last executing test programs:

5.204316287s ago: executing program 0 (id=1347):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "a5247d20"}]}}, 0x0}, 0x0)

4.890636903s ago: executing program 1 (id=1339):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0)

4.727544623s ago: executing program 1 (id=1341):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x7}, {0x3}]}]}, {0x0, [0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000001f80)=""/237, 0x3d, 0xed, 0x1, 0x0, 0x0, @void, @value}, 0x20)

4.600694747s ago: executing program 1 (id=1342):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x22, {[@main=@item_012={0x1, 0x0, 0x0, "de"}, @local=@item_4={0x3, 0x2, 0x0, "942886f1"}, @local=@item_4, @local=@item_012={0x2, 0x2, 0x0, "e898"}, @main=@item_4={0x3, 0x0, 0xa, "d005862b"}, @main, @global=@item_4={0x3, 0x1, 0x0, "3043d226"}, @main=@item_4={0x3, 0x0, 0x0, "371bce54"}, @global=@item_012={0x2, 0x1, 0x3, 'UV'}]}}, 0x0}, 0x0)

2.983519834s ago: executing program 0 (id=1361):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070600f3ff83"], 0x0}, 0x0)

2.706936566s ago: executing program 2 (id=1365):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68"], 0x97, 0x2a9, &(0x7f0000000500)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2.638402495s ago: executing program 4 (id=1366):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x2, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}])

2.526311237s ago: executing program 2 (id=1367):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x24, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}]}, 0x24}}, 0x0)

2.426415319s ago: executing program 2 (id=1368):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x20, 0x7f, 0x0, 0xfffff004}, {0x6, 0x0, 0x0, 0xfffffffd}]})

2.390496473s ago: executing program 4 (id=1370):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5381, 0x0)

2.266785308s ago: executing program 1 (id=1371):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"9f2fb5905835280aeb65e178"}}], 0x24)

2.266613537s ago: executing program 4 (id=1372):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x3}, 0xe)

2.15658563s ago: executing program 1 (id=1373):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000006a80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000", @ANYRES64, @ANYBLOB="53d2d9de939847c9dd37ed564f2be0a4f9d29f7e23b3a032bbe730dc52348cbe87ceee766fd6025fe3e79ae4be665c25801faff43856dd4a90209ef9ad9a90beca5921e77f0b0248d2793d9a477240b4d3e13b1079fb066ea5b89316eaa679c336a781bafb6020144f23f787a4057fcb152a4a807a2fda22545953e4650264b5f42a2712642c0e"], 0x25, 0x558f, &(0x7f00000014c0)="$eJzs3EtvG9UXAPAzSZM+//1HiAW7jlQhJVId1elDsKJAKx6iVcVjwQqc2LXc2p4odt3QVRcsEQu+CQKJFUs+AwtYwg6xALFDAnnupGrapvThOGr7+0njM3N858y9I8vSGUsO4Lm1kP/1RxZH42BEzEbEkSzK/azaIm5FnEtjX4qIYxExc8eWVfnbifmIOBQRR8fFU82seuurE6PjZ35/98/vf9y/7/DX3/20pwsH9tTLEdFbT/s3eikW7RSvVvnGqFPG3ulRFde31egVKX+jtVpWuNHYGtco46l2Gl+sXx+M45VuY20c250rZX69ny44GLW36oxPyK82NsrjZmu1jJ1BUcb2zXTdzZvpu+3mYJjqNKt6n5XlYzjciinf2myl9axfK+Naf1jlU92i2docx1EVq8vFWtFtlvNYfcyb/BR4r9O/vpmPWhuDTtHPzyzXX1mun63VN4pma9g6XWv0mmdP54vt7nhYbdhq9M61i6LdbS2vFb2lfLG9tlar1/PF863VTqOf1+vLp5ZP1s4sVXsn8rcufZR3m/niOL7R6V8fdrqD/EqxkaczlvKV5VOvLuXH6/kHFy/nl9+/cOHi5Q8/Of/xpdcvvvNmNeieaeWLKydXVmr1k7WV+tJztP7Pq0k/wvqz+6d/+fnJbhskO3zAANjZPf1/3N3/h/4fmLiy/6/2H7X/712rjnen/4+H6f9jkv3/uKXS//93/zuzB/3vXOj/d3H98EQer/+fn/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYul/nvnm73FlIx4er/P+q1AvVcRYRMxHxz33Mxvy2mrNVnbkdxs/dNYcfsigrjK+xv9oORcS5avv7/7t9FwAAAODZ9e2tY1+mbj29LOz1hJim9NBm5sinE6qXRcTcwm8TqjYzfnlxQsXKz/e+2JxQtfIB1oEJFUuP3PZNqtpDmd0WDtwRshRmpjodAABgKrZ3AtPtQgAAAJimLx747mtTmwe7Z/5+ySy2fsq8PWB/CtUPggcfcDIAAADwVMj2egIAAADAriv7f///BwAAAM+29P9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8y8795CANRHEAfi0U/BuJce9V3MExPIJLl8IBvARHwCt4Ac6AiQuPYMAwHUmqJTFhSiP5vqQt05JfZ4DNm4YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGNK3Zrf68unt51tzjqfblBkNAAAA0OfQ7FbpxaJtP8/nX+ZTr3O7iog6Ivpq90nMOpmTnNNceX/zRx++RqSE8/l53p5FxLu8/Xw19KcAAAAAj2u/2S7bar3d5SmA7+P2ijtpJ23qF+8L5VUR0Sx+FEqrz7s3hcLS73saHwulpQmsJ4XC2im3af+1WambdE06h98jWacvMbXqYe4LAACMqVsJXKlCAAAAeAAfxu4A9/B3aV9ddpfnjPP2kB8IPu20AAAAgP9QNXYHAAAAgMGl+r9n/b/0398x1v+rrP8HAAAAxbXr/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCkQ7Nb7Tfb5bXr63/MOZ5uU25EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAv9ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt5/eKMowAODP7nQXihprNU2sGkw46EXKgiBXYzSNBz+CSVO2WF1EoQchjdiLN9MzF6NHY0w09dbvwJkmXPDGoYeaePJQM//KbLtCgzJT6O+XvPs+Ozu8/3ZC+sw7CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ2nw3Xm0XcZK+TORxeez21vJ8Wm/sqlPrq3em05LGrZrH/QR4rfrm+FRzAwEAAODwSMr8PiLudtZm07o9keX/nfKcNOf/4bk8LvP53Xn/xtby0eKj6TL///23ey/tdDSRZP2kjS4sDvqn9g5l7DFN8cB7/qFnjGUrn917SbIvpP3hyoubnWw9W9/duvV+NwuP1DFaAOBRnCzrIij/HkrrXpMDA+DQGKsk3mX+n0w0OyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAOmyuxDNl3IqI6bH7cWpja3l+VP3N6p3p9aKcu3lztdpm2kQnIhYWB/1TNc7l4CpX8/pnc4NB/8rVa3UHxyNixEc39vfPk2L4/3pONyKGjpx4eUQ7H++jr13t7AmKyzPqXcPxdH4PPbk1dKS1Z8Hf2841cQHUFbSL7+dxdDFe+/c+HJTX3v/fcs3/HQEA8NTrFCXNRO921mbTY63JiO0fh/P/NypxDOX92zfyI/n79Ur+f++Tc7erfVXz/15N83sSzCxd+mLm6rXrby1emrvYv9j//O3TvXd6Z86fPXt+JrtXMrMQbXdMAAAA+A+6Ranm/+3Jvfv/xypxPGD/P98SzvP/L7/vfV3tK5H/j3R/06/pkQAAABxG3Z3ohdf/+rM14oxWtxtfzS0tXenlrzvvT+evtQ73ER0pSjX/TyabHhUAAABQh82V1tD+/4VKHA/Y/68+///sT6/8Um0ziYjxiMsR0T85f3lwob7pHGh1/FA566jb9EwBAABoynhRqvv/nez5//bOIw/tiHjzRMTfxW/4Y5/5f/LBtz9X+6o+/3+m1lkePO2pfD2yeipibKrpEQEAAPA0O1qUNNn/o7M2++mvxz7qev4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoG7/BAAA//8t0Sun")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)

2.094072647s ago: executing program 4 (id=1374):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="05000000000400000000000100000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008027"], 0x48}, 0x1, 0x0, 0x0, 0x20024800}, 0x0)

1.959513793s ago: executing program 4 (id=1375):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5fd0cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb6d658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d967206115b492d825751fcc00000000000000e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bebb749daef202e0412a73d545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177de97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b8f8451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f50520f91fbf7201fc9621d0aee9735d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fbad8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c40000005e538c77b2b14f63d253705363846bc4e9cd3284ff329330812d2211ae34106e0306376a2b1cfe60a09becae2b05ec9adcac47612af85f598a880fa97891a7a290b6e730800542aea761aeb463f5ff5bdf5099ae8ad4afe99db9e9c4e703cb900e9ae272742fe2ff81d1a4f15668392cdafd2e1757706f47f9f84e532f25e2737cb6f6e89378f8d79ab8507b109c7f1f3653a5bc9d54ccc633de6263526eac10519274"], 0x1, 0x5ee3, &(0x7f000000e480)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb)

1.906841039s ago: executing program 2 (id=1376):
r0 = socket(0x1d, 0x2, 0x6)
r1 = syz_open_dev$ndb(&(0x7f0000001140), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)

1.722999561s ago: executing program 2 (id=1377):
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20)
unlink(&(0x7f00000003c0)='./bus\x00')

1.606508874s ago: executing program 2 (id=1378):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c0050890e1d2cc1bbbdf08d08fe06ff2766758d8955927fab01a7ccdecfc59b2041a9461723f1db971e775e0e358c03b00c510998283ed6f1dba0502d352e58b65a28492b0a7053e14eccd84ac5b3452602d77c0ca0"], 0x1, 0x442a, &(0x7f0000008940)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)

868.10781ms ago: executing program 3 (id=1380):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090)

755.056642ms ago: executing program 4 (id=1381):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}}, 0x0)

698.752969ms ago: executing program 3 (id=1382):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup2(r0, r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000d80)={'ip6tnl0\x00', &(0x7f0000000d00)={'syztnl0\x00', 0x0, 0x4, 0xd6, 0x7f, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x700, 0x7, 0xffffffff, 0x7f}})

595.653791ms ago: executing program 3 (id=1383):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

463.950136ms ago: executing program 3 (id=1384):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

287.783777ms ago: executing program 3 (id=1385):
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000040))

257.577181ms ago: executing program 0 (id=1386):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0xa, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0)

165.093601ms ago: executing program 1 (id=1387):
r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x4, {0xff, 0x8, "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", 0x0, 0x74, 0x4, 0x6, 0x0, 0x5, 0x9}, r1}}, 0x128)

113.770997ms ago: executing program 0 (id=1388):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r0, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)

23.672468ms ago: executing program 0 (id=1389):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000004fc0)={0x38, r0, 0x10ada85e65c25349, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x5, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x38}}, 0x0)

765.37µs ago: executing program 3 (id=1390):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2311091, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20)

0s ago: executing program 0 (id=1391):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c)

kernel console output (not intermixed with test programs):

