last executing test programs:

10.152053584s ago: executing program 4 (id=766):
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}})
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0)

9.75288724s ago: executing program 4 (id=768):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000400000300000a54000000060a090400000000000000000200000028000480240001800b0001007470726f7879000014000280080002400000001708000140000000000900010073797a30000000000900020073797a32"], 0x7c}}, 0x0)

9.285000119s ago: executing program 4 (id=770):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000002340)=0x8)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6e6f64655f0dcbcc28b5ef6f8b2c6a6f75726e616c5f666c7573685f64697361626c65642c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656c696d69745f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00"], 0x0, 0x5944, &(0x7f0000002380)="$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")

7.2871524s ago: executing program 4 (id=778):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0)

6.814073714s ago: executing program 1 (id=781):
r0 = syz_usb_connect$hid(0x3, 0x51, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xd}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x6, {0x6, 0xa, "a7ea3163"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

6.185232557s ago: executing program 0 (id=785):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000009c0)='./file1\x00', 0x10400, &(0x7f0000000a00)={[{@barrier}, {@gid}, {@barrier}, {@creator={'creator', 0x3d, "ff60f383"}}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp1255'}}, {}]}, 0x1, 0x6e4, &(0x7f0000000240)="$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")
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='osx.:'], 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

5.663692452s ago: executing program 3 (id=787):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='=00000000000000000000000,decompose,nls=cp874,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',nobarrier,part=0x0000000000000006,\x00'], 0x20, 0x6de, &(0x7f0000000840)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

5.605078665s ago: executing program 0 (id=789):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r1, 0x4, 0x2, 0x81, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x700, 0x0, 0x0, 0x300}})

5.061364295s ago: executing program 3 (id=790):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

4.92777759s ago: executing program 0 (id=791):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x200000, &(0x7f0000000840)={[{@hide}, {@check_strict}, {@map_acorn}, {@session={'session', 0x3d, 0x5f}}, {}, {@check_strict}]}, 0x1, 0x3e2, &(0x7f0000000440)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

4.770880312s ago: executing program 2 (id=792):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580))
ppoll(&(0x7f0000000100)=[{r0, 0x4000}], 0x1, &(0x7f0000000140), 0x0, 0x0)

4.70313081s ago: executing program 1 (id=793):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000024c0)={0xa, 0x4e24, 0x5, @remote, 0x1000}, 0x1c)
setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000002940)="ad40cdc771f4dd8459ef6cde95413515058302f9", 0x14)

4.492236645s ago: executing program 3 (id=794):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x57, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x8, "0400"}]}}, 0x0}, 0x0)

4.409476567s ago: executing program 0 (id=795):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, @remote, @mcast1, 0x2000000, 0x0, 0x7d, 0x200, 0x6, 0x930311})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @loopback, 0x6, 0x0, 0x6, 0x0, 0x4000000000000009, 0x4010200})

4.294255949s ago: executing program 1 (id=796):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

4.092092451s ago: executing program 2 (id=797):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0)

3.476830521s ago: executing program 0 (id=798):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r0, r0, 0x0, 0x800000009)

2.676664256s ago: executing program 2 (id=799):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004)

2.363714082s ago: executing program 4 (id=800):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r0])

1.373145155s ago: executing program 2 (id=801):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.372691612s ago: executing program 3 (id=802):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a00010133bd7000000000000a000000fd"], 0x1c}}, 0x0)

1.064597832s ago: executing program 1 (id=803):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0xd, 0xc, 0x4, 0x2, 0xc, {}, {0x1, 0x8, 0x5, 0x5, 0x3, 0x76, "10cb9ffb"}, 0xc002, 0x2, {0x0}, 0xf, 0x0, r1})

1.016077668s ago: executing program 4 (id=804):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "68ef1221"}]}}, 0x0}, 0x0)

1.015387425s ago: executing program 0 (id=805):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000200)={[{@disable_ext_identify}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@fault_type={'fault_type', 0x3d, 0x6}}, {@noinline_xattr}, {@inline_data}, {@checkpoint_enable}, {@fault_injection={'fault_injection', 0x3d, 0x1f}}, {@discard_unit_section}]}, 0x21, 0x554c, &(0x7f000000ae40)="$eJzs3E1vG1UXAOBjp2nffrwlQizYdVCFlEi1Vacfgl2BVny2qgosWIFju5Zb2xPFrhu66oIlYsE/QSCxYslvYMGaHWIBYocE8txJoS2VKsWOSfM80vjMvXPnzL2jJNKZiRzAgbWS/f5rJU7G0YhYiogTEcV+pdwKl1J4MSJORUT1H1ul7H/QcTgijkXEyWnylLNSHvryzOT0hV/e+e27H44cOv7Vtz8ubtXAor0cEYPNtH93kGLeTfFW2d+c9Io4OD8pYzowuF228xTvdjaKDHebO+OaRTzXTePzzTujabzZb7amsdu7WfRvDtMFR5PuTp7ihFvNraLd7mwUsTfKi9i9l+a1fS/9bbs3Gqc87TLfp0X6GI93YurvbHfSejZvF7E1HJf9KW/e7mxP46SM5eWilffbxTw2dnOn/9Neeq83vLOdTTpbo14+zC7UG6/UGxdrja283Rl3zteag/bF89lqtz8dVht3moNL3Tzv9jv1Vj5Yy1a7rVat0chWL3c2es3h/Uajfq5+tnZhLUt7Z7I3r32Y9dvZ6jS+3hveGff6o+xmvpWlM9ay9fq5V9ey043s/avXs+s3rly5ev2Djy9/dO21q2+/UQ56bFrZ6vrZ9fVa42xtvbG2uxsw0/Vnc17/Z+WkZ7h+2JXKoicAsP+o/4FFmF/9v3Uj4vH6vzrj+j/U/zOxr+rfg17/z2H9sCvqfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+un5a/fKnZWUvt42f//suv5sl2JiGpE/PkvluLwQzmXyjzLTxi//Mgcvq9EkWF6jSPldiwiLpXbH8/N+y4AAADAs+ub+6e+SNV6+lh5qrOOznlW7JH00KZ64pMZ5atExPLKzzPKVp1+vDCjZMXP96HYnlG24gHW/2aULD1yOzSrbE+l+HV/N4UHKylCJYXqo2fMbLUAAMDCLD0U9rYKAQAAYC99/sQjt/d0HuyxSuy8ytx5F1z85/3fL/uOprZXfwAAALB/VRY9AQAAAGDuivrf9/8BAADAsy19/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NxNbtpAGAbgz8Yu9E9FVfe9SndwjB6hyy4rDtBLcAR6hV6AM5BdjhBBhMdBISIJxGNQoueR7MGWeT3mZzEz0gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECfrurF9N+f73+75qw33eR5GgAAAOCQVb2YNi/G6fhje/5ze+pre1xERBkRh8bug3i3lzloc+pHrq8f9OF/RJOwvcew3T5ExI+0beJL358CAAAAvEnVdreczSdptJ5240v3is5O+A7TpE356WemWxcRUY+vM6WV27xvmcKa33cVvzOlNRNYo0xhacqtypV2lObvvpu1G91ritSUT78/27MDAABnNNhrzjsKAQAA4Jx+XboD9OH9s1cUcbeUuVsKHKZmtBdhsQ8AAABer+LSHQAAAAB614z/T6n/F8fU/6uy1/+LG/X/AAAA4MVS/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6tKoX0+VsPumas950k+dpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhlf95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmfTVsU1yB4iouBBL3a7ra29iQclePBPEEK6rbFbf7Q52FKEXrxJzr2IHkUEJd76D3jqTWihl3rrYQ8VRPCyMrMz2UlTcJuYmW3y+cCb993JZN73zcKS77zJAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafTuNE6yTWcSx8W+Ow+vr2b93Uf6zK2Ne0tZy+KozqSfDi9XX0Td5hIBAADg8EjK+j6EcD/dXM76uJPX/2l5TFbzf/fcJC7r+Ufr/rIva/+s/frLgxe3BupMxslOen5tODixM5XW/s1yvj3/n0e08iuf33tJ8jck/iCEUZpfz+ib27ffa+fhQh3ZAgC7cbzsi6D8eyjr+00mBsCh0aoU3kX9/3fSaTgpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBqMboRnyjgKISy1pnHm7sPrq4/rb23cWyrbmZs3N6rnzE6RhhDOrw0HJ2qcy7y7cvXaxZXhcHC5/uCVEEJTo79TTP/iRzMcHEIj12e/gn/G4/ET/daR5nPeUxAXb/YMB7fnJefmg919niz8Xx9MAAAcOGnRsrr+frq5nO2LFkMYf7+9/n+9EocZ6/8HH5+5Ux2rWv/3a5vh/OutX/q8d+XqtTfXLq1cGFwYfPrWyf7b/VNnT58+28vvlfTcMQEAAGBv2kWr1v/x4s71/2OVOMxY/3/xbf+r6Ui/51v1/07TRb+mMwEAADjcXnj1rz+jx+yP2u3w5cr6+uX+ZLv1+uRk20CqT2yhaNX6P1lsOisAAACgDqMb0bb1/3OVOMy4/v/sDy/9VD1nEkI4Wqz/H1/9bHiuvunMtTr+nbjpOQIAANCso0Wrrv+n+fP/8dYjD3EI4Y3XJnHxNYAz1f/J+1//WB0rqTz/f6q+Kc6luDu5HnnfDaHV3fbj3xpLDAAAgAPpSNGyYv+PdHP5k5+Pfdj2/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3f4NAAD//+DVQ1c=")

789.673641ms ago: executing program 3 (id=806):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xffffffff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)

533.835252ms ago: executing program 1 (id=807):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0xffffffff)
connect$pppl2tp(r0, 0x0, 0x0)

476.255251ms ago: executing program 2 (id=808):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000040)=""/19, &(0x7f0000000440)=0x13)

93.361035ms ago: executing program 3 (id=809):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4040, &(0x7f0000000a80)=ANY=[@ANYBLOB='force,decompose,nls=cp857,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f626172726965722c706172743d3078303030303030303030303030303030342c0029da224046557ecb65ded5c50ad3a6a30bc9ff1a3ebc851290177bba8d57fc514869fde9ff0cd99031aef2250bd32f6fe7dffcc4d843c5398f85b2162d81bd51c7ad5d6c6ec22b4391379123720a07da3c987a8779b03b21db3c6542040ee5b3167521a1f384b80673a5e56ff56bf5523200000000079a42c04c9e8f94e57cdc0e3adfa978c6d4d7f05fa88ead40f3ec2bf6239d4c40d4496fb2ded06d4900"/206], 0x20, 0x6fe, &(0x7f0000002100)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
rmdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

51.595774ms ago: executing program 2 (id=810):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000880)={0x40, 0x0, 0x3, 'fAF'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

0s ago: executing program 1 (id=811):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
setpriority(0x0, 0x0, 0x10000)

kernel console output (not intermixed with test programs):

