last executing test programs:

30.535877367s ago: executing program 3 (id=710):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)

30.199201917s ago: executing program 3 (id=713):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[], 0xc)

29.825162089s ago: executing program 3 (id=726):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000100)=0x67c04515)

28.089971554s ago: executing program 3 (id=731):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x1, 0x629f, &(0x7f0000004a00)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

26.813135085s ago: executing program 3 (id=741):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xb6, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85990747c7e37312f7eb8286ea199ecd22221ad7dade9e2b670d2dce18dd851fe6b48b3188c3764958b51a9aafc271972b28397406e611e1c0d1a8ecafe2e82d1df01e507e1c0c7f8093da6e376297d1c18eecdde56d5eb156d7ddf449d9e50010acfa620c4d7f6ee20c8cadb1094f58bbb471a8af09", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x2100)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

25.902106744s ago: executing program 3 (id=752):
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000200)={'virt_wifi0\x00', @remote})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x2b0, 0x3a8, 0x3a8, 0x2b0, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e0, 0x700, {}, [@common=@inet=@recent0={{0xf8}, {0x1, 0x6, 0x10, 0x0, 'syz1\x00', 0x8}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4bba542500e92eab2e507d4e04c0a92ef98f938b8a3de27236e73a674522"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)

25.487588817s ago: executing program 32 (id=752):
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000200)={'virt_wifi0\x00', @remote})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x2b0, 0x3a8, 0x3a8, 0x2b0, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e0, 0x700, {}, [@common=@inet=@recent0={{0xf8}, {0x1, 0x6, 0x10, 0x0, 'syz1\x00', 0x8}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4bba542500e92eab2e507d4e04c0a92ef98f938b8a3de27236e73a674522"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)

3.814908719s ago: executing program 4 (id=875):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc)

3.534373557s ago: executing program 4 (id=880):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
execve(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000300)={[&(0x7f00000001c0)='--!\x00', &(0x7f0000000200)='\x00']})

3.004817394s ago: executing program 4 (id=884):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc090}, 0x48006)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)

2.935940986s ago: executing program 1 (id=885):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x3f7ff, 0x4)
r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000))
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x1, 0x205, 0x1, 0x5})

2.732917633s ago: executing program 4 (id=887):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000002280)={0x2020}, 0x2020)

2.682108704s ago: executing program 1 (id=888):
sendto$inet6(0xffffffffffffffff, 0x0, 0x34, 0xfff5, &(0x7f0000000300)={0xa, 0x4e20, 0xfffffffe, @local}, 0x1c)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9})

2.355048845s ago: executing program 0 (id=890):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x3f, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000001", 0x9, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x9, 0x0, @opaque="ff"}}}}}}, 0x0)

2.354808705s ago: executing program 1 (id=891):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\v', 0x1, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="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", 0x6cc, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x2}, &(0x7f0000001100)="ae30d8455a5e46cd8f84c057415d8a047af7e47283691afcbae62a95ea8c96f5adf17e7dd2c3c1e18782418cff1e9b7337266405afe00441e08ed25df02a9b6d6b403af0be4d0cb5f38ed4ebf952cd5dfb408580ebf1d2d896976beb39b7046d3ff64ec67c9218eab93d76e1378f25792c2630c93364c39c516012407ae90ccfcf6747ae89dd1b6ac784d0f2e5b387e25b8b160c5e130319b94e61724104a80c80e59c4690380535", 0xa8, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f00000011c0)={r0, r1, r2}, &(0x7f0000001200)=""/202, 0xca, &(0x7f0000001380)={&(0x7f0000001300)={'sha1-avx\x00'}, &(0x7f0000001340)='3', 0x1})

2.294494757s ago: executing program 4 (id=893):
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000240)={0x40, 0x8, 0x29, {0x29, 0x31, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f55"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.115131583s ago: executing program 2 (id=894):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0)

2.105195003s ago: executing program 0 (id=895):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

2.060057624s ago: executing program 1 (id=896):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0xe26)

2.058025394s ago: executing program 5 (id=897):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x3, {0x81, 0x7fffffff, "46d2db1fa85914d2684d4f251af7dc2400b21c7e04ad40c809649097f4173039e67d24e660d9254477e2598d6b84581cb37850b3ccb9d501ef2a0512bac7ca1fd3ae396fe1c7e9369f9f6fef2c2c00e1e6f725170295e778e2d7ba6fef8e89dff8ce9801d285e2f30c56bf7ee43ba935a1843b6a04f176ee1ed48cf3c0b21df9d3b53b37bd397d86fd60a2564d4e1b2e2e56bbbbbdbb1dbdb196821f1ef39f9591c3cf7750927ab1b8b6cc1ef51b81f42fdc0fdaf84431924fb1bc37f327e892f2266d13b2590d5cc354fad0716ff403383f0f7bdbff469c5d8b9cb6561bf9b6a6fbf32c9d3a530b09df70c6ed3e161531872d692513ccbdd8e626924d8f32da", 0x80, 0x7, 0xf2, 0x5, 0xf8, 0x5, 0xc}, r2}}, 0x128)

1.921537048s ago: executing program 2 (id=898):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
dup3(r1, r0, 0x80000)
read(r0, &(0x7f0000002400)=""/208, 0xd0)

1.810199662s ago: executing program 5 (id=899):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101500, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000740)={0x4, "abacd211119ca94c633774262eb5064744e04200", <r1=>0xffffffffffffffff})
getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2)
ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000400)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})

1.809956962s ago: executing program 0 (id=900):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x19f, &(0x7f0000000780)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x833}}, {@nomblk_io_submit}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000200)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5})
open(&(0x7f0000000100)='./file1\x00', 0x101000, 0x0)

1.759726953s ago: executing program 1 (id=901):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x340)

1.690582386s ago: executing program 2 (id=902):
r0 = epoll_create1(0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)={0x14})
epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0)

1.443677464s ago: executing program 2 (id=903):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec777000)
creat(&(0x7f0000000080)='./bus\x00', 0x154)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,')

1.131937744s ago: executing program 2 (id=904):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x840, &(0x7f0000000000), 0x1, 0x53b, &(0x7f0000000780)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x10000, 0x7fffffffffffffff})

1.012513288s ago: executing program 0 (id=905):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000980)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27)

755.947656ms ago: executing program 5 (id=906):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb467b5543f09086dd6000000000043afffe8000000000000000000000000000bbff0200000000000000000000000000018300907800068c"], 0x0)

635.9114ms ago: executing program 5 (id=907):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
pipe2(&(0x7f0000000000)={<r1=>0x0, <r2=>0x0}, 0x0)
tee(r1, r0, 0x100, 0x0)
vmsplice(r2, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0)

387.275757ms ago: executing program 0 (id=908):
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000017000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r0, &(0x7f0000001200)=[{&(0x7f0000001d40)=""/4098, 0x1002}], 0x1, 0x9, 0x6a76)

320.85857ms ago: executing program 2 (id=909):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10)

236.732382ms ago: executing program 5 (id=910):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

154.419195ms ago: executing program 5 (id=911):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

154.261925ms ago: executing program 4 (id=912):
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x38)

50.688438ms ago: executing program 0 (id=913):
r0 = msgget$private(0x0, 0x200)
r1 = io_uring_setup(0x79bb, &(0x7f0000000180))
close_range(r1, 0xffffffffffffffff, 0x0)
msgrcv(r0, 0x0, 0x0, 0xffffffffffffffff, 0x2000)

0s ago: executing program 1 (id=914):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x4)
setuid(0xee00)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