06a-8241-57ec7d4412cf
[  118.456613][ T6009] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  118.469490][ T5976] XFS (loop1): Quotacheck: Done.
[  118.480341][ T5985] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  118.529326][ T5985] BTRFS info (device loop2): use zlib compression, level 3
[  118.544307][ T5985] BTRFS info (device loop2): using free space tree
[  118.544513][ T6009] EXT4-fs (loop4): 1 orphan inode deleted
[  118.592164][ T6009] EXT4-fs (loop4): 1 truncate cleaned up
[  118.614932][ T6009] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  118.643379][ T4246] XFS (loop1): Unmounting Filesystem
[  118.681769][ T5985] BTRFS info (device loop2): enabling ssd optimizations
[  118.819218][ T4245] EXT4-fs (loop4): unmounting filesystem.
[  118.935346][ T4253] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  119.214769][ T6010] loop3: detected capacity change from 0 to 32768
[  119.253214][ T6010] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.509 (6010)
[  119.276112][ T6035] loop0: detected capacity change from 0 to 1024
[  119.309264][ T6010] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  119.339416][ T6010] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  119.383036][ T6010] BTRFS info (device loop3): using free space tree
[  119.528827][ T4312] hfsplus: b-tree write err: -5, ino 4
[  119.641200][ T6055] loop2: detected capacity change from 0 to 4096
[  119.740063][ T6010] BTRFS info (device loop3): enabling ssd optimizations
[  119.748346][ T6060] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.973159][ T4251] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  120.400485][ T6040] loop1: detected capacity change from 0 to 40427
[  120.441760][ T6040] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  120.468165][ T6040] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  120.502090][ T6040] F2FS-fs (loop1): invalid crc value
[  120.503803][ T6075] loop2: detected capacity change from 0 to 2048
[  120.548379][ T6040] F2FS-fs (loop1): Found nat_bits in checkpoint
[  120.596615][ T6075] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0002]
[  120.628534][ T6075] System zones: 0-4
[  120.634171][ T6075] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  120.716123][ T6037] loop4: detected capacity change from 0 to 40427
[  120.718957][ T6040] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  120.762023][ T6037] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff
[  120.777228][ T6040] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  120.780647][ T6037] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4
[  120.800485][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  120.853951][ T6037] F2FS-fs (loop4): invalid crc value
[  120.877671][ T6037] F2FS-fs (loop4): Found nat_bits in checkpoint
[  121.016372][ T6037] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  121.124431][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  121.124445][   T27] audit: type=1800 audit(1730217048.153:15): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.516" name="bus" dev="loop4" ino=10 res=0 errno=0
[  121.203798][ T4245] syz-executor: attempt to access beyond end of device
[  121.203798][ T4245] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  121.266952][ T6094] loop3: detected capacity change from 0 to 4096
[  121.328468][ T6095] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  121.391072][ T6073] loop0: detected capacity change from 0 to 32768
[  121.604185][ T6073] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  121.624263][ T6073] XFS (loop0): Mounting V5 Filesystem
[  121.760463][ T6116] loop1: detected capacity change from 0 to 256
[  121.779946][ T6073] XFS (loop0): Ending clean mount
[  121.804273][ T6073] XFS (loop0): Quotacheck needed: Please wait.
[  121.855968][ T6073] XFS (loop0): Quotacheck: Done.
[  122.028279][ T4254] XFS (loop0): Unmounting Filesystem
[  122.108316][ T6120] loop1: detected capacity change from 0 to 2048
[  122.171420][ T6120] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0002]
[  122.269666][ T6120] System zones: 0-4
[  122.295525][ T6120] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  122.512718][ T4246] EXT4-fs (loop1): unmounting filesystem.
[  122.744269][ T6127] loop4: detected capacity change from 0 to 32768
[  122.839435][ T6127] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  122.867188][ T6111] loop2: detected capacity change from 0 to 32768
[  122.881801][ T6127] XFS (loop4): Mounting V5 Filesystem
[  122.922513][ T6111] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.531 (6111)
[  122.943509][ T6139] loop1: detected capacity change from 0 to 256
[  122.989737][ T6111] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  123.029056][ T6139] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd5ba4d7b, utbl_chksum : 0xe619d30d)
[  123.032322][ T6127] XFS (loop4): Ending clean mount
[  123.047429][ T6111] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  123.079627][ T6111] BTRFS info (device loop2): using free space tree
[  123.116404][ T6127] XFS (loop4): Quotacheck needed: Please wait.
[  123.154647][ T6128] loop3: detected capacity change from 0 to 40427
[  123.227270][ T6128] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  123.244646][ T6127] XFS (loop4): Quotacheck: Done.
[  123.270682][ T6128] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  123.304552][ T6128] F2FS-fs (loop3): invalid crc value
[  123.342714][ T4245] XFS (loop4): Unmounting Filesystem
[  123.389888][ T6128] F2FS-fs (loop3): Found nat_bits in checkpoint
[  123.467738][ T6111] BTRFS info (device loop2): enabling ssd optimizations
[  123.471042][ T6132] loop0: detected capacity change from 0 to 40427
[  123.477335][ T6128] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  123.489124][ T6128] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  123.512403][ T6132] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff
[  123.520836][ T6132] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4
[  123.543577][ T6132] F2FS-fs (loop0): invalid crc value
[  123.559386][ T4253] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  123.609360][ T6132] F2FS-fs (loop0): Found nat_bits in checkpoint
[  123.645324][ T4237] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 9 /dev/loop2 scanned by udevd (4237)
[  123.852210][ T6132] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  123.926178][   T27] audit: type=1800 audit(1730217050.953:16): pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.541" name="bus" dev="loop0" ino=10 res=0 errno=0
[  124.013712][ T4254] syz-executor: attempt to access beyond end of device
[  124.013712][ T4254] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  124.810884][ T6195] loop4: detected capacity change from 0 to 256
[  124.870918][ T6195] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd5ba4d7b, utbl_chksum : 0xe619d30d)
[  124.890683][ T6199] loop0: detected capacity change from 0 to 256
[  124.946892][ T6197] loop3: detected capacity change from 0 to 4096
[  125.015817][ T6197] NILFS (loop3): invalid segment: Checksum error in segment payload
[  125.034613][ T6197] NILFS (loop3): trying rollback from an earlier position
[  125.081473][ T6197] NILFS (loop3): recovery complete
[  125.097317][ T6202] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.258464][ T6204] loop1: detected capacity change from 0 to 512
[  125.299792][ T6204] EXT4-fs (loop1): orphan cleanup on readonly fs
[  125.341783][ T4296] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  125.354063][ T6193] loop2: detected capacity change from 0 to 32768
[  125.356564][ T6204] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  125.385265][ T6204] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  125.407671][ T6204] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.562: attempt to clear invalid blocks 2 len 1
[  125.424762][ T6204] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.562: invalid indirect mapped block 1819239214 (level 0)
[  125.455393][ T6193] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  125.462152][ T6204] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.562: invalid indirect mapped block 1819239214 (level 1)
[  125.487897][ T6193] XFS (loop2): Mounting V5 Filesystem
[  125.530474][ T6204] EXT4-fs (loop1): 1 truncate cleaned up
[  125.537224][ T6204] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  125.601310][ T6204] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  125.658666][ T6204] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  125.687856][ T6193] XFS (loop2): Ending clean mount
[  125.751906][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.765023][ T6193] XFS (loop2): Quotacheck needed: Please wait.
[  125.790038][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.812341][ T6193] XFS (loop2): Quotacheck: Done.
[  125.820356][ T4296] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  125.851297][ T4246] EXT4-fs (loop1): unmounting filesystem.
[  125.881720][ T4296] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  125.931377][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.976915][ T4296] usb 1-1: config 0 descriptor??
[  125.997070][ T4253] XFS (loop2): Unmounting Filesystem
[  126.004813][ T6234] loop4: detected capacity change from 0 to 256
[  126.271037][ T6244] loop3: detected capacity change from 0 to 256
[  126.357517][ T6244] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd5ba4d7b, utbl_chksum : 0xe619d30d)
[  126.410845][ T6242] loop4: detected capacity change from 0 to 4096
[  126.426912][ T6242] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  126.455509][ T4296] uclogic 0003:5543:0003.000B: No inputs registered, leaving
[  126.476636][ T4296] uclogic 0003:5543:0003.000B: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.0-1/input0
[  126.594743][ T6252] loop2: detected capacity change from 0 to 4096
[  126.644224][ T6252] NILFS (loop2): invalid segment: Checksum error in segment payload
[  126.679904][ T4296] usb 1-1: USB disconnect, device number 6
[  126.687554][ T6252] NILFS (loop2): trying rollback from an earlier position
[  126.737283][ T6252] NILFS (loop2): recovery complete
[  126.753757][ T6254] loop4: detected capacity change from 0 to 1024
[  126.760917][ T6255] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.830275][ T6254] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  126.964778][ T6264] loop2: detected capacity change from 0 to 512
[  127.017819][ T6264] EXT4-fs (loop2): orphan cleanup on readonly fs
[  127.027810][ T6264] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  127.037057][ T6264] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  127.053073][ T6264] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.582: attempt to clear invalid blocks 2 len 1
[  127.067981][ T6264] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.582: invalid indirect mapped block 1819239214 (level 0)
[  127.096605][ T6264] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.582: invalid indirect mapped block 1819239214 (level 1)
[  127.111111][ T6264] EXT4-fs (loop2): 1 truncate cleaned up
[  127.116871][ T6264] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  127.172709][ T4245] EXT4-fs (loop4): unmounting filesystem.
[  127.189785][ T6264] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  127.237770][ T6264] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  127.345969][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  127.553712][ T6280] netlink: 'syz.1.592': attribute type 153 has an invalid length.
[  127.747715][ T6292] loop1: detected capacity change from 0 to 256
[  127.762642][ T6292] exfat: Deprecated parameter 'namecase'
[  127.811909][ T4296] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  127.826925][ T6292] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb59a85fc, utbl_chksum : 0xe619d30d)
[  128.101736][ T4296] usb 5-1: Using ep0 maxpacket: 16
[  128.107131][ T6269] loop3: detected capacity change from 0 to 32768
[  128.152750][ T6269] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  128.161272][ T6269] XFS (loop3): Mounting V5 Filesystem
[  128.231963][ T4296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.264508][ T6269] XFS (loop3): Ending clean mount
[  128.274875][ T4296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.285164][ T6269] XFS (loop3): Quotacheck needed: Please wait.
[  128.297956][ T4296] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00
[  128.328844][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.329066][ T6269] XFS (loop3): Quotacheck: Done.
[  128.366706][ T4296] usb 5-1: config 0 descriptor??
[  128.425989][ T4251] XFS (loop3): Unmounting Filesystem
[  128.542020][  T127] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  128.795045][  T127] usb 3-1: Using ep0 maxpacket: 8
[  128.878094][ T4296] elecom 0003:056E:00FD.000C: item fetching failed at offset 5/9
[  128.895642][ T4296] elecom: probe of 0003:056E:00FD.000C failed with error -22
[  128.915060][  T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.943722][  T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.971656][  T127] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[  128.991743][  T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.026671][  T127] usb 3-1: config 0 descriptor??
[  129.051154][ T6318] loop0: detected capacity change from 0 to 40427
[  129.059093][ T6318] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  129.074666][ T6318] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  129.093013][ T4787] usb 5-1: USB disconnect, device number 3
[  129.106254][ T6318] F2FS-fs (loop0): invalid crc value
[  129.144301][ T6318] F2FS-fs (loop0): Found nat_bits in checkpoint
[  129.217595][ T6318] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  129.237289][ T6318] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  129.267176][ T6327] loop3: detected capacity change from 0 to 32768
[  129.298644][ T6327] XFS: attr2 mount option is deprecated.
[  129.306909][ T6327] XFS: ikeep mount option is deprecated.
[  129.318307][ T6327] XFS: noikeep mount option is deprecated.
[  129.389923][ T6327] XFS (loop3): Mounting V5 Filesystem
[  129.411323][ T6325] loop1: detected capacity change from 0 to 32768
[  129.422446][ T6325] XFS: ikeep mount option is deprecated.
[  129.472597][ T6327] XFS (loop3): Ending clean mount
[  129.480338][ T6327] XFS (loop3): Quotacheck needed: Please wait.
[  129.498813][ T6325] XFS (loop1): Mounting V5 Filesystem
[  129.521417][  T127] logitech 0003:046D:C298.000D: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.2-1/input0
[  129.534629][  T127] logitech 0003:046D:C298.000D: no inputs found
[  129.551886][ T6327] XFS (loop3): Quotacheck: Done.
[  129.691415][ T6325] XFS (loop1): Ending clean mount
[  129.691818][ T4251] XFS (loop3): Unmounting Filesystem
[  129.714604][ T6325] XFS (loop1): Quotacheck needed: Please wait.
[  129.739590][ T4787] usb 3-1: USB disconnect, device number 5
[  129.840270][ T6325] XFS (loop1): Quotacheck: Done.
[  130.010576][ T4246] XFS (loop1): Unmounting Filesystem
[  130.098774][ T6357] tipc: Started in network mode
[  130.105981][ T6357] tipc: Node identity 425983d418a, cluster identity 4711
[  130.126589][ T6357] tipc: Enabled bearer <eth:xfrm0>, priority 0
[  130.527027][  T127] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  130.539720][ T6370] loop1: detected capacity change from 0 to 128
[  130.550032][ T6349] loop0: detected capacity change from 0 to 32768
[  130.575797][ T6349] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  130.622423][ T6370] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  130.632118][ T6370] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.650768][ T4264] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  130.670161][ T6375] loop2: detected capacity change from 0 to 256
[  130.752796][ T6375] exfat: Deprecated parameter 'namecase'
[  130.781750][  T127] usb 5-1: Using ep0 maxpacket: 16
[  130.804311][ T6375] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb59a85fc, utbl_chksum : 0xe619d30d)
[  130.908685][ T4246] EXT4-fs (loop1): unmounting filesystem.
[  130.914975][  T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.947157][  T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.992577][  T127] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  131.025901][  T127] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  131.039124][ T6388] loop1: detected capacity change from 0 to 512
[  131.046287][  T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.055537][ T6388] EXT4-fs: Ignoring removed orlov option
[  131.061420][ T6389] tipc: Enabled bearer <eth:xfrm0>, priority 0
[  131.068122][ T4435] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  131.077894][ T6388] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  131.102569][  T127] usb 5-1: config 0 descriptor??
[  131.123283][   T14] tipc: Node number set to 1526301652
[  131.141418][ T6388] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.628: Attempting to read directory block (0) that is past i_size (256)
[  131.166016][ T6388] EXT4-fs (loop1): Remounting filesystem read-only
[  131.180735][ T6388] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  131.189683][ T6388] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  131.271576][ T4246] EXT4-fs (loop1): unmounting filesystem.
[  131.331876][ T4435] usb 4-1: Using ep0 maxpacket: 16
[  131.393262][ T6398] loop1: detected capacity change from 0 to 1024
[  131.452899][ T4435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.469693][ T4435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.470685][ T6398] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  131.481538][ T4435] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00
[  131.499843][ T4435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.511836][ T4435] usb 4-1: config 0 descriptor??
[  131.573725][  T127] microsoft 0003:045E:07DA.000E: report is too long