ctive interface with an up link
[  189.018985][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.121117][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.132292][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.143858][ T5811] bridge_slave_1: entered allmulticast mode
[  189.152757][ T5811] bridge_slave_1: entered promiscuous mode
[  189.173103][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.219144][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.320468][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.328276][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.336134][ T5817] bridge_slave_0: entered allmulticast mode
[  189.345385][ T5817] bridge_slave_0: entered promiscuous mode
[  189.487353][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.495053][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.503073][ T5817] bridge_slave_1: entered allmulticast mode
[  189.512382][ T5817] bridge_slave_1: entered promiscuous mode
[  189.557227][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.565033][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.572810][ T5812] bridge_slave_0: entered allmulticast mode
[  189.582246][ T5812] bridge_slave_0: entered promiscuous mode
[  189.604927][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.614782][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.622352][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.630416][ T5812] bridge_slave_1: entered allmulticast mode
[  189.639855][ T5812] bridge_slave_1: entered promiscuous mode
[  189.656821][ T5825] team0: Port device team_slave_0 added
[  189.665645][ T5816] Bluetooth: hci1: command tx timeout
[  189.671283][ T5820] Bluetooth: hci0: command tx timeout
[  189.676310][ T5825] team0: Port device team_slave_1 added
[  189.720554][ T5822] team0: Port device team_slave_0 added
[  189.737261][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.749388][ T5816] Bluetooth: hci2: command tx timeout
[  189.823121][ T5816] Bluetooth: hci4: command tx timeout
[  189.857188][ T5822] team0: Port device team_slave_1 added
[  189.902900][ T5816] Bluetooth: hci3: command tx timeout
[  190.002657][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.014339][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.021915][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.049108][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.152135][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.164485][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.171599][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.197931][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.217349][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.230678][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.238186][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.264692][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.281666][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.289263][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.315760][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.334069][ T5811] team0: Port device team_slave_0 added
[  190.350357][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.367540][ T5811] team0: Port device team_slave_1 added
[  190.582094][ T5817] team0: Port device team_slave_0 added
[  190.635874][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.643167][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.669952][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.691715][ T5812] team0: Port device team_slave_0 added
[  190.701227][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.710512][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.738064][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.757955][ T5817] team0: Port device team_slave_1 added
[  190.809618][ T5812] team0: Port device team_slave_1 added
[  191.050373][ T5825] hsr_slave_0: entered promiscuous mode
[  191.060442][ T5825] hsr_slave_1: entered promiscuous mode
[  191.119836][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.127225][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.153703][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.180315][ T5822] hsr_slave_0: entered promiscuous mode
[  191.190308][ T5822] hsr_slave_1: entered promiscuous mode
[  191.199433][ T5822] debugfs: 'hsr0' already exists in 'hsr'
[  191.205635][ T5822] Cannot create hsr debugfs directory
[  191.218674][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.226249][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.252929][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.298863][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.306644][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.333076][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.412213][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.419571][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.446238][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.620386][ T5811] hsr_slave_0: entered promiscuous mode
[  191.630431][ T5811] hsr_slave_1: entered promiscuous mode
[  191.638835][ T5811] debugfs: 'hsr0' already exists in 'hsr'
[  191.644785][ T5811] Cannot create hsr debugfs directory
[  191.769296][ T5816] Bluetooth: hci1: command tx timeout
[  191.769344][ T5820] Bluetooth: hci0: command tx timeout
[  191.823148][ T5816] Bluetooth: hci2: command tx timeout
[  191.853624][ T5817] hsr_slave_0: entered promiscuous mode
[  191.863745][ T5817] hsr_slave_1: entered promiscuous mode
[  191.872390][ T5817] debugfs: 'hsr0' already exists in 'hsr'
[  191.878523][ T5817] Cannot create hsr debugfs directory
[  191.912819][ T5816] Bluetooth: hci4: command tx timeout
[  191.982695][ T5816] Bluetooth: hci3: command tx timeout
[  192.188127][ T5812] hsr_slave_0: entered promiscuous mode
[  192.197541][ T5812] hsr_slave_1: entered promiscuous mode
[  192.205523][ T5812] debugfs: 'hsr0' already exists in 'hsr'
[  192.211412][ T5812] Cannot create hsr debugfs directory
[  193.162403][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  193.229944][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  193.317978][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  193.375288][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  193.511796][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  193.560468][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  193.631580][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  193.654012][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  193.832098][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  193.853253][ T5816] Bluetooth: hci1: command tx timeout
[  193.857274][ T5820] Bluetooth: hci0: command tx timeout
[  193.932959][ T5820] Bluetooth: hci2: command tx timeout
[  193.960518][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  193.986728][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  193.993907][ T5820] Bluetooth: hci4: command tx timeout
[  194.011274][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  194.033412][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  194.071125][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  194.071886][ T5820] Bluetooth: hci3: command tx timeout
[  194.126769][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  194.168714][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  194.340523][ T5812] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  194.436360][ T5812] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  194.462046][ T5812] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  194.531030][ T5812] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  194.973050][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.160833][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[  195.219831][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.281492][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.289135][ T3869] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.324703][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.332194][ T3869] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.477822][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.554222][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[  195.582011][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.636670][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.644471][ T3869] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.796876][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[  195.828976][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.836668][ T3869] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.860686][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[  195.967393][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.975031][ T3869] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.085605][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.127060][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.134687][ T3869] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.150604][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.158215][ T3869] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.173951][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.181445][ T3869] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.357923][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[  196.536565][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.544199][ T3869] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.655404][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  196.678540][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  196.847775][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.855468][ T3869] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.939457][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  197.090766][ T5812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  197.101544][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  198.351268][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.820177][ T5822] veth0_vlan: entered promiscuous mode
[  198.909019][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.939597][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.989715][ T5822] veth1_vlan: entered promiscuous mode
[  199.031113][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.389403][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.456357][ T5822] veth0_macvtap: entered promiscuous mode
[  199.517002][ T5822] veth1_macvtap: entered promiscuous mode
[  199.651791][ T5825] veth0_vlan: entered promiscuous mode
[  199.676476][ T5811] veth0_vlan: entered promiscuous mode
[  199.792650][ T5825] veth1_vlan: entered promiscuous mode
[  199.809184][ T5811] veth1_vlan: entered promiscuous mode
[  199.850150][ T5817] veth0_vlan: entered promiscuous mode
[  199.872695][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.987438][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.044150][ T5817] veth1_vlan: entered promiscuous mode
[  200.128673][ T1329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.163719][ T1329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.225533][ T1329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.296095][ T4239] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.318582][ T5811] veth0_macvtap: entered promiscuous mode
[  200.336234][ T5825] veth0_macvtap: entered promiscuous mode
[  200.393916][ T5825] veth1_macvtap: entered promiscuous mode
[  200.493736][ T5811] veth1_macvtap: entered promiscuous mode
[  200.525135][ T5817] veth0_macvtap: entered promiscuous mode
[  200.599507][ T5817] veth1_macvtap: entered promiscuous mode
[  200.670315][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.736227][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.793119][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.830810][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.893082][ T1329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.911768][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.942802][ T3905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.991464][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.007526][ T3905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.061403][ T3905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.120875][ T3905] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.181496][ T3905] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.223718][ T3411] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.254855][ T3411] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.323206][ T3411] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.332312][ T3411] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.401927][ T3411] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.464317][ T3411] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.425263][ T5812] veth0_vlan: entered promiscuous mode
[  202.521675][ T5812] veth1_vlan: entered promiscuous mode
[  202.799948][ T5812] veth0_macvtap: entered promiscuous mode
[  202.861783][ T5812] veth1_macvtap: entered promiscuous mode
[  203.080800][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.181147][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.279528][ T1329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.350182][ T4239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.370060][ T4239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.434857][ T4239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.225154][ T3935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.233362][ T3935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.509263][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.518527][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.016278][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  208.041565][ T3935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.049779][ T3935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.216685][ T3905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.225404][ T3905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.351878][ T3935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.360141][ T3935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.461931][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.470443][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.750096][ T3935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.758454][ T3935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.020617][ T3834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.030000][ T3834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.317885][   T30] audit: type=1326 audit(1755047517.142:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.3.6" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ede38ebe9 code=0x0
[  209.525466][ T6005] loop1: detected capacity change from 0 to 1024
[  209.731901][ T6005] hfsplus: bad catalog entry type
[  210.119327][ T6013] netlink: 11 bytes leftover after parsing attributes in process `syz.2.7'.
[  210.360876][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.369290][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.747929][ T3411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.756500][ T3411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.894035][ T5873] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  211.146477][ T5873] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  211.158561][ T5873] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  211.170061][ T5873] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  211.181735][ T5873] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  211.196053][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.244305][ T6019] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  211.359362][ T6027] program syz.1.13 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  212.001580][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'.
[  212.242243][ T6039] binder: 6038:6039 ioctl c0306201 2000000003c0 returned -22
[  212.264272][ T5873] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  212.276376][ T5873] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input5