ings: Mfr=1, Product=2, SerialNumber=3
[   88.768239][    T7] usb 2-1: Product: syz
[   88.772701][    T7] usb 2-1: Manufacturer: syz
[   88.777404][    T7] usb 2-1: SerialNumber: syz
[   88.786939][    T7] usb 2-1: config 0 descriptor??
[   88.800025][    T7] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   88.809831][    T7] em28xx 2-1:0.0: DVB interface 0 found: bulk
[   88.878387][ T4434] fscrypt (loop2, inode 12): Unsupported encryption flags (0x08)
[   88.984104][ T4280] EXT4-fs (loop2): unmounting filesystem.
[   89.214137][ T4452] netlink: 56 bytes leftover after parsing attributes in process `syz.4.37'.
[   89.427671][    T7] em28xx 2-1:0.0: chip ID is em2765
[   89.565050][ T4461] loop4: detected capacity change from 0 to 512
[   89.621485][ T4461] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.42: inode #1: comm syz.4.42: iget: illegal inode #
[   89.653228][ T4461] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.42: error while reading EA inode 1 err=-117
[   89.683334][ T4461] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   89.697519][ T4461] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.42: inode #1: comm syz.4.42: iget: illegal inode #
[   89.723914][ T4461] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.42: error while reading EA inode 1 err=-117
[   89.740179][    T7] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[   89.755028][    T7] em28xx 2-1:0.0: board has no eeprom
[   89.788048][ T4461] EXT4-fs (loop4): 1 orphan inode deleted
[   89.798324][ T4461] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   89.872866][    T7] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   89.880794][    T7] em28xx 2-1:0.0: dvb set to bulk mode.
[   89.980909][    T7] usb 2-1: USB disconnect, device number 2
[   89.998450][ T4279] EXT4-fs (loop4): unmounting filesystem.
[   90.030772][    T7] em28xx 2-1:0.0: Disconnecting em28xx
[   90.066682][ T4471] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   90.071003][  T126] em28xx 2-1:0.0: Binding DVB extension
[   90.111317][ T4471] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[   90.208577][ T4474] loop4: detected capacity change from 0 to 512
[   90.280835][ T4474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   90.295875][  T126] em28xx 2-1:0.0: Registering input extension
[   90.297420][ T4474] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.355512][    T7] em28xx 2-1:0.0: Closing input extension
[   90.413456][    T7] em28xx 2-1:0.0: Freeing device
[   90.448002][ T4483] loop3: detected capacity change from 0 to 512
[   90.520007][ T4483] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   90.619726][ T4483] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   90.681560][ T4279] EXT4-fs (loop4): unmounting filesystem.
[   90.706966][ T4488] loop1: detected capacity change from 0 to 256
[   90.761559][ T4483] EXT4-fs (loop3): 1 orphan inode deleted
[   90.816961][ T4483] EXT4-fs (loop3): 1 truncate cleaned up
[   90.823285][ T4483] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   90.981671][ T4493] loop2: detected capacity change from 0 to 256
[   91.009169][ T4281] EXT4-fs (loop3): unmounting filesystem.
[   91.495553][ T4505] loop1: detected capacity change from 0 to 2048
[   91.621706][ T4512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'.
[   91.632611][ T4287] Bluetooth: hci3: adv larger than maximum supported
[   91.632638][ T4287] Bluetooth: hci3: Unknown advertising packet type: 0x2540
[   91.639489][ T4287] Bluetooth: hci3: Malformed LE Event: 0x0d
[   91.668475][    T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   91.689293][ T4519] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   91.801681][ T4519] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[   91.818754][ T4519] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[   91.837265][ T4519] Remounting filesystem read-only
[   91.875731][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.890598][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.902214][    T7] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   91.912621][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.912723][ T4271] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[   91.924094][    T7] usb 3-1: config 0 descriptor??
[   92.217086][ T4529] loop4: detected capacity change from 0 to 512
[   92.304840][ T4529] EXT4-fs (loop4): 1 truncate cleaned up
[   92.304883][ T4529] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   92.352492][ T4533] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[   92.358062][    T7] cm6533_jd 0003:0D8C:0022.0001: unbalanced delimiter at end of report description
[   92.391815][   T26] audit: type=1800 audit(1779189543.262:2): pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.68" name="file0" dev="loop4" ino=13 res=0 errno=0
[   92.393924][ T4529] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.68: invalid indirect mapped block 234881024 (level 0)
[   92.463114][    T7] cm6533_jd 0003:0D8C:0022.0001: parse failed
[   92.465387][ T4538] loop3: detected capacity change from 0 to 256
[   92.469274][    T7] cm6533_jd: probe of 0003:0D8C:0022.0001 failed with error -22
[   92.485454][ T4538] exfat: Deprecated parameter 'utf8'
[   92.538313][ T4538] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[   92.656930][    T7] usb 3-1: USB disconnect, device number 2
[   92.709731][ T4279] EXT4-fs (loop4): unmounting filesystem.
[   92.856637][ T4544] loop4: detected capacity change from 0 to 1024
[   92.883461][ T4544] EXT4-fs: Ignoring removed orlov option
[   92.955512][ T4546] netlink: 'syz.3.75': attribute type 4 has an invalid length.
[   92.974992][ T4544] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   93.047236][ T4551] loop0: detected capacity change from 0 to 2048
[   93.124570][ T4551] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   93.170399][ T4279] EXT4-fs (loop4): unmounting filesystem.
[   93.360681][ T4275] EXT4-fs (loop0): unmounting filesystem.
[   93.434347][ T4559] netlink: 'syz.3.79': attribute type 2 has an invalid length.
[   93.913187][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'.
[   93.975477][ T4580] loop8: detected capacity change from 0 to 128
[   94.032524][    T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   94.232473][    T7] usb 4-1: Using ep0 maxpacket: 16
[   94.239958][    T7] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[   94.272163][    T7] usb 4-1: config 0 has no interface number 0
[   94.288077][    T7] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.309401][    T7] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.329593][    T7] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   94.341577][ T4586] loop1: detected capacity change from 0 to 4096
[   94.349094][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.388296][    T7] usb 4-1: config 0 descriptor??
[   94.473415][ T4587] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.526506][   T26] audit: type=1800 audit(1779189545.402:3): pid=4586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.92" name="file2" dev="loop1" ino=16 res=0 errno=0
[   94.835148][  T126] kernel write not supported for file /35/clear_refs (pid: 126 comm: kworker/0:2)
[   95.021428][    T7] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0002/input/input6
[   95.075696][ T4599] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   95.109715][ T4599] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   95.132652][    T7] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0002/input/input7
[   95.210090][    T7] uclogic 0003:28BD:0071.0002: input,hiddev0,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1
[   95.307012][    T7] usb 4-1: USB disconnect, device number 2
[   95.571033][ T4603] fido_id[4603]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   95.827545][ T4608] loop2: detected capacity change from 0 to 8192
[   96.218932][ T4619] overlayfs: upper fs does not support tmpfile.
[   96.558898][ T4629] loop0: detected capacity change from 0 to 16
[   96.608766][ T4629] erofs: (device loop0): mounted with root inode @ nid 36.
[   97.018483][ T4641] loop1: detected capacity change from 0 to 256
[   97.030909][ T4641] =======================================================
[   97.030909][ T4641] WARNING: The mand mount option has been deprecated and
[   97.030909][ T4641]          and is ignored by this kernel. Remove the mand
[   97.030909][ T4641]          option from the mount to silence this warning.
[   97.030909][ T4641] =======================================================
[   97.066040][    C1] vkms_vblank_simulate: vblank timer overrun
[   97.108158][ T4641] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[   98.138414][ T4648] loop0: detected capacity change from 0 to 32768
[   98.191721][ T4648] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.115 (4648)
[   98.285535][ T4648] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   98.319663][ T4648] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   98.397576][ T4648] BTRFS info (device loop0): allowing degraded mounts
[   98.431293][ T4648] BTRFS info (device loop0): setting nodatasum
[   98.457722][ T4648] BTRFS info (device loop0): disabling tree log
[   98.488172][ T4648] BTRFS info (device loop0): using free space tree
[   98.504436][ T4674] netlink: 'syz.1.128': attribute type 2 has an invalid length.
[   98.823680][    T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   99.022504][    T7] usb 5-1: Using ep0 maxpacket: 32
[   99.029826][    T7] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   99.080002][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.123284][    T7] usb 5-1: config 0 descriptor??
[   99.168530][ T4275] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   99.222024][ T4705] loop1: detected capacity change from 0 to 64
[   99.345051][    T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   99.393238][    T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   99.432165][ T4708] mmap: syz.3.137 (4708) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   99.438830][    T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   99.459527][    T7] usb 5-1: media controller created
[   99.494454][ T4287] Bluetooth: hci4: Invalid handle: 0xff00 > 0x0eff
[   99.495090][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   99.559846][    T7] az6027: usb out operation failed. (-71)
[   99.580141][    T7] az6027: usb out operation failed. (-71)
[   99.592198][    T7] stb0899_attach: Driver disabled by Kconfig
[   99.599110][    T7] az6027: no front-end attached
[   99.599110][    T7] 
[   99.615518][    T7] az6027: usb out operation failed. (-71)
[   99.621482][    T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   99.636130][    T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8
[   99.656710][ T4412] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (4412)
[   99.666600][    T7] dvb-usb: schedule remote query interval to 400 msecs.
[   99.690530][    T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   99.742251][    T7] usb 5-1: USB disconnect, device number 2
[   99.965780][    T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  100.337705][ T4733] loop1: detected capacity change from 0 to 64
[  100.369487][ T4736] loop4: detected capacity change from 0 to 128
[  100.456562][ T4733] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  100.485688][ T4733] overlayfs: failed to look up (29) for ino (-13)
[  100.780555][ T4741] loop4: detected capacity change from 0 to 64
[  100.937817][ T4717] loop3: detected capacity change from 0 to 32768
[  101.276006][ T4729] loop2: detected capacity change from 0 to 32768
[  102.191991][ T4765] loop3: detected capacity change from 0 to 2048
[  102.238492][ T4765] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.418111][ T4764] UDF-fs: error (device loop3): udf_truncate_tail_extent: Extent after EOF in inode 1367
[  102.879859][ T4780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.160'.
[  102.967829][ T4780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.160'.
[  103.015321][ T4783] loop3: detected capacity change from 0 to 512
[  103.071047][ T4783] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  103.214068][ T4783] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.162: invalid indirect mapped block 9 (level 0)
[  103.297125][ T4783] EXT4-fs (loop3): 1 truncate cleaned up
[  103.322752][ T4783] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  103.352260][   T26] audit: type=1800 audit(1779189554.222:4): pid=4783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.162" name="file1" dev="loop3" ino=15 res=0 errno=0
[  103.425151][ T4767] loop1: detected capacity change from 0 to 32768
[  103.619425][ T4767] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  103.656837][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  103.870092][ T4799] netlink: 44 bytes leftover after parsing attributes in process `syz.0.167'.