[  131.598344][  T127] microsoft 0003:045E:07DA.000E: item 0 4 0 8 parsing failed
[  131.616606][  T127] microsoft 0003:045E:07DA.000E: parse failed
[  131.634426][ T4246] EXT4-fs (loop1): unmounting filesystem.
[  131.641655][  T127] microsoft: probe of 0003:045E:07DA.000E failed with error -22
[  131.806669][ T4429] usb 5-1: USB disconnect, device number 4
[  131.924134][ T6396] loop2: detected capacity change from 0 to 32768
[  131.993734][ T4435] elecom 0003:056E:00FD.000F: item fetching failed at offset 5/9
[  132.012605][ T4435] elecom: probe of 0003:056E:00FD.000F failed with error -22
[  132.051901][ T4292] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  132.082655][ T6406] loop1: detected capacity change from 0 to 32768
[  132.108089][ T6406] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  132.133765][ T4237] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  132.173801][ T4429] tipc: Node number set to 2886997032
[  132.250199][ T4296] usb 4-1: USB disconnect, device number 4
[  132.291898][ T4292] usb 1-1: Using ep0 maxpacket: 16
[  132.376404][ T6412] loop4: detected capacity change from 0 to 128
[  132.388507][ T6412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  132.410630][ T6412] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.459118][ T4245] EXT4-fs (loop4): unmounting filesystem.
[  132.581893][ T4292] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  132.590328][ T6417] loop1: detected capacity change from 0 to 4096
[  132.611459][ T4292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.621572][ T4292] usb 1-1: Product: syz
[  132.626234][ T4292] usb 1-1: Manufacturer: syz
[  132.639998][ T6417] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  132.648380][ T4292] usb 1-1: SerialNumber: syz
[  132.654010][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  132.660309][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  132.666292][ T6417] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  132.681791][ T4292] r8152-cfgselector 1-1: config 0 descriptor??
[  132.904760][ T4246] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  132.951810][ T4292] r8152-cfgselector 1-1: Unknown version 0x0000
[  132.970791][ T6427] tmpfs: Cannot retroactively limit inodes
[  133.120596][ T6431] loop4: detected capacity change from 0 to 8
[  133.221963][ T4292] r8152-cfgselector 1-1: Unknown version 0x0000
[  133.241991][ T4292] r8152-cfgselector 1-1: USB disconnect, device number 7
[  133.326362][ T6410] loop2: detected capacity change from 0 to 40427
[  133.357107][ T6410] F2FS-fs (loop2): invalid crc value
[  133.386942][ T6410] F2FS-fs (loop2): Found nat_bits in checkpoint
[  133.398650][ T6436] loop1: detected capacity change from 0 to 164
[  133.551722][ T6410] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  133.677353][ T4253] syz-executor: attempt to access beyond end of device
[  133.677353][ T4253] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  134.341720][ T4433] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  134.557862][ T6438] loop4: detected capacity change from 0 to 40427
[  134.577864][ T6438] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff
[  134.605024][ T6438] F2FS-fs (loop4): invalid crc value
[  134.659620][ T6438] F2FS-fs (loop4): Found nat_bits in checkpoint
[  134.706836][ T4433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.749369][ T4433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.776642][ T4433] usb 1-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00
[  134.801747][ T4433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.802752][ T6438] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  134.840737][ T4433] usb 1-1: config 0 descriptor??
[  134.913229][ T6464] loop2: detected capacity change from 0 to 8
[  134.929264][ T6438] syz.4.653: attempt to access beyond end of device
[  134.929264][ T6438] loop4: rw=524288, sector=45072, nr_sectors = 24 limit=40427
[  134.982422][ T6438] syz.4.653: attempt to access beyond end of device
[  134.982422][ T6438] loop4: rw=0, sector=45072, nr_sectors = 8 limit=40427
[  135.014000][ T6451] loop1: detected capacity change from 0 to 32768
[  135.021019][   T27] audit: type=1800 audit(1730217062.043:17): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.653" name="/" dev="loop4" ino=8 res=0 errno=0
[  135.056572][ T6451] XFS: attr2 mount option is deprecated.
[  135.083655][ T6451] XFS: ikeep mount option is deprecated.
[  135.089328][ T6451] XFS: noikeep mount option is deprecated.
[  135.155323][ T6451] XFS (loop1): Mounting V5 Filesystem
[  135.316775][ T6451] XFS (loop1): Ending clean mount
[  135.359950][ T4433] wacom 0003:056A:0317.0010: unknown main item tag 0x0
[  135.377777][ T4433] wacom 0003:056A:0317.0010: Unknown device_type for 'HID 056a:0317'. Assuming pen.
[  135.409925][ T6451] XFS (loop1): Quotacheck needed: Please wait.
[  135.414857][ T4433] wacom 0003:056A:0317.0010: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.0-1/input0
[  135.463552][ T4433] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0317.0010/input/input6
[  135.550309][ T6451] XFS (loop1): Quotacheck: Done.
[  135.578933][ T4433] usb 1-1: USB disconnect, device number 8
[  135.757756][ T4246] XFS (loop1): Unmounting Filesystem
[  136.037339][ T6474] loop2: detected capacity change from 0 to 32768
[  136.044561][ T6474] XFS: ikeep mount option is deprecated.
[  136.154897][ T6474] XFS (loop2): Mounting V5 Filesystem
[  136.312978][ T6491] loop0: detected capacity change from 0 to 1024
[  136.316111][ T6474] XFS (loop2): Ending clean mount
[  136.344186][ T6474] XFS (loop2): Quotacheck needed: Please wait.
[  136.376602][ T6474] XFS (loop2): Quotacheck: Done.
[  136.413220][ T6491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  136.567745][ T4254] EXT4-fs (loop0): unmounting filesystem.
[  136.568054][ T4253] XFS (loop2): Unmounting Filesystem
[  136.838354][ T6476] loop4: detected capacity change from 0 to 40427
[  136.867299][ T6476] F2FS-fs (loop4): invalid crc value
[  136.911015][ T6476] F2FS-fs (loop4): Found nat_bits in checkpoint
[  137.043787][ T6476] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  137.179094][ T6512] loop0: detected capacity change from 0 to 4096
[  137.191049][ T4245] syz-executor: attempt to access beyond end of device
[  137.191049][ T4245] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  137.212271][ T6512] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  137.260802][ T6512] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  137.458800][ T4254] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  137.955460][ T6533] loop3: detected capacity change from 0 to 1024
[  138.010191][ T6519] loop1: detected capacity change from 0 to 32768
[  138.058693][ T6519] XFS: noikeep mount option is deprecated.
[  138.079277][ T6533] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  138.091348][ T6537] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  138.241453][ T6519] XFS (loop1): Mounting V5 Filesystem
[  138.250629][ T6521] loop2: detected capacity change from 0 to 40427
[  138.287406][ T6521] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  138.312893][ T6553] loop0: detected capacity change from 0 to 8
[  138.322034][ T4251] EXT4-fs (loop3): unmounting filesystem.
[  138.341787][ T6521] F2FS-fs (loop2): invalid crc value
[  138.391386][ T6519] XFS (loop1): Ending clean mount
[  138.401107][ T6521] F2FS-fs (loop2): Found nat_bits in checkpoint
[  138.426908][ T6519] XFS (loop1): Quotacheck needed: Please wait.
[  138.472008][ T6553] SQUASHFS error: xz decompression failed, data probably corrupt
[  138.479925][ T6553] SQUASHFS error: Failed to read block 0xa8: -5
[  138.487053][ T6557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.692'.
[  138.514933][ T6553] SQUASHFS error: xz decompression failed, data probably corrupt
[  138.523532][ T6519] XFS (loop1): Quotacheck: Done.
[  138.542456][ T6553] SQUASHFS error: Failed to read block 0xa8: -5
[  138.568942][   T27] audit: type=1800 audit(1730217065.593:18): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.691" name="file0" dev="loop0" ino=3 res=0 errno=0
[  138.581836][ T6521] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  138.649571][ T4246] XFS (loop1): Unmounting Filesystem
[  138.669636][ T6521] syz.2.676: attempt to access beyond end of device
[  138.669636][ T6521] loop2: rw=524288, sector=45072, nr_sectors = 24 limit=40427
[  138.741823][ T6521] syz.2.676: attempt to access beyond end of device
[  138.741823][ T6521] loop2: rw=0, sector=45072, nr_sectors = 8 limit=40427
[  138.781926][   T27] audit: type=1800 audit(1730217065.813:19): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.676" name="/" dev="loop2" ino=8 res=0 errno=0
[  138.901201][ T6568] loop4: detected capacity change from 0 to 64
[  138.928411][ T6568] hfs: gid requires an argument
[  138.935958][ T6568] hfs: unable to parse mount options
[  138.995897][ T4237] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  139.091666][ T4433] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  139.242049][ T6573] loop3: detected capacity change from 0 to 4096
[  139.346931][ T4433] usb 1-1: Using ep0 maxpacket: 16
[  139.353630][   T27] audit: type=1800 audit(1730217066.383:20): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.702" name="bus" dev="loop3" ino=33 res=0 errno=0
[  139.467417][ T6581] loop2: detected capacity change from 0 to 1024
[  139.477477][ T4433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.500696][ T4433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.521193][ T4433] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  139.530606][ T4433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.545016][ T4433] usb 1-1: config 0 descriptor??
[  139.569664][ T6581] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  139.714204][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  140.035959][ T4433] hid-led 0003:1294:1320.0011: unbalanced delimiter at end of report description
[  140.062174][ T4433] hid-led: probe of 0003:1294:1320.0011 failed with error -22
[  140.111752][ T4429] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  140.249711][ T4433] usb 1-1: USB disconnect, device number 9
[  140.296806][ T6599] loop3: detected capacity change from 0 to 40427
[  140.320758][ T6599] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff
[  140.349885][ T6599] F2FS-fs (loop3): invalid crc value
[  140.355635][ T4429] usb 3-1: Using ep0 maxpacket: 16
[  140.374446][ T6599] F2FS-fs (loop3): Found nat_bits in checkpoint
[  140.421926][ T6599] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  140.463178][ T6599] syz.3.712: attempt to access beyond end of device
[  140.463178][ T6599] loop3: rw=524288, sector=45072, nr_sectors = 24 limit=40427
[  140.479722][ T6599] syz.3.712: attempt to access beyond end of device
[  140.479722][ T6599] loop3: rw=0, sector=45072, nr_sectors = 8 limit=40427
[  140.494292][ T4429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.505562][   T27] audit: type=1800 audit(1730217067.533:21): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.712" name="/" dev="loop3" ino=8 res=0 errno=0
[  140.510790][ T4429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.548060][ T4429] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  140.557555][ T4429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.573836][ T4429] usb 3-1: config 0 descriptor??
[  140.707209][ T6606] loop4: detected capacity change from 0 to 32768
[  140.721362][ T6606] XFS: attr2 mount option is deprecated.
[  140.728476][ T6606] XFS: ikeep mount option is deprecated.
[  140.734472][ T6606] XFS: noikeep mount option is deprecated.
[  140.776618][ T6606] XFS (loop4): Mounting V5 Filesystem
[  140.880502][ T6606] XFS (loop4): Ending clean mount
[  140.890992][ T6606] XFS (loop4): Quotacheck needed: Please wait.
[  140.940029][ T6606] XFS (loop4): Quotacheck: Done.
[  141.028147][ T4245] XFS (loop4): Unmounting Filesystem
[  141.055265][ T4429] bigben 0003:146B:0902.0012: unexpected rdesc, please submit for review
[  141.063016][ T6625] loop0: detected capacity change from 0 to 256
[  141.070972][ T4429] bigben 0003:146B:0902.0012: item fetching failed at offset 1/5
[  141.080882][ T4429] bigben 0003:146B:0902.0012: parse failed
[  141.087062][ T4429] bigben: probe of 0003:146B:0902.0012 failed with error -22
[  141.097205][ T6625] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  141.128889][ T6625] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf8e2a5da, utbl_chksum : 0xe619d30d)
[  141.362372][  T127] usb 3-1: USB disconnect, device number 6
[  141.664036][ T6627] loop3: detected capacity change from 0 to 32768
[  141.871217][ T6634] loop0: detected capacity change from 0 to 32768
[  141.883404][ T6634] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.723 (6634)
[  141.925954][ T6634] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  141.961895][ T6634] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  141.971162][ T6634] BTRFS info (device loop0): use no compression
[  142.021837][ T6634] BTRFS info (device loop0): using free space tree
[  142.095050][ T6637] loop1: detected capacity change from 0 to 32768
[  142.224376][ T6637] JBD2: Ignoring recovery information on journal
[  142.224578][ T6653] loop2: detected capacity change from 0 to 2048
[  142.255463][ T6637] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  142.296552][ T6653] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  142.384556][ T4246] ocfs2: Unmounting device (7,1) on (node local)
[  142.391482][ T6664] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.392090][ T6653] syz.2.727: attempt to access beyond end of device
[  142.392090][ T6653] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  142.629510][ T4254] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  142.651414][ T6669] netlink: 'syz.3.732': attribute type 3 has an invalid length.
[  142.922866][ T6671] loop4: detected capacity change from 0 to 4096
[  142.938600][ T6677] loop3: detected capacity change from 0 to 22
[  142.990522][ T6677] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  143.037155][ T6677] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  143.177031][   T27] audit: type=1800 audit(1730217070.203:22): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.718" name="bus" dev="loop4" ino=33 res=0 errno=0
[  143.860493][ T6673] loop2: detected capacity change from 0 to 32768
[  143.906730][ T6673] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.733 (6673)
[  143.961735][ T6673] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  144.008378][ T6673] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  144.054775][ T6673] BTRFS info (device loop2): turning off barriers
[  144.061324][ T6673] BTRFS info (device loop2): enabling all of the rescue options
[  144.102289][ T6673] BTRFS info (device loop2): ignoring data csums
[  144.108704][ T6673] BTRFS info (device loop2): ignoring bad roots
[  144.116488][ T6679] loop0: detected capacity change from 0 to 32768
[  144.134498][ T6679] XFS: attr2 mount option is deprecated.
[  144.140211][ T6679] XFS: ikeep mount option is deprecated.
[  144.146969][ T6673] BTRFS info (device loop2): disabling log replay at mount time
[  144.166210][ T6673] BTRFS info (device loop2): setting nodatacow, compression disabled
[  144.175118][ T6679] XFS: noikeep mount option is deprecated.
[  144.225692][ T6673] BTRFS info (device loop2): turning on flush-on-commit
[  144.271115][ T6673] BTRFS info (device loop2): using free space tree
[  144.292845][ T6679] XFS (loop0): Mounting V5 Filesystem
[  144.385594][ T6679] XFS (loop0): Ending clean mount
[  144.409219][ T6679] XFS (loop0): Quotacheck needed: Please wait.
[  144.492112][ T6679] XFS (loop0): Quotacheck: Done.
[  144.526759][ T6700] loop1: detected capacity change from 0 to 32768
[  144.553479][ T6700] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.744 (6700)
[  144.568483][ T6700] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  144.579845][ T6673] BTRFS info (device loop2: state C): enabling ssd optimizations
[  144.602026][ T6700] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  144.637541][ T6700] BTRFS info (device loop1): use no compression
[  144.645442][ T4254] XFS (loop0): Unmounting Filesystem
[  144.658322][ T6700] BTRFS info (device loop1): using free space tree
[  144.738961][ T4253] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  144.800087][ T4237] udevd[4237]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [6747] terminated by signal 33 (Unknown signal 33)
[  144.878331][ T4264] udevd[4264]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [6751] terminated by signal 33 (Unknown signal 33)
[  144.979401][ T6763] loop4: detected capacity change from 0 to 8
[  145.044884][ T6771] loop2: detected capacity change from 0 to 512
[  145.080840][ T6771] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  145.107705][ T6771] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  145.210389][ T6771] EXT4-fs (loop2): 1 truncate cleaned up
[  145.241890][ T6771] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  145.280018][ T6771] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  145.292633][ T4246] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  145.357664][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  145.615930][ T6788] loop4: detected capacity change from 0 to 2048
[  145.709843][ T6788] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  145.853528][ T4245] EXT4-fs (loop4): unmounting filesystem.
[  145.997189][ T6807] loop0: detected capacity change from 0 to 2048
[  146.038980][ T6807] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  146.084692][ T6807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.471377][ T6823] loop1: detected capacity change from 0 to 164
[  146.661059][ T6829] loop3: detected capacity change from 0 to 512
