last executing test programs:

2m30.524718592s ago: executing program 3 (id=231):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="001625000000bde321"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)

2m28.516659472s ago: executing program 3 (id=247):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r0, 0x801, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, ']z\x00'}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x40}}, 0x0)

2m28.276546145s ago: executing program 3 (id=250):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40)
getdents(r0, &(0x7f0000000480)=""/40, 0x28)
getdents(r0, 0xfffffffffffffffd, 0x58)

2m28.006548989s ago: executing program 3 (id=252):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@barrier_val={'barrier', 0x3d, 0x6}}, {@resgid}, {@auto_da_alloc}, {@jqfmt_vfsv0}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x47b, &(0x7f0000001280)="$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")
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x183081, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=')

2m27.422827798s ago: executing program 3 (id=258):
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000280)={0x0, 0x2, "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"})
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

2m26.449938303s ago: executing program 3 (id=264):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x1c, r1, 0x8083540e3272eb67, 0x70bd2b, 0xfffffffe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x40840)

2m25.99832633s ago: executing program 32 (id=264):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x1c, r1, 0x8083540e3272eb67, 0x70bd2b, 0xfffffffe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x40840)

26.633148811s ago: executing program 2 (id=1181):
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

26.339759995s ago: executing program 2 (id=1186):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000080), 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000700)=0x9, 0x4)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x1, 0x4)

26.07004799s ago: executing program 2 (id=1194):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4)
sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)

25.747559664s ago: executing program 2 (id=1199):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1000040, &(0x7f0000000240)=ANY=[], 0x81, 0x1237, &(0x7f00000006c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000000)=""/41, 0x29)
getdents64(r0, 0x0, 0x2e)

25.298880501s ago: executing program 2 (id=1202):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0)

25.104141474s ago: executing program 2 (id=1204):
r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
close(r0)
r1 = timerfd_create(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

11.141387103s ago: executing program 0 (id=1304):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @loopback}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)

10.220524177s ago: executing program 4 (id=1310):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x1c}}, 0x0)
ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x4e, &(0x7f0000000240)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, {[@dstopts={0x0, 0x2, '\x00', [@enc_lim, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x3}, @padn, @padn]}]}}}}}, 0x0)

9.893007662s ago: executing program 33 (id=1204):
r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
close(r0)
r1 = timerfd_create(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

9.704655884s ago: executing program 4 (id=1313):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x11, 0x6, @local}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000340)={r1, 0x11, 0x6, @local}, 0x10)

9.417897659s ago: executing program 4 (id=1316):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
read$alg(r1, &(0x7f0000000000)=""/35, 0x23)

9.37462905s ago: executing program 1 (id=1318):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)

9.039530344s ago: executing program 4 (id=1320):
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000240)={0x0, 0xab12, 0x0, 0xffffffff, 0x5}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2160, 0x1})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

8.999706075s ago: executing program 1 (id=1321):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x408, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x6, 0x9, 0x9}}]}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)

2.058997089s ago: executing program 6 (id=1311):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x44, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x5, 0x0, 0x1, {0x1c, 0x4, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}, {0x8, 0x3}]}}]}]}, 0x44}}, 0x0)

2.057985259s ago: executing program 0 (id=1332):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094)

2.055177129s ago: executing program 1 (id=1333):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noadinicb}, {@volume={'volume', 0x3d, 0x2}}, {@shortad}, {@mode={'mode', 0x3d, 0x10001}}]}, 0x1, 0x489, &(0x7f0000000580)="$eJzs29trHOUfx/HPd7K72Wz7+3XbpmmVgquCSsWaQ4/Gix5iqNCkOTQiRYWYbOLSnMimkhTR4o233ngjIgoKUkULIt54pb3zD1AQBL3wQgT3wgMIgszszM5ks2nS7iHd9v2CdifPfGfmOewzz7M7zwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEinnjrZ2WVbnQsAANBIg6Mjnd2M/wAA3FXO8/kfAADgbmJy9L1MfSMFG/D+Lkqezc1dWh7r6698WJt5R7Z48e6/ZFd3z6HDR44eC15vfHyt3aNzo+dPZk7Pzy4sZvP57GRmbC43MT+Z3fQZqj2+3AGvAjKzFy9NTk3lM90He1btXk7/0rqtI917tOOEE8SO9fX3j0ZiYvFbvvoa683wE3K0T6bfHvrUBiU5qr4uNnjv1FubV4gDXiHG+vq9gszkxueW3J1DQUU4fll9iaCOGtAWVWmX3HxZojaf2eJydEKmjp8Ldk5SS1APj3pfDK9/YKwml79lbj6fl/SAmqDNbmOtcvSjTLM7khra+mZFg8XkaFmmP3oLNuzdD9z+5N42zz6TeXpuaj4SO2R+j2r28aGRbvN7U1KOBr07fsFGtjozaDh3svSWTHs+ftmbV8ibl+7oPfrEcE90hrF3g/O4sQf9+eNmxuS4HztkQ2ZO7csFAAAAAAAAQGo1R9/JVPgqEyamTU7kkXFSxQdDma3JIoB6MUdvyzQ8UvC+ho+uS2mJrO8pafZnf/XNf1vy9PzCymJu+qWlivtTyZMv5pcWxycq71abe59tiaZstI6lSnFzlJDpuT8/stJ1i/d/fylAmJsPnwzXzCTLr++9b/5fXM8UPEM6fmFvdLtilm/i+ah7TTNHSzKd2rXPX6uS0po6UzHuc5l+f2+/H+ck3MwHp00XzziVm8l2urFfy/T+v0GstyxK2/zY3WFslxtrMr05sDp2ux/bHsZ2u7H9Ml1/oXLsnjC2x419XaaFXzNBbMqNvc+P7QhjD07Mz0xWqkrgZrn9/yeZ3m3PWNA3YsX339r+/0o4FlwpP9E6fb7a/p+OpF3x+/UFt///tc/ry17/dyr3/zdk+uSL/X5cse8l/P07vf/D/v+sTNPfro5N+bG7wtiuTVdsk3Dbf79MZ/ZcK9WN3/5+C4StFm3/e8vfHXVq/52RtLR/3dbaFB2S8iuXL47PzGQX2WCDDTZKG1t9Z0IjuOP/Z+4s6ssfSvMdf/z3P6aEM6u/Xw3H/97yE9Vp/N8VSev1ZyPxmJRcml2I75WS+ZXLj+Vmx6ez09m5Q51HOg8fOt51/Fg8EUzuwq2q6+pO5Lb/NzL9s+1q6fPu6vlf5fl/qvxEdWr/3ZG01Kr5StVFh9/+V2W6//q10vcSN5r/B9//PPJg8bXUP+vU/u2RtLR/3f/VpugAAAAAAAAAAAAAAAAA0NTi5ugDmc48HrPgt2abWf+35gdodVr/1RFJm2zQ7xWqrlQAaAKOHL0j08Mq2GtuwnZpIPqKO9p/AQAA//9HASOO")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

2.025421049s ago: executing program 5 (id=1334):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
shutdown(r0, 0x1)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x6e, &(0x7f0000000000), 0xe)

2.01666334s ago: executing program 4 (id=1335):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67eea0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c4ff0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9"], 0x1, 0x6214, &(0x7f000000cb40)="$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")
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.800567203s ago: executing program 6 (id=1323):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x6}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x800)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1.781890543s ago: executing program 0 (id=1324):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4604}, 0x0)

1.757815454s ago: executing program 5 (id=1325):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd, 0xb, 0x5, 0x8020, 0x7, 0x0, {0x2}})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1, 0x0, 0x80}})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

1.558132976s ago: executing program 1 (id=1326):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.469267398s ago: executing program 5 (id=1327):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpid()
fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1})
fcntl$getownex(r0, 0x10, &(0x7f0000000240))

1.261052241s ago: executing program 6 (id=1328):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x1800004, &(0x7f0000000280)={[{@discard_unit_segment}, {}, {@acl}, {@disable_roll_forward}, {@grpjquota={'grpjquota', 0x3d, 'checkpoint=disable'}}, {@alloc_mode_def}, {@two_active_logs}, {@nouser_xattr}, {@checkpoint_diasble}, {@noacl}, {@atgc}, {@background_gc_on}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0xfd, 0x551d, &(0x7f00000079c0)="$eJzs3M1rI2UYAPA3/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6bJNGQ3yZQmTWtPHjyKB/8TUfDk0b/Bg2dv4kHxJiiZd6qtrrDQNNlufz+YPPO+8+aZZ0IpPDMhAbiw5pPffy2FG+FKMb4eQr5fKrbcegwvhRBuhhCmjm2lYv7viUshhKshhBvD5CFMF2uGh768Pbi19ss7v333w+WZa199++Nkrhh4GrwcQujsxP39ToxZM8aHxXxt0MpjZ3VQxHigPRePd7I4v59u5Rn2a0franlcacb12c5ebxi327X6MDZb2/n8TjeesDdoHuXJ3/CwtpuPG+lWHlu9LI/Nw3jeg8P4v+2w1495GkW+T/L0od8/inE+PUjj9ew8ymO92y/mY96skR4M46CIxelCPWs38jq2TvFBP+XebXX3DpJButtrZd1krVJ9pVK9U67uZo20n66Wa53GndVkodkeLiv301pnvZllzXZaqWedxWShWa+Xq9Vk4W661ap1k2q1slJZKq8tFnu3kzfvf5C0G8nCML7e6u71W+1esp3tJvEdi8lyZeXVxeRWNXlvYzPZfHDv3sbm+x/d/fD+axtvv1Es+k9ZycLy0vJyubpUXq4uXqDr/6woeoTXD6dSmnQBAOfP8f5/Wv8PjMlp+v/Oo2L82P5/90EIZ9//B/3/SJyr/vei9/9ncP1wKvp/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAL66fZr9/Kd+bj+Fox/1wx9UIxLoUQpkIIfz7GdLh0Iud0kWf2f9bP/quG70shzzA8x+ViuxpCWC+2P54/608BAAAAnl3ffHrzi9itx5f5SRfEOMWbNlPXPx5RvrkQwuz8zyPKNjV8eXFEyfK/75lwMKJs+Q2suREli7fcZkaV7YlMnwhzx0IphqmxlgMAAIzFyU5gvF0IAAAA4/T5pAtgMkrh6FHm0bPg/Jv3/zwQvHJiBAAAAJxDpUkXAAAAAJy5vP/3+38AAADwbIu//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFzv3cJg5EcQB+Nnhh/2nRau/byt6gjC0hxxwjCkgTFJADNaQBaiC3lBBBhMchEHGI5LGtRN8nOZOxzI83CA4zIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB06aFaV3Hz97Ztzm7fTp7RAAAAAJdsq/Wi/meW+t+b+z+bW7+bfhERZURcmruP4stZ5qjJqV6fvzt9vnpTw31EnXB4j0lzfYuIf8319KvrTwEAAAA+r81yNU+z9fRnNnRB9Ckt2pQ//mfKKyKimj1mSisPeX8yhdXf73FcZ0qrF7CmmcLSkts4V9q71D/346rd9KQpUlNefNmxyGxjBwAAejQ6a/qdhQAAANCnq6ELYBhFvGxlHrcCJ6lptve+nvUAAACAD6gYugAAAACgc/X8v6fz//bO/wMAAIBhpPP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Wi82y9W8bc5u306e0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzPy9yU3EAwF+SydRWxXGVOayIgge92Om0tvYmHpTFg3+CsGynde3UH+0ebCniXrzJnnsRPYoIynrr/9BzC73UWw9zqCAeR5JJZtJ20VnBJN39fODlfRNC3vclsOw3L7sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApcm7izjJNr1ZHBfHbj+4vpH1dx7pMzd37q5mLYujOpN+Mrxc3Yn6zSUCAADA4ZGU9X0I4V66u5b1cS+v/9PynKzm//7ZWVzW84/W/WVf1v5Z++3X+y/OB+rNxskuen5zPDrxeCqd/2+W7fbcv57Rye98/u4lyR9I/MH2C5M0v5/Rt7duvdfNwyN1ZAsA/BfHy74Iyt+Hsn7YZGIAHBqdSuFd1v9Jr9mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOow2Q5Pl3EUQljtLOLMnQfXN/bqb+7cXS3bmRs3dsLXi2tml0hDCOc3x6MTtc6m3a5cvXZxfTweXa4/eCWE0NTo7xTTv/jREieH0Mj92X/wVzvSaFsQFw+7Lfk8GUGDP5QAADiQ0qJldf29dHctOxathDD94eH6//VKHJas/+9/fOZ2daxq/T+sbYbtN9i69PngytVrb25eWr8wujD69K2Tw7eHp86ePn12kL8rGXhjAgAAwL5Np9PpfKdbtGr9H688vv5/rBKHJev/L74bflUdOFH/72mx6Nd0JgAAAIfb86/++Ue0x/Go2w1frm9tXR7OtvP9k7NtA6nu25GiVev/ZKXprAAAAIA6TLajh9b/z1XisOT6/zM/vvRz9ZpJCOFosf5/fOOz8bn6ptNqdfw5cdNzBAAAoFlHi1Zd/0/z7//j+ScPcQjhjddmcfFvAP+x/k+L+j95/5ufqmNVv/8/Vd8UWynuz+5H3vdD6PSbzggAAICD7KmiZcX+7+nu2ie/HPuw6/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLr9HQAA//9XJECI")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x104)
truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff)
fallocate(r0, 0x8, 0x4000, 0x4000)

1.222649741s ago: executing program 1 (id=1329):
r0 = socket(0x840000000002, 0x3, 0xff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000600)=0x1, 0x4)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0xc01, 0x3, 0x250, 0x128, 0x5002004a, 0x0, 0x128, 0x0, 0x1b8, 0x3c8, 0x3c8, 0x1b8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x6}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0)

1.140631393s ago: executing program 5 (id=1330):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
waitid(0x0, r0, 0x0, 0x8, 0x0)
ptrace$peeksig(0x4209, r0, 0x0, 0x0)

884.291977ms ago: executing program 0 (id=1331):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x37}})

780.440178ms ago: executing program 5 (id=1336):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

703.228529ms ago: executing program 1 (id=1337):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000002c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@user_xattr}, {@errors_remount}, {@block_validity}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=")

368.786655ms ago: executing program 4 (id=1338):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x4c000)

368.356395ms ago: executing program 0 (id=1339):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)

302.500125ms ago: executing program 5 (id=1340):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

