last executing test programs:

1m44.631741639s ago: executing program 3 (id=109):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0xc0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa4aee000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708})

1m43.596385613s ago: executing program 3 (id=118):
r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x2d, 0x32, 0x6d, 0x78, 0x2d, 0x2d, 0x39]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x0, {0x5, 0x7fff, 0x4, 0x3, 0x6a5e}})
chdir(&(0x7f0000000240)='./file0\x00')

1m41.231069594s ago: executing program 3 (id=128):
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x8, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0xa3f129aecf81458, {0x0, r3}})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1m40.232870885s ago: executing program 3 (id=132):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80), 0x1, 0x44f, &(0x7f00000002c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

1m39.610657486s ago: executing program 3 (id=134):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602200000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

1m37.604553908s ago: executing program 3 (id=141):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = syz_io_uring_setup(0x3, &(0x7f0000000240)={0x0, 0x6109, 0x1, 0x0, 0x1a4}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1m36.818036892s ago: executing program 32 (id=141):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = syz_io_uring_setup(0x3, &(0x7f0000000240)={0x0, 0x6109, 0x1, 0x0, 0x1a4}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

6.679592769s ago: executing program 0 (id=688):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000300)="8b", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='\a', 0x1}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x808, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0)

5.729493645s ago: executing program 0 (id=698):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x2, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5.583003617s ago: executing program 0 (id=700):
epoll_create1(0x80000)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0)

5.075433428s ago: executing program 0 (id=704):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.530861193s ago: executing program 0 (id=706):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180))

4.07144567s ago: executing program 1 (id=712):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30454070000000000010902"], 0x0)
write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)

2.991713377s ago: executing program 4 (id=720):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)

2.858308438s ago: executing program 4 (id=721):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0), 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x60, &(0x7f0000001100)}, 0x10)

2.756033406s ago: executing program 4 (id=722):
unshare(0x400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
lseek(r0, 0x7fffffffffffffff, 0x0)
r1 = timerfd_create(0x0, 0x0)
sendfile(r0, r1, 0x0, 0x240000000000)

2.732636608s ago: executing program 2 (id=723):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="09000000040000000600000006"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000140), &(0x7f0000000200)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

2.634607806s ago: executing program 2 (id=724):
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000)
ppoll(&(0x7f0000000180)=[{r1, 0x2}, {r1, 0x2005}], 0x2, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

2.622474817s ago: executing program 4 (id=725):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@multicast, @empty, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x28, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}}, "a232c463f59e3d909d93da1d9509c5fdc8b72b2f"}}}}}, 0x3a)

2.534704894s ago: executing program 1 (id=726):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0x28}, 0x1, 0x0, 0x0, 0x40450d5}, 0x8000)

2.46702141s ago: executing program 2 (id=727):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7}}}}}}, 0x0)

2.388550546s ago: executing program 2 (id=728):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x0)
getdents(r0, 0x0, 0x58)

2.332827831s ago: executing program 1 (id=729):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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")
r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0)
write$UHID_INPUT(r0, &(0x7f0000001680)={0x8, {"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", 0x1000}}, 0x1006)
close(r0)
open(&(0x7f0000000040)='./file1\x00', 0x20142, 0x10)

2.313361712s ago: executing program 4 (id=730):
socket(0x11, 0xa, 0x8)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1}, {0x0, 0x2, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xc}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x3e, 0x2c, 0x66, 0x0, 0x4, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x4, 0xd, 0x3, 0xb}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5, 0x0, 0x5dc}}}}}}, 0x0)

2.209224391s ago: executing program 2 (id=731):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000000c0), 0x1, 0x5101, &(0x7f0000005140)="$eJzs3U+IVVUcB/Dz5s04k4LzEgJbZRFItXBwExHRUyaoKHrlYjACpxZBunASJFoIYov+LXwlRS0kV1KLZBZGUBsXUhiB29AwF24UA8lFO4159547753ru+/NpI3p5yMz9577u+fc8x538b7PufcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCG88Ptnh6rqp65Nnzk309x5YMvM5X3T606HUOtsr+X1HVuffeXNbTtenIgdZl/Olo1GvyGzruezxqqejQv9en9eDyGMJQPU8+Uza0qjdq/uKQ9Y6frF3Uc37W1uPH64Xb966ezJ8ktnwcRKT2Cl5OfVhcVzqdn5PZLsUbS7Tr1azyma9U9PuP/kRQAASzLV6iyKj6P5R9yivT+tJ+1m0m4n7fgJod3dWI5s3FX95rkhra/QPJtZVBjvO8+knr//RbuV9k/aSdRYwjx7d80jzUS/ec4l9ZWaJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDt5JG3Rx+qqp+6Nn3m3Exz54EtM5f3Ta87HUKjs72WlWur3z/c/OvbrccO/Lj5q+MXnn+s3tncLPqPdu0cfosrT0yG8EZX5UIc9uLaEFq9hU4zfFkuvNVZeS4WAAAAuJPc3/k9UrSzODjW06510mSt8y/KwuL1i7uPbtrb3Hj8cLt+9dLZk8sfr9VnvOYNxyvajcWfWlcwjvE3HW+xHnfdUxqnWjpimucfPz/1d1X/Uv5vVOf/+M7V86X8DwAAwHLI/+k41Qbl/+9e++OTqv6l/L+h55Cl/B9nHPP/SFhe/gcAAIDb2a3O/83SONUG5f/xl8a+rupfyv9Tw+X/0e5px42/xgnvmgxhatDUAQAAgD7i/7svfrUQ83r2zUGa15969OC5qvFK+b85XP4fu6mvCgAAAPg3jnyx/eGqein/t4bL/+O3dNYAAADAUrzz4cQHVfVS/p8dLv+vzpf5lQ9Zp5/iXyEcmgxhYmFlLiv8HNpPFwUAAADgJok5/c9Pd/5QtV8p/89V3/8/3ukgXv/fc/+/0vX/XYXsrn9PujEAAAAAd6Py9fzx9vjZkwtu/Pz94a//f+Ceg69WHb+U//cPl//r3cub+fw/AAAAWIb/2/P/tpfGqTbo/v/3ffTuL1X9S/m/PVz+j8s13S/vRK2WvT/vTYawfmElv5vgN/Fwu5LC/FhXoaOV9NgWe+SF+fGuQsdc0mPzZAgPLqzsTwr3xkI7KVxZmxeOJIXTsZCfD0XhWFI4Ec+0z9fm000L38dCfoHFfLyCYk1xSUTS42q/HguFG/Y4WxwcAADgrhLDc55lx3qbIY2y87VBO6wetMPIoB3qg3YYTXZId+y3Pcz2FuL29pmNS3v+/5Hh8n98K1Zli37X/4d4/X/+XMPi+v/ZWGgkhflYaKV3DGjFY2Rh9+N4jEYr73FlfVEAAACAO1r8XqC+wvMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4h717j5Grug8HfvY53ofXC8lPIfyiZJPUOG7i9domJGqpsqZUjUhp1g0FVRHFxl6TxQt2bFNiFCJjE9EIQWmDlPxRhFEU1fwBtQIRSQHhIsURKo+IqiiAQKE1REGklCQiTZBCNXvvmb1z7s7DjzVe+Hwk75yZ73neeXjOvXfOBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J3h4Fev/ttm8Ud+d+4zz180fvmetRe9cu25pz4RwsTM4x1ZuKP/htvGf3HXOXfvuX/17fcePu+jvXm5PB4Gqn868zvXx1oPLw7hvo4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HH7QF8K+MBuoVfX9vhAGC4ELnnz4oZuqiVv7QlgaQqikbTxXydroSwNn9GaB/jSwtTsL/PrNTC3wvc4sAMcsvhlqL/oDE/UZhucu1+D113PcOvbWSofXFRPDjfP9fO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvMtnrbiF6n8G8qbs6FK6Nw0uXnDVdM74yOdYXS0q1FN8/Q8P/3alzceSXrBvA5jB4aPy+vw5seX3tW1/PzH7l2x9KX9H9v78rF288eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM1f+L3PNouX5v/Dzef/8eUcbzvrcsda3xjK5ubxkcGYeHUom5sDAADAgrEQ9ppuHX3wk83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4E7Y3OXLgnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+H8sB4EjgUAxNJ4NsxcEsSuD4GDiSBjTFwMAmcEwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvh2JrybZ6tlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt/3qbz4XmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/feFbzeKl+f94e+f/x30iXYXM4dG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz6wvll/S/P/ifbO/++vv806cSj24utLQlhUCPww9rIamDESAz/5VH0gH/+huAFujFXlJybUqroxllgfA2NJYF+jEj+qlTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+u/rqZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwaH+2MGAMDHbkiQf7s7q60qqu6w/h7OrA0qpeyNf/707XGHyyL6sqBk770P7XzqgmvtUXwspi4KnP3/HxamJnEqg1/pd9IXygOtq08e8uyhrvSRv/xqIQ3l8I1Kq6dFEI1cZ606oeruTXMUir+udKCO8qBGpVnVUJYVcAYIGK/5VuKj64Y9c1WzZMT09un8dE3IffFzZPTU+Obtw6vanSoE+bkj7XLWN0XXlM7V755tl8iaIL71k32E669jvBsWJb+X780omD+f34XahnZpyre+rurkmH/JEPl5sIhW9SjYbcOc9D7i9WMvskluqP+XvDQFh01Y7J7aNf2rBz5/ZV2d92s6/O/sbDTNm2WpVuq/65+tbGy6PhalmJo91Wy4qVrNx5xbaVO3Zds2Lqig2XTV42eeWqs1aPnTm2ZuwTZ66sjmos+9tiqMvmqjoZ6pt3tDmu4zjU07sLlZyITw0JCYmFltg6sKzp/8ml+f+25vP/+KkTP/nz9RkaHf8fjof5s8dnD/Ovj4F97R7/H250NL92YsBIEtgdA7sd5gcAAODtIU7y497MuFf6Z8u/+1KzcqX5/+72fv9/nNb/ry1df16jZf6XxxJjjdb/T5f5r63/v7vR+v/pMv+19f/3vQXr/19VCySb5JfW/wcAAN4OTtz6/y2X908vEFDK0HJ5//QCAaUMLZfxb/cCAUe8/v9z//lX/x2aKM3/b2lv/m/hfgAAADh5fOXPrv5/zeKl+f++9ub/J379v9Do/P+RRoGJRgsDWv8PAACABarR+n/DN/Rf0qxcaf5/oL35fzztorMud6z1jaFsTbuQrmn36lDtJwMAAACwMHSG0dGeNvPWrYy69ujbfDpfCrRZuuiFPzl8ZOf/H2xv/l/3u4ybH196V9fy8x97494VS1/a/7G9L88e/wcAAADmT7v7JQAAAAAAAAAAAAAAgLfeC/+xZ02zeOn3/2HdzOONfv8fr/sXf1/w7rrcsdbW6//l9y/4zN27ZpYsfHQohA8XA1v2bDkl5NfmX1YMPHTx8vdUE3vSEg88f86L1cQlaeDTK059vZo4Owmsj4skvjcNxKsqvr44CcTlFf89DcTtcSAN9OaBry3OxtGRbqufDWbbqiPdVs8MhrCkEKhtq/sGszY60gHemgRqA/xiGogD/PM80Jn26u6BrFcxMBiL3j6Q9QoAgJNW/BbYEzZPTU+Oxa/w8fb07vrbqG7JsuvK1Xa02fyz+dJkF96zbrCddFf6XXT2WuM9oVIdwqrS19Vilo6ZUR6fWlpsunc3GHKr1d46G5RLHemm6208or5sRKMbt05v6mk58DWts6zubpllVWmyU8zSObNJ26iljb60MaI2t00bXY73O8PoaFeS6w9icDjUafWKaPf3+sV1/hq9Cop5rjy899fN6ivN/4fbm/9XiuN6Pb8YwO54Zb2/W2KZfwAAAJhfX1v7m2/Gf5+74ZGnmuUtzf9H2pv/xz1Y+aHgbG/HwXj9/71LQpi5tP5wFrgzNnfpkhA+OJOaiCWyC+qfF0uMZYE74w6T5bHE+on6qhbFwIEk8NOhPHAwCRyKgXwvxf6Q78r5+6EQPj6TWldfYlssMZwEPhsDI0lgNAbGksDiGBhPAq8szgMTSeDfYiBM1W+rexbn2woAAOBI5POsnvq7IZ3nHehulaGjVYb+Vhk6W2WotMrQaBTx/ndihp7k5JWOQqaetNa+pJZShngx/CPuVylD+FF9zrRgeprAgXj+Qe18g476mu//ZHclNFGa/4+1N//vr7/NWj8U5/+z1//LAj+M3ft6PHV8JAZ+8qn6QL5j4FCc7N5Yq2oiL5FP2m+MJcZjYCQJbIuB8SSwfl0e2Pee+kA+0641vrfW+FReohAAAACAEy7uIIi7aeL8//YdXx1oVq40/x9vb/4f2xsoNnZ9rPXw4hDu65jtTS2wYjALxP0Yg/Hn8e8bDOGUwg6OWonJ/qxEb9Jw+EFf9gv13rSq7/dlPz6I9y948uGHbqombu0LYWlh70utjecqWRt9aeCM3izQnwa2dmeBuOenFvheZxaAY1bb2xdfUPmpLjXDc5dr8Pp7u1wTNB1eaR/oHPnm+s3VfCntcM33qdYc2dPWdP8tx03p7XHQu20hvtuG34nvtr70gdoXqfwbypuzoUro3DS5ecNV0zvjI8VfspbM0/Nc/JVqO+nj8DrcffS9ba2SdmAs+fgYm7vc3K/DjljdzY8vvatr+fmP3bti6Uv7P7b35ba70UD8ofDD1/7r4I8Lm3e+VUL+mltwnycT78TPk5IF97SNeNpCCOte+caNzeKl+f9Ee/P/7uR2xm/ixtyxJISPFDbuo3Hz//GS7HOwEMg+Jd9VDmSH3P9rqOEnJwAAABxvtd0dtf0FU/ltdkJ4Ok8u5584wvxxf8X4nPnb7Xf/X1+8tFm8NP9f33z+vyjppuP/jv8zTxz/n9PJvit6UfrA7mPaFV2qjnnh+P+cTvZ3m+P/c3L83/H/uTj+34Lj/3M62Z+20rekbb50hRBe+qMHn2kWL83/t7U3/7f+39yL9tXW/1vfaP2/bY3W/9tt/T8AAGBeNVhoLp3nlVbvK2VIV+8rZWi5QGDLJQat/1dqutX6fy+e/txvQxOl+f/u9ub/8eUwUGx9oaz/N7KuQVW3xMA2CwMCAABwMmq0gwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC31v3/8D+bmsUf+d25zzx/0fjle9Ze9Mq15576RAhTM493ZOGO/htuG//FXefcvef+1bffe/i8j1bycj357f+vyx1rfWMohH2FRwZj4tWh6p3ZwAWfuXtXdzXx6FAIHy4GtuzZcko18e2hEJYVAw9dvPw91cSetMQDz5/zYjVxSRr49IpTX68mzs4DHWl3/3Fx1t2OtLs3LQ5hSSFQ6+7li+urqrXxp3mgM23jnwazNmJgMBb95mDWRgxMxxJTi0JY2R1CV1rVI5Wsqq60qn+pZFV1pVV9pRLC2SGE7rSq53uzqrrTkT/Rm1UVA6d9aP9rZ1QT+3pDWFkMPPX5Oz5eTXwxCdQa/4veED5QfcmkjX+nJ2u8J2381p4Q3h9C6E1L/Ko7K9GblnihO4R3FQK1xr/QHcKuwNtC/PCp+0TbseuaLRumpye3z2OiN2+rL2yemp4c3bh1elMl6VMjHYX0m9cd/diffe3LG6u3F96zbrCddHdermemy6t76u6uOdl7H/vVX6xk9vko1R/z94aBsOiqHZPbR7+0YefO7auyv+1mX5397cqj2bZatVC21bJiJSt3XrFt5Y5d16yYumLDZZOXTV656qzVY2eOrRn7xJkrq6May/4ej6HeceKHenp3oZIT8QEgISGx0BKddZ9uYyf7B3npi/5sR3tCZeYDujStKGbpmBnl8Rj02qMc8dF8T2k5olWliUMpy+o5slxXn2VNaTIxW0tflmXme11pclhsrHNmk8b7nWF0tKvRdhiuv1vcvD8/hs37dL7p2k0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqMng0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBQAAP//O24jzg==")
r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)

