last executing test programs:

12.774158402s ago: executing program 0 (id=1518):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14)

12.494115717s ago: executing program 0 (id=1522):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000100)={[{@keep_last_dots}, {@discard}, {@namecase}, {}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@namecase}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_remount}]}, 0xc1, 0x1504, &(0x7f0000000e00)="$eJzs3AuYz9XWOPC99t5fxjTp1ySXYa+9vvzSYJskySUhlyRJkiS3hKRJkoTEkFvSkIRcJ8llCMllGpPG/X7JPWlypEmSkJCw/49O5++ct/O+ve//nPP3PmfW53n2M3vN97f2b+1Z88z38szMdz1H1WtRv3YzIhL/EPjzhxQhRIwQYpgQ4johRCCEqBRfKf7y8QIKUv6xN2H/XA+nX+0K2NXE/c/buP95G/c/b+P+523c/7yN+5+3cf/zNu4/Y3nZ9jnFrueRdwc//8/L+Pz/byS3/OSvNpa/sdf/IIX7n7dx//M27n/exv3P27j/eRv3/99frf/iGPc/b+P+M5aXXe3nzzyu7rja33+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4KLYT4y/xq18UYY4wxxhhjjLF/Hp//alfAGGOMMcYYY4yxfz0QUiihRSDyifwiRhQQseIaESeuFQXFdSIirhfx4gZRSNwoCosioqgoJhJEcVFCGIHCChKhKClKiai4SZQWN4tEUUaUFeWEE+VFkrhFVBC3ioriNlFJ3C4qiztEFVFVVBPVxZ2ihrhL1BS1RG1xt6gj6op6or64RzQQ94qG4j7RSNwvGosHRBPxoGgqHhLNxMOiuXhEtBCPipbiMdFKtBZtRFvR7v8p/yXRV7ws+on+IkUMEAPFK2KQGCyGiKFimHhVDBeviRHidZEqRopR4g0xWrwpxoi3xFgxTowXb4sJYqKYJCaLKWKqSBPviGniXTFdvCdmiJlilpgt0sUcMVe8L+aJ+WKB+EAsFB+KRWKxWCKWigzxkcgUy0SW+FgsF5+IbLFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHbxqdghdopdYrfYI/aKfeIzsV98Lg6IL0SO+PJ/mH/2P+T3AgECJEjQoCEf5IMYiIFYiIU4iIOCUBAiEIF4iIdCUAgKQ2EoCkUhARKgBJQABAQCgpJQEqIQhdJQGhIhEcpCWXDgIAmSoALcChWhIlSCSlAZKkMVqApVoTpUhxpQA2pCTagNtaEO1IF6UA/ugXvgXmgIDaERNILG0BiaQBNoCk2hGTSD5tAcWkALaAktoRW0gjbQBtpBO2gP7aEDdIBO0Ak6Q2foAl0gGZKhK3SFbtANukN36AE9oCf0hF7QG3rDS/ASvAwvQ3+oIwfAQBgIg2AQDIGhMBReheHwGrwGr0MqjIRR8Aa8AW/CGDgDY2EcjIfxUENOhEkwGUhOhTRIg2kwDabDdJgBM2EmzIZ0mANzYS7Mg/kwHz6AhfAhfAiLYTEshQzIgExYBlmQBcvhLGTDClgJq2A1rIHVsA7WwzrYCJtgI2yBLbANtsGn8CnshJ2wG3bDXtgLn8Fn8Dl8DqmQAzlwEA7CITgEh+Ew5EIuHIEjcBSOwjE4BsfhOJyAk3AKTsJpOA1n4Cycg3NwHs7DBXgh4Zvme8tsSBXyMi21zCfzyRgZI2NlrIyTcbKgLCgjMiLjZbwsJAvJwrKwLCqLygSZIEvIEhIlSpKhLClLyqiMytKytEyUibKsLCuddDJJJskKsoKsKCvKSvJ2WVneIavIqrKjqy6ryxqyk6spa8nasrasI+vKerK+rC8byAayoWwoG8lGsrFsLJvIB2VTOQCGwMPycmdayJHQUo6CVrK1bCPbyjfhcdlejoEOsqPsJJ+U42AsdJHtXbJ8RnaVk6CbfE5OhudlDzkVesoXZS/ZW/aRL8m+soPrJ/vLGTBADpSzYZAcLIfIoXIe1JWXO1ZPvi5T5Ug5Sr4hl8Kbcox8S46V4+R4+bacICfKSXKynCKnyjT5jpwm35XT5XtyhpwpZ8nZMl3OkXPl+3KenC8XyA/kQvmhXCQXyyVyqcyQH8lMuUxmyY/lcvmJzJYr5Eq5Sq6Wa+RauU6ulxvkRrlJbpZb5Fa5TW6Xn8odcqfcJXfLPXKv3Cc/k/vl5/KA/ELmyC/lQfkneUh+JQ/Lr2Wu/EYekd/Ko/I7eUx+L4/LH+QJeVKekj/K0/IneUaelefkz/K8/EVekBflJemlUKCkUkqrQOVT+VWMKqBi1TUqTl2rCqrrVERdr+LVDaqQulEVVkVUUVVMJajiqoQyCpVVpEJVUpVSUXWTKq1uVomqjCqryimnyqskdYuqoG5VFdVtqpK6XVVWd6gqqqqqpqqrO1UNdZeqqWqp2upuVUfVVfVUfXWPaqDuVQ3VfaqRul81Vg+oJupB1VQ9pJqph1Vz9YhqoR5VLdVjqpVqrdqotqqdely1V0+oDqqj6qSeVJ3VU6qLelolq2dUV/Ws6qaeU93V86qHekH1VC+qXqq36qMuqkvKq36qv0pRA9RA9YoapAarIWqoGqZeVcPVa2qEel2lqpFqlHpDjVZvqjHqLTVWjVPj1dtqgpqoJqnJaoqaqtLUO2qaeldNV++pGWqmmqVmq3Q1Rw35baUF/438d/9O/ohf332b2q4+VTvUTrVL7VZ71F61T+1T+9V+dUAdUDkqRx1UB9UhdUgdVodVrspVR9QRdVQdVcfUMXVcHVcn9G+nefWTOqPOqrPqZ3VenVcXfvsaCA1aaqW1DnRHnV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf8w/l/XV++v1NfO91Ot9ftdQfdQXfSnXRn3Vl30V10sk7WXXVX3U130911d91D99A9dU/dS/fSfaCP7qv76n66n07RKXqgfkUP0oP1ED1UD9Ov6uF6uB6hR+hUnapH6VF6tB6tx+gxeqweq8fr8XqCnqAn6Ul6ip6i03Sanqan6el6up6hZ+hZepZO1+l6rp6r5+l5eoFeoBfqhXqRXqSX6CU6Q2foTJ2ps3SWXq6X62y9Qq/Qq/QqvUav0ev0Or1Bb9Cb9Ca9RW/R2Xq73q536B16l96l9+g9ep/ep/fr/fqAPqBzdI4+qA/qQ/qQPqwP61ydq4/oI/qoPqqP6WP6uD6uT+gT+pQ+pU/r0/qMPqPP6XP6vD6vL+gL+pK+dPmyL5CBDHSgg3xBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEYAIMbEBBGJQMSgXR4KagdHBzkBiUCcoG5QIXlA+SgluCCsGtQcXgtqBScHtQObgjqBJUDaoF1YM7gxrBXUHNoFZQO7g7qBPUDeoF9YN7ggbBvUHD4L6gUXB/0Dh4IGgSPBg0DR4KmgUPB82DR4IWwaNBy+CxoFXQOmgTtA3a/VPX9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL98ekeNGvNhPozBGIzFWIzDOCyIBTGCEYzHeCyEhbAwFsaiWBQTMAFLYAm8jJCwJJbEKEaxNJbGREzEslgWHTpMwiSsgBWwIlbESlgJK2NlrIJVsBpWwzvxTrwL78JaWAvvxruxLtbF+lgfG2ADbIgNsRE2wsbYGJtgE2yKTbEZNsPm2BxbYAtsiS2xFbbCNtgG22E7bI/tsQN2wE7YCTtjZ+yCXTAZk7ErdsVu2A27Y3fsgT2wJ/bEXtgL+2Af7It9sR/2wxRMwYE4EAfhIByCQ3AYDsPhOBxH4AhMxVQchaNwNI7GMTgGx+I4HI9v4wSciJNwMk7BqZiGaTgNp+F0nI4zcAbOwlmYnj8d5+JcnIfzcAEuwIW4EBfhIlyCSzADMzATMzELs3A5LsdszMaVuBJX42pci2txPa7HjbgRN+Nm3IpbcTtuxx24A3fhLtyDe3Af7sP9uB8P4AHMwRw8iAfxEB7Cw3gYczEXj+ARPIpH8Rgew+N4HE/gCTyFp/A0nsYzeAbP4Tk8j7/gBbyIl9BjjJUi1l5j4+y1tqC9zsbYAvav46K2mE2wxW0Ja2xhW+RvYrTWJtoytqwtZ50tb5PsLb+Lq9iqtpqtbu+0Nexdtubv4gb2XtvQ3mcb2fttfXvP38SN7QO2iX3UNrWP2Wa2tW1u29oW9lHb0j5mW9nWto1tazvbp2wX+7RNts/YrvbZ38WZdpldbzfYjXaT3W8/t+fsz/ao/c6et7/Yfra/HWZftcPta3aEfd2m2pG/i8fbt+0EO9FOspPtFDv1d/EsO9um2zl2rn3fzrPzfxdn2I/sQptlF9nFdold+mt8uaYs+7Fdbj+x2XaFXWlX2dV2jV1r1/3fWlfZLXar3Wb32c/sDrvT7rK77R6799f48j4O2C9sjv3SHrHf2kP2K3vYHrO59ptf48v7O2a/t8ftD/aEPWlP2R/tafuTPWPP/rr/y3v/0V60l6y3goAkKdIUUD7KTzFUgGLpGoqja6kgXUcRup7i6QYqRDdSYSpCRakYJVBxKkGGkCwRhVSSSlGUbqLSdDMlUhkqS+XIUXlKoluoAt1KFek2qkS3U2W6g6pQVapG1elOqkF3UU2qRbXpbqpDdake1ad7qAHdSw3pPmpE91NjeoCa0IPUlB6iZvQwNadHqAU9Si3pMWpFrakNtaV29Di1pyeoA3WkTvQkdaanqAs9Tcn0DHWlZ6kbPUfd6XnqQS9QT3qRelFv6kMvUV96mfpRf0qhATSQXqFBNJiG0FAaRq/ScHqNRtDrlEojaRS9QaPpTRpDb9FYGkfj6W2aQBNpEk2mKTSV0ugdmkbv0nR6j2bQTJpFsymd5tBcep/m0XxaQB/QQvqQFtFiWkJLKYM+okxaRln0MS2nTyibVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ0+pR20k3bRbtpDe2kffUb76XM6QF9QDn1JB+lPdIi+osP0NeXSN3SEvqWj9B0do+/pOP1AJ+gknaIf6TT9RGfoLJ2jn+k8/UIX6CJdIk8ihFCGKtRhEOYL84cxYYEwNrwmjAuvDQuG14WR8PowPrwhLBTeGBYOi4RFw2JhQlg8LBGaEEMbUhiGJcNSYTS8KSwd3hwmhmXCsmG50IXlw6TwlrBCeGtYMbwtrBTeHlYO7wirhFXDR++vHt4Z1gjvCmuGtcLa4d1hnbBuWC+sH94TNgjvDRuG94WNwvvDiuEDYZPwwbBp+FDYLHw4bB4+ErYIHw1bho+FrcLWYZuwbdgufDxsHz4Rdgg7hp3CJ8PO4VNhl/DpMDl8JuwaPvuHx1PCAeHA8JXwldD7+9SS6NJoRvSjaGZ0WTQr+nF0efSTaHZ0RXRldFV0dXRNdG10XXR9dEN0Y3RTdHN0S3RrdFvU+/r5hQMnnXLaBS6fy+9iXAEX665xce5aV9Bd5yLuehfvbnCF3I2usCviirpiLsEVdyWcceisIxe6kq6Ui7qbXGl3s0t0ZVxZV845V94lubaunWvn2rsnXAfX0XVyT7on3VPuKfe0e9o947q6Z10395zr7p53PdwL7gX3ouvlers+7iXX173s+rn+LsWluIFuoBvkBrkhbogb5oa54W64G+FGuFSX6ka5UW60G+3GuDFurBvrxrvxboKb4Ca5SW6Km+LSXJqb5qa56W66m+FmuFlulkt36W6um+vmuXlugVvgFiYudIvcIrfELXEZLsNlukyX5bLccrfcZbtst9KtdKvdahcIIda79W6j2+g2u81uq9vqtrvtbofb4Xa5XW6P2+P2uX1uv9vvDrgDLsfluIPuoDvkDrnD7muX675xR9y37qj7zh1z37vj7gd3wp10p9yP7rT7yZ1xZ90597M7735xF9xFd8l5lxZ5JzIt8m5keuS9yIzIzMisyOxIemROZG7k/ci8yPzIgsgHkYWRDyOLIosjSyJLIxmRjyKZkWWRrMjHkeWRTyLZkRWRlZFVkdWRNRHvi+8IfUlfykf9Tb60v9kn+jK+rC/nnS/vk/wtvoK/1Vf0t/lK/nZf2d/hq/iqvpp/zLfyrX0b39a384/79v4J38F39J38k76zf8p38U/7ZP+M7+qf9d38c767f9738C/4nv5F38v39n38S76vf9n38/19ih/gB/pX/CA/2A/xQ/0w/6of7l/zI/zrPtWP9KP8G360f9OP8W/5sX6cH+/f9hP8RD/JT/ZT/FSf5t/x0/y7frp/z8/wM/0sP9un+zl+rn/fz/Pz/QL/gV/oP/SL/GK/xC/1Gf4jn+mX+Sz/sV/uP/HZfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf57f5Tv8Pv9Lv8br/H7/X7/Gd+v//cH/Bf+Bz/pT/o/+QP+a/8Yf+1z/Xf+CP+W3/Uf+eP+e/9cf+DP+FP+lP+R3/a/+TP+LP+nP/Zn/e/+Av+or/Ef7PGGGOMMfbfov7g+IC/8zn527hsoBDi2p3Fcv/jmpsL/3k+WCZ0jgghnunf8+G/jDp1UlJSfnttthJBqcVCiMiV/HziSrxCdBJPiWTRUVT4u/UNlr3P0x+sH71diNi/yokRV+Ir69/6n6z/+JPjMyuH5+L/i/UXC5FY6kpOAXElvrJ+xf9k/SLt/6D+Al+lCdHhr3LixJX4yvpJ4gnxrEj+m1cyxhhjjDHGGGN/NlhW6/5H98+X788T9JWc/OJK/Ef354wxxhhjjDHGGLv6nu/d5+nHk5M7dufJPzT5y+9D/G+p518wiflti/9b6uHJv3RyFX8oMcYYY4wxxv4lrlz0X+1KGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxvOv/x78Tu9p7ZIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxq62/xMAAP//m+wv3w==")
rename(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

12.002246265s ago: executing program 0 (id=1529):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, 0x0)

11.628783206s ago: executing program 0 (id=1537):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e17ff850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc33, &(0x7f0000001780)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

11.061737621s ago: executing program 0 (id=1545):
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0xca00200, 0x0, 0x0, 0x0, 0x0, 0x0)

10.67546578s ago: executing program 4 (id=1553):
r0 = syz_open_dev$media(&(0x7f00000003c0), 0x8000000000002, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0)

10.460971579s ago: executing program 0 (id=1555):
keyctl$join(0x1, &(0x7f00000005c0)={'syz', 0x3})
keyctl$join(0x1, &(0x7f0000001680)={'syz', 0x3})

10.392621594s ago: executing program 4 (id=1557):
syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000240)={[{@version_upgrade={'version_upgrade', 0x3d, 'compatible'}}, {@fsck}, {@background_compression={'background_compression', 0x3d, 'none'}}, {@very_degraded}, {@nocow}, {@background_compression={'background_compression', 0x3d, 'lz4'}}, {@compression={'compression', 0x3d, 'zstd'}}, {@norecovery}, {@norecovery}, {@discard}, {@nocow}, {@reconstruct_alloc}]}, 0x1, 0x5965, &(0x7f00000011c0)="$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")
open(&(0x7f00000000c0)='./file1\x00', 0x80000, 0x0)

9.745391375s ago: executing program 32 (id=1555):
keyctl$join(0x1, &(0x7f00000005c0)={'syz', 0x3})
keyctl$join(0x1, &(0x7f0000001680)={'syz', 0x3})

7.176700373s ago: executing program 4 (id=1573):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @remote}, {}, 0x28, {0x2, 0x0, @empty}})

3.735101108s ago: executing program 3 (id=1594):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0)

2.648836195s ago: executing program 2 (id=1601):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c)

2.598271521s ago: executing program 2 (id=1602):
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000e1ffd018009400000000000109022400010000000009040000000300000009210000000122000009051d03"], 0x0)
syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003"], 0x0)

2.115928915s ago: executing program 4 (id=1603):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000600)=ANY=[@ANYBLOB='iocharset=iso8859-1,noadinicb,uid=forget,anchor=00000000000000000145,iocharset=cp949,dmode=00000000000000000000001,undelete,partition=00000000000000000001,unhide,mode=00000000000004000000006,gid=', @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB=',context=user_u,appraise,euid=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c666f5f9f276ec9776e65723cf4f35fe4113026aea579cf39a0f0c29957f53b57c3b489eb054980f991fd7da326951341daebf88b7573ead7344e8185d60a1644469d91bcb8587f93f34db553c02bca476f5744f1aa69e5accfbfd06c024c0950225000dca631a828ab74affc80a0160784", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0xc4f, &(0x7f00000026c0)="$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")
mkdir(&(0x7f0000002bc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1)

1.98458349s ago: executing program 3 (id=1605):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca)
getsockopt$ax25_int(r0, 0x101, 0x4, 0x0, 0x0)

1.701598362s ago: executing program 3 (id=1607):
r0 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000180))

