last executing test programs:

4.338685221s ago: executing program 3 (id=761):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2008412, &(0x7f0000000b40)=ANY=[], 0x1, 0x5566, &(0x7f000000b9c0)="$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")
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, <r1=>0x0, <r2=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r3=>0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0})
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r6, @ANYRES64=r4, @ANYRES16=r3, @ANYRES16=r6, @ANYRESDEC=r5, @ANYRES16=r2, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=r1], 0x5, 0x0, &(0x7f0000000000))

2.762048355s ago: executing program 3 (id=768):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
syncfs(r0)

2.60913718s ago: executing program 0 (id=769):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
eventfd2(0x2, 0x80001)

2.31885018s ago: executing program 1 (id=771):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x180801e, &(0x7f0000006180)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6255493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c8aab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdba01425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00000000000000000000002f8a3c9496f52398c1811531fbe2c4ef0e4c4a43bea89ae7205036a2"], 0x5, 0x5597, &(0x7f0000000bc0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOductMG4jiA/m0w9FNFVfe9SndwjB6hy+5aOEAvwRHoCSr1ApyBSl3kCEmIsCdITkCKxBgn6D3JY2aMfp4Bb2YsDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABd+letZr9/fv51Ysyfm+1pMg0HAAAAOGBTrWb1h0lTf5va36emj6leREQZEYfm7oMYtTIHKac68v3qQR/+RtQJu/ZxOt5ExJd0XH/o+lcAAACAy7VeLKfNbL0p0hLA/357xZk0izblu6+Z8oqIqCZXmdLKXfEpU1j9fA/je6a0egHrVaawZsltePjaKNdN2gat0/1I5vWfWNfKbu4LAAD0qT0TODILAQAA4AJ867sDnMPjqX2xL/bvGcfNKb0QfN2qAQAAAC9Q0XcHAAAAgM4V+935fjyP/f8K+/8BAABAds3+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpU61m68Vyeuz6/Ik5t9vT5BsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHfszzsKhEAYhMHe9Z3J3P+w0qChsUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFvP69xVHEAwL+7s7ttqmKMEjAqFXrQi023tbVXESV48E8QQrqp0dRqm4MtwZqLN8m5F9GjiKDEW/6Hnhvopd56yCGCJw+RmZ3ZzCYLDSWdSd3PB96+77ydvh/TTch33iwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABS234/Xm3mcpC+T/bhou7+zupDWW/vq1Ob6g5m0pHGj4nk/A94oH5yerm8iAAAAjI+kyO8j4mF7Yy6tm5NZ/t8uzklz/p9e6MdFPr8/79/aWT2ZvzVT5P9//vHolcFAk0k2Ttrp4tJy79zBqbSe0hKPvRcfe0Yru/LZvZck+w9pfrz28nY7u56NH+7d+7CThSeqmC0A8CTOFnUeFH8PpXW3zokBMDZapcS7yP+TyXrnBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCF7bV4rogbETHT2otTWzurC4O6tXf83fqDmc28XLp7d73cZ9pFOyIWl5Z756pcTP2ao5uLq3n7i/nl5d6Nm7eqDk5HxIi37hzunyf59NOWiVH9dCJiqOXMqyP6+fQQY+3r50CQfzyj2ms4ka7vsSc3hloaBy7UB7t9dXwAqgqKH4DjMp+jDIrP3tH3/DR/JQEAMI7aeUkz0Yftjbm0rTEVsfvzcP7/VimOofx/906/pX+8Wcr/H3126X55rHL+361ofc+C2ZVrX83evHX7naVr81d7V3tfvnu++173wuWLFy/PZvdKZhejOW53TAAAADhSnbyU8//m1MH9/1OlOPbv/5fqcv7/9Y/db8tjJfL/kfY2/eqeCQAAwDjqDKKX3vzn78aIMxqdTnwzv7Jyo9t/HRyf779WOt0ndCIv5fw/map7VgAAAEAVttcaQ/v/V0pxHHL///lfXvut3GcSERMR1yOid3bh+vKV6pZzrFXxReVsoE7dKwUAAKAuE3kp7/+3s+f/m4NHHpoR8faZiH/z7/DHIfP/5KPvfy2PVX7+/0Klqzx+mtP965HV0xGt6bpnBAAAwP/Zybykyf5f7Y25z38/9UnH8/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVfsvAAD//wIsN0Q=")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fallocate(r0, 0x0, 0x1, 0x2000402)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

2.279508352s ago: executing program 3 (id=772):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0x2dbd854266873d48})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3)

1.899172995s ago: executing program 3 (id=774):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0xe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.684465022s ago: executing program 3 (id=775):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)

1.649514674s ago: executing program 2 (id=776):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

1.549584857s ago: executing program 3 (id=777):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

1.441765691s ago: executing program 2 (id=778):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026006c0900000800b70000c6"], 0x2c}}, 0x0)

1.328150365s ago: executing program 0 (id=779):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
bind$can_raw(r0, &(0x7f00000000c0), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000019240)=[{{0x2, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x8)

1.254071357s ago: executing program 1 (id=780):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x28, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f4c466ec35e61e92e583dc9b00010100"}]}}}}}}}}, 0x0)

1.221817808s ago: executing program 0 (id=781):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.205934669s ago: executing program 2 (id=782):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
close(0x3)
pread64(r0, &(0x7f0000000200)=""/107, 0x6b, 0x3)

1.059327414s ago: executing program 2 (id=783):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000140)=""/53, 0x35)

860.146341ms ago: executing program 0 (id=784):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

640.759828ms ago: executing program 2 (id=785):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

456.404274ms ago: executing program 0 (id=786):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r1, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, @random="9f444415c302"}, 0xffffff6f, {0x2, 0x0, @broadcast}, 'bridge_slave_1\x00'})
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1)

444.269725ms ago: executing program 1 (id=787):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000000)=[{r0, 0x20d6}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)

268.992371ms ago: executing program 1 (id=788):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x64, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x200}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0xfe}}, 0x8f8c, 0x3ff, @device_a, {}, @val, @val={0x2d, 0x1a, {0x1000, 0x0, 0x2, 0x0, {0x0, 0x8, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x5}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

249.448701ms ago: executing program 0 (id=789):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x337)

229.870222ms ago: executing program 2 (id=790):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

76.590378ms ago: executing program 1 (id=791):
syz_io_uring_setup(0x6368, &(0x7f00000008c0)={0x0, 0xfffffffe, 0x80, 0x0, 0x216}, 0x0, 0x0, &(0x7f0000000000))
eventfd2(0xbfb, 0x0)
unshare(0x40600)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=792):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="202301"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x20, 0x16, 0x4, "25a8f6b3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