0s ago: executing program 0 (id=1341):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x20, @random="a380e37b9489", 'vcan0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'batadv_slave_1\x00'}}, 0x1e)

kernel console output (not intermixed with test programs):

node 0,1,2 or nonexistent inode
[  159.655351][ T5970] syz.4.504 (5970) used greatest stack depth: 19680 bytes left
[  159.668584][ T4268] XFS (loop4): Unmounting Filesystem
[  160.223046][ T6019] dummy0: default FDB implementation only supports local addresses
[  160.423058][ T4758] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  160.454053][ T6027] loop0: detected capacity change from 0 to 1024
[  160.547539][ T6027] hfsplus: found bad thread record in catalog
[  160.566685][ T6027] hfsplus: catalog searching failed
[  160.622012][ T4758] usb 2-1: Using ep0 maxpacket: 8
[  160.641193][ T4758] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  160.666973][ T4758] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  160.706956][ T4758] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  160.717698][ T4758] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  160.728019][ T4758] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  160.741697][ T4758] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  160.761258][ T4758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.803004][   T75] hfsplus: found bad thread record in catalog
[  160.810867][   T75] hfsplus: found bad thread record in catalog
[  161.001323][ T4758] usb 2-1: GET_CAPABILITIES returned 0
[  161.010912][ T4758] usbtmc 2-1:16.0: can't read capabilities
[  161.215444][ T4758] usb 2-1: USB disconnect, device number 3
[  161.450551][ T6042] loop5: detected capacity change from 0 to 512
[  161.466761][ T6042] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  161.537767][ T6042] EXT4-fs (loop5): 1 truncate cleaned up
[  161.550689][ T6015] loop2: detected capacity change from 0 to 40427
[  161.554002][ T6042] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  161.623918][ T6015] F2FS-fs (loop2): Invalid log sectors per block(0) log sectorsize(9)
[  161.675488][   T26] audit: type=1800 audit(1752057255.500:20): pid=6042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.532" name="file1" dev="loop5" ino=15 res=0 errno=0
[  161.723890][ T6015] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  161.802704][ T6015] F2FS-fs (loop2): invalid crc value
[  161.871401][ T6015] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  162.058851][ T6052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.127318][ T6040] loop4: detected capacity change from 0 to 32768
[  162.200004][ T5269] EXT4-fs (loop5): unmounting filesystem.
[  162.415611][ T6015] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  162.457847][ T6064] loop1: detected capacity change from 0 to 2048
[  162.469746][ T6015] F2FS-fs (loop2): Start checkpoint disabled!
[  162.540413][ T6064] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  162.586809][ T6015] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  162.601962][ T6015] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  162.785411][ T6076] loop5: detected capacity change from 0 to 64
[  162.865279][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  163.171904][ T4360] kworker/u4:5: attempt to access beyond end of device
[  163.171904][ T4360] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  163.741255][ T6072] loop0: detected capacity change from 0 to 32768
[  163.772977][ T6072] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.539 (6072)
[  163.806948][ T6072] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  163.836041][ T6072] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  163.862090][ T6072] BTRFS info (device loop0): force clearing of disk cache
[  163.883659][ T6072] BTRFS info (device loop0): metadata ratio 0
[  163.889821][ T6072] BTRFS info (device loop0): enabling ssd optimizations
[  163.938227][ T6072] BTRFS info (device loop0): using spread ssd allocation scheme
[  163.948651][ T6080] loop5: detected capacity change from 0 to 32768
[  163.966204][ T6080] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.543 (6080)
[  164.005140][ T6080] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  164.008241][ T6072] BTRFS info (device loop0): using free space tree
[  164.049327][ T6080] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  164.108616][ T6080] BTRFS info (device loop5): turning on sync discard
[  164.159044][ T6103] loop2: detected capacity change from 0 to 512
[  164.162213][ T6080] BTRFS info (device loop5): doing ref verification
[  164.181564][ T6103] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  164.193277][ T6080] BTRFS info (device loop5): disabling tree log
[  164.199635][ T6080] BTRFS info (device loop5): enabling ssd optimizations
[  164.227509][ T6080] BTRFS info (device loop5): using spread ssd allocation scheme
[  164.241913][ T6080] BTRFS info (device loop5): not using ssd optimizations
[  164.272705][ T6103] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.544: bg 0: block 5: invalid block bitmap
[  164.331902][ T6080] BTRFS info (device loop5): not using spread ssd allocation scheme
[  164.350204][ T6080] BTRFS info (device loop5): using free space tree
[  164.376096][ T6072] BTRFS info (device loop0): rebuilding free space tree
[  164.396396][ T6103] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  164.406142][ T6103] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.544: invalid indirect mapped block 3 (level 2)
[  164.427571][ T6103] EXT4-fs (loop2): 2 truncates cleaned up
[  164.433626][ T6103] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  164.513723][ T6103] EXT4-fs (loop2): shut down requested (1)
[  164.563573][ T6072] BTRFS warning (device loop0): qgroup rescan init failed, qgroup is not enabled
[  164.592966][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'.
[  164.665531][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  164.702083][ T4269] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  164.963062][ T6145] loop1: detected capacity change from 0 to 65
[  165.010081][ T6145] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  165.266793][ T5269] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  166.177957][ T6172] loop5: detected capacity change from 0 to 4096
[  166.269464][ T6181] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.332317][ T6172] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  166.360490][ T6172] Remounting filesystem read-only
[  166.381301][ T6172] NILFS (loop5): mounting fs with errors
[  166.624946][ T6192] loop1: detected capacity change from 0 to 64
[  167.122470][ T4755] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  167.347842][ T4755] usb 1-1: Using ep0 maxpacket: 8
[  167.357727][ T4755] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  167.422098][ T4755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.531117][ T4755] pvrusb2: Hardware description: Terratec Grabster AV400
[  167.592930][ T4755] pvrusb2: **********
[  167.596992][ T4755] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  167.726777][ T4755] pvrusb2: Important functionality might not be entirely working.
[  167.798542][ T4755] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  167.859813][ T4755] pvrusb2: **********
[  167.982528][ T2309] pvrusb2: Invalid write control endpoint
[  168.144681][ T4755] usb 1-1: USB disconnect, device number 5
[  168.633499][ T2309] pvrusb2: Invalid write control endpoint
[  168.639704][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  168.686161][ T6194] loop5: detected capacity change from 0 to 262144
[  168.714916][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  168.722728][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  168.745895][ T2309] pvrusb2: Device being rendered inoperable
[  168.789903][ T6194] F2FS-fs (loop5): Found nat_bits in checkpoint
[  168.836629][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  168.848160][ T6194] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  168.871199][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  168.928125][ T2309] pvrusb2: Attached sub-driver cx25840
[  169.003081][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  169.089401][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  169.344991][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'.
[  169.369762][ T6254] loop0: detected capacity change from 0 to 512
[  169.457578][ T6254] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  169.591431][ T6254] EXT4-fs (loop0): 1 truncate cleaned up
[  169.620203][ T6266] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82
[  169.663381][ T6254] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  169.782902][ T6254] EXT4-fs (loop0): shut down requested (0)
[  169.851862][ T4758] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  170.015041][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  170.064137][ T4758] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30
[  170.092026][ T4758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  170.131932][ T4276] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  170.135609][ T4758] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 242
[  170.201841][ T4758] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  170.207915][ T6272] loop2: detected capacity change from 0 to 8192
[  170.255026][ T6272] FAT-fs (loop2): Directory bread(block 22913) failed
[  170.261892][ T4758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.264466][ T4758] usb 2-1: config 0 descriptor??
[  170.321452][ T6272] FAT-fs (loop2): Directory bread(block 22914) failed
[  170.332054][ T4276] usb 6-1: Using ep0 maxpacket: 32
[  170.348535][ T4276] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  170.381483][ T6272] FAT-fs (loop2): Directory bread(block 22915) failed
[  170.407515][ T4276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.421212][ T6272] FAT-fs (loop2): Directory bread(block 22916) failed
[  170.454409][ T4276] usb 6-1: config 0 descriptor??
[  170.462430][ T6272] FAT-fs (loop2): Directory bread(block 22917) failed
[  170.469309][ T6272] FAT-fs (loop2): Directory bread(block 22918) failed
[  170.484371][ T6272] FAT-fs (loop2): Directory bread(block 22919) failed
[  170.491452][ T6272] FAT-fs (loop2): Directory bread(block 22920) failed
[  170.499222][ T6272] FAT-fs (loop2): Directory bread(block 22921) failed
[  170.506617][ T6272] FAT-fs (loop2): Directory bread(block 22922) failed
[  170.676392][ T4276] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  170.695633][ T4276] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  170.728113][ T4758] zydacron 0003:13EC:0006.0008: hidraw0: USB HID v0.03 Device [HID 13ec:0006] on usb-dummy_hcd.1-1/input0
[  170.746792][ T4276] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  170.812103][ T4276] usb 6-1: media controller created
[  170.899733][ T4276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  170.937438][ T4758] usb 2-1: USB disconnect, device number 4
[  171.014710][ T4276] az6027: usb out operation failed. (-71)
[  171.082359][ T4276] az6027: usb out operation failed. (-71)
[  171.098628][ T4276] stb0899_attach: Driver disabled by Kconfig
[  171.141055][ T4276] az6027: no front-end attached
[  171.141055][ T4276] 
[  171.158214][ T6292] fido_id[6292]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  171.173404][ T4276] az6027: usb out operation failed. (-71)
[  171.179190][ T4276] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  171.219414][ T4276] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7
[  171.287910][ T4276] dvb-usb: schedule remote query interval to 400 msecs.
[  171.311077][ T4276] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  171.349342][ T4276] usb 6-1: USB disconnect, device number 4
[  171.487690][ T4276] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  171.654190][ T4758] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  171.748349][ T6315] loop5: detected capacity change from 0 to 1024
[  171.800568][ T6315] EXT4-fs: Ignoring removed nomblk_io_submit option
[  171.868447][ T6315] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  171.896248][ T4758] usb 1-1: Using ep0 maxpacket: 32
[  171.904581][ T4758] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  171.984359][ T4758] usb 1-1: config 0 has no interface number 0
[  172.028408][ T4758] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  172.045172][ T5269] EXT4-fs (loop5): unmounting filesystem.
[  172.085854][ T4758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.112247][ T4758] usb 1-1: Product: syz
[  172.128754][ T4758] usb 1-1: Manufacturer: syz
[  172.149444][ T4758] usb 1-1: SerialNumber: syz
[  172.184930][ T4758] usb 1-1: config 0 descriptor??
[  172.223442][ T4758] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  172.319760][ T6328] loop2: detected capacity change from 0 to 512
[  172.400172][ T6328] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.614: inode #1: comm syz.2.614: iget: illegal inode #
[  172.436612][ T4758] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  172.492951][ T4758] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  172.503428][ T6328] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.614: error while reading EA inode 1 err=-117
[  172.582504][ T6328] EXT4-fs (loop2): 1 orphan inode deleted
[  172.599200][ T6328] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  172.837045][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  172.842389][ T4276] usb 1-1: USB disconnect, device number 6
[  172.853743][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  172.874689][ T4276] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  172.924931][ T6341] netlink: 20 bytes leftover after parsing attributes in process `syz.5.618'.
[  172.952532][ T4276] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  173.022949][ T4276] quatech2 1-1:0.51: device disconnected
[  174.821027][ T6385] loop4: detected capacity change from 0 to 16
[  174.932356][ T6385] erofs: (device loop4): mounted with root inode @ nid 36.
[  174.982936][ T6373] loop0: detected capacity change from 0 to 131072
[  174.998389][ T6373] F2FS-fs (loop0): Test dummy encryption mode enabled
[  175.008108][ T6373] F2FS-fs (loop0): invalid crc value
[  175.045290][   T26] audit: type=1800 audit(1752057268.870:21): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.633" name="file1" dev="loop4" ino=86 res=0 errno=0
[  175.093413][ T6373] F2FS-fs (loop0): Found nat_bits in checkpoint
[  175.150719][ T6373] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  175.567442][ T6402] loop2: detected capacity change from 0 to 512
[  175.644570][ T6365] loop1: detected capacity change from 0 to 40427
[  175.682635][ T6365] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  175.684406][ T6402] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  175.690409][ T6365] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  175.800351][ T6402] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  175.827667][ T6365] F2FS-fs (loop1): invalid crc value
[  175.879062][ T6365] F2FS-fs (loop1): Found nat_bits in checkpoint
[  175.940523][ T6375] loop5: detected capacity change from 0 to 40427
[  176.052273][ T6375] F2FS-fs (loop5): Found nat_bits in checkpoint
[  176.167545][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  176.194635][ T6365] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  176.211972][ T6365] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  176.332084][ T6375] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  176.454039][ T6375] syz.5.630: attempt to access beyond end of device
[  176.454039][ T6375] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  176.469534][   T26] audit: type=1800 audit(1752057270.280:22): pid=6365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.626" name="file1" dev="loop1" ino=10 res=0 errno=0
[  176.646591][ T6375] syz.5.630: attempt to access beyond end of device
[  176.646591][ T6375] loop5: rw=2049, sector=53288, nr_sectors = 24 limit=40427
[  176.861260][ T5269] syz-executor: attempt to access beyond end of device
[  176.861260][ T5269] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  176.942071][ T4581] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  177.061379][ T6438] PKCS8: Unsupported PKCS#8 version
[  177.142298][ T4581] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  177.172256][ T4581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.182991][ T4581] usb 1-1: config 0 descriptor??
[  177.368580][ T6443] loop4: detected capacity change from 0 to 512
[  177.419459][ T4581] kaweth 1-1:0.0: Firmware present in device.
[  177.509252][ T6443] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  177.532086][ T6443] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.605736][ T4581] kaweth 1-1:0.0: Statistics collection: 0
[  177.611622][ T4581] kaweth 1-1:0.0: Multicast filter limit: 0
[  177.672492][ T4581] kaweth 1-1:0.0: MTU: 0
[  177.677021][ T4581] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00
[  177.686631][   T26] audit: type=1800 audit(1752057271.510:23): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.647" name="file1" dev="loop4" ino=15 res=0 errno=0
