fs (loop3): Test dummy encryption mode enabled
[  243.640231][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.675954][ T4454] udevd[4454]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  243.687224][ T5299] usb 2-1: config 0 descriptor??
[  243.703977][ T9676] F2FS-fs (loop3): invalid crc value
[  243.736493][ T9676] F2FS-fs (loop3): Found nat_bits in checkpoint
[  243.775571][ T9676] F2FS-fs (loop3): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[  243.905484][ T9676] F2FS-fs (loop3): Failed to read root inode
[  244.094502][ T9673] ntfs3: loop6: failed to convert "0080" to cp737
[  244.150047][ T9673] ntfs3: loop6: failed to convert name for inode 1e.
[  244.239564][ T5299] corsair-psu 0003:1B1C:1C09.0010: item fetching failed at offset 0/5
[  244.252311][ T9698] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  244.292058][ T5299] corsair-psu: probe of 0003:1B1C:1C09.0010 failed with error -22
[  244.488314][ T9703] loop4: detected capacity change from 0 to 16
[  244.529423][ T4318] usb 2-1: USB disconnect, device number 11
[  244.612223][ T9703] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature a50000, please upgrade kernel version
[  245.007130][ T9719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1992'.
[  245.050428][ T9719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1992'.
[  245.280563][ T9724] loop6: detected capacity change from 0 to 256
[  245.296839][ T9726] loop1: detected capacity change from 0 to 256
[  245.334339][ T9724] exfat: Deprecated parameter 'namecase'
[  245.387364][ T9724] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x20641574, utbl_chksum : 0xe619d30d)
[  245.474813][ T9711] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  246.355013][ T9721] loop4: detected capacity change from 0 to 40427
[  246.381702][ T9721] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  246.399265][ T9721] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  246.424451][ T9712] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  246.450345][ T9712] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  246.500161][ T9721] F2FS-fs (loop4): Found nat_bits in checkpoint
[  246.527851][ T9712] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  246.561922][ T9712] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  246.608010][ T9712] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  246.657226][ T9712] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  246.671100][ T9712] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  246.689300][ T9712] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  246.708687][ T9712] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  246.766074][ T9712] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  246.779251][ T9712] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  246.802785][ T9721] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  246.808337][ T9736] loop6: detected capacity change from 0 to 32768
[  246.810298][ T9712] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  246.822261][ T9721] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  246.861305][ T9736] 
[  246.861305][ T9736]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  246.861305][ T9736] 
[  246.862729][ T9712] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  246.948682][ T9736] ERROR: (device loop6): diWrite: ixpxd invalid
[  246.948682][ T9736] 
[  246.987678][ T9736] ERROR: (device loop6): txCommit: 
[  246.987678][ T9736] 
[  247.044791][ T9736] ERROR: (device loop6): dtSearch: stack overrun!
[  247.044791][ T9736] 
[  247.103929][ T4275] syz-executor: attempt to access beyond end of device
[  247.103929][ T4275] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  247.104610][ T9736] btstack dump:
[  247.195290][ T9736] bn = 0, index = 0
[  247.215532][ T9736] bn = 0, index = 0
[  247.271691][ T9736] bn = 0, index = 0
[  247.275550][ T9736] bn = 0, index = 0
[  247.308692][ T9736] bn = 0, index = 0
[  247.331717][ T9736] bn = 0, index = 0
[  247.374459][ T9736] bn = 0, index = 0
[  247.379220][ T9736] bn = 0, index = 0
[  247.383064][ T9736] jfs_mkdir: dtSearch returned -5
[  247.524967][ T8496] 
[  247.524967][ T8496]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  247.524967][ T8496] 
[  247.525515][ T8496] 
[  247.525515][ T8496]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  247.525515][ T8496] 
[  248.103966][ T9768] loop4: detected capacity change from 0 to 1024
[  248.266449][ T9757] loop5: detected capacity change from 0 to 32768
[  248.421583][   T26] audit: type=1800 audit(1779143437.360:43): pid=9757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2003" name="file1" dev="loop5" ino=4 res=0 errno=0
[  248.451812][ T9757] ERROR: (device loop5): diAllocAG: ipimap->i_size is wrong
[  248.451812][ T9757] 
[  248.472081][   T48] Bluetooth: hci1: command 0x0c1a tx timeout
[  248.491237][ T9757] ERROR: (device loop5): remounting filesystem as read-only
[  248.547647][ T9757] ialloc: diAlloc returned -5!
[  248.615200][   T48] Bluetooth: hci2: command 0x0c1a tx timeout
[  248.692387][   T48] Bluetooth: hci4: command 0x0c1a tx timeout
[  248.794262][ T9780] device macsec2 entered promiscuous mode
[  248.843402][   T48] Bluetooth: hci3: command 0x0c1a tx timeout
[  249.433186][ T9800] loop1: detected capacity change from 0 to 128
[  249.466845][ T5777] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  249.496731][ T9800] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  249.564310][ T9800] hpfs: filesystem error: improperly stopped
[  249.575822][ T9800] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  249.634525][ T9800] hpfs: You really don't want any checks? You are crazy...
[  249.688355][ T9800] hpfs: hpfs_map_sector(): read error
[  249.715079][ T9800] hpfs: code page support is disabled
[  249.736652][ T9800] hpfs: hpfs_map_4sectors(): unaligned read
[  249.755695][ T9800] hpfs: hpfs_map_4sectors(): unaligned read
[  249.779939][ T9800] hpfs: filesystem error: unable to find root dir
[  249.910401][ T5777] usb 6-1: unable to get BOS descriptor or descriptor too short
[  250.009269][ T9809] sctp: [Deprecated]: syz.1.2021 (pid 9809) Use of int in maxseg socket option.
[  250.009269][ T9809] Use struct sctp_assoc_value instead
[  250.095410][ T5777] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  250.099018][ T9786] loop3: detected capacity change from 0 to 40427
[  250.118470][ T5777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.131092][ T5777] usb 6-1: Product: syz
[  250.135283][ T5777] usb 6-1: Manufacturer: syz
[  250.139892][ T5777] usb 6-1: SerialNumber: syz
[  250.176216][ T9786] F2FS-fs (loop3): invalid crc value
[  250.196616][ T5777] usb 6-1: selecting invalid altsetting 1
[  250.207674][ T5777] usb 6-1: unit 6 not found!
[  250.234371][ T9786] F2FS-fs (loop3): Found nat_bits in checkpoint
[  250.276057][ T4318] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  250.343411][ T9786] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  250.418093][ T5777] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2)
[  250.451595][ T5777] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  250.471165][ T4318] usb 5-1: Using ep0 maxpacket: 32
[  250.479626][ T4318] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  250.483623][ T5777] usb 6-1: selecting invalid altsetting 1
[  250.500640][ T4318] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  250.504855][ T5777] usb 6-1: unit 6 not found!
[  250.526333][ T4274] syz-executor: attempt to access beyond end of device
[  250.526333][ T4274] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  250.539490][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  250.551857][ T4318] usb 5-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40
[  250.571300][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.597096][ T4318] usb 5-1: Product: syz
[  250.611802][ T4318] usb 5-1: Manufacturer: syz
[  250.616436][ T4318] usb 5-1: SerialNumber: syz
[  250.657078][ T5777] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2)
[  250.675287][ T5777] snd-usb-audio: probe of 6-1:1.1 failed with error -22
[  250.686737][   T48] Bluetooth: hci2: command 0x0406 tx timeout
[  250.695517][ T5777] usb 6-1: selecting invalid altsetting 1
[  250.715392][ T5777] usb 6-1: unit 6 not found!
[  250.729143][ T5777] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2)
[  250.772272][ T5777] snd-usb-audio: probe of 6-1:1.2 failed with error -22
[  250.783864][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[  250.820012][ T5777] usb 6-1: USB disconnect, device number 7
[  250.873198][ T4318] usb 5-1: unit 8 not found!
[  250.957419][   T48] Bluetooth: hci3: command 0x0406 tx timeout
[  251.016429][ T4318] snd-usb-audio: probe of 5-1:1.1 failed with error -16
[  251.070905][ T4318] usb 5-1: USB disconnect, device number 14
[  251.168093][ T4454] udevd[4454]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  251.860064][ T9838] loop3: detected capacity change from 0 to 1764
[  252.002531][ T9846] loop6: detected capacity change from 0 to 128
[  252.051570][ T9846] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  252.202091][ T9848] loop1: detected capacity change from 0 to 512
[  252.226477][ T9846] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  252.292770][ T9848] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  252.411559][ T9848] EXT4-fs (loop1): 1 truncate cleaned up
[  252.417521][ T9848] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  252.539127][ T4283] EXT4-fs (loop1): unmounting filesystem.
[  252.651123][ T9858] loop4: detected capacity change from 0 to 2048
[  252.742639][ T9858] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  252.886026][ T9858] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  252.942683][ T9858] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  252.953967][ T9858] UDF-fs: Scanning with blocksize 512 failed
[  252.957519][ T9873] loop3: detected capacity change from 0 to 256
[  253.122316][ T9858] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  253.204689][ T9879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2048'.
[  253.450200][ T9883] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma?
[  253.673936][ T9885] loop6: detected capacity change from 0 to 8192
[  253.751492][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'.
[  253.922487][ T9897] loop5: detected capacity change from 0 to 2048
[  254.066103][ T9902] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  254.087276][   T26] audit: type=1326 audit(1779143443.023:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.6.2061" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f0219ce59 code=0x0
[  254.481122][ T9902] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  254.506655][ T9902] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  254.533809][ T9912] loop1: detected capacity change from 0 to 4096
[  254.551663][ T9912] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  254.573523][ T9902] Remounting filesystem read-only
[  254.583661][ T5836] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  255.042825][ T9921] loop5: detected capacity change from 0 to 64
[  255.144728][ T9923] netlink: 51 bytes leftover after parsing attributes in process `syz.6.2070'.
[  255.225362][ T9901] loop4: detected capacity change from 0 to 32768
[  255.415324][ T9901] XFS (loop4): Mounting V5 Filesystem
[  255.420871][ T9930] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2072'.
[  255.644422][ T9901] XFS (loop4): Ending clean mount
[  255.729670][ T9901] XFS (loop4): Quotacheck needed: Please wait.
[  255.914719][ T9901] XFS (loop4): Quotacheck: Done.
[  255.941430][ T5777] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  256.049748][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  256.235921][ T5777] usb 6-1: Using ep0 maxpacket: 16
[  256.282992][ T9954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2081'.
[  256.310307][ T9954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2081'.