2.124180908s ago: executing program 0 (id=732):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1.585094261s ago: executing program 1 (id=733):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000010280)={0x1, 0x0, 0x3, 0x1, 0x5, "90897f000003000000000000001e277fffffeb"})
r1 = dup(r0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x9, 0x2, 0x0, 0x82fa, 0x1a, "e8540000808000"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff)

982.83253ms ago: executing program 4 (id=734):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb29}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000900)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB='@\a('], 0x0, 0x0, 0x0, 0x0, 0x0})

502.132089ms ago: executing program 1 (id=735):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$eJzsmb2LE0EYxp+Z3eydhyg2FjYWHniit9ndqFxzxQmWgnCKWgZvPU73LpKskAQEg42NpYVga2NpYWFl4V9gq4UKgoUp7YSR+djdyWYT4gdG9P3BzT7z9c68L9yzsAFBEP8tHz98ff/w3NqlUwD2YxkLZvyzo5/i4Oj6d4/vnHy0fv7J87dPX+8duPuyHI/JPWL28z0ArzYcpGCuOXFk93IRNtO4DI4TRl8Bg6/lN6HQnRgM18yam5Zu7TMiif3rrWTrxk4SB7IJZRPJpmGfLy81HDBsAVhUtxOCWfOdXv9WM0nidlnURHbO2NSPimn1U/fb4FhHVj0hOICrD+4PZN/UBgF4Xr8QHKHRDTBsGr2GBfi+X5TEyv+IW8R3Zsl/vuKZEodW/9Sh4Locf0Pu/7Co/ZY4rDwi/6HzkcPDzAPtNZ/mnvvPC2VcAMam3iwlyYVfiOxVFCoXhT9JZz9u+ZMLN/ePerp7u97p9Vd3dpvb8Xa8F0WNs8HpIDgT1ZUR6XaK/y0qf1qy4tcmrPWYh24zTdthF0jbYd6PdGs57uaL1he1hyv/41g5pmMw887KX5QlmPnj6inVilO98t7EnAiCIAiCIAiCIAiCIAiCIKo5Cgb9S5hg5oNoFdFF9YXyewAAAP//L0Rm/Q==")
socket$inet6(0xa, 0x80002, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4)
fadvise64(r0, 0xe0ffff, 0x9, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)

359.966301ms ago: executing program 2 (id=736):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000340)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000640)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0)

0s ago: executing program 1 (id=737):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2dd, &(0x7f0000000100)="$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")
r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000c03"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000780)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)

kernel console output (not intermixed with test programs):