[  103.912510][ T4799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'.
[  104.135940][ T4271] ocfs2: Unmounting device (7,1) on (node local)
[  104.146010][ T4805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'.
[  104.586488][ T4815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.174'.
[  104.703586][ T4815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.174'.
[  104.738780][ T4822] loop2: detected capacity change from 0 to 512
[  105.081496][ T4827] loop4: detected capacity change from 0 to 256
[  105.191504][ T4827] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  105.889144][ T4845] loop1: detected capacity change from 0 to 512
[  105.934606][ T4845] EXT4-fs: Ignoring removed nobh option
[  106.006200][ T4845] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #11: comm syz.1.186: iget: bad extended attribute block 2304
[  106.007830][ T4845] EXT4-fs (loop1): Remounting filesystem read-only
[  106.007902][ T4845] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.186: couldn't read orphan inode 11 (err -117)
[  106.008269][ T4845] EXT4-fs (loop1): Remounting filesystem read-only
[  106.008286][ T4845] EXT4-fs (loop1): 1 truncate cleaned up
[  106.008315][ T4845] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  106.209605][ T4825] loop0: detected capacity change from 0 to 32768
[  106.232034][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  106.431101][ T4825] XFS (loop0): Mounting V5 Filesystem
[  106.604415][ T4825] XFS (loop0): Ending clean mount
[  106.709173][ T4863] loop3: detected capacity change from 0 to 2048
[  106.808207][ T4868] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  106.827062][ T4869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'.
[  106.894024][ T4870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'.
[  106.911563][ T4868] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  106.935478][ T4275] XFS (loop0): Unmounting Filesystem
[  106.980485][ T4868] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  107.034075][ T4868] Remounting filesystem read-only
[  107.226070][ T4281] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  107.768402][ T4892] loop4: detected capacity change from 0 to 512
[  107.861905][ T4890] loop0: detected capacity change from 0 to 4096
[  107.874811][ T4892] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  107.932587][ T4892] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  108.009093][ T4890] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  108.027817][ T4892] EXT4-fs (loop4): shut down requested (1)
[  108.076228][ T4890] ntfs3: loop0: Failed to load $Extend.
[  108.241173][ T4279] EXT4-fs (loop4): unmounting filesystem.
[  108.269276][   T26] audit: type=1800 audit(1779189559.142:5): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.192" name="file1" dev="loop0" ino=30 res=0 errno=0
[  108.627384][ T4908] loop0: detected capacity change from 0 to 512
[  108.632603][ T4910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'.
[  108.668895][ T4910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'.
[  108.703964][ T4907] loop4: detected capacity change from 0 to 2048
[  108.722858][ T4908] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  108.796594][ T4912] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  108.828160][ T4908] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.209: corrupted xattr entries
[  108.864499][ T4912] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  108.908493][ T4912] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  108.921798][ T4908] EXT4-fs (loop0): 1 truncate cleaned up
[  108.950850][ T4908] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  108.969139][ T4912] Remounting filesystem read-only
[  109.070318][ T4908] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  109.105969][ T4279] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  109.584403][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  109.621053][ T4932] loop8: detected capacity change from 0 to 128
[  110.259969][ T4944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.222'.
[  110.352233][ T4947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.222'.
[  110.557655][ T4955] loop3: detected capacity change from 0 to 1024
[  110.695343][ T4955] hfsplus: bad catalog entry type
[  110.848426][ T4297] hfsplus: b-tree write err: -5, ino 25
[  110.876507][ T4297] hfsplus: b-tree write err: -5, ino 4
[  110.900340][ T4297] hfsplus: b-tree write err: -5, ino 2
[  110.920006][ T4297] hfsplus: b-tree write err: -5, ino 26
[  110.928418][ T4272] Bluetooth: hci1: unexpected event 0x01 length: 29 > 1
[  111.137991][ T4963] loop3: detected capacity change from 0 to 2048
[  111.215155][ T4963] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  111.837533][ T4965] loop0: detected capacity change from 0 to 32768
[  112.715070][ T4991] loop8: detected capacity change from 0 to 128
[  112.964250][ T4996] loop3: detected capacity change from 0 to 2048
[  113.053113][ T4998] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.475931][ T5002] loop1: detected capacity change from 0 to 4096
[  113.499324][ T5002] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  113.572239][ T5002] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  114.709093][ T5030] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  115.306184][ T5045] loop2: detected capacity change from 0 to 1024
[  115.353569][ T5048] loop8: detected capacity change from 0 to 128
[  115.417238][   T26] audit: type=1800 audit(1779189566.292:6): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.272" name="file1" dev="loop2" ino=20 res=0 errno=0
[  115.585749][ T4297] hfsplus: found bad thread record in catalog
[  115.605399][ T5028] loop3: detected capacity change from 0 to 40427
[  115.690113][ T5028] F2FS-fs (loop3): invalid crc value
[  115.706587][ T5028] F2FS-fs (loop3): Found nat_bits in checkpoint
[  115.935196][ T5028] F2FS-fs (loop3): Start checkpoint disabled!
[  116.009625][ T5028] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  116.189843][ T5028] F2FS-fs (loop3): Unexpected flush for atomic writes: ino=10, npages=16
[  116.272903][ T5028] syz.3.257: attempt to access beyond end of device
[  116.272903][ T5028] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  116.677343][ T4327] kworker/u4:6: attempt to access beyond end of device
[  116.677343][ T4327] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  116.791997][ T5071] loop5: detected capacity change from 0 to 7
[  116.797246][ T5069] loop2: detected capacity change from 0 to 512
[  116.814060][ T5071] Dev loop5: unable to read RDB block 7
[  116.829792][ T5071]  loop5: unable to read partition table
[  116.842018][ T5071] loop5: partition table beyond EOD, truncated
[  116.853321][ T5071] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  117.155523][ T5069] EXT4-fs (loop2): 1 truncate cleaned up
[  117.164574][ T5069] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  117.195695][ T4327] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  117.214094][ T4327] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1
[  117.239312][ T5069] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.522566][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  117.600862][ T5086] Driver unsupported XDP return value 0 on prog  (id 17) dev N/A, expect packet loss!
[  118.084617][ T5099] loop4: detected capacity change from 0 to 1024
[  118.227009][ T4327] hfsplus: b-tree write err: -5, ino 25
[  118.237728][ T4327] hfsplus: b-tree write err: -5, ino 4
[  118.262061][ T4327] hfsplus: b-tree write err: -5, ino 2
[  118.997021][ T5106] loop3: detected capacity change from 0 to 32768
[  119.032029][ T5106] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.284 (5106)
[  119.072782][ T5106] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  119.089805][ T5106] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  119.099065][ T5106] BTRFS info (device loop3): enabling ssd optimizations
[  119.113043][ T5106] BTRFS info (device loop3): not using ssd optimizations
[  119.137862][ T5106] BTRFS info (device loop3): turning off barriers
[  119.154318][ T5106] BTRFS info (device loop3): using free space tree
[  119.371617][ T4281] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  119.396751][ T5126] loop4: detected capacity change from 0 to 128
[  119.539919][ T5126] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  119.654465][ T5126] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  119.820648][ T5140] loop8: detected capacity change from 0 to 128
[  119.910364][ T4734] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop3 scanned by udevd (4734)
[  120.048777][   T57] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  120.208612][ T5144] loop1: detected capacity change from 0 to 4096
[  120.300786][ T5151] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  120.318900][ T5144] NILFS (loop1): invalid segment: Checksum error in segment payload
[  120.377653][ T5144] NILFS (loop1): trying rollback from an earlier position
[  120.413766][ T5151] EXT4-fs (loop2): 1 orphan inode deleted
[  120.438940][ T5151] EXT4-fs (loop2): 1 truncate cleaned up
[  120.464573][ T5144] NILFS (loop1): recovery complete
[  120.474405][ T5151] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  120.528203][ T5155] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  120.882277][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  121.052984][ T5163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.299'.
[  121.287471][ T5171] program syz.4.303 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  121.531095][ T5183] futex_wake_op: syz.4.305 tries to shift op by -1; fix this program
[  121.652924][   T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  121.656824][ T4320] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  121.845297][   T32] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[  121.873263][   T32] usb 1-1: config 0 interface 0 has no altsetting 0
[  121.873602][ T4320] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  121.892056][   T32] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  121.916355][ T4320] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  121.918235][   T32] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  121.947292][ T4320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  121.966841][ T4320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  122.003240][   T32] usb 1-1: Product: syz
[  122.006773][ T4320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  122.007449][   T32] usb 1-1: Manufacturer: syz
[  122.054058][ T4320] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  122.057649][   T32] usb 1-1: SerialNumber: syz
[  122.080100][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  122.108883][ T4320] usb 4-1: Product: syz
[  122.109463][   T32] usb 1-1: config 0 descriptor??
[  122.122420][ T4320] usb 4-1: Manufacturer: syz
[  122.128545][ T5177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  122.140439][ T4320] cdc_wdm 4-1:1.0: skipping garbage
[  122.154957][   T32] usb 1-1: selecting invalid altsetting 0
[  122.159208][ T4320] cdc_wdm 4-1:1.0: skipping garbage
[  122.233604][ T4320] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  122.244073][ T4320] cdc_wdm 4-1:1.0: Unknown control protocol
[  122.269893][ T5201] set_capacity_and_notify: 1 callbacks suppressed
[  122.269910][ T5201] loop4: detected capacity change from 0 to 512
[  122.403583][ T5201] EXT4-fs: Ignoring removed bh option
[  122.477493][ T5201] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  122.498402][ T5201] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  122.502653][ T4316] usb 1-1: USB disconnect, device number 2
[  122.667052][ T4279] EXT4-fs (loop4): unmounting filesystem.
[  122.699195][ T4354] usb 4-1: USB disconnect, device number 3
[  124.267449][ T5255] netlink: 'syz.0.337': attribute type 4 has an invalid length.
[  124.481959][ T5240] loop3: detected capacity change from 0 to 32768
[  124.512884][ T4316] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  124.625858][ T5240] XFS (loop3): Mounting V5 Filesystem
[  124.702576][ T4316] usb 2-1: Using ep0 maxpacket: 32
[  124.714151][ T4316] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  124.722585][ T4316] usb 2-1: config 0 has no interface number 0
[  124.728859][ T4316] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  124.740928][ T4316] usb 2-1: config 0 interface 85 has no altsetting 0
[  124.750529][ T4316] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  124.760081][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.768456][ T4316] usb 2-1: Product: syz
[  124.773264][ T4316] usb 2-1: Manufacturer: syz
[  124.778338][ T4316] usb 2-1: SerialNumber: syz
[  124.787283][ T4316] usb 2-1: config 0 descriptor??
[  124.807593][ T5240] XFS (loop3): Ending clean mount
[  124.881065][ T5275] loop0: detected capacity change from 0 to 128