1.54464466s ago: executing program 4 (id=1608):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20108c0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="34dd0f00135ea23c22845cc5474e7cd7e7ab01d33c4486b62e3b4f9822364f30c24779205bbd653e2b0e7bbbcba1e3dc78833fbb91474ba644d13b9a3bfddc66bfc8ba12f680d556b1b4d4a1ec5b55eeedc8454a11312f3025c08220a36ab6d8100e6a0836f341eb18f984b2a7feaef926859b77e733f9bb7220a2460746c81448ccc7a901e32427b8cc656a1b8a1c52fac1524d3a90fc424c13d6cc5708aa1ea205ddd2b967de4068647f1a5fade5146a344fd31daeeaeede8f61b1066ca3a10599230edf07182401e51b"], 0x1, 0x61f5, &(0x7f00000075c0)="$eJzs3U1vHVf9B/DfffRD/k2tLqr+I4TctDyU0iROSggUaLsoCzZdoGxRItetIlJASUBpZRFX3rBgxSsAIbFEiCViwQvogi07VqyIZCOBumLQ2OfE48m9vXYd37n2fD6SPfObM9c+4++d++A7MycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjed7+/0omIGz9LC5Yi/i96Ed2IhbJejoiF5aW8fj8inoud5ng2IgZzEeXtd749HfFqRHx8NmJre321XHz5gP146w9/++0Pzrz9198PLv7nj/d6r41b7/79X/77Tw+Ots0AAADQNkVRFJ30Nv9cen/fbbpTAMBU5Of/IsnLT339q3+8/edZ6o9arVar1VOoq4rRHlSLiNio3qZ8zeDjeAA4YTbik6a7QIPk32r9iDjTdCeAmdZpugMci63t9dVOyrdTfT5Y3m3Px4Lsy3+j8+j8jnHTSerHmEzr/rUZvXhmTH8WptSHWZLz79bzv7HbPkzrHXf+0zIu/+HuqU+tk/Pv1fOvOT35d0fm31Y5//6h8u/JHwAAAAAAZlj+//9Sw5//zh19Uw7k0z7/XZ5SHwAAAAAAAADgSTvq+H+PGP8PAAAAZlb5Xr3067N7y8Zdi61cfr0T8VRtfaBl0skyi033AwAAAAAAAAAAAADapL97DO/1TsQgIp5aXCyKovyqqteHddTbnwI71yxouhPA9DX9IA8AALs+Pls7l78TMR8R16O7c62/weLiYlHMLywWi8XCXH49O5ybLxYq7+vztFw2NzzAC+L+sCh/2HzldlWT/l8wqb3+88rfNSx6B+jYEzJIf80xzQ2FDQDJ7rPRlmekU6YonvZpAwdi/z+FlmKp6fsVs6/puykAAABw/IqiKDrpct7n0vh+3aY7BQBMRX7+r38ucKS6O6Y94sn8fLVarVar1Z+pripGe1AtImKjepvyNYPh+AHghNmIT5ruAg2Sf6v1I+K5pjsBzLRO0x3gWGxtr692Ur6d6vNBGt89HwuyL/+Nzs7t8u1HTSepH2MyrfvXZvTimTH9eXZKfZglOf9uPf8bu+3DtN5x5z8t4/If7pwy1z45/149/5rTk393ZP5tlfPvHyr/nvwBAAAAAGCG5f//L/n8N28yAAAAAAAAAJw4W9vrq/m81/z5/+dGrOf8z9Mp5985bP4LaV7+J1rOv1vL/8u19XqV+Ydv7u3//9peX/3dvX/+f54eNP+5PNNJ96xOukd00m/q9NP0KFv3uM1Bb1j+pkGn2+unY36KwbtxK27HWlzat243/T322lf2tZc9Hexrv7yvvf9Y+5V97YN03YFiIbdfiNX4cdyOd3bay7a5Cds/P6G9mNCe8+95/G+lnH+/8lXmv5jaO7Vp6eFH3cf2++p01O9549bnf3Hp+Ddnos3oPdq2qnL7zjfQn/Jv8lYM46d31+5cuH/z3r07K5EmZ6pLL0eaPGE5/8HO19ze4/8Lu+35cb+6vz78aHjo/GfFZvTH5v9CZb7c3pem3Lcm5PyH6Svn/05qH73/n+T8x+//LzfQHwAAAAAAAAAAAAAAAPg0RVHsnCL6RkRcTef/NHVuJgAwXfn5v0jycrVarVar1aevripGe71aRMRfqrcpXzP8fNQPAwBm2X8j4u9Nd4LGyL/F8vX+yumLTXcGmKq7H3z4w5u3b6/dudt0TwAAAAAAAACAzyqP/7lcGf/5xYhYqq23b/zXN2P5qON/9vPMowFGn/BA32Nsdoe9bmW48edjZ3zuC+PG/z4fj4//ncfE7VW3Y4zBhPbhhPa5Ce3zI5fupTXyRI+KnP/zlfHOy/zP1YZfb8P4r/Ux79sg53++cn8u8/9Sbb1q/sVvZi7/jYOuuBndfflfvPf+Ty7e/eDDV269f/O9tffWfnRlZeXSlatXr127dvHdW7fXLu1+P55ez4Ccfx772nGg7ZLzz5nLv11y/l9ItfzbJef/xVTLv11y/vn1nvzbJeef3/vIv11y/i+lWv7tkvP/Sqrl3y5b2+tzZf4vp1r+7ZL3/6+mWv7tkvN/JdXyb5ec/4VUy79dcv4XU32A/F0e/hTJ+edPuOz/7ZLzX0m1/Nsl53851fJvl5z/lVTLv11y/q+mWv7tkvP/Wqrl3y45/6upln+75Py/nurD5L9wjP1iOnL+11Jt/2+XnP83Ui3/dsn5fzPV8m+XnP9rqZZ/u+T8v5Vq+bdLzv/bqZZ/u+T8v5Nq+bdLzv/1VMu/Xfau/2/GjBkzeabpRyYAAAAAAAAAAAAAoG4ahxM3vY0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYe/uYuQ66/uBn1nv2muHEAMhOPkb2CQmhMRk13biF/5NMYEADVAKJBT6guN612bBb3jtEiiSTQMlEkZFFVXTi7aAojZSVRFVXNCK0lxUfbkq7QW9qagqITWqDAqoSG0F2WrmPM/jmdnZmVnveH32PJ+PlPx2Z86Z88yZ55yd366/cwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHa3vnnuc42iKJr/tf63tShe1Px689TW1m1vuNYjBAAAAFbrp63/P39DuuHgECu1LfN3r/rHry8uLi4WH9jwuxPjxWK6Y6ooJjYVReu+6Jl//2DjS23fB48Xk42xtu/HBmx+w4D7xwfcPzHg/o0D7t804P7JAfcv2QFLbC5/H9N6sB2tL7eWu7S4sZho3bejx1qPNzaNjcXf5bQ0WussThwt5ovjxVwx07F8uWyjtfw3b21u6+1F3NZY27a2N2fIDz91JI6hEfbxjo5tXX7M6PtvKqZ+9MNPHfnjs5du7lUH7oaOxyvHeedtzXF+JtxSjrVRbEr7JI5zrG2c23u8Jhs6xtlordf8unuczw85zg2Xh7mmul/zyWKs9fW3W/tpvP3Xemk/bQ+3/fftRVFcuDzs7mWWbKsYK7Z03DJ2+fWZLGdk8zGaU+mlxfiK5umtQ8zTZp3d0TlPu4+J+PrfGtYbX2YM7S/T9z+9ccnrvtJ5GjWf9XLHSvccHPWxUpU5GOfFt1tP+omec3BHeP6fumP5Odhz7vSYg+l5t83B2wbNwbGNG1pjTi9Co7XO5Tm4q2P5Da0tNVr1uTv6z8HpsydOTy984pOvnz9x+NjcsbmTe3btmtmzd+/+/funj84fn5sp/3+Fe7v6thRj6Ri4Ley7eAy8tmvZ9qm6+JXRHYeTfY7DrV3Ljvo4HO9+co21OSCXzuny2Hi4udMnL44VyxxjrdfnrtUfh+l5tx2H423HYc+fKT2Ow/EhjsPmMqfvGu49y3jbf73GcLV+Fmxtm4Pd70e65+Co349UZQ5Ohnnxr3ct/7NgexjvEztX+n5kw5I5mJ5uOPc0b0nv9yf3t0qveXlL847rNhbnFubO3PPY4bNnz+wqQlkTL2ubK93zdUvbcyqWzNexFc/Xg/OveuKWHrdvDftq8vXN/00u+1o1l7n3nv6vVeunW+/92XHr7iKUEVvr/dnrp3lzf6Zess/+bC7zmenVvxdPfWnb+XdimfNv7PtfKLeXHurxDRPj5fG7Ie2diY7zcedLNd46dzVa235+erjz8UT4b63Pxzf2OR9v61p21Ofjie4nF8/HjUG/7Vid7tdzMsyT4zP9z8fNZbbtXumcHO97Pr491EbY/68LnULqi9rmznLzNm1rfHwiPK/xuIXOebqnY/mJ0Js1t/X07iubp3feXj7WhvTsLlureTrVteyo52k6Xy03TxuDfvt2Zbpfz8kwL27c03+eNpd59t7Vnzs3xy/bzp0bB83BiQ0bm2OeSJOwPN8vbo5z8J7iSHGqOF7Mtu7d2JpPjda2dt433BzcGP5b63Pltj5z8M6uZUc9B9PPseXmXmN86ZMfge7XczLMiyfv6z8Hm8u8Zd9o37veGW5Jy7S9d+3+/dpyv/O6pWs3Xc3feTXH+Tf7+v9utrnM8f0r7TP776e7wy3X9dhP3cfvcsfUbLE2+2lbGOel/cvvp+Z4mst86cCQ8+lgURTnP/ZA6/e94e8rf37uO1/v+LtLr7/pnP/YAz+4/ujfrmT8AKx/L5RlS/mzru0vU8P8/R8AAABYF2LfPxZqov8HAACA2oh9f/xX4Yn+HwAAAGoj9v3joSaZ9P/b3nJp/oXzRUrmLwbx/rQbHiqXixnXmfD91OJlzdsfeGrux395frhtjxVF8ZOHfqPn8tseiuMqTYVxPvNg5+1LVzw/1PYffeTycu359S+Hx4/PZ9hp0CuCO1MUxTdv+EJrO1MfvNiqzz70aKu+98ITjzeXef5A+X1c/7mXlcv/QQj/Hjx6uGP958J++F6oM+/ovT/iel+7+Lrt+95/eXtxvcZtL2497Sc/VD5u/JycLz5eLh/383Lj/6vPP/215vKPvab3+M+P9R7/0+Fxn3rw0nxzxv3PK8vl21+D5vdxvc+G8cftPRXWv+er3+o5/mc+Vy5/+q3lco+GGrd/Z/h+x1svzbfvr8cahzueV/G2crm4/Znv/Hbr/vh48fG7xz956GLH/uieH8/+c/k4013Lx9vjdqK/6Np+83Ha52fc/tO/9WjHfh60/Wfe+9wrm4/bvf27u5bb0LV+9yc2/eFnv9Bze3E8B//sdMfzOfiecByH7T/5oTAfw/3/+8wXOrYbPfqezvNPXP7LW893PJ/o7T8qt//MG4+16n9M/fj3r3vR9S++8OrmviuKb7+vfLxB2z/2R6c6xv+Vm+5qvR7x/pjR797+cuL2z3x858lTC+fmZ9v2auuzc95ZjmfT5OYtzfHeEM6t3d8fOnX2w3NnpmamZopiqr4foXfFvhrqD8pyYaXr3/VIeD1v+b1vbrnjnz4fb/+Xh8vbL76j/Ln12rDcF8PtW8vXb7Gxyu0/eetNreO78Wz5fUeOfQS27/jP/UMtGJ5/9/uCON9Pv/zDrf3QvK/1cyMe16sc/3dny8f5Rtivi+GTmW+76fL22pePn41w8X3l8b7q/RdOc/F1/ZPwer/re+Xjx3HF5/vd8D7mW9s6z3dxfnzj/Fj347c+xeNCOJ8UF8r741Jxf198/qaew4ufQ1JcuLn1/e+kx7l5RU9zOQufWJg+Pn/y3GPTZ+cWzk4vfOKTh06cOnfy7KHWZ3ke+sig9S+fn7a0zk+zc3vvLWY2F0VxqphZgxPW1Rl/86vhxn/6kSOz+2bumJ07evjc0bOPnJ47c+zIwsKRudmFOw4fPTr38UHrz8/ev2v3gT37du88Nj97//4DB/Yc2Dl/8lRzGOWgBtg789GdJ88caq2ycP+9B3bdd9+9MztPnJqdu3/fzMzOc4PWb/1s2tlc+9d3npk7fvjs/Im5nQvzn5y7f9eBvXt3D/w0wBOnjy5MTZ85d3L63MLcmenyuUydbd3c/Nk3aH3qaeHfyvez3RrlB/EV7757b/p81qanPr3sQ5WLdH2A6KXwWTT/8JLT+4f5Pvb9E6EmmfT/AAAAkIPY928MNdH/AwAAQG3Evn9TqIn+HwAAAGoj9v2ToSaZ9P/y//L/w+X/y/tHmf/vlZ8v5P8rlf8//bEyV7re8/8xPy//n4drnP9f9fbl/+X/65f/Hz4/v97HL/8v/89SVcv/x75/c1Fk2f8DAABADmLfvyXURP8PAAAAtRH7/utCTfT/AAAAUBux739RqEkm/b/8/1D5/92DAlf1z/+P/vr/8v/y/2uS/48vjvx/Nlacv3//wx3fyv8H8v/y//L/8v/y/6zaxLL3XKv8f+z7rw81yaT/BwAAgBzEvv/FoSb6fwAAAKiN2PffEGqi/wcAAIDaiH3/1lCTTPp/+X/X/5f/l/+vdf5/tdf/bxuM/P/64Pr//cn/D3DF+f9J+f/1mP+fGO34q53/Hzh8+X+uiqpd/z/2/S8JNcmk/wcAAIAcxL7/paEm+n8AAACojdj3vyzURP8PAAAAtRH7/htDTTLp/+X/5f/l/+X/5f97b3/w9f/Lr+T/q0X+vz/5/wFc/z+v/P+Ix1/t/P+or/8/8WD3+vL/9FK1/H/s+18eapJJ/w8AAAA5iH3/TaEm+n8AAACojdj3vyLURP8PAAAAtRH7/m2hJpn0//L/VyP//9PW2vL/8v/d80P+v275/5L8f7XI//cn/z+A/L/8v/z/cPn/Hh9+Jf9PL1XL/8e+/+ZQk0z6fwAAAMhB7PtvCTVZpv9fHPJv2wAAAEB1xL7//4Wa+Ps/AAAA1Ebs+7eHmmTS/8v/u/6//H9e+f+7N8r/y//Xm/x/f/L/A8j/y//L/w95/f+lVpL/3zTowaiNquX/Y9//ylCTTPp/AAAAyEHs+18VaqL/BwAAgNqIff+rQ030/wAAAFAbse+fCjXJpP+X/69X/v9P//rJVxfy//L/A7Zf0/x/nAby/5mT/+9P/n8A+X/5f/n/Ncn/k4+q5f9j339rqEkm/T8AAADkIPb9t4Wa6P8BAACgNmLff3uoif4fAAAAaiP2/TtCTTLp/+X/65X/j+T/5f/7bb+m+f9E/j9v8v89tB2k8v8DyP/L/2ef/4/vfuX/GY2q5f9j3/+aUJNM+n8AAADIQez77wg10f8DAABAbcS+/7WhJvp/AAAAqI3Y998ZapJJ/y//L/8v/y//L//fe/vy/+uT/H9/K83/b5T/l/+X/88s/+/6/4xW1fL/se9/XahJJv0/AAAA5CD2/XeFmuj/AQAAoDbiv98s/92r/h8AAADqKPb9O0NNMun/5f/l/3PK/zfk/+X/5f9rT/6/P9f/H0D+X/5f/l/+n5GqWv4/9v2vDzXJpP8HAACAHMS+/55QE/0/AAAA1Ebs+6dDTfT/AAAAUBux758JNcmk/5f/l//PKf/v+v/y//L/9Sf/398o8v+L5+X/5f97k/+vYP6/KOT/uaaqlv+Pff+uUJNM+n8AAADIQez7d4ea6P8BAACgNmLfvyfURP8PAAAAtRH7/ntDTTLp/+X/5f/l/+X/5f97b1/+f32S/+/P9f8HkP+X/69b/t/1/7nGqpb/j33/faEmmfT/AAAAkIPY9+8NNdH/AwAAQG3Evn9fqEno/3v9u24AAABgfYl9//5Qk0z+/i//X5P8/2/+fce25f/l//ttfzT5/83y/6HK/1dLTfP/3YfFFZP/H0D+/6rl54uxkQzxmo1f/l/+nytTtfx/7PsPhJpk0v8DAABADmLf/4ZQE/0/AAAA1Ebs+/9/qIn+HwAAAGoj9v0/E2qSSf8v/1+T/H8X+X/5/37bd/1/+f86q2n+f2Rqlf8fk/9fT/l/1/+X/x+0PvV09fP/8avh8v+x778/1CST/h8AAAByEPv+nw010f8DAABAbcS+/42hJvp/AAAAqI3Y9x8MNcmk/5f/l/+/Wvn/C2Py/93zI6/8/xuLblXM/zcnj/x/vVQ4/z8xzPbl/13/X/5/Tcbf/aNmJOOX/5f/Z6mqXf8/9v1vCjXJpP8HAACAHMS+/4FQE/0/AAAA1Ebs+98caqL/BwAAgNqIff9bQk0y6f/l/+X/Xf9f/t/1/3tvX/5/fapw/n8o8v/y//L/63f88v/y/yxVtfx/7PsfDDXJpP8HAACAHMS+/62hJvp/AAAAqI3Y978t1ET/DwAAALUR+/63h5pk0v/L/8v/y//L/8v/996+/P/6JP/fn/z/APL/8v/y//L/jFTV8v+x7/+5UJNM+n8AAADIQez7Hwo10f8DAABAbcS+/x2hJvp/AAAAqI3Y978z1CST/l/+X/5f/l/+X/6/9/bl/9cn+f/+5P8HkP+X/5f/l/9npKqW/499/7tCTTLp/wEAACAHse//+VAT/T8AAADURuz73x1qov8HAACA2oh9/y+EmmTS/8v/y/9XK/+/eL59Pfl/+f9iVPn/5kry/1mQ/+9P/n+AHvn/TfL/8v/y//L/XLGq5f9j3/+eUJNM+n8AAADIQez73xtqov8HAACA2oh9//tCTfT/AAAAUBux73841CST/l/+P8v8f3rK1cv/u/6//L/r/8v/r478f3/y/wO4/r/8v/y//D8jVbX8f+z7Hwk1yaT/BwAAgBzEvv/9oSb6fwAAAKiN2Pf/YqiJ/h8AAABqI/b9Hwg1yaT/l//PMv9f4ev/1y3/P94xP3LK/0+2vZ5pXsr/y/+vAfn//uT/B5D/l/+vcv4/zObNy6wv/08VVS3/H/v+D4aaZNL/AwAAQA5i3/9LoSb6fwAAAKiN2Pf/cqiJ/h8AAABqI/b9vxJqkkn/X8P8/4VC/l/+vzL5/875kVP+3/X/l5L/Xxvy//3J/w8g/y//X+X8/wDy/1RR1fL/se//1VCTZRu/H/zXEE8TAAAAqJDY938o1CSTv/8DAABADmLffyjURP8PAAAAtRH7/kdDTTLp/2uY/1/l9f/jFVXl/+X/R53/H5P/l/+X/18Do8v/v+L6opD/l/+X/5f/l/+X/2c1qpb/j33/4VCTTPp/AAAAyEHs+38t1ET/DwAAALUR+/4joSb6fwAAAKiN2PfPhppk0v9fw/z/RDXz/67/f6X5/5/I/7v+fyD/35v8/9pw/f/+5P8HkP+X/5f/l/9npKqW/499/1yoSSb9PwAAANRY+nVw7PuPhpro/wEAAKA2Yt9/LNRE/w8AAAC1Efv+D4eaZNL/u/6//L/r/1+L/P94x/Ly/yX5f/n/UZD/70/+fwD5f/l/+X/5f0aqavn/2PfPh5pk0v8DAABADmLf/5FQE/0/AAAA1Ebs+z8aaqL/BwAAgNqIff/xUJNM+n/5f/n/3PP/jaK44Pr/o83/b5L/70n+f23I//cn/z+A/P9a5uevH8mgr934l5D/l/9nqarl/2PffyLUJJP+///Yu48mu85qj8MbY0vdI/gIjBkxhJH5CEyZUcWYaJODZXIGk3MwOedgosk552iTczTRUNWUW2stqfsc7S2pj/rs/b7PM1lXuhZ9hBtz/1f1qxcAAAB6kLv/vnGL/Q8AAADNyN1/v7jF/gcAAIBm5O6/f9zSyf7X/+v/e+//h628/3/wr2+t//f+/3r6/+Ox0t9fvv6vO1cUfs7+/y53vfpe+n/9v/5/lPf/9f/6fw6bW/+fu/8BcUsn+x8AAAB6kLv/gXGL/Q8AAADNyN1/Vdxi/wMAAEAzcvdfHbd0sv/1//p//b/+/0D/f6P+X/+/bN7/H6f/n6D/1//r//X/bNTc+v/c/Q+KWzrZ/wAAANCD3P0PjlvsfwAAAGhG7v6HxC32PwAAADQjd/9D45ZO9r/+X/+v/19K/3/C+/+Hfj/6f/3/Ovr/cfr/Cfp//b/+X//PRs2t/8/d/7C4pZP9DwAAAD3I3f/wuMX+BwAAgGbk7n9E3GL/AwAAQDNy9z8ybulk/+v/9f/6/6X0/8f0/r/+X/+/cNcPZ/6ZoP9fpf+fMNH/D4P+f8x59/Prf3vL+fznoP/X/7Nqbv1/7v5HxS13H4YTF/ubBAAAAGYld/+j45ZO/vwfAAAAepC7/5q4xf4HAACAZuTuPxW3dLL/9f/6f/2//l//v/7r6/+Xyfv/447e/9/5jve5d7/9v/f/x3n/f9P9/23fGfp/lm1u/X/u/mvjlk72PwAAAPQgd/9j4hb7HwAAAJqRu/+xcYv9DwAAAM3I3f+4uKWT/a//b63/v/2BX3dW/79fu+j/9f/6f/1/6/T/47z/P2H/H3O79UP9v/7f+//6f45mbv1/7v7Hxy2d7H8AAADoQe7+J8Qt9j8AAAA0I3f/E+MW+x8AAACakbv/SXFLJ/tf/99a/3/w13n/X/+/7uvr//X/LdP/j9P/T2jl/f+L/K7Zdj9/VNv+/Pp//T+r5tb/5+5/ctzSyf4HAACAHuTuf0rcYv8DAABAM3L3PzVusf8BAACgGbn7nxa3dLL/9f/6/2X0//kV5tT/7+3tHfoe0v+ftvT+P+n/l0n/P07/P6GV/v8ibbufX/rn1//r/1k1t/4/d//T45ZO9j8AAAD0IHf/M+IW+x8AAACakbv/mXGL/Q8AAADNyN3/rLilk/2v/9f/L6P/9/6//t/7//r/86P/H6f/n6D/1//r//X/bNTc+v/c/dfFLZ3sfwAAAOhB7v5nxy32PwAAADQjd/9z4hb7HwAAAJqRu/+5cUsn+1//r//X/+v/9f/rv77+f5n0/+P0/xM67/+HU/p//b/+n82aUf9/1q/aGZ4Xt3Sy/wEAAKAHufufH7fY/wAAANCM3P0viFvsfwAAAGhG7v4Xxi2d7H/9/2z6//2cr63+f3cYBv3/0Gn/v3vW38/6vtT/6/+Pgf5/nP5/Quf9/7b7+aV/fv2//p/Dds75v9nW+/+5+190+PN1sv8BAACgB7n7Xxy32P8AAADQjNz9L4lb7H8AAABoRu7+l8Ytnex//f9s+v99bfX/3v8//P3RU//v/f9V+v/jof8fp/+foP/X/+v/9f9s1FU3nf6/Zw/bVv+fu/9lcdOJKy76twgAAADMTO7+l8ctnfz5PwAAAPQgd/8r4hb7HwAAABbqupWfyd3/yrilk/2v/99s/3/irJ/T/+v/D39/6P/1//r/S0//P07/P0H/r//X/+v/2ai59f+5+18Vt3Sy/wEAAKAHufuvj1vsfwAAAGhG7v5Xxy32PwAAADQjd/9r4pZO9r/+3/v/+n/9/1T/f+Y5VP2//n/+9P/j9P8T9P/6/5HPf/i/nw7bQP9/8sz/qP+nDRfQ/+/t7V1zyfv/3P2vjVs62f8AAADQg9z9r4tb7H8AAABoRu7+18ct9j8AAAA047bdvzsMwxv2f9Tf/tf/d9r/57f6svr/U8Og//f+v/5f/z9O/z9O/z9B/6//9/6//p+Nmtv7/7n73xi3dLL/AQAAoAe5+98Ut9j/AAAA0Izc/W+OW+x/AAAAaEbu/rfELZ3sf/1/p/2/9//1//r/4+7/bx30/8diEf3/7rm//tz7/2v1//r/Ed31//e424Ef6v/1/6yaW/+fu/+tcUsn+x8AAAB6kLv/bXGL/Q8AAADNyN3/9rjF/gcAAIBm5O5/R9x0eSf7X/+v/9f/6//1/+u//jG//39iGAb9/wYsov8fMff+fzPv/x/+T/kZ+n/9/5I/v/5f/8+qufX/ufvfGbd0sv8BAACgB7n73xW32P8AAADQjNz9745b7H8AAABoRu7+98Qtnex//b/+X/+v/2++/792Ef2/9/83RP8/bh79/7np//X/S/78+n/9P+dvW/1/7v73xi2d7H8AAADoQe7+98Ut9j8AAAA0I3f/++MW+x8AAACakbv/A3FLJ/tf/6//v5D+Pz+n/r+t/v/ksfT/p4bhvPv/nQP/ep28/6//3xD9/7jz6f/3v7f1//p//X+v/f91+n82aW7v/+fuvyFu6WT/AwAAQA9y938wbv2/bu1/AAAAaEbu/g/FLfY/AAAANCN3/4fjlk72v/5f/+/9f/1/8+//6/+7ov8f5/3/Cfp//b/+3/v/bNTc+v/c/R+JWzrZ/wAAANCD3P0fjVvsfwAAAGhG7v6PxS32PwAAADQjd/+NcUsn+1//r//X/+v/9f+n/x7q/9ug/x93PP3/rv5f/1/9/O3iPwX6f/3/1K+nTXPr/3P3fzxu6WT/AwAAQA9y938ibrH/AQAAoBm5+z8Zt9j/AAAAsEiXr/m53P2fils62f/6f/2//l//r/9f//X1/8u0lf4/vyn0/97/D/30/3c68KOlvf9/+L+/9P/6fzZvbv1/7v5Pxy2d7H8AAADoQe7+z8Qt9j8AAAA0I3f/Z+MW+x8AAACakbv/c3FLJ/tf/6//1//r//X/67++/n+ZvP8/Tv8/Qf+/1ffzl/759f/6f1bNrf/P3f/5uKWT/Q8AAAA9yN3/hbjF/gcAAIBm5O7/Ytxi/wMAAEAz9nd/xmUd7n/9v/5f/6//1/+v//r6/2XS/4/T/0/Q/+v/9f/6fzZqbv3/l/Z/1c7w5bilk/0PAAAAPcjd/5W4xf4HAACAZuTu/2rcYv8DAABAM3L3fy1u6WT/6//1/8vo//f29q7R/+v/D/5+zvT/N+v/Kfr/cfr/Cfp//b/+X//PRs2t/8/d//W4pZP9DwAAAD3I3f+NuMX+BwAAgGbk7v9m3GL/AwAAQDNy938rbulk/+v/Z9D/7+j/vf+v/x+8/7/a/192+h/K+v8Lo/8fp/+f0GL/v3P+v/1t9/NHdck+/47+X//PxZpb/5+7/9txSyf7HwAAAHqQu/87cYv9DwAAAM3I3f/duMX+BwAAgGbk7v9e3NLJ/tf/H1//f9u/d728/787rP/8+n/9v/7f+/+Xmv5/nP5/Qov9/wXQ/3v/X//Pps2t/8/d//245eDwu+LCfpcAAADAnOTu/0Hc0smf/wMAAEAPcvf/MG6x/wEAAKAZuft/FLd0sv/1/zN4/7/B/t/7/+u/P/T/s+7/L9P/t+EC+/sbDv+E/j/o//X/+n/9/5H6//xu1v/3bm79f+7+H8ctnex/AAAA6EHu/p/ELfY/AAAANCN3/01xi/0PAAAAzcjdf3Pcctb+X9d2t0L/r//X/+v/9f/rv77+f5m8/z/ufPv/k8PR+v/Uff+/s/Kvr/+/hLb9+fX/3v9n1dz6/9z9P41b/Pk/AAAALM4V5/j53P0/i1vsfwAAAGhG7v6fxy32PwAAADQjd/8v4pZbLtvWRzpW+n/9v/5f/6//X//19f/LpP8f5/3/Cd7/30Q/f6X+v43+fxj0/xzd3Pr/3P2/jFv8+T8AAAA0I3f/r+IW+x8AAACakbv/13GL/Q8AAADNyN3/m7ilk/2v/9f/H7H/308z9f+n6f9P0/+vp/8/Hvr/cfr/Cfp/7//r/73/z0bNrf/P3f/buKWT/Q8AAAA9yN3/u7jF/gcAAIBm5O7/fdxi/wMAAEAzcvf/IW7pZP9vrf+Pf6v1/4vv/73/r//X/+v/Z0X/P67R/n93GAb9/wZsu59f+ufX/+v/WTW3/j93/x/jlk72PwAAAPQgd/+f4hb7HwAAAJqRu//PcYv9DwAAAM3I3f+XuKWT/e/9f/2//l//r/9f//X1/8uk/x/XaP9/5Pf/62+U/l//r//X/7NRc+v/c/f/NW7pZP8DAABAD3L3/y1usf8BAACgGbn7b4lb7H8AAABoRu7+v8ctnex//b/+X/+v/9f/r//6+v9l0v+P22b/f887TH/ZbfX/Rf+fH0H/r//X/7MRc+v/c/f/I27pZP8DAABAD3L3/zNusf8BAACgGbn7/xW32P8AAADQjNz9/45bOtn/E/3/yfoL9f+j9P8HP7/+f/33h/5f/6//v/T0/+O8/z9B/+/9f/2//p+Nmlv/n7v/P3FLJ/sfAAAAepC7/9a4xf4HAACAZuTu/2/cYv8DAABAM3L3/y9u6WT/e/9/Sf3/lfp//b/+X/+v/5+g/x+n/5+g/9f/6//1/2zU3Pr/3P3/DwAA//+2vUye")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c1242, 0x15c)