after parsing attributes in process `syz.2.10'.
[   86.973321][ T5911] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   87.015233][ T1202] cfg80211: failed to load regulatory.db
[   87.215899][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'.
[   87.392893][ T5921] loop2: detected capacity change from 0 to 512
[   87.499412][ T5921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.518447][ T5925] loop0: detected capacity change from 0 to 256
[   87.562703][ T5921] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   87.689603][ T5925] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d)
[   87.729816][ T5921] EXT4-fs (loop2): shut down requested (2)
[   87.835370][ T5930] loop1: detected capacity change from 0 to 256
[   87.849904][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.857174][ T5930] exfat: Deprecated parameter 'utf8'
[   87.886554][ T5930] exfat: Deprecated parameter 'namecase'
[   87.902033][ T5930] exfat: Deprecated parameter 'utf8'
[   87.907402][ T5930] exfat: Deprecated parameter 'utf8'
[   87.997770][ T5930] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d)
[   88.335452][ T5938] loop0: detected capacity change from 0 to 512
[   88.615507][ T5834] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   88.660379][ T5944] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.817103][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.861945][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.887815][ T5834] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   88.909554][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.935248][ T5834] usb 3-1: config 0 descriptor??
[   89.394246][ T5834] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[   89.430206][ T5834] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input6
[   89.487789][ T5953] loop0: detected capacity change from 0 to 8192
[   89.530964][ T5953] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   89.552021][ T5953] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   89.599820][ T5834] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[   89.609554][ T5953] REISERFS (device loop0): using ordered data mode
[   89.617023][ T5834] usb 3-1: USB disconnect, device number 2
[   89.642984][ T5953] reiserfs: using flush barriers
[   89.662785][ T5953] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   89.684548][ T5953] REISERFS (device loop0): checking transaction log (loop0)
[   89.712699][ T5953] REISERFS (device loop0): Using r5 hash to sort names
[   89.724747][ T5953] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   89.876351][ T5953] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 293, free_space(entry_count) 2
[   89.951753][ T5953] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[   89.990797][ T5961] fido_id[5961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   90.011910][ T5953] REISERFS (device loop0): Remounting filesystem read-only
[   90.039721][ T5953] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data
[   90.083437][ T5962] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 293, free_space(entry_count) 2
[   90.119691][ T5962] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[   90.283407][ T5965] loop3: detected capacity change from 0 to 512
[   90.340534][ T5965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.407281][ T5965] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.015228][ T1317] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   91.055455][ T1317] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28
[   91.070498][ T1317] EXT4-fs (loop3): This should not happen!! Data will be lost
[   91.070498][ T1317] 
[   91.089409][ T5969] loop0: detected capacity change from 0 to 32768
[   91.099296][ T1317] EXT4-fs (loop3): Total free blocks count 0
[   91.118096][ T5969] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.34 (5969)
[   91.121630][ T1317] EXT4-fs (loop3): Free/Dirty block details
[   91.147647][ T1317] EXT4-fs (loop3): free_blocks=65280
[   91.177113][ T1317] EXT4-fs (loop3): dirty_blocks=1029
[   91.188296][ T1317] EXT4-fs (loop3): Block reservation details
[   91.217769][ T1317] EXT4-fs (loop3): i_reserved_data_blocks=1029
[   91.234169][ T5969] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   91.260170][ T5969] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   91.280233][ T5969] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[   91.299905][ T5969] BTRFS info (device loop0): use lzo compression, level 0
[   91.307469][ T5969] BTRFS info (device loop0): using free space tree
[   91.390127][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.555244][ T5969] BTRFS info (device loop0): enabling ssd optimizations
[   91.571684][ T5969] BTRFS info (device loop0): auto enabling async discard
[   92.165703][ T5789] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   92.398679][ T5999] Illegal XDP return value 1736498977 on prog  (id 5) dev syz_tun, expect packet loss!
[   93.022756][ T5996] loop3: detected capacity change from 0 to 32768
[   93.049576][ T5996] =======================================================
[   93.049576][ T5996] WARNING: The mand mount option has been deprecated and
[   93.049576][ T5996]          and is ignored by this kernel. Remove the mand
[   93.049576][ T5996]          option from the mount to silence this warning.
[   93.049576][ T5996] =======================================================
[   93.135514][ T5996] XFS: attr2 mount option is deprecated.
[   93.157202][  T786] kernel write not supported for file /35/clear_refs (pid: 786 comm: kworker/0:2)
[   93.247378][ T5996] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   93.301833][   T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   93.511730][   T27] usb 1-1: Using ep0 maxpacket: 32
[   93.525251][   T27] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[   93.554350][ T5996] XFS (loop3): Ending clean mount
[   93.555082][   T27] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[   93.586668][ T5996] XFS (loop3): Quotacheck needed: Please wait.
[   93.601692][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.621799][   T27] usb 1-1: Product: syz
[   93.626031][   T27] usb 1-1: Manufacturer: syz
[   93.641352][   T27] usb 1-1: SerialNumber: syz
[   93.665750][   T27] usb 1-1: config 0 descriptor??
[   93.686735][   T27] usb 1-1: bad CDC descriptors
[   93.712251][   T27] usb 1-1: unsupported MDLM descriptors
[   93.729483][ T5996] XFS (loop3): Quotacheck: Done.
[   93.797102][ T6025] loop2: detected capacity change from 0 to 1024
[   93.960456][  T786] usb 1-1: USB disconnect, device number 3
[   94.084804][ T5788] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   94.716314][ T6034] loop1: detected capacity change from 0 to 2048
[   94.822932][ T6034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.004778][ T6034] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.53: bg 0: block 408: padding at end of block bitmap is not set
[   95.016017][ T6043] syzkaller1: entered promiscuous mode
[   95.029814][ T6034] EXT4-fs (loop1): Remounting filesystem read-only
[   95.029881][ T6043] syzkaller1: entered allmulticast mode
[   95.339010][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.380520][ T6047] loop0: detected capacity change from 0 to 128
[   95.456915][ T6047] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   95.520134][ T6047] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   95.604880][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   95.615417][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.58'.
[   96.134302][ T6068] loop2: detected capacity change from 0 to 512
[   96.350818][ T6068] EXT4-fs (loop2): Test dummy encryption mode enabled
[   96.385272][ T6079] Bluetooth: MGMT ver 1.22
[   96.391860][ T6068] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   96.428092][ T6068] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   96.471746][ T6068] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.64: bad orphan inode 131083
[   96.504015][ T6068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.548419][ T6083] loop3: detected capacity change from 0 to 1024
[   96.631525][ T6083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.691373][ T6085] loop1: detected capacity change from 0 to 2048
[   96.780141][ T6068] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   96.783466][ T6085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.871371][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.887005][ T6095] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.64: path /23/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   96.888447][ T6068] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   96.944080][ T6085] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   97.110238][ T1317] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28
[   97.125036][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.140419][ T1317] EXT4-fs (loop1): This should not happen!! Data will be lost
[   97.140419][ T1317] 
[   97.171745][ T1317] EXT4-fs (loop1): Total free blocks count 0
[   97.177855][ T1317] EXT4-fs (loop1): Free/Dirty block details
[   97.183977][ T1317] EXT4-fs (loop1): free_blocks=2415919504
[   97.189881][ T1317] EXT4-fs (loop1): dirty_blocks=16
[   97.195216][ T1317] EXT4-fs (loop1): Block reservation details
[   97.201420][ T1317] EXT4-fs (loop1): i_reserved_data_blocks=1
[   97.202940][ T6099] all (unregistering): Released all slaves
[   97.230859][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.387647][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'.
[   98.111606][ T6115] syz.3.80 uses obsolete (PF_INET,SOCK_PACKET)
[   98.309223][ T6104] loop2: detected capacity change from 0 to 32768
[   98.331318][ T6104] XFS: ikeep mount option is deprecated.
[   98.403940][ T6104] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   98.705728][ T6104] XFS (loop2): Ending clean mount
[   98.720087][ T6104] XFS (loop2): Quotacheck needed: Please wait.
[   98.780339][ T6104] XFS (loop2): Quotacheck: Done.
[   99.021795][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   99.929657][ T6157] loop2: detected capacity change from 0 to 1024
[   99.970247][ T6157] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  100.035796][ T6157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.205307][ T6157] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4036: comm syz.2.96: Allocating blocks 385-513 which overlap fs metadata
[  100.231818][ T6146] loop3: detected capacity change from 0 to 40427
[  100.254799][ T6165] loop0: detected capacity change from 0 to 128
[  100.264297][ T6157] EXT4-fs (loop2): Remounting filesystem read-only
[  100.289060][ T6146] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  100.291429][ T6165] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  100.298588][ T6156] EXT4-fs (loop2): pa ffff888078793828: logic 16, phys. 129, len 24
[  100.322185][ T6146] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  100.342036][ T6146] F2FS-fs (loop3): build fault injection attr: rate: 18446, type: 0x7ffff
[  100.379215][ T6146] F2FS-fs (loop3): invalid crc value
[  100.389582][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.403827][ T6165] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  100.408335][ T6146] F2FS-fs (loop3): Found nat_bits in checkpoint
[  100.447280][ T6165] syz.0.99 (pid 6165) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  100.534546][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  100.715202][ T6146] F2FS-fs (loop3): Start checkpoint disabled!
[  100.778287][ T6146] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  100.791942][ T6146] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  101.154779][ T3484] kworker/u4:10: attempt to access beyond end of device
[  101.154779][ T3484] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  101.180167][ T3484] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  101.187577][ T3484] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  101.201684][   T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  101.395165][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.407439][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.429620][   T27] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  101.449154][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.473302][   T27] usb 2-1: config 0 descriptor??
[  101.642642][ T6185] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  101.906184][   T27] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  101.906243][   T27] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  101.906268][   T27] cp2112 0003:10C4:EA90.0002: item fetching failed at offset 2/7
[  101.907163][   T27] cp2112 0003:10C4:EA90.0002: parse failed
[  101.907290][   T27] cp2112: probe of 0003:10C4:EA90.0002 failed with error -22
[  102.171000][   T27] usb 2-1: USB disconnect, device number 2
[  103.041779][ T5857] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  103.042323][ T6218] loop1: detected capacity change from 0 to 2048
[  103.156050][ T6218]  loop1: p1 < > p4
[  103.185224][ T6218] loop1: p4 size 8388608 extends beyond EOD, truncated
[  103.260789][ T5857] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  103.279416][ T5857] usb 1-1: config 0 has no interface number 0
[  103.293132][ T5160]  loop1: p1 < > p4
[  103.295208][ T5857] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  103.323032][ T5160] loop1: p4 size 8388608 extends beyond EOD, truncated
[  103.331402][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.357851][ T5857] usb 1-1: Product: syz
[  103.375403][ T5857] usb 1-1: Manufacturer: syz
[  103.380369][ T5857] usb 1-1: SerialNumber: syz
[  103.394778][ T5857] usb 1-1: config 0 descriptor??
[  103.443053][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  103.483425][ T5959] udevd[5959]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  103.538658][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  103.553101][ T5959] udevd[5959]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  103.656032][ T5857] usb 1-1: Found UVC 0.08 device syz (046d:0823)
[  103.679980][ T5857] usb 1-1: No valid video chain found.
[  103.711377][ T5857] usb 1-1: USB disconnect, device number 4
[  104.056525][ T6216] loop3: detected capacity change from 0 to 32768
[  104.085115][ T6216] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.118 (6216)
[  104.110259][ T6216] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  104.120685][ T6216] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  104.131158][ T6216] BTRFS info (device loop3): force clearing of disk cache
[  104.144695][ T6216] BTRFS info (device loop3): enabling auto defrag
[  104.151504][ T6216] BTRFS info (device loop3): max_inline at 0
[  104.160954][ T6216] BTRFS info (device loop3): enabling disk space caching
[  104.170967][ T6216] BTRFS info (device loop3): disk space caching is enabled
[  104.311805][ T6216] BTRFS info (device loop3): enabling ssd optimizations
[  104.333405][ T6216] BTRFS info (device loop3): rebuilding free space tree
[  104.447949][ T6216] BTRFS info (device loop3): disabling free space tree
[  104.490109][ T6216] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  104.522258][ T6216] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  104.643867][ T6244] loop2: detected capacity change from 0 to 4096
[  104.695062][ T6244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.037745][ T1326] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  105.070367][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.181960][ T5857] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  105.260215][ T5788] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  105.416628][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.459789][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.504042][ T5857] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  105.569093][ T5857] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  105.604698][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.662778][ T5857] usb 2-1: config 0 descriptor??
[  106.020256][ T6262] io-wq is not configured for unbound workers
[  106.045687][ T6248] loop0: detected capacity change from 0 to 32768
[  106.114584][ T5857] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  106.135689][ T6248] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  106.173361][ T5857] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  106.318298][ T6274] loop3: detected capacity change from 0 to 512
[  106.330469][ T6248] XFS (loop0): Ending clean mount
[  106.357511][ T6274] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  106.382927][ T6248] XFS (loop0): Quotacheck needed: Please wait.
[  106.464344][ T6274] EXT4-fs (loop3): 1 truncate cleaned up
[  106.493210][ T6274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.526560][ T6248] XFS (loop0): Quotacheck: Done.
[  106.637222][ T5857] usb 2-1: USB disconnect, device number 3
[  106.689410][ T6274] process 'syz.3.132' launched './file1' with NULL argv: empty string added
[  106.719472][ T6274] EXT4-fs error (device loop3): ext4_find_extent:900: inode #15: comm syz.3.132: inode has invalid extent depth: 25964
[  106.752169][ T6274] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[  106.820321][ T5788] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  106.876611][ T5788] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  106.933947][ T5788] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  106.967516][ T5788] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  106.990232][ T5789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  107.012646][ T5788] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  107.053389][ T5788] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  107.084678][ T5788] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  107.140230][ T5788] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  107.168266][ T5788] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  107.317753][ T6284] input: syz0 as /devices/virtual/input/input8
[  107.641383][ T6282] loop2: detected capacity change from 0 to 32768
[  107.659408][ T6282] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.133 (6282)