dding VLAN 0 to HW filter on device bond0
[   69.269223][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.279854][ T5763] 8021q: adding VLAN 0 to HW filter on device team0
[   69.308365][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.315657][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.347505][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.354650][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.368060][ T5765] 8021q: adding VLAN 0 to HW filter on device team0
[   69.387400][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.394504][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.421594][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.428719][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.529612][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.549614][ T5763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.592821][ T5765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   69.606063][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.629161][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.648905][ T5762] 8021q: adding VLAN 0 to HW filter on device team0
[   69.667832][ T5764] 8021q: adding VLAN 0 to HW filter on device team0
[   69.711909][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.719373][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.741578][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.748783][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.763809][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.771056][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.797644][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.804837][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.022276][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.059904][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.187752][ T5765] veth0_vlan: entered promiscuous mode
[   70.239953][ T5763] veth0_vlan: entered promiscuous mode
[   70.265724][ T5765] veth1_vlan: entered promiscuous mode
[   70.292429][ T5763] veth1_vlan: entered promiscuous mode
[   70.357694][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.367456][ T5763] veth0_macvtap: entered promiscuous mode
[   70.377870][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.387248][ T5765] veth0_macvtap: entered promiscuous mode
[   70.403206][ T5765] veth1_macvtap: entered promiscuous mode
[   70.412790][ T5763] veth1_macvtap: entered promiscuous mode
[   70.456641][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.483782][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.496918][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.511479][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.524482][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.539960][ T5765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.549058][ T5765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.558416][ T5765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.567248][ T5765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.597631][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.609181][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.622719][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.638251][ T5763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.647692][ T5763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.656730][ T5763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.665619][ T5763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.679261][ T5762] veth0_vlan: entered promiscuous mode
[   70.685721][ T5766] Bluetooth: hci0: command tx timeout
[   70.691155][ T5766] Bluetooth: hci2: command tx timeout
[   70.697484][ T5775] Bluetooth: hci3: command tx timeout
[   70.697611][ T5776] Bluetooth: hci1: command tx timeout
[   70.771748][ T5764] veth0_vlan: entered promiscuous mode
[   70.795230][ T5762] veth1_vlan: entered promiscuous mode
[   70.840951][ T5764] veth1_vlan: entered promiscuous mode
[   70.896094][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.908909][ T5762] veth0_macvtap: entered promiscuous mode
[   70.922425][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.927001][ T5762] veth1_macvtap: entered promiscuous mode
[   70.937413][ T5764] veth0_macvtap: entered promiscuous mode
[   70.973707][ T5764] veth1_macvtap: entered promiscuous mode
[   71.018663][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.029934][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.039787][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.050299][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.061648][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.071134][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.079099][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.079145][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.079154][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.110421][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.111035][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.128977][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.139845][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.150837][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.180487][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.191091][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.202395][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.213285][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.225322][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.235272][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.246247][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.256586][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.267209][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.277100][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.287716][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.299298][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.322039][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.333856][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.348794][ T5762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.358871][ T5762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.367619][ T5762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.376684][ T5762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.399177][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.408130][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.417037][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.425813][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.445980][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.458416][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.574449][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[   71.580997][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[   71.611917][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.653377][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.765203][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.773070][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.813124][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.837429][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.939323][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.952780][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.198862][ T5841] syz.3.7[5841]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   72.234881][ T5841] loop3: detected capacity change from 0 to 65
[   72.261960][ T5841] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[   72.763954][ T5776] Bluetooth: hci1: command tx timeout
[   72.765114][ T5775] Bluetooth: hci2: command tx timeout
[   72.769384][ T5771] Bluetooth: hci3: command tx timeout
[   72.775071][ T5766] Bluetooth: hci0: command tx timeout
[   72.841070][   T27] audit: type=1326 audit(1775002452.159:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.2.13" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379c819 code=0x0
[   72.882253][ T5843] loop1: detected capacity change from 0 to 32768
[   72.951230][ T5843] (syz.1.2,5843,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   73.019089][ T5843] (syz.1.2,5843,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   73.108352][ T5843] JBD2: Ignoring recovery information on journal
[   73.167947][ T5843] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   73.276240][ T5871] loop3: detected capacity change from 0 to 512
[   73.285801][ T5871] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   73.300799][ T5871] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   73.344032][ T5871] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.20: invalid indirect mapped block 9 (level 0)
[   73.442597][ T5871] EXT4-fs (loop3): 1 truncate cleaned up
[   73.468138][ T5871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.545986][ T5877] loop0: detected capacity change from 0 to 64
[   73.669988][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.681368][ T5843] syz.1.2 (5843) used greatest stack depth: 19376 bytes left
[   73.684662][ T5877] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  leaving read-only.
[   73.779537][ T5879] =======================================================
[   73.779537][ T5879] WARNING: The mand mount option has been deprecated and
[   73.779537][ T5879]          and is ignored by this kernel. Remove the mand
[   73.779537][ T5879]          option from the mount to silence this warning.
[   73.779537][ T5879] =======================================================
[   73.936827][ T5764] ocfs2: Unmounting device (7,1) on (node local)
[   74.041022][ T5886] loop3: detected capacity change from 0 to 512
[   74.074752][ T5886] EXT4-fs: Ignoring removed mblk_io_submit option
[   74.118351][ T5886] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.26: invalid indirect mapped block 10 (level 1)
[   74.140461][ T5886] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.26: invalid indirect mapped block 8 (level 1)
[   74.156762][ T5886] EXT4-fs (loop3): 1 truncate cleaned up
[   74.177000][ T5886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.261556][ T5893] loop1: detected capacity change from 0 to 512
[   74.331981][ T5893] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.24: corrupted in-inode xattr: invalid ea_ino
[   74.359385][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.359417][ T5893] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.24: couldn't read orphan inode 15 (err -117)
[   74.409515][ T5893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.611662][ T5893] EXT4-fs (loop1): shut down requested (0)
[   74.648537][ T5893] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.24: error -117 reading directory block
[   74.702960][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.844233][ T5766] Bluetooth: hci0: command tx timeout
[   74.844348][ T5771] Bluetooth: hci3: command tx timeout
[   74.849765][ T5766] Bluetooth: hci2: command tx timeout
[   74.855392][ T5776] Bluetooth: hci1: command tx timeout
[   74.950356][ T5903] loop0: detected capacity change from 0 to 4096
[   74.973500][ T5903] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[   75.086805][ T5903] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[   75.124918][ T5907] netlink: 'syz.1.33': attribute type 14 has an invalid length.
[   75.258468][ T5903] ntfs3: loop0: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record
[   75.287182][    C1] vkms_vblank_simulate: vblank timer overrun
[   75.382945][ T5903] ntfs3: loop0: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record
[   75.411606][    C1] vkms_vblank_simulate: vblank timer overrun
[   75.476450][   T49] ntfs3: loop0: ino=1e, failed to parse mft record
[   75.961009][ T5919] capability: warning: `syz.0.38' uses 32-bit capabilities (legacy support in use)
[   75.979991][ T5919] program syz.0.38 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   76.227312][ T5922] loop0: detected capacity change from 0 to 164
[   76.513256][    C1] sched: RT throttling activated
[   76.556928][ T5912] loop1: detected capacity change from 0 to 131072
[   76.585956][ T5912] F2FS-fs (loop1): invalid crc value
[   76.640312][ T5912] F2FS-fs (loop1): Found nat_bits in checkpoint
[   76.694659][ T5912] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   77.253860][ T5153] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   77.445988][ T5153] usb 4-1: Using ep0 maxpacket: 16
[   77.479462][ T5153] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.503382][ T5153] usb 4-1: config 0 interface 0 has no altsetting 0
[   77.510047][ T5153] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   77.539468][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.570831][ T5153] usb 4-1: config 0 descriptor??
[   77.962663][ T5942] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   78.044925][ T5153] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[   78.331132][ T5954] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.396594][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.518398][ T5956] loop0: detected capacity change from 0 to 8192
[   78.546706][ T5802] usb 4-1: USB disconnect, device number 2
[   78.557389][ T5956] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   78.588098][ T5956] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   78.599577][ T5956] REISERFS (device loop0): using ordered data mode
[   78.606467][ T5956] reiserfs: using flush barriers
[   78.614670][ T5956] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   78.670084][ T5956] REISERFS (device loop0): checking transaction log (loop0)
[   78.728328][ T5956] REISERFS (device loop0): Using r5 hash to sort names
[   78.764970][ T5956] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   79.516076][ T5971] loop2: detected capacity change from 0 to 32768
[   79.601715][ T5971] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.693646][ T5802] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   79.855528][ T5971] XFS (loop2): Ending clean mount
[   79.884396][ T5802] usb 4-1: Using ep0 maxpacket: 8
[   79.890375][ T5971] XFS (loop2): Quotacheck needed: Please wait.
[   79.904472][ T5802] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[   79.918618][ T5802] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   79.929056][ T5802] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   79.939379][ T5802] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   79.949780][ T5802] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   79.981697][ T5971] XFS (loop2): Quotacheck: Done.
[   79.987223][ T5802] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   80.002919][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.267082][ T5802] usb 4-1: GET_CAPABILITIES returned 0
[   80.282409][ T5802] usbtmc 4-1:16.0: can't read capabilities
[   80.294946][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.308605][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.323169][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.344803][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.358178][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.368397][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.379608][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.397809][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.417062][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.438815][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.444014][ T5762] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   80.446836][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.466959][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.474542][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.482106][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.495149][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.503923][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.512040][ T5153] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[   80.562965][ T5995] loop0: detected capacity change from 0 to 32768
[   80.575878][ T5802] usb 4-1: USB disconnect, device number 3
[   80.587380][ T5153] hid-generic 0002:0004:0009.0002: hidraw0: <UNKNOWN> HID v0.04 Device [syz0] on syz0
[   80.687418][ T5995] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   80.740711][ T5995] (syz.0.66,5995,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[   80.865496][ T5763] ocfs2: Unmounting device (7,0) on (node local)
[   80.875944][ T6001] fido_id[6001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   81.028430][ T6008] loop2: detected capacity change from 0 to 1024