[  177.787520][   T26] audit: type=1800 audit(1752057271.540:24): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.647" name="file2" dev="loop4" ino=16 res=0 errno=0
[  177.879556][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  178.007493][ T4581] kaweth 1-1:0.0: Error setting SOFS wait
[  178.016922][ T4581] kaweth: probe of 1-1:0.0 failed with error -5
[  178.063141][ T4581] usb 1-1: USB disconnect, device number 7
[  178.453807][ T6476] netlink: 104 bytes leftover after parsing attributes in process `syz.1.665'.
[  178.755637][   T48] Bluetooth: hci2: link tx timeout
[  178.761726][   T48] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.781986][   T48] Bluetooth: hci2: link tx timeout
[  178.787279][   T48] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.795418][   T48] Bluetooth: hci2: link tx timeout
[  178.800746][   T48] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.808923][   T48] Bluetooth: hci2: link tx timeout
[  178.814284][   T48] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.822040][   T48] Bluetooth: hci2: link tx timeout
[  178.827516][   T48] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.855110][   T48] Bluetooth: hci2: link tx timeout
[  178.860364][   T48] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.868403][   T48] Bluetooth: hci2: link tx timeout
[  178.873724][   T48] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.881521][   T48] Bluetooth: hci2: link tx timeout
[  178.886832][   T48] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.894794][   T48] Bluetooth: hci2: link tx timeout
[  178.899949][   T48] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.909502][   T48] Bluetooth: hci2: link tx timeout
[  178.916198][   T48] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  178.923946][   T48] Bluetooth: hci2: link tx timeout
[  178.929266][   T48] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  179.252265][ T6462] loop5: detected capacity change from 0 to 32768
[  179.367492][ T6462] XFS (loop5): Mounting V5 Filesystem
[  179.688493][ T6462] XFS (loop5): Ending clean mount
[  179.729847][ T6462] XFS (loop5): Quotacheck needed: Please wait.
[  179.765232][ T6478] loop4: detected capacity change from 0 to 40427
[  179.782574][ T6491] loop0: detected capacity change from 0 to 32768
[  179.845692][ T6478] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  179.848768][ T6491] 
[  179.848768][ T6491]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  179.848768][ T6491] 
[  179.883057][ T6478] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  179.883494][ T6462] XFS (loop5): Quotacheck: Done.
[  179.912593][ T6478] F2FS-fs (loop4): invalid crc value
[  179.968837][ T6491] 
[  179.968837][ T6491]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  179.968837][ T6491] 
[  179.999269][ T6518] loop1: detected capacity change from 0 to 64
[  180.020683][ T6491] 
[  180.020683][ T6491]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  180.020683][ T6491] 
[  180.022835][ T6478] F2FS-fs (loop4): Found nat_bits in checkpoint
[  180.294429][ T5269] XFS (loop5): Unmounting Filesystem
[  180.397962][ T6478] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  180.422797][ T6478] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  180.530471][ T6527] netlink: 'syz.0.668': attribute type 1 has an invalid length.
[  180.551868][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'.
[  180.647915][   T26] audit: type=1800 audit(1752057274.470:25): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.655" name="file1" dev="loop4" ino=10 res=0 errno=0
[  180.832093][   T48] Bluetooth: hci2: command 0x0406 tx timeout
[  181.851522][ T6560] netlink: 'syz.4.671': attribute type 4 has an invalid length.
[  181.985454][ T6562] kvm [6561]: vcpu0, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x203, nop
[  182.806526][ T6556] loop5: detected capacity change from 0 to 32768
[  182.991917][   T48] Bluetooth: hci2: command 0x0405 tx timeout
[  184.602121][ T4755] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  184.682577][ T4756] kernel read not supported for file /dsp (pid: 4756 comm: kworker/0:13)
[  184.813119][ T4755] usb 2-1: Using ep0 maxpacket: 8
[  184.832493][ T4755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  184.867706][ T4755] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3
[  184.918300][ T4755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.950975][ T4755] usb 2-1: Product: syz
[  184.972169][ T4755] usb 2-1: Manufacturer: syz
[  184.976837][ T4755] usb 2-1: SerialNumber: syz
[  185.011196][ T4755] usb 2-1: config 0 descriptor??
[  185.256330][ T4276] usb 2-1: USB disconnect, device number 5
[  185.842260][ T4276] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  186.033650][ T4276] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  186.059921][ T4276] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  186.080573][ T4276] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  186.108069][ T4276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.136967][ T6655] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  186.389674][ T4276] usb 5-1: USB disconnect, device number 7
[  186.414350][ T6680] netlink: 104 bytes leftover after parsing attributes in process `syz.5.715'.
[  187.411547][ T6696] loop4: detected capacity change from 0 to 8192
[  187.743340][ T6713] loop0: detected capacity change from 0 to 1024
[  188.325326][ T6668] loop2: detected capacity change from 0 to 65536
[  188.436075][ T6668] XFS (loop2): Mounting V5 Filesystem
[  188.612761][ T6668] XFS (loop2): Ending clean mount
[  188.625410][ T6668] XFS (loop2): Quotacheck needed: Please wait.
[  188.775984][ T6668] XFS (loop2): Quotacheck: Done.
[  188.875094][ T6719] loop1: detected capacity change from 0 to 32768
[  188.891864][ T6668] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x8004 
[  188.921347][ T6719] XFS: ikeep mount option is deprecated.
[  188.939177][ T6668] XFS (loop2): Unmount and run xfs_repair
[  188.945720][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'.
[  188.945988][ T6668] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  188.982006][ T6668] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  189.025019][ T6668] 00000010: 00 00 00 00 00 00 80 04 00 00 00 00 00 00 00 00  ................
[  189.058733][ T6668] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  189.132242][ T6719] XFS (loop1): Mounting V5 Filesystem
[  189.146817][ T6668] 00000030: 00 00 00 01 21 53 59 0a 00 00 00 05 00 00 00 03  ....!SY.........
[  189.190646][ T6746] loop0: detected capacity change from 0 to 512
[  189.201941][ T6668] 00000040: 00 00 04 a4 00 00 3b 5c 00 00 00 00 03 00 00 00  ......;\........
[  189.210998][ T6668] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  189.221372][ T6668] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  189.230713][ T6668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  189.240297][ T6668] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x8004 len 2 error 74
[  189.319194][ T6719] XFS (loop1): Ending clean mount
[  189.372450][ T6719] XFS (loop1): Quotacheck needed: Please wait.
[  189.391966][ T4281] XFS (loop2): Unmounting Filesystem
[  189.503941][ T6719] XFS (loop1): Quotacheck: Done.
[  189.724056][ T6758] ALSA: mixer_oss: invalid OSS volume 'A1é4ó1Ø=w”�ÄVe]'
[  189.731262][ T6758] ALSA: mixer_oss: invalid OSS volume 'ÊÒ±BËÂì;T`¿@$™¿¾E÷ócXÆMYdŸè,'
[  189.747330][ T6746] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  189.761925][ T6758] ALSA: mixer_oss: invalid OSS volume 'b«Ž@hé#'
[  189.768248][ T6758] ALSA: mixer_oss: invalid OSS volume '•‘h4¿–ÐX¬„S4v=0�_>¤&äÏ'
[  189.775489][ T6746] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.835395][ T4272] XFS (loop1): Unmounting Filesystem
[  189.931878][ T6758] ALSA: mixer_oss: invalid OSS volume '|œ/"tj'
[  189.946155][   T26] audit: type=1800 audit(1752057283.770:26): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.733" name="file1" dev="loop0" ino=15 res=0 errno=0
[  189.951852][ T6758] ALSA: mixer_oss: invalid OSS volume '-z5²Šc^÷Jƒå6�$̹�'
[  190.029617][   T26] audit: type=1800 audit(1752057283.850:27): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.733" name="file2" dev="loop0" ino=16 res=0 errno=0
[  190.121929][ T6758] ALSA: mixer_oss: invalid OSS volume '0ÉóT„®°yòÝäî¬ó‰´ª‡—‚j–P&†³aït'
[  190.130386][ T6758] ALSA: mixer_oss: invalid OSS volume '÷|á¥ó~‚\'
[  190.181665][ T6758] ALSA: mixer_oss: invalid OSS volume '­É@ô^3bÉœ‘}˜ÔG�$º#\Ä("/øoúLÛ'
[  190.191545][ T6758] ALSA: mixer_oss: invalid OSS volume ''
[  190.258463][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  190.265841][ T6763] loop4: detected capacity change from 0 to 1024
[  190.348473][ T6763] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[  190.408770][ T6763] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[  190.421883][ T6763] System zones: 0-1, 3-36
[  190.436085][ T6763] EXT4-fs (loop4): orphan cleanup on readonly fs
[  190.468626][ T6763] EXT4-fs (loop4): 1 orphan inode deleted
[  190.538618][ T6763] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  190.672683][ T6763] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[  190.762223][ T6763] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  190.814758][ T6763] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.741: Block bitmap for bg 0 marked uninitialized
[  190.991082][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  191.278666][ T6786] loop4: detected capacity change from 0 to 64
[  191.391867][ T6787] ceph: missing cluster fsid
[  191.422121][ T6787] ceph: separator ':' missing in source
[  191.817159][ T6789] loop0: detected capacity change from 0 to 4096
[  192.131953][ T4276] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  192.307041][ T6809] loop5: detected capacity change from 0 to 512
[  192.332086][ T4276] usb 2-1: Using ep0 maxpacket: 8
[  192.340545][ T4276] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.348647][ T6809] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 234 vs 220 free clusters
[  192.358654][ T4276] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  192.376094][ T4581] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  192.386629][ T6809] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.760: inode #1: comm syz.5.760: iget: illegal inode #
[  192.403135][ T4276] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  192.413576][ T4276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.422075][ T4276] usb 2-1: Product: syz
[  192.426413][ T4276] usb 2-1: Manufacturer: syz
[  192.431067][ T4276] usb 2-1: SerialNumber: syz
[  192.458384][ T6809] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.760: error while reading EA inode 1 err=-117
[  192.487291][ T6809] EXT4-fs (loop5): 1 orphan inode deleted
[  192.503084][ T6809] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  192.567970][ T4581] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  192.599282][ T4581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.649135][ T4581] usb 3-1: Product: syz
[  192.657780][ T4581] usb 3-1: Manufacturer: syz
[  192.667922][ T4581] usb 3-1: SerialNumber: syz
[  192.704041][ T4581] usb 3-1: config 0 descriptor??
[  192.715964][ T5269] EXT4-fs (loop5): unmounting filesystem.
[  192.728973][ T4276] cdc_ncm 2-1:1.0: bind() failure
[  192.755404][ T4276] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  192.770203][ T4276] cdc_ncm 2-1:1.1: bind() failure
[  192.797798][ T4276] usb 2-1: USB disconnect, device number 6
[  193.168173][ T4581] usb 3-1: Firmware: major: 223, minor: 162, hardware type: ATUSB (1)
[  193.378950][ T4581] usb 3-1: failed to fetch extended address, random address set
[  193.514156][ T4581] usb 3-1: USB disconnect, device number 6
[  193.526227][ T6815] loop4: detected capacity change from 0 to 131072
[  193.539084][ T6815] F2FS-fs (loop4): Wrong CP boundary, start(512) end(198144) blocks(1024)
[  193.547998][ T6815] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  193.597226][ T6815] F2FS-fs (loop4): invalid crc value
[  193.632222][ T4755] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  193.643954][ T6815] F2FS-fs (loop4): Found nat_bits in checkpoint
[  193.706376][ T6815] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  193.713718][ T6815] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  193.873648][ T4755] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  193.915354][ T4755] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  193.949474][ T4755] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  193.981864][ T4755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  194.008353][ T4755] usb 1-1: SerialNumber: syz
[  194.117854][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  194.248204][ T4755] usb 1-1: 0:2 : does not exist
[  194.292046][ T4755] usb 1-1: USB disconnect, device number 8
[  194.343776][ T4746] udevd[4746]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  194.540361][ T6835] loop2: detected capacity change from 0 to 1024
[  194.564244][ T6837] loop4: detected capacity change from 0 to 256
[  194.606228][ T6824] loop1: detected capacity change from 0 to 32768
[  194.661344][ T6824] ialloc: diAlloc returned -5!
[  194.747603][ T6835] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  194.843996][ T6835] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.972874][   T26] audit: type=1800 audit(1752057288.800:28): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.779" name="file1" dev="loop2" ino=15 res=0 errno=0
[  195.022658][ T6835] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 1: comm syz.2.779: lblock 1 mapped to illegal pblock 1 (length 15)
[  195.089191][ T6835] EXT4-fs error (device loop2): ext4_ext_remove_space:2930: inode #15: comm syz.2.779: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  195.376860][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  195.861826][ T4758] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  195.920958][ T6858] loop5: detected capacity change from 0 to 8192
[  195.961549][ T6858] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  195.997544][ T6858] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  196.031309][ T6858] REISERFS (device loop5): using ordered data mode
[  196.067029][ T6858] reiserfs: using flush barriers
[  196.094560][ T4758] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  196.126726][ T6858] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  196.154968][ T4758] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  196.172415][ T6858] REISERFS (device loop5): checking transaction log (loop5)
[  196.188535][ T4758] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  196.199719][ T6858] REISERFS (device loop5): Using rupasov hash to sort names
[  196.206548][ T4758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.240567][ T6858] REISERFS (device loop5): using 3.5.x disk format
[  196.245020][ T6856] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  196.276892][ T6858] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  196.316487][ T6858] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  196.376592][ T6858] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  196.418506][ T6858] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  196.526036][ T4581] usb 3-1: USB disconnect, device number 7
[  196.628531][ T6868] loop4: detected capacity change from 0 to 64
[  196.745552][ T6870] loop1: detected capacity change from 0 to 16
[  196.827707][ T6870] erofs: (device loop1): mounted with root inode @ nid 36.
[  196.884343][ T6870] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36
[  197.378890][ T6890] loop4: detected capacity change from 0 to 512
[  197.426384][ T6890] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  197.478695][ T6896] loop1: detected capacity change from 0 to 64
[  197.480743][ T6890] EXT4-fs (loop4): 1 truncate cleaned up
[  197.516148][ T6890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  197.549838][ T6900] loop0: detected capacity change from 0 to 512
[  197.573054][ T6900] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  197.620232][ T6900] EXT4-fs (loop0): 1 truncate cleaned up
[  197.626788][ T6900] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  197.628671][ T6890] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  197.748587][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  197.833204][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  198.067311][ T6909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.798'.
[  198.540988][ T6933] loop1: detected capacity change from 0 to 128
[  199.309743][ T6954] loop4: detected capacity change from 0 to 256
[  199.340356][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'.
[  199.367732][ T6954] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  199.387638][ T6956] netlink: 'syz.1.819': attribute type 29 has an invalid length.
[  199.409570][ T6954] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  199.420674][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'.
[  199.441161][ T6954] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  200.057563][ T6974] loop0: detected capacity change from 0 to 512
[  200.082133][ T6974] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  200.130410][ T6974] EXT4-fs (loop0): 1 truncate cleaned up