[  107.779382][ T6282] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  107.800086][ T6282] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  107.822663][ T6282] BTRFS info (device loop2): enabling auto defrag
[  107.831903][ T6282] BTRFS info (device loop2): doing ref verification
[  107.849798][ T6282] BTRFS info (device loop2): max_inline at 0
[  107.866727][ T6282] BTRFS info (device loop2): force clearing of disk cache
[  107.893132][ T6282] BTRFS info (device loop2): turning on sync discard
[  107.911000][ T6282] BTRFS info (device loop2): disabling free space tree
[  108.043047][ T6282] BTRFS info (device loop2): enabling ssd optimizations
[  108.092338][ T6282] BTRFS info (device loop2): rebuilding free space tree
[  108.169866][ T6282] BTRFS info (device loop2): disabling free space tree
[  108.195268][ T6282] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  108.229804][ T6282] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  108.407710][ T6294] loop1: detected capacity change from 0 to 32768
[  108.577121][ T6294] JBD2: Ignoring recovery information on journal
[  108.603518][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.795402][ T3484] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.840133][ T6294] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  109.019248][ T5786] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  109.035914][ T3484] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.194352][ T6316] (syz.1.139,6316,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  109.304224][ T3484] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.455977][ T6312] loop0: detected capacity change from 0 to 40427
[  109.496153][ T6312] F2FS-fs (loop0): invalid crc value
[  109.558026][ T3484] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.572492][ T6312] F2FS-fs (loop0): Found nat_bits in checkpoint
[  109.686505][ T5787] ocfs2: Unmounting device (7,1) on (node local)
[  109.886922][ T6312] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  110.122566][ T6317] f2fs_ckpt-7:0: attempt to access beyond end of device
[  110.122566][ T6317] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  110.137161][ T5857] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  110.203380][ T6317] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  110.245739][ T6317] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  110.342209][ T5857] usb 3-1: Using ep0 maxpacket: 32
[  110.374336][ T5857] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  110.417319][ T5857] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  110.434926][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.459129][ T5857] usb 3-1: Product: syz
[  110.482104][ T5857] usb 3-1: Manufacturer: syz
[  110.495400][ T5857] usb 3-1: SerialNumber: syz
[  110.525794][ T5857] usb 3-1: config 0 descriptor??
[  110.562451][ T6322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  110.575638][ T5857] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9
[  110.643696][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  110.658751][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  110.678961][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  110.700114][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  110.708047][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  110.717776][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  111.195122][   T27] usb 3-1: USB disconnect, device number 3
[  111.195259][    C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  111.777746][ T6351] loop0: detected capacity change from 0 to 2048
[  111.898767][ T6351] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  111.930429][ T6351] UDF-fs: Scanning with blocksize 512 failed
[  112.004001][ T6351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.197128][ T6351] [syz.0.145/6351] FS: loop0 File: /memory.swap.current would truncate fibmap result
[  112.491087][ T6334] chnl_net:caif_netlink_parms(): no params data found
[  112.771430][ T6353] loop1: detected capacity change from 0 to 32768
[  112.802755][ T6353] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.149 (6353)
[  112.821748][ T5790] Bluetooth: hci0: command tx timeout
[  112.842862][ T6353] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  112.854530][ T6353] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  112.863901][ T6353] BTRFS info (device loop1): setting nodatacow, compression disabled
[  112.875034][ T6353] BTRFS info (device loop1): max_inline at 0
[  112.881083][ T6353] BTRFS info (device loop1): enabling disk space caching
[  112.921799][ T6353] BTRFS info (device loop1): turning off barriers
[  112.932021][ T6353] BTRFS info (device loop1): turning on flush-on-commit
[  113.000415][ T6353] BTRFS info (device loop1): doing ref verification
[  113.053870][ T6353] BTRFS info (device loop1): force clearing of disk cache
[  113.061079][ T6353] BTRFS info (device loop1): enabling ssd optimizations
[  113.084579][ T6357] loop2: detected capacity change from 0 to 32768
[  113.102517][ T6353] BTRFS info (device loop1): max_inline at 4096
[  113.125505][ T6353] BTRFS info (device loop1): disk space caching is enabled
[  113.254152][   T28] audit: type=1800 audit(1754948248.117:2): pid=6357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.150" name="file1" dev="loop2" ino=4 res=0 errno=0
[  113.318409][ T3484] hsr_slave_0: left promiscuous mode
[  113.325523][ T3484] hsr_slave_1: left promiscuous mode
[  113.335882][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.344139][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.360642][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.372594][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.395607][ T6353] BTRFS info (device loop1): auto enabling async discard
[  113.453095][ T3484] bridge_slave_1: left allmulticast mode
[  113.461292][ T3484] bridge_slave_1: left promiscuous mode
[  113.464800][ T6353] BTRFS info (device loop1): rebuilding free space tree
[  113.470382][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.565568][ T3484] bridge_slave_0: left allmulticast mode
[  113.596272][ T3484] bridge_slave_0: left promiscuous mode
[  113.606117][ T6353] BTRFS info (device loop1): disabling free space tree
[  113.627943][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.642148][ T6353] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  113.684188][ T6353] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  113.896619][   T28] audit: type=1800 audit(1754948248.757:3): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.149" name="file1" dev="loop1" ino=260 res=0 errno=0
[  113.944514][ T3484] veth1_macvtap: left promiscuous mode
[  113.950644][ T3484] veth0_macvtap: left promiscuous mode
[  113.992778][ T3484] veth1_vlan: left promiscuous mode
[  113.998439][ T3484] veth0_vlan: left promiscuous mode
[  114.194415][ T5787] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  114.602101][  T786] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  114.812725][  T786] usb 1-1: Using ep0 maxpacket: 8
[  114.820132][  T786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.853247][  T786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  114.869278][  T786] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  114.883860][  T786] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  114.905281][ T5790] Bluetooth: hci0: command tx timeout
[  114.958671][  T786] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  114.997630][  T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.025773][ T6401] loop2: detected capacity change from 0 to 32768
[  115.054323][  T786] hub 1-1:1.0: bad descriptor, ignoring hub
[  115.102235][  T786] hub: probe of 1-1:1.0 failed with error -5
[  115.120233][  T786] cdc_wdm 1-1:1.0: skipping garbage
[  115.120274][ T6401] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  115.138951][  T786] cdc_wdm 1-1:1.0: skipping garbage
[  115.196401][  T786] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  115.204207][  T786] cdc_wdm 1-1:1.0: Unknown control protocol
[  115.237236][ T6401] XFS (loop2): Ending clean mount
[  115.326641][   T28] audit: type=1800 audit(1754948250.187:4): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.155" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  115.596714][ T6399] usb 1-1: reset high-speed USB device number 5 using dummy_hcd
[  115.726962][ T3484] team0 (unregistering): Port device team_slave_1 removed
[  115.734692][ T5786] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  115.794386][ T6399] usb 1-1: device firmware changed
[  115.820253][ T6399] cdc_wdm 1-1:1.0: Error autopm - -16
[  115.831384][  T786] usb 1-1: USB disconnect, device number 5
[  115.924501][ T3484] team0 (unregistering): Port device team_slave_0 removed
[  116.073443][ T3484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.189701][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.304135][  T786] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  116.512079][  T786] usb 1-1: Using ep0 maxpacket: 8
[  116.545900][  T786] usb 1-1: config 0 has no interfaces?
[  116.562097][  T786] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  116.573033][  T786] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  116.581078][  T786] usb 1-1: Product: syz
[  116.598443][  T786] usb 1-1: config 0 descriptor??
[  116.890324][  T786] usb 1-1: USB disconnect, device number 6
[  116.981837][ T5790] Bluetooth: hci0: command tx timeout
[  117.156065][ T6423] loop1: detected capacity change from 0 to 32768
[  117.179195][ T3484] bond0 (unregistering): Released all slaves
[  117.239788][ T6423] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  117.316515][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.325062][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.330857][ T6423] XFS (loop1): Starting recovery (logdev: internal)
[  117.332409][ T6334] bridge_slave_0: entered allmulticast mode
[  117.346675][ T6334] bridge_slave_0: entered promiscuous mode
[  117.374955][ T6419] netlink: 'syz.2.157': attribute type 10 has an invalid length.
[  117.409437][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.440134][ T6423] XFS (loop1): Ending recovery (logdev: internal)
[  117.473297][ T6419] bridge_slave_1: left allmulticast mode
[  117.499384][ T6419] bridge_slave_1: left promiscuous mode
[  117.517530][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.597350][ T6419] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  117.625341][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.648644][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.669476][ T6334] bridge_slave_1: entered allmulticast mode
[  117.712493][ T6334] bridge_slave_1: entered promiscuous mode
[  117.802503][ T5787] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  117.845783][ T6334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.867241][ T6334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.997649][ T6334] team0: Port device team_slave_0 added
[  118.045380][ T6334] team0: Port device team_slave_1 added
[  118.247580][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.288297][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.365053][ T6334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.503016][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.532781][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.590780][ T6334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.808887][ T6334] hsr_slave_0: entered promiscuous mode
[  118.844721][ T6334] hsr_slave_1: entered promiscuous mode
[  118.871476][ T6334] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  118.891746][ T6334] Cannot create hsr debugfs directory
[  119.061722][ T5790] Bluetooth: hci0: command tx timeout
[  119.162870][ T6439] loop0: detected capacity change from 0 to 40427
[  119.196150][ T6439] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  119.241672][ T6439] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  119.314005][ T6439] F2FS-fs (loop0): invalid crc value
[  119.382819][ T6439] F2FS-fs (loop0): Found nat_bits in checkpoint
[  119.630668][ T6439] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  119.651794][ T6439] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  119.757773][ T6334] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  119.834324][ T6334] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  119.876457][ T6334] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  119.918094][ T6334] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  120.257370][ T6334] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.339088][ T6334] 8021q: adding VLAN 0 to HW filter on device team0
[  120.392437][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.399635][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.450899][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.458193][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.631347][ T6334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  120.691658][ T6334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  121.281852][ T6515] netlink: 'syz.0.174': attribute type 21 has an invalid length.
[  121.289666][ T6515] netlink: 176 bytes leftover after parsing attributes in process `syz.0.174'.
[  121.589057][ T6334] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.788766][ T6525] loop2: detected capacity change from 0 to 2048
[  121.850976][ T6525] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  121.893359][ T6525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.934151][ T6531] loop0: detected capacity change from 0 to 1024
[  122.061259][ T6531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.161673][ T1202] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  122.171108][ T6531] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4036: comm syz.0.182: Allocating blocks 385-513 which overlap fs metadata
[  122.334641][ T6531] EXT4-fs (loop0): pa ffff8880787933a0: logic 16, phys. 129, len 24
[  122.343461][ T6531] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 8
[  122.397185][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.428143][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.467684][ T1202] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  122.499786][ T1202] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  122.518083][ T1202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.560024][ T1202] usb 2-1: config 0 descriptor??
[  122.620845][ T6334] veth0_vlan: entered promiscuous mode
[  122.685516][ T6334] veth1_vlan: entered promiscuous mode
[  122.810984][ T6334] veth0_macvtap: entered promiscuous mode
[  122.846270][ T6334] veth1_macvtap: entered promiscuous mode
[  122.887767][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.905873][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.924813][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.948884][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.966120][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.976393][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.995621][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.016790][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.059411][ T1202] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  123.076660][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.102919][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.117439][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.130269][ T1202] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  123.144873][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.166095][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.188077][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.229827][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.276725][ T6334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.296118][ T6334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.331161][ T6334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.360948][ T6334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.457417][  T786] usb 2-1: USB disconnect, device number 4
[  123.603371][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.611228][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.723972][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.756287][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.285663][ T6562] loop0: detected capacity change from 0 to 32768
[  124.326199][ T6562] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.186 (6562)
[  124.379082][ T6562] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.401024][ T6562] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  124.426910][ T6562] BTRFS info (device loop0): setting nodatacow, compression disabled
[  124.462321][ T6562] BTRFS info (device loop0): enabling auto defrag
[  124.468872][ T6562] BTRFS info (device loop0): max_inline at 0
[  124.540779][ T6562] BTRFS info (device loop0): using free space tree
[  124.589537][ T6586] loop2: detected capacity change from 0 to 64
[  124.841990][ T6562] BTRFS info (device loop0): auto enabling async discard
[  124.981483][ T6610] syz.2.192: attempt to access beyond end of device
[  124.981483][ T6610] loop2: rw=0, sector=1310720, nr_sectors = 2 limit=64
[  125.461131][ T5789] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  126.062042][ T6594] loop1: detected capacity change from 0 to 32768
[  126.235015][   T28] audit: type=1800 audit(1754948261.097:5): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.193" name="file1" dev="loop1" ino=4 res=0 errno=0
[  126.959490][ T6647] Zero length message leads to an empty skb
[  128.076339][ T6686] loop0: detected capacity change from 0 to 1024
[  128.100175][ T6686] EXT4-fs: Ignoring removed orlov option
[  128.109049][ T6686] EXT4-fs: Ignoring removed nomblk_io_submit option
[  128.158699][ T6686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.291698][ T1202] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  128.495829][ T1202] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  128.532931][ T1202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.560869][ T1202] usb 5-1: config 0 descriptor??
[  128.577642][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.602248][ T1202] cp210x 5-1:0.0: cp210x converter detected