[   81.312040][ T6008] EXT4-fs: Ignoring removed i_version option
[   81.342000][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'.
[   81.361120][ T6016] netlink: 'syz.3.73': attribute type 20 has an invalid length.
[   81.373907][ T6008] EXT4-fs: inline encryption not supported
[   81.385851][ T6008] EXT4-fs (loop2): Test dummy encryption mode enabled
[   81.404687][ T6016] netlink: 'syz.3.73': attribute type 21 has an invalid length.
[   81.424467][ T6008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.670026][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.802760][ T6020] loop3: detected capacity change from 0 to 4096
[   81.817749][    T8] cfg80211: failed to load regulatory.db
[   81.918970][ T6024] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   82.654703][ T6036] support for cryptoloop has been removed.  Use dm-crypt instead.
[   83.038508][ T6042] netlink: 136 bytes leftover after parsing attributes in process `syz.1.83'.
[   83.057862][ T6042] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   83.788964][ T6067] loop0: detected capacity change from 0 to 512
[   83.847924][ T6067] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   83.896038][ T6067] EXT4-fs (loop0): 1 orphan inode deleted
[   83.924575][ T6067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.123951][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.450318][ T6086] autofs4:pid:6086:autofs_fill_super: called with bogus options
[   85.073411][ T5803] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   85.273521][ T5803] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   85.281597][ T5803] usb 2-1: config 0 has no interface number 0
[   85.312075][ T5803] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[   85.325323][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.355587][ T5803] usb 2-1: Product: syz
[   85.359819][ T5803] usb 2-1: Manufacturer: syz
[   85.374233][ T6117] sctp: [Deprecated]: syz.3.115 (pid 6117) Use of int in maxseg socket option.
[   85.374233][ T6117] Use struct sctp_assoc_value instead
[   85.388868][ T5803] usb 2-1: SerialNumber: syz
[   85.406220][ T5803] usb 2-1: config 0 descriptor??
[   85.500788][ T6123] loop0: detected capacity change from 0 to 256
[   85.519466][ T6123] exfat: Deprecated parameter 'utf8'
[   85.561008][ T6127] loop3: detected capacity change from 0 to 512
[   85.594421][ T6127] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   85.597250][ T6123] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[   85.637429][ T5803] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[   85.672477][ T6129] loop2: detected capacity change from 0 to 1024
[   85.674811][ T5803] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   85.705401][ T6127] EXT4-fs (loop3): 1 orphan inode deleted
[   85.712985][ T5803] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[   85.722264][ T6129] EXT4-fs: inline encryption not supported
[   85.723359][ T5803] usb 2-1: media controller created
[   85.758242][ T5803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   85.775119][ T6127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.797283][ T6129] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   85.859715][ T6129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.979969][   T27] audit: type=1800 audit(1775002465.299:3): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.121" name="file1" dev="loop2" ino=15 res=0 errno=0
[   86.023674][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.126571][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.414663][ T6149] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   86.743333][    T8] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   86.806569][ T6153] loop2: detected capacity change from 0 to 40427
[   86.817773][ T6153] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7
[   86.827375][ T6153] F2FS-fs (loop2): invalid crc value
[   86.845494][ T5803] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[   86.859444][ T6153] F2FS-fs (loop2): Found nat_bits in checkpoint
[   86.931958][ T6153] F2FS-fs (loop2): Start checkpoint disabled!
[   86.947706][ T5803] usb 2-1: USB disconnect, device number 2
[   86.958058][ T6153] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   86.971569][    T8] usb 1-1: config 0 has an invalid interface number: 199 but max is 1
[   86.994480][    T8] usb 1-1: config 0 has no interface number 1
[   87.015827][    T8] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[   87.041933][    T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[   87.075317][    T8] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[   87.095534][ T6145] overlayfs: statfs failed on './file0'
[   87.103120][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   87.131319][ T6153] syz.2.130: attempt to access beyond end of device
[   87.131319][ T6153] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[   87.146704][    T8] usb 1-1: SerialNumber: syz
[   87.164116][    T8] usb 1-1: config 0 descriptor??
[   87.316645][   T11] kworker/u4:0: attempt to access beyond end of device
[   87.316645][   T11] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   87.342985][   T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   87.351260][   T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   87.357790][ T6157] loop3: detected capacity change from 0 to 8192
[   87.366685][ T6157] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   87.379838][ T6157] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[   87.390047][ T6157] REISERFS (device loop3): using ordered data mode
[   87.396754][ T6157] reiserfs: using flush barriers
[   87.412710][ T6157] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   87.427172][    T8] usb 1-1: Found UVC 0.00 device <unnamed> (0002:0000)
[   87.450717][ T6157] REISERFS (device loop3): checking transaction log (loop3)
[   87.490607][    T8] usb 1-1: No valid video chain found.
[   87.539522][    T8] usb 1-1: USB disconnect, device number 2
[   87.651774][ T6157] REISERFS (device loop3): Using tea hash to sort names
[   87.680906][ T6157] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   87.743633][ T6160] netlink: 256 bytes leftover after parsing attributes in process `syz.1.133'.
[   87.777854][ T6157] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3)
[   87.784546][ T6160] netlink: 72 bytes leftover after parsing attributes in process `syz.1.133'.
[   87.799339][ T6157] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3)
[   87.822530][ T6157] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3)
[   87.951855][ T6164] loop1: detected capacity change from 0 to 256
[   88.835976][ T6195] loop3: detected capacity change from 0 to 512
[   88.847515][ T6195] EXT4-fs: inline encryption not supported
[   88.860534][ T6195] EXT4-fs: Ignoring removed mblk_io_submit option
[   88.881020][ T6195] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   88.901452][ T6195] EXT4-fs (loop3): Test dummy encryption mode enabled
[   88.939884][ T6195] EXT4-fs (loop3): orphan cleanup on readonly fs
[   88.953568][ T6195] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.148: inode #13: comm syz.3.148: iget: illegal inode #
[   88.983532][ T5803] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   88.997535][ T6195] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.148: couldn't read orphan inode 13 (err -117)
[   89.023551][ T6195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   89.112880][ T6195] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[   89.153426][ T6195] EXT4-fs error (device loop3): __ext4_remount:6752: comm syz.3.148: Abort forced by user
[   89.177047][ T6195] EXT4-fs (loop3): Remounting filesystem read-only
[   89.186522][ T5803] usb 2-1: Using ep0 maxpacket: 8
[   89.193664][ T6195] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   89.195083][ T5803] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   89.246870][ T5803] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   89.273302][ T5803] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   89.292045][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.298901][ T5803] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   89.330460][ T5803] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   89.350209][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.378825][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'.
[   89.597681][ T5803] usb 2-1: GET_CAPABILITIES returned 0
[   89.613700][ T5803] usbtmc 2-1:16.0: can't read capabilities
[   89.867424][    T8] usb 2-1: USB disconnect, device number 3
[   90.796760][ T6239] loop2: detected capacity change from 0 to 164
[   90.813488][  T788] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   90.845342][ T6239] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   91.029049][  T788] usb 4-1: Using ep0 maxpacket: 16
[   91.057414][  T788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.077916][  T788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   91.096777][  T788] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   91.110245][  T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.138727][  T788] usb 4-1: Product: syz
[   91.142950][  T788] usb 4-1: Manufacturer: syz
[   91.160855][  T788] usb 4-1: SerialNumber: syz
[   91.169054][ T6237] loop1: detected capacity change from 0 to 40427
[   91.200665][ T6237] F2FS-fs (loop1): invalid crc value
[   91.224986][ T6237] F2FS-fs (loop1): Found nat_bits in checkpoint
[   91.346518][ T6237] F2FS-fs (loop1): Start checkpoint disabled!
[   91.401444][ T6237] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   91.430293][  T788] usb 4-1: 0:2 : does not exist
[   91.447300][  T788] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[   91.533608][  T788] usb 4-1: USB disconnect, device number 4
[   91.640067][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   91.780532][ T1114] kworker/u4:6: attempt to access beyond end of device
[   91.780532][ T1114] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   91.798446][ T1114] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   91.813194][ T1114] kworker/u4:6: attempt to access beyond end of device
[   91.813194][ T1114] loop1: rw=2049, sector=40992, nr_sectors = 8 limit=40427
[   91.827575][ T1114] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   92.443781][ T6264] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.908441][ T6272] loop1: detected capacity change from 0 to 8192
[   92.938265][ T6272] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   92.977796][ T6272] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[   93.015988][ T6272] REISERFS (device loop1): using ordered data mode
[   93.022542][ T6272] reiserfs: using flush barriers
[   93.082073][ T6272] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   93.104394][ T6272] REISERFS (device loop1): checking transaction log (loop1)
[   93.136615][ T6272] REISERFS (device loop1): Using r5 hash to sort names
[   93.157661][ T6272] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   93.177259][    T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   93.375803][    T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.399097][    T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   93.400679][    T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   93.400704][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   93.400720][    T8] usb 4-1: SerialNumber: syz
[   93.626334][    T8] usb 4-1: 0:2 : does not exist
[   93.661525][    T8] usb 4-1: USB disconnect, device number 5
[   93.726344][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   93.743709][ T6286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.187'.
[   93.766751][ T6286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.187'.
[   93.797620][ T6286] Zero length message leads to an empty skb
[   94.333530][ T5822] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   94.541980][ T5822] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   94.558705][ T5822] usb 2-1: config 0 has no interface number 0
[   94.581760][ T5822] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[   94.598209][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.623909][ T5822] usb 2-1: Product: syz
[   94.628127][ T5822] usb 2-1: Manufacturer: syz
[   94.632782][ T5822] usb 2-1: SerialNumber: syz
[   94.664097][ T5822] usb 2-1: config 0 descriptor??
[   94.883890][ T5822] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[   94.907147][ T5822] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   94.939862][ T5822] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[   94.958338][ T5822] usb 2-1: media controller created
[   94.991683][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   95.053335][    T8] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[   95.096257][ T5822] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[   95.183732][ T5822] usb 2-1: USB disconnect, device number 4
[   95.258423][    T8] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[   95.296937][    T8] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   95.325472][    T8] usb 4-1: Product: syz
[   95.329688][    T8] usb 4-1: Manufacturer: syz
[   95.332321][ T6305] loop2: detected capacity change from 0 to 40427
[   95.351970][    T8] usb 4-1: SerialNumber: syz
[   95.362760][ T6305] F2FS-fs (loop2): invalid crc value
[   95.363568][    T8] usb 4-1: config 0 descriptor??
[   95.391654][ T6305] F2FS-fs (loop2): Found nat_bits in checkpoint
[   95.513754][ T6305] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   95.578920][   T27] audit: type=1800 audit(1775002474.899:4): pid=6305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.196" name="file1" dev="loop2" ino=10 res=0 errno=0
[   95.738873][ T5822] usb 4-1: USB disconnect, device number 6
[   95.853890][ T5762] syz-executor: attempt to access beyond end of device
[   95.853890][ T5762] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   95.871540][ T5762] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   96.180322][ T6314] loop1: detected capacity change from 0 to 8192
[   96.392381][ T6314] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   96.438068][ T6314] FAT-fs (loop1): Filesystem has been set read-only
[   96.503931][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'.
[   96.897608][ T6332] 9pnet: p9_errstr2errno: server reported unknown error È
[   97.110223][ T6344] process 'syz.2.213' launched './file0' with NULL argv: empty string added
[   97.122214][ T6344] Invalid argument reading file caps for ./file0
[   97.478119][ T6357] loop2: detected capacity change from 0 to 8
[   97.694214][ T6362] loop2: detected capacity change from 0 to 512
[   97.712415][ T6365] loop3: detected capacity change from 0 to 1024
[   97.720037][ T6365] EXT4-fs: Ignoring removed bh option
[   97.744100][ T6365] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   97.791503][ T6365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.791670][ T6362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.854827][ T6362] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.903966][ T6372] Bluetooth: MGMT ver 1.22
[   97.954286][ T5803] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   97.966460][ T6362] capability: warning: `syz.2.223' uses deprecated v2 capabilities in a way that may be insecure
[   97.995127][ T6365] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   98.062687][ T5765] EXT4-fs error (device loop3): ext4_read_inline_dir:1583: inode #12: block 7: comm syz-executor: path /59/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   98.096844][ T5765] EXT4-fs error (device loop3): ext4_read_inline_dir:1583: inode #12: block 7: comm syz-executor: path /59/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   98.097486][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.146767][ T5803] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.158288][ T5803] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   98.162819][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.168983][ T5803] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   98.206472][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   98.241602][ T5803] usb 1-1: SerialNumber: syz
[   98.486313][ T5803] usb 1-1: 0:2 : does not exist
[   98.512275][ T6385] loop2: detected capacity change from 0 to 256
[   98.547898][ T5803] usb 1-1: USB disconnect, device number 3
[   98.568147][ T6385] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d)
[   98.607598][ T6386] syz.3.232 uses obsolete (PF_INET,SOCK_PACKET)