[  200.174209][ T6974] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  200.297047][   T26] audit: type=1800 audit(1752057294.120:29): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.839" name="file1" dev="loop0" ino=15 res=0 errno=0
[  200.380585][ T6958] loop2: detected capacity change from 0 to 32768
[  200.404348][ T6958] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  200.523726][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  200.551938][ T4758] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  200.650526][ T4286] Bluetooth: hci2: link tx timeout
[  200.655830][ T4286] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  200.663733][ T4286] Bluetooth: hci2: link tx timeout
[  200.668893][ T4286] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  200.676991][ T4286] Bluetooth: hci2: link tx timeout
[  200.682401][ T4286] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  200.690094][ T4286] Bluetooth: hci2: link tx timeout
[  200.695332][ T4286] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  200.703255][ T4286] Bluetooth: hci2: link tx timeout
[  200.708484][ T4286] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  200.716512][ T4286] Bluetooth: hci2: link tx timeout
[  200.721667][ T4286] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  200.729541][ T4286] Bluetooth: hci2: link tx timeout
[  200.734745][ T4286] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  200.742781][ T4286] Bluetooth: hci2: link tx timeout
[  200.750985][ T4286] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  200.758892][ T4286] Bluetooth: hci2: link tx timeout
[  200.764348][ T4286] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  200.772122][ T4286] Bluetooth: hci2: link tx timeout
[  200.777299][ T4286] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  200.785201][ T4286] Bluetooth: hci2: link tx timeout
[  200.790352][ T4286] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  200.798230][ T4286] Bluetooth: hci2: link tx timeout
[  200.803540][ T4286] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  200.811380][ T4758] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  200.821974][ T4758] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  200.835231][ T4758] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  200.844654][ T4758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.853135][ T4746] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  200.874853][ T4758] usb 2-1: config 0 descriptor??
[  200.884725][ T4758] radioshark2 2-1:0.0: Invalid radioSHARK2 device
[  200.891216][ T4758] radioshark2: probe of 2-1:0.0 failed with error -22
[  200.898355][ T4758] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  201.098783][ T4581] usb 2-1: USB disconnect, device number 7
[  201.311972][ T4286] Bluetooth: hci1: command 0x0406 tx timeout
[  201.311984][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  201.324096][   T48] Bluetooth: hci3: command 0x0406 tx timeout
[  201.324140][ T4758] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  201.330657][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[  201.526256][ T4758] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30
[  201.552814][ T4758] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  201.572726][ T4758] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 242
[  201.592700][ T4758] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  201.611871][ T4758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.634766][ T4758] usb 6-1: config 0 descriptor??
[  202.060601][ T4758] zydacron 0003:13EC:0006.0009: hidraw0: USB HID v0.03 Device [HID 13ec:0006] on usb-dummy_hcd.5-1/input0
[  202.285649][ T7011] netlink: 'syz.1.843': attribute type 4 has an invalid length.
[  202.296556][ T4583] usb 6-1: USB disconnect, device number 5
[  202.318855][ T7006] fido_id[7006]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  202.556778][ T7014] loop0: detected capacity change from 0 to 8192
[  202.589290][ T7014] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  202.608380][ T7014] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  202.618692][ T7014] REISERFS (device loop0): using ordered data mode
[  202.625328][ T7014] reiserfs: using flush barriers
[  202.636572][ T7014] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  202.653476][ T7014] REISERFS (device loop0): checking transaction log (loop0)
[  202.762135][   T48] Bluetooth: hci2: command 0x0406 tx timeout
[  202.882123][ T7014] REISERFS (device loop0): Using tea hash to sort names
[  202.896554][ T7014] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  203.494667][ T7038] loop0: detected capacity change from 0 to 65
[  203.506610][ T7040] loop4: detected capacity change from 0 to 512
[  203.532213][ T7038] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  203.552021][ T7040] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  203.670722][ T7040] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.857: bg 0: block 5: invalid block bitmap
[  203.778241][ T7040] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  203.797553][ T7040] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.857: invalid indirect mapped block 3 (level 2)
[  203.819339][ T7040] EXT4-fs (loop4): 2 truncates cleaned up
[  203.852034][ T7040] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  203.982366][ T7040] EXT4-fs (loop4): shut down requested (1)
[  204.013617][ T7034] loop2: detected capacity change from 0 to 32768
[  204.126116][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  204.220014][ T7027] loop1: detected capacity change from 0 to 40427
[  204.257559][ T7027] F2FS-fs (loop1): Invalid log sectors per block(0) log sectorsize(9)
[  204.296872][ T7027] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  204.366109][ T7027] F2FS-fs (loop1): invalid crc value
[  204.427754][ T7027] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  204.709226][ T7027] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  204.743569][ T7027] F2FS-fs (loop1): Start checkpoint disabled!
[  204.790844][ T7027] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  204.812119][ T7027] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  205.111332][   T46] kworker/u4:3: attempt to access beyond end of device
[  205.111332][   T46] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  205.752000][    T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  205.770083][ T7065] loop2: detected capacity change from 0 to 32768
[  205.800372][ T7065] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.864 (7065)
[  205.909746][ T7065] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  205.940504][ T7065] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  205.953944][    T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.992004][    T7] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  206.006090][ T7065] BTRFS info (device loop2): force clearing of disk cache
[  206.021854][ T7065] BTRFS info (device loop2): metadata ratio 0
[  206.037120][    T7] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  206.046356][ T7065] BTRFS info (device loop2): enabling ssd optimizations
[  206.056475][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.091150][ T7065] BTRFS info (device loop2): using spread ssd allocation scheme
[  206.108095][    T7] usb 5-1: config 0 descriptor??
[  206.122485][ T7065] BTRFS info (device loop2): using free space tree
[  206.140750][    T7] radioshark2 5-1:0.0: Invalid radioSHARK2 device
[  206.160542][    T7] radioshark2: probe of 5-1:0.0 failed with error -22
[  206.201237][    T7] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  206.382510][    T7] usb 5-1: USB disconnect, device number 8
[  206.528838][ T7065] BTRFS info (device loop2): rebuilding free space tree
[  206.683186][ T7065] BTRFS warning (device loop2): qgroup rescan init failed, qgroup is not enabled
[  206.820855][ T4281] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  207.028949][ T4746] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (4746)
[  207.215647][ T7132] loop4: detected capacity change from 0 to 512
[  207.271081][ T7132] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  207.334899][ T7132] EXT4-fs (loop4): 1 truncate cleaned up
[  207.356602][ T7132] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  207.420370][ T7132] EXT4-fs (loop4): shut down requested (0)
[  207.548535][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  207.665719][ T7145] loop4: detected capacity change from 0 to 1024
[  207.683112][ T4758] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  207.691094][ T7145] EXT4-fs: Ignoring removed nomblk_io_submit option
[  207.741711][ T7145] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  207.895356][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  207.902115][ T4758] usb 1-1: Using ep0 maxpacket: 32
[  207.936622][ T4758] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  207.946479][ T4758] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.972832][ T4758] usb 1-1: config 0 descriptor??
[  208.156698][ T7151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.896'.
[  208.190015][ T4758] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  208.206860][ T7143] loop2: detected capacity change from 0 to 32768
[  208.217390][ T4758] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  208.247600][ T4758] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  208.257875][ T7143] XFS: attr2 mount option is deprecated.
[  208.263722][ T4758] usb 1-1: media controller created
[  208.308635][ T4758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  208.387947][ T7143] XFS (loop2): Mounting V5 Filesystem
[  208.395232][ T4758] az6027: usb out operation failed. (-71)
[  208.408252][ T4758] az6027: usb out operation failed. (-71)
[  208.436191][ T4758] stb0899_attach: Driver disabled by Kconfig
[  208.446919][ T4758] az6027: no front-end attached
[  208.446919][ T4758] 
[  208.460030][ T4758] az6027: usb out operation failed. (-71)
[  208.469419][ T4758] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  208.477953][ T4758] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8
[  208.492440][ T4758] dvb-usb: schedule remote query interval to 400 msecs.
[  208.499789][ T4758] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  208.515802][ T4758] usb 1-1: USB disconnect, device number 9
[  208.551292][ T7143] XFS (loop2): Ending clean mount
[  208.593130][ T7143] XFS (loop2): Quotacheck needed: Please wait.
[  208.678688][ T4758] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  208.709754][ T7143] XFS (loop2): Quotacheck: Done.
[  208.848389][ T7173] loop5: detected capacity change from 0 to 16
[  208.881391][ T7173] erofs: (device loop5): mounted with root inode @ nid 36.
[  208.918102][ T4281] XFS (loop2): Unmounting Filesystem
[  208.935246][   T26] audit: type=1800 audit(1752057302.760:30): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.902" name="file1" dev="loop5" ino=86 res=0 errno=0
[  209.347005][ T7180] loop1: detected capacity change from 0 to 8192
[  209.412371][ T7180] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  209.432651][ T7180] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  209.500181][ T7186] loop0: detected capacity change from 0 to 4096
[  209.502306][ T7180] REISERFS (device loop1): using ordered data mode
[  209.552393][ T7193] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  209.569283][ T7180] reiserfs: using flush barriers
[  209.575880][ T7180] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  209.592672][ T7180] REISERFS (device loop1): checking transaction log (loop1)
[  209.601197][ T7180] REISERFS (device loop1): Using r5 hash to sort names
[  209.695723][ T7180] reiserfs: enabling write barrier flush mode
[  209.756048][ T7180] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  209.822601][ T7180] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  209.868004][ T7180] REISERFS (device loop1): Remounting filesystem read-only
[  209.923032][ T7180] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  209.991912][ T7180] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  210.068336][ T7180] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  210.084957][ T7202] loop4: detected capacity change from 0 to 256
[  210.109864][ T7180] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error
[  210.166339][ T7180] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  210.174937][ T7202] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  210.270613][ T7180] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  210.281858][ T7202] FAT-fs (loop4): Filesystem has been set read-only
[  210.308970][ T7202] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  210.321478][ T7180] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  210.361914][ T7202] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  210.385279][ T7180] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  210.422100][   T26] audit: type=1800 audit(1752057304.250:31): pid=7202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.913" name="file1" dev="loop4" ino=1048624 res=0 errno=0
[  210.461332][ T7180] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  210.462981][ T7202] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001)
[  210.509616][ T7180] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  210.545083][ T7180] REISERFS (device loop1): Remounting filesystem read-only
[  210.590572][ T7180] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error
[  210.624008][ T7209] loop0: detected capacity change from 0 to 64
[  210.681110][ T7211] netlink: 56 bytes leftover after parsing attributes in process `syz.2.916'.
[  211.804162][ T7213] loop5: detected capacity change from 0 to 32768
[  212.234629][ T7225] loop2: detected capacity change from 0 to 131072
[  212.273941][ T7225] F2FS-fs (loop2): Test dummy encryption mode enabled
[  212.296909][ T7225] F2FS-fs (loop2): invalid crc value
[  212.361420][ T7225] F2FS-fs (loop2): Found nat_bits in checkpoint
[  212.417861][ T7225] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  212.629841][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.925'.
[  212.672092][ T7225] fscrypt (loop2, inode 10): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  212.797625][ T7223] loop0: detected capacity change from 0 to 40427
[  212.821248][ T7227] loop1: detected capacity change from 0 to 32768
[  212.911871][ T7223] F2FS-fs (loop0): Found nat_bits in checkpoint
[  212.985724][ T7227] XFS (loop1): Mounting V5 Filesystem
[  213.146718][ T7223] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  213.266222][ T7227] XFS (loop1): Ending clean mount
[  213.326214][ T7227] XFS (loop1): Quotacheck needed: Please wait.
[  213.410683][ T7223] syz.0.922: attempt to access beyond end of device
[  213.410683][ T7223] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  213.547109][ T7227] XFS (loop1): Quotacheck: Done.
[  213.572191][ T7223] syz.0.922: attempt to access beyond end of device
[  213.572191][ T7223] loop0: rw=2049, sector=53280, nr_sectors = 8 limit=40427
[  213.653755][ T7223] syz.0.922: attempt to access beyond end of device
[  213.653755][ T7223] loop0: rw=2049, sector=53304, nr_sectors = 16 limit=40427
[  213.879623][ T4269] syz-executor: attempt to access beyond end of device
[  213.879623][ T4269] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  213.914690][ T4272] XFS (loop1): Unmounting Filesystem
[  214.181954][ T4755] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  214.383813][ T4755] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  214.402870][ T4755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.453009][ T4755] usb 3-1: config 0 descriptor??
[  214.483060][ T4755] gspca_main: sunplus-2.14.0 probing 055f:c420
[  215.016509][ T7290] loop5: detected capacity change from 0 to 512
[  215.098307][ T7290] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  215.238080][ T7290] EXT4-fs (loop5): 1 truncate cleaned up
[  215.270256][ T4755] gspca_sunplus: reg_w_riv err -71
[  215.276021][ T4755] sunplus: probe of 3-1:0.0 failed with error -71
[  215.286140][ T7290] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  215.323561][ T4755] usb 3-1: USB disconnect, device number 8
[  215.490899][ T7303] loop0: detected capacity change from 0 to 2048
[  215.493439][ T5269] EXT4-fs (loop5): unmounting filesystem.
[  215.503482][ T4579] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  215.560828][ T7303] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  215.678876][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  215.702040][ T4579] usb 5-1: Using ep0 maxpacket: 32
[  215.716442][ T4579] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  215.735937][ T4579] usb 5-1: config 0 has no interface number 0
[  215.764612][ T4579] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  215.792538][ T4579] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.812309][ T4579] usb 5-1: Product: syz
[  215.816666][ T4579] usb 5-1: Manufacturer: syz
[  215.821294][ T4579] usb 5-1: SerialNumber: syz
[  215.840208][ T4579] usb 5-1: config 0 descriptor??
[  215.854305][ T4579] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  215.872973][ T7309] loop0: detected capacity change from 0 to 8
[  215.949664][ T7313] loop1: detected capacity change from 0 to 64