[  256.330603][ T5777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.341861][ T4275] XFS (loop4): Unmounting Filesystem
[  256.357990][ T5777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.378864][ T9956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2081'.
[  256.406703][ T5777] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  256.447279][ T5777] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  256.447309][ T5777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.448927][ T5777] usb 6-1: config 0 descriptor??
[  256.905356][ T5777] microsoft 0003:045E:07DA.0011: No inputs registered, leaving
[  256.927516][ T5777] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  256.961362][ T5777] microsoft 0003:045E:07DA.0011: no inputs found
[  256.978499][ T5777] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway
[  257.135392][ T5777] usb 6-1: USB disconnect, device number 8
[  257.182580][ T9966] set_capacity_and_notify: 1 callbacks suppressed
[  257.182597][ T9966] loop6: detected capacity change from 0 to 8
[  257.182905][ T9958] loop3: detected capacity change from 0 to 32768
[  257.268834][ T9958] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2084 (9958)
[  257.329406][ T9964] fido_id[9964]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  257.397309][ T9958] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  257.408844][ T9958] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  257.435929][ T9958] BTRFS info (device loop3): turning on sync discard
[  257.461926][ T9958] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  257.489337][ T9958] BTRFS info (device loop3): use zstd compression, level 3
[  257.496625][ T9958] BTRFS info (device loop3): turning on async discard
[  257.570801][ T9958] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  257.649214][ T9958] BTRFS info (device loop3): trying to use backup root at mount time
[  257.683191][ T9958] BTRFS info (device loop3): enabling auto defrag
[  257.727919][ T9974] loop6: detected capacity change from 0 to 64
[  257.738738][ T9958] BTRFS info (device loop3): using free space tree
[  257.917525][ T9974] hfs: bad catalog entry type 65409
[  258.094155][ T4345] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  258.186931][ T9958] BTRFS error (device loop3): failed to load root extent
[  258.208835][ T9958] BTRFS warning (device loop3): try to load backup roots slot 1
[  258.242930][ T5960] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  258.268869][ T9958] BTRFS warning (device loop3): couldn't read tree root
[  258.275915][ T9958] BTRFS warning (device loop3): try to load backup roots slot 2
[  258.327886][ T9958] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  258.371515][ T9958] BTRFS warning (device loop3): couldn't read tree root
[  258.379061][ T9996] tipc: Started in network mode
[  258.384079][ T9996] tipc: Node identity 6, cluster identity 9
[  258.408626][ T9958] BTRFS warning (device loop3): try to load backup roots slot 3
[  258.414442][ T9996] tipc: Node number set to 6
[  258.464291][ T9958] BTRFS info (device loop3): enabling ssd optimizations
[  258.472069][ T9958] BTRFS info (device loop3): rebuilding free space tree
[  258.628779][ T9958] BTRFS info (device loop3): checking UUID tree
[  258.735958][T10006] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2094'.
[  258.807602][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'.
[  258.905451][ T4274] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  259.324707][ T9990] loop5: detected capacity change from 0 to 40427
[  259.350448][ T9994] loop1: detected capacity change from 0 to 32768
[  259.407722][ T9990] F2FS-fs (loop5): invalid crc value
[  259.480199][   T26] audit: type=1800 audit(1779143448.409:45): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2090" name="file1" dev="loop1" ino=4 res=0 errno=0
[  259.524495][ T9990] F2FS-fs (loop5): Found nat_bits in checkpoint
[  259.525267][ T9994] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong
[  259.525267][ T9994] 
[  259.630089][ T9994] ERROR: (device loop1): remounting filesystem as read-only
[  259.661621][ T9994] ialloc: diAlloc returned -5!
[  259.697693][ T9990] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1
[  259.814938][ T9990] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  259.827061][T10022] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2101'.
[  259.910148][T10022] smc: net device nr0 applied user defined pnetid SY
[  259.962008][   T26] audit: type=1800 audit(1779143448.888:46): pid=9990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2091" name="file1" dev="loop5" ino=10 res=0 errno=0
[  260.123131][ T5836] syz-executor: attempt to access beyond end of device
[  260.123131][ T5836] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  260.649464][T10044] loop4: detected capacity change from 0 to 1024
[  260.753879][   T26] audit: type=1800 audit(1779143449.678:47): pid=10044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2111" name="file1" dev="loop4" ino=20 res=0 errno=0
[  260.755090][T10044] syz.4.2111: attempt to access beyond end of device
[  260.755090][T10044] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  261.047080][T10050] loop6: detected capacity change from 0 to 4096
[  261.115611][T10050] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing.
[  261.152516][T10050] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  261.204496][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2117'.
[  261.219209][T10050] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  261.271793][T10050] ntfs: volume version 3.1.
[  261.277720][T10060] tipc: Started in network mode
[  261.310846][T10060] tipc: Node identity 6, cluster identity 9
[  261.360999][T10060] tipc: Node number set to 6
[  261.520945][ T8496] ntfs: (device loop6): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  262.024416][T10076] overlayfs: unrecognized mount option "\" or missing value
[  262.292939][T10082] loop6: detected capacity change from 0 to 256
[  262.351023][T10082] exfat: Deprecated parameter 'utf8'
[  262.385903][T10082] exfat: Deprecated parameter 'namecase'
[  262.424635][T10082] exfat: Deprecated parameter 'namecase'
[  262.593011][T10082] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  262.746116][T10056] loop4: detected capacity change from 0 to 40427
[  262.757421][T10093] tipc: Started in network mode
[  262.771837][T10093] tipc: Node identity 6, cluster identity 9
[  262.856313][T10093] tipc: Node number set to 6
[  262.867181][T10056] F2FS-fs (loop4): invalid crc value
[  262.939130][T10056] F2FS-fs (loop4): Found nat_bits in checkpoint
[  262.958937][T10097] device bridge0 entered promiscuous mode
[  262.997543][T10095] device bridge0 left promiscuous mode
[  263.213074][T10056] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  263.252632][T10109] loop5: detected capacity change from 0 to 256
[  263.347193][T10109] FAT-fs (loop5): Directory bread(block 64) failed
[  263.385255][T10104] loop1: detected capacity change from 0 to 4096
[  263.407397][T10109] FAT-fs (loop5): Directory bread(block 65) failed
[  263.458636][T10109] FAT-fs (loop5): Directory bread(block 66) failed
[  263.470719][T10104] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  263.501022][T10109] FAT-fs (loop5): Directory bread(block 67) failed
[  263.517212][ T4275] syz-executor: attempt to access beyond end of device
[  263.517212][ T4275] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  263.544923][T10109] FAT-fs (loop5): Directory bread(block 68) failed
[  263.613264][T10109] FAT-fs (loop5): Directory bread(block 69) failed
[  263.619908][T10109] FAT-fs (loop5): Directory bread(block 70) failed
[  263.722694][T10109] FAT-fs (loop5): Directory bread(block 71) failed
[  263.729377][T10109] FAT-fs (loop5): Directory bread(block 72) failed
[  263.765397][T10109] FAT-fs (loop5): Directory bread(block 73) failed
[  264.188684][T10122] netlink: 'syz.1.2147': attribute type 29 has an invalid length.
[  264.245972][T10122] netlink: 'syz.1.2147': attribute type 29 has an invalid length.
[  264.278784][T10123] netlink: 'syz.1.2147': attribute type 29 has an invalid length.
[  264.596597][T10135] loop1: detected capacity change from 0 to 164
[  264.802071][T10113] loop3: detected capacity change from 0 to 32768
[  265.094989][T10146] loop5: detected capacity change from 0 to 256
[  265.196111][T10146] FAT-fs (loop5): Directory bread(block 64) failed
[  265.221135][T10146] FAT-fs (loop5): Directory bread(block 65) failed
[  265.263864][T10146] FAT-fs (loop5): Directory bread(block 66) failed
[  265.270634][T10146] FAT-fs (loop5): Directory bread(block 67) failed
[  265.303539][T10146] FAT-fs (loop5): Directory bread(block 68) failed
[  265.310120][T10146] FAT-fs (loop5): Directory bread(block 69) failed
[  265.345048][T10146] FAT-fs (loop5): Directory bread(block 70) failed
[  265.363111][T10146] FAT-fs (loop5): Directory bread(block 71) failed
[  265.394104][T10146] FAT-fs (loop5): Directory bread(block 72) failed
[  265.400682][T10146] FAT-fs (loop5): Directory bread(block 73) failed
[  266.027583][T10171] netlink: 'syz.5.2168': attribute type 4 has an invalid length.
[  266.093530][T10171] netlink: 'syz.5.2168': attribute type 1 has an invalid length.
[  266.123540][T10171] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.2168'.
[  266.519356][T10152] loop1: detected capacity change from 0 to 32768
[  266.529715][T10186] loop6: detected capacity change from 0 to 256
[  266.557910][T10186] exfat: Deprecated parameter 'utf8'
[  266.563304][T10186] exfat: Deprecated parameter 'namecase'
[  266.788666][T10186] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  267.572288][T10206] loop5: detected capacity change from 0 to 32768
[  267.615483][T10206] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  267.623689][T10206] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  267.684160][T10206] syz.5.2187: attempt to access beyond end of device
[  267.684160][T10206] loop5: rw=12288, sector=549755814040, nr_sectors = 8 limit=32768
[  267.698714][T10206] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5
[  267.759916][T10212] loop6: detected capacity change from 0 to 4096
[  267.814093][T10212] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  267.995122][T10212] ntfs3: loop6: failed to convert "076c" to iso8859-5
[  268.055768][T10212] ntfs3: loop6: ino=5, "/" directory corrupted
[  268.170763][T10220] loop3: detected capacity change from 0 to 512
[  268.290728][T10210] loop4: detected capacity change from 0 to 32768
[  268.326473][T10220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  268.353212][T10210] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2189 (10210)
[  268.440181][T10220] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.515252][T10210] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  268.552068][T10210] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  268.605422][T10210] BTRFS info (device loop4): allowing degraded mounts
[  268.608876][T10220] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:106: comm syz.3.2194: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  268.626571][T10210] BTRFS info (device loop4): setting nodatasum
[  268.671217][T10210] BTRFS info (device loop4): disabling tree log
[  268.695732][T10210] BTRFS info (device loop4): using free space tree
[  268.771740][T10230] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem
[  268.960189][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  269.320351][ T4275] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  269.446570][   T26] audit: type=1326 audit(1779143458.373:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10257 comm="syz.3.2203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f536579ce59 code=0x0
[  269.564378][ T4454] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4454)
[  270.047150][T10256] loop6: detected capacity change from 0 to 32768
[  270.070616][T10266] tipc: Enabled bearer <eth:macvlan0>, priority 0
[  270.164376][T10256] read_mapping_page failed!