[  212.493520][    C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  212.501972][ T5873] usb 4-1: USB disconnect, device number 2
[  212.998045][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23'.
[  213.484375][ T5873] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  213.513857][ T6057] loop2: detected capacity change from 0 to 512
[  213.717667][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.723365][ T6057] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.26: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 9(4), depth 0(0)
[  213.729282][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.762142][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  213.777590][ T5873] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  213.787339][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.801431][ T5873] usb 2-1: config 0 descriptor??
[  213.826480][ T6057] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.26: Bad quota inode: 3, type: 0
[  213.840124][ T6057] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  213.906939][ T6057] EXT4-fs (loop2): mount failed
[  214.314743][ T5873] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  214.553469][ T5872] usb 2-1: USB disconnect, device number 2
[  214.882923][ T6077] PKCS8: Unsupported PKCS#8 version
[  215.127835][ T6080] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[  215.445374][ T6083] loop3: detected capacity change from 0 to 512
[  215.454973][ T6083] =======================================================
[  215.454973][ T6083] WARNING: The mand mount option has been deprecated and
[  215.454973][ T6083]          and is ignored by this kernel. Remove the mand
[  215.454973][ T6083]          option from the mount to silence this warning.
[  215.454973][ T6083] =======================================================
[  215.499643][ T6083] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  215.511699][ T6083] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  215.524453][ T6083] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829)
[  215.534538][ T6083] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  215.653391][ T6078] loop4: detected capacity change from 0 to 4096
[  215.847609][ T6078] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  215.909039][ T6090] loop3: detected capacity change from 0 to 64
[  216.944307][ T6094] loop2: detected capacity change from 0 to 4096
[  217.041746][ T6094] NILFS (loop2): invalid segment: Inconsistency found
[  217.049490][ T6094] NILFS (loop2): trying rollback from an earlier position
[  217.152970][ T5873] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  217.178913][ T6094] NILFS (loop2): recovery complete
[  217.204138][ T6107] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  217.353277][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  217.363561][ T5873] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  217.373802][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  217.389521][ T5873] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  217.399763][ T5873] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  217.409279][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.517415][ T6109] loop3: detected capacity change from 0 to 2048
[  217.559603][ T6109] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  217.624024][ T5873] usb 2-1: config 0 descriptor??
[  217.698070][ T6109] syz.3.50: attempt to access beyond end of device
[  217.698070][ T6109] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  217.713295][ T6112] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  217.876925][ T5873] hdpvr 2-1:0.0: firmware version 0x0 dated 
[  217.883711][ T5873] hdpvr 2-1:0.0: untested firmware, the driver might not work.
[  218.082982][ T5873] hdpvr 2-1:0.0: device init failed
[  218.088630][ T5873] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  218.163256][ T5873] usb 2-1: USB disconnect, device number 3
[  218.500032][ T6121] netlink: 32 bytes leftover after parsing attributes in process `syz.0.55'.
[  218.523173][ T6121] Zero length message leads to an empty skb
[  219.030916][ T6128] loop4: detected capacity change from 0 to 8
[  219.267134][ T6132] loop1: detected capacity change from 0 to 256
[  219.323085][ T6132] exfat: Deprecated parameter 'namecase'
[  219.508126][ T6132] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  220.120756][ T6144] netlink: 104 bytes leftover after parsing attributes in process `syz.0.67'.
[  220.214388][ T6138] loop3: detected capacity change from 0 to 4096
[  220.266552][ T6146] loop1: detected capacity change from 0 to 256
[  220.313627][ T6146] exfat: Deprecated parameter 'utf8'
[  220.497216][ T6146] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  221.283393][ T5873] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  221.506298][ T5873] usb 5-1: Using ep0 maxpacket: 8
[  221.550334][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  221.561548][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  221.570980][ T5873] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  221.584490][ T5873] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  221.593904][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.604825][ T5897] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  221.823134][ T5897] usb 3-1: Using ep0 maxpacket: 8
[  221.886221][ T5897] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  221.895968][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.904449][ T5897] usb 3-1: Product: syz
[  221.908337][ T6159] loop0: detected capacity change from 0 to 32768
[  221.908789][ T5897] usb 3-1: Manufacturer: syz
[  221.918893][ T6159] btrfs: Deprecated parameter 'usebackuproot'
[  221.920350][ T5897] usb 3-1: SerialNumber: syz
[  221.926600][ T6159] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  221.961766][ T6159] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.72 (6159)
[  221.997108][ T6159] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  222.007802][ T6159] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  222.016955][ T6159] BTRFS info (device loop0): using free-space-tree
[  222.018721][ T5873] hub 5-1:1.0: bad descriptor, ignoring hub
[  222.023747][ T6159] workqueue: max_active 65524 requested for btrfs-worker is out of range, clamping between 1 and 2048
[  222.026473][ T6159] workqueue: max_active 65524 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[  222.030114][ T5873] hub 5-1:1.0: probe with driver hub failed with error -5
[  222.163470][ T6159] workqueue: max_active 65524 requested for btrfs-endio is out of range, clamping between 1 and 2048
[  222.171426][ T5897] usb 3-1: config 0 descriptor??
[  222.193366][ T6159] workqueue: max_active 65524 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[  222.201294][ T5897] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  222.208033][ T6159] workqueue: max_active 65524 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[  222.213437][ T5897] usb 3-1: setting power ON
[  222.213536][ T5897] dvb-usb: bulk message failed: -22 (2/0)
[  222.245122][ T6159] workqueue: max_active 65524 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[  222.292027][ T6159] workqueue: max_active 65524 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048
[  222.328959][ T5897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  222.401249][ T5897] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  222.410177][ T5897] usb 3-1: media controller created
[  222.428601][ T6160] dvb-usb: bulk message failed: -22 (3/0)
[  222.481140][ T6159] BTRFS info (device loop0): rebuilding free space tree
[  222.605246][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  222.619620][ T5873] usb 5-1: USB disconnect, device number 2
[  222.725122][ T5811] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  222.905067][ T5897] usb 3-1: selecting invalid altsetting 6
[  222.911118][ T5897] usb 3-1: digital interface selection failed (-22)
[  222.918293][ T5897] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  223.113246][ T5897] usb 3-1: setting power OFF
[  223.118040][ T5897] dvb-usb: bulk message failed: -22 (2/0)
[  223.124205][ T5897] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  223.133806][ T5897] (NULL device *): no alternate interface
[  223.243603][ T5873] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  223.578684][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.595123][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  223.606516][ T5873] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  223.619832][ T5873] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  223.629228][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.132181][ T5897] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  224.224851][ T5897] usb 3-1: USB disconnect, device number 2
[  224.293659][ T5873] usb 5-1: can't set config #1, error -71
[  224.324465][ T5873] usb 5-1: USB disconnect, device number 3
[  224.569194][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  224.576088][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  225.664140][ T6203] loop0: detected capacity change from 0 to 32768
[  225.854845][ T6203] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  225.855002][ T6203]   allowing incompatible features above 0.9: (unknown version)
[  225.855091][ T6203]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  225.879030][    C0] vkms_vblank_simulate: vblank timer overrun
[  225.910601][ T6203] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  225.919329][ T6203] bcachefs (loop0): initializing new filesystem
[  225.966492][ T6203] bcachefs (loop0): going read-write
[  226.029195][ T6203] bcachefs (loop0): marking superblocks
[  226.085408][ T6203] bcachefs (loop0): initializing freespace
[  226.113977][ T6203] bcachefs (loop0): done initializing freespace
[  226.134323][ T6203] bcachefs (loop0): reading snapshots table
[  226.146031][ T6203] bcachefs (loop0): reading snapshots done
[  226.278471][ T6203] bcachefs (loop0): done starting filesystem
[  226.323659][ T6225] binder: 6224:6225 ioctl 9362 0 returned -22
[  226.365041][ T6225] binder: 6224:6225 ioctl c0046209 200000000000000 returned -22
[  226.383337][ T6228] loop1: detected capacity change from 0 to 1024
[  226.538762][ T6203] syz.0.85 (6203) used greatest stack depth: 1200 bytes left
[  226.547894][ T5811] bcachefs (loop0): shutting down
[  226.558591][ T5811] bcachefs (loop0): going read-only
[  226.580736][ T5811] bcachefs (loop0): finished waiting for writes to stop
[  226.631977][ T5811] bcachefs (loop0): flushing journal and stopping allocators, journal seq 6
[  226.786620][ T3935] hfsplus: b-tree write err: -5, ino 4
[  226.939689][ T5811] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 9
[  227.091823][ T5811] bcachefs (loop0): clean shutdown complete, journal seq 10
[  227.156179][ T5811] bcachefs (loop0): marking filesystem clean
[  227.410988][ T5811] bcachefs (loop0): shutdown complete
[  227.674409][ T6232] loop3: detected capacity change from 0 to 32768
[  227.687287][ T6232] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  228.438574][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'.
[  228.943285][ T5872] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  229.137539][ T5872] usb 3-1: Using ep0 maxpacket: 32
[  229.174519][ T5872] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  229.183249][ T5872] usb 3-1: config 0 has no interface number 0
[  229.282993][ T5872] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  229.293669][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.301969][ T5872] usb 3-1: Product: syz
[  229.307146][ T5872] usb 3-1: Manufacturer: syz
[  229.311985][ T5872] usb 3-1: SerialNumber: syz
[  229.414921][ T5872] usb 3-1: config 0 descriptor??
[  229.439513][ T5872] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  229.524308][ T6263] loop4: detected capacity change from 0 to 512
[  229.588667][ T6263] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  229.602706][ T6263] EXT4-fs (loop4): can't mount with both data=journal and dax
[  229.683952][ T5872] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  229.729396][ T5872] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  229.913638][ T6267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.113'.
[  230.102449][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  230.114360][ T5872] usb 3-1: USB disconnect, device number 3
[  230.146670][ T5872] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  230.198335][ T5872] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  230.212234][ T5872] quatech2 3-1:0.51: device disconnected
[  231.038383][ T6281] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 1, id = 0
[  231.050927][ T6280] IPVS: stopping master sync thread 6281 ...
[  231.283788][ T5873] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  232.212352][ T6285] loop2: detected capacity change from 0 to 32768
[  232.216781][ T6289] loop3: detected capacity change from 0 to 2048
[  232.242831][ T5873] usb 5-1: Using ep0 maxpacket: 16
[  232.369416][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.380943][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.396145][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0
[  232.406587][ T5873] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  232.420694][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.468976][ T6285] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  232.469130][ T6285]   allowing incompatible features above 0.9: (unknown version)
[  232.469220][ T6285]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  232.522317][ T6285] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  232.531186][ T6285] bcachefs (loop2): initializing new filesystem
[  232.551950][ T6289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.577889][ T6285] bcachefs (loop2): going read-write
[  232.588382][ T5873] usb 5-1: config 0 descriptor??
[  232.610454][ T6285] bcachefs (loop2): marking superblocks
[  232.658512][ T6285] bcachefs (loop2): initializing freespace
[  232.685931][ T6285] bcachefs (loop2): done initializing freespace
[  232.715866][ T6285] bcachefs (loop2): reading snapshots table
[  232.722241][ T6285] bcachefs (loop2): reading snapshots done
[  232.726072][ T6289] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  232.839877][ T6285] bcachefs (loop2): done starting filesystem
[  233.070666][ T5873] apple 0003:05AC:0247.0002: unknown main item tag 0x0
[  233.085308][ T5873] apple 0003:05AC:0247.0002: unknown main item tag 0x0
[  233.094224][ T5873] apple 0003:05AC:0247.0002: unknown main item tag 0x0
[  233.101522][ T5873] apple 0003:05AC:0247.0002: unknown main item tag 0x0
[  233.102163][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.117580][ T5873] apple 0003:05AC:0247.0002: unknown main item tag 0x0
[  233.132429][ T5873] apple 0003:05AC:0247.0002: unknown main item tag 0x0
[  233.140163][ T5873] apple 0003:05AC:0247.0002: unknown main item tag 0x0
[  233.148811][ T5873] apple 0003:05AC:0247.0002: unknown main item tag 0x0
[  233.156126][ T5873] apple 0003:05AC:0247.0002: unknown main item tag 0x0
[  233.163714][ T5873] apple 0003:05AC:0247.0002: unknown main item tag 0x0
[  233.277743][ T5873] apple 0003:05AC:0247.0002: unexpected long global item
[  233.344584][ T5825] bcachefs (loop2): shutting down
[  233.348461][ T5873] apple 0003:05AC:0247.0002: parse failed
[  233.350019][ T5825] bcachefs (loop2): going read-only
[  233.356213][ T5873] apple 0003:05AC:0247.0002: probe with driver apple failed with error -22
[  233.361970][ T5873] usb 5-1: USB disconnect, device number 4
[  233.370774][ T5825] bcachefs (loop2): finished waiting for writes to stop
[  233.480202][ T5825] bcachefs (loop2): flushing journal and stopping allocators, journal seq 5
[  233.740934][ T5825] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 9
[  233.769488][ T5825] bcachefs (loop2): clean shutdown complete, journal seq 10
[  233.778735][ T6316] loop1: detected capacity change from 0 to 64