[  124.923041][ T4354] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  124.951037][ T5275] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  124.968748][ T5273] loop4: detected capacity change from 0 to 4096
[  124.979058][ T5275] hpfs: filesystem error: improperly stopped
[  124.989148][ T4281] XFS (loop3): Unmounting Filesystem
[  125.011220][ T5275] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  125.022938][ T5275] hpfs: You really don't want any checks? You are crazy...
[  125.064942][ T5275] hpfs: hpfs_map_sector(): read error
[  125.070427][ T5275] hpfs: code page support is disabled
[  125.112674][ T4354] usb 3-1: Using ep0 maxpacket: 32
[  125.127442][ T4354] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  125.152476][ T5273] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  125.176324][ T4354] usb 3-1: config 0 has no interface number 0
[  125.202012][ T4316] appletouch 2-1:0.85: Geyser mode initialized.
[  125.203463][ T5275] hpfs: hpfs_map_4sectors(): unaligned read
[  125.217252][   T26] audit: type=1800 audit(1779189576.092:7): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.342" name="file1" dev="loop4" ino=30 res=0 errno=0
[  125.221740][ T4354] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  125.249994][ T4316] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input9
[  125.268531][ T5275] hpfs: hpfs_map_4sectors(): unaligned read
[  125.282425][ T5275] hpfs: filesystem error: unable to find root dir
[  125.292669][ T4354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.300717][ T4354] usb 3-1: Product: syz
[  125.352472][ T4354] usb 3-1: Manufacturer: syz
[  125.365383][ T4354] usb 3-1: SerialNumber: syz
[  125.415313][    C0] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  125.416986][ T5275] hpfs: hpfs_map_4sectors(): unaligned read
[  125.434539][ T4354] usb 3-1: config 0 descriptor??
[  125.447225][ T4354] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  125.483177][ T5275] hpfs: hpfs_map_sector(): read error
[  125.644269][   T32] usb 2-1: USB disconnect, device number 3
[  125.644290][    C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  125.692261][ T4354] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  125.746540][ T4354] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  125.824158][   T32] appletouch 2-1:0.85: input: appletouch disconnected
[  126.131609][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  126.132570][ T4316] usb 3-1: USB disconnect, device number 3
[  126.201482][ T4316] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  126.267247][ T4316] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  126.310817][ T5290] loop1: detected capacity change from 0 to 256
[  126.315956][ T4316] quatech2 3-1:0.51: device disconnected
[  126.387725][ T5292] netlink: 40 bytes leftover after parsing attributes in process `syz.0.350'.
[  126.432507][ T5292] netlink: 2 bytes leftover after parsing attributes in process `syz.0.350'.
[  126.856075][ T5300] loop0: detected capacity change from 0 to 512
[  126.919840][ T5300] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  126.939231][ T5300] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  126.998498][ T5300] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.354: corrupted inode contents
[  127.071109][ T5300] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz.0.354: mark_inode_dirty error
[  127.165399][ T5300] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.354: corrupted inode contents
[  127.344441][ T5311] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.354: corrupted inode contents
[  127.416962][ T5311] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz.0.354: mark_inode_dirty error
[  127.451579][ T5311] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.354: corrupted inode contents
[  127.455331][ T5320] loop3: detected capacity change from 0 to 1024
[  127.488696][ T5311] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.354: mark_inode_dirty error
[  127.516939][ T5311] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.354: corrupted inode contents
[  127.579823][ T5311] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz.0.354: mark_inode_dirty error
[  127.641233][ T5312] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.354: corrupted inode contents
[  127.857252][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  128.392246][ T5340] loop4: detected capacity change from 0 to 512
[  128.831918][ T5349] loop3: detected capacity change from 0 to 256
[  128.917809][ T5352] loop2: detected capacity change from 0 to 256
[  128.935730][ T5349] FAT-fs (loop3): Directory bread(block 64) failed
[  128.968566][ T5352] exfat: Deprecated parameter 'utf8'
[  128.986659][ T5349] FAT-fs (loop3): Directory bread(block 65) failed
[  129.022509][ T5352] exfat: Deprecated parameter 'namecase'
[  129.028441][ T5352] exfat: Deprecated parameter 'namecase'
[  129.033020][ T5349] FAT-fs (loop3): Directory bread(block 66) failed
[  129.050010][ T5352] exfat: Deprecated parameter 'utf8'
[  129.051076][ T5340] EXT4-fs (loop4): Test dummy encryption mode enabled
[  129.073019][ T5349] FAT-fs (loop3): Directory bread(block 67) failed
[  129.079815][ T5349] FAT-fs (loop3): Directory bread(block 68) failed
[  129.083466][ T5340] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  129.112914][ T5349] FAT-fs (loop3): Directory bread(block 69) failed
[  129.143357][ T5349] FAT-fs (loop3): Directory bread(block 70) failed
[  129.143782][ T5340] EXT4-fs (loop4): ea_inode feature is not supported for Hurd
[  129.150272][ T5349] FAT-fs (loop3): Directory bread(block 71) failed
[  129.182352][ T5352] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  129.202108][ T5349] FAT-fs (loop3): Directory bread(block 72) failed
[  129.212641][ T5349] FAT-fs (loop3): Directory bread(block 73) failed
[  130.056582][ T5375] netem: incorrect ge model size
[  130.088964][ T5375] netem: change failed
[  130.172457][   T32] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  130.341886][ T5381] loop2: detected capacity change from 0 to 512
[  130.362836][   T32] usb 4-1: Using ep0 maxpacket: 16
[  130.379218][   T32] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  130.409165][   T32] usb 4-1: config 0 has no interface number 0
[  130.438920][   T32] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.458813][ T5363] loop4: detected capacity change from 0 to 32768
[  130.485261][   T32] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.531151][   T32] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  130.570495][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.627347][   T32] usb 4-1: config 0 descriptor??
[  130.641749][ T5363] XFS (loop4): Mounting V5 Filesystem
[  130.712754][ T5393] loop2: detected capacity change from 0 to 512
[  130.719922][ T5393] EXT4-fs: Ignoring removed nobh option
[  130.754152][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'.
[  130.873737][ T5393] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  130.883657][ T5393] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[  130.900333][ T5393] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #13: comm syz.2.386: inode has both inline data and extents flags
[  130.921940][ T5393] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.386: couldn't read orphan inode 13 (err -117)
[  130.980810][ T5363] XFS (loop4): Ending clean mount
[  131.034786][ T5393] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  131.063851][ T5363] XFS (loop4): Quotacheck needed: Please wait.
[  131.257159][   T32] uclogic 0003:28BD:0071.0003: pen parameters not found
[  131.268949][   T32] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring
[  131.281418][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  131.321876][ T5401] netlink: 540 bytes leftover after parsing attributes in process `syz.0.389'.
[  131.336452][ T5363] XFS (loop4): Quotacheck: Done.
[  131.462213][ T4354] usb 4-1: USB disconnect, device number 4
[  131.500242][ T4314] kernel write not supported for file /vcs (pid: 4314 comm: kworker/0:3)
[  131.590487][ T4279] XFS (loop4): Unmounting Filesystem
[  131.615875][ T5406] loop0: detected capacity change from 0 to 1024
[  132.907957][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.915468][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.222595][ T4354] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  133.317725][ T5294] Set syz1 is full, maxelem 65536 reached
[  133.412208][ T5437] loop4: detected capacity change from 0 to 256
[  133.422633][ T4354] usb 3-1: Using ep0 maxpacket: 32
[  133.430732][ T4354] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  133.472213][ T4354] usb 3-1: config 0 has no interface number 0
[  133.481369][ T5439] loop0: detected capacity change from 0 to 256
[  133.487556][ T4354] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  133.518604][ T4354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.522237][ T5437] FAT-fs (loop4): Directory bread(block 64) failed
[  133.546874][ T4354] usb 3-1: Product: syz
[  133.551504][ T5437] FAT-fs (loop4): Directory bread(block 65) failed
[  133.572210][ T4354] usb 3-1: Manufacturer: syz
[  133.587704][ T4354] usb 3-1: SerialNumber: syz
[  133.608763][ T5437] FAT-fs (loop4): Directory bread(block 66) failed
[  133.615174][ T4354] usb 3-1: config 0 descriptor??
[  133.646102][ T4354] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  133.649920][ T5439] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[  133.675080][ T5437] FAT-fs (loop4): Directory bread(block 67) failed
[  133.692963][ T5437] FAT-fs (loop4): Directory bread(block 68) failed
[  133.699911][ T5437] FAT-fs (loop4): Directory bread(block 69) failed
[  133.733494][ T5442] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  133.751009][ T5437] FAT-fs (loop4): Directory bread(block 70) failed
[  133.785367][ T5437] FAT-fs (loop4): Directory bread(block 71) failed
[  133.792068][ T5437] FAT-fs (loop4): Directory bread(block 72) failed
[  133.816138][ T5442] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[  133.823722][ T5437] FAT-fs (loop4): Directory bread(block 73) failed
[  133.848790][ T4354] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  133.872777][ T5442] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[  133.878883][ T4354] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  134.067017][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short
[  134.132490][ T4275] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[  134.267805][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  134.278165][ T4354] usb 3-1: USB disconnect, device number 4
[  134.320901][ T4354] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  134.352798][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'.
[  134.358103][ T4354] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  134.402070][ T4354] quatech2 3-1:0.51: device disconnected
[  134.461974][ T5455] device team_slave_0 entered promiscuous mode
[  134.493251][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  134.977019][ T5475] vxcan1: tx address claim with dest, not broadcast
[  135.009944][ T5469] loop4: detected capacity change from 0 to 8192
[  135.046632][ T5469] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  135.046686][ T5469] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  135.046777][ T5469] REISERFS (device loop4): using ordered data mode
[  135.046788][ T5469] reiserfs: using flush barriers
[  135.048042][ T5469] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  135.048511][ T5469] REISERFS (device loop4): checking transaction log (loop4)
[  135.049703][ T5469] REISERFS (device loop4): Using r5 hash to sort names
[  135.050007][ T5469] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  135.077289][ T5469] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[  135.083505][ T5469] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[  135.083575][ T5469] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[  135.112060][ T5469] REISERFS error (device loop4): vs-7000 search_by_entry_key: search_by_key returned item position == 0
[  135.222805][ T5469] REISERFS (device loop4): Remounting filesystem read-only
[  135.230082][ T5469] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error
[  135.503436][ T5484] capability: warning: `syz.0.425' uses 32-bit capabilities (legacy support in use)
[  135.552130][ T5484] program syz.0.425 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  135.867465][ T5495] syzkaller0: tun_chr_ioctl cmd 1074025677
[  135.877550][ T5495] syzkaller0: linktype set to 825
[  135.882636][ T5496] loop0: detected capacity change from 0 to 128
[  135.904480][ T5496] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  135.958428][ T5500] program syz.1.431 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  136.160782][   T11] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  136.257203][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'.