[  270.178517][T10256] ERROR: (device loop6): txCommit: 
[  270.178517][T10256] 
[  270.781092][ T4323] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  270.978463][ T4323] usb 5-1: Using ep0 maxpacket: 8
[  270.993729][ T4323] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64
[  271.032588][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  271.055389][ T4323] usb 5-1: Product: syz
[  271.059603][ T4323] usb 5-1: Manufacturer: syz
[  271.082995][ T4323] usb 5-1: SerialNumber: syz
[  271.120865][ T4323] usb 5-1: config 0 descriptor??
[  271.144081][ T4323] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  271.158882][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  271.175090][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  271.184782][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  271.201880][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  271.211236][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  271.220777][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  271.232088][   T14] tipc: Node number set to 3758096386
[  271.329706][T10283] lo speed is unknown, defaulting to 1000
[  271.355152][ T4323] gspca_sn9c2028: read1 error -32
[  271.568882][ T4323] gspca_sn9c2028: read1 error -71
[  271.574005][ T4323] sn9c2028: probe of 5-1:0.0 failed with error -71
[  271.604005][ T4323] usb 5-1: USB disconnect, device number 15
[  271.691740][T10290] loop6: detected capacity change from 0 to 8192
[  271.781760][T10290]  loop6: p1 < > p2 < > p3 p4 < >
[  271.815589][T10290] loop6: partition table partially beyond EOD, truncated
[  271.857299][T10283] chnl_net:caif_netlink_parms(): no params data found
[  271.866740][T10290] loop6: p1 start 67108864 is beyond EOD, truncated
[  271.906272][T10290] loop6: p3 start 100859904 is beyond EOD, truncated
[  272.087645][T10283] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.115950][T10283] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.202584][T10283] device bridge_slave_0 entered promiscuous mode
[  272.275997][T10310] device team_slave_0 entered promiscuous mode
[  272.283055][T10310] device team_slave_1 entered promiscuous mode
[  272.309943][ T4454] I/O error, dev loop6, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  272.335545][T10314] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  272.360648][T10310] device macvtap1 entered promiscuous mode
[  272.384935][T10310] device team0 entered promiscuous mode
[  272.425939][T10310] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  272.433104][T10310] team0: Device macvtap1 is already an upper device of the team interface
[  272.529992][T10310] device team0 left promiscuous mode
[  272.535936][T10310] device team_slave_0 left promiscuous mode
[  272.541897][T10310] device team_slave_1 left promiscuous mode
[  272.583400][ T4454] udevd[4454]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  272.583488][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  272.727226][T10283] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.741943][T10283] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.773027][T10283] device bridge_slave_1 entered promiscuous mode
[  272.910432][T10283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.938220][T10283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.073879][T10283] team0: Port device team_slave_0 added
[  273.111018][T10283] team0: Port device team_slave_1 added
[  273.201335][T10283] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.233927][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.265826][ T4287] Bluetooth: hci4: command 0x0409 tx timeout
[  273.307624][T10283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.348374][ T5543] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  273.404058][T10283] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.416002][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.504720][T10283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.552482][ T5543] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  273.565869][ T5543] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  273.599197][ T5543] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  273.633782][ T5543] usb 5-1: config 220 has no interface number 2
[  273.640178][T10283] device hsr_slave_0 entered promiscuous mode
[  273.655693][T10283] device hsr_slave_1 entered promiscuous mode
[  273.678801][ T5543] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  273.679650][T10349] loop3: detected capacity change from 0 to 1024
[  273.698470][T10283] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  273.719634][T10283] Cannot create hsr debugfs directory
[  273.741622][ T5543] usb 5-1: config 220 interface 0 has no altsetting 0
[  273.776303][ T5543] usb 5-1: config 220 interface 76 has no altsetting 0
[  273.796503][T10349] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  273.798178][ T5543] usb 5-1: config 220 interface 1 has no altsetting 0
[  273.824509][ T5543] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  273.843799][ T5543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.854477][ T5543] usb 5-1: Product: syz
[  273.864005][ T5543] usb 5-1: Manufacturer: syz
[  273.870635][ T5543] usb 5-1: SerialNumber: syz
[  274.032086][T10353] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\Ãåý07†ðÿ$Áܲ¹" or missing value
[  274.090956][ T4323] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  274.113482][ T5543] usb 5-1: selecting invalid altsetting 0
[  274.135429][ T5543] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  274.141564][T10283] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  274.170569][ T5543] usb 5-1: No valid video chain found.
[  274.221432][T10283] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  274.230845][T10283] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  274.245023][ T5543] usb 5-1: selecting invalid altsetting 0
[  274.262379][ T5543] usbtest: probe of 5-1:220.1 failed with error -22
[  274.273707][ T5543] usb 5-1: USB disconnect, device number 16
[  274.296358][ T4323] usb 6-1: Using ep0 maxpacket: 32
[  274.315791][ T5774] kernel write not supported for file /input/event2 (pid: 5774 comm: kworker/1:12)
[  274.323782][ T4323] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  274.341973][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.358537][ T4323] usb 6-1: Product: syz
[  274.363426][ T4323] usb 6-1: Manufacturer: syz
[  274.368665][ T4323] usb 6-1: SerialNumber: syz
[  274.383748][ T4323] usb 6-1: config 0 descriptor??
[  274.385653][T10283] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  274.407974][ T4323] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  274.435634][ T4323] dvb-usb: bulk message failed: -22 (2/0)
[  274.463045][ T4323] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  274.514499][ T4323] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  274.528250][ T4323] usb 6-1: media controller created
[  274.569863][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  274.586577][T10283] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.598306][T10351] dvb-usb: bulk message failed: -22 (4/0)
[  274.606101][T10351] cxusb: i2c read failed
[  274.636681][ T4323] usb 6-1: selecting invalid altsetting 7
[  274.652128][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  274.652704][ T4323] cxusb: set interface failed
[  274.665393][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  274.693602][T10283] 8021q: adding VLAN 0 to HW filter on device team0
[  274.707028][ T4323] dvb-usb: bulk message failed: -22 (1/0)
[  274.727469][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  274.759583][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  274.806659][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.813792][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.822345][T10362] loop4: detected capacity change from 0 to 512
[  274.865194][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  274.892525][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  274.944543][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  274.970753][T10362] EXT4-fs (loop4): 1 truncate cleaned up
[  274.986724][T10362] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  275.004418][ T4323] DVB: Unable to find symbol lgdt330x_attach()
[  275.015242][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.018114][ T4323] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  275.022390][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.096823][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  275.141388][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  275.175565][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  275.215039][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  275.266386][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  275.307347][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  275.336861][ T4287] Bluetooth: hci4: command 0x041b tx timeout
[  275.359198][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  275.404088][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  275.406741][ T4323] rc_core: IR keymap rc-dvico-portable not found
[  275.441318][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  275.456219][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  275.466941][ T4323] Registered IR keymap rc-empty
[  275.500653][T10283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  275.519477][ T4323] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  275.569751][T10283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  275.577235][ T4323] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input22
[  275.617182][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  275.629873][T10377] loop4: detected capacity change from 0 to 512
[  275.646039][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  275.654617][ T4323] dvb-usb: schedule remote query interval to 100 msecs.
[  275.667586][ T4323] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  275.731393][T10381] loop3: detected capacity change from 0 to 512
[  275.750410][T10377] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  275.759416][ T4323] usb 6-1: USB disconnect, device number 9
[  275.770316][T10377] ext4 filesystem being mounted at /441/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  275.854315][T10381] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  275.876485][T10377] EXT4-fs error (device loop4): ext4_group_add:1746: inode #7: comm syz.4.2254: iget: checksum invalid
[  275.980007][ T4323] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  275.984305][T10381] EXT4-fs (loop3): 1 truncate cleaned up
[  276.008921][T10381] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  276.061346][T10377] EXT4-fs warning (device loop4): ext4_group_add:1748: Error opening resize inode
[  276.253199][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  276.303607][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  276.563526][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  276.597100][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  276.652940][T10283] 8021q: adding VLAN 0 to HW filter on device batadv0
[  276.763721][T10396] loop4: detected capacity change from 0 to 512
[  276.985514][T10387] loop5: detected capacity change from 0 to 32768
[  277.006098][T10396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  277.015498][T10396] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  277.226250][T10408] loop3: detected capacity change from 0 to 4096
[  277.270463][T10412] loop6: detected capacity change from 0 to 512
[  277.347065][T10408] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  277.357123][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  277.382169][T10412] EXT4-fs: Ignoring removed orlov option
[  277.417072][   T48] Bluetooth: hci4: command 0x040f tx timeout
[  277.443467][T10412] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  277.563476][T10412] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.2265: corrupted in-inode xattr
[  277.617926][T10408] ntfs3: loop3: failed to convert "076c" to iso8859-5
[  277.618259][T10412] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.2265: couldn't read orphan inode 15 (err -117)
[  277.664028][T10417] loop4: detected capacity change from 0 to 512
[  277.671937][T10408] ntfs3: loop3: ino=5, "/" directory corrupted
[  277.696934][T10412] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  277.778026][T10417] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.2266: invalid block
[  277.807717][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  277.818052][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  277.858584][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  277.899480][T10417] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2266: invalid indirect mapped block 10 (level 1)
[  277.938747][T10417] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2266: invalid indirect mapped block 8 (level 1)
[  277.969451][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  277.989311][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  278.035338][T10283] device veth0_vlan entered promiscuous mode
[  278.055465][ T8496] EXT4-fs (loop6): unmounting filesystem.
[  278.063010][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  278.075820][T10417] EXT4-fs (loop4): 1 truncate cleaned up
[  278.130693][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  278.138222][T10417] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  278.180712][T10283] device veth1_vlan entered promiscuous mode
[  278.286742][ T5960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  278.314552][ T5960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  278.364215][ T5960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  278.401819][ T5960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  278.461006][T10283] device veth0_macvtap entered promiscuous mode
[  278.473825][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  278.499397][T10283] device veth1_macvtap entered promiscuous mode
[  278.576191][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.640831][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.685908][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.734341][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.779397][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.837138][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.894845][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.942638][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.968675][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.992587][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2272'.
[  279.003157][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.052311][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'.