[  215.970306][ T4416] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  216.034153][ T7316] device netdevsim0 entered promiscuous mode
[  216.061552][ T4579] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  216.089656][ T4579] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  216.153213][ T7316] device netdevsim0 left promiscuous mode
[  216.484181][ T7323] loop0: detected capacity change from 0 to 64
[  216.488389][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  216.498700][ T4579] usb 5-1: USB disconnect, device number 9
[  216.516054][ T4579] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  216.562876][ T4579] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  216.613751][ T4579] quatech2 5-1:0.51: device disconnected
[  217.309042][ T7336] loop4: detected capacity change from 0 to 8192
[  217.333349][ T7336] FAT-fs (loop4): Directory bread(block 22913) failed
[  217.343514][ T7336] FAT-fs (loop4): Directory bread(block 22914) failed
[  217.355910][ T7336] FAT-fs (loop4): Directory bread(block 22915) failed
[  217.387483][ T7336] FAT-fs (loop4): Directory bread(block 22916) failed
[  217.435747][ T7336] FAT-fs (loop4): Directory bread(block 22917) failed
[  217.450350][ T7336] FAT-fs (loop4): Directory bread(block 22918) failed
[  217.468603][ T7336] FAT-fs (loop4): Directory bread(block 22919) failed
[  217.497364][ T7336] FAT-fs (loop4): Directory bread(block 22920) failed
[  217.523167][ T7336] FAT-fs (loop4): Directory bread(block 22921) failed
[  217.540802][ T7336] FAT-fs (loop4): Directory bread(block 22922) failed
[  217.589155][ T7327] loop0: detected capacity change from 0 to 32768
[  217.680945][ T7327] XFS (loop0): Mounting V5 Filesystem
[  217.897108][ T7327] XFS (loop0): Ending clean mount
[  217.914050][ T7327] XFS (loop0): Quotacheck needed: Please wait.
[  218.008665][ T7327] XFS (loop0): Quotacheck: Done.
[  218.169876][ T4269] XFS (loop0): Unmounting Filesystem
[  218.652315][ T7353] loop4: detected capacity change from 0 to 32768
[  218.694575][ T7353] 
[  218.694575][ T7353]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  218.694575][ T7353] 
[  218.697766][ T7365] netlink: 'syz.0.964': attribute type 4 has an invalid length.
[  218.732197][ T7353] 
[  218.732197][ T7353]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  218.732197][ T7353] 
[  218.751598][ T7353] 
[  218.751598][ T7353]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  218.751598][ T7353] 
[  219.271866][ T4755] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  219.463063][ T4755] usb 3-1: Using ep0 maxpacket: 8
[  219.480476][ T4755] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  219.500842][ T4755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.518373][ T4755] usb 3-1: Product: syz
[  219.527206][ T4755] usb 3-1: Manufacturer: syz
[  219.537594][ T4755] usb 3-1: SerialNumber: syz
[  219.562578][ T4755] usb 3-1: config 0 descriptor??
[  219.583269][ T4755] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  219.596308][ T4755] usb 3-1: setting power ON
[  219.621853][ T4755] dvb-usb: bulk message failed: -22 (2/0)
[  219.644381][ T4755] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  219.664474][ T4755] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  219.680429][ T4755] usb 3-1: media controller created
[  219.737532][ T4755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  219.792640][ T7371] dvb-usb: bulk message failed: -22 (3/0)
[  219.851887][ T7371] dvb-usb: bulk message failed: -22 (4/0)
[  219.857692][ T4755] usb 3-1: selecting invalid altsetting 6
[  219.868292][ T4755] usb 3-1: digital interface selection failed (-22)
[  219.881976][ T4755] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  219.882965][ T7371] dvb-usb: bulk message failed: -22 (4/0)
[  219.904684][ T4755] usb 3-1: setting power OFF
[  219.971653][ T4755] dvb-usb: bulk message failed: -22 (2/0)
[  219.977723][ T7371] cxusb: i2c read failed
[  219.987935][ T4755] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  220.022031][ T4755] (NULL device *): no alternate interface
[  220.081157][ T4755] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  220.135894][ T4755] usb 3-1: USB disconnect, device number 9
[  220.171618][ T7383] loop4: detected capacity change from 0 to 4096
[  220.196820][ T7383] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  220.461222][ T4268] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22.
[  220.498669][ T4268] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22.
[  220.499054][ T7387] loop5: detected capacity change from 0 to 8192
[  220.518582][ T4268] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  220.567578][ T7387] FAT-fs (loop5): Directory bread(block 22913) failed
[  220.584746][ T7387] FAT-fs (loop5): Directory bread(block 22914) failed
[  220.603325][ T7387] FAT-fs (loop5): Directory bread(block 22915) failed
[  220.620532][ T7387] FAT-fs (loop5): Directory bread(block 22916) failed
[  220.661886][ T7387] FAT-fs (loop5): Directory bread(block 22917) failed
[  220.668766][ T7387] FAT-fs (loop5): Directory bread(block 22918) failed
[  220.749516][ T7387] FAT-fs (loop5): Directory bread(block 22919) failed
[  220.795919][ T7387] FAT-fs (loop5): Directory bread(block 22920) failed
[  220.821963][ T7387] FAT-fs (loop5): Directory bread(block 22921) failed
[  220.868867][ T7387] FAT-fs (loop5): Directory bread(block 22922) failed
[  221.054644][ T7397] loop1: detected capacity change from 0 to 512
[  221.144725][ T7397] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  221.286116][ T7397] EXT4-fs (loop1): 1 truncate cleaned up
[  221.391830][ T7397] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  221.478392][   T26] audit: type=1800 audit(1752057315.300:32): pid=7397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.982" name="file1" dev="loop1" ino=15 res=0 errno=0
[  221.895003][ T7395] loop2: detected capacity change from 0 to 32768
[  222.047398][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  222.143533][ T7395] XFS (loop2): Mounting V5 Filesystem
[  222.320098][ T7395] XFS (loop2): Ending clean mount
[  222.336016][ T7395] XFS (loop2): Quotacheck needed: Please wait.
[  222.420680][ T7395] XFS (loop2): Quotacheck: Done.
[  222.637770][ T7424] loop1: detected capacity change from 0 to 4096
[  222.687298][ T4281] XFS (loop2): Unmounting Filesystem
[  222.776648][ T7424] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  222.821546][ T7424] ntfs3: loop1: Failed to load $Extend.
[  223.197415][ T4272] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  223.498616][ T7434] loop1: detected capacity change from 0 to 512
[  223.559606][ T7434] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  223.687676][ T7434] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  223.858054][ T7434] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.991: corrupted inode contents
[  223.963867][ T7434] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.991: mark_inode_dirty error
[  224.031521][ T7434] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.991: corrupted inode contents
[  224.037415][ T7414] loop5: detected capacity change from 0 to 32768
[  224.088727][ T7434] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.991: mark_inode_dirty error
[  224.112844][  T952] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  224.177978][ T7414] 
[  224.177978][ T7414]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.177978][ T7414] 
[  224.312538][ T7414] 
[  224.312538][ T7414]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.312538][ T7414] 
[  224.323340][  T952] usb 5-1: Using ep0 maxpacket: 8
[  224.332994][  T952] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  224.376104][  T952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.398479][ T7414] 
[  224.398479][ T7414]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  224.398479][ T7414] 
[  224.404778][  T952] usb 5-1: Product: syz
[  224.423433][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  224.438596][  T952] usb 5-1: Manufacturer: syz
[  224.459560][  T952] usb 5-1: SerialNumber: syz
[  224.479504][  T952] usb 5-1: config 0 descriptor??
[  224.514451][  T952] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  224.532386][  T952] usb 5-1: setting power ON
[  224.537132][  T952] dvb-usb: bulk message failed: -22 (2/0)
[  224.580938][  T952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  224.622059][  T952] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  224.685344][  T952] usb 5-1: media controller created
[  224.720385][ T7439] dvb-usb: bulk message failed: -22 (3/0)
[  224.752608][ T7439] dvb-usb: bulk message failed: -22 (4/0)
[  224.772228][  T952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  224.812121][ T7451] dvb-usb: bulk message failed: -22 (4/0)
[  224.817927][ T7451] cxusb: i2c read failed
[  224.928913][  T952] usb 5-1: selecting invalid altsetting 6
[  224.957467][  T952] usb 5-1: digital interface selection failed (-22)
[  224.965545][  T952] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  224.984587][  T952] usb 5-1: setting power OFF
[  224.989473][  T952] dvb-usb: bulk message failed: -22 (2/0)
[  225.001189][  T952] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  225.017515][  T952] (NULL device *): no alternate interface
[  225.061632][  T952] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  225.146671][  T952] usb 5-1: USB disconnect, device number 10
[  225.182472][ T7459] loop2: detected capacity change from 0 to 512
[  225.228662][ T7459] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  225.336375][ T7459] EXT4-fs (loop2): 1 truncate cleaned up
[  225.381586][ T7459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  225.473864][   T26] audit: type=1800 audit(1752057319.300:33): pid=7459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1002" name="file1" dev="loop2" ino=15 res=0 errno=0
[  225.923953][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  225.996941][ T7469] loop1: detected capacity change from 0 to 4197
[  226.051645][ T7469] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff
[  226.065518][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'.
[  226.101458][ T7469] syz.1.1005: attempt to access beyond end of device
[  226.101458][ T7469] loop1: rw=12288, sector=8192, nr_sectors = 8 limit=4197
[  226.104951][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'.
[  226.303148][ T7469] syz.1.1005: attempt to access beyond end of device
[  226.303148][ T7469] loop1: rw=12288, sector=12288, nr_sectors = 8 limit=4197
[  226.327458][ T7469] syz.1.1005: attempt to access beyond end of device
[  226.327458][ T7469] loop1: rw=12288, sector=12288, nr_sectors = 8 limit=4197
[  226.381902][ T7469] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-5)
[  226.543146][ T7488] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1014'.
[  226.927437][ T7502] program syz.1.1019 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  227.252195][ T7133] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  227.282319][ T7515] loop4: detected capacity change from 0 to 1024
[  227.328132][ T7515] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  227.397533][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  227.422046][ T4581] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  227.453607][ T7133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.469883][ T7133] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  227.499496][ T7133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.526999][ T7133] usb 3-1: config 0 descriptor??
[  227.613765][ T4581] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  227.642556][ T4581] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  227.681885][ T4581] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  227.712033][ T4581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.739438][ T7524] loop0: detected capacity change from 0 to 256
[  227.742986][ T7512] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  227.822007][ T7524] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  227.919031][ T7524] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  227.960773][ T7133] steelseries_srws1 0003:1038:1410.000A: unknown main item tag 0x0
[  227.969033][ T7524] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  227.991795][ T7133] steelseries_srws1 0003:1038:1410.000A: unknown main item tag 0x0
[  228.020949][ T7133] steelseries_srws1 0003:1038:1410.000A: unknown main item tag 0x0
[  228.051812][ T7133] steelseries_srws1 0003:1038:1410.000A: unknown main item tag 0x0
[  228.060265][ T7133] steelseries_srws1 0003:1038:1410.000A: unknown main item tag 0x0
[  228.109299][ T7133] steelseries_srws1 0003:1038:1410.000A: unknown main item tag 0x0
[  228.121819][ T7133] steelseries_srws1 0003:1038:1410.000A: unexpected long global item
[  228.142627][ T7133] steelseries_srws1 0003:1038:1410.000A: parse failed
[  228.152754][ T7133] steelseries_srws1: probe of 0003:1038:1410.000A failed with error -22
[  228.186396][ T7133] usb 3-1: USB disconnect, device number 10
[  228.202803][ T4581] usb 2-1: USB disconnect, device number 8
[  228.661830][ T4579] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  228.842513][ T7540] loop0: detected capacity change from 0 to 128
[  228.885559][ T7540] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  228.929412][ T4579] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.966607][ T7540] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.980475][ T4579] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.006217][ T4579] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.041970][ T4579] usb 6-1: config 0 interface 0 has no altsetting 0
[  229.077286][ T4579] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  229.121978][ T4579] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.162797][ T4579] usb 6-1: config 0 descriptor??
[  229.170797][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  229.431602][ T7556] loop2: detected capacity change from 0 to 736
[  229.445760][ T7557] netlink: 'syz.4.1044': attribute type 6 has an invalid length.
[  229.594702][ T4579] kye 0003:0458:5015.000B: unknown main item tag 0x0
[  229.622312][ T4579] kye 0003:0458:5015.000B: unknown main item tag 0x0
[  229.649956][ T4579] kye 0003:0458:5015.000B: unknown main item tag 0x0
[  229.661889][ T4579] kye 0003:0458:5015.000B: unknown main item tag 0x0
[  229.690473][ T4579] kye 0003:0458:5015.000B: unknown main item tag 0x0
[  229.721695][ T4579] kye 0003:0458:5015.000B: unknown main item tag 0x0
[  229.730871][ T4579] kye 0003:0458:5015.000B: unknown main item tag 0x0
[  229.752537][ T4579] kye 0003:0458:5015.000B: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.5-1/input0
[  229.771855][ T4579] kye 0003:0458:5015.000B: tablet-enabling feature report not found
[  229.780023][ T4579] kye 0003:0458:5015.000B: tablet enabling failed
[  229.845060][ T7547] loop1: detected capacity change from 0 to 32768
[  229.855260][ T4579] usb 6-1: USB disconnect, device number 6
[  229.889609][ T7547] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1039 (7547)
[  229.926190][ T7547] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  229.940874][ T7547] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  230.004685][ T7547] BTRFS info (device loop1): enabling auto defrag
[  230.011194][ T7547] BTRFS info (device loop1): use no compression
[  230.068840][ T7547] BTRFS info (device loop1): force clearing of disk cache
[  230.103206][ T7547] BTRFS info (device loop1): max_inline at 4096
[  230.109541][ T7547] BTRFS info (device loop1): disabling free space tree
[  230.236775][ T7562] fido_id[7562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  230.299144][ T7553] loop0: detected capacity change from 0 to 32768
[  230.334864][ T7553] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1042 (7553)
[  230.487420][ T7547] BTRFS info (device loop1): enabling ssd optimizations
[  230.532454][ T7547] BTRFS info (device loop1): rebuilding free space tree
[  230.592543][ T7547] BTRFS info (device loop1): disabling free space tree
[  230.599532][ T7547] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  230.671858][ T7547] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  230.755659][ T4746] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4746)
[  231.184831][ T4272] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  231.333508][ T4579] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  231.374453][ T7616] loop2: detected capacity change from 0 to 256
[  231.544147][ T4579] usb 1-1: Using ep0 maxpacket: 16
[  231.553559][ T4579] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  231.594553][ T4579] usb 1-1: config 0 has no interface number 0
[  231.600746][ T4579] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  231.636863][ T4579] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  231.699071][ T4579] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  231.737113][ T4579] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  231.755937][ T4579] usb 1-1: Product: syz
[  231.760262][ T4579] usb 1-1: SerialNumber: syz
[  231.787306][ T4579] usb 1-1: config 0 descriptor??
[  231.816257][ T4579] cm109 1-1:0.8: invalid payload size 0, expected 4
[  231.842552][ T4579] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input9