[   99.121492][ T6404] warning: `syz.3.240' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   99.384963][ T6410] loop0: detected capacity change from 0 to 4096
[   99.393582][ T5822] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   99.603423][ T5822] usb 3-1: Using ep0 maxpacket: 16
[   99.618821][ T5822] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.640404][ T5822] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.661702][ T5822] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   99.678014][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.993317][  T788] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  100.201533][  T788] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  100.220606][  T788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253
[  100.247994][  T788] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  100.272362][  T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.299952][  T788] usb 2-1: Product: syz
[  100.321092][  T788] usb 2-1: Manufacturer: syz
[  100.332477][  T788] usb 2-1: SerialNumber: syz
[  100.351652][  T788] usb 2-1: config 0 descriptor??
[  100.385511][  T788] gspca_main: sunplus-2.14.0 probing 055f:c630
[  100.700154][ T6432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.253'.
[  100.727079][ T6425] loop3: detected capacity change from 0 to 131072
[  100.738141][ T6425] F2FS-fs (loop3): Test dummy encryption mode enabled
[  100.761336][ T6425] F2FS-fs (loop3): invalid crc value
[  100.769606][ T5822] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  100.784288][ T6425] F2FS-fs (loop3): Found nat_bits in checkpoint
[  100.838905][ T6425] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  101.064199][ T5827] usb 3-1: USB disconnect, device number 2
[  101.091661][ T6425] fscrypt (loop3, inode 10): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  101.439169][  T788] gspca_sunplus: reg_r err -71
[  101.444496][  T788] sunplus: probe of 2-1:0.0 failed with error -71
[  101.471841][  T788] usb 2-1: USB disconnect, device number 5
[  101.483447][ T5771] Bluetooth: hci3: command tx timeout
[  102.032494][ T6464] loop3: detected capacity change from 0 to 256
[  102.130797][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'.
[  102.140691][ T6464] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  102.560347][ T6462] loop0: detected capacity change from 0 to 32768
[  102.671830][ T6477] loop3: detected capacity change from 0 to 764
[  102.936111][ T6481] netlink: 316 bytes leftover after parsing attributes in process `syz.2.267'.
[  103.214709][ T6490] loop2: detected capacity change from 0 to 256
[  103.266434][ T6490] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  103.487228][ T5771] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  103.496599][ T5771] Bluetooth: hci2: Injecting HCI hardware error event
[  103.506225][ T5776] Bluetooth: hci2: hardware error 0x00
[  103.576105][ T6490] exFAT-fs (loop2): error, invalid size(size(21527) > aligned(9223372036854777344)
[  103.576105][ T6490] 
[  103.588327][ T6490] exFAT-fs (loop2): Filesystem has been set read-only
[  104.460740][ T6506] loop1: detected capacity change from 0 to 32768
[  104.507496][ T6506] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  104.585163][ T6527] loop2: detected capacity change from 0 to 64
[  104.617890][ T6506] XFS (loop1): Ending clean mount
[  104.639755][ T6527] syz.2.282: attempt to access beyond end of device
[  104.639755][ T6527] loop2: rw=0, sector=548, nr_sectors = 2 limit=64
[  104.653468][ T6527] Buffer I/O error on dev loop2, logical block 274, async page read
[  104.665613][ T6527] syz.2.282: attempt to access beyond end of device
[  104.665613][ T6527] loop2: rw=0, sector=548, nr_sectors = 2 limit=64
[  104.674974][ T6506] XFS (loop1): Quotacheck needed: Please wait.
[  104.678789][ T6527] Buffer I/O error on dev loop2, logical block 274, async page read
[  104.694466][   T27] audit: type=1800 audit(1775002484.019:5): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.282" name="file3" dev="loop2" ino=6 res=0 errno=0
[  104.718031][ T5153] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  104.767231][ T6527] Trying to free block not in datazone
[  104.773014][ T6527] Trying to free block not in datazone
[  104.778581][ T6527] Trying to free block not in datazone
[  104.784139][ T6527] Trying to free block not in datazone
[  104.789615][ T6527] Trying to free block not in datazone
[  104.796101][ T6527] Trying to free block not in datazone
[  104.801884][ T6527] Trying to free block not in datazone
[  104.807676][ T6527] Trying to free block not in datazone
[  104.813153][ T6527] Trying to free block not in datazone
[  104.818703][ T6527] Trying to free block not in datazone
[  104.824269][ T6527] Trying to free block not in datazone
[  104.826739][ T6506] XFS (loop1): Quotacheck: Done.
[  104.830211][ T6527] Trying to free block not in datazone
[  104.840229][ T6527] minix_free_block (loop2:6): bit already cleared
[  104.848234][ T6527] Trying to free block not in datazone
[  104.853743][ T6527] Trying to free block not in datazone
[  104.859215][ T6527] Trying to free block not in datazone
[  104.864786][ T6527] minix_free_block (loop2:7): bit already cleared
[  104.871220][ T6527] Trying to free block not in datazone
[  104.876735][ T6527] Trying to free block not in datazone
[  104.882202][ T6527] Trying to free block not in datazone
[  104.887724][ T6527] Trying to free block not in datazone
[  104.894011][ T6527] Trying to free block not in datazone
[  104.899495][ T6527] minix_free_block (loop2:6): bit already cleared
[  104.962983][ T6506] XFS (loop1): User initiated shutdown received.
[  104.990037][ T6506] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497).  Shutting down filesystem.
[  105.014086][ T5153] usb 1-1: Using ep0 maxpacket: 32
[  105.049226][ T6506] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  105.052054][ T5153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.089441][ T5153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.106749][ T5153] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  105.116185][ T5153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.134014][ T5153] usb 1-1: config 0 descriptor??
[  105.141936][ T6532] loop2: detected capacity change from 0 to 2048
[  105.164266][ T5764] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  105.192381][ T6532] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.564188][ T5776] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  105.601597][ T5153] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  105.778940][ T6529] loop3: detected capacity change from 0 to 40427
[  105.816836][ T6529] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff
[  105.836884][ T6529] F2FS-fs (loop3): heap/no_heap options were deprecated
[  105.848695][ T6529] F2FS-fs (loop3): invalid crc value
[  105.896980][ T6529] F2FS-fs (loop3): Found nat_bits in checkpoint
[  105.944179][ T5153] usb 1-1: USB disconnect, device number 4
[  106.043452][ T6529] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  106.148314][ T6529] F2FS-fs (loop3): inject checkpoint error in f2fs_balance_fs of f2fs_setattr+0xf6b/0x1360
[  106.162200][ T6529] F2FS-fs (loop3): Stopped filesystem due to reason: 1
[  106.172684][ T6529] overlayfs: upper fs does not support tmpfile.
[  106.913469][  T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  106.983071][ T6551] loop1: detected capacity change from 0 to 32768
[  107.071475][   T27] audit: type=1800 audit(1775002486.389:6): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.291" name="file1" dev="loop1" ino=4 res=0 errno=0
[  107.136820][  T788] usb 3-1: Using ep0 maxpacket: 16
[  107.157701][  T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.190615][  T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.218303][  T788] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  107.234350][  T788] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  107.243922][  T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.259209][  T788] usb 3-1: config 0 descriptor??
[  107.573061][ T6570] Invalid argument reading file caps for ./file0
[  107.625594][ T5822] kernel read not supported for file /dsp1 (pid: 5822 comm: kworker/1:5)
[  107.699577][  T788] HID 045e:07da: Invalid code 65791 type 1
[  107.724152][  T788] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input5
[  107.788887][  T788] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  108.015996][ T5822] usb 3-1: USB disconnect, device number 3
[  108.120447][ T6582] loop0: detected capacity change from 0 to 4096
[  108.183106][ T6582] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  108.231035][ T6582] ntfs3: loop0: Failed to load $Extend (-22).
[  108.238403][ T6582] ntfs3: loop0: Failed to initialize $Extend.
[  108.269879][ T6586] loop1: detected capacity change from 0 to 736
[  108.367278][ T6586] rock: directory entry would overflow storage
[  108.380294][ T6586] rock: sig=0x3b10, size=4, remaining=3
[  108.991524][ T6602] loop0: detected capacity change from 0 to 2048
[  109.021712][ T6602] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  109.074454][ T6604] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  109.319468][ T6590] loop2: detected capacity change from 0 to 32768
[  109.355532][ T6590] (syz.2.307,6590,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  109.381199][ T6590] (syz.2.307,6590,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  109.451755][ T6590] JBD2: Ignoring recovery information on journal
[  109.528243][ T6590] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  110.036169][ T5762] ocfs2: Unmounting device (7,2) on (node local)
[  110.183605][ T6632] netlink: 165 bytes leftover after parsing attributes in process `syz.3.326'.
[  110.531768][ T6647] netlink: 'syz.3.331': attribute type 39 has an invalid length.
[  110.811442][ T6657] netlink: 'syz.2.335': attribute type 1 has an invalid length.
[  111.070456][ T6663] loop2: detected capacity change from 0 to 4096
[  111.081600][ T6663] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  111.173662][ T6663] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  111.285695][ T6675] loop0: detected capacity change from 0 to 256
[  111.339027][ T6675] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  111.595900][ T6679] loop3: detected capacity change from 0 to 256
[  111.670679][ T6679] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  111.739345][ T6679] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  111.800678][ T6679] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  112.003576][ T5827] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  112.163031][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.350'.
[  112.213477][ T5827] usb 3-1: Using ep0 maxpacket: 8
[  112.228996][ T5827] usb 3-1: unable to get BOS descriptor or descriptor too short
[  112.251706][ T5827] usb 3-1: config 4 interface 0 has no altsetting 0
[  112.286593][ T5827] usb 3-1: string descriptor 0 read error: -22
[  112.292861][ T5827] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  112.363608][ T5827] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  112.445385][ T5827] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  112.518127][ T5827] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  112.561224][ T6677] loop1: detected capacity change from 0 to 131072
[  112.569676][ T5827] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  112.577732][ T6677] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  112.577780][ T6677] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  112.578570][ T6677] F2FS-fs (loop1): invalid crc value
[  112.671182][ T6697] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 !
[  112.686495][ T5827] usb 3-1: media controller created
[  112.690581][ T6677] F2FS-fs (loop1): Found nat_bits in checkpoint
[  112.753005][ T6677] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  112.760156][ T6677] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  112.792250][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  112.877525][ T6677] overlayfs: failed to resolve './file0/file1': -2
[  112.927592][ T5827] zl10353_read_register: readreg error (reg=127, ret==0)
[  113.040931][ T6708] loop3: detected capacity change from 0 to 512
[  113.053652][ T5827] usb 3-1: USB disconnect, device number 4
[  113.118286][ T6708] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  113.297242][ T6710] loop0: detected capacity change from 0 to 256
[  114.491111][ T6723] loop0: detected capacity change from 0 to 32768
[  114.558619][ T6723] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  114.641452][ T6723] XFS (loop0): Ending clean mount
[  114.645984][ T6721] loop3: detected capacity change from 0 to 40427
[  114.659381][ T6726] loop2: detected capacity change from 0 to 32768
[  114.670198][ T6721] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  114.685970][ T6721] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  114.704478][ T6721] F2FS-fs (loop3): invalid crc value
[  114.797144][ T6726] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  114.875706][ T6726] XFS (loop2): Ending clean mount
[  114.965674][ T5763] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  115.032179][ T6721] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  115.070361][ T6721] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  115.122335][ T5762] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  115.181171][ T6757] C: renamed from team_slave_0 (while UP)
[  115.239028][ T6757] netlink: 'syz.1.371': attribute type 3 has an invalid length.
[  115.324019][ T5765] syz-executor: attempt to access beyond end of device
[  115.324019][ T5765] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  115.383704][ T5765] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  115.601437][ T6762] program syz.0.370 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  115.630204][ T6763] overlay: filesystem on ./file0 not supported as upperdir
[  115.939411][ T6765] loop2: detected capacity change from 0 to 8192
[  115.990051][ T6765] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  116.016859][ T6765] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  116.027327][ T6765] REISERFS (device loop2): using ordered data mode
[  116.034964][ T6765] reiserfs: using flush barriers
[  116.069859][ T6765] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  116.097203][ T6777] input: syz1 as /devices/virtual/input/input6
[  116.098415][ T6765] REISERFS (device loop2): checking transaction log (loop2)
[  116.294858][ T6765] REISERFS (device loop2): Using tea hash to sort names
[  116.318415][ T6765] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  116.374823][ T6765] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  116.450902][ T6785] __sock_release: fasync list not empty!
[  117.226125][ T6805] loop2: detected capacity change from 0 to 16
[  117.291387][ T6805] erofs: (device loop2): mounted with root inode @ nid 36.
[  117.489026][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  117.616832][ T6807] loop2: detected capacity change from 0 to 24
[  117.713461][    T9] usb 1-1: Using ep0 maxpacket: 32
[  117.717413][ T6797] loop1: detected capacity change from 0 to 131072
[  117.737499][    T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  117.749720][ T6797] F2FS-fs (loop1): invalid crc value
[  117.785507][    T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  117.799566][ T6797] F2FS-fs (loop1): Found nat_bits in checkpoint
[  117.840711][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  117.872401][ T6797] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  117.908443][    T9] usb 1-1: config 1 has no interface number 0
[  117.938311][    T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  117.978304][    T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  118.013173][    T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  118.044618][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.087543][    T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  118.403187][    T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  118.824796][ T6825] loop3: detected capacity change from 0 to 164
[  118.875650][ T5802] usb 1-1: USB disconnect, device number 5
[  118.898049][ T5802] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  119.060891][ T1114] Bluetooth: hci4: Frame reassembly failed (-84)
[  119.070703][ T1114] Bluetooth: hci4: Frame reassembly failed (-84)
[  119.475458][ T6845] loop0: detected capacity change from 0 to 64