[  146.800160][ T6829] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.779: bg 0: block 5: invalid block bitmap
[  146.910318][ T6829] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  146.932242][ T6819] loop2: detected capacity change from 0 to 32768
[  146.939084][ T6829] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.779: invalid indirect mapped block 3 (level 2)
[  146.940291][ T6829] EXT4-fs (loop3): 1 orphan inode deleted
[  147.024193][ T6829] EXT4-fs (loop3): 1 truncate cleaned up
[  147.039902][ T6819] XFS (loop2): Mounting V5 Filesystem
[  147.041116][ T6829] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  147.168042][ T6821] loop4: detected capacity change from 0 to 32768
[  147.183771][ T6821] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.773 (6821)
[  147.187479][ T6819] XFS (loop2): Ending clean mount
[  147.219672][ T6821] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  147.230417][ T6821] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  147.243517][ T6821] BTRFS info (device loop4): use no compression
[  147.250874][ T6821] BTRFS info (device loop4): using free space tree
[  147.259895][ T6819] XFS (loop2): Quotacheck needed: Please wait.
[  147.295728][ T6819] XFS (loop2): Quotacheck: Done.
[  147.363677][ T4253] XFS (loop2): Unmounting Filesystem
[  147.370144][ T4251] EXT4-fs (loop3): unmounting filesystem.
[  147.382065][ T6851] netlink: 'syz.0.793': attribute type 4 has an invalid length.
[  147.419926][ T6832] loop1: detected capacity change from 0 to 32768
[  147.434260][ T6851] netlink: 17 bytes leftover after parsing attributes in process `syz.0.793'.
[  147.459693][ T6832] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.791 (6832)
[  147.532693][ T6832] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.599865][ T6832] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  147.686513][ T6832] BTRFS info (device loop1): using free space tree
[  147.768700][ T4245] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  147.892991][ T6875] loop3: detected capacity change from 0 to 16
[  147.973050][ T6875] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36
[  148.132275][ T6832] BTRFS info (device loop1): enabling ssd optimizations
[  148.263439][ T6897] program syz.0.789 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  148.446235][ T4246] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.866963][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'.
[  149.070868][ T6879] loop2: detected capacity change from 0 to 32768
[  149.096163][ T6879] XFS: attr2 mount option is deprecated.
[  149.127302][ T6879] XFS: ikeep mount option is deprecated.
[  149.135444][ T6879] XFS: noikeep mount option is deprecated.
[  149.160761][ T6916] loop1: detected capacity change from 0 to 4096
[  149.170324][ T6895] loop3: detected capacity change from 0 to 32768
[  149.231833][ T6879] XFS (loop2): Mounting V5 Filesystem
[  149.250560][ T6916] ntfs: volume version 3.1.
[  149.256706][ T6895] JBD2: Ignoring recovery information on journal
[  149.314269][ T6916] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  149.336966][ T6895] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  149.351791][ T6916] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  149.424130][ T4251] ocfs2: Unmounting device (7,3) on (node local)
[  149.424354][ T6879] XFS (loop2): Ending clean mount
[  149.455292][ T6879] XFS (loop2): Quotacheck needed: Please wait.
[  149.461936][ T6916] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to map page.
[  149.480735][ T6916] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5).
[  149.527875][ T6879] XFS (loop2): Quotacheck: Done.
[  149.552083][ T6916] ntfs: (device loop1): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5.
[  149.705211][ T4253] XFS (loop2): Unmounting Filesystem
[  149.738319][ T4246] ntfs: (device loop1): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  149.849453][ T6908] loop0: detected capacity change from 0 to 32768
[  149.938071][ T6939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.806'.
[  150.191950][ T6948] netlink: 216 bytes leftover after parsing attributes in process `syz.4.812'.
[  150.232523][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'.
[  150.332934][   T27] audit: type=1326 audit(1730217077.363:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.3.813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a2577e719 code=0x0
[  150.690908][ T6974] loop0: detected capacity change from 0 to 256
[  150.852989][ T6979] loop2: detected capacity change from 0 to 16
[  150.894100][ T6979] erofs: (device loop2): mounted with root inode @ nid 36.
[  150.943175][ T6979] syz.2.824: attempt to access beyond end of device
[  150.943175][ T6979] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16
[  151.111233][ T6987] UBIFS error (pid: 6987): cannot open "./file0", error -22
[  151.458855][ T7003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.836'.
[  151.829520][ T7020] loop3: detected capacity change from 0 to 512
[  151.863703][ T7020] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  151.893450][ T7020] EXT4-fs (loop3): orphan cleanup on readonly fs
[  151.921103][ T7020] Quota error (device loop3): v2_read_file_info: Block with free entry 32513 out of range (1, 6).
[  151.944467][ T7028] loop0: detected capacity change from 0 to 512
[  151.952404][ T7028] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  152.001844][ T7020] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  152.014121][ T7028] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  152.057466][ T7028] EXT4-fs (loop0): 1 truncate cleaned up
[  152.091668][ T7020] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  152.092741][ T7028] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  152.109681][ T7020] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #16: comm syz.3.844: casefold flag without casefold feature
[  152.182221][ T7020] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.844: couldn't read orphan inode 16 (err -117)
[  152.203840][ T7028] EXT4-fs warning (device loop0): ext4_group_extend:1870: can't shrink FS - resize aborted
[  152.252094][ T7020] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  152.299971][ T4254] EXT4-fs (loop0): unmounting filesystem.
[  152.364148][ T4251] EXT4-fs (loop3): unmounting filesystem.
[  152.574588][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.854'.
[  152.592364][ T7043] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  152.607857][ T7018] loop2: detected capacity change from 0 to 32768
[  152.687852][ T7018] JBD2: Ignoring recovery information on journal
[  152.750555][ T7018] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  152.811721][   T14] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  152.856378][ T7054] mmap: syz.4.858 (7054): VmData 37474304 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  152.957617][ T4253] ocfs2: Unmounting device (7,2) on (node local)
[  152.990891][ T7026] loop1: detected capacity change from 0 to 32768
[  153.017170][ T7058] loop4: detected capacity change from 0 to 512
[  153.032210][ T7026] XFS: ikeep mount option is deprecated.
[  153.112791][ T7026] XFS (loop1): Mounting V5 Filesystem
[  153.139652][ T7058] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  153.149286][ T7058] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  153.231660][ T4772] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  153.235536][ T7026] XFS (loop1): Ending clean mount
[  153.304918][ T7026] XFS (loop1): Quotacheck needed: Please wait.
[  153.307207][ T4245] EXT4-fs (loop4): unmounting filesystem.
[  153.379181][ T7026] XFS (loop1): Quotacheck: Done.
[  153.401950][   T14] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  153.420349][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.428994][   T14] usb 4-1: Product: syz
[  153.433799][   T14] usb 4-1: Manufacturer: syz
[  153.438398][   T14] usb 4-1: SerialNumber: syz
[  153.445974][   T14] usb 4-1: config 0 descriptor??
[  153.554204][ T4246] XFS (loop1): Unmounting Filesystem
[  153.741577][ T7087] loop2: detected capacity change from 0 to 1024
[  153.772010][ T4772] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  153.794826][ T4772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.834628][ T4772] usb 1-1: Product: syz
[  153.851919][ T4772] usb 1-1: Manufacturer: syz
[  153.856535][ T4772] usb 1-1: SerialNumber: syz
[  153.882402][ T4772] usb 1-1: config 0 descriptor??
[  153.912221][   T46] hfsplus: b-tree write err: -5, ino 4
[  153.982077][   T14] mos7840 4-1:0.0: required endpoints missing
[  153.994786][   T14] usb 4-1: USB disconnect, device number 5
[  154.124775][ T7095] loop2: detected capacity change from 0 to 256
[  154.176826][ T7095] exfat: Deprecated parameter 'utf8'
[  154.226684][ T7095] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  154.351833][ T4772] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  154.387393][ T4772] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  154.402441][ T4772] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19)
[  154.458451][ T7089] loop4: detected capacity change from 0 to 32768
[  154.524222][ T7089] XFS (loop4): Mounting V5 Filesystem
[  154.590968][ T4772] usb 1-1: USB disconnect, device number 10
[  154.683560][ T7089] XFS (loop4): Ending clean mount
[  154.707414][ T7089] XFS (loop4): Quotacheck needed: Please wait.
[  154.763685][ T7089] XFS (loop4): Quotacheck: Done.
[  154.890168][ T4245] XFS (loop4): Unmounting Filesystem
[  155.303958][ T7113] loop3: detected capacity change from 0 to 32768
[  155.381218][ T7139] netlink: 'syz.4.884': attribute type 25 has an invalid length.
[  155.446723][ T7139] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (20)
[  155.838610][ T7155] loop3: detected capacity change from 0 to 512
[  155.966989][ T7166] loop4: detected capacity change from 0 to 512
[  155.988515][ T7155] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  155.997811][ T7155] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  156.057011][ T7166] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  156.086332][ T7166] EXT4-fs (loop4): orphan cleanup on readonly fs
[  156.113694][ T7166] Quota error (device loop4): v2_read_file_info: Block with free entry 32513 out of range (1, 6).
[  156.134961][ T4251] EXT4-fs (loop3): unmounting filesystem.
[  156.163332][ T7166] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  156.212034][ T7166] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  156.250176][ T7166] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.903: casefold flag without casefold feature
[  156.307079][ T7166] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.903: couldn't read orphan inode 16 (err -117)
[  156.337527][ T7166] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  156.479974][ T4245] EXT4-fs (loop4): unmounting filesystem.
[  156.538993][ T7143] loop2: detected capacity change from 0 to 32768
[  156.586569][ T7143] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz.2.894 (7143)
[  156.627804][ T7186] UBIFS error (pid: 7186): cannot open "./file0", error -22
[  156.682409][ T7143] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  156.696484][ T7193] netlink: 'syz.0.912': attribute type 298 has an invalid length.
[  156.730867][ T7143] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  156.771782][ T7143] BTRFS info (device loop2): use no compression
[  156.801053][ T7143] BTRFS info (device loop2): using free space tree
[  157.460994][ T7233] loop0: detected capacity change from 0 to 128
[  157.487963][ T4253] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  157.529240][ T7233] FAT-fs (loop0): FAT read failed (blocknr 234)
[  157.673095][ T7234] FAT-fs (loop0): FAT read failed (blocknr 234)
[  157.981375][ T7208] loop4: detected capacity change from 0 to 32768
[  157.989010][ T7241] loop1: detected capacity change from 0 to 1024
[  158.016305][ T7211] loop3: detected capacity change from 0 to 32768
[  158.032263][ T7208] XFS: ikeep mount option is deprecated.
[  158.039128][ T7211] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 scanned by syz.3.920 (7211)
[  158.087300][ T7211] BTRFS info (device loop3): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  158.107708][ T7211] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  158.127912][ T7211] BTRFS info (device loop3): using free space tree
[  158.140491][ T7208] XFS (loop4): Mounting V5 Filesystem
[  158.188867][ T4306] hfsplus: b-tree write err: -5, ino 4
[  158.282930][ T7267] loop2: detected capacity change from 0 to 64
[  158.312291][ T7208] XFS (loop4): Ending clean mount
[  158.331780][ T7271] loop1: detected capacity change from 0 to 128
[  158.339058][ T7271] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  158.339684][ T7208] XFS (loop4): Quotacheck needed: Please wait.
[  158.358293][ T7271] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  158.399283][ T7211] BTRFS info (device loop3): enabling ssd optimizations
[  158.406448][   T14] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  158.439677][ T7208] XFS (loop4): Quotacheck: Done.
[  158.597891][ T4251] BTRFS info (device loop3): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  158.616745][ T4245] XFS (loop4): Unmounting Filesystem
[  158.793178][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.822901][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.839160][   T14] usb 1-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00
[  158.848621][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.868198][   T14] usb 1-1: config 0 descriptor??
[  159.381804][   T14] wacom 0003:056A:0059.0013: unknown main item tag 0x0
[  159.408604][   T14] wacom 0003:056A:0059.0013: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.0-1/input0
[  159.420082][ T4772] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  159.591514][ T4291] usb 1-1: USB disconnect, device number 11
[  159.613074][ T7318] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  159.743730][ T7329] loop3: detected capacity change from 0 to 128
[  159.868462][ T7333] loop3: detected capacity change from 0 to 128
[  159.887834][ T7333] FAT-fs (loop3): FAT read failed (blocknr 234)
[  159.896589][ T7333] FAT-fs (loop3): FAT read failed (blocknr 234)
[  159.949030][ T7331] loop4: detected capacity change from 0 to 4096
[  159.993130][ T4772] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  160.010814][ T7331] ntfs: volume version 3.1.
[  160.011175][ T4772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.044288][ T4772] usb 3-1: Product: syz
[  160.062853][ T7337] loop3: detected capacity change from 0 to 256
[  160.080200][ T4772] usb 3-1: Manufacturer: syz
[  160.089005][ T7331] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  160.097210][ T4772] usb 3-1: SerialNumber: syz
[  160.108907][    C1] vkms_vblank_simulate: vblank timer overrun
[  160.118878][ T7331] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  160.139787][    C1] vkms_vblank_simulate: vblank timer overrun
[  160.147549][ T7331] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to map page.
[  160.165034][ T4772] usb 3-1: config 0 descriptor??
[  160.175546][ T7331] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5).
[  160.220941][ T7331] ntfs: (device loop4): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5.
[  160.373601][ T4245] ntfs: (device loop4): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  160.601858][ T4295] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  160.651920][ T4772] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  160.687982][ T4772] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  160.723470][ T4772] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19)
[  160.861838][ T4295] usb 2-1: Using ep0 maxpacket: 16
[  160.961451][ T4772] usb 3-1: USB disconnect, device number 7
[  160.981970][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.005368][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.015703][ T4295] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00
[  161.026700][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.059890][ T4295] usb 2-1: config 0 descriptor??
[  161.467422][ T7383] loop3: detected capacity change from 0 to 32768
[  161.532158][ T4772] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  161.560162][ T4295] glorious 0003:22D4:1503.0014: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.1-1/input0
[  161.634531][ T7383] XFS (loop3): Mounting V5 Filesystem
[  161.647569][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'.
[  161.745432][ T7383] XFS (loop3): Ending clean mount
[  161.755758][ T4295] usb 2-1: USB disconnect, device number 8
[  161.767439][ T7383] XFS (loop3): Quotacheck needed: Please wait.
[  161.838700][ T7383] XFS (loop3): Quotacheck: Done.
[  161.886466][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.991'.
[  161.941135][ T4251] XFS (loop3): Unmounting Filesystem
[  162.122071][ T4772] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  162.122100][ T4772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.122120][ T4772] usb 5-1: Product: syz
[  162.122133][ T4772] usb 5-1: Manufacturer: syz
[  162.122148][ T4772] usb 5-1: SerialNumber: syz
[  162.124467][ T4772] usb 5-1: config 0 descriptor??
[  162.207235][ T7409] loop3: detected capacity change from 0 to 64
[  162.341844][ T4436] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  162.460626][ T7411] loop3: detected capacity change from 0 to 4096
[  162.553083][ T7411] ntfs3: loop3: failed to convert "0080" to cp864
[  162.696783][ T4772] mos7840 5-1:0.0: required endpoints missing
[  162.721149][ T4772] usb 5-1: USB disconnect, device number 5
[  162.864919][ T7423] loop0: detected capacity change from 0 to 16
[  162.882902][ T4436] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  162.892018][ T7423] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 36