[  233.791322][ T5825] bcachefs (loop2): marking filesystem clean
[  233.936717][ T5825] bcachefs (loop2): shutdown complete
[  234.126165][ T6318] IPVS: stopping master sync thread 6319 ...
[  234.126242][ T6319] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 1, id = 0
[  235.634247][ T6334] loop1: detected capacity change from 0 to 32768
[  235.784109][ T6334] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  235.784261][ T6334]   allowing incompatible features above 0.9: (unknown version)
[  235.784351][ T6334]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  235.831658][ T6334] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  235.840335][ T6334] bcachefs (loop1): initializing new filesystem
[  235.883954][ T6334] bcachefs (loop1): going read-write
[  235.906661][ T6351] netlink: 'syz.0.141': attribute type 3 has an invalid length.
[  235.914646][ T6351] netlink: 'syz.0.141': attribute type 1 has an invalid length.
[  235.922683][ T6351] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.141'.
[  235.964001][ T6334] bcachefs (loop1): marking superblocks
[  236.016473][ T6334] bcachefs (loop1): initializing freespace
[  236.044558][ T6334] bcachefs (loop1): done initializing freespace
[  236.066805][ T6334] bcachefs (loop1): reading snapshots table
[  236.077653][ T6334] bcachefs (loop1): reading snapshots done
[  236.198369][ T6334] bcachefs (loop1): done starting filesystem
[  236.461719][ T5817] bcachefs (loop1): shutting down
[  236.471123][ T5817] bcachefs (loop1): going read-only
[  236.476782][ T5817] bcachefs (loop1): finished waiting for writes to stop
[  236.516220][ T5817] bcachefs (loop1): flushing journal and stopping allocators, journal seq 7
[  236.653292][ T6361] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 1, id = 0
[  236.675604][ T6360] IPVS: stopping master sync thread 6361 ...
[  236.764836][ T5817] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13
[  236.859184][ T5817] bcachefs (loop1): clean shutdown complete, journal seq 14
[  236.921674][ T5817] bcachefs (loop1): marking filesystem clean
[  237.068242][ T5817] bcachefs (loop1): shutdown complete
[  237.091446][ T6367] loop0: detected capacity change from 0 to 1024
[  237.360042][ T6367] hfsplus: xattr searching failed
[  237.512871][ T5873] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  237.705915][ T5873] usb 5-1: Using ep0 maxpacket: 8
[  237.754798][ T5873] usb 5-1: config 14 has an invalid interface number: 164 but max is 0
[  237.763557][ T5873] usb 5-1: config 14 has no interface number 0
[  237.770174][ T5873] usb 5-1: config 14 interface 164 has no altsetting 0
[  237.854101][ T5873] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=14.aa
[  237.863824][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.872039][ T5873] usb 5-1: Product: syz
[  237.876895][ T5873] usb 5-1: Manufacturer: syz
[  237.881745][ T5873] usb 5-1: SerialNumber: syz
[  238.282092][ T5873] usb 5-1: USB disconnect, device number 5
[  238.440056][ T6382] loop0: detected capacity change from 0 to 512
[  239.325575][ T6386] loop3: detected capacity change from 0 to 32768
[  239.346510][ T6382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  239.363570][ T6382] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.545418][ T6386] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  239.545574][ T6386]   allowing incompatible features above 0.9: (unknown version)
[  239.545663][ T6386]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  239.570111][    C1] vkms_vblank_simulate: vblank timer overrun
[  239.606427][ T6386] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  239.615318][ T6386] bcachefs (loop3): initializing new filesystem
[  239.654621][ T6386] bcachefs (loop3): going read-write
[  239.693544][ T6386] bcachefs (loop3): marking superblocks
[  239.743360][ T6386] bcachefs (loop3): initializing freespace
[  239.779627][ T6386] bcachefs (loop3): done initializing freespace
[  239.800424][ T6386] bcachefs (loop3): reading snapshots table
[  239.807001][ T6386] bcachefs (loop3): reading snapshots done
[  239.905073][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  239.927042][ T6386] bcachefs (loop3): done starting filesystem
[  240.139746][ T5822] bcachefs (loop3): shutting down
[  240.146314][ T5822] bcachefs (loop3): going read-only
[  240.151714][ T5822] bcachefs (loop3): finished waiting for writes to stop
[  240.255943][ T5822] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4
[  240.516789][ T5822] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 9
[  240.587679][ T5822] bcachefs (loop3): clean shutdown complete, journal seq 10
[  240.609318][ T5822] bcachefs (loop3): marking filesystem clean
[  240.748020][ T5822] bcachefs (loop3): shutdown complete
[  240.874559][ T6412] loop0: detected capacity change from 0 to 4096
[  240.937726][ T6412] ntfs3(loop0): It is recommened to use chkdsk.
[  240.971986][ T6412] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[  240.980502][ T6412] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[  240.994690][ T6412] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[  241.004950][ T6412] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[  241.013316][ T6412] ntfs3(loop0): try to read out of volume at offset 0x3fffffc1c00
[  241.021543][ T6412] ntfs3(loop0): try to read out of volume at offset 0x3fffffc2c00
[  241.030857][ T6412] ntfs3(loop0): try to read out of volume at offset 0x3fffffc4c00
[  241.039208][ T6412] ntfs3(loop0): try to read out of volume at offset 0x3fffffc8c00
[  241.047697][ T6412] ntfs3(loop0): try to read out of volume at offset 0x3fffffd0c00
[  241.250834][ T6421] capability: warning: `syz.1.145' uses deprecated v2 capabilities in a way that may be insecure
[  241.309483][ T6422] loop4: detected capacity change from 0 to 128
[  241.357458][ T6422] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  241.698314][ T3834] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  242.981992][ T6433] loop4: detected capacity change from 0 to 32768
[  243.002190][ T6433] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  243.011085][ T6433] gfs2: fsid=syz:syz: Now mounting FS (format 1802)...
[  243.025814][ T6433] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 463
[  243.044649][ T6433] gfs2: fsid=syz:syz.s: G:  s:SH n:2/13 f:aqobnN t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[  243.055580][ T6433] gfs2: fsid=syz:syz.s:  H: s:SH f:eEcH e:0 p:6433 [syz.4.171] init_journal+0x332e/0x3a30
[  243.065883][ T6433] gfs2: fsid=syz:syz.s:  I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[  243.074689][ T6433] gfs2: fsid=syz:syz.s: about to withdraw this file system
[  243.082105][ T6433] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount.
[  243.091121][ T6433] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0
[  243.098232][ T6433] gfs2: fsid=syz:syz.s: File system withdrawn
[  243.104697][ T6433] CPU: 0 UID: 0 PID: 6433 Comm: syz.4.171 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(none) 
[  243.104851][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  243.104944][ T6433] Call Trace:
[  243.105005][ T6433]  <TASK>
[  243.105056][ T6433]  __dump_stack+0x26/0x30
[  243.105243][ T6433]  dump_stack_lvl+0x1df/0x270
[  243.105429][ T6433]  dump_stack+0x1e/0x25
[  243.105592][ T6433]  gfs2_withdraw+0x1182/0x2050
[  243.105878][ T6433]  gfs2_consist_inode_i+0x1b2/0x250
[  243.106092][ T6433]  inode_go_instantiate+0x12f9/0x1e90
[  243.106310][ T6433]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  243.106482][ T6433]  ? __pfx_inode_go_instantiate+0x10/0x10
[  243.106680][ T6433]  gfs2_instantiate+0x24c/0x4b0
[  243.106835][ T6433]  gfs2_glock_wait+0x26a/0x3b0
[  243.106992][ T6433]  gfs2_glock_nq+0x28cf/0x34a0
[  243.107185][ T6433]  check_journal_clean+0xc1/0x4c0
[  243.107376][ T6433]  ? init_journal+0x332e/0x3a30
[  243.107506][ T6433]  ? kmsan_get_metadata+0xfb/0x160
[  243.107670][ T6433]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  243.107844][ T6433]  init_journal+0x332e/0x3a30
[  243.108008][ T6433]  ? init_inodes+0x124/0x510
[  243.108197][ T6433]  ? init_inodes+0x124/0x510
[  243.108376][ T6433]  ? kmsan_get_metadata+0xfb/0x160
[  243.108533][ T6433]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  243.108712][ T6433]  init_inodes+0x124/0x510
[  243.108908][ T6433]  gfs2_fill_super+0x384d/0x3f50
[  243.109103][ T6433]  ? init_locking+0xed/0x500
[  243.109327][ T6433]  get_tree_bdev_flags+0x6e6/0x920
[  243.109502][ T6433]  ? __pfx_gfs2_fill_super+0x10/0x10
[  243.109699][ T6433]  ? __pfx_gfs2_fill_super+0x10/0x10
[  243.109884][ T6433]  ? __pfx_gfs2_get_tree+0x10/0x10
[  243.110070][ T6433]  get_tree_bdev+0x38/0x50
[  243.110232][ T6433]  gfs2_get_tree+0x57/0x350
[  243.110422][ T6433]  ? __pfx_gfs2_get_tree+0x10/0x10
[  243.110632][ T6433]  vfs_get_tree+0xb3/0x5c0
[  243.110804][ T6433]  ? mount_capable+0x99/0x100
[  243.110954][ T6433]  do_new_mount+0x733/0x1420
[  243.111115][ T6433]  ? apparmor_capable+0x32d/0x410
[  243.111294][ T6433]  ? kmsan_get_metadata+0xfb/0x160
[  243.111481][ T6433]  path_mount+0x6db/0x1e90
[  243.111656][ T6433]  ? user_path_at+0x32d/0x3d0
[  243.111815][ T6433]  __se_sys_mount+0x6eb/0x7d0
[  243.111984][ T6433]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  243.112222][ T6433]  __x64_sys_mount+0xe4/0x150
[  243.112407][ T6433]  x64_sys_call+0x3604/0x3e20
[  243.112595][ T6433]  do_syscall_64+0xd9/0x210
[  243.112774][ T6433]  ? irqentry_exit+0x16/0x60
[  243.112923][ T6433]  ? clear_bhb_loop+0x40/0x90
[  243.113080][ T6433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.113229][ T6433] RIP: 0033:0x7effb299038a
[  243.113340][ T6433] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.113453][ T6433] RSP: 002b:00007effb38bae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  243.113586][ T6433] RAX: ffffffffffffffda RBX: 00007effb38baef0 RCX: 00007effb299038a
[  243.113687][ T6433] RDX: 0000200000000180 RSI: 0000200000012500 RDI: 00007effb38baeb0
[  243.113781][ T6433] RBP: 0000200000000180 R08: 00007effb38baef0 R09: 0000000000200001
[  243.113872][ T6433] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500
[  243.113958][ T6433] R13: 00007effb38baeb0 R14: 00000000000125bc R15: 0000200000000440
[  243.114080][ T6433]  </TASK>
[  243.447957][ T6433] gfs2: fsid=syz:syz.s: Error -5 locking journal for spectator mount.
[  244.490375][ T6445] loop1: detected capacity change from 0 to 512
[  244.585542][ T6445] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  244.769799][ T6439] loop4: detected capacity change from 0 to 32768
[  244.856247][ T6444] loop0: detected capacity change from 0 to 4096
[  244.919446][ T6444] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  245.023501][ T6439] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  245.023665][ T6439]   allowing incompatible features above 0.9: (unknown version)
[  245.023755][ T6439]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  245.070962][ T6439] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  245.079493][ T6439] bcachefs (loop4): initializing new filesystem
[  245.122608][ T6439] bcachefs (loop4): going read-write
[  245.162324][ T6439] bcachefs (loop4): marking superblocks
[  245.215400][ T6439] bcachefs (loop4): initializing freespace
[  245.243144][ T6439] bcachefs (loop4): done initializing freespace
[  245.263225][ T6439] bcachefs (loop4): reading snapshots table
[  245.269644][ T6439] bcachefs (loop4): reading snapshots done
[  245.342965][ T6439] bcachefs (loop4): done starting filesystem
[  245.411778][ T6444] ntfs3(loop0): ino=1a, mi_enum_attr
[  245.417702][ T6444] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  245.580495][ T6459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  245.734212][ T5812] bcachefs (loop4): shutting down
[  245.739464][ T5812] bcachefs (loop4): going read-only
[  245.745306][ T5812] bcachefs (loop4): finished waiting for writes to stop
[  245.819902][ T5812] bcachefs (loop4): flushing journal and stopping allocators, journal seq 7
[  246.061001][ T5812] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 12
[  246.088318][ T5092] ntfs3(loop0): ino=1e, ntfs3_write_inode failed, -22.
[  246.138181][ T5812] bcachefs (loop4): clean shutdown complete, journal seq 13
[  246.184128][ T5812] bcachefs (loop4): marking filesystem clean
[  246.237303][ T6464] loop2: detected capacity change from 0 to 512
[  246.339554][ T6464] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  246.355904][ T5812] bcachefs (loop4): shutdown complete
[  246.491153][ T6464] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  246.553603][ T6464] EXT4-fs error (device loop2): ext4_orphan_get:1392: comm syz.2.181: inode #15: comm syz.2.181: iget: illegal inode #
[  246.687272][ T6469] loop3: detected capacity change from 0 to 4096
[  246.712673][ T6469] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  246.713974][ T6464] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.181: couldn't read orphan inode 15 (err -117)
[  246.759511][ T6464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.874331][ T6469] ntfs3(loop3): This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver).
[  246.874331][ T6469] Volume contains 64 bits run: vcn 0, lcn ffffe00000009000, len 13.
[  246.874331][ T6469] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case
[  246.900531][ T6469] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  246.911280][ T6469] ntfs3(loop3): Failed to load $Secure (-95).
[  246.917819][ T6469] ntfs3(loop3): Failed to initialize $Secure (-95).
[  247.550428][ T6474] loop1: detected capacity change from 0 to 32768
[  247.621717][ T6474] OCFS2: ERROR (device loop1): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 66 has bad extent record (0, 1, 0)
[  247.643526][ T6474] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  247.661651][ T6474] OCFS2: File system is now read-only.
[  247.667556][ T6474] (syz.1.185,6474,1):ocfs2_get_clusters:634 ERROR: status = -30
[  247.675734][ T6474] (syz.1.185,6474,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30
[  247.684642][ T6474] (syz.1.185,6474,1):ocfs2_read_virt_blocks:997 ERROR: status = -30
[  247.692991][ T6474] (syz.1.185,6474,1):ocfs2_read_dir_block:511 ERROR: status = -30
[  247.701370][ T6474] (syz.1.185,6474,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  247.710587][ T6474] (syz.1.185,6474,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  247.710761][ T6474] (syz.1.185,6474,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  247.732340][ T6474] (syz.1.185,6474,1):ocfs2_initialize_super:2198 ERROR: status = -30
[  247.735656][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.741465][ T6474] (syz.1.185,6474,1):ocfs2_fill_super:1177 ERROR: status = -30
[  249.519093][ T6487] loop3: detected capacity change from 0 to 32768
[  249.669822][ T6487] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  249.669979][ T6487]   allowing incompatible features above 0.9: (unknown version)
[  249.670068][ T6487]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  249.723497][ T6487] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  249.731902][ T6487] bcachefs (loop3): initializing new filesystem
[  249.772156][ T6487] bcachefs (loop3): going read-write
[  249.781723][ T6495] netlink: 124 bytes leftover after parsing attributes in process `syz.0.196'.
[  249.835430][ T6487] bcachefs (loop3): marking superblocks
[  249.888408][ T6487] bcachefs (loop3): initializing freespace
[  249.922985][ T6487] bcachefs (loop3): done initializing freespace
[  249.949695][ T6487] bcachefs (loop3): reading snapshots table
[  249.956204][ T6487] bcachefs (loop3): reading snapshots done
[  250.134544][ T6487] bcachefs (loop3): done starting filesystem
[  250.378699][ T5822] bcachefs (loop3): shutting down
[  250.384927][ T5822] bcachefs (loop3): going read-only
[  250.390418][ T5822] bcachefs (loop3): finished waiting for writes to stop
[  250.447722][ T5822] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  250.676097][ T5822] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 6