[  119.533354][ T5827] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  119.703468][ T5802] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  119.723468][ T5827] usb 2-1: Using ep0 maxpacket: 16
[  119.730002][ T5827] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.742309][ T5827] usb 2-1: config 0 interface 0 has no altsetting 0
[  119.748995][ T5827] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  119.758165][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.768326][ T5827] usb 2-1: config 0 descriptor??
[  119.890104][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.901387][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.911803][ T5802] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  119.921005][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.933034][ T5802] usb 4-1: config 0 descriptor??
[  119.963830][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  120.183537][    T9] usb 1-1: Using ep0 maxpacket: 32
[  120.198510][ T5827] mcp2221 0003:04D8:00DD.0006: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  120.209535][    T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.221916][    T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.235239][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  120.244478][    T9] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  120.252886][    T9] usb 1-1: Product: syz
[  120.258261][    T9] usb 1-1: Manufacturer: syz
[  120.271127][    T9] hub 1-1:4.0: USB hub found
[  120.356142][ T5802] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[  120.364700][ T5802] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[  120.372100][ T5802] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[  120.379665][ T5802] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[  120.387407][ T5802] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[  120.409582][ T5802] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[  120.484188][    T9] hub 1-1:4.0: 2 ports detected
[  120.641977][ T5827] usb 2-1: USB disconnect, device number 6
[  120.689945][    T9] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  120.699757][    T9] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  120.737134][    T9] usb 1-1: USB disconnect, device number 6
[  120.754086][ T5802] playstation 0003:054C:0DF2.0007: Failed to retrieve feature with reportID 32: -71
[  120.766162][ T5802] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense firmware info: -71
[  120.777463][ T5802] playstation 0003:054C:0DF2.0007: Failed to get firmware info from DualSense
[  120.786464][ T5802] playstation 0003:054C:0DF2.0007: Failed to create dualsense.
[  120.800909][ T5802] playstation: probe of 0003:054C:0DF2.0007 failed with error -71
[  120.821330][ T5802] usb 4-1: USB disconnect, device number 7
[  121.083500][ T5771] Bluetooth: hci4: command 0x1003 tx timeout
[  121.083501][ T5776] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  121.346987][ T6854] loop2: detected capacity change from 0 to 4096
[  121.425506][ T6858] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  121.556595][ T6861] loop0: detected capacity change from 0 to 64
[  121.651716][   T27] audit: type=1800 audit(1775002500.969:7): pid=6861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.413" name="file2" dev="loop0" ino=21 res=0 errno=0
[  122.135971][ T6877] loop0: detected capacity change from 0 to 4096
[  122.155197][ T6877] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  122.256984][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.272511][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.292974][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.307931][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.323478][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.341234][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.354062][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.366311][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.374534][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.413372][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.423166][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.452549][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.465316][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.472748][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.500466][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.513386][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.542613][ T5802] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0
[  122.566762][ T5802] hid-generic 0002:0004:0009.0008: hidraw0: <UNKNOWN> HID v0.04 Device [syz0] on syz0
[  122.748183][ T6889] fido_id[6889]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  122.894895][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'.
[  122.911814][ T6897] netlink: 'syz.2.428': attribute type 20 has an invalid length.
[  122.921720][ T6897] netlink: 'syz.2.428': attribute type 21 has an invalid length.
[  123.587535][ T6915] loop3: detected capacity change from 0 to 2048
[  123.615527][ T6915] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  123.654285][ T6915] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.753375][    T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  123.939144][ T6926] netlink: 80 bytes leftover after parsing attributes in process `syz.0.442'.
[  123.952953][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  123.967048][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  123.986911][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.007208][    T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 247, using maximum allowed: 30
[  124.026788][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  124.048129][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  124.091752][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247
[  124.129008][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=011c, bcdDevice= 0.40
[  124.149273][ T6931] loop0: detected capacity change from 0 to 128
[  124.160150][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.177863][    T9] usb 2-1: Product: syz
[  124.182074][    T9] usb 2-1: Manufacturer: syz
[  124.205894][    T9] usb 2-1: SerialNumber: syz
[  124.393525][ T5802] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  124.494649][    T9] usb 2-1: USB disconnect, device number 7
[  124.514131][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  124.537559][ T6938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.447'.
[  124.603391][ T5802] usb 4-1: Using ep0 maxpacket: 16
[  124.620066][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.633710][ T5802] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  124.645893][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.660172][ T5802] usb 4-1: config 0 descriptor??
[  124.776363][ T6944] loop2: detected capacity change from 0 to 512
[  124.784632][ T6944] EXT4-fs: Ignoring removed nomblk_io_submit option
[  124.807191][ T6944] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.450: iget: bad extended attribute block 262144
[  124.820815][ T6944] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.450: couldn't read orphan inode 15 (err -117)
[  124.834629][ T6944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.891768][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.116434][ T5802] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  125.121592][ T6951] netlink: 136 bytes leftover after parsing attributes in process `syz.2.452'.
[  125.147286][ T6951] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  125.292480][ T6954] ip6tnl1: entered allmulticast mode
[  125.515878][ T6962] loop2: detected capacity change from 0 to 1024
[  125.534095][ T6962] EXT4-fs: Ignoring removed orlov option
[  125.586212][ T6962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.647961][  T788] usb 4-1: USB disconnect, device number 8
[  125.822140][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.068562][ T6985] loop0: detected capacity change from 0 to 128
[  126.093170][ T6985] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  126.136158][ T6985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.243514][   T28] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  126.461031][   T28] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  126.483457][   T28] usb 2-1: config 0 has no interface number 0
[  126.503070][   T28] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  126.533286][   T28] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.544878][   T28] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  126.546675][ T7000] sctp: [Deprecated]: syz.0.475 (pid 7000) Use of struct sctp_assoc_value in delayed_ack socket option.
[  126.546675][ T7000] Use struct sctp_sack_info instead
[  126.559505][   T28] usb 2-1: config 0 interface 1 has no altsetting 0
[  126.581456][   T28] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  126.591689][   T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.622293][   T28] usb 2-1: config 0 descriptor??
[  126.803802][ T5802] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  126.993914][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'.
[  127.026851][ T5802] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.039988][ T5802] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.069092][ T5802] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  127.083597][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  127.112132][ T5802] usb 4-1: SerialNumber: syz
[  127.277226][   T28] input: HID 145f:0212 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:145F:0212.000A/input/input7
[  127.346304][ T5802] usb 4-1: 0:2 : does not exist
[  127.383879][   T28] input: HID 145f:0212 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:145F:0212.000A/input/input8
[  127.415662][ T5802] usb 4-1: USB disconnect, device number 9
[  127.448897][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  127.530296][   T28] uclogic 0003:145F:0212.000A: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.1-1/input1
[  127.542047][  T788] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  127.606952][   T28] usb 2-1: USB disconnect, device number 8
[  127.723822][  T788] usb 1-1: Using ep0 maxpacket: 16
[  127.739033][  T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.746794][ T7025] fido_id[7025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  127.774046][  T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57600, setting to 1024
[  127.789410][  T788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  127.802643][  T788] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  127.811979][  T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.849434][  T788] usb 1-1: config 0 descriptor??
[  128.282247][ T7035] program syz.3.491 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  128.291477][ T7036] program syz.2.490 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  128.356706][  T788] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.000B/input/input9
[  128.517735][ T7044] loop3: detected capacity change from 0 to 64
[  128.527553][  T788] sony 0003:054C:03D5.000B: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0
[  128.568606][  T788] usb 1-1: USB disconnect, device number 7
[  128.583744][ T7044] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  128.723343][   T27] audit: type=1804 audit(1775002508.019:8): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.495" name="/newroot/126/bus/file0" dev="loop3" ino=4 res=1 errno=0
[  128.752847][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'.
[  128.801211][ T7045] fido_id[7045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  129.323538][ T7048] loop1: detected capacity change from 0 to 32768
[  129.351835][ T7048] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.497 (7048)
[  129.434475][ T7048] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  129.474109][ T7048] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  129.504301][ T7048] BTRFS info (device loop1): using free space tree
[  129.704663][ T7048] BTRFS info (device loop1): enabling ssd optimizations
[  129.743373][ T7048] BTRFS info (device loop1): auto enabling async discard
[  130.083209][ T5764] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  130.158919][ T7060] loop0: detected capacity change from 0 to 32768
[  130.196243][ T7060] (syz.0.502,7060,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  130.255443][ T7060] (syz.0.502,7060,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  130.386559][ T7060] JBD2: Ignoring recovery information on journal
[  130.536007][ T7060] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  131.017763][ T7060] syz.0.502 (7060) used greatest stack depth: 18768 bytes left
[  131.103585][ T7090] loop1: detected capacity change from 0 to 32768
[  131.129752][ T5763] ocfs2: Unmounting device (7,0) on (node local)
[  131.158313][ T7090] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  131.251175][ T7090] XFS (loop1): Ending clean mount
[  131.270680][ T7090] XFS (loop1): Quotacheck needed: Please wait.
[  131.311989][  T788] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  131.331642][ T7090] XFS (loop1): Quotacheck: Done.
[  131.425401][ T5764] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  131.513541][  T788] usb 3-1: Using ep0 maxpacket: 32
[  131.558317][  T788] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32
[  131.577734][  T788] usb 3-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  131.613510][  T788] usb 3-1: config 1 interface 0 has no altsetting 0
[  131.623810][  T788] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  131.645905][  T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.663449][  T788] usb 3-1: Product: syz
[  131.667651][  T788] usb 3-1: Manufacturer: syz
[  131.669350][ T7116] loop0: detected capacity change from 0 to 512
[  131.672240][  T788] usb 3-1: SerialNumber: syz
[  131.682425][ T7104] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  131.686743][ T7116] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  131.838788][ T7116] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.515: Allocating blocks 41-42 which overlap fs metadata
[  131.880799][ T7116] Quota error (device loop0): write_blk: dquota write failed
[  131.904801][ T7116] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  131.955761][ T7116] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.515: Allocating blocks 41-42 which overlap fs metadata
[  131.980219][ T7125] Set syz1 is full, maxelem 1038 reached
[  131.993159][ T7116] Quota error (device loop0): write_blk: dquota write failed
[  132.017293][ T7123] loop1: detected capacity change from 0 to 4096
[  132.028380][ T7116] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  132.075180][ T7116] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.515: Failed to acquire dquot type 1
[  132.086919][ T7123] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  132.109682][ T7116] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  132.129705][ T7116] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #12: comm syz.0.515: corrupted inode contents
[  132.136215][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.158288][ T7116] EXT4-fs error (device loop0): ext4_dirty_inode:6124: inode #12: comm syz.0.515: mark_inode_dirty error
[  132.159470][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.197371][ T7116] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #12: comm syz.0.515: corrupted inode contents
[  132.209263][  T788] cdc_ether: probe of 3-1:1.0 failed with error -71
[  132.213703][  T788] usb 3-1: USB disconnect, device number 5
[  132.281142][ T7116] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.515: mark_inode_dirty error
[  132.369616][ T7116] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #12: comm syz.0.515: corrupted inode contents
[  132.400433][ T7116] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  132.412269][ T7116] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #12: comm syz.0.515: corrupted inode contents
[  132.429044][ T7116] EXT4-fs error (device loop0): ext4_truncate:4294: inode #12: comm syz.0.515: mark_inode_dirty error
[  132.445497][ T7116] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  132.455939][ T7116] EXT4-fs (loop0): 1 truncate cleaned up
[  132.462801][ T7116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.798727][ T7141] loop3: detected capacity change from 0 to 16
[  132.824460][ T7141] erofs: (device loop3): mounted with root inode @ nid 36.