[  162.911997][ T4436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.937707][ T4237] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  162.941819][ T4436] usb 3-1: Product: syz
[  162.965035][ T4436] usb 3-1: Manufacturer: syz
[  162.969666][ T4436] usb 3-1: SerialNumber: syz
[  163.018798][ T4436] usb 3-1: config 0 descriptor??
[  163.235048][ T7415] loop1: detected capacity change from 0 to 32768
[  163.279283][ T7415] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  163.287881][ T7415] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  163.299882][ T4436] usb 3-1: USB disconnect, device number 8
[  163.374249][ T7415] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  163.420762][ T4772] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  163.428835][ T4772] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  163.540422][ T7439] loop4: detected capacity change from 0 to 512
[  163.556724][ T4772] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 127ms
[  163.589517][ T4772] gfs2: fsid=syz:syz.0: jid=0: Done
[  163.603782][ T7439] EXT4-fs (loop4): corrupt root inode, run e2fsck
[  163.609352][ T7415] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  163.615689][ T7439] EXT4-fs (loop4): mount failed
[  164.019303][ T7415] syz.1.996 (7415): drop_caches: 2
[  164.033731][ T7429] loop0: detected capacity change from 0 to 32768
[  164.098871][ T7458] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1014'.
[  164.127584][ T7429] XFS (loop0): Mounting V5 Filesystem
[  164.151677][ T4291] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  164.276582][ T7429] XFS (loop0): Ending clean mount
[  164.287857][ T7429] XFS (loop0): Quotacheck needed: Please wait.
[  164.357825][ T7429] XFS (loop0): Quotacheck: Done.
[  164.407750][ T4291] usb 5-1: Using ep0 maxpacket: 16
[  164.520312][ T4254] XFS (loop0): Unmounting Filesystem
[  164.553553][ T4291] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.585944][ T4291] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.596963][ T4291] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  164.610782][ T4291] usb 5-1: config 0 interface 0 has no altsetting 0
[  164.618157][ T4291] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  164.633145][ T4291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.643087][ T4291] usb 5-1: config 0 descriptor??
[  164.805022][ T7483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1025'.
[  164.975554][ T7487] program syz.3.1027 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  165.144385][ T4291] hid-generic 0003:045E:05DA.0015: unbalanced delimiter at end of report description
[  165.171891][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'.
[  165.181374][ T4291] hid-generic: probe of 0003:045E:05DA.0015 failed with error -22
[  165.364921][ T7503] loop1: detected capacity change from 0 to 512
[  165.364951][ T1191] usb 5-1: USB disconnect, device number 6
[  165.376775][ T7503] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  165.425506][ T7503] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1034: invalid block
[  165.430495][ T7477] loop2: detected capacity change from 0 to 32768
[  165.447012][ T7503] EXT4-fs (loop1): Remounting filesystem read-only
[  165.456297][ T7503] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1034: invalid indirect mapped block 4294967295 (level 1)
[  165.475686][ T7503] EXT4-fs (loop1): Remounting filesystem read-only
[  165.482601][ T7503] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1034: invalid indirect mapped block 4294967295 (level 1)
[  165.497457][ T7503] EXT4-fs (loop1): Remounting filesystem read-only
[  165.508465][ T7503] EXT4-fs (loop1): 2 truncates cleaned up
[  165.516537][ T7503] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  165.698521][ T4246] EXT4-fs (loop1): unmounting filesystem.
[  165.929007][ T7517] loop0: detected capacity change from 0 to 512
[  165.939545][ T7518] loop2: detected capacity change from 0 to 8
[  166.008779][ T7517] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1040: bg 0: block 5: invalid block bitmap
[  166.041097][ T7517] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  166.066179][ T7497] loop3: detected capacity change from 0 to 32768
[  166.082171][ T7518] SQUASHFS error: lzo decompression failed, data probably corrupt
[  166.114072][ T7497] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1042 (7497)
[  166.130337][ T7525] loop4: detected capacity change from 0 to 164
[  166.131923][ T7518] SQUASHFS error: Failed to read block 0x91: -5
[  166.143034][ T7517] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1040: invalid indirect mapped block 3 (level 2)
[  166.162265][ T7518] SQUASHFS error: Unable to read metadata cache entry [8f]
[  166.176447][ T7497] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.179751][ T7518] SQUASHFS error: Unable to read inode 0x11f
[  166.187490][ T7517] EXT4-fs (loop0): 1 orphan inode deleted
[  166.227946][ T7497] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  166.260044][ T7517] EXT4-fs (loop0): 1 truncate cleaned up
[  166.280057][ T7497] BTRFS info (device loop3): using free space tree
[  166.301554][ T7517] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  166.494033][ T4254] EXT4-fs (loop0): unmounting filesystem.
[  166.572999][ T7546] loop2: detected capacity change from 0 to 2048
[  166.698890][ T7559] loop0: detected capacity change from 0 to 512
[  166.716401][ T7497] BTRFS info (device loop3): enabling ssd optimizations
[  166.748448][ T7546] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  166.793529][ T7565] loop4: detected capacity change from 0 to 512
[  166.794619][ T7559] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  166.800817][ T7565] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  166.840336][ T7565] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1052: invalid indirect mapped block 4294967295 (level 1)
[  166.860624][ T7559] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  166.922114][ T7559] EXT4-fs (loop0): 1 truncate cleaned up
[  166.927793][ T7559] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  166.953576][ T7565] EXT4-fs (loop4): Remounting filesystem read-only
[  166.974982][ T7565] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1052: invalid indirect mapped block 4294967295 (level 1)
[  166.983406][ T7559] fscrypt (loop0, inode 2): Error -61 getting encryption context
[  166.998526][ T4251] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  167.018405][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  167.067052][ T7565] EXT4-fs (loop4): Remounting filesystem read-only
[  167.132987][ T7565] EXT4-fs (loop4): 2 truncates cleaned up
[  167.158278][ T7565] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  167.273895][ T7531] loop1: detected capacity change from 0 to 32768
[  167.288522][ T4254] EXT4-fs (loop0): unmounting filesystem.
[  167.354447][ T4245] EXT4-fs (loop4): unmounting filesystem.
[  167.465009][ T7531] XFS (loop1): Mounting V5 Filesystem
[  167.710380][ T7531] XFS (loop1): Ending clean mount
[  167.729444][ T7531] XFS (loop1): Quotacheck needed: Please wait.
[  167.757590][ T7595] loop0: detected capacity change from 0 to 2048
[  167.784339][ T7531] XFS (loop1): Quotacheck: Done.
[  167.799541][ T7595] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  167.874383][ T7595] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  167.884424][ T7602] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.912646][ T7601] loop4: detected capacity change from 0 to 2048
[  167.936188][ T7601] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  167.949441][ T4246] XFS (loop1): Unmounting Filesystem
[  167.956748][ T7595] Remounting filesystem read-only
[  167.974089][ T7601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.346977][ T7614] loop2: detected capacity change from 0 to 8
[  168.431681][ T4436] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  168.684691][ T4436] usb 1-1: Using ep0 maxpacket: 16
[  168.804725][ T4436] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.836139][ T4436] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.866904][ T4436] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  168.878082][ T7624] loop2: detected capacity change from 0 to 512
[  168.916236][ T4436] usb 1-1: New USB device found, idVendor=1e7d, idProduct=71ce, bcdDevice= 0.00
[  168.943599][ T7624] EXT4-fs (loop2): 1 truncate cleaned up
[  168.950042][ T4436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.952983][ T7624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  168.994457][ T7624] Invalid option length (1046223) for dns_resolver key
[  169.005410][ T4436] usb 1-1: config 0 descriptor??
[  169.029570][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  169.207153][ T7612] loop4: detected capacity change from 0 to 32768
[  169.231477][ T7641] loop2: detected capacity change from 0 to 512
[  169.240841][ T7642] loop3: detected capacity change from 0 to 128
[  169.250607][ T7612] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1081 (7612)
[  169.259131][ T7642] EXT4-fs: Ignoring removed nobh option
[  169.303753][ T7642] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  169.303797][ T7612] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  169.324203][ T7612] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  169.333910][ T7612] BTRFS info (device loop4): turning off barriers
[  169.340416][ T7612] BTRFS info (device loop4): enabling all of the rescue options
[  169.347311][ T7641] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  169.357499][ T7612] BTRFS info (device loop4): ignoring data csums
[  169.377733][ T7612] BTRFS info (device loop4): ignoring bad roots
[  169.391060][ T7642] ext4 filesystem being mounted at mnt:[4026533085] supports timestamps until 2038-01-19 (0x7fffffff)
[  169.409034][ T7612] BTRFS info (device loop4): disabling log replay at mount time
[  169.436608][ T7641] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  169.452397][ T7612] BTRFS info (device loop4): setting nodatacow, compression disabled
[  169.465400][ T7612] BTRFS info (device loop4): turning on flush-on-commit
[  169.477040][ T7642] EXT4-fs (loop3): unmounting filesystem.
[  169.504605][ T4436] hid-generic 0003:1E7D:71CE.0016: collection stack underflow
[  169.515073][ T7612] BTRFS info (device loop4): using free space tree
[  169.523105][ T4436] hid-generic 0003:1E7D:71CE.0016: item 0 2 0 12 parsing failed
[  169.531275][ T4436] hid-generic: probe of 0003:1E7D:71CE.0016 failed with error -22
[  169.562150][ T7612] BTRFS info (device loop4: state C): enabling ssd optimizations
[  169.562628][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  169.687762][ T4245] BTRFS info (device loop4: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  169.718201][ T4648] usb 1-1: USB disconnect, device number 12
[  169.923483][ T7670] loop3: detected capacity change from 0 to 512
[  169.947332][ T7670] EXT4-fs (loop3): fragment/cluster size (8192) != block size (4096)
[  170.014520][ T4264] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  170.036336][ T7670] netlink: 'syz.3.1084': attribute type 8 has an invalid length.
[  170.552356][ T7690] loop1: detected capacity change from 0 to 256
[  170.580399][ T7692] loop3: detected capacity change from 0 to 64
[  170.939262][ T7698] loop3: detected capacity change from 0 to 2048
[  170.956585][ T7678] loop4: detected capacity change from 0 to 32768
[  170.964324][ T7678] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1085 (7678)
[  170.969897][ T7678] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.969964][ T7678] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  170.970007][ T7678] BTRFS info (device loop4): setting nodatacow, compression disabled
[  170.970034][ T7678] BTRFS info (device loop4): enabling auto defrag
[  170.970052][ T7678] BTRFS info (device loop4): disabling tree log
[  170.970090][ T7678] BTRFS info (device loop4): max_inline at 0
[  170.970107][ T7678] BTRFS info (device loop4): using free space tree
[  170.999932][ T7698] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  171.070304][ T7674] loop2: detected capacity change from 0 to 32768
[  171.081037][ T7674] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  171.081406][ T7674] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  171.110135][ T7674] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  171.119686][ T4648] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  171.119728][ T4648] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  171.165442][ T4648] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 45ms
[  171.279584][ T7698] EXT4-fs error (device loop3): __ext4_new_inode:1075: comm syz.3.1096: reserved inode found cleared - inode=1
[  171.318509][ T4648] gfs2: fsid=syz:syz.0: jid=0: Done
[  171.318552][ T7674] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  171.370888][ T4251] EXT4-fs (loop3): unmounting filesystem.
[  171.380811][ T7674] syz.2.1083 (7674): drop_caches: 2
[  171.438129][ T4245] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.781357][ T7725] loop3: detected capacity change from 0 to 2048
[  171.809350][ T7725] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  171.858056][ T7728] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  171.859933][ T7725] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  171.877301][ T7725] Remounting filesystem read-only
[  171.971702][ T4774] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  172.007425][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'.
[  172.178081][ T7736] loop1: detected capacity change from 0 to 2048
[  172.201253][ T7736] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  172.211995][ T4774] usb 5-1: Using ep0 maxpacket: 8
[  172.266021][ T7736] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  172.267618][ T7740] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  172.273372][ T7736] Remounting filesystem read-only
[  172.336650][ T7743] loop3: detected capacity change from 0 to 256
[  172.352126][ T4774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.352157][ T4774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.352189][ T4774] usb 5-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00
[  172.352212][ T4774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.354074][ T4774] usb 5-1: config 0 descriptor??
[  172.586135][ T7748] loop1: detected capacity change from 0 to 4096
[  172.622735][ T4293] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  172.657331][ T7748] ntfs3: loop1: failed to convert "0080" to cp864
[  172.751691][ T4785] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  172.818358][ T4774] wacom 0003:056A:00E5.0017: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.4-1/input0
[  172.881729][ T4293] usb 3-1: Using ep0 maxpacket: 16
[  172.939877][ T7752] loop0: detected capacity change from 0 to 32768
[  172.969991][ T7752] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  172.978362][ T7752] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  172.990265][ T7752] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  172.999437][ T4648] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  173.006290][ T4648] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  173.022048][ T4293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.037966][ T4293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.044613][ T4429] usb 5-1: USB disconnect, device number 7
[  173.048325][ T4293] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00
[  173.064487][ T4648] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 58ms
[  173.066267][ T4293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.080107][ T4648] gfs2: fsid=syz:syz.0: jid=0: Done
[  173.086588][ T7752] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  173.107169][ T4293] usb 3-1: config 0 descriptor??
[  173.352116][ T4785] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  173.381671][ T4785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.389686][ T4785] usb 4-1: Product: syz
[  173.401646][ T4785] usb 4-1: Manufacturer: syz
[  173.411033][ T4785] usb 4-1: SerialNumber: syz
[  173.418966][ T4785] usb 4-1: config 0 descriptor??
[  173.596082][ T4293] glorious 0003:22D4:1503.0018: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.2-1/input0
[  173.674888][ T7752] syz.0.1112 (7752): drop_caches: 2
[  173.704695][ T4648] usb 4-1: USB disconnect, device number 6
[  173.823609][ T4774] usb 3-1: USB disconnect, device number 9
[  173.939493][ T4293] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  174.078761][ T7767] loop4: detected capacity change from 0 to 512
[  174.108749][ T7767] EXT4-fs (loop4): 1 truncate cleaned up
[  174.116839][ T7767] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  174.171222][ T7767] Invalid option length (1046223) for dns_resolver key
[  174.230518][ T4245] EXT4-fs (loop4): unmounting filesystem.
[  174.331928][ T4293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.361646][ T4293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.401708][ T4293] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  174.441882][ T4293] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  174.471250][ T4293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.509425][ T4293] usb 2-1: config 0 descriptor??
[  175.002076][ T4293] redragon 0003:0C45:760B.0019: hidraw0: USB HID v0.00 Device [HID 0c45:760b] on usb-dummy_hcd.1-1/input0
[  175.205224][ T7776] loop2: detected capacity change from 0 to 32768
[  175.231380][ T7776] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1121 (7776)
[  175.234159][ T4293] usb 2-1: USB disconnect, device number 9
[  175.272352][ T7776] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.309180][ T7776] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  175.346885][ T7776] BTRFS info (device loop2): using free space tree
[  175.522899][ T7776] BTRFS info (device loop2): enabling ssd optimizations