[  250.762919][ T5822] bcachefs (loop3): clean shutdown complete, journal seq 7
[  250.772146][ T5822] bcachefs (loop3): marking filesystem clean
[  250.933690][ T5822] bcachefs (loop3): shutdown complete
[  251.431146][ T6522] loop1: detected capacity change from 0 to 512
[  251.675107][ T6522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.688390][ T6522] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  251.961761][ T6536] loop2: detected capacity change from 0 to 256
[  251.993581][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.111712][ T6541] loop1: detected capacity change from 0 to 32768
[  253.255695][ T6541] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  253.255848][ T6541]   allowing incompatible features above 0.9: (unknown version)
[  253.255936][ T6541]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  253.310747][ T6541] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  253.319286][ T6541] bcachefs (loop1): initializing new filesystem
[  253.359573][ T6541] bcachefs (loop1): going read-write
[  253.388639][ T6541] bcachefs (loop1): marking superblocks
[  253.435411][ T6541] bcachefs (loop1): initializing freespace
[  253.462212][ T6541] bcachefs (loop1): done initializing freespace
[  253.488974][ T6541] bcachefs (loop1): reading snapshots table
[  253.497380][ T6541] bcachefs (loop1): reading snapshots done
[  253.581894][ T6541] bcachefs (loop1): done starting filesystem
[  253.799610][ T5817] bcachefs (loop1): shutting down
[  253.805692][ T5817] bcachefs (loop1): going read-only
[  253.811093][ T5817] bcachefs (loop1): finished waiting for writes to stop
[  253.847250][ T5817] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4
[  254.159811][ T6567] loop0: detected capacity change from 0 to 128
[  254.173567][ T5817] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 8
[  254.219591][ T5817] bcachefs (loop1): clean shutdown complete, journal seq 9
[  254.234899][ T5817] bcachefs (loop1): marking filesystem clean
[  254.343183][ T5817] bcachefs (loop1): shutdown complete
[  254.411666][ T6570] loop2: detected capacity change from 0 to 1024
[  254.849396][ T6576] loop4: detected capacity change from 0 to 128
[  254.901977][ T5092] hfsplus: b-tree write err: -5, ino 4
[  254.965857][ T6576] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  255.063677][ T6576] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.165262][ T6576] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.223: No space for directory leaf checksum. Please run e2fsck -D.
[  255.181989][ T6576] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.223: Directory block failed checksum
[  255.482773][ T5812] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  255.592842][ T5872] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  255.680909][ T6586] loop2: detected capacity change from 0 to 1024
[  255.786584][ T5872] usb 4-1: Using ep0 maxpacket: 16
[  255.796573][ T6586] hfsplus: bad catalog entry type
[  255.815581][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.826007][ T5872] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  255.839730][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.909394][ T5872] usb 4-1: config 0 descriptor??
[  256.118390][ T3935] hfsplus: b-tree write err: -5, ino 4
[  256.439604][ T5872] hid_parser_main: 839 callbacks suppressed
[  256.439710][ T5872] uclogic 0003:5543:0064.0003: unknown main item tag 0x0
[  256.459666][ T5872] uclogic 0003:5543:0064.0003: unknown main item tag 0x0
[  256.468899][ T5872] uclogic 0003:5543:0064.0003: unknown main item tag 0x0
[  256.476357][ T5872] uclogic 0003:5543:0064.0003: unknown main item tag 0x0
[  256.483967][ T5872] uclogic 0003:5543:0064.0003: unknown main item tag 0x0
[  256.491321][ T5872] uclogic 0003:5543:0064.0003: unknown main item tag 0x0
[  256.498998][ T5872] uclogic 0003:5543:0064.0003: unknown main item tag 0x0
[  256.967307][ T5872] uclogic 0003:5543:0064.0003: hidraw0: USB HID v10.00 Device [HID 5543:0064] on usb-dummy_hcd.3-1/input0
[  257.034465][ T6594] loop4: detected capacity change from 0 to 32768
[  257.084294][ T5872] usb 4-1: USB disconnect, device number 3
[  257.246854][ T6594] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  257.247006][ T6594]   allowing incompatible features above 0.9: (unknown version)
[  257.247093][ T6594]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  257.302775][ T6594] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  257.311162][ T6594] bcachefs (loop4): initializing new filesystem
[  257.349341][ T6594] bcachefs (loop4): going read-write
[  257.381010][ T6594] bcachefs (loop4): marking superblocks
[  257.429159][ T6594] bcachefs (loop4): initializing freespace
[  257.456578][ T6594] bcachefs (loop4): done initializing freespace
[  257.486799][ T6594] bcachefs (loop4): reading snapshots table
[  257.493305][ T6594] bcachefs (loop4): reading snapshots done
[  257.606835][ T6594] bcachefs (loop4): done starting filesystem
[  257.630880][ T6612] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  257.830488][ T6614] loop3: detected capacity change from 0 to 4096
[  257.961786][ T6614] NILFS (loop3): invalid segment: Checksum error in segment payload
[  257.970389][ T6614] NILFS (loop3): trying rollback from an earlier position
[  257.983363][ T5812] bcachefs (loop4): shutting down
[  257.993558][ T5812] bcachefs (loop4): going read-only
[  257.998960][ T5812] bcachefs (loop4): finished waiting for writes to stop
[  258.036359][ T5812] bcachefs (loop4): flushing journal and stopping allocators, journal seq 9
[  258.101362][ T6614] NILFS (loop3): recovery complete
[  258.119579][ T6618] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  258.138185][ T6617] loop2: detected capacity change from 0 to 512
[  258.150631][ T6617] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  258.217647][ T6617] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002]
[  258.273471][ T6617] System zones: 1-12
[  258.334162][ T6617] EXT4-fs (loop2): 1 truncate cleaned up
[  258.342012][ T6617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.358238][ T5812] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13
[  258.408817][ T5812] bcachefs (loop4): clean shutdown complete, journal seq 14
[  258.483848][ T5812] bcachefs (loop4): marking filesystem clean
[  258.523865][ T6617] EXT4-fs warning (device loop2): ext4_group_extend:1862: can't shrink FS - resize aborted
[  258.659018][ T5812] bcachefs (loop4): shutdown complete
[  258.760638][ T6623] sp0: Synchronizing with TNC
[  258.860408][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.645934][ T6642] loop2: detected capacity change from 0 to 32768
[  260.845458][ T6642] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  260.845610][ T6642]   allowing incompatible features above 0.9: (unknown version)
[  260.845697][ T6642]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  260.897020][ T6642] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  260.905553][ T6642] bcachefs (loop2): initializing new filesystem
[  260.942776][ T6642] bcachefs (loop2): going read-write
[  260.982726][ T6642] bcachefs (loop2): marking superblocks
[  261.036065][ T6642] bcachefs (loop2): initializing freespace
[  261.070735][ T6642] bcachefs (loop2): done initializing freespace
[  261.092332][ T6642] bcachefs (loop2): reading snapshots table
[  261.098778][ T6642] bcachefs (loop2): reading snapshots done
[  261.151502][ T6642] bcachefs (loop2): done starting filesystem
[  261.440514][ T5825] bcachefs (loop2): shutting down
[  261.445955][ T5825] bcachefs (loop2): going read-only
[  261.451440][ T5825] bcachefs (loop2): finished waiting for writes to stop
[  261.487192][ T5825] bcachefs (loop2): flushing journal and stopping allocators, journal seq 9
[  261.825148][ T5825] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 16
[  261.847451][ T5825] bcachefs (loop2): clean shutdown complete, journal seq 17
[  261.857614][ T5825] bcachefs (loop2): marking filesystem clean
[  261.904790][ T5825] bcachefs (loop2): shutdown complete
[  262.272291][   T30] audit: type=1400 audit(1755047570.092:3): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6673 comm="syz.1.258"
[  262.311234][ T5872] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  262.463620][ T5873] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  262.512917][ T5872] usb 1-1: Using ep0 maxpacket: 8
[  262.553461][ T5872] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  262.563010][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.602376][ T5872] usb 1-1: config 0 descriptor??
[  262.653817][ T5873] usb 4-1: Using ep0 maxpacket: 8
[  262.709462][ T5873] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  262.719135][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.727582][ T5873] usb 4-1: Product: syz
[  262.731925][ T5873] usb 4-1: Manufacturer: syz
[  262.737023][ T5873] usb 4-1: SerialNumber: syz
[  262.770672][ T5873] usb 4-1: config 0 descriptor??
[  262.837844][ T5873] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  262.846321][ T5873] usb 4-1: setting power ON
[  262.851087][ T5873] dvb-usb: bulk message failed: -22 (2/0)
[  262.933555][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  262.966801][ T5873] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  262.976170][ T5873] usb 4-1: media controller created
[  263.024180][ T6672] dvb-usb: bulk message failed: -22 (3/0)
[  263.051381][ T5872] uclogic 0003:145F:0212.0004: interface is invalid, ignoring
[  263.100521][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  263.253255][ T5897] usb 1-1: USB disconnect, device number 2
[  263.269857][ T6678] loop4: detected capacity change from 0 to 2048
[  263.307141][ T5873] usb 4-1: selecting invalid altsetting 6
[  263.322854][ T5873] usb 4-1: digital interface selection failed (-22)
[  263.329685][ T5873] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  263.349777][ T6678] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  263.370556][ T5873] usb 4-1: setting power OFF
[  263.375589][ T5873] dvb-usb: bulk message failed: -22 (2/0)
[  263.381652][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  263.391519][ T5873] (NULL device *): no alternate interface
[  263.461364][ T6682] loop1: detected capacity change from 0 to 16
[  263.479910][ T6682] erofs (device loop1): EXPERIMENTAL 48-bit layout support in use. Use at your own risk!
[  263.485507][ T6678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  263.492053][ T6682] erofs (device loop1): mounted with root inode @ nid 36.
[  263.569743][ T6682] syz.1.261: attempt to access beyond end of device
[  263.569743][ T6682] loop1: rw=0, sector=15300821024, nr_sectors = 8 limit=16
[  263.586133][ T6682] erofs (device loop1): read error -5 @ 72 of nid 36
[  263.692685][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  263.719275][ T5873] usb 4-1: USB disconnect, device number 4
[  264.127796][ T6686] overlay: Unknown parameter 'smackfstransmute'
[  265.019054][ T6689] loop4: detected capacity change from 0 to 32768
[  265.189897][ T6689] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  265.190052][ T6689]   allowing incompatible features above 0.9: (unknown version)
[  265.190140][ T6689]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  265.237104][ T6689] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  265.245843][ T6689] bcachefs (loop4): initializing new filesystem
[  265.289737][ T6689] bcachefs (loop4): going read-write
[  265.345845][ T6689] bcachefs (loop4): marking superblocks
[  265.399904][ T6689] bcachefs (loop4): initializing freespace
[  265.427046][ T6689] bcachefs (loop4): done initializing freespace
[  265.446679][ T6689] bcachefs (loop4): reading snapshots table
[  265.453218][ T6689] bcachefs (loop4): reading snapshots done
[  265.579636][ T6689] bcachefs (loop4): done starting filesystem
[  265.820602][ T5812] bcachefs (loop4): shutting down
[  265.826229][ T5812] bcachefs (loop4): going read-only
[  265.849176][ T5812] bcachefs (loop4): finished waiting for writes to stop
[  265.883940][ T5812] bcachefs (loop4): flushing journal and stopping allocators, journal seq 5
[  266.065492][ T6715] loop1: detected capacity change from 0 to 4096
[  266.137470][ T6715] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  266.309746][ T5812] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 12
[  266.359575][ T5812] bcachefs (loop4): clean shutdown complete, journal seq 13
[  266.376884][ T5812] bcachefs (loop4): marking filesystem clean
[  266.481707][ T5812] bcachefs (loop4): shutdown complete
[  266.543758][ T6715] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  266.573562][ T6715] ntfs3(loop1): Failed to load $Extend (-22).
[  266.579862][ T6715] ntfs3(loop1): Failed to initialize $Extend.
[  266.924974][ T6728] loop3: detected capacity change from 0 to 512
[  267.005365][ T6728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.018949][ T6728] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  267.106624][ T5873] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  267.310155][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.314696][ T5873] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  267.330764][ T5873] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  267.341078][ T5873] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  267.350685][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.465883][ T6727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  267.503337][ T5873] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  267.842779][ T5873] usb 3-1: USB disconnect, device number 4
[  268.881231][ T6754] loop0: detected capacity change from 0 to 2048
[  268.990023][ T6754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.003560][ T6754] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.223305][ T5873] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  269.413904][ T5873] usb 2-1: Using ep0 maxpacket: 8
[  269.444035][ T5873] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[  269.452639][ T5873] usb 2-1: config 2 has no interface number 0
[  269.463861][ T5873] usb 2-1: config 2 interface 31 has no altsetting 0
[  269.479506][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.546155][ T5873] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  269.555795][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.569054][ T5873] usb 2-1: Product: syz
[  269.575169][ T5873] usb 2-1: Manufacturer: syz
[  269.580047][ T5873] usb 2-1: SerialNumber: syz
[  269.955322][ T6770] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  270.271958][ T6765] loop3: detected capacity change from 0 to 8192
[  270.316045][ T5873] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22
[  270.350515][ T6765] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  270.397580][ T5873] usb 2-1: USB disconnect, device number 4
[  270.429958][   T30] audit: type=1800 audit(1755047578.252:4): pid=6765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.291" name="file2" dev="loop3" ino=1048608 res=0 errno=0
[  270.434159][ T6765] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  270.460260][ T6765] FAT-fs (loop3): Filesystem has been set read-only
[  270.814481][ T5873] IPVS: starting estimator thread 0...
[  270.912923][ T6781] IPVS: using max 192 ests per chain, 9600 per kthread
[  271.335645][ T6788] loop2: detected capacity change from 0 to 512
[  271.831407][ T6797] ALSA: mixer_oss: invalid OSS volume ''
[  272.721833][ T6813] loop3: detected capacity change from 0 to 1024
[  272.759009][ T6814] loop1: detected capacity change from 0 to 2048
[  272.812572][ T6813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  272.825662][ T6813] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.884621][ T6814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.929778][   T30] audit: type=1800 audit(1755047580.732:5): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.314" name="file1" dev="loop3" ino=15 res=0 errno=0
[  273.112769][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  273.277488][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.651072][ T6836] loop1: detected capacity change from 0 to 1024