[  129.038649][ T1202] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  129.102097][ T1202] usb 5-1: cp210x converter now attached to ttyUSB0
[  129.335662][ T1202] usb 5-1: USB disconnect, device number 2
[  129.358786][ T1202] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  129.419565][ T1202] cp210x 5-1:0.0: device disconnected
[  129.782057][   T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  129.990815][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.021771][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.072587][   T27] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  130.093307][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.135501][   T27] usb 3-1: config 0 descriptor??
[  130.275297][ T1202] libceph: connect (1)[c::]:6789 error -101
[  130.299920][ T1202] libceph: mon0 (1)[c::]:6789 connect error
[  130.323432][ T6733] ceph: No mds server is up or the cluster is laggy
[  130.604759][   T27] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  130.628143][   T27] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  130.654286][   T27] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0005/input/input10
[  130.728724][   T27] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  130.822432][ T1202] usb 3-1: USB disconnect, device number 4
[  131.048291][ T6747] fido_id[6747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  131.265732][ T6760] loop1: detected capacity change from 0 to 64
[  131.466337][ T5787] Trying to free block not in datazone
[  131.501630][ T5787] Trying to free block not in datazone
[  131.532651][ T5787] Trying to free block not in datazone
[  131.538187][ T5787] Trying to free block not in datazone
[  131.561953][ T5787] Trying to free block not in datazone
[  131.567482][ T5787] Trying to free block not in datazone
[  131.641892][ T5787] Trying to free block not in datazone
[  131.660053][ T5787] Trying to free block not in datazone
[  131.672618][ T5787] Trying to free block not in datazone
[  131.691627][ T5787] Trying to free block not in datazone
[  131.697250][ T5787] Trying to free block not in datazone
[  131.716254][ T5787] Trying to free block not in datazone
[  131.731773][ T5787] Trying to free block not in datazone
[  131.743038][ T5787] Trying to free block not in datazone
[  131.988116][ T6774] loop2: detected capacity change from 0 to 256
[  132.117242][ T6761] loop4: detected capacity change from 0 to 32768
[  132.231923][ T6761] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  132.335272][ T6786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.241'.
[  132.373819][ T6761] XFS (loop4): Ending clean mount
[  132.427104][ T6761] XFS (loop4): Quotacheck needed: Please wait.
[  132.525197][ T6761] XFS (loop4): Quotacheck: Done.
[  132.635713][ T6763] loop0: detected capacity change from 0 to 32768
[  132.688513][ T6763] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  132.739914][ T6763] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  132.778599][ T6793] loop2: detected capacity change from 0 to 1024
[  132.925019][ T6334] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  133.083080][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  133.089912][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  133.190740][   T48] hfsplus: b-tree write err: -5, ino 4
[  133.262771][ T6796] (syz.0.236,6796,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  133.465522][ T5789] ocfs2: Unmounting device (7,0) on (node local)
[  133.999220][ T6815] vcan0: tx drop: invalid da for name 0x0000000000000002
[  135.082857][ T6843] netlink: 'syz.0.264': attribute type 12 has an invalid length.
[  135.107389][ T6820] loop2: detected capacity change from 0 to 32768
[  135.119879][ T6820] XFS: noikeep mount option is deprecated.
[  135.200982][ T6820] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  135.358988][ T6820] XFS (loop2): Ending clean mount
[  135.698987][ T6861] loop4: detected capacity change from 0 to 16
[  135.765761][ T6861] erofs: (device loop4): mounted with root inode @ nid 36.
[  135.865622][ T5786] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  136.101114][ T6334] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 46
[  136.193228][ T6334] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  136.232497][ T6334] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  136.491754][ T5856] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  136.702907][ T5856] usb 1-1: config index 0 descriptor too short (expected 32786, got 18)
[  136.725754][ T5856] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  136.743111][ T5856] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0
[  136.751352][ T5856] usb 1-1: Manufacturer: syz
[  136.777083][ T5856] usb 1-1: config 0 descriptor??
[  136.795511][ T5856] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  136.812853][ T5856] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  136.955296][ T6872] loop1: detected capacity change from 0 to 32768
[  137.037714][ T6872] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  137.081229][  T786] usb 1-1: USB disconnect, device number 7
[  137.088599][  T786] ftdi_sio 1-1:0.0: device disconnected
[  137.380582][ T5787] ocfs2: Unmounting device (7,1) on (node local)
[  137.948601][ T6902] loop0: detected capacity change from 0 to 512
[  137.981794][ T6902] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  138.001862][ T5856] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  138.121187][ T6902] EXT4-fs (loop0): 1 orphan inode deleted
[  138.141170][ T6902] EXT4-fs (loop0): 1 truncate cleaned up
[  138.169500][ T6902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.219718][ T5856] usb 2-1: config 0 interface 0 has no altsetting 0
[  138.248780][ T5856] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  138.298616][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.309872][ T6902] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  138.362615][ T5856] usb 2-1: config 0 descriptor??
[  138.415417][ T6902] EXT4-fs (loop0): Remounting filesystem read-only
[  138.452251][ T6902] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 12, error -5)
[  138.591543][    C0] sched: RT throttling activated
[  139.229041][ T5856] video4linux radio48: keene_cmd_main failed (-71)
[  139.261732][ T5856] radio-keene 2-1:0.0: V4L2 device registered as radio48
[  139.294703][ T5856] usb 2-1: USB disconnect, device number 5
[  139.598839][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.227860][ T6898] loop2: detected capacity change from 0 to 262144
[  140.245047][ T6898] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.282 (6898)
[  140.281748][ T6898] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  140.292528][ T6898] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  140.301952][ T6898] BTRFS info (device loop2): enabling ssd optimizations
[  140.308943][ T6898] BTRFS info (device loop2): using spread ssd allocation scheme
[  140.316644][ T6898] BTRFS info (device loop2): using free space tree
[  140.401504][ T6898] BTRFS info (device loop2): auto enabling async discard
[  140.716978][ T5786] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  141.188224][ T6951] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[  141.225691][ T6951] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[  141.606120][ T6958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.295'.
[  141.907971][ T6967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.299'.
[  142.197916][ T6981] loop4: detected capacity change from 0 to 128
[  142.292255][ T6981] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  142.418365][ T6978] loop2: detected capacity change from 0 to 4096
[  143.042565][   T28] audit: type=1800 audit(1754948277.897:6): pid=6978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.303" name="file1" dev="loop2" ino=33 res=0 errno=0
[  143.353705][ T7007] loop1: detected capacity change from 0 to 16
[  143.423404][ T6976] loop0: detected capacity change from 0 to 32768
[  143.453549][ T7007] erofs: (device loop1): erofs_read_superblock: invalid sb_extslots 4208 (more than a fs block)
[  143.458386][ T6976] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.302 (6976)
[  143.568217][ T7010] netlink: 'syz.2.312': attribute type 3 has an invalid length.
[  143.576602][ T6976] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  143.576689][ T6976] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  143.576730][ T6976] BTRFS info (device loop0): metadata ratio 2
[  143.576764][ T6976] BTRFS info (device loop0): allowing degraded mounts
[  143.576781][ T6976] BTRFS info (device loop0): force zlib compression, level 3
[  143.576807][ T6976] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  143.576901][ T6976] BTRFS info (device loop0): use zstd compression, level 3
[  143.576922][ T6976] BTRFS info (device loop0): force clearing of disk cache
[  143.576980][ T6976] BTRFS info (device loop0): max_inline at 0
[  143.576997][ T6976] BTRFS info (device loop0): using free space tree
[  143.772965][ T7014] 9pnet_fd: Insufficient options for proto=fd
[  143.908578][ T6976] BTRFS info (device loop0): enabling ssd optimizations
[  143.926022][ T6976] BTRFS info (device loop0): rebuilding free space tree
[  144.320621][ T7007] tty tty23: ldisc open failed (-12), clearing slot 22
[  144.337839][   T28] audit: type=1804 audit(1754948279.197:7): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.302" name="/newroot/82/file1/file1" dev="loop0" ino=260 res=1 errno=0
[  144.355314][ T7038] input: syz0 as /devices/virtual/input/input11
[  145.375730][ T5789] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  146.821646][ T5790] Bluetooth: hci0: command tx timeout
[  147.296859][ T7117] loop0: detected capacity change from 0 to 4096
[  147.305795][ T7110] loop1: detected capacity change from 0 to 4096
[  147.358636][ T7117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.402755][ T7123] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  147.472477][ T5879] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  147.681667][ T5879] usb 5-1: Using ep0 maxpacket: 32
[  147.703255][ T5879] usb 5-1: config 0 has an invalid interface number: 126 but max is 0
[  147.742409][ T5879] usb 5-1: config 0 has no interface number 0
[  147.748628][ T5879] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  147.804502][ T5879] usb 5-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0
[  147.806956][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.842174][ T5879] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0
[  147.882653][ T5879] usb 5-1: config 0 interface 126 has no altsetting 0
[  147.926354][ T5879] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  147.958927][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.997856][ T5879] usb 5-1: Product: syz
[  148.028291][ T5879] usb 5-1: Manufacturer: syz
[  148.061647][ T5879] usb 5-1: SerialNumber: syz
[  148.100923][ T5879] usb 5-1: config 0 descriptor??
[  148.118317][ T7115] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  148.196102][ T7139] @: renamed from vlan0 (while UP)
[  148.457998][ T7146] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input12
[  148.610220][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.645536][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.728979][ T5879] ir_usb 5-1:0.126: IR Dongle converter detected
[  148.930170][ T5879] usb 5-1: IR Dongle converter now attached to ttyUSB0
[  149.054029][ T7161] cgroup: fork rejected by pids controller in /syz2
[  149.211505][ T5879] usb 5-1: USB disconnect, device number 3
[  149.262371][ T5879] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  149.271117][ T5879] ir_usb 5-1:0.126: device disconnected
[  149.384368][ T7168] warning: `syz.0.351' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  149.445839][ T7168] netlink: 'syz.0.351': attribute type 3 has an invalid length.
[  149.480849][ T7168] netlink: 'syz.0.351': attribute type 1 has an invalid length.
[  149.504190][ T7168] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.351'.
[  150.548791][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.619070][ T7189] netlink: 'syz.1.357': attribute type 3 has an invalid length.
[  150.816987][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.951652][ T5887] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  151.014662][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.152486][ T5856] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  151.169700][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.171839][ T7203] loop0: detected capacity change from 0 to 1024
[  151.211441][ T7203] EXT4-fs: Ignoring removed mblk_io_submit option
[  151.218189][ T5887] usb 5-1: Using ep0 maxpacket: 8
[  151.230265][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  151.259935][ T7203] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  151.269159][ T5887] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  151.290586][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.305634][ T5887] usb 5-1: config 0 descriptor??
[  151.353161][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  151.367310][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  151.373487][ T7203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.376740][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  151.398004][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.409388][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.419814][ T5856] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  151.429566][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.438091][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  151.446215][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  151.454364][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  151.464824][ T5856] usb 2-1: config 0 descriptor??
[  151.557392][ T5887] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  151.639805][ T7203] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2797: inode #2: comm syz.0.362: corrupted in-inode xattr: bad e_name length
[  151.778194][   T27] usb 5-1: USB disconnect, device number 4
[  151.784198][    C1] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  151.809149][ T7203] EXT4-fs (loop0): Remounting filesystem read-only
[  151.832142][ T7203] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 2. Delete some EAs or run e2fsck.
[  151.946156][ T5856] hid-steam 0003:28DE:1142.0006: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  151.982873][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.033435][ T5856] hid-steam 0003:28DE:1142.0006: Steam wireless receiver connected
[  152.098094][ T5856] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  152.868473][ T7239] loop4: detected capacity change from 0 to 2048
[  152.924341][ T7239] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.020816][ T7206] chnl_net:caif_netlink_parms(): no params data found
[  153.295602][ T7247] netlink: 64 bytes leftover after parsing attributes in process `syz.4.369'.
[  153.551208][ T5802] Bluetooth: hci1: command tx timeout
[  153.615375][   T12] hsr_slave_0: left promiscuous mode
[  153.631637][ T7258] loop0: detected capacity change from 0 to 512
[  153.652391][   T12] hsr_slave_1: left promiscuous mode
[  153.687080][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.726592][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.758075][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.778879][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.799925][ T7258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.814264][   T12] bridge_slave_0: left allmulticast mode
[  153.819968][   T12] bridge_slave_0: left promiscuous mode
[  153.826100][ T7269] loop1: detected capacity change from 0 to 128
[  153.836356][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.874330][ T7269] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  153.899581][  T786] usb 2-1: USB disconnect, device number 6
[  153.905802][ T7258] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  153.950186][  T786] hid-steam 0003:28DE:1142.0006: Steam wireless receiver disconnected
[  153.986943][ T7258] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #2: comm syz.0.371: corrupted inode contents
[  154.007831][   T12] veth1_macvtap: left promiscuous mode
[  154.021237][ T7269] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  154.040359][   T12] veth0_macvtap: left promiscuous mode
[  154.064331][ T7258] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #2: comm syz.0.371: mark_inode_dirty error
[  154.071868][   T12] veth1_vlan: left promiscuous mode
[  154.087791][   T12] veth0_vlan: left promiscuous mode
[  154.169392][ T7258] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #2: comm syz.0.371: corrupted inode contents
[  154.264263][ T7258] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.371: mark_inode_dirty error
[  154.529587][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.052419][ T1202] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  155.275204][ T1202] usb 1-1: Using ep0 maxpacket: 8
[  155.287234][ T1202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  155.295548][ T7283] loop1: detected capacity change from 0 to 32768
[  155.303126][ T1202] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  155.334084][ T1202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.340613][ T7283] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.377 (7283)
[  155.357977][ T1202] usb 1-1: config 0 descriptor??
[  155.382506][  T786] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  155.389614][ T7283] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  155.425844][ T7283] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  155.436975][ T7283] BTRFS info (device loop1): enabling disk space caching
[  155.458280][ T7283] BTRFS info (device loop1): enabling auto defrag
[  155.485714][ T7283] BTRFS info (device loop1): doing ref verification
[  155.509193][ T7283] BTRFS info (device loop1): use no compression
[  155.529120][ T7283] BTRFS info (device loop1): force clearing of disk cache
[  155.545435][ T7283] BTRFS info (device loop1): turning on sync discard