[  279.052983][T10283] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.095018][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.145064][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.182514][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.209530][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.256077][T10439] loop6: detected capacity change from 0 to 256
[  279.270935][T10420] loop3: detected capacity change from 0 to 40427
[  279.281446][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.316134][T10420] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288)
[  279.324345][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.353103][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.368632][T10439] FAT-fs (loop6): Directory bread(block 64) failed
[  279.379576][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.384715][T10420] F2FS-fs (loop3): invalid crc value
[  279.407224][T10439] FAT-fs (loop6): Directory bread(block 65) failed
[  279.410861][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.416478][T10439] FAT-fs (loop6): Directory bread(block 66) failed
[  279.451441][T10420] F2FS-fs (loop3): Found nat_bits in checkpoint
[  279.468367][T10439] FAT-fs (loop6): Directory bread(block 67) failed
[  279.471509][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.481787][T10439] FAT-fs (loop6): Directory bread(block 68) failed
[  279.504124][T10439] FAT-fs (loop6): Directory bread(block 69) failed
[  279.507434][   T48] Bluetooth: hci4: command 0x0419 tx timeout
[  279.514656][T10439] FAT-fs (loop6): Directory bread(block 70) failed
[  279.520539][T10283] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.523409][T10439] FAT-fs (loop6): Directory bread(block 71) failed
[  279.566509][T10420] F2FS-fs (loop3): recover fsync data on readonly fs
[  279.592143][T10439] FAT-fs (loop6): Directory bread(block 72) failed
[  279.601590][T10420] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  279.618727][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  279.637223][T10439] FAT-fs (loop6): Directory bread(block 73) failed
[  279.647520][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  279.657756][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  279.690793][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  279.743695][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  279.803901][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  279.865269][T10442] tc_dump_action: action bad kind
[  279.873365][T10283] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.886438][T10283] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.903030][T10283] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.915250][T10283] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.250680][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.266671][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.396089][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  280.462574][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.464013][T10451] [U] 
[  280.477678][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.549240][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  280.830743][T10466] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2292'.
[  280.914357][T10466] netlink: zone id is out of range
[  280.921791][T10468] loop5: detected capacity change from 0 to 256
[  280.930165][T10466] netlink: zone id is out of range
[  280.953969][T10466] netlink: zone id is out of range
[  280.964635][T10466] netlink: zone id is out of range
[  281.010757][T10466] netlink: zone id is out of range
[  281.049874][T10466] netlink: zone id is out of range
[  281.076007][T10466] netlink: zone id is out of range
[  281.311430][T10472] loop7: detected capacity change from 0 to 4096
[  281.332628][T10474] loop5: detected capacity change from 0 to 2048
[  281.422733][T10474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  281.456730][T10479] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  281.811283][T10481] loop3: detected capacity change from 0 to 1024
[  281.859567][T10481] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  281.938783][T10465] loop6: detected capacity change from 0 to 32768
[  282.130185][T10465] XFS (loop6): Mounting V5 Filesystem
[  282.180047][T10497] loop7: detected capacity change from 0 to 512
[  282.289294][T10500] device batadv0 entered promiscuous mode
[  282.296225][T10500] device macsec1 entered promiscuous mode
[  282.320900][T10500] device batadv0 left promiscuous mode
[  282.359998][T10497] EXT4-fs (loop7): 1 truncate cleaned up
[  282.365730][T10497] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  282.472476][T10478] loop4: detected capacity change from 0 to 32768
[  282.569838][T10465] XFS (loop6): Ending clean mount
[  282.595716][T10465] XFS (loop6): Quotacheck needed: Please wait.
[  282.629902][T10283] EXT4-fs (loop7): unmounting filesystem.
[  282.662344][T10478] XFS (loop4): Mounting V5 Filesystem
[  282.849368][T10465] XFS (loop6): Quotacheck: Done.
[  282.986548][T10478] XFS (loop4): Ending clean mount
[  283.122788][ T8496] XFS (loop6): Unmounting Filesystem
[  283.307955][ T4275] XFS (loop4): Unmounting Filesystem
[  283.847595][T10533] loop5: detected capacity change from 0 to 256
[  284.309826][T10547] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  284.428328][ T5777] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  284.524051][ T3598] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  284.684071][ T5777] usb 4-1: Using ep0 maxpacket: 32
[  284.766639][ T5777] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  284.785076][ T5777] usb 4-1: config 0 has no interface number 0
[  284.914962][ T3598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  284.926104][ T5777] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  284.945527][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.959085][ T3598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  284.998321][ T5777] usb 4-1: Product: syz
[  285.007557][T10569] loop5: detected capacity change from 0 to 256
[  285.012005][ T5777] usb 4-1: Manufacturer: syz
[  285.032201][ T3598] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  285.045385][ T5777] usb 4-1: SerialNumber: syz
[  285.066695][ T5777] usb 4-1: config 0 descriptor??
[  285.066751][T10569] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  285.081688][ T3598] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[  285.109132][ T5777] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  285.113625][T10569] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  285.143683][ T3598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.167726][T10569] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  285.191180][ T3598] usb 5-1: config 0 descriptor??
[  285.201505][T10542] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  285.327506][ T5777] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  285.359961][ T5777] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  285.646380][T10578] vim2m vim2m.0: vidioc_s_fmt queue busy
[  285.686998][ T3598] uclogic 0003:5543:0004.0012: ignoring exceeding usage max
[  285.716737][ T3598] uclogic 0003:5543:0004.0012: unknown main item tag 0x0
[  285.740249][ T3598] uclogic 0003:5543:0004.0012: unknown main item tag 0x0
[  285.747354][ T3598] uclogic 0003:5543:0004.0012: unknown main item tag 0x0
[  285.818351][ T3598] uclogic 0003:5543:0004.0012: unknown main item tag 0x0
[  285.835894][ T3598] uclogic 0003:5543:0004.0012: unknown main item tag 0x0
[  285.858402][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  285.867802][ T3598] uclogic 0003:5543:0004.0012: unknown main item tag 0x0
[  285.877506][T10561] loop6: detected capacity change from 0 to 32768
[  285.904766][ T3598] uclogic 0003:5543:0004.0012: unknown main item tag 0x0
[  285.930886][ T3598] uclogic 0003:5543:0004.0012: unknown main item tag 0x0
[  285.981330][ T3598] uclogic 0003:5543:0004.0012: No inputs registered, leaving
[  286.005162][ T3598] uclogic 0003:5543:0004.0012: hidraw0: USB HID v0.08 Device [HID 5543:0004] on usb-dummy_hcd.4-1/input0
[  286.056835][ T5777] usb 4-1: USB disconnect, device number 11
[  286.065401][ T5777] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  286.112570][ T3598] usb 5-1: USB disconnect, device number 17
[  286.166797][ T5777] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  286.236541][ T5777] quatech2 4-1:0.51: device disconnected
[  286.353631][T10586] fido_id[10586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  286.413124][T10590] loop5: detected capacity change from 0 to 1764
[  287.459799][T10618] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2339'.
[  287.812549][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2343'.
[  287.953330][T10603] loop4: detected capacity change from 0 to 32768
[  288.065364][T10603] JBD2: Ignoring recovery information on journal
[  288.289120][T10603] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  289.202863][ T4275] ocfs2: Unmounting device (7,4) on (node local)
[  289.667011][T10661] loop5: detected capacity change from 0 to 32768
[  289.764315][T10672] mkiss: ax0: crc mode is auto.
[  289.764773][T10658] loop3: detected capacity change from 0 to 32768
[  289.898307][T10661] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  289.982156][T10661] JBD2: Ignoring recovery information on journal
[  290.101553][T10658] XFS (loop3): Mounting V5 Filesystem
[  290.153750][T10661] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  290.597737][T10658] XFS (loop3): Ending clean mount
[  290.614615][T10658] XFS (loop3): Quotacheck needed: Please wait.
[  290.744959][ T5836] ocfs2: Unmounting device (7,5) on (node local)
[  290.761162][T10658] XFS (loop3): Quotacheck: Done.
[  290.905251][T10670] loop6: detected capacity change from 0 to 32768
[  290.991489][T10670] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.2358 (10670)
[  291.014276][ T4274] XFS (loop3): Unmounting Filesystem
[  291.034603][T10704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2368'.
[  291.044277][T10670] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  291.052371][T10703] device vlan2 entered promiscuous mode
[  291.059133][T10670] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  291.091455][T10670] BTRFS info (device loop6): using free space tree
[  291.112208][T10703] device syz_tun entered promiscuous mode
[  291.464552][T10670] BTRFS info (device loop6): enabling ssd optimizations
[  291.642383][ T8496] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  291.784394][T10732] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2374'.
[  292.088583][ T4454] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop6 scanned by udevd (4454)
[  292.581616][T10748] loop7: detected capacity change from 0 to 4096
[  292.643024][T10748] ntfs: (device loop7): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  292.698800][T10748] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  292.756226][T10758] device vlan4 entered promiscuous mode
[  292.769215][T10748] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  292.799187][T10758] device syz_tun entered promiscuous mode
[  292.854831][T10748] ntfs: volume version 3.1.
[  292.965192][   T26] audit: type=1326 audit(1779143481.879:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10759 comm="syz.6.2387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0219ce59 code=0x7ffc0000
[  292.967467][T10756] loop5: detected capacity change from 0 to 4096
[  293.053018][   T26] audit: type=1326 audit(1779143481.919:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10759 comm="syz.6.2387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f9f0219ce59 code=0x7ffc0000
[  293.158357][T10283] ntfs: (device loop7): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  293.174099][T10756] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  293.208287][   T26] audit: type=1326 audit(1779143481.919:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10759 comm="syz.6.2387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0219ce59 code=0x7ffc0000
[  293.341568][   T26] audit: type=1326 audit(1779143481.919:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10759 comm="syz.6.2387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0219ce59 code=0x7ffc0000
[  293.458352][T10756] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  293.519337][   T26] audit: type=1326 audit(1779143481.919:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10759 comm="syz.6.2387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f9f0219ce59 code=0x7ffc0000
[  293.639948][T10756] ntfs3: loop5: failed to convert name for inode 20.
[  293.676635][   T26] audit: type=1326 audit(1779143481.919:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10759 comm="syz.6.2387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0219ce59 code=0x7ffc0000
[  293.692468][T10780] loop3: detected capacity change from 0 to 256
[  293.999032][T10787] loop7: detected capacity change from 0 to 128
[  294.032751][T10780] FAT-fs (loop3): Directory bread(block 64) failed
[  294.040340][T10787] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  294.064972][T10780] FAT-fs (loop3): Directory bread(block 65) failed
[  294.104883][T10787] hpfs: filesystem error: improperly stopped
[  294.129454][T10780] FAT-fs (loop3): Directory bread(block 66) failed
[  294.135271][T10787] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  294.136001][T10780] FAT-fs (loop3): Directory bread(block 67) failed
[  294.136091][T10780] FAT-fs (loop3): Directory bread(block 68) failed
[  294.193760][T10787] hpfs: You really don't want any checks? You are crazy...