[  273.721820][ T6836] EXT4-fs: inline encryption not supported
[  273.728836][ T6836] EXT4-fs: Ignoring removed i_version option
[  273.776664][ T5872] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  273.825751][ T6836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.975062][ T5872] usb 3-1: Using ep0 maxpacket: 32
[  274.008869][ T5872] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.019218][ T5872] usb 3-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  274.031472][ T5872] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  274.042849][ T5872] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0
[  274.053178][ T5872] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  274.070136][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0
[  274.078180][ T5872] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  274.087709][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.135092][ T5872] usb 3-1: config 0 descriptor??
[  274.203602][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.540385][ T6851] vivid-003: disconnect
[  274.594230][ T6850] vivid-003: reconnect
[  274.610091][ T5872] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0
[  274.618489][ T5872] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0
[  274.629384][ T5872] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0
[  274.638279][ T5872] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0
[  274.646521][ T5872] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0
[  274.729802][ T5872] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0
[  274.743178][ T5872] hid-thrustmaster 0003:044F:B65D.0005: setup data couldn't be sent
[  274.829675][    C0] hid-thrustmaster 0003:044F:B65D.0005: URB to get model id failed with error -71
[  274.842044][ T5872] usb 3-1: USB disconnect, device number 5
[  275.257539][ T6863] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  275.264477][ T6863] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  275.275812][ T6863] vhci_hcd vhci_hcd.0: Device attached
[  275.452897][ T5872] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  275.557701][ T5873] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  275.656358][ T5865] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  275.689224][ T5872] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  275.698093][ T5872] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  275.710684][ T5872] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config
[  275.722538][ T5872] usb 5-1: config 220 has no interface number 2
[  275.729146][ T5872] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  275.743423][ T5872] usb 5-1: config 220 interface 0 has no altsetting 0
[  275.750456][ T5872] usb 5-1: config 220 interface 76 has no altsetting 0
[  275.757700][ T5872] usb 5-1: config 220 interface 1 has no altsetting 0
[  275.837704][ T6871] loop3: detected capacity change from 0 to 2048
[  275.885639][ T5872] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  275.895240][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.903748][ T5872] usb 5-1: Product: syz
[  275.911324][ T5872] usb 5-1: Manufacturer: syz
[  275.917348][ T5872] usb 5-1: SerialNumber: syz
[  275.952991][ T5865] usb 1-1: Using ep0 maxpacket: 16
[  275.965279][ T5865] usb 1-1: config 0 has no interfaces?
[  275.971128][ T5865] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  275.980800][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.059051][ T5865] usb 1-1: config 0 descriptor??
[  276.086954][ T6876] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  276.265212][ T5872] usb 5-1: selecting invalid altsetting 0
[  276.271965][ T5872] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  276.278803][ T5872] usb 5-1: No valid video chain found.
[  276.304207][ T6865] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1
[  276.312059][ T5865] usb 1-1: USB disconnect, device number 3
[  276.322126][ T3935] vhci_hcd: stop threads
[  276.329711][ T3935] vhci_hcd: release socket
[  276.335378][ T3935] vhci_hcd: disconnect device
[  276.409922][ T5872] usb 5-1: selecting invalid altsetting 0
[  276.416191][ T5872] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  276.450346][ T5872] usb 5-1: USB disconnect, device number 6
[  277.592396][ T6895] loop1: detected capacity change from 0 to 1024
[  277.926475][ T6888] loop2: detected capacity change from 0 to 32768
[  277.940593][ T6888] (syz.2.343,6888,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  277.967783][ T6888] (syz.2.343,6888,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  278.032952][ T6900] loop3: detected capacity change from 0 to 1024
[  278.088589][ T6888] JBD2: Ignoring recovery information on journal
[  278.284046][ T6888] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  278.321098][ T6888] (syz.2.343,6888,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  278.380784][ T3834] hfsplus: b-tree write err: -5, ino 4
[  278.558042][ T5825] ocfs2: Unmounting device (7,2) on (node local)
[  278.892112][ T6908] loop1: detected capacity change from 0 to 512
[  278.966666][ T6908] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.351: bg 0: block 5: invalid block bitmap
[  279.044236][ T6908] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  279.071858][ T6908] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.351: invalid indirect mapped block 3 (level 2)
[  279.101939][ T6908] EXT4-fs (loop1): 2 truncates cleaned up
[  279.110126][ T6908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.318715][ T6908] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.1.351: path /67/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  279.690925][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.707181][ T5873] vhci_hcd: vhci_device speed not set
[  280.829648][ T6939] netlink: 'syz.0.365': attribute type 32 has an invalid length.
[  280.837790][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'.
[  280.847755][ T6939] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  281.105799][ T6944] loop3: detected capacity change from 0 to 1024
[  281.347032][ T6951] loop4: detected capacity change from 0 to 256
[  281.468545][ T6951] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  281.486216][ T6951] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  281.518217][ T1147] hfsplus: b-tree write err: -5, ino 4
[  282.723198][ T6970] tipc: Started in network mode
[  282.728495][ T6970] tipc: Node identity 010000000000000001, cluster identity 4711
[  283.681076][ T6973] loop0: detected capacity change from 0 to 32768
[  283.731495][ T6973] Mount JFS Failure: -5
[  283.736074][ T6973] jfs_mount failed w/return code = -5
[  285.521516][ T6992] loop1: detected capacity change from 0 to 32768
[  286.042087][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  286.053277][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  286.290866][ T7009] Bluetooth: MGMT ver 1.23
[  286.366237][ T5873] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  286.592828][ T5873] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  286.601062][ T5873] usb 4-1: config 0 has no interface number 0
[  286.610402][ T5873] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  286.619966][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.641050][ T5873] usb 4-1: config 0 descriptor??
[  286.669469][ T5873] usb 4-1: selecting invalid altsetting 1
[  286.680699][ T5873] dvb_ttusb_budget: ttusb_init_controller: error
[  286.687555][ T5873] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  286.809515][ T7017] loop2: detected capacity change from 0 to 256
[  286.958800][ T7017] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d)
[  287.003025][ T7021] Bluetooth: MGMT ver 1.23
[  287.040382][ T7017] exFAT-fs (loop2): error, data size is invalid(150994954)
[  287.048215][ T7017] exFAT-fs (loop2): Filesystem has been set read-only
[  287.078474][ T5873] DVB: Unable to find symbol cx22700_attach()
[  287.121603][ T7017] exFAT-fs (loop2): error, data size is invalid(150994954)
[  287.409540][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'.
[  287.473476][ T5873] DVB: Unable to find symbol tda10046_attach()
[  287.487252][ T5873] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  287.574257][ T5873] usb 4-1: USB disconnect, device number 5
[  287.602156][ T7028] loop0: detected capacity change from 0 to 1024
[  287.679195][ T7028] EXT4-fs: Ignoring removed oldalloc option
[  287.689260][ T7028] EXT4-fs: Ignoring removed bh option
[  287.830294][ T7028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.059123][ T7028] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 16: block 145:freeing already freed block (bit 9); block bitmap corrupt.
[  288.313271][ T5820] Bluetooth: hci2: command 0x0401 tx timeout
[  288.323119][ T5816] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  288.439930][ T7043] loop2: detected capacity change from 0 to 512
[  288.457837][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.480476][ T7043] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  288.615835][ T7043] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  288.627071][ T7043] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  288.637647][ T7043] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.413: Failed to acquire dquot type 1
[  288.770907][ T7043] EXT4-fs (loop2): 1 truncate cleaned up
[  288.779751][ T7043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.086358][ T7059] loop1: detected capacity change from 0 to 512
[  289.110788][ T7059] EXT4-fs: inline encryption not supported
[  289.121200][ T7059] EXT4-fs: Ignoring removed mblk_io_submit option
[  289.183484][ T7059] EXT4-fs (loop1): Test dummy encryption mode enabled
[  289.211572][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.237620][ T7059] EXT4-fs (loop1): orphan cleanup on readonly fs
[  289.268514][ T7059] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.419: inode #13: comm syz.1.419: iget: illegal inode #
[  289.313887][ T7059] EXT4-fs (loop1): Remounting filesystem read-only
[  289.328564][ T7059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  289.554730][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.667894][ T5873] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  289.727135][ T7070] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  289.875567][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.889157][ T5873] usb 5-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00
[  289.895058][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'.
[  289.898764][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.907749][ T7075] netlink: 'syz.0.426': attribute type 30 has an invalid length.
[  289.907836][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'.
[  290.118575][ T5873] usb 5-1: config 0 descriptor??
[  290.598336][ T5873] thrustmaster 0003:044F:B300.0006: unbalanced delimiter at end of report description
[  290.670673][ T5873] thrustmaster 0003:044F:B300.0006: parse failed
[  290.677641][ T5873] thrustmaster 0003:044F:B300.0006: probe with driver thrustmaster failed with error -22
[  290.793302][ T5865] usb 5-1: USB disconnect, device number 7
[  291.319942][ T7100] netlink: 56 bytes leftover after parsing attributes in process `syz.3.438'.
[  291.797883][ T7110] process 'syz.1.442' launched './file1' with NULL argv: empty string added
[  291.833619][ T7112] loop3: detected capacity change from 0 to 512
[  291.860782][ T7112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  291.951394][ T7112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.967534][ T7112] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.135189][ T7112] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.444: corrupted xattr block 19: overlapping e_value 
[  292.180466][ T7112] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.444: corrupted xattr block 19: overlapping e_value 
[  292.434387][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.796469][ T7127] loop4: detected capacity change from 0 to 256
[  292.799387][ T7127] exfat: Deprecated parameter 'utf8'
[  292.919793][ T7127] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  293.371858][ T7140] loop1: detected capacity change from 0 to 64
[  293.387686][ T7139] netlink: 104 bytes leftover after parsing attributes in process `syz.3.456'.
[  293.992330][   T30] audit: type=1326 audit(1755047601.812:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfba78ebe9 code=0x7ffc0000
[  294.122749][   T30] audit: type=1326 audit(1755047601.862:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfba78ebe9 code=0x7ffc0000
[  294.153709][   T30] audit: type=1326 audit(1755047601.862:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fcfba78ebe9 code=0x7ffc0000
[  294.181440][   T30] audit: type=1326 audit(1755047601.862:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfba78ebe9 code=0x7ffc0000
[  294.209872][   T30] audit: type=1326 audit(1755047601.862:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfba78ebe9 code=0x7ffc0000
[  294.235219][   T30] audit: type=1326 audit(1755047601.872:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fcfba78ebe9 code=0x7ffc0000
[  294.270040][   T30] audit: type=1326 audit(1755047601.882:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfba78ebe9 code=0x7ffc0000
[  294.295546][   T30] audit: type=1326 audit(1755047601.882:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfba78ebe9 code=0x7ffc0000
[  294.725237][ T7147] loop0: detected capacity change from 0 to 8192
[  294.921207][ T7147] FAT-fs (loop0): error, clusters badly computed (1 != 0)
[  295.949669][ T7177] loop3: detected capacity change from 0 to 512
[  296.033151][ T7177] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  296.069638][ T7177] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  296.151972][ T7177] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.473: iget: bad i_size value: 12154757448730
[  296.246133][ T7177] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.473: couldn't read orphan inode 13 (err -117)
[  296.318493][ T7177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.476137][ T7177] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  296.501152][ T7181] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  296.713387][ T5873] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  296.785467][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.944302][ T5873] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00
[  296.954011][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.982284][ T5873] usb 3-1: config 0 descriptor??
[  297.337149][ T7201] loop4: detected capacity change from 0 to 2048
[  297.384289][ T7201] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  297.494941][ T7208] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  297.521329][ T5873] waltop 0003:172F:0032.0007: hidraw0: USB HID v1.01 Device [HID 172f:0032] on usb-dummy_hcd.2-1/input0
[  297.679029][ T5873] usb 3-1: USB disconnect, device number 6
[  297.991930][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'.
[  298.527467][ T7216] netlink: 88 bytes leftover after parsing attributes in process `syz.1.490'.
[  298.881658][ T7219] loop2: detected capacity change from 0 to 256
[  299.005808][ T7223] loop0: detected capacity change from 0 to 256
[  299.014645][ T7219] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  299.024869][ T7219] FAT-fs (loop2): Filesystem has been set read-only
[  299.036475][ T7224] loop1: detected capacity change from 0 to 64
[  299.106506][ T7227] openvswitch: netlink: nsh attr 0 has unexpected len 16380 expected 0
[  299.115252][ T7227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.322970][ T7223] FAT-fs (loop0): Directory bread(block 64) failed
[  299.329830][ T7223] FAT-fs (loop0): Directory bread(block 65) failed
[  299.339708][ T7223] FAT-fs (loop0): Directory bread(block 66) failed
[  299.346879][ T7223] FAT-fs (loop0): Directory bread(block 67) failed
[  299.354278][ T7223] FAT-fs (loop0): Directory bread(block 68) failed