[  155.556116][ T7283] BTRFS info (device loop1): disabling disk space caching
[  155.583080][  T786] usb 5-1: Using ep0 maxpacket: 8
[  155.594287][  T786] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  155.606635][  T786] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  155.620197][ T1202] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  155.622799][ T5802] Bluetooth: hci1: command tx timeout
[  155.637230][  T786] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  155.664340][  T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.751740][ T7283] BTRFS info (device loop1): enabling ssd optimizations
[  155.766759][ T7283] BTRFS info (device loop1): rebuilding free space tree
[  155.798658][ T7283] BTRFS info (device loop1): disabling free space tree
[  155.823071][ T7283] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  155.837658][ T7283] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  155.879078][   T23] usb 1-1: USB disconnect, device number 8
[  155.879164][    C1] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  156.017845][   T12] team0 (unregistering): Port device team_slave_1 removed
[  156.125216][   T12] team0 (unregistering): Port device team_slave_0 removed
[  156.239312][ T5787] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  156.261862][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.399459][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.553673][   T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  156.984922][  T787] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  157.199235][  T787] usb 2-1: Using ep0 maxpacket: 8
[  157.238816][  T787] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  157.251615][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.259649][  T787] usb 2-1: Product: syz
[  157.285488][  T787] usb 2-1: Manufacturer: syz
[  157.290133][  T787] usb 2-1: SerialNumber: syz
[  157.307216][  T787] usb 2-1: config 0 descriptor??
[  157.326792][  T787] gspca_main: sq905-2.14.0 probing 2770:9120
[  157.414842][ T1202] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  157.457569][   T12] bond0 (unregistering): Released all slaves
[  157.589504][ T7206] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.597243][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.605015][ T7206] bridge_slave_0: entered allmulticast mode
[  157.614521][ T7206] bridge_slave_0: entered promiscuous mode
[  157.615567][ T1202] usb 1-1: Using ep0 maxpacket: 8
[  157.624244][ T7206] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.635461][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.643472][ T7206] bridge_slave_1: entered allmulticast mode
[  157.648427][ T1202] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.651403][ T7206] bridge_slave_1: entered promiscuous mode
[  157.660695][ T1202] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.682347][ T1202] usb 1-1: config 0 interface 0 has no altsetting 0
[  157.689323][ T1202] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  157.699401][ T1202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.709919][ T5802] Bluetooth: hci1: command tx timeout
[  157.716781][ T1202] usb 1-1: config 0 descriptor??
[  157.778908][ T7206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.821957][ T7206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.991496][ T7206] team0: Port device team_slave_0 added
[  158.014521][ T7206] team0: Port device team_slave_1 added
[  158.103719][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.137003][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.186286][ T5834] usb 5-1: USB disconnect, device number 5
[  158.210368][ T1202] steelseries 0003:1038:1410.0008: unknown main item tag 0x1
[  158.211749][ T7206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.231343][ T1202] steelseries 0003:1038:1410.0008: item fetching failed at offset 3/5
[  158.254928][ T1202] steelseries 0003:1038:1410.0008: parse failed
[  158.270869][ T1202] steelseries: probe of 0003:1038:1410.0008 failed with error -22
[  158.283538][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.290572][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.342023][ T7206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.391047][  T787] gspca_sq905: sq905_read_data: usb_control_msg failed (-71)
[  158.411065][  T787] sq905: probe of 2-1:0.0 failed with error -71
[  158.453820][  T787] usb 2-1: USB disconnect, device number 7
[  158.536491][ T1202] usb 1-1: USB disconnect, device number 9
[  158.567487][ T7206] hsr_slave_0: entered promiscuous mode
[  158.588009][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'.
[  158.599297][ T7206] hsr_slave_1: entered promiscuous mode
[  158.613209][ T7206] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.620821][ T7206] Cannot create hsr debugfs directory
[  159.743683][ T7206] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  159.782592][ T5802] Bluetooth: hci1: command tx timeout
[  159.877777][ T7206] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  159.923697][ T7206] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  159.956606][ T7206] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  159.993291][ T7372] loop1: detected capacity change from 0 to 512
[  160.043192][ T7372] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  160.077616][ T7372] EXT4-fs (loop1): orphan cleanup on readonly fs
[  160.097841][ T7372] EXT4-fs error (device loop1): __ext4_iget:5053: inode #11: block 8: comm syz.1.399: invalid block
[  160.112147][ T7372] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.399: couldn't read orphan inode 11 (err -117)
[  160.137744][ T7372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  160.165033][ T7372] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (57259!=33349)
[  160.248536][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.458018][ T7206] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.528397][ T7206] 8021q: adding VLAN 0 to HW filter on device team0
[  160.654444][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.661701][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.679451][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.686941][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.891817][ T1202] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  161.084497][ T7407] loop0: detected capacity change from 0 to 64
[  161.101984][ T1202] usb 2-1: Using ep0 maxpacket: 32
[  161.130433][ T1202] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  161.140497][ T1202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.163978][ T1202] usb 2-1: config 0 descriptor??
[  161.182799][ T1202] gspca_main: sq930x-2.14.0 probing 041e:403c
[  161.437014][ T7206] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.542942][ T7206] veth0_vlan: entered promiscuous mode
[  161.566334][ T7206] veth1_vlan: entered promiscuous mode
[  161.641236][ T7206] veth0_macvtap: entered promiscuous mode
[  161.660986][ T7206] veth1_macvtap: entered promiscuous mode
[  161.687533][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.698414][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.711076][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.738484][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.768983][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.784932][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.825167][ T7206] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.854934][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.874718][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.892737][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.904233][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.931608][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.954890][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.967781][ T7206] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.990353][ T7206] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.021578][ T7206] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.050315][ T7206] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.059331][ T7206] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.241995][ T1202] gspca_sq930x: ucbus_write failed -71
[  162.247605][ T1202] sq930x: probe of 2-1:0.0 failed with error -71
[  162.285489][ T1202] usb 2-1: USB disconnect, device number 8
[  162.374227][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.421832][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.495740][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.510722][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.956288][ T7429] loop0: detected capacity change from 0 to 1024
[  163.360131][ T7424] loop2: detected capacity change from 0 to 32768
[  163.377204][ T7424] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.356 (7424)
[  163.425925][ T7424] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  163.442419][ T7424] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  163.451362][ T7424] BTRFS info (device loop2): setting nodatacow, compression disabled
[  163.472631][ T7424] BTRFS info (device loop2): enabling ssd optimizations
[  163.479810][ T7424] BTRFS info (device loop2): setting datacow
[  163.493342][ T7424] BTRFS info (device loop2): force clearing of disk cache
[  163.501086][ T7424] BTRFS info (device loop2): turning off barriers
[  163.514155][ T7424] BTRFS info (device loop2): using spread ssd allocation scheme
[  163.557331][ T7424] BTRFS info (device loop2): not using ssd optimizations
[  163.565921][ T7424] BTRFS info (device loop2): not using spread ssd allocation scheme
[  163.583637][ T7424] BTRFS info (device loop2): using free space tree
[  163.691895][ T5856] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  163.723523][ T7447] mmap: syz.0.419 (7447) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  163.745861][ T7424] BTRFS info (device loop2): rebuilding free space tree
[  163.780337][ T7424] BTRFS info (device loop2): checking UUID tree
[  163.885372][ T5856] usb 5-1: Using ep0 maxpacket: 8
[  163.914361][ T5856] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  163.943470][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.984475][ T5856] pvrusb2: Hardware description: Terratec Grabster AV400
[  164.027273][ T5856] pvrusb2: **********
[  164.031453][ T5856] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  164.088056][ T5856] pvrusb2: Important functionality might not be entirely working.
[  164.129127][ T5856] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  164.156227][ T5856] pvrusb2: **********
[  164.196255][ T7206] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  164.232495][ T2321] pvrusb2: Invalid write control endpoint
[  164.553379][ T5959] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop2 scanned by udevd (5959)
[  164.568070][ T2321] pvrusb2: Invalid write control endpoint
[  164.584725][ T5856] usb 5-1: USB disconnect, device number 6
[  164.616465][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  164.638562][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  164.669579][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  164.680051][ T2321] pvrusb2: Device being rendered inoperable
[  164.690112][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  164.699535][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  164.760686][ T2321] pvrusb2: Attached sub-driver cx25840
[  164.785892][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  164.835101][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  165.222483][ T7474] syz_tun: entered allmulticast mode
[  165.283642][ T7473] syz_tun: left allmulticast mode
[  165.528708][ T7482] syzkaller1: entered promiscuous mode
[  165.560711][ T7482] syzkaller1: entered allmulticast mode
[  165.590097][ T7489] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.431'.
[  166.095075][ T7501] loop0: detected capacity change from 0 to 2048
[  166.112745][ T7501] EXT4-fs: Ignoring removed bh option
[  166.209612][ T7501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.396951][ T7510] sctp: [Deprecated]: syz.2.439 (pid 7510) Use of int in max_burst socket option deprecated.
[  166.396951][ T7510] Use struct sctp_assoc_value instead
[  166.419286][ T7501] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  166.462460][ T7501] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  166.470761][ T7513] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  166.495838][ T7513] EXT4-fs (loop0): This should not happen!! Data will be lost
[  166.495838][ T7513] 
[  166.509461][ T7513] EXT4-fs (loop0): Total free blocks count 0
[  166.520201][ T7513] EXT4-fs (loop0): Free/Dirty block details
[  166.526488][ T7501] EXT4-fs (loop0): This should not happen!! Data will be lost
[  166.526488][ T7501] 
[  166.527531][ T7513] EXT4-fs (loop0): free_blocks=2415919104
[  166.549448][ T7513] EXT4-fs (loop0): dirty_blocks=64
[  166.563926][ T7513] EXT4-fs (loop0): Block reservation details
[  166.570530][ T7515] loop4: detected capacity change from 0 to 256
[  167.206678][ T7530] loop4: detected capacity change from 0 to 2048
[  167.259227][ T7534] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.374088][ T7530] syz.4.448: attempt to access beyond end of device
[  167.374088][ T7530] loop4: rw=0, sector=19791209300034, nr_sectors = 2 limit=2048
[  167.409624][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.436902][ T7530] syz.4.448: attempt to access beyond end of device
[  167.436902][ T7530] loop4: rw=0, sector=19791209300034, nr_sectors = 2 limit=2048
[  167.487387][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.516744][ T7530] syz.4.448: attempt to access beyond end of device
[  167.516744][ T7530] loop4: rw=0, sector=19791209300034, nr_sectors = 2 limit=2048
[  167.572962][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.581980][ T7530] syz.4.448: attempt to access beyond end of device
[  167.581980][ T7530] loop4: rw=0, sector=19791209300034, nr_sectors = 2 limit=2048
[  167.596493][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.605509][ T7530] syz.4.448: attempt to access beyond end of device
[  167.605509][ T7530] loop4: rw=0, sector=19791209300034, nr_sectors = 2 limit=2048
[  167.620141][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.629334][ T7530] syz.4.448: attempt to access beyond end of device
[  167.629334][ T7530] loop4: rw=0, sector=19791209300034, nr_sectors = 2 limit=2048
[  167.644176][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.656663][ T7530] syz.4.448: attempt to access beyond end of device
[  167.656663][ T7530] loop4: rw=0, sector=19791209300034, nr_sectors = 2 limit=2048
[  167.682254][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.691222][ T7530] syz.4.448: attempt to access beyond end of device
[  167.691222][ T7530] loop4: rw=0, sector=19791209300034, nr_sectors = 2 limit=2048
[  167.708243][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.717306][ T7530] syz.4.448: attempt to access beyond end of device
[  167.717306][ T7530] loop4: rw=0, sector=19791209300034, nr_sectors = 2 limit=2048
[  167.732008][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.740880][ T7530] syz.4.448: attempt to access beyond end of device
[  167.740880][ T7530] loop4: rw=0, sector=19791209300034, nr_sectors = 2 limit=2048
[  167.755985][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.777518][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.786695][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.814177][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.847527][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.862075][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.899926][ T7530] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  167.936751][   T28] audit: type=1800 audit(1754948302.797:8): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.448" name="file1" dev="loop4" ino=16 res=0 errno=0
[  168.111267][ T7543] loop2: detected capacity change from 0 to 1024
[  168.130196][ T7543] EXT4-fs: Ignoring removed nobh option
[  168.139293][ T7543] EXT4-fs: Ignoring removed bh option
[  168.160516][ T7543] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  168.264810][ T7543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.514272][ T7206] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.065669][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'.
[  169.083646][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'.
[  169.231742][ T7566] loop0: detected capacity change from 0 to 4096
[  169.280409][ T7566] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  169.322150][ T7566] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  169.346107][ T7566] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  169.570112][ T7566] ntfs3: loop0: ino=1e, "file1" failed to parse mft record
[  169.583161][ T7566] ntfs3: loop0: ino=1e, "file1" attr_set_size
[  169.682796][ T3484] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22.
[  169.833569][ T7582] loop1: detected capacity change from 0 to 1024
[  169.870681][ T7582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.009413][ T7582] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  170.032021][ T7582] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  170.049744][ T7582] EXT4-fs (loop1): This should not happen!! Data will be lost
[  170.049744][ T7582] 
[  170.087393][ T7582] EXT4-fs (loop1): Total free blocks count 0
[  170.095295][ T7582] EXT4-fs (loop1): Free/Dirty block details
[  170.102117][ T7582] EXT4-fs (loop1): free_blocks=68451041280
[  170.114453][ T7582] EXT4-fs (loop1): dirty_blocks=16
[  170.120074][ T7582] EXT4-fs (loop1): Block reservation details
[  170.128888][ T7582] EXT4-fs (loop1): i_reserved_data_blocks=1
[  170.167976][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.311693][ T5887] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  170.524472][ T5887] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  170.556247][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.595158][ T5887] usb 3-1: config 0 descriptor??
[  170.613212][ T5887] cp210x 3-1:0.0: cp210x converter detected
[  170.648548][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'.