[  294.231171][T10787] hpfs: Code page index out of array
[  294.261795][T10787] hpfs: code page support is disabled
[  294.285561][T10780] FAT-fs (loop3): Directory bread(block 69) failed
[  294.286342][T10787] hpfs: hpfs_map_4sectors(): unaligned read
[  294.321469][T10780] FAT-fs (loop3): Directory bread(block 70) failed
[  294.328047][T10780] FAT-fs (loop3): Directory bread(block 71) failed
[  294.355062][T10780] FAT-fs (loop3): Directory bread(block 72) failed
[  294.364418][T10787] hpfs: hpfs_map_4sectors(): unaligned read
[  294.384437][T10780] FAT-fs (loop3): Directory bread(block 73) failed
[  294.391337][T10787] hpfs: filesystem error: unable to find root dir
[  294.854604][T10804] comedi comedi3: rti800: I/O port conflict (0x100,16)
[  295.089074][T10809] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2405'.
[  295.100021][T10812] netlink: 'syz.6.2407': attribute type 4 has an invalid length.
[  295.122956][T10812] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2407'.
[  295.224322][T10794] loop4: detected capacity change from 0 to 32768
[  295.296888][T10794] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  295.343787][T10794] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  295.385418][T10794] BTRFS info (device loop4): using free space tree
[  295.474226][T10824] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  295.551798][T10824] batman_adv: batadv0: Adding interface: gretap1
[  295.564954][T10824] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.617280][T10824] batman_adv: batadv0: Interface activated: gretap1
[  295.770908][T10794] BTRFS info (device loop4): enabling ssd optimizations
[  295.982677][T10858] loop3: detected capacity change from 0 to 512
[  295.999910][ T4275] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  296.146725][T10858] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  296.255204][T10858] EXT4-fs (loop3): 1 truncate cleaned up
[  296.285649][T10858] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  296.672231][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  296.674511][T10874] ieee802154 phy1 wpan1: encryption failed: -22
[  296.934402][T10881] loop5: detected capacity change from 0 to 16
[  296.984211][T10881] erofs: (device loop5): mounted with root inode @ nid 36.
[  297.071429][T10881] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -25 in[58, 4038] out[2639]
[  297.145996][T10884] loop4: detected capacity change from 0 to 1024
[  297.172114][T10881] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[  297.548975][T10896] loop7: detected capacity change from 0 to 2048
[  297.589965][T10893] loop5: detected capacity change from 0 to 4096
[  297.641000][T10893] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  297.729862][T10896] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  298.020317][T10283] EXT4-fs (loop7): unmounting filesystem.
[  298.729450][T10905] loop3: detected capacity change from 0 to 32768
[  298.759151][T10905] XFS (loop3): Invalid device [./file1], error=-15
[  299.517540][T10913] loop7: detected capacity change from 0 to 32768
[  299.596370][T10952] loop6: detected capacity change from 0 to 512
[  299.651842][T10913] XFS (loop7): Mounting V5 Filesystem
[  299.891458][T10913] XFS (loop7): Ending clean mount
[  299.919864][T10947] loop4: detected capacity change from 0 to 4096
[  299.979908][T10913] XFS (loop7): Quotacheck needed: Please wait.
[  300.132035][T10913] XFS (loop7): Quotacheck: Done.
[  300.351487][T10283] XFS (loop7): Unmounting Filesystem
[  300.798610][T10987] loop4: detected capacity change from 0 to 2048
[  300.831247][T10987] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  300.870004][ T5549] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  301.073137][ T5549] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.110774][ T5549] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  301.146641][ T5549] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  301.189764][ T5549] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  301.224835][ T5549] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.288912][ T5549] usb 6-1: config 0 descriptor??
[  301.324960][T10999] loop4: detected capacity change from 0 to 128
[  301.371010][T10999] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  301.466680][T10999] hpfs: filesystem error: improperly stopped
[  301.490594][T10999] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  301.498382][T10999] hpfs: You really don't want any checks? You are crazy...
[  301.557046][T10999] hpfs: hpfs_map_sector(): read error
[  301.562851][T10999] hpfs: code page support is disabled
[  301.570868][T10999] hpfs: hpfs_map_4sectors(): unaligned read
[  301.577084][T10999] hpfs: hpfs_map_4sectors(): unaligned read
[  301.605923][T10999] hpfs: filesystem error: unable to find root dir
[  301.682897][T10999] hpfs: hpfs_map_4sectors(): unaligned read
[  301.733354][ T5549] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  301.753006][ T5549] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  301.767214][ T5549] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  301.796311][ T5549] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  301.853028][ T5549] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  301.865178][ T5549] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  301.883759][ T5549] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  301.897320][ T5549] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  301.909338][ T5549] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  301.929871][ T5549] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  301.950330][ T5549] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving
[  302.032118][ T5549] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  302.119336][ T5549] usb 6-1: USB disconnect, device number 10
[  302.413001][T11014] fido_id[11014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  302.588130][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2492'.
[  302.601126][T11018] loop6: detected capacity change from 0 to 4096
[  302.655027][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2492'.
[  302.724436][T11024] netlink: 'syz.3.2492': attribute type 13 has an invalid length.
[  302.775884][T11024] netlink: 'syz.3.2492': attribute type 12 has an invalid length.
[  302.827124][T11018] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  302.991841][T11032] loop7: detected capacity change from 0 to 128
[  303.165989][T11032] VFS: Found a Xenix FS (block size = 512) on device loop7
[  303.219295][ T8496] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22.
[  303.304902][T11032] syz.7.2496: attempt to access beyond end of device
[  303.304902][T11032] loop7: rw=0, sector=8767744, nr_sectors = 1 limit=128
[  303.399264][T11032] Buffer I/O error on dev loop7, logical block 8767744, async page read
[  303.445195][T11032] syz.7.2496: attempt to access beyond end of device
[  303.445195][T11032] loop7: rw=0, sector=13269809, nr_sectors = 1 limit=128
[  303.493795][T11032] Buffer I/O error on dev loop7, logical block 13269809, async page read
[  303.544344][T11032] syz.7.2496: attempt to access beyond end of device
[  303.544344][T11032] loop7: rw=0, sector=1157, nr_sectors = 1 limit=128
[  303.616122][T11049] loop6: detected capacity change from 0 to 256
[  303.630098][T11032] Buffer I/O error on dev loop7, logical block 1157, async page read
[  303.638668][T11032] syz.7.2496: attempt to access beyond end of device
[  303.638668][T11032] loop7: rw=0, sector=3211264, nr_sectors = 1 limit=128
[  303.676540][T11032] Buffer I/O error on dev loop7, logical block 3211264, async page read
[  303.722364][T11032] syz.7.2496: attempt to access beyond end of device
[  303.722364][T11032] loop7: rw=0, sector=8768635, nr_sectors = 1 limit=128
[  303.801418][T11049] FAT-fs (loop6): Directory bread(block 64) failed
[  303.808001][T11049] FAT-fs (loop6): Directory bread(block 65) failed
[  303.824539][T11049] FAT-fs (loop6): Directory bread(block 66) failed
[  303.852698][T11032] Buffer I/O error on dev loop7, logical block 8768635, async page read
[  303.866646][T11049] FAT-fs (loop6): Directory bread(block 67) failed
[  303.878077][T11049] FAT-fs (loop6): Directory bread(block 68) failed
[  303.890747][T11032] syz.7.2496: attempt to access beyond end of device
[  303.890747][T11032] loop7: rw=0, sector=13466417, nr_sectors = 1 limit=128
[  303.926124][T11049] FAT-fs (loop6): Directory bread(block 69) failed
[  303.937524][T11049] FAT-fs (loop6): Directory bread(block 70) failed
[  303.961774][T11049] FAT-fs (loop6): Directory bread(block 71) failed
[  303.968426][T11049] FAT-fs (loop6): Directory bread(block 72) failed
[  303.975312][T11032] Buffer I/O error on dev loop7, logical block 13466417, async page read
[  304.007840][T11049] FAT-fs (loop6): Directory bread(block 73) failed
[  304.014715][T11032] syz.7.2496: attempt to access beyond end of device
[  304.014715][T11032] loop7: rw=0, sector=209285, nr_sectors = 1 limit=128
[  304.059242][T11032] Buffer I/O error on dev loop7, logical block 209285, async page read
[  304.126802][T11032] syz.7.2496: attempt to access beyond end of device
[  304.126802][T11032] loop7: rw=0, sector=8767744, nr_sectors = 1 limit=128
[  304.153575][ T5549] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  304.180628][T11032] Buffer I/O error on dev loop7, logical block 8767744, async page read
[  304.222672][T11032] syz.7.2496: attempt to access beyond end of device
[  304.222672][T11032] loop7: rw=0, sector=13269809, nr_sectors = 1 limit=128
[  304.269802][T11032] Buffer I/O error on dev loop7, logical block 13269809, async page read
[  304.299830][T11032] syz.7.2496: attempt to access beyond end of device
[  304.299830][T11032] loop7: rw=0, sector=1157, nr_sectors = 1 limit=128
[  304.341536][T11032] Buffer I/O error on dev loop7, logical block 1157, async page read
[  304.350105][   T26] kauditd_printk_skb: 8 callbacks suppressed
[  304.350116][   T26] audit: type=1800 audit(1779143493.268:63): pid=11032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2496" name="/" dev="loop7" ino=2 res=0 errno=0
[  304.377668][ T5549] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  304.407329][ T5549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.474477][ T5549] usb 6-1: Product: syz
[  304.478690][ T5549] usb 6-1: Manufacturer: syz
[  304.486613][T10283] sysv_free_block: trying to free block not in datazone
[  304.512445][ T5549] usb 6-1: SerialNumber: syz
[  304.546520][ T5549] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  304.558041][T10283] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  304.755910][ T5549] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  304.838322][T11070] loop7: detected capacity change from 0 to 1024
[  304.859114][T11072] loop4: detected capacity change from 0 to 256
[  305.085981][ T5925] hfsplus: b-tree write err: -5, ino 25
[  305.091990][ T5925] hfsplus: b-tree write err: -5, ino 4
[  305.122928][ T5925] hfsplus: b-tree write err: -5, ino 2
[  305.411534][ T5548] usb 6-1: USB disconnect, device number 11
[  305.506998][T11084] loop4: detected capacity change from 0 to 256
[  305.578904][T11084] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  305.981115][ T5549] usb 6-1: Service connection timeout for: 256
[  306.002243][ T5549] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  306.022632][ T5549] ath9k_htc: Failed to initialize the device
[  306.031361][ T5548] usb 6-1: ath9k_htc: USB layer deinitialized
[  306.128868][T11098] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  306.633559][ T4287] Bluetooth: hci4: command 0x0405 tx timeout
[  306.793389][T11119] loop7: detected capacity change from 0 to 736
[  307.070980][T11129] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2542'.