1.436009922s ago: executing program 3 (id=1609):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000190000000000000000000000000000000000000000000000fe0700000000000000000900000000000000000000000000000000000000000000000020000000000000000000000000fcffffff00000000"]}, 0x108)

1.405436977s ago: executing program 1 (id=1610):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0xc061, 0x6, 0x668, 0x3f8, 0x1f0, 0x4c8, 0x120, 0x0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x80}}}, {{@ipv6={@mcast1, @private2, [], [], 'vlan0\x00', 'pimreg1\x00'}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev, @private2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @private1, @empty, @private1, @dev, @loopback]}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8)

1.224978307s ago: executing program 3 (id=1611):
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0)

1.162881171s ago: executing program 1 (id=1612):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffe, 0x40000, 0x0, 0xfffffffc})
open_by_handle_at(0xffffffffffffff9c, 0x0, 0x591100)

981.515338ms ago: executing program 1 (id=1613):
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000340))
setns(r0, 0x0)

950.963867ms ago: executing program 2 (id=1614):
r0 = socket(0x2, 0x2, 0x0)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x15, 0x0, 0x0)

932.677878ms ago: executing program 3 (id=1615):
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4e, 0xa2, 0x8, 0x10, 0x55d, 0x9002, 0x235e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0x84, 0xb4}}]}}]}}, 0x0)
io_setup(0xa, 0x0)

724.352785ms ago: executing program 1 (id=1616):
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9cb5, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x2, {0x1, @raw_data="4bbf622b20d2538e6e1f445b7795aa93c004bbb74ebdde873aa40cfdb8d06aefde8880cf4a22212c23b7c448cd514212f3419dcccde3ae9debb21b3ee10fdf63d3e7583e6702b0e9a49174a54c8fc2394f74d8c60dd96a7d41cebaaa10e0fe4fb36d1d8c9ff5984eea66eb54ff774e7af403c61eb7963e0bd5b1370d56b3a9efdaabcb8c2d20c39e64de366fce7e9c408b86db8a782f306a3e186d49e5f92e8a46d4ef2b353b7082844034eb36e4df5d2bf8b6635dd0f7a4d05bc0e9c33dffa2e74c75962dc70ea1"}})

640.812783ms ago: executing program 2 (id=1617):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080), 0x1}, 0x20)

529.708108ms ago: executing program 1 (id=1618):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000180)='ro\x00', 0x0, 0x0)

442.5389ms ago: executing program 2 (id=1619):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0137013710ff"})

289.161663ms ago: executing program 1 (id=1620):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800001, &(0x7f0000000100), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000780)={{0x0, 0x1, 0x100, 0x400000, 0x20004, 0x3, 0x10003, 0x3, 0xc, 0x9, 0x0, 0x8000000000000006, 0x10015, 0x49f2, 0x80}})

79.789068ms ago: executing program 2 (id=1621):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_BURST={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10}}, 0xc0}}, 0x0)

0s ago: executing program 4 (id=1622):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x14, 0xffffffffffffffff, &(0x7f0000000140)=0x4)

kernel console output (not intermixed with test programs):