[  170.972231][   T28] audit: type=1326 audit(1754948305.827:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7611 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4d78ebe9 code=0x7ffc0000
[  171.046853][ T5887] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  171.084030][ T5887] usb 3-1: cp210x converter now attached to ttyUSB0
[  171.338392][ T5887] usb 3-1: USB disconnect, device number 5
[  171.358648][ T5887] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  171.411012][ T5887] cp210x 3-1:0.0: device disconnected
[  171.661877][ T5879] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  171.877160][ T5879] usb 1-1: config 0 has an invalid interface number: 93 but max is 0
[  171.901576][ T5879] usb 1-1: config 0 has no interface number 0
[  171.924984][ T5879] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  171.940154][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.972398][ T5879] usb 1-1: Product: syz
[  171.990271][ T5879] usb 1-1: Manufacturer: syz
[  172.009961][ T5879] usb 1-1: SerialNumber: syz
[  172.026705][ T5879] usb 1-1: config 0 descriptor??
[  172.251667][ T5879] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  172.269873][ T5879] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  172.280040][ T5879] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  172.290993][ T5879] usb 1-1: media controller created
[  172.299591][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  172.349911][ T5879] DVB: Unable to find symbol dib7000p_attach()
[  172.356264][ T5879] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  172.368073][ T5879] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  172.377387][ T5879] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  172.386352][ T5879] usb 1-1: media controller created
[  172.395576][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  172.409035][ T5879] dib0700: the master dib7090 has to be initialized first
[  172.416949][ T5879] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  172.501871][ T5879] rc_core: IR keymap rc-dib0700-rc5 not found
[  172.508092][ T5879] Registered IR keymap rc-empty
[  172.514493][ T5879] dvb-usb: could not initialize remote control.
[  172.520763][ T5879] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  172.540576][ T5879] usb 1-1: USB disconnect, device number 10
[  172.628957][ T5879] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  173.880351][ T7659] loop2: detected capacity change from 0 to 40427
[  173.934610][ T7659] F2FS-fs (loop2): Found nat_bits in checkpoint
[  174.051835][ T7659] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  174.133325][ T7659] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  174.399055][ T7681] loop1: detected capacity change from 0 to 64
[  174.423706][ T7206] bio_check_eod: 6 callbacks suppressed
[  174.423732][ T7206] syz-executor: attempt to access beyond end of device
[  174.423732][ T7206] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  174.500040][ T7206] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  175.343976][   T28] audit: type=1326 audit(1754948310.207:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.1.511" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4cb7f8ebe9 code=0x0
[  175.448431][ T7704] loop2: detected capacity change from 0 to 2048
[  175.478000][ T7704] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  175.498653][ T7704] NILFS (loop2): mounting unchecked fs
[  175.524809][ T5959] udevd[5959]: incorrect nilfs2 checksum on /dev/loop2
[  175.544216][ T7704] NILFS (loop2): recovery complete
[  175.571577][ T7707] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.719541][ T7694] loop4: detected capacity change from 0 to 32768
[  175.731774][   T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  175.741287][ T7694] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.510 (7694)
[  175.793312][ T7694] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.835111][ T7694] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  175.854355][ T7694] BTRFS info (device loop4): setting nodatacow, compression disabled
[  175.873076][ T7694] BTRFS info (device loop4): max_inline at 0
[  175.879268][ T7694] BTRFS info (device loop4): enabling disk space caching
[  175.894610][ T7694] BTRFS info (device loop4): turning off barriers
[  175.908049][ T7694] BTRFS info (device loop4): turning on flush-on-commit
[  175.918823][ T7694] BTRFS info (device loop4): doing ref verification
[  175.921694][   T23] usb 1-1: Using ep0 maxpacket: 8
[  175.925652][ T7694] BTRFS info (device loop4): force clearing of disk cache
[  175.937874][ T7694] BTRFS info (device loop4): enabling ssd optimizations
[  175.947739][ T7694] BTRFS info (device loop4): max_inline at 4096
[  175.953105][   T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.954505][ T7694] BTRFS info (device loop4): disk space caching is enabled
[  175.982917][   T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  175.994089][   T23] usb 1-1: config 1 has no interface number 0
[  176.000828][   T23] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.012995][   T23] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  176.032305][   T23] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  176.063209][   T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40
[  176.074551][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.117016][   T23] usb 1-1: Product: syz
[  176.117031][   T23] usb 1-1: Manufacturer: syz
[  176.117040][   T23] usb 1-1: SerialNumber: syz
[  176.122422][ T7694] BTRFS info (device loop4): auto enabling async discard
[  176.126219][ T7694] BTRFS info (device loop4): rebuilding free space tree
[  176.143142][ T7694] BTRFS info (device loop4): disabling free space tree
[  176.143218][ T7694] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  176.143336][ T7694] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  176.457657][ T6334] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.887877][ T7736] loop4: detected capacity change from 0 to 2048
[  176.958125][ T7739] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.987230][   T23] cdc_ncm 1-1:1.1: bind() failure
[  177.272138][   T23] usb 1-1: USB disconnect, device number 11
[  178.417472][ T7774] input: syz1 as /devices/virtual/input/input15
[  178.638228][ T7779] loop0: detected capacity change from 0 to 2048
[  178.713788][ T7779]  loop0: p1 < > p4
[  178.741809][ T7779] loop0: p4 size 8388608 extends beyond EOD, truncated
[  178.918026][ T7783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.540'.
[  179.031795][  T787] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  179.052286][ T7785] loop0: detected capacity change from 0 to 512
[  179.081726][ T7785] EXT4-fs (loop0): Test dummy encryption mode enabled
[  179.088654][ T7785] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  179.184621][ T7785] EXT4-fs (loop0): 1 truncate cleaned up
[  179.207628][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  179.229986][ T5959] udevd[5959]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  179.241660][  T787] usb 5-1: Using ep0 maxpacket: 16
[  179.249172][ T7785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.259028][  T787] usb 5-1: unable to get BOS descriptor or descriptor too short
[  179.280450][  T787] usb 5-1: unable to read config index 0 descriptor/start: -71
[  179.291618][  T787] usb 5-1: can't read configurations, error -71
[  179.398526][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.865348][ T7799] loop0: detected capacity change from 0 to 64
[  179.944360][ T7801] loop4: detected capacity change from 0 to 128
[  180.020529][ T7801] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  180.072637][ T7801] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  180.113481][ T5160] udevd[5160]: worker [5959] terminated by signal 33 (Unknown signal 33)
[  180.162516][ T5160] udevd[5160]: worker [5959] failed while handling '/devices/virtual/block/loop4'
[  180.303623][ T6334] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.461969][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  180.740415][ T7805] loop1: detected capacity change from 0 to 32768
[  180.762975][ T7805] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.549 (7805)
[  180.822507][ T7805] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  180.848344][ T7805] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  180.859216][ T7805] BTRFS info (device loop1): using free space tree
[  180.950248][ T7805] BTRFS info (device loop1): enabling ssd optimizations
[  180.979819][ T7805] BTRFS info (device loop1): auto enabling async discard
[  181.265865][ T5787] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  181.281883][  T787] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  181.388908][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  181.422183][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  181.541635][  T787] usb 3-1: Using ep0 maxpacket: 16
[  181.600897][  T787] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  181.665253][  T787] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  181.696543][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  181.806870][  T787] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  181.910968][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.971341][  T787] usb 3-1: Product: syz
[  181.987781][  T787] usb 3-1: Manufacturer: syz
[  182.001788][  T787] usb 3-1: SerialNumber: syz
[  182.015928][  T787] usb 3-1: config 0 descriptor??
[  182.034195][  T787] ums-onetouch 3-1:0.0: USB Mass Storage device detected
[  182.299212][ T7850] loop4: detected capacity change from 0 to 4096
[  182.398290][ T5856] usb 3-1: USB disconnect, device number 6
[  182.898311][ T7863] loop1: detected capacity change from 0 to 128
[  183.261925][ T7873] input: syz1 as /devices/virtual/input/input16
[  183.281674][ T7873] input: failed to attach handler leds to device input16, error: -6
[  183.697391][ T7889] loop2: detected capacity change from 0 to 164
[  183.743380][ T7889] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  183.753559][ T7890] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  183.788306][ T7889] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  183.836465][ T7889] Symlink component flag not implemented
[  183.856658][ T7889] Symlink component flag not implemented
[  183.869669][ T7889] Symlink component flag not implemented (7)
[  183.895754][ T7889] Symlink component flag not implemented (116)
[  183.952551][ T1202] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  184.075425][ T7894] loop0: detected capacity change from 0 to 2048
[  184.143700][ T1202] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  184.162279][ T1202] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  184.168692][ T7894] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.180033][ T1202] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  184.180065][ T1202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.180087][ T1202] usb 2-1: Product: syz
[  184.180103][ T1202] usb 2-1: Manufacturer: syz
[  184.180119][ T1202] usb 2-1: SerialNumber: syz
[  184.422771][ T1202] usb 2-1: 0:2 : does not exist
[  184.455869][ T1202] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  184.548041][ T1202] usb 2-1: USB disconnect, device number 9
[  184.652781][ T7899] loop2: detected capacity change from 0 to 8192
[  184.656442][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  184.679584][ T7899] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  184.721644][ T7899] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  184.738736][ T7899] REISERFS (device loop2): using ordered data mode
[  184.795406][ T7899] reiserfs: using flush barriers
[  184.847012][ T7899] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  184.849247][ T7892] loop4: detected capacity change from 0 to 40427
[  184.886786][ T7892] F2FS-fs (loop4): build fault injection attr: rate: 694, type: 0x7ffff
[  184.906532][ T7899] REISERFS (device loop2): checking transaction log (loop2)
[  184.916928][ T7892] F2FS-fs (loop4): invalid crc value
[  184.948749][ T7892] F2FS-fs (loop4): Found nat_bits in checkpoint
[  184.969167][ T7899] REISERFS (device loop2): Using tea hash to sort names
[  184.991069][ T7899] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  185.122262][ T7892] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  185.281738][ T7892] F2FS-fs (loop4): inject kmalloc in f2fs_kmalloc of __f2fs_setxattr+0x1ea/0x12c0
[  185.435242][ T6334] syz-executor: attempt to access beyond end of device
[  185.435242][ T6334] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  185.453594][ T6334] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  186.252526][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'.
[  186.504248][ T7939] loop0: detected capacity change from 0 to 64
[  186.535659][ T7939] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  186.878825][ T7948] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  187.281281][ T7937] loop2: detected capacity change from 0 to 32768
[  187.311734][ T7937] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.593 (7937)
[  187.369933][ T7937] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  187.410561][ T7937] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  187.422485][ T7937] BTRFS info (device loop2): using free space tree
[  187.434735][ T7960] loop4: detected capacity change from 0 to 2048
[  187.517412][ T7960] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.561724][ T7937] BTRFS info (device loop2): enabling ssd optimizations
[  187.578964][ T7937] BTRFS info (device loop2): auto enabling async discard
[  187.925636][ T7206] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  188.008640][ T7985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.607'.
[  188.141291][ T5799] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop2 scanned by udevd (5799)
[  188.271962][ T7990] loop4: detected capacity change from 0 to 128
[  188.363901][ T7990] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  188.497088][ T7990] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  188.703356][ T6334] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  189.271716][ T8002] loop1: detected capacity change from 0 to 8192
[  189.318733][ T8002] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  189.336927][ T8002] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  189.347101][ T8002] REISERFS (device loop1): using ordered data mode
[  189.354817][ T8002] reiserfs: using flush barriers
[  189.372332][ T8002] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  189.394688][ T8002] REISERFS (device loop1): checking transaction log (loop1)
[  189.444818][ T8002] REISERFS (device loop1): Using tea hash to sort names
[  189.477539][ T8002] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  190.765166][ T8017] loop1: detected capacity change from 0 to 32768
[  190.808671][ T8017] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.976302][ T8017] XFS (loop1): Ending clean mount
[  191.008336][ T8017] XFS (loop1): Quotacheck needed: Please wait.
[  191.198647][ T8017] XFS (loop1): Quotacheck: Done.
[  191.550145][ T5787] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  191.676271][ T8051] loop2: detected capacity change from 0 to 1024
[  191.875402][ T8051] hfsplus: keylen 65060 too large
[  191.880943][ T8051] hfsplus: xattr search failed
[  192.149736][ T8059] pim6reg1: entered promiscuous mode
[  192.169554][ T8059] pim6reg1: entered allmulticast mode
[  192.207754][ T8061] support for the xor transformation has been removed.
[  192.444217][ T8065] netlink: 'syz.0.634': attribute type 1 has an invalid length.
[  192.666673][ T8071] netlink: 'syz.0.637': attribute type 2 has an invalid length.
[  192.684647][ T8055] loop4: detected capacity change from 0 to 32768
[  192.703117][ T8055] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.630 (8055)
[  192.750789][ T8055] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.762062][ T8055] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  192.783654][ T8055] BTRFS info (device loop4): turning on sync discard
[  192.790977][ T8055] BTRFS info (device loop4): setting nodatacow, compression disabled
[  192.792115][ T5887] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  192.823557][ T8055] BTRFS info (device loop4): turning off barriers
[  192.838150][ T8055] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  192.850517][ T8055] BTRFS info (device loop4): trying to use backup root at mount time
[  192.867382][ T8055] BTRFS info (device loop4): force zlib compression, level 3
[  192.875540][ T8055] BTRFS info (device loop4): trying to use backup root at mount time
[  192.891126][ T8055] BTRFS info (device loop4): max_inline at 0
[  192.897566][ T8055] BTRFS info (device loop4): using free space tree
[  192.984223][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.002224][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.012608][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  193.016693][ T8082] loop0: detected capacity change from 0 to 2048
[  193.025867][ T5887] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  193.042082][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.059169][   T12] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  193.072409][ T5887] usb 2-1: config 0 descriptor??
[  193.080334][ T8055] BTRFS error (device loop4): failed to load root extent
[  193.088957][ T8055] BTRFS warning (device loop4): try to load backup roots slot 1
[  193.097864][ T1307] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  193.139387][ T8055] BTRFS warning (device loop4): couldn't read tree root
[  193.147221][ T8055] BTRFS warning (device loop4): try to load backup roots slot 2
[  193.165652][ T3484] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  193.186788][ T8092] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  193.206286][ T8055] BTRFS warning (device loop4): couldn't read tree root
[  193.217363][ T8055] BTRFS warning (device loop4): try to load backup roots slot 3
[  193.250635][ T8055] BTRFS info (device loop4): enabling ssd optimizations
[  193.277696][ T8055] BTRFS info (device loop4): rebuilding free space tree
[  193.306201][ T8055] BTRFS info (device loop4): checking UUID tree