[  299.366803][ T7223] FAT-fs (loop0): Directory bread(block 69) failed
[  299.378382][ T7223] FAT-fs (loop0): Directory bread(block 70) failed
[  299.385421][ T7223] FAT-fs (loop0): Directory bread(block 71) failed
[  299.398455][ T7223] FAT-fs (loop0): Directory bread(block 72) failed
[  299.408139][ T7223] FAT-fs (loop0): Directory bread(block 73) failed
[  299.768412][ T5865] kernel write not supported for file /sg0 (pid: 5865 comm: kworker/0:3)
[  299.805851][ T7233] loop1: detected capacity change from 0 to 512
[  299.894389][ T7233] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  300.022916][ T7233] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  300.055937][ T7233] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  300.066127][ T7233] System zones: 0-2, 18-18, 34-34
[  300.109506][ T7233] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.497: iget: bad i_size value: 360287970189639680
[  300.160536][ T7233] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.497: couldn't read orphan inode 15 (err -117)
[  300.225758][ T7233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.543805][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.654188][ T5873] kernel write not supported for file /input/event2 (pid: 5873 comm: kworker/1:4)
[  301.963349][ T7273] loop1: detected capacity change from 0 to 1024
[  301.990981][ T7273] EXT4-fs: Ignoring removed mblk_io_submit option
[  302.005157][ T7273] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  302.101651][ T7273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.165249][ T7269] loop4: detected capacity change from 0 to 4096
[  302.255489][ T7269] ntfs3(loop4): ino=3, Correct links count -> 2.
[  302.665192][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.106389][ T7277] loop0: detected capacity change from 0 to 32768
[  303.210979][ T7277] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  303.603096][ T7269] ntfs3(loop4): failed to convert "0080" to macgreek
[  303.652166][ T7269] ntfs3(loop4): failed to convert name for inode 1e.
[  303.711775][ T7269] ntfs3(loop4): ino=1f, mi_enum_attr
[  303.717936][ T7269] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  304.126772][ T7291] loop3: detected capacity change from 0 to 32768
[  304.136319][ T7291] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  304.526597][ T7277] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x252/0x21a0, inode 0x1140 dinode
[  304.538095][ T7277] XFS (loop0): Unmount and run xfs_repair
[  304.544209][ T7277] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  304.551805][ T7277] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  304.561148][ T7277] 00000010: 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  304.570332][ T7277] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 a5 a5 b6 11  ..e.....4.Xh....
[  304.583393][ T7277] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 4b  4.Xh...........K
[  304.593820][ T7277] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  304.603008][ T7277] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  304.612062][ T7277] 00000060: ff ff ff ff 9d f1 3e 44 00 00 00 00 00 00 00 07  ......>D........
[  304.621263][ T7277] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  304.630680][ T7277] XFS (loop0): Failed to read root inode 0x1140, error 117
[  306.903293][ T7332] loop0: detected capacity change from 0 to 2048
[  307.022204][ T7332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.038322][ T7332] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  307.637719][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.082075][ T7354] capability: warning: `syz.0.546' uses 32-bit capabilities (legacy support in use)
[  308.213348][ T7356] program syz.3.548 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  308.544062][ T5814] Bluetooth: hci0: command 0x0406 tx timeout
[  308.552871][ T5820] Bluetooth: hci1: command 0x0406 tx timeout
[  308.559217][ T5820] Bluetooth: hci2: command 0x0401 tx timeout
[  308.565967][ T5814] Bluetooth: hci3: command 0x0406 tx timeout
[  309.417210][ T7360] loop1: detected capacity change from 0 to 32768
[  309.623716][ T7360] (syz.1.550,7360,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  309.678107][ T7360] (syz.1.550,7360,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  309.729540][ T7366] loop3: detected capacity change from 0 to 32768
[  309.765042][ T7366] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #70: signature = 
[  309.781016][ T7366] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  309.791273][ T7366] OCFS2: File system is now read-only.
[  309.797034][ T7366] (syz.3.552,7366,0):ocfs2_read_locked_inode:597 ERROR: status = -30
[  309.810320][ T7366] (syz.3.552,7366,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  309.819761][ T7366] (syz.3.552,7366,0):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  309.829147][ T7366] (syz.3.552,7366,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  309.829334][ T7366] (syz.3.552,7366,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  309.851647][ T7366] (syz.3.552,7366,0):ocfs2_initialize_super:2198 ERROR: status = -30
[  309.860632][ T7366] (syz.3.552,7366,0):ocfs2_fill_super:1177 ERROR: status = -30
[  309.937027][ T7360] JBD2: Ignoring recovery information on journal
[  310.345266][ T7360] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  310.379090][ T7360] (syz.1.550,7360,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  310.658944][ T5817] ocfs2: Unmounting device (7,1) on (node local)
[  311.378810][ T7386] loop3: detected capacity change from 0 to 256
[  311.946927][ T7384] loop4: detected capacity change from 0 to 32768
[  312.085804][ T7386] FAT-fs (loop3): Directory bread(block 64) failed
[  312.092991][ T7386] FAT-fs (loop3): Directory bread(block 65) failed
[  312.099880][ T7386] FAT-fs (loop3): Directory bread(block 66) failed
[  312.109709][ T7386] FAT-fs (loop3): Directory bread(block 67) failed
[  312.116950][ T7386] FAT-fs (loop3): Directory bread(block 68) failed
[  312.123881][ T7386] FAT-fs (loop3): Directory bread(block 69) failed
[  312.130765][ T7386] FAT-fs (loop3): Directory bread(block 70) failed
[  312.140474][ T7386] FAT-fs (loop3): Directory bread(block 71) failed
[  312.154218][ T7386] FAT-fs (loop3): Directory bread(block 72) failed
[  312.166719][ T7386] FAT-fs (loop3): Directory bread(block 73) failed
[  312.303791][ T7384] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid device 255,noinodes_use_key_cache,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  312.303965][ T7384]   allowing incompatible features above 0.0: (unknown version)
[  312.304052][ T7384]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  312.304153][ T7384]   with devices loop4
[  312.363851][ T7384] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  312.376232][ T7384] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  312.400176][ T7384] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  312.483645][ T7384] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  312.690374][ T7384] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  312.722838][ T7384] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  312.758688][ T7384] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  312.767906][ T7384] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  312.997512][ T7384] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  313.008391][ T7407] loop1: detected capacity change from 0 to 512
[  313.127802][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  313.136110][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  313.147423][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  313.176860][ T7407] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  313.191018][ T7407] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  313.207444][ T7413] loop0: detected capacity change from 0 to 64
[  313.240539][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3
[  313.259490][ T7413] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  313.298513][ T7407] EXT4-fs (loop1): 1 truncate cleaned up
[  313.307429][ T7407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.394007][ T7407] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  313.409670][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3
[  313.514881][ T7419] loop2: detected capacity change from 0 to 64
[  313.531459][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 4
[  313.558029][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean
[  313.643782][ T7419] hfs: hfs: Invalid key length: 94
[  313.654129][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  313.820430][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.566847][ T7430] xt_limit: Overflow, try lower: 10/0
[  315.240248][ T7434] loop2: detected capacity change from 0 to 4096
[  315.798688][ T7434] ntfs3(loop2): ino=19, mi_enum_attr
[  315.804629][ T7434] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  315.939273][ T7434] ntfs3(loop2): failed to convert name for inode 1e.
[  315.988509][ T7434] ntfs3(loop2): ino=1f, mi_enum_attr
[  315.994593][ T7434] ntfs3(loop2): ino=5, "/" ntfs_readdir
[  316.290670][ T7455] netlink: 'syz.0.589': attribute type 28 has an invalid length.
[  316.889374][ T7463] loop2: detected capacity change from 0 to 64
[  317.021712][ T7463] hfs: keylen 1794 too large
[  317.051629][ T7463] hfs: keylen 1794 too large
[  318.288909][ T7484] syz.1.601 uses obsolete (PF_INET,SOCK_PACKET)
[  318.367287][ T7483] overlayfs: conflicting lowerdir path
[  319.280894][ T7497] netlink: 5 bytes leftover after parsing attributes in process `syz.3.608'.
[  319.488798][ T7500] loop4: detected capacity change from 0 to 1024
[  319.990487][ T7507] loop2: detected capacity change from 0 to 1024
[  320.010733][ T7507] EXT4-fs: Ignoring removed nomblk_io_submit option
[  320.141800][ T7507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.468698][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.737046][ T7522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.621'.
[  320.830693][ T7525] loop4: detected capacity change from 0 to 1024
[  321.121976][ T3834] hfsplus: b-tree write err: -5, ino 4
[  322.999620][ T7570] loop1: detected capacity change from 0 to 256
[  323.047067][ T7570] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  323.058319][ T7570] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  323.103199][ T5897] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  323.191783][ T7570] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  323.298727][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  323.310029][ T5897] usb 4-1: config 0 has no interfaces?
[  323.313397][ T5865] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  323.369798][ T5897] usb 4-1: string descriptor 0 read error: -22
[  323.377227][ T5897] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  323.387121][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.427038][ T5873] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  323.447992][ T5897] usb 4-1: config 0 descriptor??
[  323.533039][ T5865] usb 1-1: Using ep0 maxpacket: 8
[  323.569502][ T5865] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  323.613333][ T5865] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  323.622925][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.634587][ T5865] usb 1-1: Product: syz
[  323.640072][ T5865] usb 1-1: Manufacturer: syz
[  323.645129][ T5865] usb 1-1: SerialNumber: syz
[  323.654728][ T5873] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  323.664546][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.671220][ T5865] usb 1-1: config 0 descriptor??
[  323.672960][ T5873] usb 5-1: Product: syz
[  323.673061][ T5873] usb 5-1: Manufacturer: syz
[  323.673156][ T5873] usb 5-1: SerialNumber: syz
[  323.735027][ T5872] usb 4-1: USB disconnect, device number 6
[  323.749360][ T5873] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  323.795792][ T5865] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  323.804422][ T5865] usb 1-1: setting power ON
[  323.809204][ T5865] dvb-usb: bulk message failed: -22 (2/0)
[  323.853704][ T5865] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  323.889332][ T5865] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  323.898596][ T5865] usb 1-1: media controller created
[  323.915324][ T7573] dvb-usb: bulk message failed: -22 (3/0)
[  323.921248][ T7573] dvb-usb: bulk message failed: -22 (37/0)
[  323.961687][ T5897] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  324.050894][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  324.350971][ T5865] usb 1-1: selecting invalid altsetting 6
[  324.357203][ T5865] usb 1-1: digital interface selection failed (-22)
[  324.364430][ T5865] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  324.440084][ T5865] usb 1-1: setting power OFF
[  324.450774][ T5865] dvb-usb: bulk message failed: -22 (2/0)
[  324.458208][ T5865] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  324.468067][ T5865] (NULL device *): no alternate interface
[  324.711303][ T5873] usb 5-1: USB disconnect, device number 8
[  324.952886][ T7586] loop2: detected capacity change from 0 to 4096
[  325.095743][ T5865] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  325.108287][ T7589] loop3: detected capacity change from 0 to 2048
[  325.123632][ T7592] loop1: detected capacity change from 0 to 1024
[  325.145044][ T5865] usb 1-1: USB disconnect, device number 4
[  325.210498][ T7589] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  325.268585][ T5897] usb 5-1: Service connection timeout for: 256
[  325.277128][ T5897] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  325.281183][ T7593] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  325.288011][ T5897] ath9k_htc: Failed to initialize the device
[  325.447279][ T5873] usb 5-1: ath9k_htc: USB layer deinitialized
[  325.516218][ T3905] hfsplus: b-tree write err: -5, ino 4
[  327.491590][ T7631] loop1: detected capacity change from 0 to 64
[  327.728758][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'.
[  327.880720][ T7640] netlink: 'syz.0.675': attribute type 49 has an invalid length.
[  327.943587][ T7640] netlink: 'syz.0.675': attribute type 49 has an invalid length.
[  328.585729][ T7655] loop1: detected capacity change from 0 to 22
[  328.626956][ T7655] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  329.330925][ T7669] loop2: detected capacity change from 0 to 64
[  329.694993][ T7677] netlink: 60 bytes leftover after parsing attributes in process `syz.3.692'.
[  329.740707][ T7676] netlink: 60 bytes leftover after parsing attributes in process `syz.3.692'.
[  330.296334][ T7689] program syz.3.697 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  330.400293][ T7683] loop2: detected capacity change from 0 to 4096
[  330.530549][ T7694] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  330.617541][   T30] audit: type=1800 audit(1755047638.432:14): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.694" name="file1" dev="loop2" ino=15 res=0 errno=0
[  331.277457][ T7706] loop4: detected capacity change from 0 to 1024
[  331.444506][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.706'.
[  331.592911][ T5092] hfsplus: b-tree write err: -5, ino 8
[  331.903059][ T7720] netlink: 'syz.4.709': attribute type 30 has an invalid length.
[  333.448474][ T7748] loop4: detected capacity change from 0 to 1024
[  333.488870][ T7748] EXT4-fs: Ignoring removed mblk_io_submit option
[  333.531178][ T7752] netlink: 'syz.2.726': attribute type 2 has an invalid length.
[  333.590772][ T7748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.012353][ T5812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.355833][ T7769] loop1: detected capacity change from 0 to 64
[  336.777967][ T7817] netlink: 224 bytes leftover after parsing attributes in process `syz.3.756'.
[  336.787653][ T7817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'.
[  337.122350][ T7823] netlink: 'syz.1.759': attribute type 29 has an invalid length.