s in process `syz.3.263'.
[  123.957698][ T6615] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  124.693455][ T6637] loop0: detected capacity change from 0 to 256
[  124.824130][ T6633] loop4: detected capacity change from 0 to 4096
[  125.128278][ T6633] ntfs3(loop4): ino=1f, "file2" attr_set_size
[  125.143605][ T6649] loop2: detected capacity change from 0 to 256
[  125.150807][ T6633] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  125.323330][ T6649] FAT-fs (loop2): Directory bread(block 64) failed
[  125.358037][ T6649] FAT-fs (loop2): Directory bread(block 65) failed
[  125.398373][ T6649] FAT-fs (loop2): Directory bread(block 66) failed
[  125.447894][ T6649] FAT-fs (loop2): Directory bread(block 67) failed
[  125.469868][ T6649] FAT-fs (loop2): Directory bread(block 68) failed
[  125.493453][ T6649] FAT-fs (loop2): Directory bread(block 69) failed
[  125.552071][ T6649] FAT-fs (loop2): Directory bread(block 70) failed
[  125.573225][ T6649] FAT-fs (loop2): Directory bread(block 71) failed
[  125.601091][ T6649] FAT-fs (loop2): Directory bread(block 72) failed
[  125.621930][ T6649] FAT-fs (loop2): Directory bread(block 73) failed
[  125.645095][   T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  125.646645][ T6663] loop0: detected capacity change from 0 to 512
[  125.706362][ T6663] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  125.752188][ T6663] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  125.803486][ T6663] System zones: 1-12
[  125.837152][   T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  125.849303][   T43] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  125.859696][   T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  125.869334][ T6663] EXT4-fs (loop0): orphan cleanup on readonly fs
[  125.869849][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.927443][ T6663] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.282: invalid indirect mapped block 12 (level 1)
[  125.959132][ T6663] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.282: invalid indirect mapped block 2 (level 2)
[  125.977491][ T6656] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  126.029578][   T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  126.062441][ T6663] EXT4-fs (loop0): 1 truncate cleaned up
[  126.123302][ T6663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  126.191175][ T6674] netlink: 'syz.3.288': attribute type 15 has an invalid length.
[  126.264285][ T6674] netlink: 666 bytes leftover after parsing attributes in process `syz.3.288'.
[  126.332624][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  126.398719][    T9] usb 2-1: USB disconnect, device number 2
[  126.569423][ T6685] loop4: detected capacity change from 0 to 256
[  126.629910][ T6685] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  126.752076][ T6688] loop2: detected capacity change from 0 to 8
[  126.783281][ T6688] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  126.794845][ T6690] netlink: 'syz.3.296': attribute type 2 has an invalid length.
[  126.842793][ T6688] cramfs: Error -3 while decompressing!
[  126.853049][ T6688] cramfs: ffffffff99bcbba8(18)->ffff888070972000(4096)
[  126.860517][ T6688] cramfs: Error -3 while decompressing!
[  126.878188][ T6688] cramfs: ffffffff99bcbba8(18)->ffff888070972000(4096)
[  126.890468][   T30] audit: type=1800 audit(1750146107.530:3): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.295" name="file1" dev="loop2" ino=324 res=0 errno=0
[  127.010940][ T5909] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  127.174584][ T5909] usb 5-1: Using ep0 maxpacket: 8
[  127.216275][ T5909] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  127.253986][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 34821, setting to 1024
[  127.294583][ T5909] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  127.317336][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  127.353010][ T5909] usb 5-1: New USB device found, idVendor=0582, idProduct=00f0, bcdDevice=c7.3d
[  127.372604][ T6707] loop0: detected capacity change from 0 to 2048
[  127.379233][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.397753][ T5909] usb 5-1: Product: syz
[  127.414352][ T5909] usb 5-1: Manufacturer: syz
[  127.421769][ T5909] usb 5-1: SerialNumber: syz
[  127.442410][ T5909] usb 5-1: config 0 descriptor??
[  127.458173][ T6707] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.470008][ T6685] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  127.787271][   T30] audit: type=1326 audit(1750146108.430:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  127.814221][ T5909] usb 5-1: USB disconnect, device number 3
[  127.843931][   T30] audit: type=1326 audit(1750146108.430:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  127.906968][ T6088] udevd[6088]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  127.988046][   T30] audit: type=1326 audit(1750146108.440:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  128.058796][   T30] audit: type=1326 audit(1750146108.440:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  128.233232][ T6698] loop2: detected capacity change from 0 to 32768
[  128.261728][ T6698] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.299 (6698)
[  128.319581][ T6732] veth1_to_hsr: entered allmulticast mode
[  128.333124][ T6698] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  128.356022][ T6698] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  128.388805][ T6732] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[  128.391929][ T6698] BTRFS info (device loop2): using free-space-tree
[  128.420283][ T6734] QAT: Stopping all acceleration devices.
[  129.002106][ T5847] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  129.051390][ T6770] loop3: detected capacity change from 0 to 1024
[  129.198370][   T12] hfsplus: b-tree write err: -5, ino 4
[  129.581484][ T1214] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  129.683553][ T6786] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  129.704598][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  129.755153][ T1214] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  129.764253][ T1214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.798203][ T1214] usb 5-1: Product: syz
[  129.802429][ T1214] usb 5-1: Manufacturer: syz
[  129.809005][ T1214] usb 5-1: SerialNumber: syz
[  129.838209][ T1214] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  129.864192][ T6788] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  129.871882][    T9] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  129.871916][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.871938][    T9] usb 2-1: Product: syz
[  129.871954][    T9] usb 2-1: Manufacturer: syz
[  129.871971][    T9] usb 2-1: SerialNumber: syz
[  129.891356][    T9] usb 2-1: config 0 descriptor??
[  129.970600][ T5935] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  129.972123][    T9] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 003
[  130.249811][ T6798] openvswitch: netlink: Duplicate or invalid key (type 0).
[  130.271840][ T6798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.388390][    T9]  (null): failure reading functionality
[  130.413776][    T9] i2c i2c-1: failure reading functionality
[  130.445098][ T1214] usb 5-1: USB disconnect, device number 4
[  130.492926][    T9] i2c i2c-1: connected i2c-tiny-usb device
[  130.547156][    T9] usb 2-1: USB disconnect, device number 3
[  130.656986][ T6806] loop0: detected capacity change from 0 to 1024
[  130.869967][ T6813] netlink: 'syz.0.348': attribute type 21 has an invalid length.
[  131.007892][ T5935] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  131.031476][ T5935] ath9k_htc: Failed to initialize the device
[  131.066516][ T1214] usb 5-1: ath9k_htc: USB layer deinitialized
[  131.092809][ T6813] netlink: 132 bytes leftover after parsing attributes in process `syz.0.348'.
[  131.188634][ T6819] xt_bpf: check failed: parse error
[  131.193180][ T6816] loop1: detected capacity change from 0 to 1764
[  131.360871][   T30] audit: type=1326 audit(1750146112.000:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efb18e929 code=0x7ffc0000
[  131.470965][   T30] audit: type=1326 audit(1750146112.000:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efb18e929 code=0x7ffc0000
[  131.534945][ T6828] netlink: 'syz.4.354': attribute type 4 has an invalid length.
[  131.608395][   T30] audit: type=1326 audit(1750146112.040:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4efb18e929 code=0x7ffc0000
[  131.730315][   T30] audit: type=1326 audit(1750146112.040:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efb18e929 code=0x7ffc0000
[  131.854613][   T30] audit: type=1326 audit(1750146112.040:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6822 comm="syz.2.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efb18e929 code=0x7ffc0000
[  132.085452][ T6804] loop3: detected capacity change from 0 to 32768
[  132.181471][ T6804] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  132.234674][ T6804] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  132.388438][ T6804] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  132.706274][ T6804] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  132.774367][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  132.789825][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  132.894726][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  132.971549][ T6872] loop2: detected capacity change from 0 to 2048
[  133.029975][ T6872] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  133.074590][    T9] usb 2-1: Using ep0 maxpacket: 8
[  133.090205][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  133.117940][ T6872] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.157652][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[  133.221446][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  133.269587][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  133.363454][    T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  133.391694][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.419730][    T9] usb 2-1: Product: syz
[  133.434361][    T9] usb 2-1: Manufacturer: syz
[  133.449033][    T9] usb 2-1: SerialNumber: syz
[  133.462158][    T9] usb 2-1: config 0 descriptor??
[  133.543208][    T9] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5
[  133.568721][ T6886] netlink: 'syz.2.376': attribute type 21 has an invalid length.
[  133.609623][ T6886] netlink: 128 bytes leftover after parsing attributes in process `syz.2.376'.
[  133.644619][ T6886] netlink: 'syz.2.376': attribute type 5 has an invalid length.
[  133.684648][ T6886] netlink: 3 bytes leftover after parsing attributes in process `syz.2.376'.
[  133.750447][ T6865] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  133.757235][ T6865] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  133.816280][ T6865] vhci_hcd vhci_hcd.0: Device attached
[  133.835104][ T6893] loop4: detected capacity change from 0 to 64
[  133.901315][    T9] imon:send_packet: packet tx failed (-71)
[  133.902335][ T6889] vhci_hcd: connection closed
[  133.936366][ T1097] vhci_hcd: stop threads
[  133.964862][    T9] imon 2-1:0.0: panel buttons/knobs setup failed
[  133.966729][ T6897] xt_TCPMSS: Only works on TCP SYN packets
[  133.975755][ T1097] vhci_hcd: release socket
[  133.995007][ T1097] vhci_hcd: disconnect device
[  134.245670][    T9] rc_core: IR keymap rc-imon-pad not found
[  134.251672][    T9] Registered IR keymap rc-empty
[  134.285039][    T9] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  134.345105][    T9] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  134.385030][    T9] imon:send_packet: packet tx failed (-71)
[  134.414907][    T9] imon 2-1:0.0: remote input dev register failed
[  134.421679][    T9] imon 2-1:0.0: imon_init_intf0: rc device setup failed
[  134.623616][    T9] imon 2-1:0.0: unable to initialize intf0, err 0
[  134.649378][    T9] imon:imon_probe: failed to initialize context!
[  134.659043][    T9] imon 2-1:0.0: unable to register, err -19
[  134.717869][    T9] usb 2-1: USB disconnect, device number 4
[  134.760151][ T6913] loop3: detected capacity change from 0 to 1764
[  135.029386][ T6923] loop1: detected capacity change from 0 to 128
[  135.568170][ T6941] netlink: 44 bytes leftover after parsing attributes in process `syz.4.398'.
[  135.609471][ T6939] loop1: detected capacity change from 0 to 1024
[  135.746029][ T6939] syz.1.395: attempt to access beyond end of device
[  135.746029][ T6939] loop1: rw=0, sector=393308, nr_sectors = 2 limit=1024
[  135.805936][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.402'.
[  136.097438][ T6961] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  136.207606][ T6953] loop2: detected capacity change from 0 to 4096
[  136.833698][ T6981] loop4: detected capacity change from 0 to 2048
[  136.930808][ T6981] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  136.997093][ T6981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.077284][ T6981] afs: Unexpected value for 'dyn'
[  137.258617][ T6997] syz.2.426 uses obsolete (PF_INET,SOCK_PACKET)
[  137.613511][ T7012] loop0: detected capacity change from 0 to 2048
[  137.710947][ T7012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.745622][ T7012] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #12: block 9: comm syz.0.434: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0
[  137.835484][ T7018] loop3: detected capacity change from 0 to 512
[  137.857125][ T7012] EXT4-fs (loop0): Remounting filesystem read-only
[  137.887418][ T7018] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  137.948439][ T7018] EXT4-fs (loop3): orphan cleanup on readonly fs
[  137.981622][ T7018] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.435: bad orphan inode 15
[  138.071980][ T7018] ext4_test_bit(bit=14, block=18) = 1
[  138.107758][ T7018] is_bad_inode(inode)=0
[  138.127103][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.133370][ T7018] NEXT_ORPHAN(inode)=1023
[  138.142369][ T7018] max_ino=32
[  138.154632][ T7018] i_nlink=0
[  138.155238][ T7013] loop1: detected capacity change from 0 to 32768
[  138.201557][ T7018] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.435: corrupted xattr block 19: e_value size too large
[  138.252618][ T7018] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  138.258387][ T7013] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  138.290618][ T7018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  138.352178][ T7013] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  138.404913][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.477863][ T7013] ocfs2: Unmounting device (7,1) on (node local)
[  138.675895][ T7042] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.707543][ T7042] batadv_slave_0: entered promiscuous mode
[  138.713419][ T7042] batadv_slave_0: entered allmulticast mode
[  138.794670][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.447'.
[  139.376695][ T7063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  139.384256][ T7063] IPv6: NLM_F_CREATE should be set when creating new route
[  139.391676][ T7063] IPv6: NLM_F_CREATE should be set when creating new route
[  139.679985][ T7072] netlink: 'syz.3.459': attribute type 3 has an invalid length.
[  139.703024][ T7072] netlink: 'syz.3.459': attribute type 1 has an invalid length.
[  139.985688][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.463'.
[  140.135261][ T7052] loop2: detected capacity change from 0 to 32768
[  140.173675][ T7087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.466'.
[  140.467409][ T7095] loop1: detected capacity change from 0 to 8
[  140.505832][ T7095] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  140.528924][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'.
[  140.565800][ T5859] udevd[5859]: incorrect cramfs checksum on /dev/loop1
[  140.570828][ T7095] cramfs: Error -3 while decompressing!
[  140.620131][ T7095] cramfs: ffffffff99bc7bc8(26)->ffff888075dca000(4096)
[  140.658983][ T6088] udevd[6088]: incorrect cramfs checksum on /dev/loop1
[  140.666141][ T7095] cramfs: Error -3 while decompressing!
[  140.706914][ T7095] cramfs: ffffffff99bc7be2(26)->ffff888070278000(4096)
[  140.741060][ T7095] cramfs: Error -3 while decompressing!
[  140.754603][ T7095] cramfs: ffffffff99bc7bfc(16)->ffff888070279000(4096)
[  140.778306][ T7095] cramfs: Error -3 while decompressing!
[  140.815453][ T7095] cramfs: ffffffff99bc7bc8(26)->ffff888075dca000(4096)
[  141.345964][ T7122] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.483'.
[  141.409555][ T7121] loop2: detected capacity change from 0 to 2048
[  141.473399][ T7121] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  141.525292][ T7121] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.564277][ T7090] loop3: detected capacity change from 0 to 32768
[  141.884414][ T7090] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  141.884623][ T7090]   allowing incompatible features above 0.0: (unknown version)
[  141.884638][ T7090]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  141.928955][ T7090] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  141.950326][ T7090] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  141.978737][ T7090] bcachefs (loop3): Version upgrade required:
[  141.978737][ T7090] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  141.978737][ T7090] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  141.978737][ T7090]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  142.235138][ T7090] bcachefs (loop3): dropping and reconstructing all alloc info
[  142.320808][ T7090] bcachefs (loop3): accounting_read... done
[  142.332308][ T7090] bcachefs (loop3): alloc_read... done
[  142.356730][ T7090] bcachefs (loop3): snapshots_read... done
[  142.363524][ T7090] bcachefs (loop3): done starting filesystem
[  142.653111][ T5838] bcachefs (loop3): shutting down
[  142.763831][ T5838] bcachefs (loop3): shutdown complete
[  142.884918][ T7170] netlink: 56 bytes leftover after parsing attributes in process `syz.1.504'.
[  142.961746][ T7173] loop2: detected capacity change from 0 to 512
[  143.029995][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'.
[  143.115498][ T7173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.116864][   T30] audit: type=1326 audit(1750146123.740:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  143.152974][   T30] audit: type=1326 audit(1750146123.750:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  143.177354][   T30] audit: type=1326 audit(1750146123.750:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  143.200896][   T30] audit: type=1326 audit(1750146123.750:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  143.210546][ T7173] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  143.244318][   T30] audit: type=1326 audit(1750146123.750:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  143.472588][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.617684][ T7194] x_tables: duplicate entry at hook 1
[  143.654602][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  143.817079][    T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  143.834943][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.878981][    T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  143.910569][    T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  143.941305][    T9] usb 1-1: Manufacturer: syz
[  143.965609][    T9] usb 1-1: config 0 descriptor??
[  143.977971][ T7206] netlink: 9292 bytes leftover after parsing attributes in process `syz.4.521'.
[  144.098757][ T7209] loop2: detected capacity change from 0 to 128
[  144.145144][    T9] rc_core: IR keymap rc-hauppauge not found
[  144.155430][    T9] Registered IR keymap rc-empty
[  144.178640][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  144.207471][ T7209] FAT-fs (loop2): error, invalid access to FAT (entry 0x0005ffff)
[  144.223777][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8
[  144.244723][ T7209] FAT-fs (loop2): Filesystem has been set read-only
[  144.275448][    C0] igorplugusb 1-1:0.0: Error: urb status = -32
[  144.302118][    T9] usb 1-1: USB disconnect, device number 4
[  144.502466][ T7222] loop1: detected capacity change from 0 to 512
[  144.694957][ T7222] EXT4-fs (loop1): 1 orphan inode deleted
[  144.702708][ T7222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.723095][   T59] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  144.775414][   T59] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1
[  144.789104][ T7222] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.966237][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.170171][ T7241] loop0: detected capacity change from 0 to 64
[  145.221194][ T7243] loop1: detected capacity change from 0 to 512
[  145.251421][ T7241] hfs: unable to locate alternate MDB
[  145.277756][ T7241] hfs: continuing without an alternate MDB
[  145.294712][ T7243] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  145.369842][ T7243] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  145.414722][ T7243] EXT4-fs (loop1): 1 truncate cleaned up
[  145.453543][ T7243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.551215][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.730588][ T7254] loop1: detected capacity change from 0 to 164
[  145.836880][ T7254] ISOFS: unable to read i-node block
[  145.842547][ T7254] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  146.208941][ T7264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.546'.
[  146.749880][ T7245] loop2: detected capacity change from 0 to 32768
[  146.938144][ T7245] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  147.089531][ T7245] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  147.149242][ T7307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.563'.
[  147.350034][ T7311] loop0: detected capacity change from 0 to 8
[  147.438071][ T7311] SQUASHFS error: Unable to read inode 0xa7
[  147.715302][ T7317] netlink: 'syz.0.567': attribute type 10 has an invalid length.
[  147.732582][ T7316] IPv6: Can't replace route, no match found
[  147.848025][ T7317] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  147.923708][ T7285] loop4: detected capacity change from 0 to 32768
[  148.054567][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.571'.
[  148.063650][ T7323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.571'.
[  148.114820][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.571'.