[  136.498752][ T5508] loop2: detected capacity change from 0 to 4096
[  136.690397][ T4317] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  136.816967][ T4280] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  136.850387][ T4280] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  136.892501][ T4317] usb 5-1: Using ep0 maxpacket: 8
[  136.899653][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.951191][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.971707][ T4317] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  137.026259][ T4317] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00
[  137.052749][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.113556][ T4317] usb 5-1: config 0 descriptor??
[  137.271731][ T5532] loop3: detected capacity change from 0 to 64
[  137.528496][ T4317] kye 0003:0458:4018.0004: unknown main item tag 0x0
[  137.542514][ T4317] kye 0003:0458:4018.0004: unknown main item tag 0x0
[  137.549418][ T4317] kye 0003:0458:4018.0004: item fetching failed at offset 3/5
[  137.573146][ T4317] kye 0003:0458:4018.0004: parse failed
[  137.578804][ T4317] kye: probe of 0003:0458:4018.0004 failed with error -22
[  137.611210][ T5536] loop0: detected capacity change from 0 to 512
[  137.732288][ T4317] usb 5-1: USB disconnect, device number 3
[  137.864947][ T5538] loop3: detected capacity change from 0 to 512
[  137.942008][ T5538] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.449: iget: bad i_size value: 38620345925642
[  138.071034][ T5538] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.449: couldn't read orphan inode 15 (err -117)
[  138.103848][ T5538] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  138.155792][ T5538] EXT4-fs (loop3): shut down requested (0)
[  138.280683][ T5546] user requested TSC rate below hardware speed
[  138.301655][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  138.671915][ T5569] loop0: detected capacity change from 0 to 64
[  138.714407][ T5569] UBIFS error (pid: 5569): cannot open "c:::", error -22
[  138.743676][  T951] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  138.867013][ T5575] loop3: detected capacity change from 0 to 512
[  138.903830][ T5575] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.464: bg 0: block 393: padding at end of block bitmap is not set
[  138.952825][  T951] usb 3-1: Using ep0 maxpacket: 32
[  138.965475][  T951] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  138.976141][ T5575] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  138.988060][ T5575] EXT4-fs (loop3): 2 truncates cleaned up
[  138.994926][ T5575] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  139.011576][   T26] audit: type=1800 audit(1779189589.882:8): pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.464" name="file1" dev="loop3" ino=15 res=0 errno=0
[  139.044604][  T951] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  139.064728][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  139.073322][  T951] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  139.084888][  T951] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  139.099130][  T951] usb 3-1: config 0 interface 0 has no altsetting 0
[  139.122506][ T4317] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  139.134600][  T951] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  139.152759][  T951] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  139.161262][  T951] usb 3-1: Product: syz
[  139.192739][  T951] usb 3-1: Manufacturer: syz
[  139.210206][  T951] usb 3-1: SerialNumber: syz
[  139.227611][  T951] usb 3-1: config 0 descriptor??
[  139.255571][  T951] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  139.294740][  T951] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  139.334985][ T4317] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  139.375011][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.397732][ T4317] usb 2-1: Product: syz
[  139.402061][ T4317] usb 2-1: Manufacturer: syz
[  139.433807][ T4317] usb 2-1: SerialNumber: syz
[  139.552686][ T5559] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  139.557360][ T4314] usb 3-1: USB disconnect, device number 5
[  139.560142][    C1] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  139.622032][ T4314] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  139.772169][ T4317] rtl8150 2-1:1.0: couldn't reset the device
[  139.782826][ T4317] rtl8150: probe of 2-1:1.0 failed with error -5
[  139.811796][ T4317] usb 2-1: USB disconnect, device number 4
[  139.906389][ T5598] netlink: 32 bytes leftover after parsing attributes in process `syz.3.474'.
[  139.916485][ T5598] Zero length message leads to an empty skb
[  140.885087][ T5600] loop0: detected capacity change from 0 to 32768
[  141.000361][ T5622] loop2: detected capacity change from 0 to 4096
[  141.137820][ T5628] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.187871][ T5630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'.
[  141.240995][   T26] audit: type=1800 audit(1779189592.112:9): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.485" name="bus" dev="loop2" ino=18 res=0 errno=0
[  141.328933][ T5636] netlink: 'syz.0.490': attribute type 11 has an invalid length.
[  141.362498][ T5636] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.490'.
[  141.392636][ T4320] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  141.407784][ T5636] netlink: 'syz.0.490': attribute type 11 has an invalid length.
[  141.450637][ T5636] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.490'.
[  141.492531][ T5635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.624450][ T4320] usb 2-1: config 0 has no interfaces?
[  141.630059][ T4320] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  141.670877][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.701813][ T4320] usb 2-1: config 0 descriptor??
[  141.817597][ T5640] loop3: detected capacity change from 0 to 8192
[  141.870435][ T5640] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  141.944094][ T5640] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  141.967118][ T4354] usb 2-1: USB disconnect, device number 5
[  141.982974][ T5640] REISERFS (device loop3): using ordered data mode
[  141.999704][ T5640] reiserfs: using flush barriers
[  142.020001][ T5640] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  142.058420][ T5640] REISERFS (device loop3): checking transaction log (loop3)
[  142.077484][ T5640] REISERFS (device loop3): Using r5 hash to sort names
[  142.102188][ T5640] REISERFS (device loop3): using 3.5.x disk format
[  142.125883][ T5640] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  142.716645][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'.
[  143.332499][ T4354] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  143.516317][ T5652] loop4: detected capacity change from 0 to 32768
[  143.523495][ T4354] usb 4-1: Using ep0 maxpacket: 16
[  143.537112][ T4354] usb 4-1: unable to get BOS descriptor or descriptor too short
[  143.561679][ T4354] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.591626][ T4354] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  143.629506][ T4354] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  143.662429][ T4354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.682786][ T4354] usb 4-1: Product: syz
[  143.687492][ T4354] usb 4-1: Manufacturer: syz
[  143.694635][ T4354] usb 4-1: SerialNumber: syz
[  143.728613][ T5652] ialloc: diAlloc returned -5!
[  143.794718][ T5671] ialloc: diAlloc returned -5!
[  143.961972][ T4354] usb 4-1: unit 14 not found!
[  144.030924][ T4354] usb 4-1: USB disconnect, device number 5
[  144.304688][ T4407] udevd[4407]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  144.621275][ T5690] netlink: 'syz.0.511': attribute type 11 has an invalid length.
[  144.662678][ T5690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'.
[  145.300841][ T5712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.522'.
[  145.345953][ T5714] program syz.2.523 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  145.675599][ T5724] loop0: detected capacity change from 0 to 128
[  145.959984][ T5693] loop4: detected capacity change from 0 to 32768
[  146.128556][ T5693] XFS (loop4): Mounting V5 Filesystem
[  146.332011][ T5693] XFS (loop4): Ending clean mount
[  146.509074][ T4279] XFS (loop4): Unmounting Filesystem
[  146.830183][ T5751] loop1: detected capacity change from 0 to 4096
[  146.922623][ T5751] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  146.995617][   T26] audit: type=1800 audit(1779189597.872:10): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.536" name="file1" dev="loop1" ino=30 res=0 errno=0
[  147.016296][    C1] vkms_vblank_simulate: vblank timer overrun
[  147.576092][ T5733] loop3: detected capacity change from 0 to 40427
[  147.612461][ T5733] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  147.638255][ T5733] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  147.672530][ T4354] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  147.698897][ T5733] F2FS-fs (loop3): invalid crc value
[  147.750965][ T5733] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  147.872402][ T4354] usb 2-1: Using ep0 maxpacket: 16
[  147.879533][ T4354] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1080, setting to 1024
[  147.924723][ T4354] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  147.924835][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'.
[  147.956118][ T5733] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  147.966244][ T5733] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  148.002914][ T4354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.005474][ T5733] F2FS-fs (loop3): Corrupted max_depth of 3: 513
[  148.021361][ T5757] loop2: detected capacity change from 0 to 32768
[  148.028414][ T4354] usb 2-1: Product: syz
[  148.038231][ T4354] usb 2-1: Manufacturer: syz
[  148.058450][ T4354] usb 2-1: SerialNumber: syz
[  148.067840][ T5757] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.541 (5757)
[  148.158202][ T5757] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  148.199686][ T5757] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  148.216276][ T5757] BTRFS info (device loop2): metadata ratio 0
[  148.227856][ T5757] BTRFS info (device loop2): using free space tree
[  148.309224][ T4354] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  148.329383][ T4354] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  148.345846][ T4354] usb 2-1: unit 5 not found!
[  148.374924][ T4354] usb 2-1: USB disconnect, device number 6
[  148.586690][ T5757] BTRFS info (device loop2): enabling ssd optimizations
[  148.594348][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.834115][ T4314] kernel read not supported for file /dsp1 (pid: 4314 comm: kworker/0:3)
[  149.113008][ T5809] netlink: 'syz.1.564': attribute type 32 has an invalid length.
[  149.132467][ T5809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'.
[  149.141575][ T5809] (unnamed net_device) (uninitialized): option coupled_control: invalid value (20)
[  149.176974][ T4280] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  149.227208][  T951] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  149.432606][  T951] usb 5-1: Using ep0 maxpacket: 32
[  149.439948][  T951] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  149.487442][  T951] usb 5-1: config 0 has no interface number 0
[  149.525320][  T951] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  149.538153][ T5815] loop1: detected capacity change from 0 to 512
[  149.572682][  T951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.591037][ T5815] EXT4-fs: Ignoring removed nobh option
[  149.622848][  T951] usb 5-1: Product: syz
[  149.627183][  T951] usb 5-1: Manufacturer: syz
[  149.631861][  T951] usb 5-1: SerialNumber: syz
[  149.673050][ T5815] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  149.703776][  T951] usb 5-1: config 0 descriptor??
[  149.716172][  T951] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  149.727267][ T5815] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  149.765449][ T5815] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #13: comm syz.1.556: inode has both inline data and extents flags
[  149.809862][ T5815] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.556: couldn't read orphan inode 13 (err -117)
[  149.912818][ T5815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  149.921900][  T951] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  149.984878][  T951] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  150.226359][ T5827] loop2: detected capacity change from 0 to 4096
[  150.255144][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  150.300528][ T5827] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  150.386985][   T26] audit: type=1800 audit(1779189601.262:11): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.554" name="file1" dev="loop2" ino=30 res=0 errno=0