[  175.636270][ T7794] loop0: detected capacity change from 0 to 32768
[  175.659720][ T7794] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1131 (7794)
[  175.678439][ T4253] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.696767][ T7794] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  175.717222][ T7794] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  175.733140][ T7794] BTRFS info (device loop0): setting nodatacow, compression disabled
[  175.779243][ T7794] BTRFS info (device loop0): setting datacow
[  175.795796][ T7794] BTRFS info (device loop0): doing ref verification
[  175.841671][ T7794] BTRFS info (device loop0): force clearing of disk cache
[  175.877592][ T7794] BTRFS info (device loop0): turning off barriers
[  175.912368][ T7794] BTRFS info (device loop0): enabling ssd optimizations
[  175.939041][ T7794] BTRFS info (device loop0): using spread ssd allocation scheme
[  175.967269][ T7794] BTRFS info (device loop0): not using ssd optimizations
[  176.007725][ T7794] BTRFS info (device loop0): not using spread ssd allocation scheme
[  176.027957][ T7794] BTRFS info (device loop0): using free space tree
[  176.121806][ T4293] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  176.304763][ T7794] BTRFS info (device loop0): rebuilding free space tree
[  176.508498][ T7852] loop3: detected capacity change from 0 to 1024
[  176.602483][ T7852] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  176.630357][ T4254] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  176.690413][ T4262] Bluetooth: hci4: link tx timeout
[  176.696152][ T4262] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  176.711841][ T4293] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  176.720899][ T4293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.756273][ T4293] usb 5-1: Product: syz
[  176.760551][ T4293] usb 5-1: Manufacturer: syz
[  176.765562][ T4293] usb 5-1: SerialNumber: syz
[  176.787623][ T4293] usb 5-1: config 0 descriptor??
[  176.816371][ T4251] EXT4-fs (loop3): unmounting filesystem.
[  177.054112][ T7844] loop1: detected capacity change from 0 to 40427
[  177.132066][ T7844] F2FS-fs (loop1): invalid crc value
[  177.149196][ T7844] F2FS-fs (loop1): Found nat_bits in checkpoint
[  177.158384][   T22] usb 5-1: USB disconnect, device number 8
[  177.227036][ T7844] F2FS-fs (loop1): Start checkpoint disabled!
[  177.258370][ T7844] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  177.301522][ T7844] F2FS-fs (loop1): Skipping Checkpoint. Checkpoints currently disabled.
[  177.326915][ T4774] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  177.595298][ T7865] loop0: detected capacity change from 0 to 32768
[  177.615064][ T7865] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1143 (7865)
[  177.651832][ T7873] loop1: detected capacity change from 0 to 512
[  177.665752][ T7874] loop2: detected capacity change from 0 to 128
[  177.682473][ T7874] EXT4-fs: Ignoring removed nobh option
[  177.697630][ T7865] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.739277][ T7874] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  177.748534][ T7865] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  177.761907][ T7865] BTRFS info (device loop0): using free space tree
[  177.770314][ T7873] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  177.821101][ T7874] ext4 filesystem being mounted at mnt:[4026532896] supports timestamps until 2038-01-19 (0x7fffffff)
[  177.826642][ T7884] loop4: detected capacity change from 0 to 64
[  177.857079][ T7873] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  177.905474][ T4774] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  177.922122][ T7874] EXT4-fs (loop2): unmounting filesystem.
[  177.936167][ T4774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.950510][ T4774] usb 4-1: Product: syz
[  177.981738][ T4774] usb 4-1: Manufacturer: syz
[  177.986486][ T4774] usb 4-1: SerialNumber: syz
[  177.994215][ T4246] EXT4-fs (loop1): unmounting filesystem.
[  178.053240][ T4774] usb 4-1: config 0 descriptor??
[  178.087099][ T7894] loop4: detected capacity change from 0 to 2048
[  178.121461][ T7865] BTRFS info (device loop0): enabling ssd optimizations
[  178.148360][ T7894] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  178.209392][ T7905] loop1: detected capacity change from 0 to 1024
[  178.229618][ T7905] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  178.285591][ T4254] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.309155][ T4246] EXT4-fs (loop1): unmounting filesystem.
[  178.368905][ T7910] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  178.518188][ T7912] loop6: detected capacity change from 0 to 524287999
[  178.559799][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.569214][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  178.571638][ T4435] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  178.611914][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.621085][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  178.632078][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.641276][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  178.673074][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.682321][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  178.698211][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.707409][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  178.715569][   T27] audit: type=1400 audit(1730217105.733:24): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A2F2F26D6 pid=7915 comm="syz.4.1159"
[  178.739806][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.746145][ T4262] Bluetooth: hci4: command 0x0406 tx timeout
[  178.748978][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  178.767481][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.776676][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  178.784723][ T4774] usb 4-1: Firmware version (0.0) predates our first public release.
[  178.793926][ T4774] usb 4-1: Please update to version 0.2 or newer
[  178.800499][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.809670][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  178.817554][ T7912] ldm_validate_partition_table(): Disk read failed.
[  178.858717][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.867942][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  178.889054][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.898211][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  178.957540][ T7912] Dev loop6: unable to read RDB block 0
[  178.970473][ T7912]  loop6: unable to read partition table
[  178.993094][ T4774] usb 4-1: USB disconnect, device number 7
[  179.002642][ T4435] usb 3-1: Using ep0 maxpacket: 16
[  179.022055][ T7912] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  179.122897][ T4435] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.142195][ T4435] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.153182][ T4435] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  179.173972][ T4435] usb 3-1: New USB device found, idVendor=1e7d, idProduct=71ce, bcdDevice= 0.00
[  179.183749][  T125] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  179.192905][ T4435] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.216627][ T4435] usb 3-1: config 0 descriptor??
[  179.541184][   T27] audit: type=1326 audit(1730217106.563:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7944 comm="syz.3.1173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a2577e719 code=0x0
[  179.581884][  T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.601857][  T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.626724][  T125] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  179.650413][  T125] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  179.669516][  T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.688777][  T125] usb 5-1: config 0 descriptor??
[  179.704557][ T4435] hid-generic 0003:1E7D:71CE.001A: collection stack underflow
[  179.718084][ T4435] hid-generic 0003:1E7D:71CE.001A: item 0 2 0 12 parsing failed
[  179.737679][ T4435] hid-generic: probe of 0003:1E7D:71CE.001A failed with error -22
[  179.827364][ T7935] loop1: detected capacity change from 0 to 32768
[  179.835200][ T7935] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1168 (7935)
[  179.877713][ T7935] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.899895][ T7935] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  179.942215][ T7935] BTRFS info (device loop1): using free space tree
[  179.964657][ T4435] usb 3-1: USB disconnect, device number 10
[  180.103531][ T7935] BTRFS info (device loop1): enabling ssd optimizations
[  180.131440][ T7973] loop6: detected capacity change from 0 to 524287999
[  180.159831][ T7973] ldm_validate_partition_table(): Disk read failed.
[  180.175297][  T125] corsair-cpro 0003:1B1C:1D00.001B: item fetching failed at offset 1/5
[  180.188454][ T7973] Dev loop6: unable to read RDB block 0
[  180.202218][  T125] corsair-cpro: probe of 0003:1B1C:1D00.001B failed with error -22
[  180.213449][ T7973]  loop6: unable to read partition table
[  180.219569][ T7973] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  180.239628][ T4246] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  180.258292][ T3623] ldm_validate_partition_table(): Disk read failed.
[  180.266282][ T3623] Dev loop6: unable to read RDB block 0
[  180.272816][ T3623]  loop6: unable to read partition table
[  180.382111][  T125] usb 5-1: USB disconnect, device number 9
[  180.615842][   T27] audit: type=1400 audit(1730217107.643:26): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A2F2F26D6 pid=7979 comm="syz.0.1191"
[  180.802348][ T4252] Bluetooth: hci1: command 0x0406 tx timeout
[  180.808468][ T4252] Bluetooth: hci3: command 0x0406 tx timeout
[  180.814668][ T4261] Bluetooth: hci0: command 0x0406 tx timeout
[  180.820722][ T4261] Bluetooth: hci2: command 0x0406 tx timeout
[  181.187805][ T4780] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  181.237227][ T7978] loop3: detected capacity change from 0 to 32768
[  181.250551][ T7978] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  181.254085][ T7996] loop0: detected capacity change from 0 to 64
[  181.280955][ T7978] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  181.318353][ T7978] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  181.321384][ T7996] hfs: keylen 94 too large
[  181.347526][ T4291] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  181.350923][ T7996] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  181.357692][ T4291] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  181.484273][ T4291] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 126ms
[  181.490849][ T7986] loop1: detected capacity change from 0 to 32768
[  181.500226][ T4291] gfs2: fsid=syz:syz.0: jid=0: Done
[  181.517195][ T7978] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  181.544820][ T7986] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  181.544820][ T7986] 
[  181.601963][ T4780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.627350][ T4780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.657900][ T4780] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  181.714741][ T4780] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  181.756954][ T4780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.795401][ T4780] usb 3-1: config 0 descriptor??
[  181.916695][ T7978] syz.3.1180 (7978): drop_caches: 2
[  182.297203][ T4780] redragon 0003:0C45:760B.001C: hidraw0: USB HID v0.00 Device [HID 0c45:760b] on usb-dummy_hcd.2-1/input0
[  182.309295][ T4261] Bluetooth: hci4: link tx timeout
[  182.314455][ T4261] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  182.380747][ T8008] loop4: detected capacity change from 0 to 32768
[  182.428464][ T8008] JBD2: Ignoring recovery information on journal
[  182.490651][ T4780] usb 3-1: USB disconnect, device number 11
[  182.546691][ T4261] Bluetooth: hci4: link tx timeout
[  182.551972][ T4261] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  182.640876][ T8008] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  182.741281][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1200'.
[  182.761241][ T4245] ocfs2: Unmounting device (7,4) on (node local)
[  183.240358][ T8033] loop0: detected capacity change from 0 to 2048
[  183.273032][ T8033] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  183.351758][ T8039] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.390075][ T8042] loop4: detected capacity change from 0 to 256
[  183.491470][ T8027] loop3: detected capacity change from 0 to 32768
[  183.528201][ T8027] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1199 (8027)
[  183.585868][ T8027] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  183.630055][ T8046] loop0: detected capacity change from 0 to 2048
[  183.633784][ T8027] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  183.701008][ T8051] MTD: Couldn't look up 'memory.events': -15
[  183.703844][ T8027] BTRFS info (device loop3): setting nodatacow, compression disabled
[  183.731831][ T8046] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.738614][ T8052] netlink: 'syz.4.1213': attribute type 5 has an invalid length.
[  183.758433][ T8027] BTRFS info (device loop3): setting datacow
[  183.770880][ T8027] BTRFS info (device loop3): doing ref verification
[  183.806172][ T8027] BTRFS info (device loop3): force clearing of disk cache
[  183.857572][ T8027] BTRFS info (device loop3): turning off barriers
[  183.887226][ T8027] BTRFS info (device loop3): enabling ssd optimizations
[  183.919984][ T8027] BTRFS info (device loop3): using spread ssd allocation scheme
[  183.941738][ T8027] BTRFS info (device loop3): not using ssd optimizations
[  183.959443][ T8027] BTRFS info (device loop3): not using spread ssd allocation scheme
[  183.977688][ T8027] BTRFS info (device loop3): using free space tree
[  184.126342][ T8073] program syz.1.1220 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  184.226745][ T4771] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  184.256704][ T8027] BTRFS info (device loop3): rebuilding free space tree
[  184.362252][ T8093] loop1: detected capacity change from 0 to 256
[  184.374327][ T8095] loop0: detected capacity change from 0 to 256
[  184.446980][ T4251] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  184.448543][ T8097] loop2: detected capacity change from 0 to 2048
[  184.472146][ T4771] usb 5-1: Using ep0 maxpacket: 32
[  184.479987][ T8095] FAT-fs (loop0): Directory bread(block 64) failed
[  184.487619][ T8097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.492747][ T8095] FAT-fs (loop0): Directory bread(block 65) failed
[  184.551772][ T8095] FAT-fs (loop0): Directory bread(block 66) failed
[  184.566179][ T8095] FAT-fs (loop0): Directory bread(block 67) failed
[  184.609821][ T8095] FAT-fs (loop0): Directory bread(block 68) failed
[  184.631911][ T8095] FAT-fs (loop0): Directory bread(block 69) failed
[  184.638560][ T8095] FAT-fs (loop0): Directory bread(block 70) failed
[  184.647997][ T8095] FAT-fs (loop0): Directory bread(block 71) failed
[  184.669699][ T8095] FAT-fs (loop0): Directory bread(block 72) failed
[  184.676316][ T8095] FAT-fs (loop0): Directory bread(block 73) failed
[  184.781989][ T4771] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  184.796336][ T4771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.824894][ T4771] usb 5-1: Product: syz
[  184.829979][ T4771] usb 5-1: Manufacturer: syz
[  184.854994][ T4771] usb 5-1: SerialNumber: syz
[  184.864073][ T4771] usb 5-1: config 0 descriptor??
[  185.108449][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1233'.
[  185.351816][ T4771] airspy 5-1:0.0: Board ID: 00
[  185.351884][ T4771] airspy 5-1:0.0: Firmware version: 
[  185.461689][ T4437] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  185.571738][ T4771] airspy 5-1:0.0: usb_control_msg() failed -71 request 11
[  185.582987][ T4771] airspy 5-1:0.0: Registered as swradio24
[  185.588745][ T4771] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  185.603842][ T4771] usb 5-1: USB disconnect, device number 10
[  185.701739][ T4437] usb 2-1: Using ep0 maxpacket: 8
[  185.821723][ T4437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.831502][ T4437] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  185.847239][ T4437] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00
[  185.856647][ T4437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.874256][ T4437] usb 2-1: config 0 descriptor??
[  186.352313][ T4437] hid (null): unknown global tag 0xe
[  186.359793][ T4437] vrc2 0003:07C0:1125.001D: fixing up VRC-2 report descriptor
[  186.404563][ T4437] input: HID 07c0:1125 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:07C0:1125.001D/input/input15
[  186.511121][ T8134] loop0: detected capacity change from 0 to 1024
[  186.515562][ T4437] vrc2 0003:07C0:1125.001D: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.1-1/input0
[  186.565441][ T4437] usb 2-1: USB disconnect, device number 10
[  186.694153][ T4312] hfsplus: b-tree write err: -5, ino 4
[  186.851666][ T4434] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  186.908076][ T8122] loop3: detected capacity change from 0 to 40427
[  186.930003][ T8122] F2FS-fs (loop3): invalid crc value
[  186.948212][ T8122] F2FS-fs (loop3): Found nat_bits in checkpoint
[  186.997661][ T8122] F2FS-fs (loop3): Start checkpoint disabled!
[  187.009303][ T8122] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  187.018430][ T8127] loop4: detected capacity change from 0 to 32768
[  187.036195][ T8127] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  187.046536][ T8127] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  187.053786][ T8122] F2FS-fs (loop3): Skipping Checkpoint. Checkpoints currently disabled.