[  148.125364][ T7285] ERROR: (device loop4): dtSearch: DT_GETPAGE: dtree page corrupt
[  148.125364][ T7285] 
[  148.155408][ T7323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.571'.
[  148.180981][ T7285] ERROR: (device loop4): remounting filesystem as read-only
[  148.194845][ T7323] netlink: 5 bytes leftover after parsing attributes in process `syz.0.571'.
[  148.228283][ T7285] jfs_lookup: dtSearch returned -5
[  148.941793][ T7347] loop4: detected capacity change from 0 to 512
[  149.022374][ T7347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.118743][ T7347] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.125417][ T5935] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  149.308868][ T5935] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  149.334864][ T5935] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  149.351157][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.374607][ T5935] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  149.384197][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.420786][ T7343] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  149.447439][ T5935] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  149.703371][ T7335] loop1: detected capacity change from 0 to 32768
[  149.760089][  T977] usb 4-1: USB disconnect, device number 2
[  149.771059][ T7335] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.578 (7335)
[  149.850855][ T7335] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  149.890702][ T7341] loop2: detected capacity change from 0 to 32768
[  149.905757][ T7335] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  149.941240][ T7335] BTRFS info (device loop1): disk space caching is enabled
[  149.977026][ T7335] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  150.068654][ T7345] loop0: detected capacity change from 0 to 32768
[  150.130785][ T7345] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.581 (7345)
[  150.194962][ T7345] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  150.263768][ T7345] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  150.309074][ T7345] BTRFS info (device loop0): disk space caching is enabled
[  150.331371][ T7379] syz.4.586: attempt to access beyond end of device
[  150.331371][ T7379] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0
[  150.344653][ T7379] syz.4.586: attempt to access beyond end of device
[  150.344653][ T7379] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0
[  150.357713][ T7379] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  150.373543][ T7379] syz.4.586: attempt to access beyond end of device
[  150.373543][ T7379] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0
[  150.395939][ T7345] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  150.420105][ T7335] BTRFS info (device loop1): rebuilding free space tree
[  150.422316][ T7341] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  150.450179][ T7379] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  150.473924][ T7335] BTRFS info (device loop1): disabling free space tree
[  150.483417][ T7379] syz.4.586: attempt to access beyond end of device
[  150.483417][ T7379] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0
[  150.504253][ T7335] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  150.525165][ T7379] syz.4.586: attempt to access beyond end of device
[  150.525165][ T7379] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0
[  150.540288][ T7341]   allowing incompatible features above 0.0: (unknown version)
[  150.551315][ T7335] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  150.563261][ T7341]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  150.584326][ T7379] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  150.640167][ T7379] syz.4.586: attempt to access beyond end of device
[  150.640167][ T7379] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0
[  150.668734][ T7341] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  150.678440][ T7341] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  150.687359][ T7341] bcachefs (loop2): Version upgrade required:
[  150.687359][ T7341] Version upgrade from 0.10: bkey_renumber to 1.7: mi_btree_bitmap incomplete
[  150.687359][ T7341] Doing incompatible version upgrade from 0.10: bkey_renumber to 1.28: inode_has_case_insensitive
[  150.687359][ T7341]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  150.708350][ T7335] BTRFS error (device loop1): balance: invalid convert metadata profile raid0
[  150.778203][ T7341] bcachefs (loop2): dropping and reconstructing all alloc info
[  150.788255][ T7379] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  150.811714][ T7345] BTRFS info (device loop0): rebuilding free space tree
[  150.842369][ T7341] bcachefs (loop2): accounting_read...
[  150.845473][ T7379] syz.4.586: attempt to access beyond end of device
[  150.845473][ T7379] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0
[  150.877650][ T7345] BTRFS info (device loop0): disabling free space tree
[  150.896138][ T7341]  done
[  150.898980][ T7341] bcachefs (loop2): alloc_read... done
[  150.915279][ T7345] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  150.924856][ T7341] bcachefs (loop2): snapshots_read...
[  150.927667][ T5843] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  150.949269][ T7341]  done
[  150.952105][ T7341] bcachefs (loop2): check_allocations...
[  150.955841][ T7379] syz.4.586: attempt to access beyond end of device
[  150.955841][ T7379] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0
[  150.957899][ T7345] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  150.961582][ T7379] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  151.005239][ T7379] syz.4.586: attempt to access beyond end of device
[  151.005239][ T7379] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0
[  151.096067][ T7379] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  151.134890][ T7341]  done
[  151.139188][ T7379] syz.4.586: attempt to access beyond end of device
[  151.139188][ T7379] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0
[  151.162926][ T7341] bcachefs (loop2): going read-write
[  151.169252][ T7341] bcachefs (loop2): insufficient writeable journal devices available: have 0, need 1
[  151.169252][ T7341] rw journal devs:
[  151.264627][ T7404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.291690][ T7341] bcachefs (loop2): done starting filesystem
[  151.313373][ T7379] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  151.388412][ T7379] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  151.424737][ T7379] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  151.610351][ T5839] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  151.692792][ T5847] bcachefs (loop2): shutting down
[  151.754748][ T5847] bcachefs (loop2): going read-only
[  151.760540][ T5847] bcachefs (loop2): finished waiting for writes to stop
[  151.915693][ T5847] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10
[  151.958240][ T5847] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10
[  151.990685][ T5847] bcachefs (loop2): unclean shutdown complete, journal seq 10
[  152.035937][ T5847] bcachefs (loop2): done going read-only, filesystem not clean
[  152.185163][ T5847] bcachefs (loop2): shutdown complete
[  152.742196][ T7434] binder: 7433:7434 ioctl c0306201 2000000001c0 returned -22
[  152.823135][ T7437] netlink: 164 bytes leftover after parsing attributes in process `syz.3.605'.
[  152.843057][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'.
[  152.874792][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'.
[  153.034403][ T7414] loop4: detected capacity change from 0 to 32768
[  153.071049][ T7414] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.595 (7414)
[  153.146806][ T7414] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.175047][ T7414] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  153.197323][ T7414] BTRFS info (device loop4): using free-space-tree
[  153.667673][ T5842] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  154.127436][ T7486] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  154.374083][ T7488] loop4: detected capacity change from 0 to 4096
[  154.436428][ T7488] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  154.756915][ T7501] loop0: detected capacity change from 0 to 1024
[  154.821684][ T7501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.844795][ T7501] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.089547][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.367545][ T7498] loop1: detected capacity change from 0 to 32768
[  155.444651][ T7498] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.627 (7498)
[  155.549798][ T7498] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.594649][ T7498] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  155.655922][ T7498] BTRFS info (device loop1): using free-space-tree
[  155.714985][ T7522] ip6t_srh: unknown srh match flags  FDC7
[  156.176846][ T5843] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  156.254663][ T7549] xt_TCPMSS: Only works on TCP SYN packets
[  156.798931][ T7564] netlink: 'syz.1.649': attribute type 10 has an invalid length.
[  156.813560][ T7566] loop4: detected capacity change from 0 to 128
[  156.820412][ T7564] netlink: 40 bytes leftover after parsing attributes in process `syz.1.649'.
[  156.852551][ T7566] ufs: You didn't specify the type of your ufs filesystem
[  156.852551][ T7566] 
[  156.852551][ T7566] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  156.852551][ T7566] 
[  156.852551][ T7566] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  156.901846][ T7519] loop0: detected capacity change from 0 to 32768
[  156.933956][ T7564] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  157.023656][ T7566] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  157.097258][ T7519] bio_check_eod: 2 callbacks suppressed
[  157.110732][ T7519] syz.0.636: attempt to access beyond end of device
[  157.110732][ T7519] loop0: rw=1, sector=4701696, nr_sectors = 8 limit=32768
[  157.159285][ T7519] metapage_write_end_io: I/O error
[  157.172720][ T7566] overlayfs: failed to resolve '/¸s€»¸k€»¸{€{¸g€{¸w€û¸o€û¸€x`€xp€‡xh€‡xx€Gxd€Gxt€Çxl€Çx|€'xb€xR€'xJ€§8"ÀÓ<=À3˜˜˜˜XXXXØØØØxf€gxv€çxn€çx~€xa€xq€—xi€—xy€Wxe€Wxu€×xm€×x}€7xc€7xs€·xk€·x{€w82ÀQ
ŽpL€wxW€wxO€÷x_€÷ø@€øP€øH€�øX€�øD€OøT€OøL€Ïø€ÏøB€/øR€/øJ€¯øZ€¯øF€oøV€oøN€ïø^€ïøA€øQ€øI€ŸøY€ŸøE€_øU€_86Àoü6Àïü>Àü1ÀŸü9À_ü5Àßü=À?ü3À¿ü;Àü7Àÿâ8!Žâx!Žâ!NâD!qâ'	qÒ'qò§qʧ
[  157.172720][ T7566] qê§	qÚ§qúgqÆg
[  157.172720][ T7566] qXˆ3‡8Kˆ³†8[ˆ³‡8Gˆs†8Wˆs‡8Oˆó†8_ˆó‡¸@ˆ†¸Pˆ‡¸Hˆ‹†¸Xˆ‹‡¸DˆK†HˆK…¸tˆË„¸lˆË…¸|ˆ+„¸bˆ+…¸rˆ«„¸jˆ«…¸./file0': -36
[  157.180894][ T7519] ERROR: (device loop0): release_metapage: metapage_write_one() failed
[  157.180894][ T7519] 
[  157.299491][ T7519] ERROR: (device loop0): remounting filesystem as read-only
[  157.348991][ T7519] ERROR: (device loop0): diWrite: ixpxd invalid
[  157.348991][ T7519] 
[  157.389563][ T7519] ERROR: (device loop0): txCommit: 
[  157.389563][ T7519] 
[  157.428838][ T7519] blkno = 8f7c0, nblocks = 1
[  157.465109][ T7519] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  157.465109][ T7519] 
[  157.502922][ T7519] ERROR: (device loop0): dbAllocNext: Corrupt dmap page
[  157.502922][ T7519] 
[  157.544256][ T7519] ialloc: diAlloc returned -5!
[  157.555568][ T7574] kAFS: No cell specified
[  157.641642][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'.
[  157.694855][ T7578] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  157.738177][ T5839] syz-executor: attempt to access beyond end of device
[  157.738177][ T5839] loop0: rw=1, sector=4701696, nr_sectors = 8 limit=32768
[  157.743500][ T7578] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  157.836974][ T5839] metapage_write_end_io: I/O error
[  157.922244][ T7551] loop3: detected capacity change from 0 to 32768
[  158.003424][ T7551] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  158.050326][ T7587] loop2: detected capacity change from 0 to 1024
[  158.166661][ T7551] XFS (loop3): Ending clean mount
[  158.510702][ T5838] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  159.077900][ T7621] netlink: 'syz.3.673': attribute type 1 has an invalid length.
[  159.159169][ T7626] netlink: 208 bytes leftover after parsing attributes in process `syz.4.675'.
[  159.670249][ T7604] loop2: detected capacity change from 0 to 32768
[  159.744916][ T7604] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.664 (7604)
[  159.798571][ T7604] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  159.815363][ T7604] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  159.826315][ T7604] BTRFS info (device loop2): using free-space-tree
[  159.930469][   T30] audit: type=1326 audit(1750146140.570:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  159.957962][ T7661] lo: entered promiscuous mode
[  159.976108][ T7661] netlink: 112 bytes leftover after parsing attributes in process `syz.4.688'.
[  159.987695][   T30] audit: type=1326 audit(1750146140.610:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  160.033387][   T30] audit: type=1326 audit(1750146140.610:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  160.056690][   T30] audit: type=1326 audit(1750146140.610:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  160.056962][ T7661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.079386][   T30] audit: type=1326 audit(1750146140.610:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  160.139928][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'.
[  160.295023][ T5847] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  160.999442][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'.
[  161.564077][ T7713] netlink: 'syz.0.710': attribute type 21 has an invalid length.
[  161.800626][ T7721] trusted_key: encrypted_key: insufficient parameters specified
[  161.888906][ T7723] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.134210][ T7676] loop4: detected capacity change from 0 to 40427
[  162.194616][ T7676] F2FS-fs (loop4): heap/no_heap options were deprecated
[  162.239332][ T7676] F2FS-fs (loop4): invalid crc value
[  162.267386][ T7676] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  162.460547][   T30] audit: type=1400 audit(1750146143.100:23): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=7739 comm="syz.2.723"
[  162.631451][ T7746] loop1: detected capacity change from 0 to 2048
[  162.674089][ T7676] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  162.814510][ T7746] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  162.878831][ T7746] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  163.746185][ T7775] netlink: 'syz.0.741': attribute type 2 has an invalid length.
[  163.753896][ T7775] netlink: 'syz.0.741': attribute type 2 has an invalid length.
[  164.141403][ T7758] loop2: detected capacity change from 0 to 32768
[  164.172697][ T7758] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.733 (7758)
[  164.245354][ T7758] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  164.295028][ T7758] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  164.323757][ T7758] BTRFS info (device loop2): using free-space-tree
[  164.531239][ T7808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.749'.
[  164.632848][ T7777] loop1: detected capacity change from 0 to 32768
[  164.655064][ T5847] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  164.788746][ T7817] netlink: 'syz.4.755': attribute type 1 has an invalid length.
[  165.691125][ T7837] loop4: detected capacity change from 0 to 4096
[  165.764741][ T7837] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  165.829515][ T7848] loop1: detected capacity change from 0 to 64
[  165.871251][ T7837] ntfs3(loop4): ino=19, mi_enum_attr
[  165.878331][ T7837] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  165.903306][ T7848] syz.1.768: attempt to access beyond end of device
[  165.903306][ T7848] loop1: rw=0, sector=128, nr_sectors = 2 limit=64
[  165.941469][ T7848] Trying to free block not in datazone
[  165.994597][ T7848] Trying to free block not in datazone
[  166.000245][ T7848] Trying to free block not in datazone
[  166.039974][ T7848] Trying to free block not in datazone
[  166.103912][ T7848] Trying to free block not in datazone
[  166.122417][ T7848] Trying to free block not in datazone
[  166.150964][ T7848] minix_free_block (loop1:6): bit already cleared
[  166.297597][ T7855] openvswitch: netlink: Tunnel attr 31 out of range max 16
[  166.652759][ T7870] netlink: 'syz.4.778': attribute type 21 has an invalid length.
[  166.868444][ T7879] loop0: detected capacity change from 0 to 512
[  166.928455][ T7879] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  166.979068][ T7879] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  167.000791][ T7879] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.783: Failed to acquire dquot type 1
[  167.048887][ T7879] EXT4-fs (loop0): 1 truncate cleaned up
[  167.061852][ T7879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.078213][ T7879] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.101485][ T7879] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  167.112425][ T7879] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  167.122984][ T7879] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.783: Failed to acquire dquot type 1
[  167.153761][ T7870] netlink: 'syz.4.778': attribute type 1 has an invalid length.
[  167.161676][ T7870] netlink: 132 bytes leftover after parsing attributes in process `syz.4.778'.
[  167.262791][ T7886] loop2: detected capacity change from 0 to 4096
[  167.326787][ T7886] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  167.400266][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.721169][ T7900] No such timeout policy "syz0"
[  168.172079][ T7916] loop0: detected capacity change from 0 to 164
[  168.200135][ T7916] Unable to read rock-ridge attributes
[  168.289306][ T7916] iso9660: Corrupted directory entry in block 4 of inode 1792
[  168.385440][ T7924] netlink: 'syz.2.804': attribute type 16 has an invalid length.
[  168.489544][ T7926] loop1: detected capacity change from 0 to 1024
[  168.638135][ T7926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.669578][ T7936] netlink: 'syz.2.809': attribute type 18 has an invalid length.
[  168.688876][ T7926] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.867137][ T7942] xt_TPROXY: Can be used only with -p tcp or -p udp
[  168.947781][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.970336][ T7946] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  169.372267][ T7959] netlink: 'syz.1.821': attribute type 3 has an invalid length.
[  169.598728][ T7968] loop3: detected capacity change from 0 to 256
[  169.697879][ T7968] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  170.473065][ T7993] loop4: detected capacity change from 0 to 4096
[  170.504562][ T7993] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  170.587565][ T7993] ntfs3(loop4): ino=19, mi_enum_attr
[  170.601372][ T7993] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  171.079622][ T8022] loop2: detected capacity change from 0 to 2048
[  171.129243][ T8022] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.165387][ T5963] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  171.221237][ T8028] loop4: detected capacity change from 0 to 512
[  171.269458][ T8028] EXT4-fs (loop4): orphan cleanup on readonly fs
[  171.300829][ T8028] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.854: casefold flag without casefold feature
[  171.324751][  T977] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  171.345507][ T5963] usb 2-1: too many configurations: 89, using maximum allowed: 8
[  171.368869][ T8028] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.854: couldn't read orphan inode 15 (err -117)
[  171.424561][ T5963] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  171.448154][ T8028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  171.460905][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.473700][ T5963] usb 2-1: Product: syz
[  171.478734][ T5963] usb 2-1: Manufacturer: syz
[  171.483546][ T5963] usb 2-1: SerialNumber: syz
[  171.511803][ T5963] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  171.524541][  T977] usb 4-1: Using ep0 maxpacket: 16
[  171.541198][ T5909] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  171.557307][  T977] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  171.583185][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.627569][  T977] usb 4-1: Product: syz
[  171.631861][  T977] usb 4-1: Manufacturer: syz
[  171.647257][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.661062][  T977] usb 4-1: SerialNumber: syz
[  171.694917][  T977] r8152-cfgselector 4-1: Unknown version 0x0000
[  171.703317][  T977] r8152-cfgselector 4-1: config 0 descriptor??
[  172.083135][ T5935] usb 2-1: USB disconnect, device number 5
[  172.183065][ T8046] loop0: detected capacity change from 0 to 256
[  172.245122][ T1214] r8152-cfgselector 4-1: USB disconnect, device number 3
[  172.307006][ T8046] FAT-fs (loop0): Directory bread(block 64) failed
[  172.325674][ T8046] FAT-fs (loop0): Directory bread(block 65) failed
[  172.332356][ T8046] FAT-fs (loop0): Directory bread(block 66) failed
[  172.357475][ T8046] FAT-fs (loop0): Directory bread(block 67) failed
[  172.364170][ T8046] FAT-fs (loop0): Directory bread(block 68) failed
[  172.396642][ T8046] FAT-fs (loop0): Directory bread(block 69) failed
[  172.437760][ T8046] FAT-fs (loop0): Directory bread(block 70) failed
[  172.444364][ T8046] FAT-fs (loop0): Directory bread(block 71) failed
[  172.481391][ T8046] FAT-fs (loop0): Directory bread(block 72) failed
[  172.505794][ T8046] FAT-fs (loop0): Directory bread(block 73) failed
[  172.606288][ T5909] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  172.613412][ T5909] ath9k_htc: Failed to initialize the device
[  172.654808][ T5935] usb 2-1: ath9k_htc: USB layer deinitialized
[  172.873900][ T8064] loop0: detected capacity change from 0 to 1024
[  172.998473][ T8067] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[  173.014868][ T8064] hfsplus: keylen 65060 too large
[  173.021653][ T8064] hfsplus: xattr searching failed
[  173.346186][ T5909] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  173.415854][ T8078] loop4: detected capacity change from 0 to 4096
[  173.467446][   T30] audit: type=1326 audit(1750146154.110:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.0.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  173.505175][ T8078] NILFS (loop4): invalid segment: Checksum error in segment payload