[  232.031976][ T7133] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  232.069661][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  232.082596][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  232.090168][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  232.101813][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  232.109306][ T4579] usb 1-1: USB disconnect, device number 10
[  232.120386][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -2
[  232.128024][ T4579] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  232.162924][ T7630] loop5: detected capacity change from 0 to 64
[  232.207279][   T26] audit: type=1800 audit(1752057326.030:34): pid=7630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1069" name="file1" dev="loop5" ino=18 res=0 errno=0
[  232.216458][ T7630] syz.5.1069: attempt to access beyond end of device
[  232.216458][ T7630] loop5: rw=34817, sector=18, nr_sectors = 400 limit=64
[  232.271841][ T7133] usb 5-1: Using ep0 maxpacket: 32
[  232.301412][ T7133] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  232.324062][ T7633] hfs: request for non-existent node 24 in B*Tree
[  232.327298][ T7630] syz.5.1069: attempt to access beyond end of device
[  232.327298][ T7630] loop5: rw=34817, sector=420, nr_sectors = 20 limit=64
[  232.350958][ T7133] usb 5-1: config 0 has no interface number 0
[  232.371454][ T7133] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  232.378109][ T7633] hfs: request for non-existent node 24 in B*Tree
[  232.387881][ T7133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.406218][ T7133] usb 5-1: Product: syz
[  232.412086][ T7630] syz.5.1069: attempt to access beyond end of device
[  232.412086][ T7630] loop5: rw=34817, sector=445, nr_sectors = 64 limit=64
[  232.431844][ T7133] usb 5-1: Manufacturer: syz
[  232.442174][ T7133] usb 5-1: SerialNumber: syz
[  232.460055][ T7133] usb 5-1: config 0 descriptor??
[  232.472869][ T7133] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  232.684602][ T7133] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  232.723914][ T7133] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  232.789467][ T7639] loop5: detected capacity change from 0 to 1024
[  232.810398][ T7626] loop2: detected capacity change from 0 to 32768
[  232.868251][ T7626] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  232.873007][ T7639] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.925936][ T7641] loop0: detected capacity change from 0 to 1024
[  232.942457][ T7626] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  232.951206][ T7626] BTRFS info (device loop2): using free space tree
[  233.027363][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'.
[  233.108891][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  233.117875][ T4579] usb 5-1: USB disconnect, device number 11
[  233.142247][ T4579] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  233.205724][ T4579] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  233.217656][   T46] hfsplus: b-tree write err: -5, ino 4
[  233.278289][ T7653] loop1: detected capacity change from 0 to 2048
[  233.348972][ T4579] quatech2 5-1:0.51: device disconnected
[  233.387276][ T7653] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  233.410880][ T7626] BTRFS info (device loop2): enabling ssd optimizations
[  233.560044][ T7668] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.585623][ T7653] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  233.665034][ T4281] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  233.675773][ T7653] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  233.810737][ T7672] loop0: detected capacity change from 0 to 1024
[  233.820170][ T7653] Remounting filesystem read-only
[  233.855477][ T7672] EXT4-fs: Ignoring removed orlov option
[  233.893936][ T7672] EXT4-fs: Ignoring removed nomblk_io_submit option
[  233.900759][ T7653] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  233.925882][ T7670] NILFS (loop1): the device already has a read-only mount.
[  233.962284][ T7653] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16)
[  234.010269][ T7672] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  234.133055][ T7653] NILFS (loop1): error -5 truncating bmap (ino=16)
[  234.184637][ T7681] dummy0: default FDB implementation only supports local addresses
[  234.262558][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  234.352447][ T4272] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  235.252332][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'.
[  235.534790][ T7688] loop4: detected capacity change from 0 to 131072
[  235.542787][ T7688] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  235.550928][ T7688] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  235.560967][ T7688] F2FS-fs (loop4): invalid crc value
[  235.624644][ T7688] F2FS-fs (loop4): Found nat_bits in checkpoint
[  235.680566][ T7688] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  235.687764][ T7688] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  235.850987][ T7695] loop0: detected capacity change from 0 to 32768
[  235.888083][ T7695] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1084 (7695)
[  235.917581][ T7709] loop1: detected capacity change from 0 to 8192
[  235.977038][ T7695] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  235.988530][ T7709] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  236.121161][ T7695] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  236.149923][ T7709] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  236.161911][ T7695] BTRFS info (device loop0): turning on sync discard
[  236.183443][ T7695] BTRFS info (device loop0): doing ref verification
[  236.193671][ T7695] BTRFS info (device loop0): disabling tree log
[  236.201902][ T7709] REISERFS (device loop1): using ordered data mode
[  236.210271][ T7695] BTRFS info (device loop0): enabling ssd optimizations
[  236.234197][ T7709] reiserfs: using flush barriers
[  236.254931][ T7695] BTRFS info (device loop0): using spread ssd allocation scheme
[  236.304701][ T7695] BTRFS info (device loop0): not using ssd optimizations
[  236.317520][ T7709] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  236.331827][ T7695] BTRFS info (device loop0): not using spread ssd allocation scheme
[  236.382213][ T7709] REISERFS (device loop1): checking transaction log (loop1)
[  236.387477][ T7695] BTRFS info (device loop0): using free space tree
[  236.403469][ T7709] REISERFS (device loop1): Using r5 hash to sort names
[  236.410784][ T7709] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  236.449646][ T7709] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  236.658657][ T7733] loop2: detected capacity change from 0 to 1024
[  236.683278][ T7730] loop5: detected capacity change from 0 to 8192
[  236.727887][ T7733] EXT4-fs: inline encryption not supported
[  236.777715][ T7733] EXT4-fs: Ignoring removed bh option
[  236.884691][ T7733] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  237.123136][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1098'.
[  237.286051][ T4269] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  237.320952][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  238.062018][ T5125] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  238.226619][ T7776] loop2: detected capacity change from 0 to 47
[  238.252009][ T5125] usb 2-1: Using ep0 maxpacket: 8
[  238.261986][ T5125] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  238.277508][ T5125] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  238.291432][ T5125] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  238.302212][ T5125] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  238.315792][ T5125] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  238.326218][ T5125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.352170][ T7776] MINIX-fs: deleted inode referenced: 9
[  238.359981][ T7776] MINIX-fs: deleted inode referenced: 9
[  238.508757][ T7779] loop4: detected capacity change from 0 to 128
[  238.564370][ T5125] usb 2-1: GET_CAPABILITIES returned 0
[  238.571206][ T5125] usbtmc 2-1:16.0: can't read capabilities
[  238.587744][   T26] audit: type=1800 audit(1752057332.410:35): pid=7779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1113" name="file2" dev="loop4" ino=1048632 res=0 errno=0
[  238.621045][ T4354] kernel read not supported for file /dsp (pid: 4354 comm: kworker/0:6)
[  238.631428][ T7778] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  238.675861][ T7778] FAT-fs (loop4): Filesystem has been set read-only
[  238.699223][ T7778] syz.4.1113: attempt to access beyond end of device
[  238.699223][ T7778] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  238.724827][ T7778] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  238.734524][ T7778] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  238.779515][ T5125] usb 2-1: USB disconnect, device number 9
[  239.035609][ T7789] loop0: detected capacity change from 0 to 256
[  239.920915][ T7804] loop5: detected capacity change from 0 to 128
[  240.056104][   T26] audit: type=1800 audit(1752057333.880:36): pid=7804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1122" name="file1" dev="loop5" ino=1048634 res=0 errno=0
[  240.096828][   T33] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8)
[  240.106185][   T33] FAT-fs (loop5): Filesystem has been set read-only
[  240.113695][   T33] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522)
[  240.789250][ T7798] loop2: detected capacity change from 0 to 32768
[  240.943164][ T7831] loop4: detected capacity change from 0 to 1024
[  241.007802][ T7798] XFS (loop2): Mounting V5 Filesystem
[  241.101436][ T7798] XFS (loop2): Ending clean mount
[  241.125637][ T7831] hfsplus: found bad thread record in catalog
[  241.133252][ T7798] XFS (loop2): Quotacheck needed: Please wait.
[  241.177406][ T7798] XFS (loop2): Quotacheck: Done.
[  241.192119][ T7831] hfsplus: catalog searching failed
[  241.365682][   T75] hfsplus: found bad thread record in catalog
[  241.366864][ T4281] XFS (loop2): Unmounting Filesystem
[  241.377664][   T75] hfsplus: found bad thread record in catalog
[  241.719730][ T7133] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  241.911826][ T7133] usb 2-1: Using ep0 maxpacket: 16
[  241.919493][ T7133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.941363][ T7827] loop0: detected capacity change from 0 to 32768
[  241.957505][ T7133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.023980][ T7133] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  242.078921][ T7133] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  242.125022][ T7133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.235081][ T7133] usb 2-1: config 0 descriptor??
[  242.384395][ T7853] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1138'.
[  242.652353][ T7133] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  242.671918][ T7133] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max
[  242.853107][ T7133] microsoft 0003:045E:07DA.000C: No inputs registered, leaving
[  242.877577][ T7133] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  242.912321][ T7133] microsoft 0003:045E:07DA.000C: no inputs found
[  242.928105][ T7133] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway
[  243.000809][ T7133] usb 2-1: USB disconnect, device number 10
[  243.305796][ T7855] fido_id[7855]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  243.421628][ T7854] loop0: detected capacity change from 0 to 32768
[  243.553164][ T7854] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  243.624785][ T7854] XFS (loop0): Quotacheck needed: Please wait.
[  243.752022][ T5125] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  243.770292][ T7854] XFS (loop0): Quotacheck: Done.
[  243.942992][ T4269] XFS (loop0): Unmounting Filesystem
[  243.951366][ T7876] loop1: detected capacity change from 0 to 1024
[  243.961880][ T5125] usb 6-1: Using ep0 maxpacket: 8
[  243.976128][ T5125] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  244.049060][ T7876] hfsplus: found bad thread record in catalog
[  244.059390][ T5125] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  244.068313][ T7876] hfsplus: catalog searching failed
[  244.097730][ T5125] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  244.160727][ T5125] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  244.226959][ T5125] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  244.253320][ T5125] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  244.275700][   T11] hfsplus: found bad thread record in catalog
[  244.290348][   T11] hfsplus: found bad thread record in catalog
[  244.315383][ T5125] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.509726][ T7885] loop2: detected capacity change from 0 to 128
[  244.537483][ T7885] EXT4-fs: Ignoring removed nobh option
[  244.550076][ T5125] usb 6-1: GET_CAPABILITIES returned 0
[  244.557046][ T5125] usbtmc 6-1:16.0: can't read capabilities
[  244.639149][ T7885] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  244.675094][ T7885] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  244.774047][ T5125] usb 6-1: USB disconnect, device number 7
[  244.931409][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  244.958122][ T7895] loop1: detected capacity change from 0 to 4096
[  245.001241][ T7897] loop4: detected capacity change from 0 to 1024
[  245.015673][ T7895] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  245.060240][ T7895] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  245.077216][ T7897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  245.123838][ T7901] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  245.168919][ T7897] overlayfs: upper fs needs to support d_type.
[  245.204070][ T7895] overlayfs: upper fs does not support tmpfile.
[  245.221332][ T7897] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  245.241629][ T7895] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  245.247676][ T7897] overlayfs: failed to set xattr on upper
[  245.254179][ T7902] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.'
[  245.264352][ T7897] overlayfs: ...falling back to index=off,metacopy=off.
[  245.307910][ T7895] overlayfs: failed to set xattr on upper
[  245.342043][ T7895] overlayfs: ...falling back to index=off,metacopy=off.
[  245.444757][ T7902] Remounting filesystem read-only
[  245.631900][ T4272] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  245.969360][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'.
[  246.223482][ T7923] sp0: Synchronizing with TNC
[  246.721992][ T5125] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  246.931818][ T5125] usb 1-1: Using ep0 maxpacket: 8
[  246.938700][ T5125] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  246.971895][ T5125] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  246.981700][ T5125] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  247.021815][ T5125] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  247.041773][ T5125] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  247.061815][ T5125] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  247.071030][ T5125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.241838][    T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  247.254335][ T7938] loop1: detected capacity change from 0 to 1024
[  247.318510][ T5125] usb 1-1: GET_CAPABILITIES returned 0
[  247.324461][ T5125] usbtmc 1-1:16.0: can't read capabilities
[  247.331524][ T7938] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  247.431863][    T7] usb 3-1: Using ep0 maxpacket: 8
[  247.441210][    T7] usb 3-1: config 0 has no interfaces?
[  247.459423][ T7938] overlayfs: upper fs needs to support d_type.
[  247.468248][    T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  247.489514][ T7938] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  247.497012][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.511841][    T7] usb 3-1: Product: syz
[  247.517607][ T7938] overlayfs: failed to set xattr on upper
[  247.523874][    T7] usb 3-1: Manufacturer: syz
[  247.539261][ T7938] overlayfs: ...falling back to index=off,metacopy=off.
[  247.551330][ T7936] loop4: detected capacity change from 0 to 32768
[  247.553280][    T7] usb 3-1: SerialNumber: syz
[  247.583787][ T5125] usb 1-1: USB disconnect, device number 11
[  247.594515][    T7] usb 3-1: config 0 descriptor??
[  247.835704][ T5125] usb 3-1: USB disconnect, device number 11
[  248.279371][ T7952] loop1: detected capacity change from 0 to 2048
[  248.338673][ T7952] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  248.855385][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  249.100025][ T7987] vxcan1: tx address claim with different name
[  249.117238][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  249.261028][ T7993] loop4: detected capacity change from 0 to 512
[  249.294684][ T7993] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  249.360356][ T7993] EXT4-fs (loop4): 1 truncate cleaned up
[  249.412577][ T7993] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  249.646576][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  249.692363][ T8002] loop2: detected capacity change from 0 to 8192