[  150.397188][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  150.416398][    C1] vkms_vblank_simulate: vblank timer overrun
[  150.459347][ T4365] usb 5-1: USB disconnect, device number 4
[  150.488464][ T4365] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  150.558315][ T4365] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  150.653306][ T4365] quatech2 5-1:0.51: device disconnected
[  150.946010][ T5844] loop0: detected capacity change from 0 to 64
[  151.165637][ T5842] loop1: detected capacity change from 0 to 8192
[  151.246651][ T5842] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  151.391909][ T5842] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  151.412502][ T5842] REISERFS (device loop1): using ordered data mode
[  151.428203][ T5842] reiserfs: using flush barriers
[  151.444226][ T5842] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  151.478742][ T5842] REISERFS (device loop1): checking transaction log (loop1)
[  151.488193][ T5855] netlink: 27 bytes leftover after parsing attributes in process `syz.0.571'.
[  151.652461][ T5135] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  151.724370][ T5842] REISERFS (device loop1): Using r5 hash to sort names
[  151.741659][ T5842] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  151.884383][ T5135] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.902439][ T5135] usb 5-1: config 0 interface 0 has no altsetting 0
[  151.929486][ T5135] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53
[  151.959140][ T5135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.999653][ T5135] usb 5-1: config 0 descriptor??
[  152.041081][ T5135] hub 5-1:0.0: bad descriptor, ignoring hub
[  152.052352][ T5135] hub: probe of 5-1:0.0 failed with error -5
[  152.061742][ T5135] option 5-1:0.0: GSM modem (1-port) converter detected
[  152.100824][ T5859] reiserfs: enabling write barrier flush mode
[  152.145017][ T5840] loop3: detected capacity change from 0 to 40427
[  152.178856][ T5840] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff
[  152.218996][ T5840] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4
[  152.275099][ T5840] F2FS-fs (loop3): invalid crc value
[  152.301231][ T5863] netlink: 277 bytes leftover after parsing attributes in process `syz.2.577'.
[  152.314330][ T5840] F2FS-fs (loop3): Found nat_bits in checkpoint
[  152.372751][  T951] usb 5-1: USB disconnect, device number 5
[  152.386506][  T951] option 5-1:0.0: device disconnected
[  152.520255][ T5840] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  152.573924][ T5869] loop2: detected capacity change from 0 to 512
[  152.591687][   T26] audit: type=1800 audit(1779189603.462:12): pid=5840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.566" name="file1" dev="loop3" ino=10 res=0 errno=0
[  152.593279][ T5871] netlink: 'syz.1.578': attribute type 4 has an invalid length.
[  152.635160][ T5869] EXT4-fs (loop2): Test dummy encryption mode enabled
[  152.642233][ T5869] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  152.681789][ T5840] syz.3.566: attempt to access beyond end of device
[  152.681789][ T5840] loop3: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  152.715165][ T5869] EXT4-fs (loop2): 1 truncate cleaned up
[  152.720932][ T5869] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  152.863773][ T4281] syz-executor: attempt to access beyond end of device
[  152.863773][ T4281] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  152.912488][ T5873] loop0: detected capacity change from 0 to 4096
[  152.979773][ T5873] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  153.060899][   T26] audit: type=1800 audit(1779189603.932:13): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.580" name="file1" dev="loop0" ino=30 res=0 errno=0
[  153.111041][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  153.462870][  T951] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  153.624729][ T4272] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  153.635205][ T4272] CPU: 0 PID: 4272 Comm: kworker/u5:1 Not tainted syzkaller #0
[  153.642807][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  153.652907][ T4272] Workqueue: hci2 hci_rx_work
[  153.657643][ T4272] Call Trace:
[  153.660953][ T4272]  <TASK>
[  153.662541][  T951] usb 2-1: Using ep0 maxpacket: 32
[  153.663898][ T4272]  dump_stack_lvl+0x188/0x24e
[  153.674006][ T4272]  ? show_regs_print_info+0x12/0x12
[  153.679268][ T4272]  ? load_image+0x400/0x400
[  153.684532][ T4272]  sysfs_create_dir_ns+0x26a/0x290
[  153.689701][ T4272]  ? sysfs_warn_dup+0xa0/0xa0
[  153.690407][  T951] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  153.694407][ T4272]  ? do_raw_spin_unlock+0x11d/0x230
[  153.694439][ T4272]  kobject_add_internal+0x61c/0xcc0
[  153.694473][ T4272]  kobject_add+0x160/0x230
[  153.694501][ T4272]  ? kobject_init+0x1d0/0x1d0
[  153.694529][ T4272]  ? klist_children_get+0x50/0x50
[  153.727314][ T4272]  ? get_device_parent+0x121/0x3f0
[  153.732487][ T4272]  device_add+0x483/0xfb0
[  153.736869][ T4272]  ? kmem_cache_free+0xf7/0x290
[  153.741771][ T4272]  hci_conn_add_sysfs+0xd1/0x1e0
[  153.746761][ T4272]  le_conn_complete_evt+0x1062/0x1670
[  153.752196][ T4272]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  153.758591][ T4272]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  153.764281][ T4272]  ? skb_pull_data+0xf7/0x200
[  153.769010][ T4272]  hci_le_conn_complete_evt+0x183/0x440
[  153.772459][  T951] usb 2-1: config 0 has no interface number 0
[  153.774584][ T4272]  ? hci_remote_host_features_evt+0x270/0x270
[  153.774621][ T4272]  hci_event_packet+0x7b9/0x1280
[  153.774659][ T4272]  ? bis_list+0x280/0x280
[  153.774684][ T4272]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  153.774714][ T4272]  ? kcov_remote_start+0x4c7/0x7e0
[  153.774739][ T4272]  ? patch_conexant_auto+0x1260/0x1650
[  153.774771][ T4272]  ? hci_send_to_monitor+0x9c/0x4a0
[  153.774802][ T4272]  hci_rx_work+0x3eb/0xd40
[  153.774827][ T4272]  ? _raw_spin_unlock+0x40/0x40
[  153.774860][ T4272]  ? process_one_work+0x7b0/0x1160
[  153.774883][ T4272]  process_one_work+0x8a2/0x1160
[  153.774924][ T4272]  ? worker_detach_from_pool+0x240/0x240
[  153.774954][ T4272]  ? _raw_spin_lock_irq+0xb7/0xf0
[  153.774976][ T4272]  ? _raw_spin_lock_irqsave+0x100/0x100
[  153.774999][ T4272]  ? kthread_data+0x4b/0xc0
[  153.775033][ T4272]  worker_thread+0xaa2/0x1270
[  153.834477][  T951] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  153.837642][ T4272]  kthread+0x29d/0x330
[  153.874785][  T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.876509][ T4272]  ? worker_clr_flags+0x1a0/0x1a0
[  153.876542][ T4272]  ? kthread_blkcg+0xd0/0xd0
[  153.876562][ T4272]  ret_from_fork+0x1f/0x30
[  153.876606][ T4272]  </TASK>
[  153.878367][ T4272] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  153.922392][ T4272] Bluetooth: hci2: failed to register connection device
[  153.935807][ T5893] program syz.3.582 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  153.936272][  T951] usb 2-1: Product: syz
[  153.971890][  T951] usb 2-1: Manufacturer: syz
[  153.990540][  T951] usb 2-1: SerialNumber: syz
[  154.032034][  T951] usb 2-1: config 0 descriptor??
[  154.067688][  T951] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  154.202479][ T4365] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  154.236405][ T5896] loop3: detected capacity change from 0 to 8192
[  154.266847][  T951] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  154.280954][ T5896] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  154.286959][  T951] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  154.354177][ T5896] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  154.364654][ T5896] REISERFS (device loop3): using ordered data mode
[  154.371343][ T5896] reiserfs: using flush barriers
[  154.383459][ T5896] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  154.403222][ T5896] REISERFS (device loop3): checking transaction log (loop3)
[  154.411781][ T4365] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  154.431385][ T4365] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  154.452462][ T4365] usb 1-1: config 220 has no interface number 2
[  154.469014][ T4365] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  154.532428][ T4365] usb 1-1: config 220 interface 0 has no altsetting 0
[  154.539928][ T4365] usb 1-1: config 220 interface 76 has no altsetting 0
[  154.600818][ T4365] usb 1-1: config 220 interface 1 has no altsetting 0
[  154.636980][ T4365] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  154.671313][ T4365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.690349][ T4365] usb 1-1: Product: syz
[  154.692925][ T5896] REISERFS (device loop3): Using r5 hash to sort names
[  154.722720][ T4365] usb 1-1: Manufacturer: syz
[  154.727452][ T4365] usb 1-1: SerialNumber: syz
[  154.767795][ T5896] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  154.890027][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  154.901104][  T951] usb 2-1: USB disconnect, device number 7
[  154.915244][  T951] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  154.948451][  T951] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  154.982938][ T4365] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  155.001570][  T951] quatech2 2-1:0.51: device disconnected
[  155.009251][ T4365] usb 1-1: No valid video chain found.
[  155.017057][ T4365] usb 1-1: selecting invalid altsetting 0
[  155.074894][ T4365] usb 1-1: selecting invalid altsetting 0
[  155.093595][ T4365] usbtest: probe of 1-1:220.1 failed with error -22
[  155.106101][ T4365] usb 1-1: USB disconnect, device number 3
[  155.142269][ T5908] reiserfs: enabling write barrier flush mode
[  156.344953][ T5926] loop2: detected capacity change from 0 to 64
[  156.413070][ T5926] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  156.563736][ T5927] loop3: detected capacity change from 0 to 4096
[  156.563854][ T5932] program syz.4.601 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.648497][ T5927] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  156.691152][   T26] audit: type=1800 audit(1779189607.562:14): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.597" name="file1" dev="loop3" ino=30 res=0 errno=0
[  156.773301][ T5934] loop2: detected capacity change from 0 to 256
[  156.828089][ T5937] netlink: 'syz.4.605': attribute type 2 has an invalid length.
[  156.844255][ T5934] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d)
[  157.445317][ T5942] loop4: detected capacity change from 0 to 8192
[  157.497564][ T5942] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  157.675135][ T5942] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  157.696567][ T5942] REISERFS (device loop4): using ordered data mode
[  157.725528][ T5942] reiserfs: using flush barriers
[  157.745875][ T5942] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  157.823120][ T5942] REISERFS (device loop4): checking transaction log (loop4)
[  157.940530][ T5958] loop0: detected capacity change from 0 to 256
[  158.049540][ T5958] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  158.139261][ T5960] loop2: detected capacity change from 0 to 512
[  158.151135][ T5942] REISERFS (device loop4): Using r5 hash to sort names
[  158.175480][ T5960] EXT4-fs: Ignoring removed nobh option
[  158.185424][ T5942] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  158.282832][ T5960] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #11: comm syz.2.616: iget: bad extended attribute block 2304
[  158.335676][ T5960] EXT4-fs (loop2): Remounting filesystem read-only
[  158.347334][ T5960] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.616: couldn't read orphan inode 11 (err -117)
[  158.433256][ T5960] EXT4-fs (loop2): Remounting filesystem read-only
[  158.460275][ T5960] EXT4-fs (loop2): 1 truncate cleaned up
[  158.487812][ T5960] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  158.537254][ T5966] loop3: detected capacity change from 0 to 1024
[  158.566487][ T5966] EXT4-fs: Ignoring removed orlov option
[  158.636876][ T5967] reiserfs: enabling write barrier flush mode
[  158.660332][ T5966] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  158.683908][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  158.728565][ T5951] loop1: detected capacity change from 0 to 32768
[  158.742820][  T951] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  158.781630][ T5951] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.612 (5951)
[  158.813582][ T5951] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  158.824356][ T5951] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  158.834431][ T5951] BTRFS info (device loop1): using free space tree
[  158.916358][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  158.934881][  T951] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  159.000792][  T951] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 255, setting to 64