[  173.513548][ T8078] NILFS (loop4): trying rollback from an earlier position
[  173.538923][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0
[  173.547370][   T30] audit: type=1326 audit(1750146154.110:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.0.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  173.547411][ T5909] usb 2-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8
[  173.662653][   T30] audit: type=1326 audit(1750146154.120:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.0.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  173.684817][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.701335][ T5909] usb 2-1: config 0 descriptor??
[  173.709510][ T8078] NILFS (loop4): recovery complete
[  173.722819][ T5909] snd_usb_toneport 2-1:0.0: Line 6 POD Studio UX1 found
[  173.758991][   T30] audit: type=1326 audit(1750146154.120:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.0.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  173.764712][ T8091] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  173.781550][   T30] audit: type=1326 audit(1750146154.120:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.0.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  173.924835][ T5909] snd_usb_toneport 2-1:0.0: cannot get proper max packet size
[  173.932641][ T5909] snd_usb_toneport 2-1:0.0: Line 6 POD Studio UX1 now disconnected
[  173.977502][ T5909] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  173.998597][ T8093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.884'.
[  174.209822][ T5909] usb 2-1: USB disconnect, device number 6
[  174.266462][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'.
[  174.697905][ T8113] loop4: detected capacity change from 0 to 2048
[  174.800636][ T8115] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.859482][ T8090] loop3: detected capacity change from 0 to 32768
[  174.916271][ T8114] ALSA: mixer_oss: invalid OSS volume ''
[  174.921976][ T8114] ALSA: mixer_oss: invalid OSS volume 'Ü?ü×Ó%‰$ U¥!¾ÿ=À,>Qw¦½e~«v×ù'
[  174.939477][ T8113] CPU: 0 UID: 0 PID: 8113 Comm: syz.4.892 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  174.939507][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  174.939528][ T8113] Call Trace:
[  174.939541][ T8113]  <TASK>
[  174.939561][ T8113]  dump_stack_lvl+0x189/0x250
[  174.939608][ T8113]  ? rcu_is_watching+0x15/0xb0
[  174.939644][ T8113]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.939675][ T8113]  ? kmem_cache_alloc_noprof+0x21a/0x3c0
[  174.939715][ T8113]  ? __asan_memset+0x22/0x50
[  174.939746][ T8113]  ? nilfs_btree_alloc_path+0x5e5/0x610
[  174.939784][ T8113]  nilfs_btree_last_key+0x491/0x620
[  174.939820][ T8113]  nilfs_bmap_last_key+0x7a/0x130
[  174.939845][ T8113]  nilfs_truncate_bmap+0xfe/0x340
[  174.939870][ T8113]  ? __pfx_nilfs_truncate_bmap+0x10/0x10
[  174.939897][ T8113]  ? nilfs_transaction_begin+0x52a/0x710
[  174.939923][ T8113]  ? __pfx_nilfs_get_block+0x10/0x10
[  174.939959][ T8113]  nilfs_truncate+0x279/0x4e0
[  174.940000][ T8113]  ? __pfx_nilfs_truncate+0x10/0x10
[  174.940043][ T8113]  ? truncate_setsize+0xcf/0xf0
[  174.940079][ T8113]  nilfs_setattr+0x206/0x2b0
[  174.940104][ T8113]  ? __pfx_nilfs_setattr+0x10/0x10
[  174.940145][ T8113]  ? try_break_deleg+0x79/0x130
[  174.940176][ T8113]  ? __pfx_nilfs_setattr+0x10/0x10
[  174.940200][ T8113]  notify_change+0xb33/0xe40
[  174.940246][ T8113]  do_truncate+0x1a4/0x220
[  174.940270][ T8113]  ? __pfx_do_truncate+0x10/0x10
[  174.940287][ T8113]  ? apparmor_file_truncate+0x23e/0x2d0
[  174.940337][ T8113]  path_openat+0x306c/0x3830
[  174.940368][ T8113]  ? arch_stack_walk+0xfc/0x150
[  174.940430][ T8113]  ? __pfx_path_openat+0x10/0x10
[  174.940458][ T8113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.940505][ T8113]  do_filp_open+0x1fa/0x410
[  174.940534][ T8113]  ? __lock_acquire+0xab9/0xd20
[  174.940567][ T8113]  ? __pfx_do_filp_open+0x10/0x10
[  174.940627][ T8113]  ? _raw_spin_unlock+0x28/0x50
[  174.940649][ T8113]  ? alloc_fd+0x64c/0x6c0
[  174.940685][ T8113]  do_sys_openat2+0x121/0x1c0
[  174.940714][ T8113]  ? __se_sys_futex+0x36f/0x400
[  174.940739][ T8113]  ? __pfx_do_sys_openat2+0x10/0x10
[  174.940774][ T8113]  ? rcu_is_watching+0x15/0xb0
[  174.940813][ T8113]  __x64_sys_creat+0x8f/0xc0
[  174.940846][ T8113]  do_syscall_64+0xfa/0x3b0
[  174.940873][ T8113]  ? lockdep_hardirqs_on+0x9c/0x150
[  174.940899][ T8113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.940919][ T8113]  ? clear_bhb_loop+0x60/0xb0
[  174.940945][ T8113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.940964][ T8113] RIP: 0033:0x7f89b798e929
[  174.940994][ T8113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.941016][ T8113] RSP: 002b:00007f89b8798038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  174.941039][ T8113] RAX: ffffffffffffffda RBX: 00007f89b7bb5fa0 RCX: 00007f89b798e929
[  174.941054][ T8113] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000100
[  174.941067][ T8113] RBP: 00007f89b7a10b39 R08: 0000000000000000 R09: 0000000000000000
[  174.941080][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.941091][ T8113] R13: 0000000000000000 R14: 00007f89b7bb5fa0 R15: 00007ffe5f8ba8e8
[  174.941134][ T8113]  </TASK>
[  174.941144][ T8113] NILFS (loop4): btree level mismatch (ino=16): 1 != 7
[  175.110566][ T8114] ALSA: mixer_oss: invalid OSS volume '¹…~X›;èÐo«
Ö…­ŸãB@§%hq¤az8'
[  175.110618][ T8114] ALSA: mixer_oss: invalid OSS volume 'B”ñ7ëD`^ÑV›®()(zÍP«ä÷|‘—? l'
[  175.243556][ T8090] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  175.243556][ T8090] 
[  175.248168][ T8113] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16)
[  175.346051][ T8114] ALSA: mixer_oss: invalid OSS volume 'Ò0»'r'
[  175.352276][ T8114] ALSA: mixer_oss: invalid OSS volume '½ºÏÇ_µÑ}\ÜCbÒs°RDp’=OpŽ™‘ûSZà”ü'
[  175.361188][ T8114] ALSA: mixer_oss: invalid OSS volume '£Ùm5‹àõ"Ú›g+çòæ½y'
[  175.368723][ T8114] ALSA: mixer_oss: invalid OSS volume 'VÀÇt[´\hA2O:õÁ‹³L±âí'
[  175.387669][ T8113] Remounting filesystem read-only
[  175.410220][ T8113] NILFS (loop4): error -5 truncating bmap (ino=16)
[  175.420882][ T8114] ALSA: mixer_oss: invalid OSS volume '…@¢íÈ•ûN+ºû­¸©á™%.§ås_ö¶Ê'
[  175.434566][ T8114] ALSA: mixer_oss: invalid OSS volume '&õ'
[  175.464613][ T8114] ALSA: mixer_oss: invalid OSS volume '
­EºIŽ²]a¸Çg³LKèŸRmrð¥ÝN{ûšk'
[  175.518272][ T1110] read_mapping_page failed!
[  175.522967][ T1110] ERROR: (device loop3): txCommit: 
[  175.522967][ T1110] 
[  175.534617][ T8114] ALSA: mixer_oss: invalid OSS volume 'àH}+S<1›œüˆ“�b|Ÿá&èznF%Ÿþíì
E'
[  175.554706][ T1110] jfs_write_inode: jfs_commit_inode failed!
[  175.563698][ T8114] ALSA: mixer_oss: invalid OSS volume '±Îßûl2/>ŠX‚‰¾«?Ë'
[  175.593291][ T5842] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  175.608615][ T8114] ALSA: mixer_oss: invalid OSS volume '1gE'
[  176.191868][ T8147] loop2: detected capacity change from 0 to 512
[  176.205763][ T8147] EXT4-fs: Ignoring removed mblk_io_submit option
[  176.237744][ T8147] EXT4-fs: Ignoring removed nomblk_io_submit option
[  176.265935][ T8147] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  176.343408][ T8147] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  176.468468][ T8147] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.910: Allocating blocks 41-42 which overlap fs metadata
[  176.570753][ T8147] Quota error (device loop2): write_blk: dquota write failed
[  176.584810][ T8147] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  176.634809][ T8147] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.910: Allocating blocks 41-42 which overlap fs metadata
[  176.727696][ T8147] Quota error (device loop2): write_blk: dquota write failed
[  176.754768][ T8147] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  176.794652][ T8147] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.910: Failed to acquire dquot type 1
[  176.833575][ T8147] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  176.870071][ T8147] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #12: comm syz.2.910: corrupted inode contents
[  176.890511][ T8147] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #12: comm syz.2.910: mark_inode_dirty error
[  176.925270][ T8147] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #12: comm syz.2.910: corrupted inode contents
[  176.993644][ T8147] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.910: mark_inode_dirty error
[  177.021873][ T8149] loop4: detected capacity change from 0 to 32768
[  177.056917][ T8147] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #12: comm syz.2.910: corrupted inode contents
[  177.070282][ T8172] loop1: detected capacity change from 0 to 1024
[  177.091558][ T8147] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  177.100677][ T8147] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #12: comm syz.2.910: corrupted inode contents
[  177.126609][ T8149] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  177.145091][ T8147] EXT4-fs error (device loop2): ext4_truncate:4597: inode #12: comm syz.2.910: mark_inode_dirty error
[  177.248592][ T8147] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  177.302227][ T8147] EXT4-fs (loop2): 1 truncate cleaned up
[  177.332898][ T8147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.365839][ T8149] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  177.518531][ T8147] Quota error (device loop2): write_blk: dquota write failed
[  177.615206][ T8147] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.910: Failed to acquire dquot type 1
[  177.742985][ T5842] ocfs2: Unmounting device (7,4) on (node local)
[  177.780668][ T8191] loop3: detected capacity change from 0 to 256
[  177.853429][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.863659][ T8191] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001)
[  177.919628][ T8193] loop0: detected capacity change from 0 to 1764
[  178.686041][ T8211] veth3: entered promiscuous mode
[  178.697087][ T8211] veth3: entered allmulticast mode
[  178.834605][  T977] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  178.850268][ T8224] loop2: detected capacity change from 0 to 512
[  178.898733][ T8224] EXT4-fs: Ignoring removed mblk_io_submit option
[  178.980038][ T8224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.994693][  T977] usb 5-1: Using ep0 maxpacket: 8
[  179.009515][  T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.020117][ T8224] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.030832][  T977] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  179.043712][  T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  179.055294][  T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  179.068689][  T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  179.081495][  T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  179.095659][  T977] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  179.112666][  T977] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  179.124774][  T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.140980][ T8224] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.946: corrupted xattr block 33: overlapping e_value 
[  179.156017][  T977] usb 5-1: Product: syz
[  179.160249][  T977] usb 5-1: Manufacturer: syz
[  179.165509][  T977] usb 5-1: SerialNumber: syz
[  179.216882][  T977] usb 5-1: config 0 descriptor??
[  179.267837][ T8214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  179.296665][  T977] ati_remote 5-1:0.0: Initializing ati_remote hardware failed.
[  179.314073][  T977] ati_remote 5-1:0.0: probe with driver ati_remote failed with error -5
[  179.421177][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.486689][ T8242] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  179.507262][  T977] usb 5-1: USB disconnect, device number 5
[  179.761107][ T8250] loop0: detected capacity change from 0 to 1024
[  179.769355][ T8250] EXT4-fs: Ignoring removed nobh option
[  179.794298][ T8250] EXT4-fs: Ignoring removed bh option
[  179.885988][ T8250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.989316][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.047794][ T8260] loop1: detected capacity change from 0 to 64
[  180.079588][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'.
[  180.117575][ T8259] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  180.142573][ T8262] netlink: 96 bytes leftover after parsing attributes in process `syz.3.964'.
[  180.151799][ T8259] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.903024][ T8292] netlink: 'syz.2.978': attribute type 3 has an invalid length.
[  181.161884][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.984'.
[  181.454529][ T5935] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  181.494592][ T8316] netlink: 96 bytes leftover after parsing attributes in process `syz.1.990'.
[  181.619000][ T8322] xt_TCPMSS: Only works on TCP SYN packets
[  181.637654][ T5935] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  181.680302][ T5935] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.732019][ T5935] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  181.751999][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.826470][ T5935] hub 5-1:4.0: USB hub found
[  181.924548][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  182.016010][ T8334] loop0: detected capacity change from 0 to 256
[  182.052576][ T5935] hub 5-1:4.0: 21 ports detected
[  182.066640][ T5935] usb 5-1: selecting invalid altsetting 1
[  182.089230][ T8334] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[  182.103474][ T5935] hub 5-1:4.0: Using single TT (err -22)
[  182.109452][ T8334] FAT-fs (loop0): Filesystem has been set read-only
[  182.124665][    T9] usb 2-1: Using ep0 maxpacket: 16
[  182.135399][ T5935] hub 5-1:4.0: insufficient power available to use all downstream ports
[  182.147088][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  182.195426][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.245254][    T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  182.267687][ T5935] hub 5-1:4.0: hub_hub_status failed (err = -71)
[  182.295430][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  182.304384][ T5935] hub 5-1:4.0: config failed, can't get hub status (err -71)
[  182.328340][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.349199][    T9] usb 2-1: Product: syz
[  182.364507][    T9] usb 2-1: Manufacturer: syz
[  182.369265][ T5935] usb 5-1: USB disconnect, device number 6
[  182.375040][    T9] usb 2-1: SerialNumber: syz
[  182.607609][    T9] usb 2-1: USB disconnect, device number 7
[  182.754254][ T8326] loop2: detected capacity change from 0 to 40427
[  182.785646][ T8326] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (32769, 24)
[  182.800957][ T8326] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  182.813424][ T8326] F2FS-fs (loop2): Image doesn't support compression
[  182.824176][ T8326] F2FS-fs (loop2): build fault injection rate: 690
[  182.869982][ T8326] F2FS-fs (loop2): heap/no_heap options were deprecated
[  182.893864][ T8326] F2FS-fs (loop2): build fault injection type: 0x7
[  182.944523][ T8326] F2FS-fs (loop2): invalid crc value
[  183.244326][ T8326] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  183.280275][ T8326] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  183.611301][ T8373] xt_hashlimit: max too large, truncated to 1048576
[  183.640355][ T8373] Cannot find set identified by id 0 to match
[  183.809655][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1019'.
[  183.824644][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1019'.
[  183.857991][ T8380] loop4: detected capacity change from 0 to 64
[  183.859251][ T8378] loop1: detected capacity change from 0 to 512
[  183.974174][ T8378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.085083][ T8378] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  184.278462][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.298850][ T8366] loop0: detected capacity change from 0 to 32768
[  184.374728][ T8388] loop3: detected capacity change from 0 to 64
[  184.399174][ T8366] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  184.448092][ T8388] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  184.734407][ T5839] ocfs2: Unmounting device (7,0) on (node local)
[  185.364799][ T8420] netlink: 'syz.4.1038': attribute type 11 has an invalid length.
[  185.423025][ T8422] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1028'.
[  186.133339][ T8457] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1055'.
[  186.204628][   T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  186.386872][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  186.406727][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  186.424551][   T24] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  186.447840][  T977] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  186.448771][   T24] usb 1-1: config 1 interface 0 has no altsetting 1
[  186.501816][   T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  186.513696][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.532535][   T24] usb 1-1: Product: syz
[  186.542666][   T24] usb 1-1: Manufacturer: syz
[  186.554545][   T24] usb 1-1: SerialNumber: syz
[  186.582837][   T24] smsusb:smsusb_probe: board id=8, interface number 0
[  186.658620][  T977] usb 2-1: unable to get BOS descriptor or descriptor too short
[  186.695176][  T977] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  186.704279][  T977] usb 2-1: config 1 has no interface number 1
[  186.738739][  T977] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  186.793191][   T24] smsusb:smsusb_probe: Device initialized with return code -19
[  186.794256][  T977] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  186.850829][  T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.887690][  T977] usb 2-1: Product: syz
[  186.891932][  T977] usb 2-1: Manufacturer: syz
[  186.917948][  T977] usb 2-1: SerialNumber: syz
[  187.008020][ T8485] netlink: 'syz.3.1066': attribute type 11 has an invalid length.
[  187.027695][   T24] usb 1-1: USB disconnect, device number 5
[  187.063814][ T8485] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1066'.
[  187.110594][ T8489] CIFS: VFS: Malformed UNC in devname
[  187.209908][  T977] usb 2-1: found format II with max.bitrate = 26774, frame size=2
[  187.235856][  T977] usb 2-1: found format II with max.bitrate = 26774, frame size=2
[  187.307012][  T977] usb 2-1: failed to enable PITCH for EP 0x82
[  187.447191][  T977] usb 2-1: USB disconnect, device number 8
[  187.531172][ T6087] udevd[6087]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  188.094554][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  188.094574][   T30] audit: type=1326 audit(1750146168.730:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  188.189504][   T30] audit: type=1326 audit(1750146168.750:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  188.211758][    C1] vkms_vblank_simulate: vblank timer overrun
[  188.318349][   T30] audit: type=1326 audit(1750146168.750:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  188.398638][ T8529] loop0: detected capacity change from 0 to 736
[  188.436928][   T30] audit: type=1326 audit(1750146168.750:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.0.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  188.459227][    C1] vkms_vblank_simulate: vblank timer overrun
[  188.655184][ T8529] rock: directory entry would overflow storage
[  188.680982][ T8529] rock: sig=0x3b10, size=4, remaining=3
[  189.221379][ T8512] loop2: detected capacity change from 0 to 32768
[  189.255359][ T8555] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  189.281541][ T8555] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  189.317932][ T8512] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1076 (8512)
[  189.461156][ T8512] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  189.487780][ T8512] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  189.515655][ T8512] BTRFS info (device loop2): using free-space-tree
[  189.635705][ T1214] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  189.707710][ T8583] netlink: 'syz.1.1099': attribute type 7 has an invalid length.
[  189.817234][ T1214] usb 1-1: Using ep0 maxpacket: 16
[  189.835033][ T8583] : entered promiscuous mode
[  189.875618][ T1214] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  189.884145][ T1214] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.927329][ T1214] usb 1-1: config 0 has no interface number 0
[  189.936916][ T1214] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  189.952960][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.003350][ T1214] usb 1-1: Product: syz
[  190.017230][ T1214] usb 1-1: Manufacturer: syz
[  190.021892][ T1214] usb 1-1: SerialNumber: syz
[  190.046592][ T5847] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  190.088670][ T8594] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1101'.
[  190.108282][ T1214] usb 1-1: config 0 descriptor??
[  190.175495][ T1214] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[  190.181928][ T1214] usb 1-1: No valid video chain found.
[  190.365483][ T1214] usb 1-1: USB disconnect, device number 6
[  191.138729][ T8625] SET target dimension over the limit!
[  191.337205][ T8631] loop4: detected capacity change from 0 to 8
[  191.369881][ T8631] SQUASHFS error: lzo decompression failed, data probably corrupt
[  191.392345][ T8631] SQUASHFS error: Failed to read block 0x91: -5
[  191.420434][ T8631] SQUASHFS error: Unable to read metadata cache entry [8f]
[  191.436023][ T8631] SQUASHFS error: Unable to read inode 0x11f
[  191.621922][ T8636] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1114'.
[  191.753728][  T977] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  191.935969][  T977] usb 5-1: Using ep0 maxpacket: 16
[  191.951455][  T977] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  191.984839][  T977] usb 5-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config
[  192.020538][  T977] usb 5-1: config 0 has no interface number 0
[  192.030300][  T977] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  192.043965][  T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.064593][  T977] usb 5-1: Product: syz
[  192.068826][  T977] usb 5-1: Manufacturer: syz
[  192.084650][  T977] usb 5-1: SerialNumber: syz
[  192.103111][  T977] usb 5-1: config 0 descriptor??