[  187.071490][ T8127] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  187.093528][ T4437] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  187.100618][ T4437] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  187.160313][ T8142] loop0: detected capacity change from 0 to 512
[  187.211069][ T8142] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1257: casefold flag without casefold feature
[  187.228771][ T4437] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 128ms
[  187.236442][ T4434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.247588][ T4434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.257541][ T4437] gfs2: fsid=syz:syz.0: jid=0: Done
[  187.262890][ T8127] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  187.268564][ T8142] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1257: couldn't read orphan inode 15 (err -117)
[  187.270860][ T4434] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  187.292478][ T4434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.302302][ T4434] usb 3-1: config 0 descriptor??
[  187.376564][ T8142] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  187.384001][ T8127] syz.4.1237 (8127): drop_caches: 2
[  187.422013][ T8148] loop3: detected capacity change from 0 to 2048
[  187.444845][ T8148] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  187.535356][ T4254] EXT4-fs (loop0): unmounting filesystem.
[  187.559723][ T8149] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  187.582492][ T8151] netlink: 'syz.1.1247': attribute type 5 has an invalid length.
[  187.726636][ T8153] loop0: detected capacity change from 0 to 1024
[  187.794368][ T4434] ryos 0003:1E7D:3138.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0
[  187.805938][   T27] audit: type=1800 audit(1730217114.823:27): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1250" name="bus" dev="loop0" ino=26 res=0 errno=0
[  187.900180][   T75] hfsplus: b-tree write err: -5, ino 4
[  187.957009][ T8161] loop3: detected capacity change from 0 to 256
[  188.035404][ T4772] usb 3-1: USB disconnect, device number 12
[  188.040413][ T8164] loop0: detected capacity change from 0 to 736
[  188.055130][ T8161] FAT-fs (loop3): Directory bread(block 1285) failed
[  188.108096][ T8161] FAT-fs (loop3): Directory bread(block 1285) failed
[  188.346655][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1261'.
[  188.521699][ T4292] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  188.763826][ T8190] loop1: detected capacity change from 0 to 512
[  188.774104][ T4292] usb 4-1: Using ep0 maxpacket: 32
[  188.800968][ T8190] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  188.807298][ T8192] loop2: detected capacity change from 0 to 736
[  188.865437][ T8190] EXT4-fs (loop1): 1 truncate cleaned up
[  188.902024][ T4292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.909414][ T8170] loop4: detected capacity change from 0 to 40427
[  188.925973][ T8190] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  188.937124][ T8170] F2FS-fs (loop4): invalid crc value
[  188.947557][ T4292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.949737][ T8170] F2FS-fs (loop4): Found nat_bits in checkpoint
[  189.023352][ T4246] EXT4-fs (loop1): unmounting filesystem.
[  189.032394][ T4292] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  189.048359][ T4292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.098720][ T4292] usb 4-1: config 0 descriptor??
[  189.113647][ T8170] F2FS-fs (loop4): Start checkpoint disabled!
[  189.162891][ T8170] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  189.199464][ T8204] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1273'.
[  189.248425][ T8170] F2FS-fs (loop4): Skipping Checkpoint. Checkpoints currently disabled.
[  189.327829][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1275'.
[  189.370814][ T8209] netlink: 'syz.1.1275': attribute type 1 has an invalid length.
[  189.529034][ T8216] tipc: Started in network mode
[  189.541890][ T8216] tipc: Node identity 5f2e14aa, cluster identity 4711
[  189.558968][ T8216] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  189.606708][ T4292] nintendo 0003:057E:200E.001F: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0
[  189.702644][ T4292] nintendo 0003:057E:200E.001F: Failed charging grip handshake
[  189.717399][ T4292] nintendo 0003:057E:200E.001F: Failed to initialize controller; ret=-110
[  189.787731][ T4292] nintendo 0003:057E:200E.001F: probe - fail = -110
[  189.814456][ T4292] nintendo: probe of 0003:057E:200E.001F failed with error -110
[  189.839113][ T4292] usb 4-1: USB disconnect, device number 8
[  189.884771][ T8219] loop0: detected capacity change from 0 to 4096
[  189.905579][ T8219] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  189.975695][ T8219] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  190.040025][ T8219] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  190.076947][ T8219] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  190.111077][ T8219] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  190.148102][ T8219] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  190.163832][ T8219] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  190.182218][ T8219] ntfs: volume version 3.1.
[  190.188614][ T8219] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  190.210826][ T8219] ntfs: (device loop0): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  190.504390][ T4261] Bluetooth: Unknown LE signaling command 0x31
[  190.510653][ T4261] Bluetooth: Wrong link type (-22)
[  190.516945][ T4261] Bluetooth: hci4: link tx timeout
[  190.522127][ T4261] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  190.545479][ T8227] loop2: detected capacity change from 0 to 256
[  190.585054][ T8221] loop1: detected capacity change from 0 to 32768
[  190.587884][ T8227] FAT-fs (loop2): Directory bread(block 64) failed
[  190.626120][ T8221] XFS (loop1): Mounting V5 Filesystem
[  190.635004][ T8227] FAT-fs (loop2): Directory bread(block 65) failed
[  190.642258][ T8227] FAT-fs (loop2): Directory bread(block 66) failed
[  190.649075][ T8227] FAT-fs (loop2): Directory bread(block 67) failed
[  190.656094][ T8227] FAT-fs (loop2): Directory bread(block 68) failed
[  190.662780][ T8227] FAT-fs (loop2): Directory bread(block 69) failed
[  190.670358][ T8227] FAT-fs (loop2): Directory bread(block 70) failed
[  190.680206][ T8227] FAT-fs (loop2): Directory bread(block 71) failed
[  190.686923][ T8227] FAT-fs (loop2): Directory bread(block 72) failed
[  190.695090][ T8227] FAT-fs (loop2): Directory bread(block 73) failed
[  190.827131][ T8221] XFS (loop1): Ending clean mount
[  190.858220][ T8221] XFS (loop1): Quotacheck needed: Please wait.
[  190.914538][ T8223] loop4: detected capacity change from 0 to 40427
[  190.964760][ T8221] XFS (loop1): Quotacheck: Done.
[  190.972868][ T8223] F2FS-fs (loop4): Invalid segment/section count (458776 != 24 * 1)
[  191.004124][ T8223] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  191.033856][ T8223] F2FS-fs (loop4): invalid crc value
[  191.072054][ T8223] F2FS-fs (loop4): Found nat_bits in checkpoint
[  191.087427][ T4246] XFS (loop1): Unmounting Filesystem
[  191.193410][ T8223] F2FS-fs (loop4): recover fsync data on readonly fs
[  191.215786][ T8223] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30
[  191.231796][ T8223] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  191.332783][ T4434] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  191.348975][ T8223] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0
[  191.567931][ T8229] loop3: detected capacity change from 0 to 32768
[  191.593053][ T4434] usb 3-1: Using ep0 maxpacket: 32
[  191.881840][ T4434] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  191.897664][ T4434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.916947][ T4434] usb 3-1: Product: syz
[  191.926731][ T4434] usb 3-1: Manufacturer: syz
[  191.936887][ T4434] usb 3-1: SerialNumber: syz
[  191.950412][ T4434] usb 3-1: config 0 descriptor??
[  192.349177][ T8257] loop0: detected capacity change from 0 to 40427
[  192.386069][ T8257] F2FS-fs (loop0): invalid crc value
[  192.409004][ T8273] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  192.419168][ T8257] F2FS-fs (loop0): Found nat_bits in checkpoint
[  192.442032][ T4434] airspy 3-1:0.0: Board ID: 00
[  192.450021][ T4434] airspy 3-1:0.0: Firmware version: 
[  192.533867][ T8257] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  192.661716][ T4434] airspy 3-1:0.0: usb_control_msg() failed -71 request 11
[  192.671544][ T4254] syz-executor: attempt to access beyond end of device
[  192.671544][ T4254] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  192.691836][ T4434] airspy 3-1:0.0: Registered as swradio24
[  192.706390][ T4434] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  192.746166][ T4434] usb 3-1: USB disconnect, device number 13
[  192.772962][ T8280] sp0: Synchronizing with TNC
[  193.227384][ T8268] loop3: detected capacity change from 0 to 32768
[  193.240337][ T8268] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  193.240357][ T8268] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  193.251376][ T8268] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  193.270289][ T4434] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  193.270308][ T4434] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  193.349362][ T8286] loop0: detected capacity change from 0 to 1024
[  193.366001][ T4434] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 95ms
[  193.366142][ T4434] gfs2: fsid=syz:syz.0: jid=0: Done
[  193.366184][ T8268] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  193.457289][ T8268] syz.3.1296 (8268): drop_caches: 2
[  193.481923][ T8286] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  193.509119][ T8286] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.628866][ T8297] loop4: detected capacity change from 0 to 64
[  193.652851][ T8299] loop2: detected capacity change from 0 to 512
[  193.653406][ T8299] EXT4-fs: Ignoring removed mblk_io_submit option
[  193.696223][ T8299] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.1311: invalid block
[  193.767992][ T8299] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1311: invalid indirect mapped block 10 (level 1)
[  193.774180][ T4254] EXT4-fs (loop0): unmounting filesystem.
[  193.811102][ T8299] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1311: invalid indirect mapped block 8 (level 1)
[  193.826801][ T8299] EXT4-fs (loop2): 1 truncate cleaned up
[  193.826835][ T8299] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  193.977738][ T8306] loop4: detected capacity change from 0 to 1024
[  194.007932][   T27] kauditd_printk_skb: 9 callbacks suppressed
[  194.007946][   T27] audit: type=1800 audit(1730217121.033:28): pid=8306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1312" name="bus" dev="loop4" ino=26 res=0 errno=0
[  194.023613][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  194.101437][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  194.101508][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  194.107780][ T4309] hfsplus: b-tree write err: -5, ino 4
[  194.307743][ T8308] loop3: detected capacity change from 0 to 4096
[  194.308820][ T8308] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  194.382679][ T8314] loop2: detected capacity change from 0 to 1764
[  194.645857][ T8308] ntfs3: Cannot use different iocharset when remounting!
[  194.828483][ T8324] loop4: detected capacity change from 0 to 1024
[  194.938885][ T8324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  194.957777][ T8324] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.098852][ T8305] loop0: detected capacity change from 0 to 40427
[  195.161880][ T8305] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  195.214135][ T4245] EXT4-fs (loop4): unmounting filesystem.
[  195.216937][ T8305] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  195.245765][ T8305] F2FS-fs (loop0): invalid crc value
[  195.288732][ T8305] F2FS-fs (loop0): Found nat_bits in checkpoint
[  195.436561][ T8305] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  195.456936][ T8305] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  195.667551][ T8322] loop1: detected capacity change from 0 to 32768
[  195.694825][ T8346] loop4: detected capacity change from 0 to 8192
[  195.719440][ T8351] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1332'.
[  195.719835][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'.
[  195.722465][ T8322] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  195.722482][ T8322] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  195.736470][ T8346] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  195.787924][ T8346] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  195.788504][ T8346] REISERFS (device loop4): using ordered data mode
[  195.788515][ T8346] reiserfs: using flush barriers
[  195.789808][ T8322] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  195.795452][ T8346] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  195.796128][ T8346] REISERFS (device loop4): checking transaction log (loop4)
[  195.797067][ T4772] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  195.860800][ T8346] REISERFS (device loop4): Using r5 hash to sort names
[  195.880541][ T8346] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  195.880726][ T8346] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  195.909637][ T4772] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  195.992606][ T4772] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 82ms
[  195.995710][ T4772] gfs2: fsid=syz:syz.0: jid=0: Done
[  195.995749][ T8322] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  196.069672][ T8322] syz.1.1320 (8322): drop_caches: 2
[  196.124740][   T27] audit: type=1326 audit(1730217123.153:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed977e719 code=0x7ffc0000
[  196.139052][   T27] audit: type=1326 audit(1730217123.163:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3ed977e719 code=0x7ffc0000
[  196.139305][   T27] audit: type=1326 audit(1730217123.163:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed977e719 code=0x7ffc0000
[  196.139849][   T27] audit: type=1326 audit(1730217123.163:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f3ed977e719 code=0x7ffc0000
[  196.139949][   T27] audit: type=1326 audit(1730217123.163:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed977e719 code=0x7ffc0000
[  196.140088][   T27] audit: type=1326 audit(1730217123.163:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed977e719 code=0x7ffc0000
[  196.185623][ T8356] loop3: detected capacity change from 0 to 1024
[  196.300446][ T8356] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  196.465276][ T4251] EXT4-fs (loop3): unmounting filesystem.
[  196.576943][ T8364] loop3: detected capacity change from 0 to 1024
[  196.697010][ T8364] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  196.697093][ T8364] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.811628][ T4771] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  196.827700][ T4251] EXT4-fs (loop3): unmounting filesystem.
[  196.957246][ T8360] loop4: detected capacity change from 0 to 40427
[  196.971099][ T8360] F2FS-fs (loop4): invalid crc value
[  196.997554][ T8360] F2FS-fs (loop4): Found nat_bits in checkpoint
[  197.061796][ T4771] usb 1-1: Using ep0 maxpacket: 32
[  197.134826][ T8360] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  197.207749][ T4245] syz-executor: attempt to access beyond end of device
[  197.207749][ T4245] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  197.231793][ T4771] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  197.268742][ T4771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.305918][ T4771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.316352][ T4771] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  197.336941][ T4771] usb 1-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  197.346344][ T4771] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.365494][ T4771] usb 1-1: config 0 descriptor??
[  197.501692][ T4291] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  197.771910][ T4291] usb 2-1: Using ep0 maxpacket: 16
[  197.864965][ T4771] wacom 0003:056A:00B3.0020: unknown main item tag 0x0
[  197.876993][ T4771] wacom 0003:056A:00B3.0020: Unknown device_type for 'HID 056a:00b3'. Assuming pen.
[  197.893561][ T4771] wacom 0003:056A:00B3.0020: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.0-1/input0
[  197.903962][ T8398] loop2: detected capacity change from 0 to 32768
[  197.915246][ T4291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.938401][ T4771] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B3.0020/input/input16
[  197.955907][ T4291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.966892][ T4291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  197.997252][ T4291] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  198.010702][ T4291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.051093][ T4291] usb 2-1: config 0 descriptor??
[  198.087000][ T4780] usb 1-1: USB disconnect, device number 13
[  198.219083][ T8407] loop0: detected capacity change from 0 to 524288000
[  198.319725][ T8410] loop2: detected capacity change from 0 to 1024
[  198.361196][ T8410] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  198.361287][ T8410] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.424853][ T4253] EXT4-fs (loop2): unmounting filesystem.
[  198.575177][ T4291] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0
[  198.575232][ T4291] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0
[  198.575254][ T4291] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0
[  198.575276][ T4291] microsoft 0003:045E:07DA.0021: unbalanced collection at end of report description
[  198.575748][ T4291] microsoft 0003:045E:07DA.0021: parse failed