[  193.322694][ T8092] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  193.348433][ T8092] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  193.382952][ T8092] Remounting filesystem read-only
[  193.393759][ T1307] NILFS (loop0): discard dirty page: offset=4096, ino=6
[  193.404177][ T1307] NILFS (loop0): discard dirty block: blocknr=39, size=1024
[  193.418318][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  193.438175][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  193.468966][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  193.510470][ T1307] NILFS (loop0): discard dirty page: offset=0, ino=3
[  193.522917][ T1307] NILFS (loop0): discard dirty block: blocknr=42, size=1024
[  193.553041][ T1307] NILFS (loop0): discard dirty block: blocknr=43, size=1024
[  193.560422][ T1307] NILFS (loop0): discard dirty block: blocknr=44, size=1024
[  193.591032][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  193.594524][ T5887] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  193.608174][ T1307] NILFS (loop0): discard dirty page: offset=65536, ino=3
[  193.620692][ T5887] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  193.636712][ T5887] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  193.643298][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  193.681647][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  193.683509][ T5887] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  193.711350][ T1307] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  193.744608][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  193.768710][ T1307] NILFS (loop0): discard dirty page: offset=196608, ino=3
[  193.796492][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  193.832190][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  193.832474][ T5887] usb 2-1: USB disconnect, device number 10
[  193.875652][ T6334] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.884743][ T1307] NILFS (loop0): discard dirty block: blocknr=49, size=1024
[  193.907281][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  193.941641][ T1307] NILFS (loop0): discard dirty page: offset=0, ino=18
[  193.948492][ T1307] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  194.003804][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  194.031590][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  194.040514][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  194.093523][ T1307] NILFS (loop0): discard dirty page: offset=0, ino=2
[  194.100289][ T1307] NILFS (loop0): discard dirty block: blocknr=18, size=1024
[  194.129360][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  194.156126][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  194.177324][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  194.211638][ T1307] NILFS (loop0): discard dirty page: offset=0, ino=5
[  194.218398][ T1307] NILFS (loop0): discard dirty block: blocknr=41, size=1024
[  194.249449][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  194.281726][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  194.305294][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  194.366936][ T1307] NILFS (loop0): discard dirty page: offset=0, ino=4
[  194.407237][ T1307] NILFS (loop0): discard dirty block: blocknr=40, size=1024
[  194.436847][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  194.481687][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  194.520702][ T1307] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  194.522575][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  194.536259][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  195.201720][ T8082] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  195.295864][ T5789] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  195.312152][ T5789] NILFS (loop0): discard dirty page: offset=0, ino=6
[  195.350309][ T5789] NILFS (loop0): discard dirty block: blocknr=35, size=1024
[  195.377656][ T5789] NILFS (loop0): discard dirty block: blocknr=36, size=1024
[  195.389012][ T5789] NILFS (loop0): discard dirty block: blocknr=37, size=1024
[  195.396470][ T5789] NILFS (loop0): discard dirty block: blocknr=38, size=1024
[  195.821254][ T8140] loop4: detected capacity change from 0 to 1024
[  195.881040][ T8140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.915276][ T8140] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.027314][ T8140] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #15: block 3: comm syz.4.657: lblock 3 mapped to illegal pblock 3 (length 13)
[  196.148365][ T8140] EXT4-fs (loop4): Remounting filesystem read-only
[  196.240930][ T6334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.243620][ T8147] loop0: detected capacity change from 0 to 8192
[  196.258980][ T8147] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  196.272816][ T8147] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  196.283139][ T8147] REISERFS (device loop0): using ordered data mode
[  196.289819][ T8147] reiserfs: using flush barriers
[  196.300036][ T8147] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  196.317683][ T8147] REISERFS (device loop0): checking transaction log (loop0)
[  196.335687][ T8147] REISERFS (device loop0): Using r5 hash to sort names
[  196.362081][ T8147] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  196.610952][ T8147] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 293, free_space(entry_count) 2
[  196.649523][ T8147] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  196.678325][ T8147] REISERFS (device loop0): Remounting filesystem read-only
[  196.692139][ T8147] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data
[  197.398439][ T8177] loop4: detected capacity change from 0 to 64
[  197.684857][ T8181] loop4: detected capacity change from 0 to 64
[  198.009744][ T8170] loop2: detected capacity change from 0 to 32768
[  198.049384][ T8170] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  198.184955][ T8170] XFS (loop2): Ending clean mount
[  198.197884][ T8170] XFS (loop2): Quotacheck needed: Please wait.
[  198.265844][ T8170] XFS (loop2): Quotacheck: Done.
[  198.506045][ T7206] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  198.963859][ T8208] loop1: detected capacity change from 0 to 256
[  198.971226][ T8208] exfat: Deprecated parameter 'utf8'
[  199.058662][ T8208] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  199.252615][ T8205] loop4: detected capacity change from 0 to 8192
[  199.284234][ T8205] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  199.343054][ T8205] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  199.352573][ T8205] REISERFS (device loop4): using ordered data mode
[  199.359120][ T8205] reiserfs: using flush barriers
[  199.368083][ T8205] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  199.385266][ T8205] REISERFS (device loop4): checking transaction log (loop4)
[  199.453050][ T8205] REISERFS (device loop4): Using r5 hash to sort names
[  199.481017][ T8205] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  200.738092][ T8245] loop1: detected capacity change from 0 to 512
[  200.766460][ T8235] loop2: detected capacity change from 0 to 32768
[  200.869748][ T8235] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  201.005803][ T8253] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid'
[  201.005803][ T8253] 
[  201.075121][   T28] audit: type=1800 audit(1754948335.927:11): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.692" name="file1" dev="loop2" ino=9553 res=0 errno=0
[  201.329868][ T8259] loop4: detected capacity change from 0 to 512
[  201.480366][ T8259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.490191][ T7206] ocfs2: Unmounting device (7,2) on (node local)
[  201.603529][ T8259] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  201.701862][ T5105] Bluetooth: hci2: command 0x0406 tx timeout
[  201.707374][ T5800] Bluetooth: hci3: command 0x0406 tx timeout
[  202.038191][ T6334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.487140][  T787] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  202.495908][  T787] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  202.504092][  T787] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  202.505448][ T8284] loop4: detected capacity change from 0 to 8192
[  202.511779][  T787] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x2
[  202.527258][  T787] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  202.567836][  T787] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  202.577967][  T787] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  202.603626][  T787] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  202.611098][  T787] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  202.644399][  T787] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  202.675193][  T787] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  202.689417][  T787] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  202.694517][ T8292] loop2: detected capacity change from 0 to 512
[  202.736748][ T8292] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  202.738362][  T787] hid-generic 00A0:0006:0003.000A: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  202.759468][ T5856] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  202.778099][ T8292] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  202.829268][ T8292] EXT4-fs (loop2): 1 truncate cleaned up
[  202.836561][ T8292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.974570][ T5856] usb 2-1: config 0 has no interfaces?
[  202.980147][ T5856] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00
[  203.011077][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.029419][ T5856] usb 2-1: config 0 descriptor??
[  203.124925][ T7206] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.269133][ T5856] usb 2-1: USB disconnect, device number 11
[  204.084882][ T8326] loop2: detected capacity change from 0 to 128
[  204.181956][ T5802] Bluetooth: hci4: command 0x1003 tx timeout
[  204.190115][ T5790] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  204.339943][ T8330] loop1: detected capacity change from 0 to 1024
[  204.449324][ T8330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.521058][ T8330] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  204.567836][ T8330] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28
[  204.610735][ T8330] EXT4-fs (loop1): This should not happen!! Data will be lost
[  204.610735][ T8330] 
[  204.621673][ T5856] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  204.627092][ T8330] EXT4-fs (loop1): Total free blocks count 0
[  204.660231][ T8330] EXT4-fs (loop1): Free/Dirty block details
[  204.677049][ T8330] EXT4-fs (loop1): free_blocks=68451041280
[  204.691684][ T8330] EXT4-fs (loop1): dirty_blocks=16
[  204.700416][ T8330] EXT4-fs (loop1): Block reservation details
[  204.714009][ T8330] EXT4-fs (loop1): i_reserved_data_blocks=1
[  204.813872][ T5856] usb 1-1: config 0 interface 0 has no altsetting 0
[  204.823202][ T5856] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  204.853821][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.893237][ T5856] usb 1-1: config 0 descriptor??
[  205.040609][ T8335] loop2: detected capacity change from 0 to 32768
[  205.080311][ T8335] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.731 (8335)
[  205.241716][ T8335] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  205.261685][ T8335] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  205.270520][ T8335] BTRFS info (device loop2): using free space tree
[  205.318802][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.597001][ T8335] BTRFS info (device loop2): enabling ssd optimizations
[  205.655540][ T8335] BTRFS info (device loop2): auto enabling async discard
[  205.724232][ T8357] bond0: option mode: unable to set because the bond device has slaves
[  205.954842][ T5856] video4linux radio48: keene_cmd_set failed (-71)
[  205.961362][ T5856] radio-keene 1-1:0.0: V4L2 device registered as radio48
[  206.007691][ T5856] usb 1-1: USB disconnect, device number 12
[  206.049222][ T8361] loop1: detected capacity change from 0 to 16
[  206.063073][   T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  206.108495][ T8361] erofs: (device loop1): mounted with root inode @ nid 36.
[  206.150895][ T7206] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  206.176761][ T8361] syz.1.735: attempt to access beyond end of device
[  206.176761][ T8361] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16
[  206.200314][ T8361] syz.1.735: attempt to access beyond end of device
[  206.200314][ T8361] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16
[  206.290800][   T23] usb 5-1: Using ep0 maxpacket: 32
[  206.299521][ T8361] syz.1.735: attempt to access beyond end of device
[  206.299521][ T8361] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  206.308416][   T23] usb 5-1: config 0 interface 0 has no altsetting 0
[  206.332496][   T23] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  206.371653][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.391307][   T23] usb 5-1: Product: syz
[  206.396480][   T23] usb 5-1: Manufacturer: syz
[  206.401849][   T23] usb 5-1: SerialNumber: syz
[  206.426336][   T23] usb 5-1: config 0 descriptor??
[  206.462887][   T23] gs_usb 5-1:0.0: Required endpoints not found
[  206.488987][ T5787] BUG: Bad page state in process syz-executor  pfn:66e10
[  206.497252][ T5787] page:ffffea00019b8400 refcount:0 mapcount:0 mapping:ffff88805d3d1278 index:0x2 pfn:0x66e10
[  206.507662][ T5787] aops:z_erofs_cache_aops ino:0
[  206.512636][ T5787] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff)
[  206.520549][ T5787] page_type: 0xffffffff()
[  206.524966][ T5787] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805d3d1278
[  206.533656][ T5787] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000
[  206.542465][ T5787] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  206.549784][ T5787] page_owner tracks the page as allocated
[  206.556268][ T5787] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8361, tgid 8360 (syz.1.735), ts 206175297555, free_ts 205889367711
[  206.578645][ T5787]  post_alloc_hook+0x1cd/0x210
[  206.583952][ T5787]  get_page_from_freelist+0x195c/0x19f0
[  206.589560][ T5787]  __alloc_pages+0x1e3/0x460
[  206.594262][ T5787]  z_erofs_do_read_page+0x20c0/0x3680
[  206.599766][ T5787]  z_erofs_readahead+0x862/0xd50
[  206.604795][ T5787]  read_pages+0x177/0x840
[  206.609174][ T5787]  page_cache_ra_unbounded+0x692/0x770
[  206.614775][ T5787]  force_page_cache_ra+0x2c1/0x320
[  206.619943][ T5787]  generic_fadvise+0x44f/0x730
[  206.624805][ T5787]  __x64_sys_fadvise64+0x140/0x180
[  206.629972][ T5787]  do_syscall_64+0x55/0xb0
[  206.634624][ T5787]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  206.640563][ T5787] page last free stack trace:
[  206.645345][ T5787]  free_unref_page_prepare+0x7ce/0x8e0
[  206.650867][ T5787]  free_unref_page_list+0xbe/0x860
[  206.656191][ T5787]  release_pages+0x1fa0/0x2220
[  206.661008][ T5787]  tlb_flush_mmu+0x368/0x4f0
[  206.665778][ T5787]  tlb_finish_mmu+0xc3/0x1d0
[  206.670416][ T5787]  exit_mmap+0x3f0/0xb50
[  206.674814][ T5787]  __mmput+0x118/0x3c0
[  206.678922][ T5787]  exit_mm+0x1da/0x2c0
[  206.683277][ T5787]  do_exit+0x88e/0x23c0
[  206.687475][ T5787]  do_group_exit+0x21b/0x2d0
[  206.692167][ T5787]  __x64_sys_exit_group+0x3f/0x40
[  206.697232][ T5787]  do_syscall_64+0x55/0xb0
[  206.701747][ T5787]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  206.707687][ T5787] Modules linked in:
[  206.711697][ T5787] CPU: 0 PID: 5787 Comm: syz-executor Not tainted 6.6.101-syzkaller #0
[  206.719977][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  206.730065][ T5787] Call Trace:
[  206.733386][ T5787]  <TASK>
[  206.736352][ T5787]  dump_stack_lvl+0x16c/0x230
[  206.741085][ T5787]  ? show_regs_print_info+0x20/0x20
[  206.746335][ T5787]  ? swiotlb_print_info+0x70/0x70
[  206.751419][ T5787]  bad_page+0x14b/0x170
[  206.755613][ T5787]  free_unref_page_prepare+0x887/0x8e0
[  206.761133][ T5787]  free_unref_page+0x32/0x2e0
[  206.765866][ T5787]  ? __folio_put+0xef/0x210
[  206.770422][ T5787]  erofs_try_to_free_all_cached_pages+0x295/0x600
[  206.776896][ T5787]  erofs_shrink_workstation+0x118/0x290
[  206.782504][ T5787]  ? erofs_shrinker_unregister+0x170/0x170
[  206.788362][ T5787]  ? io_schedule+0xd0/0xd0
[  206.792828][ T5787]  ? kobject_put+0x43c/0x470
[  206.797476][ T5787]  erofs_shrinker_unregister+0x5d/0x170
[  206.803070][ T5787]  erofs_put_super+0x4e/0x150
[  206.807798][ T5787]  ? erofs_free_inode+0xb0/0xb0
[  206.812723][ T5787]  generic_shutdown_super+0x134/0x2b0
[  206.818159][ T5787]  kill_block_super+0x44/0x90
[  206.822886][ T5787]  erofs_kill_sb+0x4c/0x140
[  206.827449][ T5787]  deactivate_locked_super+0x97/0x100
[  206.832877][ T5787]  cleanup_mnt+0x429/0x4c0
[  206.837322][ T5787]  task_work_run+0x1ce/0x250
[  206.841933][ T5787]  ? task_work_cancel+0x240/0x240
[  206.846985][ T5787]  ? exit_to_user_mode_loop+0x3b/0x110
[  206.852469][ T5787]  exit_to_user_mode_loop+0xe6/0x110
[  206.857792][ T5787]  exit_to_user_mode_prepare+0xb1/0x140
[  206.863377][ T5787]  syscall_exit_to_user_mode+0x1a/0x50
[  206.868875][ T5787]  do_syscall_64+0x61/0xb0
[  206.873323][ T5787]  ? clear_bhb_loop+0x40/0x90
[  206.878014][ T5787]  ? clear_bhb_loop+0x40/0x90
[  206.882795][ T5787]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  206.888705][ T5787] RIP: 0033:0x7f4cb7f8ff17
[  206.893135][ T5787] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  206.912754][ T5787] RSP: 002b:00007ffd74c729b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  206.921183][ T5787] RAX: 0000000000000000 RBX: 00007f4cb8011c05 RCX: 00007f4cb7f8ff17
[  206.929181][ T5787] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd74c72a70
[  206.937297][ T5787] RBP: 00007ffd74c72a70 R08: 0000000000000000 R09: 0000000000000000
[  206.945382][ T5787] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd74c73b00
[  206.953370][ T5787] R13: 00007f4cb8011c05 R14: 00000000000325db R15: 00007ffd74c73b40
[  206.961367][ T5787]  </TASK>
[  206.964996][ T5787] Disabling lock debugging due to kernel taint
[  208.749069][  T787] usb 5-1: USB disconnect, device number 9