[  192.132302][  T977] usb 5-1: Found UVC 0.00 device syz (046c:14e8)
[  192.161255][  T977] usb 5-1: No valid video chain found.
[  192.215730][ T8656] loop2: detected capacity change from 0 to 256
[  192.245810][ T8656] exfat: Deprecated parameter 'namecase'
[  192.332521][ T8656] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[  192.378641][   T24] usb 5-1: USB disconnect, device number 7
[  192.787533][ T8674] netlink: 'syz.3.1133': attribute type 3 has an invalid length.
[  192.940068][ T8680] loop0: detected capacity change from 0 to 16
[  192.993932][ T8680] erofs (device loop0): mounted with root inode @ nid 36.
[  193.325867][ T8690] xt_CT: You must specify a L4 protocol and not use inversions on it
[  193.576442][ T8698] netlink: 'syz.4.1145': attribute type 10 has an invalid length.
[  193.584358][ T8698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1145'.
[  193.667879][ T8698] dummy0: entered promiscuous mode
[  193.705048][ T8698] bridge0: port 3(dummy0) entered blocking state
[  193.729616][ T8698] bridge0: port 3(dummy0) entered disabled state
[  193.767111][ T8698] dummy0: entered allmulticast mode
[  193.787224][ T8698] bridge0: port 3(dummy0) entered blocking state
[  193.793758][ T8698] bridge0: port 3(dummy0) entered forwarding state
[  193.822557][ T8672] loop2: detected capacity change from 0 to 32768
[  194.221098][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  194.232278][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  194.677796][ T8735] loop4: detected capacity change from 0 to 2048
[  194.717615][ T8735] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  194.848469][ T8744] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.936622][ T8743] loop2: detected capacity change from 0 to 512
[  195.041647][ T8743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.058461][ T8743] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.260154][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.672514][ T8770] netlink: 'syz.3.1176': attribute type 1 has an invalid length.
[  196.193530][ T8748] loop1: detected capacity change from 0 to 32768
[  196.307722][ T8748] 
[  196.307722][ T8748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.307722][ T8748] 
[  196.461755][ T8748] read_mapping_page failed!
[  196.504683][ T8748] ERROR: (device loop1): txCommit: 
[  196.504683][ T8748] 
[  196.643680][ T1097] ERROR: (device loop1): diWrite: ixpxd invalid
[  196.643680][ T1097] 
[  196.685071][ T1097] ERROR: (device loop1): txCommit: 
[  196.685071][ T1097] 
[  196.692529][ T1097] jfs_write_inode: jfs_commit_inode failed!
[  196.704578][   T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  196.712436][ T1097] 
[  196.712436][ T1097]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.712436][ T1097] 
[  196.729045][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  196.745072][ T1097] 
[  196.745072][ T1097]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.745072][ T1097] 
[  196.774816][ T5843] 
[  196.774816][ T5843]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.774816][ T5843] 
[  196.796492][  T113] 
[  196.796492][  T113]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.796492][  T113] 
[  196.826275][ T5843] 
[  196.826275][ T5843]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.826275][ T5843] 
[  196.907786][   T43] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  196.926535][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  196.938028][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.945789][   T43] usb 5-1: config 0 descriptor??
[  196.979260][   T43] gspca_main: sunplus-2.14.0 probing 055f:c420
[  197.005324][    T9] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  197.034166][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.059803][    T9] usb 3-1: Product: syz
[  197.086094][    T9] usb 3-1: Manufacturer: syz
[  197.090766][    T9] usb 3-1: SerialNumber: syz
[  197.151364][    T9] usb 3-1: config 0 descriptor??
[  197.169027][    T9] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8
[  197.209966][    T9] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5
[  197.238493][ T8810] netlink: 'syz.0.1195': attribute type 10 has an invalid length.
[  197.249202][    T9] usb-storage 3-1:0.0: USB Mass Storage device detected
[  197.283245][    T9] usb-storage 3-1:0.0: device ignored
[  197.383015][   T43] gspca_sunplus: reg_w_riv err -71
[  197.393466][   T43] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  197.410907][    T9] usb 3-1: USB disconnect, device number 3
[  197.452908][   T43] usb 5-1: USB disconnect, device number 8
[  197.466689][ T8810] veth0_vlan: left promiscuous mode
[  197.539247][ T8810] veth0_vlan: entered promiscuous mode
[  197.583573][ T8810] team0: Device veth0_vlan failed to register rx_handler
[  197.591071][ T8801] loop3: detected capacity change from 0 to 32768
[  198.156521][ T8828] loop2: detected capacity change from 0 to 256
[  198.736645][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'.
[  198.896364][ T8855] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1215'.
[  199.263145][ T8867] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1221'.
[  199.775880][ T8879] netlink: 'syz.3.1227': attribute type 21 has an invalid length.
[  199.870255][ T8857] loop4: detected capacity change from 0 to 32768
[  199.935873][ T8853] loop2: detected capacity change from 0 to 32768
[  200.011677][ T8857] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  200.023880][   T30] audit: type=1326 audit(1750146180.650:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8886 comm="syz.1.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e978e929 code=0x7ffc0000
[  200.199052][   T30] audit: type=1326 audit(1750146180.650:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8886 comm="syz.1.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f29e978e929 code=0x7ffc0000
[  200.395244][   T30] audit: type=1326 audit(1750146180.650:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8886 comm="syz.1.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e978e929 code=0x7ffc0000
[  200.505261][ T5842] ocfs2: Unmounting device (7,4) on (node local)
[  200.521156][ T8853] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=xxhash,compression=lz4,str_hash=crc64,norecovery,reconstruct_alloc
[  200.521187][ T8853]   allowing incompatible features above 0.0: (unknown version)
[  200.521201][ T8853]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  200.535426][   T30] audit: type=1326 audit(1750146180.650:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8886 comm="syz.1.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e978e929 code=0x7ffc0000
[  200.631333][ T8853] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  200.724210][ T8853] bcachefs (loop2): invalid journal entry, version=1.7: mi_btree_bitmap type=usage in superblock: invalid journal entry usage: bad size, fixing
[  200.791964][ T8853] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  200.830690][ T8853] bcachefs (loop2): Version upgrade from 1.19: autofix_errors to 1.7: mi_btree_bitmap incomplete
[  200.830690][ T8853] Doing compatible version upgrade from 1.19: autofix_errors to 1.28: inode_has_case_insensitive
[  200.830690][ T8853]   running recovery passes: check_extents_to_backpointers,check_inodes
[  200.972455][ T8853] bcachefs (loop2): dropping and reconstructing all alloc info
[  200.977299][ T8873] loop0: detected capacity change from 0 to 32768
[  201.081401][ T8873] __jfs_setxattr: xattr_size = 74, new_size = 12820
[  201.088760][ T8853] bcachefs (loop2): error reading btree root btree=dirents level=0: btree_node_read_error, fixing
[  201.116798][ T8853] bcachefs (loop2): btree node read error at btree xattrs level 0/0
[  201.116876][ T8853]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0
[  201.116897][ T8853]   loop2 node offset 0/16: got wrong btree node: got
[  201.116909][ T8853]   btree=xattrs level=0 seq ded0abe32 1
[  201.116920][ T8853]   min: POS_MIN
[  201.116930][ T8853]   max: SPOS_MAX
[  201.116940][ T8853]   flagging btree xattrs lost data
[  201.116950][ T8853]   ret btree_node_read_validate_error
[  201.437557][ T8853] bcachefs (loop2): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing
[  201.525947][ T8853] bcachefs (loop2): check_topology...
[  201.526257][ T8853] bcachefs (loop2): btree root dirents unreadable, must recover from scan
[  201.564732][ T8928] kAFS: unable to lookup cell '\/'
[  201.603642][ T8853] bcachefs (loop2): no nodes found for btree dirents, continuing
[  201.633935][ T8853] bcachefs (loop2): btree root xattrs unreadable, must recover from scan
[  201.666170][ T8853] bcachefs (loop2): no nodes found for btree xattrs, continuing
[  201.686877][ T8853]  done
[  201.694274][ T8853] bcachefs (loop2): accounting_read... done
[  201.712660][ T8853] bcachefs (loop2): alloc_read... done
[  201.732875][ T8853] bcachefs (loop2): snapshots_read... done
[  201.781776][ T8853] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean
[  201.807183][ T8853] bcachefs (loop2): done starting filesystem
[  202.031786][ T5847] bcachefs (loop2): shutting down
[  202.221437][ T5847] bcachefs (loop2): shutdown complete
[  202.374219][ T8953] netlink: 'syz.4.1260': attribute type 3 has an invalid length.
[  202.403018][ T8953] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1260'.
[  202.611267][ T8957] loop4: detected capacity change from 0 to 256
[  202.663918][ T8961] loop1: detected capacity change from 0 to 256
[  202.711245][ T8957] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  202.918085][ T8967] loop0: detected capacity change from 0 to 64
[  202.942959][ T8943] loop3: detected capacity change from 0 to 32768
[  203.096917][ T8943] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  203.321186][ T5838] ocfs2: Unmounting device (7,3) on (node local)
[  203.421923][ T8977] loop1: detected capacity change from 0 to 512
[  203.477992][ T8977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  203.589817][ T8977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.640836][ T8977] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.771380][ T8977] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1272: corrupted xattr block 19: overlapping e_value 
[  203.913216][ T8977] EXT4-fs error (device loop1): ext4_get_inode_usage:884: inode #15: comm syz.1.1272: corrupted xattr block 19: overlapping e_value 
[  204.141157][ T8998] loop3: detected capacity change from 0 to 4096
[  204.196249][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.271396][ T9004] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  204.301014][ T8998] NILFS (loop3): bad btree root (ino=12): level = 7, flags = 0xff, nchildren = 0
[  205.215540][ T9034] loop0: detected capacity change from 0 to 8
[  205.222768][ T9034] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  205.619440][ T9046] netlink: 'syz.0.1297': attribute type 20 has an invalid length.
[  206.072975][ T9036] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  206.097407][ T9059] loop0: detected capacity change from 0 to 128
[  206.323797][ T9031] loop3: detected capacity change from 0 to 32768
[  206.417800][ T9031] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  206.540426][ T9031] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  206.573699][ T9031] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #3923116032
[  206.592000][ T9031] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  206.620479][ T9031] OCFS2: File system is now read-only.
[  206.640652][ T9031] (syz.3.1293,9031,0):ocfs2_search_chain:1817 ERROR: status = -30
[  206.671188][ T9031] (syz.3.1293,9031,0):ocfs2_search_chain:1940 ERROR: status = -30
[  206.704799][ T9031] (syz.3.1293,9031,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  206.746652][ T9031] (syz.3.1293,9031,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  206.799617][ T9031] (syz.3.1293,9031,1):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  206.834550][ T9031] (syz.3.1293,9031,1):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  206.860580][ T9031] (syz.3.1293,9031,1):ocfs2_mknod_locked:638 ERROR: status = -30
[  206.903334][ T9031] (syz.3.1293,9031,1):ocfs2_mknod:385 ERROR: status = -30
[  206.945344][ T9031] (syz.3.1293,9031,1):ocfs2_mknod:502 ERROR: status = -30
[  206.952901][ T9031] (syz.3.1293,9031,1):ocfs2_create:675 ERROR: status = -30
[  207.011260][ T9048] loop2: detected capacity change from 0 to 32768
[  207.093033][ T5838] ocfs2: Unmounting device (7,3) on (node local)
[  207.104404][   T30] audit: type=1800 audit(1750146187.740:37): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1298" name="file1" dev="loop2" ino=4 res=0 errno=0
[  207.324599][ T5856] Bluetooth: hci3: command 0x0401 tx timeout
[  207.815978][ T9104] netlink: 'syz.1.1323': attribute type 10 has an invalid length.
[  207.874772][ T9104] veth0_macvtap: left promiscuous mode
[  207.900960][ T9104] batman_adv: batadv0: Adding interface: macvtap0
[  207.934598][ T9104] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.967802][ T9106] netlink: 'syz.0.1324': attribute type 1 has an invalid length.
[  207.986089][ T9106] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1324'.
[  208.027447][ T9104] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  208.534538][ T9123] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1332'.
[  208.614582][ T9123] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  208.676759][   T30] audit: type=1326 audit(1750146189.320:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9125 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b798e929 code=0x7ffc0000
[  208.754800][   T30] audit: type=1326 audit(1750146189.320:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9125 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b798e929 code=0x7ffc0000
[  208.870453][   T30] audit: type=1326 audit(1750146189.350:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9125 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f89b798e929 code=0x7ffc0000
[  208.939360][ T9128] loop4: detected capacity change from 0 to 256
[  208.943740][   T30] audit: type=1326 audit(1750146189.350:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9125 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b798e929 code=0x7ffc0000
[  209.018872][ T9128] FAT-fs (loop4): Directory bread(block 1285) failed
[  209.054160][   T30] audit: type=1326 audit(1750146189.350:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9125 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b798e929 code=0x7ffc0000
[  209.081774][ T9128] FAT-fs (loop4): Directory bread(block 1285) failed
[  209.168686][ T9128] FAT-fs (loop4): Directory bread(block 1285) failed
[  209.192376][ T9112] loop3: detected capacity change from 0 to 32768
[  209.194658][ T9128] FAT-fs (loop4): Directory bread(block 1285) failed
[  209.307771][ T9118] loop0: detected capacity change from 0 to 32768
[  209.340448][ T9114] loop2: detected capacity change from 0 to 32768
[  209.424596][ T9114] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1328 (9114)
[  209.489989][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'.
[  209.548085][ T9114] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  209.621023][ T9114] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  209.623410][ T9136] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1339'.
[  209.655245][ T9114] BTRFS info (device loop2): using free-space-tree
[  210.347641][ T5847] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  210.435265][ T9165] [U] 
[  210.702637][ T9172] IPv6: NLM_F_REPLACE set, but no existing node found!
[  211.113690][ T9187] netlink: 'syz.2.1356': attribute type 32 has an invalid length.
[  211.128534][ T9188] loop0: detected capacity change from 0 to 256
[  211.319216][ T9194] loop4: detected capacity change from 0 to 64
[  211.488712][ T9198] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1362'.
[  211.532289][ T9198] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1362'.
[  211.694622][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  211.830046][ T9211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.877334][    T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  211.914717][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.943525][    T9] usb 3-1: config 0 descriptor??
[  212.340689][ T9231] bond0: Error: Cannot enslave bond to itself.
[  212.376484][    T9] ath6kl: Failed to submit usb control message: -71
[  212.402417][    T9] ath6kl: unable to send the bmi data to the device: -71
[  212.430332][    T9] ath6kl: Unable to send get target info: -71
[  212.473209][    T9] ath6kl: Failed to init ath6kl core: -71
[  212.507788][    T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  212.553946][    T9] usb 3-1: USB disconnect, device number 4
[  212.823422][ T9248] loop4: detected capacity change from 0 to 256
[  212.853650][ T9248] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  213.002369][ T9248] FAT-fs (loop4): Directory bread(block 64) failed
[  213.051781][ T9248] FAT-fs (loop4): Directory bread(block 65) failed
[  213.075982][ T9248] FAT-fs (loop4): Directory bread(block 66) failed
[  213.088863][ T9248] FAT-fs (loop4): Directory bread(block 67) failed
[  213.115074][ T9248] FAT-fs (loop4): Directory bread(block 68) failed
[  213.122111][ T9248] FAT-fs (loop4): Directory bread(block 69) failed
[  213.159541][ T9248] FAT-fs (loop4): Directory bread(block 70) failed
[  213.191443][ T9248] FAT-fs (loop4): Directory bread(block 71) failed
[  213.227830][ T9248] FAT-fs (loop4): Directory bread(block 72) failed
[  213.248137][ T9248] FAT-fs (loop4): Directory bread(block 73) failed
[  213.485156][ T9262] loop1: detected capacity change from 0 to 4096
[  213.505102][ T9268] netlink: 'syz.3.1395': attribute type 13 has an invalid length.
[  213.523804][ T9268] netlink: 'syz.3.1395': attribute type 27 has an invalid length.
[  213.538549][ T9262] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  213.648767][ T9262] ntfs3(loop1): ino=19, mi_enum_attr
[  213.654153][ T9262] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  213.673129][ T9272] loop4: detected capacity change from 0 to 128
[  213.782828][ T9272] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  213.850668][ T9262] ntfs3(loop1): failed to convert "c46c" to cp864
[  213.877193][ T9272] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.936677][ T9262] ntfs3(loop1): ino=20, mi_enum_attr
[  213.956551][ T9272] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.1396: No space for directory leaf checksum. Please run e2fsck -D.
[  213.984639][ T9272] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.1396: checksumming directory block 0
[  214.172073][   T30] audit: type=1326 audit(1750146194.810:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  214.233513][ T5842] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  214.274975][ T9290] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1405'.
[  214.301134][   T30] audit: type=1326 audit(1750146194.810:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  214.329354][ T9290] netlink: 'syz.1.1405': attribute type 2 has an invalid length.
[  214.375738][   T30] audit: type=1326 audit(1750146194.850:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  214.398997][   T30] audit: type=1326 audit(1750146194.850:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  214.421927][   T30] audit: type=1326 audit(1750146194.850:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8b98e929 code=0x7ffc0000
[  214.702992][ T9302] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1411'.
[  214.745926][ T9302] (unnamed net_device) (uninitialized): (slave ip_vti0): Device is not bonding slave
[  214.792283][ T9306] netlink: 'syz.0.1413': attribute type 16 has an invalid length.
[  214.814860][ T9302] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip_vti0)
[  214.851801][ T9306] netlink: 'syz.0.1413': attribute type 3 has an invalid length.
[  214.870220][ T9300] loop3: detected capacity change from 0 to 4096
[  214.878652][ T9306] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1413'.
[  214.955357][ T9300] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  215.194581][ T9300] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  215.221910][ T9300] ntfs3(loop3): Failed to load $Extend (-22).
[  215.254516][ T9300] ntfs3(loop3): Failed to initialize $Extend.
[  215.980686][ T9343] netlink: 'syz.4.1432': attribute type 4 has an invalid length.
[  215.993717][ T9344] loop2: detected capacity change from 0 to 64
[  216.007106][ T9343] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1432'.
[  216.095443][ T9343] : renamed from bond0 (while UP)
[  216.223068][ T9348] netlink: 'syz.1.1434': attribute type 21 has an invalid length.
[  216.250897][ T9348] netlink: 'syz.1.1434': attribute type 11 has an invalid length.
[  216.483686][ T9326] loop0: detected capacity change from 0 to 32768
[  216.508336][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1438'.
[  216.623200][ T9326] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  216.765020][ T5856] Bluetooth: hci4: command 0x0406 tx timeout
[  216.771138][ T5857] Bluetooth: hci0: command 0x0406 tx timeout
[  216.780170][ T5858] Bluetooth: hci2: command 0x0406 tx timeout
[  216.781762][ T5849] Bluetooth: hci1: command 0x0406 tx timeout
[  216.786396][ T5857] Bluetooth: hci3: command 0x0401 tx timeout
[  216.971995][ T9326] XFS (loop0): Ending clean mount
[  217.090611][ T9326] XFS (loop0): Quotacheck needed: Please wait.
[  217.235975][ T9326] XFS (loop0): Quotacheck: Done.
[  217.334880][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1448'.
[  217.350207][ T9346] loop3: detected capacity change from 0 to 32768
[  217.395100][ T9346] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1433 (9346)
[  217.437314][ T5839] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  217.447615][ T9346] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  217.488186][ T9346] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  217.515937][ T9346] BTRFS info (device loop3): disk space caching is enabled
[  217.523351][ T9346] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  217.838584][ T9346] BTRFS info (device loop3): rebuilding free space tree
[  217.931763][ T9346] BTRFS info (device loop3): disabling free space tree
[  217.959503][ T9346] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  218.010976][ T9346] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  218.039587][ T9386] loop1: detected capacity change from 0 to 32768