[  159.029048][  T951] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  159.052864][  T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.066731][ T5951] BTRFS info (device loop1): enabling ssd optimizations
[  159.135141][ T5965] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  159.345885][ T5995] loop2: detected capacity change from 0 to 512
[  159.418589][ T5995] EXT4-fs (loop2): 1 truncate cleaned up
[  159.493445][ T5995] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  159.540452][ T5951] BTRFS info (device loop1): balance: start 
[  159.548090][   T26] audit: type=1800 audit(1779189610.422:15): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.623" name="file1" dev="loop2" ino=13 res=0 errno=0
[  159.568611][    C1] vkms_vblank_simulate: vblank timer overrun
[  159.581700][ T5995] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.623: bg 0: block 465: padding at end of block bitmap is not set
[  159.613667][ T5951] BTRFS info (device loop1): balance: ended with status: 0
[  159.658515][ T5995] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28
[  159.668731][ T5996] loop4: detected capacity change from 0 to 4096
[  159.717615][ T5995] EXT4-fs (loop2): This should not happen!! Data will be lost
[  159.717615][ T5995] 
[  159.761964][ T5995] EXT4-fs (loop2): Total free blocks count 0
[  159.767960][ T5996] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  159.777362][ T4271] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  159.786440][   T26] audit: type=1800 audit(1779189610.652:16): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.621" name="file1" dev="loop4" ino=30 res=0 errno=0
[  159.851931][ T5995] EXT4-fs (loop2): Free/Dirty block details
[  159.890392][ T5995] EXT4-fs (loop2): free_blocks=0
[  159.938850][ T5995] EXT4-fs (loop2): dirty_blocks=10
[  160.019042][ T5995] EXT4-fs (loop2): Block reservation details
[  160.051047][ T5995] EXT4-fs (loop2): i_reserved_data_blocks=10
[  160.188006][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  160.201755][  T951] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[  160.214869][  T951] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input10
[  160.244930][  T951] usb 1-1: USB disconnect, device number 4
[  160.250882][    C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  161.051165][ T6033] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  161.082953][ T6033] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  161.093425][ T6033] REISERFS (device loop3): using ordered data mode
[  161.110863][ T6033] reiserfs: using flush barriers
[  161.118455][ T6033] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  161.142174][ T6033] REISERFS (device loop3): checking transaction log (loop3)
[  161.155873][ T6033] REISERFS (device loop3): Using rupasov hash to sort names
[  161.172042][ T6033] REISERFS (device loop3): using 3.5.x disk format
[  161.212783][ T5822] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  161.222561][   T32] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  161.246397][ T6033] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  161.265654][ T6033] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  161.303318][ T6033] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  161.353423][ T6033] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  161.410172][ T5822] usb 2-1: Using ep0 maxpacket: 8
[  161.425553][ T5822] usb 2-1: unable to get BOS descriptor or descriptor too short
[  161.428230][   T32] usb 3-1: unable to get BOS descriptor or descriptor too short
[  161.443645][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.449035][   T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.472469][   T32] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 142, changing to 7
[  161.472552][ T5822] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  161.489436][   T32] usb 3-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30
[  161.502586][ T5822] usb 2-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30
[  161.516094][ T5822] usb 2-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  161.536703][   T32] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  161.573773][   T32] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  161.580789][ T5822] usb 2-1: config 1 interface 1 has no altsetting 0
[  161.594467][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.604759][ T6054] set_capacity_and_notify: 1 callbacks suppressed
[  161.604776][ T6054] loop0: detected capacity change from 0 to 512
[  161.618596][   T32] usb 3-1: Product: syz
[  161.620587][ T5822] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  161.627053][   T32] usb 3-1: Manufacturer: syz
[  161.638630][   T32] usb 3-1: SerialNumber: syz
[  161.652439][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.663115][ T5822] usb 2-1: Product: syz
[  161.667338][ T5822] usb 2-1: Manufacturer: syz
[  161.672247][ T5822] usb 2-1: SerialNumber: syz
[  161.879610][   T32] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  161.904336][   T32] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  161.929905][ T5822] usb 2-1: selecting invalid altsetting 0
[  161.998945][   T32] usb 3-1: USB disconnect, device number 6
[  162.138995][ T5822] usb 2-1: 0:2 : does not exist
[  162.180684][ T5822] usb 2-1: USB disconnect, device number 8
[  162.202078][ T6060] netlink: 44 bytes leftover after parsing attributes in process `syz.3.644'.
[  162.222478][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'.
[  162.233520][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  162.386983][ T6052] loop4: detected capacity change from 0 to 32768
[  162.392399][ T5135] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  162.456945][ T4734] udevd[4734]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  162.592567][ T5135] usb 1-1: Using ep0 maxpacket: 32
[  162.600320][ T5135] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  162.632631][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.657579][ T5135] usb 1-1: config 0 descriptor??
[  162.673116][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'.
[  162.897373][ T5135] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  162.951979][ T5135] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  162.983453][ T5135] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  163.010449][ T5135] usb 1-1: media controller created
[  163.066105][ T6076] loop2: detected capacity change from 0 to 1024
[  163.078080][ T5135] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  163.132043][ T6076] hfsplus: bad catalog entry type
[  163.139211][ T5135] az6027: usb out operation failed. (-71)
[  163.153801][ T5135] az6027: usb out operation failed. (-71)
[  163.160739][ T5135] stb0899_attach: Driver disabled by Kconfig
[  163.186050][ T5135] az6027: no front-end attached
[  163.186050][ T5135] 
[  163.224310][ T5135] az6027: usb out operation failed. (-71)
[  163.230123][ T5135] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  163.262014][   T11] hfsplus: b-tree write err: -5, ino 25
[  163.272193][   T11] hfsplus: b-tree write err: -5, ino 4
[  163.288095][ T5135] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11
[  163.301188][   T11] hfsplus: b-tree write err: -5, ino 2
[  163.318673][   T11] hfsplus: b-tree write err: -5, ino 26
[  163.336727][ T5135] dvb-usb: schedule remote query interval to 400 msecs.
[  163.360190][ T5135] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  163.398873][ T5135] usb 1-1: USB disconnect, device number 5
[  163.482406][ T5823] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  163.501216][ T5135] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  163.662507][ T5823] usb 5-1: Using ep0 maxpacket: 32
[  163.669518][ T5823] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  163.677791][ T5823] usb 5-1: config 0 has no interface number 0
[  163.686155][ T5823] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  163.695525][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.703609][ T5823] usb 5-1: Product: syz
[  163.709425][ T5823] usb 5-1: Manufacturer: syz
[  163.714746][ T5823] usb 5-1: SerialNumber: syz
[  163.741962][ T5823] usb 5-1: config 0 descriptor??
[  163.758392][ T5823] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  163.884206][ T6090] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  163.915557][ T6090] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  163.959761][ T5823] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  163.999083][ T5823] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  164.092855][ T6089] loop0: detected capacity change from 0 to 8192
[  164.142750][ T6089] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  164.156486][ T6089] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  164.166372][ T6089] REISERFS (device loop0): using ordered data mode
[  164.182478][ T6089] reiserfs: using flush barriers
[  164.197029][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short
[  164.206532][ T6089] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  164.224735][ T6089] REISERFS (device loop0): checking transaction log (loop0)
[  164.436978][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  164.446702][ T5823] usb 5-1: USB disconnect, device number 6
[  164.469155][ T5823] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  164.519480][ T5823] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  164.533917][ T6089] REISERFS (device loop0): Using r5 hash to sort names
[  164.552014][ T6089] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  164.562534][ T5823] quatech2 5-1:0.51: device disconnected
[  164.823738][ T6106] reiserfs: enabling write barrier flush mode
[  164.896179][ T6105] loop1: detected capacity change from 0 to 4096
[  164.932646][ T6105] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  166.066889][ T6115] loop4: detected capacity change from 0 to 32768
[  166.298883][ T6133] loop3: detected capacity change from 0 to 1024
[  166.400964][ T6117] loop0: detected capacity change from 0 to 32768
[  166.425888][ T6133] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  166.592124][ T6117] XFS (loop0): Mounting V5 Filesystem
[  166.603685][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  166.755763][ T6117] XFS (loop0): Ending clean mount
[  167.066673][ T6151] loop3: detected capacity change from 0 to 4096
[  167.089716][ T4275] XFS (loop0): Unmounting Filesystem
[  167.184231][ T6151] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  167.260333][ T6151] ntfs3: loop3: Failed to load $Extend.
[  167.431551][   T26] audit: type=1800 audit(1779189618.302:17): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.682" name="file1" dev="loop3" ino=30 res=0 errno=0
[  167.629488][ T6135] loop1: detected capacity change from 0 to 32768
[  168.402556][ T6172] loop4: detected capacity change from 0 to 32768
[  168.591764][ T6172] XFS (loop4): Mounting V5 Filesystem
[  168.674393][ T6172] XFS (loop4): Ending clean mount
[  168.688706][ T6172] XFS (loop4): Quotacheck needed: Please wait.
[  168.834208][ T6172] XFS (loop4): Quotacheck: Done.
[  168.845636][ T6172] XFS (loop4): Unmounting Filesystem
[  168.872428][ T5822] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  168.986876][ T6195] loop1: detected capacity change from 0 to 16
[  169.059618][ T6195] erofs: (device loop1): mounted with root inode @ nid 36.
[  169.092731][ T5822] usb 3-1: Using ep0 maxpacket: 16
[  169.100098][ T5822] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  169.132412][ T5822] usb 3-1: config 0 has no interface number 0
[  169.160982][ T5822] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.264927][ T5822] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.312771][ T5822] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  169.340289][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.394573][ T5822] usb 3-1: config 0 descriptor??
[  169.538991][ T6203] netlink: 'syz.0.702': attribute type 18 has an invalid length.
[  169.807940][ T6211] loop1: detected capacity change from 0 to 512
[  169.871019][ T6211] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  169.959950][ T6194] loop3: detected capacity change from 0 to 32768
[  169.966718][ T6211] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.707: invalid indirect mapped block 9 (level 0)
[  169.996604][ T6211] EXT4-fs (loop1): 1 truncate cleaned up
[  170.010962][ T6211] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  170.028134][ T5822] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0005/input/input12
[  170.052795][ T6194] JBD2: Ignoring recovery information on journal
[  170.109450][ T6194] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  170.159620][   T26] audit: type=1800 audit(1779189621.032:18): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.707" name="file1" dev="loop1" ino=15 res=0 errno=0