[  132.973405][  T789] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  133.010029][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  133.017215][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  133.041630][ T7147] loop2: detected capacity change from 0 to 512
[  133.110952][ T6049] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  133.223756][  T789] usb 2-1: Using ep0 maxpacket: 32
[  133.245037][  T789] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  133.263370][  T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.280851][  T789] usb 2-1: config 0 descriptor??
[  133.319477][ T7147] loop2: detected capacity change from 0 to 8192
[  133.354724][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.542759][  T789] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  133.561502][  T789] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  133.599962][  T789] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  133.621050][  T789] usb 2-1: media controller created
[  133.682426][  T789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  133.757424][  T789] az6027: usb out operation failed. (-71)
[  133.784442][  T789] az6027: usb out operation failed. (-71)
[  133.792359][  T789] stb0899_attach: Driver disabled by Kconfig
[  133.810538][  T789] az6027: no front-end attached
[  133.810538][  T789] 
[  133.826385][  T789] az6027: usb out operation failed. (-71)
[  133.837699][  T789] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  133.855516][  T789] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10
[  133.890666][  T789] dvb-usb: schedule remote query interval to 400 msecs.
[  133.908141][  T789] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  133.926439][  T789] usb 2-1: USB disconnect, device number 9
[  133.986468][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  134.030393][ T7165] loop2: detected capacity change from 0 to 2048
[  134.056817][  T789] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  134.060273][ T7165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.161835][ T7155] loop3: detected capacity change from 0 to 32768
[  134.174078][   T27] audit: type=1800 audit(1775002513.489:9): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.536" name="file2" dev="loop2" ino=1416 res=0 errno=0
[  134.188874][ T7155] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.531 (7155)
[  134.208348][    T9] usb 1-1: Using ep0 maxpacket: 32
[  134.237918][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  134.257097][ T7155] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  134.265407][    T9] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  134.282730][ T7155] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  134.291396][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.301267][    T9] usb 1-1: Product: syz
[  134.308884][    T9] usb 1-1: Manufacturer: syz
[  134.312654][ T7155] BTRFS info (device loop3): using free space tree
[  134.314685][    T9] usb 1-1: SerialNumber: syz
[  134.342891][    T9] usb 1-1: config 0 descriptor??
[  134.354073][ T7161] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  134.368496][    T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11
[  134.496060][ T7155] BTRFS info (device loop3): enabling ssd optimizations
[  134.558843][ T7155] BTRFS info (device loop3): auto enabling async discard
[  134.755951][ T7183] loop2: detected capacity change from 0 to 128
[  134.862139][ T7183] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  134.934183][ T7183] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  135.026732][    C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  135.026737][  T789] usb 1-1: USB disconnect, device number 8
[  135.130963][ T5765] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  135.161926][ T5762] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  135.610417][ T7192] loop3: detected capacity change from 0 to 64
[  135.691991][ T7188] loop1: detected capacity change from 0 to 32768
[  135.693958][ T7192] hfs: request for non-existent node 131072 in B*Tree
[  135.723860][ T7192] hfs: request for non-existent node 131072 in B*Tree
[  135.779481][ T7188] JBD2: Ignoring recovery information on journal
[  135.875408][ T7200] loop2: detected capacity change from 0 to 1024
[  135.904229][ T7201] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  135.945239][ T7188] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  135.945471][ T7201] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  136.056176][ T7204] loop3: detected capacity change from 0 to 512
[  136.088278][ T7204] EXT4-fs: inline encryption not supported
[  136.117944][ T7204] EXT4-fs: Ignoring removed i_version option
[  136.185955][ T7204] EXT4-fs (loop3): 1 orphan inode deleted
[  136.194355][ T7204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.407051][ T7206] loop0: detected capacity change from 0 to 32768
[  136.416190][ T7206] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.546 (7206)
[  136.451320][ T7206] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  136.461834][ T7206] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  136.470579][ T7206] BTRFS info (device loop0): using free space tree
[  136.506885][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.515638][   T79] hfsplus: b-tree write err: -5, ino 3
[  136.546296][ T7206] BTRFS info (device loop0): enabling ssd optimizations
[  136.553411][ T7206] BTRFS info (device loop0): auto enabling async discard
[  136.683733][ T5764] ocfs2: Unmounting device (7,1) on (node local)
[  136.763365][   T27] audit: type=1800 audit(1775002516.039:10): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.546" name="file1" dev="loop0" ino=260 res=0 errno=0
[  136.792625][ T7230] loop5: detected capacity change from 0 to 4095
[  137.117520][ T5763] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  137.232341][ T7240] loop2: detected capacity change from 0 to 64
[  137.443381][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  137.654955][    T9] usb 2-1: Using ep0 maxpacket: 8
[  137.688069][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  137.727692][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.769346][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[  137.804058][    T9] pvrusb2: **********
[  137.808103][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  137.854883][    T9] pvrusb2: Important functionality might not be entirely working.
[  137.883125][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  137.904276][    T9] pvrusb2: **********
[  137.964555][ T5771] Bluetooth: hci1: command 0x0406 tx timeout
[  138.029835][ T2316] pvrusb2: Invalid write control endpoint
[  138.270582][ T2316] pvrusb2: Invalid write control endpoint
[  138.308002][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  138.341615][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  138.376707][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  138.405426][ T2316] pvrusb2: Device being rendered inoperable
[  138.427186][ T7238] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61)
[  138.433930][ T7269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.565'.
[  138.454030][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  138.469448][   T28] usb 2-1: USB disconnect, device number 10
[  138.479850][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  138.543639][ T2316] pvrusb2: Attached sub-driver cx25840
[  138.549561][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  138.609968][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  138.923644][ T7260] loop3: detected capacity change from 0 to 32768
[  138.958199][ T7260] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  138.981435][ T7260] JBD2: Ignoring recovery information on journal
[  139.065701][ T7260] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  139.123421][  T788] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  139.344509][  T788] usb 1-1: Using ep0 maxpacket: 8
[  139.357933][  T788] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  139.366562][  T788] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  139.381368][  T788] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  139.391757][  T788] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  139.408507][  T788] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  139.422090][  T788] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  139.437436][  T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.539557][ T5765] ocfs2: Unmounting device (7,3) on (node local)
[  139.559469][ T7285] loop1: detected capacity change from 0 to 32768
[  139.688825][  T788] usb 1-1: usb_control_msg returned -32
[  139.708537][  T788] usbtmc 1-1:16.0: can't read capabilities
[  139.712094][ T7285] find_entry called with index = 0
[  139.742271][ T7285] read_mapping_page failed!
[  139.765684][ T7285] ERROR: (device loop1): txCommit: 
[  139.765684][ T7285] 
[  140.345420][ T7304] loop1: detected capacity change from 0 to 1024
[  140.363743][ T7304] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  140.437207][ T7304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.532030][ T7304] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  140.650819][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.959296][ T7326] loop2: detected capacity change from 0 to 512
[  140.982640][ T7326] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  141.031603][ T7326] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.586: invalid indirect mapped block 6684672 (level 2)
[  141.068258][ T7326] EXT4-fs (loop2): 1 truncate cleaned up
[  141.075388][ T7326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.170379][ T7326] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.586: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  141.235275][ T7326] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem
[  141.306967][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.471001][ T7338] netlink: 48 bytes leftover after parsing attributes in process `syz.3.591'.
[  141.471311][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'.
[  141.837151][ T7350] loop2: detected capacity change from 0 to 128
[  141.897250][   T28] usb 1-1: USB disconnect, device number 9
[  141.916410][   T27] audit: type=1800 audit(1775002521.239:11): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.596" name="file2" dev="loop2" ino=1048604 res=0 errno=0
[  142.000722][ T7350] FAT-fs (loop2): error, clusters badly computed (4 != 3)
[  142.008505][  T789] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  142.023657][ T7350] FAT-fs (loop2): Filesystem has been set read-only
[  142.031866][ T7350] FAT-fs (loop2): error, clusters badly computed (5 != 4)
[  142.044695][ T7350] FAT-fs (loop2): error, clusters badly computed (6 != 5)
[  142.218699][  T789] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  142.230713][  T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  142.248175][  T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  142.269988][  T789] usb 4-1: config 0 interface 0 has no altsetting 0
[  142.282677][  T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  142.294572][  T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  142.306074][  T789] usb 4-1: config 0 interface 0 has no altsetting 0
[  142.314477][  T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  142.324063][  T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  142.335359][  T789] usb 4-1: config 0 interface 0 has no altsetting 0
[  142.343997][  T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  142.358301][  T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  142.369689][  T789] usb 4-1: config 0 interface 0 has no altsetting 0
[  142.388073][  T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  142.400938][  T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  142.413428][  T789] usb 4-1: config 0 interface 0 has no altsetting 0
[  142.424132][  T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  142.443685][  T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  142.454974][  T789] usb 4-1: config 0 interface 0 has no altsetting 0
[  142.462839][  T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  142.474688][  T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  142.485878][  T789] usb 4-1: config 0 interface 0 has no altsetting 0
[  142.493416][ T5827] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  142.498389][  T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  142.519526][  T789] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  142.553342][  T789] usb 4-1: config 0 interface 0 has no altsetting 0
[  142.565226][  T789] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  142.576163][  T789] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  142.585737][  T789] usb 4-1: Product: syz
[  142.594078][  T789] usb 4-1: Manufacturer: syz
[  142.603542][  T789] usb 4-1: SerialNumber: syz
[  142.614076][  T789] usb 4-1: config 0 descriptor??
[  142.616667][ T7369] loop0: detected capacity change from 0 to 2048
[  142.635443][ T7369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.636503][  T789] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  142.673351][   T27] audit: type=1800 audit(1775002521.979:12): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.605" name="file3" dev="loop0" ino=1347 res=0 errno=0
[  142.698649][ T5827] usb 3-1: Using ep0 maxpacket: 8
[  142.731681][ T5827] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  142.745336][ T7371] program syz.1.606 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  142.773431][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.818446][ T5827] pvrusb2: Hardware description: Terratec Grabster AV400
[  142.853327][ T5827] pvrusb2: **********
[  142.857365][ T5827] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  142.893976][ T5827] pvrusb2: Important functionality might not be entirely working.
[  142.917765][ T5827] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  142.941448][ T7375] Driver unsupported XDP return value 0 on prog  (id 33) dev N/A, expect packet loss!
[  142.955343][ T7373] loop0: detected capacity change from 0 to 2048
[  142.962003][ T5827] pvrusb2: **********
[  143.019938][ T7376] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.040896][ T2316] pvrusb2: Invalid write control endpoint
[  143.168575][ T2316] pvrusb2: Invalid write control endpoint
[  143.180546][    C1] usb 4-1: yurex_control_callback - control failed: -71
[  143.181631][ T5827] usb 4-1: USB disconnect, device number 10
[  143.211214][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  143.263730][ T5827] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  143.277440][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  143.303335][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  143.331362][ T2316] pvrusb2: Device being rendered inoperable
[  143.349737][ T7360] pvrusb2: Attempted to execute control transfer when device not ok
[  143.368850][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  143.372603][   T28] usb 3-1: USB disconnect, device number 6
[  143.382007][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  143.410732][ T2316] pvrusb2: Attached sub-driver cx25840
[  143.438395][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  143.463357][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  143.711513][ T7393] loop1: detected capacity change from 0 to 2048
[  143.785199][ T7396] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.848437][ T7398] loop0: detected capacity change from 0 to 1024
[  144.169276][ T7406] loop0: detected capacity change from 0 to 512
[  144.197530][ T7406] EXT4-fs: Ignoring removed mblk_io_submit option
[  144.258553][ T7406] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.621: corrupted in-inode xattr: e_value size too large
[  144.304969][ T7406] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.621: couldn't read orphan inode 15 (err -117)
[  144.364665][ T7406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.420611][ T7418] loop3: detected capacity change from 0 to 512
[  144.475740][ T7418] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  144.507774][ T7418] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  144.534629][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.547913][ T7418] EXT4-fs (loop3): 1 truncate cleaned up
[  144.575257][ T7418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.825359][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.954574][ T7435] loop3: detected capacity change from 0 to 256
[  144.978347][ T7435] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d)