[  337.136693][ T7823] netlink: 'syz.1.759': attribute type 29 has an invalid length.
[  337.564101][ T5873] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  337.746563][ T5873] usb 1-1: Using ep0 maxpacket: 16
[  337.776862][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.777088][ T5873] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  337.777229][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.786584][ T5873] usb 1-1: config 0 descriptor??
[  337.843325][ T5865] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  337.990207][ T7839] mmap: syz.2.767 (7839) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  338.029158][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.029334][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.029519][ T5865] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  338.029663][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.036982][ T5865] usb 2-1: config 0 descriptor??
[  338.236731][ T5873] apple 0003:05AC:024B.0008: fixing up MacBook JIS keyboard report descriptor
[  338.238174][ T5873] apple 0003:05AC:024B.0008: item fetching failed at offset 2/69
[  338.243203][ T5873] apple 0003:05AC:024B.0008: parse failed
[  338.243658][ T5873] apple 0003:05AC:024B.0008: probe with driver apple failed with error -22
[  338.475745][ T5872] usb 1-1: USB disconnect, device number 5
[  338.498543][ T5865] samsung 0003:0419:0600.0009: unknown main item tag 0x0
[  338.498778][ T5865] samsung 0003:0419:0600.0009: unknown main item tag 0x0
[  338.498985][ T5865] samsung 0003:0419:0600.0009: unknown main item tag 0x0
[  338.499186][ T5865] samsung 0003:0419:0600.0009: unknown main item tag 0x0
[  338.499405][ T5865] samsung 0003:0419:0600.0009: unknown main item tag 0x0
[  338.499613][ T5865] samsung 0003:0419:0600.0009: unknown main item tag 0x0
[  338.499805][ T5865] samsung 0003:0419:0600.0009: unknown main item tag 0x0
[  338.541729][ T5865] samsung 0003:0419:0600.0009: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0
[  338.704115][ T5873] usb 2-1: USB disconnect, device number 5
[  339.388493][ T7845] loop4: detected capacity change from 0 to 32768
[  339.575891][ T7845] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  339.576034][ T7845]   allowing incompatible features above 0.0: (unknown version)
[  339.576122][ T7845]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  339.576273][ T7845] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  339.578222][ T7845] bcachefs (loop4): invalid bkey in superblock btree=extents level=0: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
[  339.578352][ T7845]   invalid key type for btree extents (btree_ptr_v2), deleting
[  339.579191][ T7845] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  339.579720][ T7845] bcachefs (loop4): dropping and reconstructing all alloc info
[  339.639314][ T7845] bcachefs (loop4): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4100:U32_MAX len 0 ver 0: (unpack error)
[  339.639426][ T7845]   invalid variable length fields, deleting
[  339.725590][ T7845] bcachefs (loop4): accounting_read...
[  339.729718][ T7857] loop0: detected capacity change from 0 to 128
[  339.740815][ T7845]  done
[  339.740903][ T7845] bcachefs (loop4): alloc_read... done
[  339.748465][ T7845] bcachefs (loop4): snapshots_read... done
[  339.796936][ T7845] bcachefs (loop4): check_allocations...
[  339.809815][ T7845] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[  339.809928][ T7845]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  339.876468][ T7845] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[  339.876572][ T7845]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  339.887516][ T7845] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[  339.887618][ T7845]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  339.895591][ T7845] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[  339.914351][    C1] vkms_vblank_simulate: vblank timer overrun
[  340.087801][ T7845]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[  340.147508][ T7845]  done
[  340.158141][ T7845] bcachefs (loop4): going read-write
[  340.158351][ T7845] bcachefs (loop4): insufficient writeable journal devices available: have 0, need 1
[  340.158351][ T7845] rw journal devs:
[  340.255908][ T7845] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean
[  340.281144][ T7845] bcachefs (loop4): done starting filesystem
[  340.397001][ T5812] bcachefs (loop4): shutting down
[  340.402259][ T5812] bcachefs (loop4): going read-only
[  340.413713][ T5812] bcachefs (loop4): finished waiting for writes to stop
[  340.455673][ T5812] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10
[  340.474052][ T5812] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10
[  340.513423][ T5812] bcachefs (loop4): unclean shutdown complete, journal seq 10
[  340.547101][ T7866] loop2: detected capacity change from 0 to 512
[  340.583603][ T5812] bcachefs (loop4): done going read-only, filesystem not clean
[  340.674013][ T5812] bcachefs (loop4): shutdown complete
[  340.736377][ T7866] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.775: casefold flag without casefold feature
[  340.788907][ T7866] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.775: couldn't read orphan inode 15 (err -117)
[  340.807814][ T7872] loop3: detected capacity change from 0 to 1764
[  340.823551][ T7866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.094468][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.273985][ T5872] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  341.369237][ T7883] loop3: detected capacity change from 0 to 512
[  341.387385][ T7883] EXT4-fs: Ignoring removed oldalloc option
[  341.454484][ T7883] EXT4-fs (loop3): 1 truncate cleaned up
[  341.463327][ T7883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.514642][ T5872] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[  341.524286][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.595377][ T5872] usb 2-1: config 0 descriptor??
[  341.720908][ T7887] loop0: detected capacity change from 0 to 1024
[  341.980736][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.072210][ T3905] hfsplus: b-tree write err: -5, ino 4
[  342.097372][ T5872] logitech 0003:046D:C623.000A: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.1-1/input0
[  342.213281][ T7891] loop2: detected capacity change from 0 to 764
[  342.244120][ T5873] usb 2-1: USB disconnect, device number 6
[  342.295666][ T7891] rock: directory entry would overflow storage
[  342.302134][ T7891] rock: sig=0x5245, size=8, remaining=5
[  342.341602][ T7893] loop3: detected capacity change from 0 to 1024
[  342.403898][ T7893] hfsplus: bad catalog entry type
[  342.616190][ T4239] hfsplus: b-tree write err: -5, ino 4
[  342.919001][ T7901] loop0: detected capacity change from 0 to 136
[  343.028321][ T7901] iso9660: Corrupted directory entry in block 2 of inode 1472
[  343.585677][ T5872] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  343.794490][ T5872] usb 4-1: Using ep0 maxpacket: 16
[  343.844196][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.855887][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.866114][ T5872] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  343.875671][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.212019][ T5872] usb 4-1: config 0 descriptor??
[  344.941802][ T7915] loop0: detected capacity change from 0 to 512
[  345.015267][ T7915] EXT4-fs: Ignoring removed nomblk_io_submit option
[  345.073666][ T5872] corsair 0003:1B1C:1B02.000B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0
[  345.205841][ T5872] corsair 0003:1B1C:1B02.000B: Failed to get K90 initial state (error -71).
[  345.259715][ T5872] usb 4-1: USB disconnect, device number 7
[  345.300109][ T7915] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  345.531223][ T7915] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  345.573676][ T7915] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  345.824769][ T7927] 9pnet_fd: Insufficient options for proto=fd
[  345.980713][ T7915] EXT4-fs (loop0): 1 truncate cleaned up
[  345.989169][ T7915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.243390][   T30] audit: type=1800 audit(1755047654.032:15): pid=7915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.798" name="file1" dev="loop0" ino=15 res=0 errno=0
[  346.689451][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.755801][ T7931] Driver unsupported XDP return value 0 on prog  (id 27) dev N/A, expect packet loss!
[  347.516687][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  347.526159][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  347.844793][ T7945] loop3: detected capacity change from 0 to 1024
[  347.969710][ T7937] loop0: detected capacity change from 0 to 40427
[  347.981233][ T7937] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  347.984701][ T7945] =====================================================
[  347.988625][ T7937] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  347.999486][ T7945] BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x1195/0x13d0
[  347.999647][ T7945]  hfsplus_delete_cat+0x1195/0x13d0
[  347.999787][ T7945]  hfsplus_rmdir+0x13c/0x310
[  347.999919][ T7945]  vfs_rmdir+0x5b6/0x800
[  348.000057][ T7945]  do_rmdir+0x7d6/0xdc0
[  348.000176][ T7945]  __x64_sys_rmdir+0x71/0xb0
[  348.000302][ T7945]  x64_sys_call+0x2afe/0x3e20
[  348.000461][ T7945]  do_syscall_64+0xd9/0x210
[  348.000595][ T7945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.000709][ T7945] 
[  348.000733][ T7945] Uninit was stored to memory at:
[  348.000877][ T7945]  hfsplus_create_cat+0x18fb/0x1910
[  348.001006][ T7945]  hfsplus_mknod+0x208/0x560
[  348.001140][ T7945]  hfsplus_mkdir+0x5a/0x80
[  348.001264][ T7945]  vfs_mkdir+0x4e7/0x850
[  348.001379][ T7945]  do_mkdirat+0x41a/0xf30
[  348.001498][ T7945]  __x64_sys_mkdirat+0xc1/0x140
[  348.001623][ T7945]  x64_sys_call+0x338/0x3e20
[  348.001769][ T7945]  do_syscall_64+0xd9/0x210
[  348.001897][ T7945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.002016][ T7945] 
[  348.002042][ T7945] Uninit was stored to memory at:
[  348.002185][ T7945]  hfsplus_create_cat+0x18fb/0x1910
[  348.002316][ T7945]  hfsplus_fill_super+0x211d/0x2730
[  348.022154][ T7937] F2FS-fs (loop0): build fault injection rate: 25
[  348.024088][ T7945]  get_tree_bdev_flags+0x6e6/0x920
[  348.028232][ T7937] F2FS-fs (loop0): build fault injection type: 0x6
[  348.032717][ T7945]  get_tree_bdev+0x38/0x50
[  348.032855][ T7945]  hfsplus_get_tree+0x35/0x40
[  348.038563][ T5873] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  348.041746][ T7945]  vfs_get_tree+0xb3/0x5c0
[  348.074613][ T7937] F2FS-fs (loop0): invalid crc value
[  348.075071][ T7945]  do_new_mount+0x733/0x1420
[  348.182034][ T7945]  path_mount+0x6db/0x1e90
[  348.186829][ T7945]  __se_sys_mount+0x6eb/0x7d0
[  348.191689][ T7945]  __x64_sys_mount+0xe4/0x150
[  348.196703][ T7945]  x64_sys_call+0x3604/0x3e20
[  348.205098][ T7945]  do_syscall_64+0xd9/0x210
[  348.209820][ T7945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.217444][ T7945] 
[  348.219898][ T7945] Uninit was created at:
[  348.224533][ T7945]  __alloc_frozen_pages_noprof+0x689/0xf00
[  348.227663][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.230502][ T7945]  alloc_pages_mpol+0x328/0x860
[  348.230639][ T7945]  alloc_frozen_pages_noprof+0xf7/0x200
[  348.242364][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.247041][ T7945]  allocate_slab+0x24d/0x1220
[  348.252866][ T5873] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00
[  348.262640][ T7945]  ___slab_alloc+0x1024/0x34e0
[  348.267412][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.276764][ T7945]  kmem_cache_alloc_lru_noprof+0x922/0xed0
[  348.276934][ T7945]  hfsplus_alloc_inode+0x5a/0xd0
[  348.301113][ T7945]  alloc_inode+0x87/0x4a0
[  348.309242][ T7945]  iget_locked+0x239/0x12d0
[  348.315203][ T7945]  hfsplus_iget+0x5c/0xb80
[  348.319783][ T7945]  hfsplus_fill_super+0x14c6/0x2730
[  348.325318][ T7945]  get_tree_bdev_flags+0x6e6/0x920
[  348.330630][ T7945]  get_tree_bdev+0x38/0x50
[  348.335429][ T7945]  hfsplus_get_tree+0x35/0x40
[  348.340273][ T7945]  vfs_get_tree+0xb3/0x5c0
[  348.345023][ T7945]  do_new_mount+0x733/0x1420
[  348.349793][ T7945]  path_mount+0x6db/0x1e90
[  348.354949][ T7945]  __se_sys_mount+0x6eb/0x7d0
[  348.359815][ T7945]  __x64_sys_mount+0xe4/0x150
[  348.365041][ T7945]  x64_sys_call+0x3604/0x3e20
[  348.369917][ T7945]  do_syscall_64+0xd9/0x210
[  348.374798][ T7945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.380869][ T7945] 
[  348.383553][ T7945] CPU: 0 UID: 0 PID: 7945 Comm: syz.3.809 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(none) 
[  348.395780][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  348.409531][ T7945] =====================================================
[  348.417938][ T7945] Disabling lock debugging due to kernel taint
[  348.424466][ T7945] Kernel panic - not syncing: kmsan.panic set ...
[  348.431045][ T7945] CPU: 0 UID: 0 PID: 7945 Comm: syz.3.809 Tainted: G    B               6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(none) 
[  348.444834][ T7945] Tainted: [B]=BAD_PAGE
[  348.449177][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  348.459377][ T7945] Call Trace:
[  348.462795][ T7945]  <TASK>
[  348.465829][ T7945]  __dump_stack+0x26/0x30
[  348.470366][ T7945]  dump_stack_lvl+0x53/0x270
[  348.475169][ T7945]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  348.481294][ T7945]  dump_stack+0x1e/0x25
[  348.485741][ T7945]  vpanic+0x361/0xc50
[  348.489920][ T7945]  panic+0x15d/0x160
[  348.494091][ T7945]  kmsan_report+0x31c/0x320
[  348.498898][ T7945]  ? __msan_warning+0x1b/0x30
[  348.503826][ T7945]  ? hfsplus_delete_cat+0x1195/0x13d0
[  348.509490][ T7945]  ? hfsplus_rmdir+0x13c/0x310
[  348.514453][ T7945]  ? vfs_rmdir+0x5b6/0x800
[  348.519060][ T7945]  ? do_rmdir+0x7d6/0xdc0
[  348.523590][ T7945]  ? __x64_sys_rmdir+0x71/0xb0
[  348.528568][ T7945]  ? x64_sys_call+0x2afe/0x3e20
[  348.533642][ T7945]  ? do_syscall_64+0xd9/0x210
[  348.538517][ T7945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.544860][ T7945]  ? kmsan_get_metadata+0xfb/0x160
[  348.550522][ T7945]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  348.556542][ T7945]  ? hfsplus_bnode_dump+0x50a/0x560
[  348.561974][ T7945]  ? kmsan_get_metadata+0xfb/0x160
[  348.567279][ T7945]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  348.573527][ T7945]  ? hfsplus_brec_remove+0x92f/0xa60
[  348.579306][ T7945]  ? kmsan_get_metadata+0xfb/0x160
[  348.584837][ T7945]  __msan_warning+0x1b/0x30
[  348.589529][ T7945]  hfsplus_delete_cat+0x1195/0x13d0
[  348.595068][ T7945]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  348.601097][ T7945]  ? kmsan_get_metadata+0xfb/0x160
[  348.606539][ T7945]  hfsplus_rmdir+0x13c/0x310
[  348.611349][ T7945]  ? __pfx_hfsplus_rmdir+0x10/0x10
[  348.616853][ T7945]  vfs_rmdir+0x5b6/0x800
[  348.621321][ T7945]  do_rmdir+0x7d6/0xdc0
[  348.625707][ T7945]  __x64_sys_rmdir+0x71/0xb0
[  348.630533][ T7945]  x64_sys_call+0x2afe/0x3e20
[  348.635452][ T7945]  do_syscall_64+0xd9/0x210
[  348.640337][ T7945]  ? irqentry_exit+0x16/0x60
[  348.645115][ T7945]  ? clear_bhb_loop+0x40/0x90
[  348.650063][ T7945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.656177][ T7945] RIP: 0033:0x7f9ede38ebe9
[  348.660939][ T7945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  348.680819][ T7945] RSP: 002b:00007f9edf26f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  348.689630][ T7945] RAX: ffffffffffffffda RBX: 00007f9ede5b5fa0 RCX: 00007f9ede38ebe9
[  348.697758][ T7945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0
[  348.705958][ T7945] RBP: 00007f9ede411e19 R08: 0000000000000000 R09: 0000000000000000
[  348.714262][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  348.722552][ T7945] R13: 00007f9ede5b6038 R14: 00007f9ede5b5fa0 R15: 00007fff9b9a48d8
[  348.730756][ T7945]  </TASK>
[  348.734330][ T7945] Kernel Offset: disabled
[  348.738743][ T7945] Rebooting in 86400 seconds..