[  249.733999][ T8002] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  250.882336][ T8033] loop1: detected capacity change from 0 to 256
[  250.900636][ T8033] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  250.914172][ T8033] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  250.934768][ T8033] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  251.265910][ T8041] loop1: detected capacity change from 0 to 512
[  251.368141][ T8041] EXT4-fs (loop1): 1 orphan inode deleted
[  251.381841][ T8041] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  251.402631][ T8041] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.413836][   T33] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  251.461829][   T33] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:2: Failed to release dquot type 1
[  251.586896][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  252.022050][ T5125] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  252.211836][ T5125] usb 5-1: Using ep0 maxpacket: 8
[  252.222684][ T5125] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.249339][ T5125] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  252.284738][ T5125] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  252.302474][ T5125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.320769][ T5125] usb 5-1: Product: syz
[  252.325566][ T5125] usb 5-1: Manufacturer: syz
[  252.330206][ T5125] usb 5-1: SerialNumber: syz
[  252.560571][ T5125] cdc_ncm 5-1:1.0: bind() failure
[  252.575231][ T5125] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  252.591895][ T5125] cdc_ncm 5-1:1.1: bind() failure
[  252.616953][ T5125] usb 5-1: USB disconnect, device number 12
[  253.109775][ T8077] loop1: detected capacity change from 0 to 1024
[  253.198323][ T8077] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  253.246434][   T26] audit: type=1800 audit(1752061442.064:37): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1225" name="file1" dev="loop1" ino=15 res=0 errno=0
[  253.436276][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  253.648947][ T8085] loop0: detected capacity change from 0 to 4096
[  253.764573][ T8085] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  253.786866][ T8085] ntfs3: loop0: Failed to load $Extend.
[  253.876458][ T8071] loop5: detected capacity change from 0 to 32768
[  253.968457][ T8071] ialloc: diAlloc returned -5!
[  254.072305][ T4269] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  254.440756][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1249'.
[  254.491960][ T8100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1236'.
[  255.639487][ T4579] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  255.831031][ T8126] loop1: detected capacity change from 0 to 32768
[  255.841840][ T4579] usb 6-1: Using ep0 maxpacket: 16
[  255.851846][ T4579] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  255.863863][ T4579] usb 6-1: config 0 has no interface number 0
[  255.870023][ T4579] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  255.881389][ T4579] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  255.903468][ T4579] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  255.954888][ T4579] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  255.980162][ T4579] usb 6-1: Product: syz
[  256.000815][ T4579] usb 6-1: SerialNumber: syz
[  256.033105][ T8126] XFS (loop1): Mounting V5 Filesystem
[  256.057799][ T4579] usb 6-1: config 0 descriptor??
[  256.069573][ T4579] cm109 6-1:0.8: invalid payload size 0, expected 4
[  256.090916][ T4579] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input10
[  256.145428][ T8140] loop4: detected capacity change from 0 to 256
[  256.249859][ T8126] XFS (loop1): Ending clean mount
[  256.309872][ T8126] XFS (loop1): Quotacheck needed: Please wait.
[  256.352693][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  256.352976][ T5125] usb 6-1: USB disconnect, device number 8
[  256.359687][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  256.439382][ T5125] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  256.501420][ T8126] XFS (loop1): Quotacheck: Done.
[  256.561900][ T8142] tap0: tun_chr_ioctl cmd 2147767520
[  256.629876][ T4272] XFS (loop1): Unmounting Filesystem
[  257.184774][ T8150] loop5: detected capacity change from 0 to 128
[  257.231231][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'.
[  257.283085][ T8150] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  257.395989][ T8150] ext4 filesystem being mounted at /174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  257.501917][ T4579] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  257.595507][ T5269] EXT4-fs (loop5): unmounting filesystem.
[  257.701987][ T4579] usb 5-1: Using ep0 maxpacket: 16
[  257.713944][ T4579] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  257.748018][ T4579] usb 5-1: config 0 has no interface number 0
[  257.765180][ T4579] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  257.797878][ T4579] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  257.823702][ T4579] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  257.848809][ T4579] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  257.879578][ T4579] usb 5-1: Product: syz
[  257.894226][ T4579] usb 5-1: SerialNumber: syz
[  257.914242][ T4579] usb 5-1: config 0 descriptor??
[  257.940316][ T4579] cm109 5-1:0.8: invalid payload size 0, expected 4
[  257.955762][ T4579] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input11
[  258.140953][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  258.358614][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  258.366198][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  258.374491][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  258.381682][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  258.390488][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  258.397869][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  258.406139][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  258.413323][ T4579] usb 5-1: USB disconnect, device number 13
[  258.422682][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  258.429679][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  258.451935][ T4579] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  258.839946][ T8178] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1273'.
[  258.931830][ T4575] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  259.131812][ T4575] usb 6-1: Using ep0 maxpacket: 8
[  259.139128][ T4575] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  259.172954][ T4575] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3
[  259.188933][ T8185] loop4: detected capacity change from 0 to 4096
[  259.198947][ T4575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.227121][ T4575] usb 6-1: Product: syz
[  259.235607][ T4575] usb 6-1: Manufacturer: syz
[  259.244289][ T4575] usb 6-1: SerialNumber: syz
[  259.268049][ T4575] usb 6-1: config 0 descriptor??
[  259.507658][ T8187] xt_CT: No such helper "snmp"
[  259.512530][ T4754] usb 6-1: USB disconnect, device number 9
[  259.831870][    T7] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  260.036170][    T7] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  260.069755][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.093932][    T7] usb 5-1: Product: syz
[  260.098285][    T7] usb 5-1: Manufacturer: syz
[  260.141125][    T7] usb 5-1: SerialNumber: syz
[  260.194575][ T8200] loop0: detected capacity change from 0 to 512
[  260.268628][ T8200] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1282: casefold flag without casefold feature
[  260.377689][ T8200] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1282: couldn't read orphan inode 15 (err -117)
[  260.469113][ T8200] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  260.564983][    T7] usb 5-1: Firmware: major: 0, minor: 98, hardware type: ATUSB (0)
[  260.630887][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  260.771307][    T7] usb 5-1: failed to fetch extended address, random address set
[  260.824213][    T7] usb 5-1: USB disconnect, device number 14
[  260.875103][ T8206] loop0: detected capacity change from 0 to 256
[  261.006072][ T8206] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  261.851943][    T7] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  262.042777][    T7] usb 6-1: Using ep0 maxpacket: 8
[  262.048003][ T4754] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  262.059437][    T7] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  262.079619][    T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  262.100010][    T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  262.120510][    T7] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  262.152014][    T7] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  262.171344][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.266814][ T4754] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  262.291913][ T4754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.300033][ T4754] usb 1-1: Product: syz
[  262.311927][ T4754] usb 1-1: Manufacturer: syz
[  262.316627][ T4754] usb 1-1: SerialNumber: syz
[  262.343476][ T4754] usb 1-1: config 0 descriptor??
[  262.409182][    T7] usb 6-1: GET_CAPABILITIES returned 0
[  262.416722][    T7] usbtmc 6-1:16.0: can't read capabilities
[  262.620964][    T7] usb 6-1: USB disconnect, device number 10
[  262.756858][ T4754] usb 1-1: Firmware: major: 223, minor: 162, hardware type: ATUSB (1)
[  262.957924][ T4754] usb 1-1: failed to fetch extended address, random address set
[  263.013710][ T4754] usb 1-1: USB disconnect, device number 12
[  263.596633][ T8244] syzkaller1: tun_chr_ioctl cmd 1074025675
[  263.618016][ T8244] syzkaller1: persist disabled
[  264.147679][ T8261] loop4: detected capacity change from 0 to 512
[  264.152742][ T8259] loop5: detected capacity change from 0 to 512
[  264.185191][ T8261] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  264.215823][ T8259] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  264.274524][ T8261] EXT4-fs (loop4): 1 truncate cleaned up
[  264.280243][ T8261] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  264.299190][ T8259] EXT4-fs (loop5): 1 truncate cleaned up
[  264.322492][ T8259] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  264.425904][   T26] audit: type=1800 audit(1752061453.244:38): pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1305" name="file1" dev="loop4" ino=15 res=0 errno=0
[  264.451834][ T8259] EXT4-fs (loop5): shut down requested (0)
[  264.593348][ T5269] EXT4-fs (loop5): unmounting filesystem.
[  264.908468][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  265.051005][ T8273] bridge0: port 3(syz_tun) entered blocking state
[  265.058301][ T8273] bridge0: port 3(syz_tun) entered disabled state
[  265.152302][ T8273] device syz_tun entered promiscuous mode
[  265.160424][ T8273] bridge0: port 3(syz_tun) entered blocking state
[  265.167872][ T8273] bridge0: port 3(syz_tun) entered forwarding state
[  265.266674][ T8271] loop1: detected capacity change from 0 to 8192
[  265.470743][ T8271] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2068)
[  265.520281][ T8271] FAT-fs (loop1): Filesystem has been set read-only
[  266.354009][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  266.382755][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  266.392606][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  266.400484][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  266.418100][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  266.427357][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  266.581992][ T4575] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  266.781953][ T4575] usb 2-1: Using ep0 maxpacket: 32
[  266.789857][ T4575] usb 2-1: config 0 interface 0 has no altsetting 0
[  266.797011][ T4575] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  266.806502][ T4575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.824975][ T4575] usb 2-1: config 0 descriptor??
[  267.061675][ T4362] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.198429][ T4362] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.261644][ T4575] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0
[  267.282150][ T4575] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0
[  267.289616][ T4575] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0
[  267.304071][ T4575] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0
[  267.311529][ T4575] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0
[  267.324529][ T4575] corsair-psu 0003:1B1C:1C09.000D: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0
[  267.370533][ T4362] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.448131][ T4362] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.608429][ T8294] chnl_net:caif_netlink_parms(): no params data found
[  267.740268][ T4575] corsair-psu 0003:1B1C:1C09.000D: unable to initialize device (-110)
[  267.754001][ T4575] corsair-psu: probe of 0003:1B1C:1C09.000D failed with error -110
[  267.766203][ T4575] usb 2-1: USB disconnect, device number 11
[  267.888203][ T8294] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.914807][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.933169][ T8294] device bridge_slave_0 entered promiscuous mode
[  268.045868][ T8294] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.053281][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.061643][ T8294] device bridge_slave_1 entered promiscuous mode
[  268.070846][ T8324] fido_id[8324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  268.185040][ T8294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.198184][ T8294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.270397][ T8294] team0: Port device team_slave_0 added
[  268.287558][ T8294] team0: Port device team_slave_1 added
[  268.336126][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.343459][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.369853][ T8294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.382359][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.389334][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.416394][ T8294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.474352][ T8294] device hsr_slave_0 entered promiscuous mode
[  268.481198][ T8294] device hsr_slave_1 entered promiscuous mode
[  268.491383][ T8294] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  268.499241][ T8294] Cannot create hsr debugfs directory
[  268.518189][   T48] Bluetooth: hci4: command 0x0409 tx timeout
[  268.809101][ T8294] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  268.819419][ T8294] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  268.906041][ T8294] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  268.921427][ T8294] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  269.162890][ T4362] device hsr_slave_0 left promiscuous mode
[  269.172805][ T4362] device hsr_slave_1 left promiscuous mode
[  269.187120][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.197016][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.209386][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.219513][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.234162][ T4362] device bridge_slave_1 left promiscuous mode
[  269.240463][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.261360][ T4362] device bridge_slave_0 left promiscuous mode
[  269.270550][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.307234][ T4362] device veth1_macvtap left promiscuous mode
[  269.313435][ T4362] device veth0_macvtap left promiscuous mode
[  269.319597][ T4362] device veth1_vlan left promiscuous mode
[  269.326199][ T4362] device veth0_vlan left promiscuous mode
[  269.949229][ T4362] team0 (unregistering): Port device team_slave_1 removed
[  270.006727][ T4362] team0 (unregistering): Port device team_slave_0 removed
[  270.059622][ T4362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.116812][ T4362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.591912][   T48] Bluetooth: hci4: command 0x041b tx timeout
[  270.699883][ T4362] bond0 (unregistering): Released all slaves
[  270.787963][ T8294] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.847411][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  270.858287][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  270.877582][ T8294] 8021q: adding VLAN 0 to HW filter on device team0