[  198.575771][ T4291] microsoft: probe of 0003:045E:07DA.0021 failed with error -22
[  198.776070][ T4291] usb 2-1: USB disconnect, device number 11
[  199.010151][ T8427] loop2: detected capacity change from 0 to 256
[  199.039715][ T8411] loop3: detected capacity change from 0 to 40427
[  199.068362][ T8411] F2FS-fs (loop3): invalid crc value
[  199.091843][ T4780] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  199.095350][ T8411] F2FS-fs (loop3): Found nat_bits in checkpoint
[  199.157556][ T8411] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  199.236807][ T4251] syz-executor: attempt to access beyond end of device
[  199.236807][ T4251] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  199.351731][ T4780] usb 1-1: Using ep0 maxpacket: 16
[  199.481948][ T4780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.501790][ T4780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.523301][ T4780] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  199.547074][ T4780] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  199.561896][ T4780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.597038][ T4780] usb 1-1: config 0 descriptor??
[  199.778756][ T8448] block nbd2: Unsupported socket: shutdown callout must be supported.
[  200.085181][ T4780] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  200.107940][ T4780] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  200.140078][ T4780] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  200.175852][ T4780] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  200.201715][ T4780] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  200.256845][ T4780] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  200.291706][ T4780] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  200.332651][ T4780] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  200.370419][ T4780] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  200.410928][ T4780] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  200.491185][ T8456] loop3: detected capacity change from 0 to 32768
[  200.525991][ T4780] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0022/input/input19
[  200.539131][ T8456] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  200.547389][ T8456] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  200.556169][ T8456] syz.3.1379: attempt to access beyond end of device
[  200.556169][ T8456] loop3: rw=12288, sector=99999999, nr_sectors = 1 limit=32768
[  200.570329][ T8456] gfs2: fsid=syz:syz.0: can't lookup journal index: 0
[  200.717501][ T4780] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  200.748339][ T8449] loop4: detected capacity change from 0 to 32768
[  200.804931][ T4780] usb 1-1: USB disconnect, device number 14
[  201.110972][ T8443] loop1: detected capacity change from 0 to 40427
[  201.141657][ T8443] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  201.149534][ T8443] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  201.176017][ T8443] F2FS-fs (loop1): invalid crc value
[  201.216603][ T8443] F2FS-fs (loop1): Found nat_bits in checkpoint
[  201.317910][ T8443] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  201.331645][ T8443] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  201.409106][   T27] audit: type=1800 audit(1730217128.433:35): pid=8443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1373" name="bus" dev="loop1" ino=10 res=0 errno=0
[  201.453409][ T8457] loop2: detected capacity change from 0 to 32768
[  201.480716][ T8473] syz.0.1386 uses obsolete (PF_INET,SOCK_PACKET)
[  201.576809][ T8457] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  201.686868][ T8482] 
[  201.689239][ T8482] ======================================================
[  201.696256][ T8482] WARNING: possible circular locking dependency detected
[  201.703362][ T8482] 6.1.114-syzkaller #0 Not tainted
[  201.708467][ T8482] ------------------------------------------------------
[  201.715480][ T8482] syz.2.1378/8482 is trying to acquire lock:
[  201.721460][ T8482] ffff8880710c0660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb2/0x330
[  201.733052][ T8482] 
[  201.733052][ T8482] but task is already holding lock:
[  201.740418][ T8482] ffff8880710c06f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x330
[  201.751055][ T8482] 
[  201.751055][ T8482] which lock already depends on the new lock.
[  201.751055][ T8482] 
[  201.761458][ T8482] 
[  201.761458][ T8482] the existing dependency chain (in reverse order) is:
[  201.770466][ T8482] 
[  201.770466][ T8482] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  201.778276][ T8482]        lock_acquire+0x1f8/0x5a0
[  201.783300][ T8482]        down_read+0xad/0xa30
[  201.787972][ T8482]        ocfs2_init_acl+0x398/0x930
[  201.793159][ T8482]        ocfs2_mknod+0x1f75/0x2e20
[  201.798257][ T8482]        ocfs2_create+0x1c0/0x4e0
[  201.803269][ T8482]        path_openat+0x12f1/0x2e60
[  201.808370][ T8482]        do_filp_open+0x230/0x480
[  201.813381][ T8482]        do_sys_openat2+0x13b/0x4f0
[  201.818568][ T8482]        __x64_sys_open+0x221/0x270
[  201.823754][ T8482]        do_syscall_64+0x3b/0xb0
[  201.828678][ T8482]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  201.835084][ T8482] 
[  201.835084][ T8482] -> #3 (jbd2_handle){++++}-{0:0}:
[  201.842459][ T8482]        lock_acquire+0x1f8/0x5a0
[  201.847480][ T8482]        start_this_handle+0x1f71/0x21b0
[  201.853105][ T8482]        jbd2__journal_start+0x2d1/0x5c0
[  201.858724][ T8482]        jbd2_journal_start+0x25/0x30
[  201.864083][ T8482]        ocfs2_start_trans+0x3c0/0x6f0
[  201.869531][ T8482]        ocfs2_shutdown_local_alloc+0x214/0xa90
[  201.875766][ T8482]        ocfs2_dismount_volume+0x1fb/0x960
[  201.881559][ T8482]        generic_shutdown_super+0x130/0x340
[  201.887446][ T8482]        kill_block_super+0x7a/0xe0
[  201.892632][ T8482]        deactivate_locked_super+0xa0/0x110
[  201.898514][ T8482]        cleanup_mnt+0x490/0x520
[  201.903440][ T8482]        task_work_run+0x246/0x300
[  201.908542][ T8482]        exit_to_user_mode_loop+0xde/0x100
[  201.914333][ T8482]        exit_to_user_mode_prepare+0xb1/0x140
[  201.920387][ T8482]        syscall_exit_to_user_mode+0x60/0x270
[  201.926440][ T8482]        do_syscall_64+0x47/0xb0
[  201.931362][ T8482]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  201.937780][ T8482] 
[  201.937780][ T8482] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  201.946280][ T8482]        lock_acquire+0x1f8/0x5a0
[  201.951310][ T8482]        down_read+0xad/0xa30
[  201.955987][ T8482]        ocfs2_start_trans+0x3b5/0x6f0
[  201.961452][ T8482]        ocfs2_shutdown_local_alloc+0x214/0xa90
[  201.967701][ T8482]        ocfs2_dismount_volume+0x1fb/0x960
[  201.973503][ T8482]        generic_shutdown_super+0x130/0x340
[  201.979387][ T8482]        kill_block_super+0x7a/0xe0
[  201.984575][ T8482]        deactivate_locked_super+0xa0/0x110
[  201.990465][ T8482]        cleanup_mnt+0x490/0x520
[  201.995399][ T8482]        task_work_run+0x246/0x300
[  202.000501][ T8482]        exit_to_user_mode_loop+0xde/0x100
[  202.006295][ T8482]        exit_to_user_mode_prepare+0xb1/0x140
[  202.012354][ T8482]        syscall_exit_to_user_mode+0x60/0x270
[  202.018415][ T8482]        do_syscall_64+0x47/0xb0
[  202.023342][ T8482]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  202.029748][ T8482] 
[  202.029748][ T8482] -> #1 (sb_internal#4){.+.+}-{0:0}:
[  202.037213][ T8482]        lock_acquire+0x1f8/0x5a0
[  202.042232][ T8482]        ocfs2_start_trans+0x2b0/0x6f0
[  202.047682][ T8482]        ocfs2_truncate_file+0x6b1/0x1630
[  202.053388][ T8482]        ocfs2_setattr+0x18bc/0x1f80
[  202.058663][ T8482]        notify_change+0xce3/0xfc0
[  202.063761][ T8482]        do_truncate+0x21c/0x300
[  202.068693][ T8482]        path_openat+0x27e2/0x2e60
[  202.073797][ T8482]        do_filp_open+0x230/0x480
[  202.078823][ T8482]        do_sys_openat2+0x13b/0x4f0
[  202.084022][ T8482]        __x64_sys_openat+0x243/0x290
[  202.089388][ T8482]        do_syscall_64+0x3b/0xb0
[  202.094311][ T8482]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  202.100728][ T8482] 
[  202.100728][ T8482] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  202.109496][ T8482]        validate_chain+0x1661/0x5950
[  202.114856][ T8482]        __lock_acquire+0x125b/0x1f80
[  202.120236][ T8482]        lock_acquire+0x1f8/0x5a0
[  202.125252][ T8482]        down_write+0x36/0x60
[  202.129921][ T8482]        ocfs2_try_remove_refcount_tree+0xb2/0x330
[  202.136414][ T8482]        ocfs2_truncate_file+0xea2/0x1630
[  202.142145][ T8482]        ocfs2_setattr+0x18bc/0x1f80
[  202.147539][ T8482]        notify_change+0xce3/0xfc0
[  202.152648][ T8482]        do_truncate+0x21c/0x300
[  202.157589][ T8482]        path_openat+0x27e2/0x2e60
[  202.162698][ T8482]        do_filp_open+0x230/0x480
[  202.167713][ T8482]        do_sys_openat2+0x13b/0x4f0
[  202.172927][ T8482]        __x64_sys_openat+0x243/0x290
[  202.178391][ T8482]        do_syscall_64+0x3b/0xb0
[  202.183317][ T8482]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  202.189729][ T8482] 
[  202.189729][ T8482] other info that might help us debug this:
[  202.189729][ T8482] 
[  202.200033][ T8482] Chain exists of:
[  202.200033][ T8482]   &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem
[  202.200033][ T8482] 
[  202.214013][ T8482]  Possible unsafe locking scenario:
[  202.214013][ T8482] 
[  202.221445][ T8482]        CPU0                    CPU1
[  202.226791][ T8482]        ----                    ----
[  202.232142][ T8482]   lock(&oi->ip_xattr_sem);
[  202.236721][ T8482]                                lock(jbd2_handle);
[  202.243293][ T8482]                                lock(&oi->ip_xattr_sem);
[  202.250387][ T8482]   lock(&ocfs2_file_ip_alloc_sem_key);
[  202.255919][ T8482] 
[  202.255919][ T8482]  *** DEADLOCK ***
[  202.255919][ T8482] 
[  202.264070][ T8482] 3 locks held by syz.2.1378/8482:
[  202.269183][ T8482]  #0: ffff888075b68460 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  202.278403][ T8482]  #1: ffff8880710c09c8 (&sb->s_type->i_mutex_key#29){+.+.}-{3:3}, at: do_truncate+0x208/0x300
[  202.288749][ T8482]  #2: ffff8880710c06f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x330
[  202.299786][ T8482] 
[  202.299786][ T8482] stack backtrace:
[  202.305689][ T8482] CPU: 1 PID: 8482 Comm: syz.2.1378 Not tainted 6.1.114-syzkaller #0
[  202.313754][ T8482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  202.323798][ T8482] Call Trace:
[  202.327067][ T8482]  <TASK>
[  202.329985][ T8482]  dump_stack_lvl+0x1e3/0x2cb
[  202.334649][ T8482]  ? nf_tcp_handle_invalid+0x642/0x642
[  202.340098][ T8482]  ? print_circular_bug+0x12b/0x1a0
[  202.345284][ T8482]  check_noncircular+0x2fa/0x3b0
[  202.350204][ T8482]  ? deref_stack_reg+0x17c/0x210
[  202.355128][ T8482]  ? _raw_spin_unlock+0x40/0x40
[  202.359967][ T8482]  ? add_chain_block+0x850/0x850
[  202.364890][ T8482]  ? lockdep_lock+0x11f/0x2a0
[  202.369557][ T8482]  ? 0xffffffffa0003800
[  202.373706][ T8482]  ? 0xffffffffa0003800
[  202.377843][ T8482]  ? _find_first_zero_bit+0xd0/0x100
[  202.383121][ T8482]  validate_chain+0x1661/0x5950
[  202.387958][ T8482]  ? kernel_text_address+0x9f/0xd0
[  202.393066][ T8482]  ? stack_trace_save+0x113/0x1c0
[  202.398080][ T8482]  ? reacquire_held_locks+0x660/0x660
[  202.403438][ T8482]  ? stack_trace_snprint+0xe0/0xe0
[  202.408537][ T8482]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  202.414509][ T8482]  ? lockdep_unlock+0x165/0x300
[  202.419352][ T8482]  ? mark_lock+0x9a/0x340
[  202.423672][ T8482]  __lock_acquire+0x125b/0x1f80
[  202.428519][ T8482]  lock_acquire+0x1f8/0x5a0
[  202.433011][ T8482]  ? ocfs2_try_remove_refcount_tree+0xb2/0x330
[  202.439155][ T8482]  ? read_lock_is_recursive+0x10/0x10
[  202.444520][ T8482]  ? ocfs2_truncate_file+0xdc3/0x1630
[  202.449878][ T8482]  ? __might_sleep+0xb0/0xb0
[  202.454454][ T8482]  ? rwsem_write_trylock+0x166/0x210
[  202.459728][ T8482]  ? clear_nonspinnable+0x60/0x60
[  202.464745][ T8482]  down_write+0x36/0x60
[  202.468888][ T8482]  ? ocfs2_try_remove_refcount_tree+0xb2/0x330
[  202.475029][ T8482]  ocfs2_try_remove_refcount_tree+0xb2/0x330
[  202.480997][ T8482]  ? ocfs2_remove_refcount_tree+0x1000/0x1000
[  202.487054][ T8482]  ? ocfs2_truncate_file+0xa78/0x1630
[  202.492413][ T8482]  ocfs2_truncate_file+0xea2/0x1630
[  202.497602][ T8482]  ? ocfs2_inode_lock_tracker+0x455/0x750
[  202.503311][ T8482]  ? ocfs2_simple_size_update+0x4d0/0x4d0
[  202.509018][ T8482]  ? do_raw_spin_unlock+0x137/0x8a0
[  202.514203][ T8482]  ? memset+0x1f/0x40
[  202.518179][ T8482]  ? _raw_spin_unlock+0x24/0x40
[  202.523019][ T8482]  ? ocfs2_inode_lock_tracker+0x455/0x750
[  202.528725][ T8482]  ? ocfs2_inode_lock_atime+0x5a0/0x5a0
[  202.534254][ T8482]  ? ocfs2_rw_lock+0x13a/0x250
[  202.539001][ T8482]  ? ocfs2_create_new_inode_locks+0x6d0/0x6d0
[  202.545056][ T8482]  ? setattr_prepare+0x1e0/0xc20
[  202.549987][ T8482]  ? jbd2_journal_begin_ordered_truncate+0xbc/0x150
[  202.556566][ T8482]  ocfs2_setattr+0x18bc/0x1f80
[  202.561324][ T8482]  ? ocfs2_extend_allocation+0x1d00/0x1d00
[  202.567120][ T8482]  ? seqcount_lockdep_reader_access+0x1d3/0x220
[  202.573357][ T8482]  ? ktime_get_coarse_real_ts64+0x107/0x120
[  202.579241][ T8482]  ? current_time+0x1ba/0x300
[  202.583908][ T8482]  ? atime_needs_update+0x7b0/0x7b0
[  202.589101][ T8482]  ? rwsem_write_trylock+0x166/0x210
[  202.594375][ T8482]  ? bpf_lsm_inode_setattr+0x5/0x10
[  202.599560][ T8482]  ? ocfs2_extend_allocation+0x1d00/0x1d00
[  202.605356][ T8482]  notify_change+0xce3/0xfc0
[  202.609934][ T8482]  do_truncate+0x21c/0x300
[  202.614361][ T8482]  ? put_page_bootmem+0x2e0/0x2e0
[  202.619375][ T8482]  ? ima_bprm_check+0x2b0/0x2b0
[  202.624217][ T8482]  ? bpf_lsm_path_truncate+0x5/0x10
[  202.629403][ T8482]  path_openat+0x27e2/0x2e60
[  202.633992][ T8482]  ? do_filp_open+0x480/0x480
[  202.638662][ T8482]  do_filp_open+0x230/0x480
[  202.643156][ T8482]  ? vfs_tmpfile+0x4a0/0x4a0
[  202.647740][ T8482]  ? _raw_spin_unlock+0x24/0x40
[  202.652577][ T8482]  ? alloc_fd+0x5a0/0x640
[  202.656896][ T8482]  do_sys_openat2+0x13b/0x4f0
[  202.661568][ T8482]  ? do_sys_open+0x220/0x220
[  202.666154][ T8482]  __x64_sys_openat+0x243/0x290
[  202.670997][ T8482]  ? __ia32_sys_open+0x270/0x270
[  202.675923][ T8482]  ? syscall_enter_from_user_mode+0x2e/0x230
[  202.681891][ T8482]  ? lockdep_hardirqs_on+0x94/0x130
[  202.687076][ T8482]  ? syscall_enter_from_user_mode+0x2e/0x230
[  202.693043][ T8482]  do_syscall_64+0x3b/0xb0
[  202.697444][ T8482]  ? clear_bhb_loop+0x45/0xa0
[  202.702106][ T8482]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  202.707991][ T8482] RIP: 0033:0x7fe147d7e719
[  202.712392][ T8482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.731993][ T8482] RSP: 002b:00007fe148bce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  202.740390][ T8482] RAX: ffffffffffffffda RBX: 00007fe147f36058 RCX: 00007fe147d7e719
[  202.748347][ T8482] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c
[  202.756306][ T8482] RBP: 00007fe147df132e R08: 0000000000000000 R09: 0000000000000000
[  202.764262][ T8482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.772216][ T8482] R13: 0000000000000001 R14: 00007fe147f36058 R15: 00007ffcf9291948
[  202.780179][ T8482]  </TASK>
[  202.796342][ T8486] loop3: detected capacity change from 0 to 1024
[  202.812893][ T8486] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  202.834390][ T8486] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  202.847644][ T8486] EXT4-fs error (device loop3): ext4_get_journal_inode:5734: inode #5: comm syz.3.1390: unexpected bad inode w/o EXT4_IGET_BAD
[  202.870198][ T4253] ocfs2: Unmounting device (7,2) on (node local)
[  202.872239][ T8486] EXT4-fs (loop3): no journal found
[  202.882280][ T8486] EXT4-fs (loop3): can't get journal size
[  202.905959][ T8486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  202.987562][ T4251] EXT4-fs error (device loop3): __ext4_iget:5055: inode #15: block 1803188595: comm syz-executor: invalid block
[  202.999939][ T4251] EXT4-fs error (device loop3): __ext4_iget:5055: inode #15: block 1803188595: comm syz-executor: invalid block
[  203.033173][ T7792] EXT4-fs (loop3): unmounting filesystem.
[  203.294972][ T4251] syz-executor (4251) used greatest stack depth: 19352 bytes left
[  203.314698][ T4309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.365184][ T4309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.406054][ T4309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.468688][ T4309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.268811][ T4309] device hsr_slave_0 left promiscuous mode
[  204.276467][ T4309] device hsr_slave_1 left promiscuous mode
[  204.283326][ T4309] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.290733][ T4309] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.298358][ T4309] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.305786][ T4309] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.313922][ T4309] device bridge_slave_1 left promiscuous mode
[  204.320102][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.329897][ T4309] device bridge_slave_0 left promiscuous mode
[  204.336446][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.347710][ T4309] device veth1_macvtap left promiscuous mode
[  204.353774][ T4309] device veth0_macvtap left promiscuous mode
[  204.359826][ T4309] device veth1_vlan left promiscuous mode
[  204.365853][ T4309] device veth0_vlan left promiscuous mode
[  204.541521][ T4309] team0 (unregistering): Port device team_slave_1 removed
[  204.575694][ T4309] team0 (unregistering): Port device team_slave_0 removed
[  204.603192][ T4309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.631806][ T4309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.695761][ T4309] bond0 (unregistering): Released all slaves