[  307.203635][ T4287] Bluetooth: hci2: unexpected subevent 0x01 length: 5 < 18
[  307.377541][T11137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2546'.
[  307.625481][T11141] loop5: detected capacity change from 0 to 4096
[  307.694471][T11144] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  307.724149][T11141] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean
[  307.745645][T11141] NILFS (loop5): nilfs_sufile_do_free: segment 13 is already clean
[  307.980624][T11146] loop3: detected capacity change from 0 to 512
[  308.180236][T11146] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  308.226028][T11150] loop4: detected capacity change from 0 to 4096
[  308.290103][T11146] ext4 filesystem being mounted at /521/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  308.350152][T11157] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set
[  308.411776][T11150] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  308.469164][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  308.952065][T11143] loop7: detected capacity change from 0 to 40427
[  308.998225][T11143] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504)
[  309.028493][T11167] loop6: detected capacity change from 0 to 8192
[  309.055769][T11143] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  309.079254][T11167] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  309.101061][T11143] F2FS-fs (loop7): build fault injection attr: rate: 17008, type: 0x3ffff
[  309.111260][T11143] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x1f8
[  309.119748][T11167] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  309.129388][T11167] REISERFS (device loop6): using ordered data mode
[  309.136253][T11167] reiserfs: using flush barriers
[  309.185226][T11167] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  309.202509][T11167] REISERFS (device loop6): checking transaction log (loop6)
[  309.204310][T11143] F2FS-fs (loop7): invalid crc value
[  309.260828][T11167] REISERFS (device loop6): Using tea hash to sort names
[  309.268492][T11167] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  309.320469][T11184] loop4: detected capacity change from 0 to 256
[  309.341055][T11184] exfat: Deprecated parameter 'utf8'
[  309.393528][T11143] F2FS-fs (loop7): Found nat_bits in checkpoint
[  309.470069][ T3598] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  309.613745][T11184] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  309.664979][T11143] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  309.676409][T11143] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  309.774786][ T3598] usb 4-1: Using ep0 maxpacket: 16
[  309.865513][T11143] F2FS-fs (loop7): Unrecognized mount option "noload" or missing value
[  310.083455][ T3598] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  310.095965][ T3598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.124233][ T3598] usb 4-1: Product: syz
[  310.153676][ T3598] usb 4-1: Manufacturer: syz
[  310.158324][ T3598] usb 4-1: SerialNumber: syz
[  310.256557][ T3598] usb 4-1: config 0 descriptor??
[  310.409380][T11205] binder_alloc: binder_alloc_mmap_handler: 11204 200000ffe000-200000fff000 already mapped failed -16
[  310.481018][T11182] loop5: detected capacity change from 0 to 32768
[  310.612956][T11182] JBD2: Ignoring recovery information on journal
[  310.648493][T11209] loop7: detected capacity change from 0 to 512
[  310.776504][ T3598] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  310.780892][T11182] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  310.802123][ T3598] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  310.867103][ T3598] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  310.900029][ T3598] usb 4-1: media controller created
[  310.989642][ T3598] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  311.055555][T11182] (syz.5.2564,11182,0):ocfs2_read_blocks:239 ERROR: status = -12
[  311.105144][T11182] (syz.5.2564,11182,1):ocfs2_trim_mainbm:7610 ERROR: status = -12
[  311.224842][ T3598] zl10353_read_register: readreg error (reg=127, ret==0)
[  311.240054][ T3598] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  311.247994][ T3598] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  311.358965][ T3598] usb 4-1: USB disconnect, device number 12
[  311.460713][ T3598] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  311.489221][ T5836] ocfs2: Unmounting device (7,5) on (node local)
[  311.615366][T11228] loop4: detected capacity change from 0 to 512
[  311.725864][T11228] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.2575: inode has both inline data and extents flags
[  311.818999][T11228] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2575: couldn't read orphan inode 15 (err -117)
[  311.886566][T11241] loop6: detected capacity change from 0 to 16
[  311.898512][T11228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  311.978366][T11228] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 1769366884 > max in inode 18
[  311.999672][T11241] erofs: (device loop6): mounted with root inode @ nid 36.
[  312.029494][T11239] loop3: detected capacity change from 0 to 4096
[  312.153830][T11247] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  312.155254][T11248] loop5: detected capacity change from 0 to 16
[  312.231230][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  312.280421][T11239] NILFS error (device loop3): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  312.310338][T11248] erofs: (device loop5): mounted with root inode @ nid 36.
[  312.355467][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  312.494215][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  312.505934][T11239] Remounting filesystem read-only
[  312.527264][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 330 @ nid 36
[  312.615366][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 327 @ nid 36
[  312.666567][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 326 @ nid 36
[  312.708744][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  312.748942][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 325 @ nid 36
[  312.810144][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  312.839770][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 324 @ nid 36
[  312.892072][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 320 @ nid 36
[  312.925578][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 319 @ nid 36
[  312.949544][T11266] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  312.955592][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 316 @ nid 36
[  313.025521][T11268] loop3: detected capacity change from 0 to 4096
[  313.045029][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 315 @ nid 36
[  313.079061][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 314 @ nid 36
[  313.132316][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 313 @ nid 36
[  313.165068][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  313.172596][T11270] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  313.191946][T11272] loop6: detected capacity change from 0 to 512
[  313.215875][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 312 @ nid 36
[  313.257978][T11272] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2589: invalid indirect mapped block 4294967295 (level 1)
[  313.270919][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 309 @ nid 36
[  313.288645][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 308 @ nid 36
[  313.298092][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  313.309164][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 307 @ nid 36
[  313.318459][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  313.330916][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 306 @ nid 36
[  313.332892][T11272] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2589: invalid indirect mapped block 4294967295 (level 1)
[  313.340559][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 302 @ nid 36
[  313.363409][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 298 @ nid 36
[  313.374415][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 297 @ nid 36
[  313.384007][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 296 @ nid 36
[  313.393342][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 295 @ nid 36
[  313.402508][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  313.413017][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 294 @ nid 36
[  313.422647][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 291 @ nid 36
[  313.440342][T11272] EXT4-fs (loop6): 2 truncates cleaned up
[  313.447205][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 290 @ nid 36
[  313.471163][T11272] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  313.528500][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  313.537995][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 289 @ nid 36
[  313.560375][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  313.605965][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 288 @ nid 36
[  313.663652][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 286 @ nid 36
[  313.686080][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 283 @ nid 36
[  313.706078][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 280 @ nid 36
[  313.733245][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 279 @ nid 36
[  313.747433][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 278 @ nid 36
[  313.776298][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 277 @ nid 36
[  313.803683][ T8496] EXT4-fs (loop6): unmounting filesystem.
[  313.826335][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  313.864718][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 276 @ nid 36
[  313.906315][T11280] loop6: detected capacity change from 0 to 64
[  313.918890][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 273 @ nid 36
[  313.956334][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 272 @ nid 36
[  313.982796][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  314.030083][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 271 @ nid 36
[  314.062836][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  314.100077][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 270 @ nid 36
[  314.120120][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 266 @ nid 36
[  314.129305][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 265 @ nid 36
[  314.186672][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 262 @ nid 36
[  314.201169][T11284] program syz.6.2594 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  314.216789][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 261 @ nid 36
[  314.238419][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 260 @ nid 36
[  314.280198][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 259 @ nid 36
[  314.306216][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  314.336911][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 258 @ nid 36
[  314.371785][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 255 @ nid 36
[  314.388959][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 254 @ nid 36
[  314.425823][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  314.455475][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 253 @ nid 36
[  314.471558][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  314.502328][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 252 @ nid 36
[  314.522626][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 248 @ nid 36
[  314.547668][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 247 @ nid 36
[  314.575769][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 244 @ nid 36
[  314.609328][T11290] loop3: detected capacity change from 0 to 4096
[  314.618860][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 243 @ nid 36
[  314.634458][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 242 @ nid 36
[  314.656449][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 241 @ nid 36
[  314.682322][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  314.699179][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 240 @ nid 36
[  314.719484][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 237 @ nid 36
[  314.756078][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 236 @ nid 36
[  314.775743][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  314.790199][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 235 @ nid 36
[  314.800767][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  314.812214][ T4274] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  314.818755][ T4274] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  314.830557][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 234 @ nid 36
[  314.856001][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 230 @ nid 36
[  314.893102][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 229 @ nid 36
[  314.912570][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 226 @ nid 36
[  314.940990][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 225 @ nid 36
[  314.967571][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 224 @ nid 36
[  315.004211][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 223 @ nid 36
[  315.029724][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  315.069858][T11288] loop6: detected capacity change from 0 to 32768
[  315.097336][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 222 @ nid 36
[  315.176229][T11288] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2596 (11288)
[  315.195902][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 219 @ nid 36
[  315.241720][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 218 @ nid 36
[  315.311484][T11288] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  315.331144][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  315.363228][T11288] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  315.388832][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 217 @ nid 36
[  315.405683][T11288] BTRFS info (device loop6): using free space tree
[  315.440247][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  315.475972][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 216 @ nid 36
[  315.509823][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 212 @ nid 36
[  315.541474][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 211 @ nid 36
[  315.562019][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 208 @ nid 36
[  315.629333][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 207 @ nid 36
[  315.660937][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 206 @ nid 36
[  315.716735][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 205 @ nid 36
[  315.738267][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  315.820306][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 204 @ nid 36
[  315.900337][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 201 @ nid 36
[  315.926585][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 200 @ nid 36
[  315.964574][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  315.980371][T11288] BTRFS info (device loop6): enabling ssd optimizations
[  316.040164][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 199 @ nid 36
[  316.084752][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  316.140164][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 198 @ nid 36
[  316.180192][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 194 @ nid 36
[  316.230948][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 193 @ nid 36
[  316.246696][ T8496] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  316.290603][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 190 @ nid 36
[  316.299770][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 189 @ nid 36
[  316.317004][T11337] loop7: detected capacity change from 0 to 512
[  316.348210][T11337] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  316.421087][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 188 @ nid 36
[  316.478912][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 187 @ nid 36
[  316.530578][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  316.622775][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 186 @ nid 36
[  316.641522][T11337] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF
[  316.665612][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 183 @ nid 36
[  316.688060][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 182 @ nid 36
[  316.729874][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  316.784871][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 181 @ nid 36
[  316.810135][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  316.871033][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 180 @ nid 36
[  316.933007][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 176 @ nid 36
[  316.949057][ T4454] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop6 scanned by udevd (4454)
[  316.967034][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 175 @ nid 36
[  316.996751][T11349] xt_time: invalid argument - start or stop time greater than 23:59:59
[  317.010168][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 172 @ nid 36
[  317.047157][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 171 @ nid 36
[  317.101720][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 170 @ nid 36
[  317.154759][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 165 @ nid 36
[  317.210148][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 164 @ nid 36
[  317.219343][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  317.297801][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 163 @ nid 36
[  317.335027][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  317.359255][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 162 @ nid 36
[  317.392043][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 158 @ nid 36
[  317.448492][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 157 @ nid 36
[  317.480165][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 154 @ nid 36
[  317.514894][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.534992][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 153 @ nid 36
[  317.613472][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2622'.