[  270.890721][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  270.908067][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  270.929828][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.938479][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.991481][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  271.001620][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  271.024111][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  271.042490][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.049642][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.082193][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  271.094213][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  271.103900][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  271.123591][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  271.139388][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  271.167691][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  271.197874][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  271.231102][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  271.243955][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  271.254972][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  271.264395][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  271.278682][ T8294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  271.697553][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  271.711260][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  271.729149][ T8294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.190203][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  272.200474][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  272.234673][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  272.244474][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  272.258154][ T8294] device veth0_vlan entered promiscuous mode
[  272.266155][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  272.275797][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  272.289349][ T8294] device veth1_vlan entered promiscuous mode
[  272.330755][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  272.340864][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  272.356797][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  272.368496][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  272.383592][ T8294] device veth0_macvtap entered promiscuous mode
[  272.399008][ T8294] device veth1_macvtap entered promiscuous mode
[  272.417307][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.429828][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.440646][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.451520][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.462351][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.473106][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.483665][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.495879][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.512791][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.524223][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  272.540965][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  272.549702][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  272.565347][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  272.580537][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.600312][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.610916][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.630038][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.640146][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.651014][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.660912][ T8294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.671425][ T8294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.681479][   T48] Bluetooth: hci4: command 0x040f tx timeout
[  272.689270][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.705976][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  272.717639][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  272.734366][ T8294] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.743358][ T8294] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.755689][ T8294] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.765105][ T8294] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.861312][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.882375][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.904834][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  272.931364][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.943404][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.961643][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  273.134251][ T8392] loop1: detected capacity change from 0 to 128
[  273.193627][ T8392] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  273.249860][ T8392] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  274.381400][ T8399] loop4: detected capacity change from 0 to 32768
[  274.416622][ T8399] 
[  274.416622][ T8399]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  274.416622][ T8399] 
[  274.418450][ T8432] Â: renamed from pim6reg1
[  274.560396][ T8436] loop1: detected capacity change from 0 to 1024
[  274.596788][ T8436] EXT4-fs: inline encryption not supported
[  274.650919][ T8436] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #3: block 1: comm syz.1.1337: lblock 1 mapped to illegal pblock 1 (length 1)
[  274.673638][ T4360] 
[  274.673638][ T4360]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  274.673638][ T4360] 
[  274.693231][ T8436] EXT4-fs (loop1): Remounting filesystem read-only
[  274.699978][ T8436] Quota error (device loop1): write_blk: dquota write failed
[  274.712757][ T8436] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  274.732016][ T8436] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.1337: Failed to acquire dquot type 0
[  274.751875][   T48] Bluetooth: hci4: command 0x0419 tx timeout
[  274.781823][ T8436] EXT4-fs (loop1): Remounting filesystem read-only
[  274.792146][ T8436] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.1337: Freeing blocks not in datazone - block = 0, count = 4096
[  274.831972][ T4360] 
[  274.831972][ T4360]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  274.831972][ T4360] 
[  274.872086][ T4268] 
[  274.872086][ T4268]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  274.872086][ T4268] 
[  274.891456][ T8436] EXT4-fs (loop1): Remounting filesystem read-only
[  274.899778][ T4268] 
[  274.899778][ T4268]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  274.899778][ T4268] 
[  274.936557][ T8436] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1337: Invalid inode bitmap blk 0 in block_group 0
[  274.955675][  T108] 
[  274.955675][  T108]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  274.955675][  T108] 
[  274.962939][ T8444] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1340'.
[  274.988779][ T4362] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  274.994408][ T8436] EXT4-fs (loop1): Remounting filesystem read-only
[  275.041810][  T108] ==================================================================
[  275.049937][  T108] BUG: KASAN: use-after-free in txEnd+0x329/0x520
[  275.056399][  T108] Write of size 8 at addr ffff888027289040 by task jfsCommit/108
[  275.064146][  T108] 
[  275.066512][  T108] CPU: 1 PID: 108 Comm: jfsCommit Not tainted 6.1.143-syzkaller #0
[  275.074437][  T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  275.084533][  T108] Call Trace:
[  275.087840][  T108]  <TASK>
[  275.090796][  T108]  dump_stack_lvl+0x168/0x22e
[  275.095512][  T108]  ? __lock_acquire+0x7c50/0x7c50
[  275.100578][  T108]  ? show_regs_print_info+0x12/0x12
[  275.105819][  T108]  ? load_image+0x3b0/0x3b0
[  275.110526][  T108]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  275.115938][  T108]  ? __virt_addr_valid+0x188/0x540
[  275.121091][  T108]  ? __virt_addr_valid+0x465/0x540
[  275.126255][  T108]  ? txEnd+0x329/0x520
[  275.130363][  T108]  print_report+0xa8/0x220
[  275.134810][  T108]  kasan_report+0x10b/0x140
[  275.139360][  T108]  ? txEnd+0x329/0x520
[  275.143471][  T108]  kasan_check_range+0x27b/0x290
[  275.148454][  T108]  txEnd+0x329/0x520
[  275.152398][  T108]  jfs_lazycommit+0x5a2/0xa50
[  275.157119][  T108]  ? txFreelock+0x5a0/0x5a0
[  275.161659][  T108]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  275.167587][  T108]  ? do_task_dead+0xd0/0xd0
[  275.172129][  T108]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  275.178070][  T108]  ? __kthread_parkme+0x162/0x1c0
[  275.183145][  T108]  kthread+0x29d/0x330
[  275.187262][  T108]  ? txFreelock+0x5a0/0x5a0
[  275.191889][  T108]  ? kthread_blkcg+0xd0/0xd0
[  275.196528][  T108]  ret_from_fork+0x1f/0x30
[  275.201001][  T108]  </TASK>
[  275.204081][  T108] 
[  275.206423][  T108] Allocated by task 8399:
[  275.210785][  T108]  kasan_set_track+0x4b/0x70
[  275.215416][  T108]  __kasan_kmalloc+0x8e/0xa0
[  275.220038][  T108]  lmLogOpen+0x2c0/0xf90
[  275.224290][  T108]  jfs_mount_rw+0xf2/0x5c0
[  275.228894][  T108]  jfs_fill_super+0x58e/0xac0
[  275.233583][  T108]  mount_bdev+0x287/0x3c0
[  275.237951][  T108]  legacy_get_tree+0xe6/0x180
[  275.242651][  T108]  vfs_get_tree+0x88/0x270
[  275.247080][  T108]  do_new_mount+0x24a/0xa40
[  275.251596][  T108]  __se_sys_mount+0x2d6/0x3c0
[  275.256281][  T108]  do_syscall_64+0x4c/0xa0
[  275.260708][  T108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  275.266612][  T108] 
[  275.268941][  T108] Freed by task 4268:
[  275.272929][  T108]  kasan_set_track+0x4b/0x70
[  275.277537][  T108]  kasan_save_free_info+0x2d/0x50
[  275.282568][  T108]  ____kasan_slab_free+0x126/0x1e0
[  275.287697][  T108]  slab_free_freelist_hook+0x131/0x1a0
[  275.293166][  T108]  __kmem_cache_free+0xb6/0x1f0
[  275.298037][  T108]  lmLogClose+0x293/0x520
[  275.302378][  T108]  jfs_umount+0x28f/0x360
[  275.306727][  T108]  jfs_put_super+0x88/0x190
[  275.311418][  T108]  generic_shutdown_super+0x130/0x340
[  275.316800][  T108]  kill_block_super+0x7c/0xe0
[  275.321487][  T108]  deactivate_locked_super+0x93/0xf0
[  275.326780][  T108]  cleanup_mnt+0x463/0x4f0
[  275.331213][  T108]  task_work_run+0x1ca/0x250
[  275.335816][  T108]  exit_to_user_mode_loop+0xe6/0x110
[  275.341119][  T108]  exit_to_user_mode_prepare+0xb1/0x140
[  275.346678][  T108]  syscall_exit_to_user_mode+0x16/0x40
[  275.352155][  T108]  do_syscall_64+0x58/0xa0
[  275.356581][  T108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  275.362490][  T108] 
[  275.364820][  T108] Last potentially related work creation:
[  275.370538][  T108]  kasan_save_stack+0x3a/0x60
[  275.375238][  T108]  __kasan_record_aux_stack+0xb2/0xc0
[  275.380629][  T108]  kvfree_call_rcu+0x108/0x870
[  275.385414][  T108]  neigh_flush_dev+0x177/0xa80
[  275.390186][  T108]  __neigh_ifdown+0x39/0x3f0
[  275.394781][  T108]  neigh_ifdown+0x1b/0x30
[  275.399120][  T108]  rt6_disable_ip+0x78e/0x7f0
[  275.403809][  T108]  addrconf_ifdown+0x162/0x1a10
[  275.408666][  T108]  addrconf_notify+0x405/0xf40
[  275.413442][  T108]  raw_notifier_call_chain+0xcb/0x160
[  275.418821][  T108]  dev_close_many+0x28d/0x400
[  275.423517][  T108]  unregister_netdevice_many+0x471/0x1840
[  275.429256][  T108]  default_device_exit_batch+0x9c3/0xa50
[  275.434906][  T108]  cleanup_net+0x77b/0xb80
[  275.439335][  T108]  process_one_work+0x898/0x1160
[  275.444284][  T108]  worker_thread+0xaa2/0x1250
[  275.448967][  T108]  kthread+0x29d/0x330
[  275.453057][  T108]  ret_from_fork+0x1f/0x30
[  275.457486][  T108] 
[  275.459817][  T108] The buggy address belongs to the object at ffff888027289000
[  275.459817][  T108]  which belongs to the cache kmalloc-1k of size 1024
[  275.473880][  T108] The buggy address is located 64 bytes inside of
[  275.473880][  T108]  1024-byte region [ffff888027289000, ffff888027289400)
[  275.487264][  T108] 
[  275.489593][  T108] The buggy address belongs to the physical page:
[  275.496023][  T108] page:ffffea00009ca200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27288
[  275.506179][  T108] head:ffffea00009ca200 order:3 compound_mapcount:0 compound_pincount:0
[  275.514508][  T108] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  275.522612][  T108] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441dc0
[  275.531293][  T108] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  275.539878][  T108] page dumped because: kasan: bad access detected
[  275.546305][  T108] page_owner tracks the page as allocated
[  275.552024][  T108] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 952, tgid 952 (kworker/1:2), ts 85327936512, free_ts 85322946098
[  275.571049][  T108]  post_alloc_hook+0x173/0x1a0
[  275.575834][  T108]  get_page_from_freelist+0x1a26/0x1ac0
[  275.581387][  T108]  __alloc_pages+0x1df/0x4e0
[  275.585990][  T108]  alloc_slab_page+0x5d/0x160
[  275.590680][  T108]  new_slab+0x87/0x2c0
[  275.594768][  T108]  ___slab_alloc+0xbc6/0x1220
[  275.599459][  T108]  __kmem_cache_alloc_node+0x1a0/0x260
[  275.604930][  T108]  __kmalloc+0xa0/0x240
[  275.609112][  T108]  ___neigh_create+0x6ce/0x24c0
[  275.613978][  T108]  ip6_finish_output2+0x14f0/0x1590
[  275.619193][  T108]  ip6_finish_output+0x5d3/0xa60
[  275.624141][  T108]  ndisc_send_skb+0xbfb/0x1510
[  275.629022][  T108]  ndisc_send_ns+0xc8/0x150
[  275.633535][  T108]  addrconf_dad_work+0xa15/0x14d0
[  275.638652][  T108]  process_one_work+0x898/0x1160
[  275.643597][  T108]  worker_thread+0xaa2/0x1250
[  275.648303][  T108] page last free stack trace:
[  275.653066][  T108]  free_unref_page_prepare+0x8b4/0x9a0
[  275.658542][  T108]  free_unref_page+0x2e/0x3f0
[  275.663406][  T108]  __unfreeze_partials+0x1a5/0x200
[  275.668528][  T108]  put_cpu_partial+0x17c/0x250
[  275.673300][  T108]  qlist_free_all+0x76/0xe0
[  275.677818][  T108]  kasan_quarantine_reduce+0x144/0x160
[  275.683291][  T108]  __kasan_slab_alloc+0x1e/0x80
[  275.688155][  T108]  slab_post_alloc_hook+0x4b/0x480
[  275.693273][  T108]  kmem_cache_alloc_node+0x14d/0x320
[  275.698588][  T108]  __alloc_skb+0xfc/0x7e0
[  275.703026][  T108]  rtmsg_ifinfo_build_skb+0x80/0x180
[  275.708410][  T108]  rtmsg_ifinfo+0x71/0x120
[  275.712842][  T108]  netdev_state_change+0xe6/0x140
[  275.717883][  T108]  linkwatch_do_dev+0x10d/0x160
[  275.722752][  T108]  __linkwatch_run_queue+0x408/0x660
[  275.728056][  T108]  linkwatch_event+0x48/0x50
[  275.732668][  T108] 
[  275.735017][  T108] Memory state around the buggy address:
[  275.740653][  T108]  ffff888027288f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  275.748722][  T108]  ffff888027288f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  275.756809][  T108] >ffff888027289000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  275.764883][  T108]                                            ^
[  275.771034][  T108]  ffff888027289080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  275.779102][  T108]  ffff888027289100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  275.787193][  T108] ==================================================================
[  275.807650][ T4362] EXT4-fs (loop1): Remounting filesystem read-only
[  275.825486][ T4362] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  275.850747][ T8436] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[  275.868756][ T4362] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:6: Failed to release dquot type 0
[  275.886927][ T8436] EXT4-fs (loop1): Remounting filesystem read-only
[  275.911194][ T4362] EXT4-fs (loop1): Remounting filesystem read-only
[  275.918106][ T8436] EXT4-fs (loop1): 1 orphan inode deleted
[  275.941901][ T8436] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  276.097432][ T8421] loop6: detected capacity change from 0 to 40427
[  276.153717][ T8421] F2FS-fs (loop6): Invalid log sectors per block(0) log sectorsize(9)
[  276.187071][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  276.211566][ T8421] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  276.323906][ T8421] F2FS-fs (loop6): invalid crc value
[  276.355460][ T8421] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  276.498900][  T108] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  276.506256][  T108] CPU: 1 PID: 108 Comm: jfsCommit Not tainted 6.1.143-syzkaller #0
[  276.510761][ T8421] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1
[  276.511286][ T8421] F2FS-fs (loop6): Start checkpoint disabled!
[  276.526687][  T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  276.536780][  T108] Call Trace:
[  276.540093][  T108]  <TASK>
[  276.543057][  T108]  dump_stack_lvl+0x168/0x22e
[  276.547777][  T108]  ? memcpy+0x3c/0x60
[  276.551798][  T108]  ? show_regs_print_info+0x12/0x12
[  276.557037][  T108]  ? load_image+0x3b0/0x3b0
[  276.561554][  T108]  panic+0x2c9/0x710
[  276.565466][  T108]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  276.571637][  T108]  ? bpf_jit_dump+0xd0/0xd0
[  276.576164][  T108]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[  276.582158][  T108]  ? _raw_spin_unlock+0x40/0x40
[  276.587017][  T108]  check_panic_on_warn+0x80/0xa0
[  276.592058][  T108]  ? txEnd+0x329/0x520
[  276.596144][  T108]  end_report+0x66/0x110
[  276.600494][  T108]  kasan_report+0x118/0x140
[  276.605022][  T108]  ? txEnd+0x329/0x520
[  276.609104][  T108]  kasan_check_range+0x27b/0x290
[  276.614065][  T108]  txEnd+0x329/0x520
[  276.617973][  T108]  jfs_lazycommit+0x5a2/0xa50
[  276.622750][  T108]  ? txFreelock+0x5a0/0x5a0
[  276.627262][  T108]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  276.633163][  T108]  ? do_task_dead+0xd0/0xd0
[  276.637769][  T108]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  276.643675][  T108]  ? __kthread_parkme+0x162/0x1c0
[  276.648743][  T108]  kthread+0x29d/0x330
[  276.652827][  T108]  ? txFreelock+0x5a0/0x5a0
[  276.657359][  T108]  ? kthread_blkcg+0xd0/0xd0
[  276.661964][  T108]  ret_from_fork+0x1f/0x30
[  276.666411][  T108]  </TASK>
[  276.669760][  T108] Kernel Offset: disabled
[  276.674130][  T108] Rebooting in 86400 seconds..