[  145.122643][ T7437] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  145.148234][ T5755] udevd[5755]: incorrect nilfs2 checksum on /dev/loop2
[  145.157966][ T7437] NILFS (loop2): mounting unchecked fs
[  145.256203][ T7437] NILFS (loop2): recovery complete
[  145.310445][ T7443] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.021685][ T7442] set_capacity_and_notify: 1 callbacks suppressed
[  146.021699][ T7442] loop3: detected capacity change from 0 to 32768
[  146.113699][ T7442] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.230390][ T7442] XFS (loop3): Ending clean mount
[  146.325322][  T788] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  146.500827][ T5765] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.525955][  T788] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  146.546586][  T788] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  146.607369][  T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  146.639839][  T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  146.670656][  T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  146.706544][  T788] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  146.746414][  T788] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  146.755048][  T788] usb 3-1: Product: syz
[  146.768606][  T788] usb 3-1: Manufacturer: syz
[  146.780935][  T788] cdc_wdm 3-1:1.0: skipping garbage
[  146.797726][  T788] cdc_wdm 3-1:1.0: skipping garbage
[  146.813842][  T788] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  146.819791][  T788] cdc_wdm 3-1:1.0: Unknown control protocol
[  147.070016][  T788] usb 3-1: USB disconnect, device number 7
[  147.365612][ T7477] loop1: detected capacity change from 0 to 40427
[  147.396305][ T7489] netlink: 'syz.0.653': attribute type 11 has an invalid length.
[  147.408081][ T7477] F2FS-fs (loop1): invalid crc value
[  147.415118][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'.
[  147.430035][ T7477] F2FS-fs (loop1): Found nat_bits in checkpoint
[  147.497359][ T7477] F2FS-fs (loop1): Start checkpoint disabled!
[  147.535015][ T7477] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  147.545553][ T7482] loop3: detected capacity change from 0 to 32768
[  147.614764][ T7482] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  147.752573][ T7482] XFS (loop3): Ending clean mount
[  147.861037][   T27] audit: type=1800 audit(1775002527.179:13): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.647" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  148.149063][ T5765] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  148.284015][ T7510] loop1: detected capacity change from 0 to 4096
[  148.313399][ T7510] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  148.600050][ T7519] loop3: detected capacity change from 0 to 128
[  148.638252][ T7519] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  148.706089][ T7519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.715204][  T789] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  148.907795][  T789] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  148.926734][  T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.950013][  T789] usb 3-1: Product: syz
[  148.968193][  T789] usb 3-1: Manufacturer: syz
[  148.972833][  T789] usb 3-1: SerialNumber: syz
[  148.995777][  T789] usb 3-1: config 0 descriptor??
[  149.016949][  T789] ch341 3-1:0.0: ch341-uart converter detected
[  149.848384][  T789] usb 3-1: failed to send control message: -71
[  149.860915][  T789] ch341-uart: probe of ttyUSB0 failed with error -71
[  149.873555][  T789] usb 3-1: USB disconnect, device number 8
[  149.882141][  T789] ch341 3-1:0.0: device disconnected
[  149.946284][ T7540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.072607][ T7542] serio: Serial port pty22
[  150.200911][ T7549] loop1: detected capacity change from 0 to 1024
[  150.241425][ T7549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.340057][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.373578][ T5822] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  150.601270][ T5822] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  150.634985][ T5822] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.668040][ T5822] usb 4-1: config 0 interface 0 has no altsetting 0
[  150.669962][ T7562] loop2: detected capacity change from 0 to 1024
[  150.683575][ T5822] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  150.707337][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.745081][ T5822] usb 4-1: config 0 descriptor??
[  150.867856][ T7554] loop0: detected capacity change from 0 to 40427
[  150.895964][ T7554] F2FS-fs (loop0): heap/no_heap options were deprecated
[  150.911179][ T7554] F2FS-fs (loop0): heap/no_heap options were deprecated
[  150.918899][   T79] hfsplus: b-tree write err: -5, ino 25
[  150.937700][   T79] hfsplus: b-tree write err: -5, ino 4
[  150.950663][ T7554] F2FS-fs (loop0): invalid crc value
[  150.968986][   T79] hfsplus: b-tree write err: -5, ino 2
[  150.976742][   T79] hfsplus: b-tree write err: -5, ino 20
[  151.006006][ T7554] F2FS-fs (loop0): Found nat_bits in checkpoint
[  151.148859][ T7554] F2FS-fs (loop0): Start checkpoint disabled!
[  151.176493][ T7554] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  151.214247][ T5822] hid-steam 0003:28DE:1102.000C: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0
[  151.316050][ T5822] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' connected
[  151.341086][ T5822] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.000C/input/input12
[  151.417109][ T5822] hid-steam 0003:28DE:1102.000D: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0
[  151.510333][   T79] kworker/u4:5: attempt to access beyond end of device
[  151.510333][   T79] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  151.539205][   T79] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  151.554812][ T5822] usb 4-1: USB disconnect, device number 11
[  151.578933][   T79] kworker/u4:5: attempt to access beyond end of device
[  151.578933][   T79] loop0: rw=2049, sector=40984, nr_sectors = 8 limit=40427
[  151.597796][ T7575] fido_id[7575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  151.618964][ T5822] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' disconnected
[  151.640971][   T79] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  151.866864][ T7567] loop1: detected capacity change from 0 to 40427
[  151.888203][ T7567] F2FS-fs (loop1): invalid crc value
[  151.911098][ T7567] F2FS-fs (loop1): Found nat_bits in checkpoint
[  152.000795][ T5827] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  152.023430][ T7567] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  152.066455][ T5822] kernel write not supported for file /vcsa (pid: 5822 comm: kworker/1:5)
[  152.211805][ T5827] usb 3-1: Using ep0 maxpacket: 16
[  152.217201][ T7567] syz.1.682: attempt to access beyond end of device
[  152.217201][ T7567] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  152.237494][ T5827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.253452][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.274797][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  152.287729][ T7567] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  152.294740][ T5827] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  152.305748][ T7567] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  152.323379][ T5827] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  152.347819][ T5827] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  152.363493][ T5827] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  152.372159][ T5827] usb 3-1: Manufacturer: syz
[  152.385993][ T5827] usb 3-1: config 0 descriptor??
[  152.563394][ T5822] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  152.733437][ T5827] rc_core: IR keymap rc-hauppauge not found
[  152.739398][ T5827] Registered IR keymap rc-empty
[  152.756965][ T5827] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.780302][ T5822] usb 1-1: Using ep0 maxpacket: 8
[  152.813846][ T5827] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.814977][ T5822] usb 1-1: unable to get BOS descriptor or descriptor too short
[  152.840995][ T5822] usb 1-1: config 0 has an invalid interface number: 42 but max is 0
[  152.842202][ T7600] loop3: detected capacity change from 0 to 512
[  152.853285][ T5822] usb 1-1: config 0 has no interface number 0
[  152.878271][ T7600] EXT4-fs: Ignoring removed nomblk_io_submit option
[  152.880003][ T5822] usb 1-1: config 0 interface 42 has no altsetting 0
[  152.889394][ T5827] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  152.910132][ T7600] EXT4-fs: Ignoring removed mblk_io_submit option
[  152.922123][ T5822] usb 1-1: New USB device found, idVendor=04da, idProduct=250c, bcdDevice= 1.8c
[  152.923128][ T5827] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13
[  152.947412][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.957892][ T5822] usb 1-1: Product: syz
[  152.962083][ T5822] usb 1-1: Manufacturer: syz
[  152.966838][ T5822] usb 1-1: SerialNumber: syz
[  152.969381][ T7600] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  153.002977][ T5822] usb 1-1: config 0 descriptor??
[  153.014697][ T7600] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  153.031135][ T5827] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  153.042239][    C0] mceusb 3-1:0.0: long-range (0x14) receiver active
[  153.053731][ T7600] EXT4-fs (loop3): 1 truncate cleaned up
[  153.064086][ T7600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.098278][ T5827] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  153.143633][ T5827] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  153.183490][ T5827] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  153.188256][ T7600] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #2: block 4: comm syz.3.695: lblock 0 mapped to illegal pblock 4 (length 1)
[  153.214483][ T7600] EXT4-fs (loop3): Remounting filesystem read-only
[  153.227993][ T5827] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  153.263522][ T5827] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  153.264024][ T5822] usb 1-1: bad CDC descriptors
[  153.286305][ T5822] usb 1-1: USB disconnect, device number 10
[  153.333547][ T5827] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  153.334415][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.375875][ T5827] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  153.423488][ T5827] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  153.474225][ T5827] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  153.505390][ T5827] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  153.522555][ T5827] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x14 active)
[  153.541957][ T5827] usb 3-1: USB disconnect, device number 9
[  153.753362][ T5802] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  153.961016][ T5802] usb 2-1: Using ep0 maxpacket: 16
[  153.994167][ T5802] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  154.027821][ T5802] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 166, changing to 11
[  154.059763][ T5802] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 9233, setting to 1024
[  154.080429][ T5802] usb 2-1: config 0 interface 0 has no altsetting 0
[  154.099114][ T5802] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  154.112648][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.125830][ T5802] usb 2-1: Product: syz
[  154.130028][ T5802] usb 2-1: Manufacturer: syz
[  154.135008][ T5802] usb 2-1: SerialNumber: syz
[  154.142970][ T5802] usb 2-1: config 0 descriptor??
[  154.180714][ T7612] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  154.432450][ T7612] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  154.447728][ T5802] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14
[  154.683709][ T5822] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  154.712426][ T5802] usb 2-1: USB disconnect, device number 11
[  154.875291][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  154.888774][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  154.899183][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  154.910763][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  154.925237][ T5822] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  154.934540][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.942545][ T5822] usb 4-1: Product: syz
[  154.947387][ T5822] usb 4-1: Manufacturer: syz
[  154.952000][ T5822] usb 4-1: SerialNumber: syz
[  154.960299][ T5822] usb 4-1: config 0 descriptor??
[  155.006517][ T7653] loop2: detected capacity change from 0 to 4096
[  155.090862][ T7645] loop0: detected capacity change from 0 to 40427
[  155.107856][ T7645] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  155.150040][ T7645] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  155.188066][ T7645] F2FS-fs (loop0): invalid crc value
[  155.205639][ T5822] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  155.236321][ T7645] F2FS-fs (loop0): Found nat_bits in checkpoint
[  155.437542][ T7645] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  155.456699][ T7645] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  155.465383][ T7641] usb 4-1: Couldn't submit interrupt_out_urb -90
[  155.505219][ T5827] usb 4-1: USB disconnect, device number 12
[  155.990375][ T7678] loop0: detected capacity change from 0 to 256
[  156.008626][ T7678] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  156.155928][ T7680] loop3: detected capacity change from 0 to 64
[  156.339291][ T7686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'.
[  156.473645][ T5822] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  156.683586][ T5822] usb 1-1: Using ep0 maxpacket: 16
[  156.695938][ T5822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.720387][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  156.741047][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  156.752346][ T5822] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  156.763578][ T5822] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.783381][ T5822] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  156.797654][ T5822] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  156.807681][ T5822] usb 1-1: Manufacturer: syz
[  156.836914][ T5822] usb 1-1: config 0 descriptor??
[  156.903928][  T789] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  156.956190][ T7708] loop2: detected capacity change from 0 to 2048
[  157.008072][ T7708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.075403][ T7708] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  157.123765][  T789] usb 4-1: Using ep0 maxpacket: 32
[  157.133774][  T789] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  157.139678][ T7716] netlink: 116 bytes leftover after parsing attributes in process `syz.1.743'.
[  157.143084][  T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.164757][  T789] usb 4-1: config 0 descriptor??
[  157.169952][ T5822] rc_core: IR keymap rc-hauppauge not found
[  157.174165][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.186875][ T5822] Registered IR keymap rc-empty
[  157.206812][ T5822] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.253588][ T5822] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.295939][ T5822] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  157.316882][ T5822] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15
[  157.331159][ T7720] netlink: 56 bytes leftover after parsing attributes in process `syz.2.744'.
[  157.345985][ T5822] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.383628][ T5822] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.429686][  T789] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  157.452301][  T789] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  157.472458][  T789] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  157.481033][ T5822] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.490448][  T789] usb 4-1: media controller created
[  157.519331][  T789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  157.529847][ T5822] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.563503][ T5822] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.623888][ T5822] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.640867][  T789] az6027: usb out operation failed. (-71)
[  157.654174][ T5822] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.661572][  T789] az6027: usb out operation failed. (-71)
[  157.669374][  T789] stb0899_attach: Driver disabled by Kconfig