[  317.621173][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 152 @ nid 36
[  317.669051][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 151 @ nid 36
[  317.694764][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  317.732326][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 150 @ nid 36
[  317.780800][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 147 @ nid 36
[  317.789974][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 146 @ nid 36
[  317.854226][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  317.900143][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 145 @ nid 36
[  317.960156][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  318.013790][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 144 @ nid 36
[  318.056494][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 140 @ nid 36
[  318.095935][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 139 @ nid 36
[  318.129576][T11377] loop6: detected capacity change from 0 to 64
[  318.135923][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 136 @ nid 36
[  318.190149][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 135 @ nid 36
[  318.199357][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 134 @ nid 36
[  318.259228][T11377] MINIX-fs: mounting file system with errors, running fsck is recommended
[  318.273502][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 133 @ nid 36
[  318.312828][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  318.334822][T11377] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  318.373937][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 132 @ nid 36
[  318.406756][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 129 @ nid 36
[  318.429448][T11381] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2631'.
[  318.460162][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 128 @ nid 36
[  318.471332][T11381] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2631'.
[  318.492061][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  318.506737][T11384] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2631'.
[  318.530552][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 127 @ nid 36
[  318.539719][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  318.622958][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 126 @ nid 36
[  318.657806][T11386] loop6: detected capacity change from 0 to 1024
[  318.668807][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 122 @ nid 36
[  318.701150][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 121 @ nid 36
[  318.728228][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 118 @ nid 36
[  318.766264][T11388] loop4: detected capacity change from 0 to 1024
[  318.790165][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 117 @ nid 36
[  318.799762][T11388] EXT4-fs (loop4): filesystem is read-only
[  318.831050][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 116 @ nid 36
[  318.845081][T11388] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 3328
[  318.880169][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 115 @ nid 36
[  318.889341][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  318.970275][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 114 @ nid 36
[  319.011633][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 111 @ nid 36
[  319.070551][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 110 @ nid 36
[  319.100098][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  319.109673][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 109 @ nid 36
[  319.179886][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  319.210163][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 108 @ nid 36
[  319.231747][T11397] loop6: detected capacity change from 0 to 256
[  319.243016][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 104 @ nid 36
[  319.271168][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 103 @ nid 36
[  319.309497][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 102 @ nid 36
[  319.353700][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 98 @ nid 36
[  319.366670][T11397] FAT-fs (loop6): Directory bread(block 64) failed
[  319.387786][T11397] FAT-fs (loop6): Directory bread(block 65) failed
[  319.410336][T11397] FAT-fs (loop6): Directory bread(block 66) failed
[  319.410818][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 96 @ nid 36
[  319.416884][T11397] FAT-fs (loop6): Directory bread(block 67) failed
[  319.465478][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 94 @ nid 36
[  319.490737][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 93 @ nid 36
[  319.500946][T11397] FAT-fs (loop6): Directory bread(block 68) failed
[  319.505902][T11402] loop4: detected capacity change from 0 to 1024
[  319.507483][T11397] FAT-fs (loop6): Directory bread(block 69) failed
[  319.527178][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 92 @ nid 36
[  319.545844][T11402] EXT4-fs: inline encryption not supported
[  319.583473][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 91 @ nid 36
[  319.603566][T11402] EXT4-fs: Ignoring removed mblk_io_submit option
[  319.626823][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 90 @ nid 36
[  319.626982][T11397] FAT-fs (loop6): Directory bread(block 70) failed
[  319.652186][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 86 @ nid 36
[  319.694633][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 84 @ nid 36
[  319.708244][T11397] FAT-fs (loop6): Directory bread(block 71) failed
[  319.709622][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 80 @ nid 36
[  319.717018][T11397] FAT-fs (loop6): Directory bread(block 72) failed
[  319.750454][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 74 @ nid 36
[  319.786493][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 72 @ nid 36
[  319.787176][T11402] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  319.834196][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 70 @ nid 36
[  319.855529][T11397] FAT-fs (loop6): Directory bread(block 73) failed
[  319.900390][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  319.949734][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 63 @ nid 36
[  319.990230][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  320.050216][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 62 @ nid 36
[  320.084975][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 58 @ nid 36
[  320.114650][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 57 @ nid 36
[  320.147436][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 54 @ nid 36
[  320.177721][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 53 @ nid 36
[  320.211724][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 52 @ nid 36
[  320.234320][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  320.249184][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 51 @ nid 36
[  320.288248][T11248] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  320.315584][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 50 @ nid 36
[  320.325201][T11411] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2644'.
[  320.334699][T11394] loop7: detected capacity change from 0 to 32768
[  320.365270][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 47 @ nid 36
[  320.422690][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 46 @ nid 36
[  320.473122][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 40 @ nid 36
[  320.474830][ T5925] JFS: metapage_get_blocks failed
[  320.495592][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 39 @ nid 36
[  320.516079][  T108] blkno = 50030, nblocks = 1
[  320.524959][  T108] ERROR: (device loop7): dbUpdatePMap: blocks are outside the map
[  320.524959][  T108] 
[  320.541074][T11394] JFS: metapage_get_blocks failed
[  320.545254][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 38 @ nid 36
[  320.547102][ T5925] JFS: metapage_get_blocks failed
[  320.567274][  T108] ERROR: (device loop7): remounting filesystem as read-only
[  320.591224][  T108] blkno = 5002c, nblocks = 4
[  320.598153][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 34 @ nid 36
[  320.598235][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 32 @ nid 36
[  320.598267][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 30 @ nid 36
[  320.598310][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 27 @ nid 36
[  320.598328][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 26 @ nid 36
[  320.598346][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 25 @ nid 36
[  320.598408][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 24 @ nid 36
[  320.598427][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 23 @ nid 36
[  320.598444][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 22 @ nid 36
[  320.598461][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 21 @ nid 36
[  320.598478][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 20 @ nid 36
[  320.598508][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 18 @ nid 36
[  320.598537][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 16 @ nid 36
[  320.598628][T11248] erofs: (device loop5): z_erofs_readahead: readahead error at page 12 @ nid 36
[  320.598722][T11248] bio_check_eod: 4 callbacks suppressed
[  320.598732][T11248] syz.5.2581: attempt to access beyond end of device
[  320.598732][T11248] loop5: rw=524288, sector=67108880, nr_sectors = 8 limit=16
[  320.598805][T11248] syz.5.2581: attempt to access beyond end of device
[  320.598805][T11248] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16
[  320.598857][T11248] syz.5.2581: attempt to access beyond end of device
[  320.598857][T11248] loop5: rw=524288, sector=525144, nr_sectors = 16 limit=16
[  320.598919][T11248] syz.5.2581: attempt to access beyond end of device
[  320.598919][T11248] loop5: rw=524288, sector=13716630376, nr_sectors = 8 limit=16
[  320.611668][T11248] syz.5.2581: attempt to access beyond end of device
[  320.611668][T11248] loop5: rw=524288, sector=72, nr_sectors = 16 limit=16
[  320.725253][  T108] ERROR: (device loop7): dbUpdatePMap: blocks are outside the map
[  320.725253][  T108] 
[  320.849158][T11415] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  320.856476][T11415] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  320.933851][T11415] vhci_hcd vhci_hcd.0: Device attached
[  321.008146][T11424] loop3: detected capacity change from 0 to 512
[  321.022455][  T108] ERROR: (device loop7): remounting filesystem as read-only
[  321.029801][  T108] BUG: Bad page state in process jfsCommit  pfn:783cf
[  321.053232][  T127] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  321.057086][T11248] syz.5.2581: attempt to access beyond end of device
[  321.057086][T11248] loop5: rw=524288, sector=1183600, nr_sectors = 16 limit=16
[  321.070777][  T108] page:ffffea0001e0f3c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x50030 pfn:0x783cf