[  218.354909][ T5838] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  218.558819][ T9386] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=/dev/loop1,noinodes_use_key_cache,fsck,fix_errors=yes,norecovery,nojournal_transaction_names
[  218.558857][ T9386]   allowing incompatible features above 0.0: (unknown version)
[  218.558870][ T9386]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  218.754610][ T9386] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  218.803770][ T9386] bcachefs (loop1): recovering from clean shutdown, journal seq 13
[  218.844911][ T9386] bcachefs (loop1): Version upgrade required:
[  218.844911][ T9386] Version upgrade from 0.32: (unknown version) to 1.7: mi_btree_bitmap incomplete
[  218.844911][ T9386] Doing incompatible version upgrade from 0.32: (unknown version) to 1.28: inode_has_case_insensitive
[  218.844911][ T9386]   running recovery passes: check_allocations,check_extents_to_backpointers,check_snapshots,check_subvols,check_inodes,check_dirents,set_fs_needs_rebalance
[  218.923737][ T9435] netlink: 'syz.0.1461': attribute type 1 has an invalid length.
[  218.963352][ T9435] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1461'.
[  219.113373][ T9386] bcachefs (loop1): accounting_read... done
[  219.164076][ T9386] bcachefs (loop1): alloc_read... done
[  219.170567][ T9386] bcachefs (loop1): snapshots_read... done
[  219.202310][ T9386] bcachefs (loop1): done starting filesystem
[  219.590827][ T9450] usb usb1: usbfs: process 9450 (syz.4.1468) did not claim interface 0 before use
[  219.627019][ T9386] syz.1.1449 (9386) used greatest stack depth: 19784 bytes left
[  219.665701][ T5843] bcachefs (loop1): shutting down
[  219.869197][ T9428] loop2: detected capacity change from 0 to 32768
[  219.888958][ T5843] bcachefs (loop1): shutdown complete
[  219.926112][ T9428] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1459 (9428)
[  220.031115][ T9428] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  220.082688][ T9428] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  220.105788][ T9460] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1474'.
[  220.124240][ T9428] BTRFS info (device loop2): using free-space-tree
[  220.481711][ T9428] BTRFS info (device loop2): rebuilding free space tree
[  220.718112][ T5847] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  220.757808][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'.
[  221.294282][ T9506] netlink: 'syz.0.1490': attribute type 1 has an invalid length.
[  221.848867][ T9526] xt_recent: Unsupported userspace flags (000000de)
[  222.046362][ T9532] loop2: detected capacity change from 0 to 1024
[  222.112464][ T9532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.197452][ T9532] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.1502: reserved inode found cleared - inode=1
[  222.339766][ T9541] loop0: detected capacity change from 0 to 1024
[  222.371025][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.507777][ T9550] loop3: detected capacity change from 0 to 736
[  222.535816][ T9541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.570214][ T9541] overlayfs: missing 'lowerdir'
[  222.694850][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.095364][ T9562] lo: left promiscuous mode
[  223.130384][ T9562] netlink: 'syz.4.1515': attribute type 1 has an invalid length.
[  223.164777][ T9562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.184990][   T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  223.354883][   T24] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  223.374889][ T9573] openvswitch: netlink: IP tunnel dst address not specified
[  223.394019][   T24] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  223.413598][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.439052][   T24] usb 3-1: Product: syz
[  223.443297][   T24] usb 3-1: Manufacturer: syz
[  223.453398][   T24] usb 3-1: SerialNumber: syz
[  223.486440][   T24] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  223.605444][ T9579] loop0: detected capacity change from 0 to 256
[  223.690504][ T9579] exfat: Deprecated parameter 'namecase'
[  223.698112][ T9579] exfat: Deprecated parameter 'utf8'
[  223.715531][ T9579] exfat: Deprecated parameter 'namecase'
[  223.784068][ T9579] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdf1ac56c, utbl_chksum : 0xe619d30d)
[  223.920443][   T24] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  224.026193][   T24] usb 3-1: USB disconnect, device number 5
[  224.610783][ T9608] loop0: detected capacity change from 0 to 2048
[  224.635838][ T9614] netlink: 'syz.2.1539': attribute type 84 has an invalid length.
[  224.712436][ T9608] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  224.992250][ T5839] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  225.008088][ T5839] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  225.693497][ T9616] loop1: detected capacity change from 0 to 32768
[  225.705778][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.808944][ T9616] __jfs_setxattr: xattr_size = 1857, new_size = 2089
[  225.950206][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.127291][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.364158][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.371532][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1560'.
[  226.424533][ T9649] macvlan1: left allmulticast mode
[  226.439961][ T9649] veth1_vlan: left allmulticast mode
[  226.470336][ T9649] macvlan1: left promiscuous mode
[  226.512257][ T9649] bridge0: port 3(macvlan1) entered disabled state
[  226.527705][ T9640] loop3: detected capacity change from 0 to 32768
[  226.550585][ T9649] bridge_slave_1: left allmulticast mode
[  226.567418][ T9649] bridge_slave_1: left promiscuous mode
[  226.574690][ T9640] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1554 (9640)
[  226.591771][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.635943][ T9649] bridge_slave_0: left allmulticast mode
[  226.655005][ T9649] bridge_slave_0: left promiscuous mode
[  226.660822][ T9640] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  226.672363][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.693723][ T9640] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  226.715874][ T9644] loop4: detected capacity change from 0 to 32768
[  226.729944][ T9640] BTRFS info (device loop3): disk space caching is enabled
[  226.754131][ T9640] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  227.012355][ T9644] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,background_compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  227.012386][ T9644]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  227.059657][ T9640] BTRFS info (device loop3): rebuilding free space tree
[  227.078734][ T9640] BTRFS info (device loop3): disabling free space tree
[  227.078806][ T9640] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  227.078831][ T9640] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  227.260364][ T9640] BTRFS info (device loop3): balance: start -ssoft,usage=172,vrange=18446744073709551614..18446744073709551615,limit=0,stripes=0..511
[  227.260514][ T9640] BTRFS info (device loop3): balance: ended with status: 0
[  227.325171][   T13] bridge_slave_1: left allmulticast mode
[  227.325235][   T13] bridge_slave_1: left promiscuous mode
[  227.327349][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.386404][   T13] bridge_slave_0: left allmulticast mode
[  227.386432][   T13] bridge_slave_0: left promiscuous mode
[  227.386651][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.392871][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  227.397488][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  227.405414][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  227.444903][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  227.451212][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  227.558220][ T5838] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  227.612923][ T9687] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1566'.
[  227.904167][ T9693] xt_time: invalid argument - start or stop time greater than 23:59:59
[  228.054830][ T5909] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  228.165901][ T9644] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  228.174253][ T9644] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  228.221769][ T5909] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  228.247956][ T9644] bcachefs (loop4): superblock requires following recovery passes to be run:
[  228.247956][ T9644]   recovery_pass_empty,check_unreachable_inodes,lookup_root_inode
[  228.284585][ T5909] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.304513][ T5909] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  228.313614][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.336402][ T9644] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  228.336402][ T9644]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  228.395581][ T9644] bcachefs (loop4): dropping and reconstructing all alloc info
[  228.416840][ T5909] hub 3-1:4.0: USB hub found
[  228.520045][ T9644] bcachefs (loop4): accounting_read... done
[  228.560275][ T9644] bcachefs (loop4): alloc_read... done
[  228.566651][ T9644] bcachefs (loop4): snapshots_read...
[  228.584763][ T5909] hub 3-1:4.0: config failed, hub has too many ports! (err -19)
[  228.613533][ T9644]  done
[  228.624230][ T9644] bcachefs (loop4): done starting filesystem
[  228.736872][ T5963] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  228.776744][ T5842] bcachefs (loop4): shutting down
[  228.902966][ T5842] bcachefs (loop4): shutdown complete
[  228.915826][   T43] usb 3-1: USB disconnect, device number 6
[  228.934316][ T5963] usb 4-1: too many configurations: 96, using maximum allowed: 8
[  228.992745][ T5963] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  229.007707][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.024531][ T5963] usb 4-1: Product: syz
[  229.028875][ T5963] usb 4-1: Manufacturer: syz
[  229.039018][ T5963] usb 4-1: SerialNumber: syz
[  229.073985][ T5963] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  229.100974][    T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  229.372743][ T5963] usb 4-1: USB disconnect, device number 4
[  229.448806][ T9714] loop2: detected capacity change from 0 to 64
[  229.540194][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.559095][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.564795][ T5854] Bluetooth: hci1: command tx timeout
[  229.587166][   T13] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  229.675512][   T13] bond0 (unregistering): Released all slaves
[  229.760166][ T9718] loop2: detected capacity change from 0 to 1024
[  230.205117][    T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  230.225726][    T9] ath9k_htc: Failed to initialize the device
[  230.249012][ T9724] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1578'.
[  230.253528][ T5963] usb 4-1: ath9k_htc: USB layer deinitialized
[  230.788291][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  231.001106][   T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  231.034512][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.042622][   T24] usb 4-1: Product: syz
[  231.084930][   T24] usb 4-1: Manufacturer: syz
[  231.102943][   T24] usb 4-1: SerialNumber: syz
[  231.117550][   T24] usb 4-1: config 0 descriptor??
[  231.338089][   T13] hsr_slave_0: left promiscuous mode
[  231.370132][   T24] hso 4-1:0.0: Failed to find BULK IN ep
[  231.387810][   T24] usb-storage 4-1:0.0: USB Mass Storage device detected
[  231.396096][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1590'.
[  231.398467][   T13] hsr_slave_1: left promiscuous mode
[  231.442849][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.520182][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.571750][ T5963] usb 4-1: USB disconnect, device number 5
[  231.574088][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.610691][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.646183][ T5854] Bluetooth: hci1: command tx timeout
[  231.720695][   T13] veth1_macvtap: left promiscuous mode
[  231.740823][   T13] veth0_macvtap: left promiscuous mode
[  231.754339][   T13] veth1_vlan: left promiscuous mode
[  232.064030][ T9770] loop2: detected capacity change from 0 to 32768
[  232.075079][ T9770] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1591 (9770)
[  232.143927][ T9770] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  232.176848][ T9770] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  232.204305][ T9770] BTRFS info (device loop2): using free-space-tree
[  232.376664][ T9770] BTRFS info (device loop2): resizing devid 3
[  232.384673][ T9770] BTRFS info (device loop2): resizer unable to find device 3
[  232.484113][ T5847] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  233.101794][   T13] team0 (unregistering): Port device team_slave_1 removed
[  233.159579][ T9801] autofs4:pid:9801:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e)
[  233.174215][ T9801] autofs4:pid:9801:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e)
[  233.199356][   T13] team0 (unregistering): Port device team_slave_0 removed
[  233.725316][ T1214] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  233.725764][ T5854] Bluetooth: hci1: command tx timeout
[  233.894984][ T9680] chnl_net:caif_netlink_parms(): no params data found
[  233.901907][ T1214] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.945758][ T1214] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD
[  233.991585][ T1214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10
[  234.059673][ T1214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  234.089113][ T1214] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  234.127505][ T9809] loop4: detected capacity change from 0 to 2048
[  234.145844][ T1214] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  234.166381][ T1214] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  234.174900][ T1214] usb 3-1: Manufacturer: syz
[  234.193483][ T1214] usb 3-1: config 0 descriptor??
[  234.207663][ T1214] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  234.278180][ T9809] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  234.427719][ T1214] usb 3-1: USB disconnect, device number 7
[  234.484230][ T9680] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.523030][ T9680] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.555928][ T9680] bridge_slave_0: entered allmulticast mode
[  234.609701][ T9680] bridge_slave_0: entered promiscuous mode
[  234.660314][ T9680] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.691413][ T9680] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.721929][ T9680] bridge_slave_1: entered allmulticast mode
[  234.743931][ T9680] bridge_slave_1: entered promiscuous mode
[  235.217181][ T9680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.256352][ T9680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.486523][ T1214] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  235.531591][ T9680] team0: Port device team_slave_0 added
[  235.577959][ T9680] team0: Port device team_slave_1 added
[  235.678277][ T1214] usb 4-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e
[  235.684302][ T9823] loop4: detected capacity change from 0 to 32768
[  235.709119][ T1214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.724313][ T1214] usb 4-1: Product: syz
[  235.751989][ T1214] usb 4-1: Manufacturer: syz
[  235.772350][ T1214] usb 4-1: SerialNumber: syz
[  235.803229][ T9854] ÿ: renamed from bond_slave_0 (while UP)
[  235.809223][ T5854] Bluetooth: hci1: command tx timeout
[  235.841390][ T9680] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.857806][ T1214] usb 4-1: config 0 descriptor??
[  235.860357][ T9680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.939860][ T1214] pwc: Samsung SNC-35E (v3.0) USB webcam detected.
[  235.971467][ T9680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.999959][  T112] ------------[ cut here ]------------
[  236.006956][  T112] WARNING: fs/jfs/jfs_dmap.c:2867 at dbAdjTree+0x454/0x4e0, CPU#1: jfsCommit/112
[  236.017155][  T112] Modules linked in:
[  236.021491][  T112] CPU: 1 UID: 0 PID: 112 Comm: jfsCommit Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  236.033213][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  236.043712][  T112] RIP: 0010:dbAdjTree+0x454/0x4e0
[  236.049332][  T112] Code: 5a ff ff ff e8 6d ea 81 fe eb 05 e8 66 ea 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 f7 2d 08 cc e8 4d ea 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  236.069698][  T112] RSP: 0018:ffffc90002647988 EFLAGS: 00010293
[  236.074712][ T9680] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.076419][  T112] RAX: ffffffff833e8123 RBX: ffff888072eea010 RCX: ffff88801fba1e00
[  236.091177][  T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  236.099245][ T9680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.099311][ T9680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.138396][  T112] RBP: 0000000000020056 R08: ffffea0001cbba87 R09: 1ffffd4000397750
[  236.146915][  T112] R10: dffffc0000000000 R11: fffff94000397751 R12: ffff888072eea018
[  236.155218][  T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  236.163230][  T112] FS:  0000000000000000(0000) GS:ffff888125d40000(0000) knlGS:0000000000000000
[  236.172272][  T112] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  236.178950][  T112] CR2: 00007f4041a7a000 CR3: 000000002a718000 CR4: 00000000003526f0
[  236.187028][  T112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  236.195163][  T112] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  236.203178][  T112] Call Trace:
[  236.206837][  T112]  <TASK>
[  236.210406][  T112]  ? __pfx_lock_metapage+0x10/0x10
[  236.216115][  T112]  dbJoin+0x238/0x300
[  236.220148][  T112]  ? do_read_cache_folio+0x4c6/0x590
[  236.225526][  T112]  dbFreeBits+0x4e1/0xdb0
[  236.229913][  T112]  dbFree+0x336/0x650
[  236.233960][  T112]  txFreeMap+0x7ff/0xde0
[  236.238315][  T112]  txUpdateMap+0x308/0x9c0
[  236.242780][  T112]  jfs_lazycommit+0x43f/0xa90
[  236.247568][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[  236.252811][  T112]  ? __pfx_default_wake_function+0x10/0x10
[  236.258713][  T112]  ? __kthread_parkme+0x7b/0x200
[  236.263701][  T112]  ? __kthread_parkme+0x1a1/0x200
[  236.268907][  T112]  kthread+0x711/0x8a0
[  236.273021][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[  236.278288][  T112]  ? __pfx_kthread+0x10/0x10
[  236.282918][  T112]  ? _raw_spin_unlock_irq+0x23/0x50
[  236.288253][  T112]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.293498][  T112]  ? __pfx_kthread+0x10/0x10
[  236.298175][  T112]  ret_from_fork+0x3fc/0x770
[  236.302819][  T112]  ? __pfx_ret_from_fork+0x10/0x10
[  236.308033][  T112]  ? __switch_to_asm+0x39/0x70
[  236.313427][  T112]  ? __switch_to_asm+0x33/0x70
[  236.318781][  T112]  ? __pfx_kthread+0x10/0x10
[  236.323427][  T112]  ret_from_fork_asm+0x1a/0x30
[  236.328318][  T112]  </TASK>
[  236.331474][  T112] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  236.338785][  T112] CPU: 1 UID: 0 PID: 112 Comm: jfsCommit Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  236.350104][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  236.360202][  T112] Call Trace:
[  236.363519][  T112]  <TASK>
[  236.366480][  T112]  dump_stack_lvl+0x99/0x250
[  236.371118][  T112]  ? __asan_memcpy+0x40/0x70
[  236.375756][  T112]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.381003][  T112]  ? __pfx__printk+0x10/0x10
[  236.385656][  T112]  panic+0x2db/0x790
[  236.389609][  T112]  ? __pfx_panic+0x10/0x10
[  236.394088][  T112]  ? ret_from_fork_asm+0x1a/0x30
[  236.399084][  T112]  __warn+0x334/0x4c0
[  236.403111][  T112]  ? dbAdjTree+0x454/0x4e0
[  236.407570][  T112]  ? dbAdjTree+0x454/0x4e0
[  236.412007][  T112]  report_bug+0x2be/0x4f0
[  236.416446][  T112]  ? dbAdjTree+0x454/0x4e0
[  236.420892][  T112]  ? dbAdjTree+0x454/0x4e0
[  236.425330][  T112]  ? dbAdjTree+0x456/0x4e0
[  236.429760][  T112]  handle_bug+0x84/0x160
[  236.434024][  T112]  exc_invalid_op+0x1a/0x50
[  236.438544][  T112]  asm_exc_invalid_op+0x1a/0x20
[  236.443400][  T112] RIP: 0010:dbAdjTree+0x454/0x4e0
[  236.448435][  T112] Code: 5a ff ff ff e8 6d ea 81 fe eb 05 e8 66 ea 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 f7 2d 08 cc e8 4d ea 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  236.468052][  T112] RSP: 0018:ffffc90002647988 EFLAGS: 00010293
[  236.474132][  T112] RAX: ffffffff833e8123 RBX: ffff888072eea010 RCX: ffff88801fba1e00
[  236.482111][  T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  236.490089][  T112] RBP: 0000000000020056 R08: ffffea0001cbba87 R09: 1ffffd4000397750
[  236.498067][  T112] R10: dffffc0000000000 R11: fffff94000397751 R12: ffff888072eea018
[  236.506046][  T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  236.514038][  T112]  ? dbAdjTree+0x453/0x4e0
[  236.518480][  T112]  ? dbAdjTree+0x453/0x4e0
[  236.522913][  T112]  ? __pfx_lock_metapage+0x10/0x10
[  236.528048][  T112]  dbJoin+0x238/0x300
[  236.532044][  T112]  ? do_read_cache_folio+0x4c6/0x590
[  236.537436][  T112]  dbFreeBits+0x4e1/0xdb0
[  236.541791][  T112]  dbFree+0x336/0x650
[  236.545881][  T112]  txFreeMap+0x7ff/0xde0
[  236.550153][  T112]  txUpdateMap+0x308/0x9c0
[  236.554624][  T112]  jfs_lazycommit+0x43f/0xa90
[  236.559315][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[  236.564524][  T112]  ? __pfx_default_wake_function+0x10/0x10
[  236.570347][  T112]  ? __kthread_parkme+0x7b/0x200
[  236.575293][  T112]  ? __kthread_parkme+0x1a1/0x200
[  236.580330][  T112]  kthread+0x711/0x8a0
[  236.584417][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[  236.589631][  T112]  ? __pfx_kthread+0x10/0x10
[  236.594231][  T112]  ? _raw_spin_unlock_irq+0x23/0x50
[  236.599437][  T112]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.604642][  T112]  ? __pfx_kthread+0x10/0x10
[  236.609246][  T112]  ret_from_fork+0x3fc/0x770
[  236.613855][  T112]  ? __pfx_ret_from_fork+0x10/0x10
[  236.619008][  T112]  ? __switch_to_asm+0x39/0x70
[  236.623794][  T112]  ? __switch_to_asm+0x33/0x70
[  236.628577][  T112]  ? __pfx_kthread+0x10/0x10
[  236.633207][  T112]  ret_from_fork_asm+0x1a/0x30
[  236.638016][  T112]  </TASK>
[  236.641389][  T112] Kernel Offset: disabled
[  236.645725][  T112] Rebooting in 86400 seconds..