[  157.676289][  T789] az6027: no front-end attached
[  157.676289][  T789] 
[  157.683784][  T789] az6027: usb out operation failed. (-71)
[  157.689629][  T789] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  157.698086][  T789] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16
[  157.710072][ T5822] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.720789][  T789] dvb-usb: schedule remote query interval to 400 msecs.
[  157.729172][  T789] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  157.743319][  T789] usb 4-1: USB disconnect, device number 13
[  157.768626][ T5822] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.803892][ T5822] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.819898][  T789] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  157.840155][ T5822] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  157.858091][ T5822] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  157.895083][ T5822] usb 1-1: USB disconnect, device number 11
[  157.933836][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  158.146802][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  158.157439][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  158.170356][    T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  158.181766][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  158.190033][    T9] usb 3-1: SerialNumber: syz
[  158.316126][ T7742] loop1: detected capacity change from 0 to 1024
[  158.423211][    T9] usb 3-1: 0:2 : does not exist
[  158.474516][    T9] usb 3-1: USB disconnect, device number 10
[  158.521828][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  159.167415][ T7746] loop0: detected capacity change from 0 to 40427
[  159.185943][ T7746] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  159.203671][ T7746] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  159.239600][ T7746] F2FS-fs (loop0): invalid crc value
[  159.272414][ T7746] F2FS-fs (loop0): Found nat_bits in checkpoint
[  159.399949][ T7746] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  159.417846][ T7746] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  159.765714][ T7758] loop1: detected capacity change from 0 to 32768
[  159.809251][ T7758] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  159.872462][ T7758] JBD2: Ignoring recovery information on journal
[  159.904337][ T7760] loop3: detected capacity change from 0 to 40427
[  159.938473][ T7760] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  159.983421][ T7760] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  159.997083][ T7760] F2FS-fs (loop3): invalid crc_offset: 33558524
[  160.053391][ T7760] F2FS-fs (loop3): Found nat_bits in checkpoint
[  160.113980][ T7758] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  160.204990][ T7760] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  160.252855][ T7760] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  160.518450][ T5764] ocfs2: Unmounting device (7,1) on (node local)
[  160.966222][ T7790] loop2: detected capacity change from 0 to 128
[  161.070822][ T7790] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  161.120484][ T7790] ext4 filesystem being mounted at /218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  161.152270][    C1] vkms_vblank_simulate: vblank timer overrun
[  161.351812][ T5762] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  161.480705][ T7792] loop1: detected capacity change from 0 to 40427
[  161.507812][ T7792] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  161.537351][ T7792] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  161.562324][ T7792] F2FS-fs (loop1): invalid crc value
[  161.634007][ T7792] F2FS-fs (loop1): Found nat_bits in checkpoint
[  161.768067][ T7792] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  161.784777][ T7792] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  162.012731][ T5764] syz-executor: attempt to access beyond end of device
[  162.012731][ T5764] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  162.079485][ T5764] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  162.096986][ T1128] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  162.129754][ T1128] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  162.300417][ T7824] loop2: detected capacity change from 0 to 512
[  162.389920][ T7824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.413476][ T7824] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.488107][ T7828] mkiss: ax0: crc mode is auto.
[  162.609721][ T7811] loop3: detected capacity change from 0 to 32768
[  162.636772][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.690878][ T7811] JBD2: Ignoring recovery information on journal
[  162.851266][ T7811] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  162.950656][ T7839] netlink: 'syz.0.786': attribute type 9 has an invalid length.
[  163.095005][   T27] audit: type=1800 audit(1775002542.409:14): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.777" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  163.147719][ T7843] pim6reg1: tun_chr_ioctl cmd 1074025677
[  163.179315][ T7843] pim6reg1: linktype set to 823
[  163.232553][ T7811] 
[  163.234918][ T7811] ======================================================
[  163.241939][ T7811] WARNING: possible circular locking dependency detected
[  163.248974][ T7811] syzkaller #0 Not tainted
[  163.253393][ T7811] ------------------------------------------------------
[  163.260419][ T7811] syz.3.777/7811 is trying to acquire lock:
[  163.266361][ T7811] ffff88805d083498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  163.279358][ T7811] 
[  163.279358][ T7811] but task is already holding lock:
[  163.286730][ T7811] ffff88805d368660 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_dio_end_io+0x43a/0x1200
[  163.297370][ T7811] 
[  163.297370][ T7811] which lock already depends on the new lock.
[  163.297370][ T7811] 
[  163.307782][ T7811] 
[  163.307782][ T7811] the existing dependency chain (in reverse order) is:
[  163.316804][ T7811] 
[  163.316804][ T7811] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  163.325682][ T7811]        down_write+0x97/0x200
[  163.330463][ T7811]        ocfs2_create_local_dquot+0x1a9/0x18f0
[  163.336645][ T7811]        ocfs2_acquire_dquot+0x7f1/0xb10
[  163.342292][ T7811]        dqget+0x77c/0xeb0
[  163.346702][ T7811]        __dquot_initialize+0x3c7/0xcd0
[  163.352231][ T7811]        ocfs2_get_init_inode+0x148/0x1c0
[  163.357934][ T7811]        ocfs2_mknod+0x867/0x2300
[  163.362961][ T7811]        ocfs2_mkdir+0x196/0x430
[  163.367882][ T7811]        vfs_mkdir+0x296/0x440
[  163.372624][ T7811]        do_mkdirat+0x1dc/0x450
[  163.377452][ T7811]        __x64_sys_mkdirat+0x89/0xa0
[  163.382717][ T7811]        do_syscall_64+0x55/0xa0
[  163.387646][ T7811]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.394046][ T7811] 
[  163.394046][ T7811] -> #2 (&dquot->dq_lock){+.+.}-{3:3}:
[  163.401667][ T7811]        __mutex_lock+0x136/0xcc0
[  163.406678][ T7811]        dqget+0x6fc/0xeb0
[  163.411076][ T7811]        __dquot_initialize+0x3c7/0xcd0
[  163.416605][ T7811]        ocfs2_get_init_inode+0x148/0x1c0
[  163.422310][ T7811]        ocfs2_mknod+0x867/0x2300
[  163.427314][ T7811]        ocfs2_mkdir+0x196/0x430
[  163.432230][ T7811]        vfs_mkdir+0x296/0x440
[  163.437003][ T7811]        do_mkdirat+0x1dc/0x450
[  163.441840][ T7811]        __x64_sys_mkdirat+0x89/0xa0
[  163.447123][ T7811]        do_syscall_64+0x55/0xa0
[  163.452074][ T7811]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.458473][ T7811] 
[  163.458473][ T7811] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[  163.468963][ T7811]        down_write+0x97/0x200
[  163.473724][ T7811]        ocfs2_evict_inode+0x1d84/0x41e0
[  163.479381][ T7811]        evict+0x4ca/0x8d0
[  163.483794][ T7811]        do_unlinkat+0x38c/0x590
[  163.488728][ T7811]        __x64_sys_unlink+0x49/0x50
[  163.493914][ T7811]        do_syscall_64+0x55/0xa0
[  163.498840][ T7811]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.505240][ T7811] 
[  163.505240][ T7811] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}:
[  163.515553][ T7811]        __lock_acquire+0x2df1/0x7d40
[  163.520911][ T7811]        lock_acquire+0x19e/0x420
[  163.525933][ T7811]        down_write+0x97/0x200
[  163.530679][ T7811]        ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  163.536992][ T7811]        ocfs2_dio_end_io+0x546/0x1200
[  163.542440][ T7811]        dio_complete+0x254/0x710
[  163.547453][ T7811]        __blockdev_direct_IO+0x2ea8/0x3500
[  163.553342][ T7811]        ocfs2_direct_IO+0x235/0x2a0
[  163.553409][    T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  163.558629][ T7811]        generic_file_direct_write+0x1d4/0x3e0
[  163.558653][ T7811]        __generic_file_write_iter+0x11b/0x230
[  163.558667][ T7811]        ocfs2_file_write_iter+0x167a/0x1e80
[  163.584450][ T7811]        do_iter_write+0x738/0xc30
[  163.589571][ T7811]        do_writev+0x27f/0x480
[  163.594333][ T7811]        do_syscall_64+0x55/0xa0
[  163.599257][ T7811]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.605657][ T7811] 
[  163.605657][ T7811] other info that might help us debug this:
[  163.605657][ T7811] 
[  163.615868][ T7811] Chain exists of:
[  163.615868][ T7811]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type] --> &dquot->dq_lock --> &ocfs2_quota_ip_alloc_sem_key
[  163.615868][ T7811] 
[  163.632877][ T7811]  Possible unsafe locking scenario:
[  163.632877][ T7811] 
[  163.640316][ T7811]        CPU0                    CPU1
[  163.645668][ T7811]        ----                    ----
[  163.651020][ T7811]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  163.656668][ T7811]                                lock(&dquot->dq_lock);
[  163.663609][ T7811]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  163.672130][ T7811]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]);
[  163.679245][ T7811] 
[  163.679245][ T7811]  *** DEADLOCK ***
[  163.679245][ T7811] 
[  163.687377][ T7811] 4 locks held by syz.3.777/7811:
[  163.692382][ T7811]  #0: ffff88807a098848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330
[  163.701594][ T7811]  #1: ffff88802e5ee418 (sb_writers#14){.+.+}-{0:0}, at: do_writev+0x261/0x480
[  163.710547][ T7811]  #2: ffff88805d3689d8 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x440/0x1e80
[  163.721851][ T7811]  #3: ffff88805d368660 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_dio_end_io+0x43a/0x1200
[  163.732912][ T7811] 
[  163.732912][ T7811] stack backtrace:
[  163.738798][ T7811] CPU: 1 PID: 7811 Comm: syz.3.777 Not tainted syzkaller #0
[  163.745901][    T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  163.746059][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  163.755380][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.765161][ T7811] Call Trace:
[  163.765180][ T7811]  <TASK>
[  163.765188][ T7811]  dump_stack_lvl+0x18c/0x250
[  163.765216][ T7811]  ? load_image+0x400/0x400
[  163.765234][ T7811]  ? show_regs_print_info+0x20/0x20
[  163.765257][ T7811]  ? print_circular_bug+0x12b/0x1a0
[  163.765287][ T7811]  check_noncircular+0x2fc/0x400
[  163.765309][ T7811]  ? print_deadlock_bug+0x5d0/0x5d0
[  163.765326][ T7811]  ? lockdep_lock+0xf5/0x230
[  163.794285][    T9] usb 2-1: config 0 descriptor??
[  163.798976][ T7811]  ? _find_first_zero_bit+0xd3/0x100
[  163.799003][ T7811]  __lock_acquire+0x2df1/0x7d40
[  163.828857][ T7811]  ? __lock_acquire+0x7d40/0x7d40
[  163.833919][ T7811]  ? verify_lock_unused+0x140/0x140
[  163.839143][ T7811]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  163.844785][ T7811]  ? do_raw_spin_lock+0x11f/0x2c0
[  163.849818][ T7811]  ? mutex_unlock+0x10/0x10
[  163.854405][ T7811]  lock_acquire+0x19e/0x420
[  163.858907][ T7811]  ? ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  163.864973][ T7811]  ? ocfs2_get_system_file_inode+0x202/0x850
[  163.870966][ T7811]  ? __might_sleep+0xe0/0xe0
[  163.875564][ T7811]  ? read_lock_is_recursive+0x20/0x20
[  163.880944][ T7811]  ? ocfs2_fast_symlink_read_folio+0x550/0x550
[  163.887105][ T7811]  ? do_raw_spin_unlock+0x121/0x230
[  163.892317][ T7811]  down_write+0x97/0x200
[  163.896579][ T7811]  ? ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  163.902563][ T7811]  ? down_read_killable+0x340/0x340
[  163.907850][ T7811]  ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  163.913683][ T7811]  ? read_lock_is_recursive+0x20/0x20
[  163.919076][ T7811]  ? ocfs2_add_inode_to_orphan+0x7b0/0x7b0
[  163.924874][ T7811]  ? __lock_acquire+0x1347/0x7d40
[  163.929902][ T7811]  ? down_write+0x16e/0x200
[  163.934410][ T7811]  ? down_read_killable+0x340/0x340
[  163.939623][ T7811]  ocfs2_dio_end_io+0x546/0x1200
[  163.944574][ T7811]  ? ocfs2_dio_wr_get_block+0x1820/0x1820
[  163.950309][ T7811]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  163.956197][ T7811]  ? _raw_spin_unlock+0x40/0x40
[  163.961087][ T7811]  ? debug_check_no_obj_freed+0x51f/0x540
[  163.966827][ T7811]  ? mark_lock+0x94/0x320
[  163.971257][ T7811]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  163.977244][ T7811]  ? lock_chain_count+0x20/0x20
[  163.982108][ T7811]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  163.988024][ T7811]  ? lockdep_hardirqs_on+0x98/0x150
[  163.993228][ T7811]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  163.999130][ T7811]  ? ocfs2_dio_wr_get_block+0x1820/0x1820
[  164.004848][ T7811]  dio_complete+0x254/0x710
[  164.009367][ T7811]  __blockdev_direct_IO+0x2ea8/0x3500
[  164.014759][ T7811]  ? show_vfsstat+0x3c0/0x3c0
[  164.019457][ T7811]  ? ocfs2_lock_get_block+0x60/0x60
[  164.024690][ T7811]  ? filemap_write_and_wait_range+0x1a5/0x230
[  164.030780][ T7811]  ? lock_chain_count+0x20/0x20
[  164.035652][ T7811]  ? __rwlock_init+0x150/0x150
[  164.040562][ T7811]  ? ocfs2_lock_get_block+0x60/0x60
[  164.045778][ T7811]  ocfs2_direct_IO+0x235/0x2a0
[  164.050558][ T7811]  generic_file_direct_write+0x1d4/0x3e0
[  164.056204][ T7811]  __generic_file_write_iter+0x11b/0x230
[  164.061842][ T7811]  ? ocfs2_file_write_iter+0x154a/0x1e80
[  164.067471][ T7811]  ocfs2_file_write_iter+0x167a/0x1e80
[  164.072952][ T7811]  ? __lock_acquire+0x7d40/0x7d40
[  164.077982][ T7811]  ? ocfs2_file_read_iter+0xa90/0xa90
[  164.083371][ T7811]  ? verify_lock_unused+0x140/0x140
[  164.088586][ T7811]  ? aa_path_link+0xf70/0xf70
[  164.093274][ T7811]  ? __mutex_trylock_common+0x159/0x260
[  164.098829][ T7811]  ? end_current_label_crit_section+0x149/0x170
[  164.105080][ T7811]  ? common_file_perm+0x198/0x1f0
[  164.110123][ T7811]  do_iter_write+0x738/0xc30
[  164.114725][ T7811]  ? vfs_iter_write+0xa0/0xa0
[  164.119490][ T7811]  ? rcu_read_lock_any_held+0xb4/0x140
[  164.124970][ T7811]  do_writev+0x27f/0x480
[  164.129224][ T7811]  ? do_readv+0x460/0x460
[  164.133584][ T7811]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  164.139576][ T7811]  ? lock_chain_count+0x20/0x20
[  164.144446][ T7811]  ? lockdep_hardirqs_on+0x98/0x150
[  164.149661][ T7811]  do_syscall_64+0x55/0xa0
[  164.154087][ T7811]  ? clear_bhb_loop+0x40/0x90
[  164.158776][ T7811]  ? clear_bhb_loop+0x40/0x90
[  164.163461][ T7811]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  164.169367][ T7811] RIP: 0033:0x7fe815b9c819
[  164.173793][ T7811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.193412][ T7811] RSP: 002b:00007fe816b47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  164.201834][ T7811] RAX: ffffffffffffffda RBX: 00007fe815e15fa0 RCX: 00007fe815b9c819
[  164.209807][ T7811] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004
[  164.217799][ T7811] RBP: 00007fe815c32c91 R08: 0000000000000000 R09: 0000000000000000
[  164.225782][ T7811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.233768][ T7811] R13: 00007fe815e16038 R14: 00007fe815e15fa0 R15: 00007ffd62d6fc88
[  164.241766][ T7811]  </TASK>
[  164.243028][    T9] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[  164.244863][    C1] vkms_vblank_simulate: vblank timer overrun
[  164.291319][    T9] [drm] Initialized udl on minor 2
[  164.356821][ T5765] ocfs2: Unmounting device (7,3) on (node local)
[  164.622519][    T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  164.630601][    T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  164.637431][ T5153] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  164.648294][    T9] usb 2-1: USB disconnect, device number 12
[  164.654984][ T5153] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  164.662892][ T5153] udl 2-1:0.0: [drm] Cannot find any crtc or sizes