[  321.081023][T11424] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  321.121604][  T108] flags: 0xfff00000002007(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff)
[  321.132055][  T108] raw: 00fff00000002007 dead000000000100 dead000000000122 0000000000000000
[  321.134257][T11424] ext4 filesystem being mounted at /543/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  321.164884][T11248] syz.5.2581: attempt to access beyond end of device
[  321.164884][T11248] loop5: rw=524288, sector=24, nr_sectors = 8 limit=16
[  321.193939][ T5543] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  321.212060][  T108] raw: 0000000000050030 ffff88807d5e27c0 00000000ffffffff 0000000000000000
[  321.247222][  T108] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  321.267542][T11248] syz.5.2581: attempt to access beyond end of device
[  321.267542][T11248] loop5: rw=524288, sector=296, nr_sectors = 16 limit=16
[  321.297041][  T127] usb 5-1: Using ep0 maxpacket: 8
[  321.310392][  T108] page_owner tracks the page as allocated
[  321.338515][T11248] syz.5.2581: attempt to access beyond end of device
[  321.338515][T11248] loop5: rw=524288, sector=1048976, nr_sectors = 16 limit=16
[  321.344990][  T108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 11394, tgid 11393 (syz.7.2637), ts 320469576147, free_ts 320449018611
[  321.384439][T11248] syz.5.2581: attempt to access beyond end of device
[  321.384439][T11248] loop5: rw=524288, sector=672, nr_sectors = 16 limit=16
[  321.390581][T11424] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 637 (only 1 groups)
[  321.444432][T11419] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1
[  321.466514][  T127] usb 5-1: unable to get BOS descriptor or descriptor too short
[  321.474336][  T127] usb 5-1: no configurations
[  321.478997][   T75] vhci_hcd: stop threads
[  321.479092][  T127] usb 5-1: can't read configurations, error -22
[  321.488447][   T75] vhci_hcd: release socket
[  321.511782][  T108]  post_alloc_hook+0x173/0x1a0
[  321.531673][   T75] vhci_hcd: disconnect device
[  321.536432][  T108]  get_page_from_freelist+0x1a1e/0x1ab0
[  321.546869][  T108]  __alloc_pages+0x1ec/0x4f0
[  321.560613][  T108]  folio_alloc+0x1c/0x60
[  321.564908][  T108]  filemap_alloc_folio+0xdb/0x480
[  321.569949][  T108]  __filemap_get_folio+0x6ab/0xdb0
[  321.585202][  T108]  pagecache_get_page+0x26/0x250
[  321.593362][  T108]  __get_metapage+0x2a4/0xfa0
[  321.598154][  T108]  dtSplitRoot+0x1de/0x14e0
[  321.607569][  T108]  dtInsert+0xe7b/0x5950
[  321.615266][  T108]  jfs_mkdir+0x758/0xad0
[  321.619610][  T108]  vfs_mkdir+0x387/0x570
[  321.628225][  T108]  do_mkdirat+0x1d8/0x440
[  321.635722][  T108]  __x64_sys_mkdirat+0x85/0x90
[  321.644811][  T108]  do_syscall_64+0x4c/0xa0
[  321.649409][  T108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  321.664097][  T108] page last free stack trace:
[  321.669057][  T108]  free_unref_page_prepare+0x8b4/0x9a0
[  321.676756][  T108]  free_unref_page+0x2e/0x3f0
[  321.685802][  T108]  __unfreeze_partials+0x1a5/0x200
[  321.693269][  T108]  put_cpu_partial+0x17c/0x250
[  321.698178][  T108]  qlist_free_all+0x76/0xe0
[  321.708381][  T108]  kasan_quarantine_reduce+0x144/0x160
[  321.716270][  T108]  __kasan_slab_alloc+0x1e/0x80
[  321.725313][  T108]  slab_post_alloc_hook+0x4b/0x480
[  321.733854][  T108]  kmem_cache_alloc+0x123/0x2f0
[  321.738802][  T108]  getname_flags+0xb7/0x500
[  321.747474][  T108]  do_sys_openat2+0xdd/0x4b0
[  321.755404][  T108]  __x64_sys_openat+0x135/0x160
[  321.766684][  T108]  do_syscall_64+0x4c/0xa0
[  321.773627][  T108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  321.779700][  T108] Modules linked in:
[  321.787845][  T108] CPU: 0 PID: 108 Comm: jfsCommit Not tainted syzkaller #0
[  321.793913][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  321.795051][  T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  321.810817][  T108] Call Trace:
[  321.814089][  T108]  <TASK>
[  321.817008][  T108]  dump_stack_lvl+0x188/0x24e
[  321.821682][  T108]  ? show_regs_print_info+0x12/0x12
[  321.826873][  T108]  ? swiotlb_print_info+0x60/0x60
[  321.831895][  T108]  bad_page+0x14b/0x170
[  321.836042][  T108]  free_unref_page_prepare+0x42a/0x9a0
[  321.841496][  T108]  free_unref_page+0x2e/0x3f0
[  321.846166][  T108]  ? __folio_put+0xf1/0x210
[  321.850662][  T108]  txUnlock+0x27e/0xcb0
[  321.854813][  T108]  ? lockdep_hardirqs_on+0x94/0x140
[  321.859999][  T108]  jfs_lazycommit+0x56a/0xa70
[  321.864671][  T108]  ? txFreelock+0x5a0/0x5a0
[  321.869161][  T108]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  321.875041][  T108]  ? do_task_dead+0xd0/0xd0
[  321.879534][  T108]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  321.885418][  T108]  ? __kthread_parkme+0x162/0x1c0
[  321.890442][  T108]  kthread+0x29d/0x330
[  321.894497][  T108]  ? txFreelock+0x5a0/0x5a0
[  321.898987][  T108]  ? kthread_blkcg+0xd0/0xd0
[  321.903566][  T108]  ret_from_fork+0x1f/0x30
[  321.907985][  T108]  </TASK>
[  321.922758][  T108] Disabling lock debugging due to kernel taint
[  321.954757][  T108] page:ffffea0001e0f3c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x50030 pfn:0x783cf
[  321.967177][  T108] flags: 0xfff00000002007(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff)
[  321.979935][  T108] raw: 00fff00000002007 dead000000000100 dead000000000122 0000000000000000
[  321.988692][  T108] raw: 0000000000050030 ffff88807d5e27c0 00000000ffffffff 0000000000000000
[  321.999091][  T108] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u))
[  322.014432][  T108] page_owner tracks the page as allocated
[  322.024026][  T108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 11394, tgid 11393 (syz.7.2637), ts 320469576147, free_ts 320449018611
[  322.048963][  T108]  post_alloc_hook+0x173/0x1a0
[  322.053962][  T108]  get_page_from_freelist+0x1a1e/0x1ab0
[  322.059676][  T108]  __alloc_pages+0x1ec/0x4f0
[  322.068252][  T108]  folio_alloc+0x1c/0x60
[  322.072707][  T108]  filemap_alloc_folio+0xdb/0x480
[  322.077862][  T108]  __filemap_get_folio+0x6ab/0xdb0
[  322.085393][  T108]  pagecache_get_page+0x26/0x250
[  322.090576][  T108]  __get_metapage+0x2a4/0xfa0
[  322.095322][  T108]  dtSplitRoot+0x1de/0x14e0
[  322.099869][  T108]  dtInsert+0xe7b/0x5950
[  322.106191][  T108]  jfs_mkdir+0x758/0xad0
[  322.110716][  T108]  vfs_mkdir+0x387/0x570
[  322.116241][  T108]  do_mkdirat+0x1d8/0x440
[  322.125730][  T108]  __x64_sys_mkdirat+0x85/0x90
[  322.131471][  T108]  do_syscall_64+0x4c/0xa0
[  322.135965][  T108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  322.142628][  T108] page last free stack trace:
[  322.147358][  T108]  free_unref_page_prepare+0x8b4/0x9a0
[  322.153507][  T108]  free_unref_page+0x2e/0x3f0
[  322.158263][  T108]  __unfreeze_partials+0x1a5/0x200
[  322.163948][  T108]  put_cpu_partial+0x17c/0x250
[  322.168781][  T108]  qlist_free_all+0x76/0xe0
[  322.175119][  T108]  kasan_quarantine_reduce+0x144/0x160
[  322.181195][  T108]  __kasan_slab_alloc+0x1e/0x80
[  322.186117][  T108]  slab_post_alloc_hook+0x4b/0x480
[  322.193131][  T108]  kmem_cache_alloc+0x123/0x2f0
[  322.198048][  T108]  getname_flags+0xb7/0x500
[  322.203270][  T108]  do_sys_openat2+0xdd/0x4b0
[  322.207928][  T108]  __x64_sys_openat+0x135/0x160
[  322.214663][  T108]  do_syscall_64+0x4c/0xa0
[  322.220667][  T108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  322.226884][  T108] ------------[ cut here ]------------
[  322.232532][  T108] kernel BUG at include/linux/mm.h:1146!
[  322.240504][  T108] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  322.246592][  T108] CPU: 0 PID: 108 Comm: jfsCommit Tainted: G    B              syzkaller #0
[  322.255270][  T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  322.265332][  T108] RIP: 0010:put_metapage+0x24f/0x340
[  322.270639][  T108] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 40 32 c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f
[  322.290253][  T108] RSP: 0018:ffffc90002d57ce0 EFLAGS: 00010246
[  322.296331][  T108] RAX: 995a78291ede2a00 RBX: ffff88807d5e27c0 RCX: 995a78291ede2a00
[  322.304314][  T108] RDX: 0000000000000000 RSI: ffffffff8adf1300 RDI: ffffffff8adf12c0
[  322.312298][  T108] RBP: 000000000000007f R08: ffffffff8e1ff3ef R09: 1ffffffff1c3fe7d
[  322.320293][  T108] R10: dffffc0000000000 R11: fffffbfff1c3fe7e R12: ffff88807d5e27e8
[  322.328282][  T108] R13: ffffea0001e0f3f4 R14: 1ffff1100fabc4fd R15: 1ffff1100fabc50a
[  322.336264][  T108] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  322.345203][  T108] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  322.351793][  T108] CR2: 00007f8b14fea2f8 CR3: 000000007373e000 CR4: 00000000003506f0
[  322.359774][  T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  322.367754][  T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  322.375733][  T108] Call Trace:
[  322.379022][  T108]  <TASK>
[  322.381960][  T108]  txUnlock+0x427/0xcb0
[  322.386136][  T108]  jfs_lazycommit+0x56a/0xa70
[  322.390837][  T108]  ? txFreelock+0x5a0/0x5a0
[  322.395348][  T108]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  322.401255][  T108]  ? do_task_dead+0xd0/0xd0
[  322.405770][  T108]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  322.411670][  T108]  ? __kthread_parkme+0x162/0x1c0
[  322.416708][  T108]  kthread+0x29d/0x330
[  322.420776][  T108]  ? txFreelock+0x5a0/0x5a0
[  322.425288][  T108]  ? kthread_blkcg+0xd0/0xd0
[  322.429889][  T108]  ret_from_fork+0x1f/0x30
[  322.434323][  T108]  </TASK>
[  322.437351][  T108] Modules linked in:
[  322.447004][  T108] ---[ end trace 0000000000000000 ]---
[  322.452727][  T108] RIP: 0010:put_metapage+0x24f/0x340
[  322.458087][  T108] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 40 32 c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f
[  322.484026][  T108] RSP: 0018:ffffc90002d57ce0 EFLAGS: 00010246
[  322.490418][  T108] RAX: 995a78291ede2a00 RBX: ffff88807d5e27c0 RCX: 995a78291ede2a00
[  322.498481][  T108] RDX: 0000000000000000 RSI: ffffffff8adf1300 RDI: ffffffff8adf12c0
[  322.509010][  T108] RBP: 000000000000007f R08: ffffffff8e1ff3ef R09: 1ffffffff1c3fe7d
[  322.517312][  T108] R10: dffffc0000000000 R11: fffffbfff1c3fe7e R12: ffff88807d5e27e8
[  322.529131][  T108] R13: ffffea0001e0f3f4 R14: 1ffff1100fabc4fd R15: 1ffff1100fabc50a
[  322.537407][  T108] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  322.547395][  T108] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  322.554379][  T108] CR2: 00007f8b14fea2f8 CR3: 000000007e63e000 CR4: 00000000003506f0
[  322.562587][  T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  322.571144][  T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  322.579214][  T108] Kernel panic - not syncing: Fatal exception
[  322.585627][  T108] Kernel Offset: disabled
[  322.589943][  T108] Rebooting in 86400 seconds..