[  170.187260][ T5822] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0005/input/input13
[  170.222907][ T6194] (syz.3.699,6194,1):ocfs2_verify_group_and_input:422 ERROR: input chain exceeds the limit.
[  170.279411][ T6194] (syz.3.699,6194,1):ocfs2_group_add:503 ERROR: status = -22
[  170.291442][ T5822] uclogic 0003:28BD:0071.0005: input,hiddev0,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1
[  170.345868][ T5822] usb 3-1: USB disconnect, device number 7
[  170.414556][ T4281] ocfs2: Unmounting device (7,3) on (node local)
[  170.672209][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  170.717126][ T6221] fido_id[6221]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  170.766713][ T6227] loop5: detected capacity change from 0 to 7
[  170.825378][ T6227] Dev loop5: unable to read RDB block 7
[  170.831022][ T6227]  loop5: unable to read partition table
[  170.876815][ T6227] loop5: partition table beyond EOD, truncated
[  170.892753][ T6227] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  171.492756][ T6013] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  171.692471][ T6013] usb 4-1: Using ep0 maxpacket: 32
[  171.702606][ T6013] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  171.723022][ T6013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.754530][ T6013] usb 4-1: config 0 descriptor??
[  171.992897][ T6013] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  172.023844][ T6013] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  172.046431][ T6013] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  172.074932][ T6013] usb 4-1: media controller created
[  172.108947][ T6013] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  172.221977][ T6013] az6027: usb out operation failed. (-71)
[  172.244394][ T6013] az6027: usb out operation failed. (-71)
[  172.262270][ T6013] stb0899_attach: Driver disabled by Kconfig
[  172.278279][ T6013] az6027: no front-end attached
[  172.278279][ T6013] 
[  172.296560][ T6013] az6027: usb out operation failed. (-71)
[  172.308284][ T6013] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  172.342878][ T6013] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14
[  172.376734][ T6013] dvb-usb: schedule remote query interval to 400 msecs.
[  172.397907][ T6013] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  172.422705][ T6013] usb 4-1: USB disconnect, device number 6
[  172.452975][   T32] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  172.509975][ T6013] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  172.540872][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'.
[  172.547526][ T6268] loop4: detected capacity change from 0 to 512
[  172.642409][   T32] usb 2-1: Using ep0 maxpacket: 16
[  172.649942][ T6268] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  172.650576][   T32] usb 2-1: unable to get BOS descriptor or descriptor too short
[  172.683504][ T6268] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.696075][   T32] usb 2-1: config 1 interface 0 altsetting 151 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  172.707991][   T32] usb 2-1: config 1 interface 0 has no altsetting 0
[  172.734280][   T32] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.40
[  172.746014][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.757627][   T32] usb 2-1: Product: syz
[  172.761948][   T32] usb 2-1: Manufacturer: syz
[  172.767548][   T32] usb 2-1: SerialNumber: syz
[  172.850375][ T6268] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #12: comm syz.4.728: Directory hole found for htree leaf block 0
[  172.896794][ T6268] EXT4-fs (loop4): Remounting filesystem read-only
[  172.999134][   T32] usbhid 2-1:1.0: can't add hid device: -71
[  173.016969][   T32] usbhid: probe of 2-1:1.0 failed with error -71
[  173.042762][   T32] usb 2-1: USB disconnect, device number 9
[  173.059992][ T4279] EXT4-fs (loop4): unmounting filesystem.
[  173.346857][ T6282] loop4: detected capacity change from 0 to 4096
[  173.593388][ T4279] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  173.599936][ T4279] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  173.792629][ T6277] loop3: detected capacity change from 0 to 32768
[  173.845519][ T6277] 
[  173.845519][ T6277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  173.845519][ T6277] 
[  174.081788][ T4281] non-latin1 character 0x3ff found in JFS file name
[  174.094161][ T4281] mount with iocharset=utf8 to access
[  174.114358][ T4281] ERROR: (device loop3): diWrite: ixpxd invalid
[  174.114358][ T4281] 
[  174.175476][ T4281] ERROR: (device loop3): remounting filesystem as read-only
[  174.213137][ T4281] ERROR: (device loop3): txCommit: 
[  174.213137][ T4281] 
[  174.271815][ T6305] netlink: 'syz.2.753': attribute type 2 has an invalid length.
[  174.829642][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.876068][ T5823] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  174.959720][   T41] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.082519][ T5823] usb 3-1: Using ep0 maxpacket: 16
[  175.091949][ T5823] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  175.092955][ T6321] futex_wake_op: syz.1.751 tries to shift op by -1; fix this program
[  175.121796][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.146882][ T5823] usb 3-1: Product: syz
[  175.151232][ T5823] usb 3-1: Manufacturer: syz
[  175.167400][ T5823] usb 3-1: SerialNumber: syz
[  175.192756][ T5823] r8152-cfgselector 3-1: config 0 descriptor??
[  175.239286][ T6320] loop0: detected capacity change from 0 to 4096
[  175.250124][   T41] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.277817][ T6320] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  175.393534][ T6320] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  175.417154][ T5823] r8152-cfgselector 3-1: Unknown version 0x0000
[  175.488022][   T41] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.638163][ T5823] r8152-cfgselector 3-1: Unknown version 0x0000
[  175.668650][ T5823] r8152-cfgselector 3-1: USB disconnect, device number 8
[  175.690996][   T41] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.016358][ T6329] pimreg: tun_chr_ioctl cmd 2147767520
[  176.442869][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'.
[  176.497213][ T6334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.759'.
[  176.507694][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.519027][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.529490][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.538146][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  176.550194][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  176.562983][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  178.192313][    C0] sched: RT throttling activated
[  178.312262][ T6355] loop0: detected capacity change from 0 to 131072
[  178.327522][ T6355] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  178.334529][ T6355] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  178.359391][ T6355] F2FS-fs (loop0): invalid crc value
[  178.427878][ T6355] F2FS-fs (loop0): Found nat_bits in checkpoint
[  178.497712][ T6355] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  178.505118][ T6355] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  178.663002][ T4287] Bluetooth: hci3: command 0x0409 tx timeout
[  178.720141][ T6355] F2FS-fs (loop0): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix
[  179.044904][ T6336] chnl_net:caif_netlink_parms(): no params data found
[  179.488058][ T6397] loop4: detected capacity change from 0 to 4096
[  179.548975][ T6400] loop1: detected capacity change from 0 to 1024
[  179.594897][ T6397] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  179.661178][ T6397] ntfs3: loop4: Failed to load $Extend.
[  180.303564][ T6410] loop4: detected capacity change from 0 to 2048
[  180.327301][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.335713][ T6410] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.369376][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.405147][ T6336] device bridge_slave_0 entered promiscuous mode
[  180.460394][ T6392] loop2: detected capacity change from 0 to 32768
[  180.477319][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.484624][  T951] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  180.512878][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.521309][ T6336] device bridge_slave_1 entered promiscuous mode
[  180.548818][ T6392] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  180.624341][   T41] device hsr_slave_0 left promiscuous mode
[  180.668326][   T41] device hsr_slave_1 left promiscuous mode
[  180.684718][  T951] usb 2-1: config 246 has an invalid interface number: 166 but max is 0
[  180.716982][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.728066][  T951] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[  180.742709][ T4287] Bluetooth: hci3: command 0x041b tx timeout
[  180.744465][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.762939][  T951] usb 2-1: config 246 has no interface number 0
[  180.769309][  T951] usb 2-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  180.832718][  T951] usb 2-1: config 246 interface 166 has no altsetting 0
[  180.858043][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.868473][  T951] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[  180.895030][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.925600][  T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.969662][  T951] usb 2-1: Product: syz
[  180.982840][  T951] usb 2-1: Manufacturer: syz
[  180.984080][ T4412] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  181.000107][  T951] usb 2-1: SerialNumber: syz
[  181.019224][   T41] device bridge_slave_1 left promiscuous mode
[  181.032540][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.081655][   T41] device bridge_slave_0 left promiscuous mode
[  181.103341][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.253326][   T41] device veth1_macvtap left promiscuous mode
[  181.271715][   T41] device veth0_macvtap left promiscuous mode
[  181.339862][   T41] device veth1_vlan left promiscuous mode
[  181.366049][   T41] device veth0_vlan left promiscuous mode
[  181.407200][ T6433] loop4: detected capacity change from 0 to 128
[  181.484480][ T6433] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  181.534407][ T6433] hpfs: filesystem error: improperly stopped
[  181.540483][ T6433] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  181.601816][ T6433] hpfs: You really don't want any checks? You are crazy...
[  181.634033][ T6433] hpfs: hpfs_map_sector(): read error
[  181.637770][  T951] usb 2-1: Limiting number of CPorts to U8_MAX
[  181.639463][ T6433] hpfs: code page support is disabled
[  181.639617][ T6433] hpfs: hpfs_map_4sectors(): unaligned read
[  181.660248][  T951] usb 2-1: Not enough endpoints found in device, aborting!
[  181.726731][ T6433] hpfs: hpfs_map_4sectors(): unaligned read
[  181.742145][ T6433] hpfs: filesystem error: unable to find root dir
[  181.817625][ T6433] hpfs: hpfs_map_4sectors(): unaligned read
[  181.824019][ T6433] hpfs: hpfs_map_sector(): read error
[  181.843377][ T6013] usb 2-1: USB disconnect, device number 10
[  182.300498][ T6438] loop4: detected capacity change from 0 to 32768
[  182.463004][ T6438] XFS (loop4): Mounting V5 Filesystem
[  182.522960][ T6447] loop1: detected capacity change from 0 to 512
[  182.569750][ T6438] XFS (loop4): Ending clean mount
[  182.573552][ T6447] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  182.635750][ T6450] loop0: detected capacity change from 0 to 256
[  182.732693][ T6447] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.787: iget: bad i_size value: 38620345925642
[  182.776212][ T6447] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.787: couldn't read orphan inode 15 (err -117)
[  182.801598][ T4279] XFS (loop4): Unmounting Filesystem
[  182.807571][ T6447] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  182.823303][ T4272] Bluetooth: hci3: command 0x040f tx timeout
[  183.057280][    T9] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap
[  183.103486][    T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 68 with error 28
[  183.145503][    T9] EXT4-fs (loop1): This should not happen!! Data will be lost
[  183.145503][    T9] 
[  183.174582][    T9] EXT4-fs (loop1): Total free blocks count 0
[  183.180642][    T9] EXT4-fs (loop1): Free/Dirty block details
[  183.202571][    T9] EXT4-fs (loop1): free_blocks=0
[  183.207614][    T9] EXT4-fs (loop1): dirty_blocks=68
[  183.232376][    T9] EXT4-fs (loop1): Block reservation details
[  183.238525][    T9] EXT4-fs (loop1): i_reserved_data_blocks=68
[  183.280750][   T41] team0 (unregistering): Port device team_slave_1 removed
[  183.286994][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  183.471624][   T41] team0 (unregistering): Port device team_slave_0 removed
[  183.509164][ T6454] loop0: detected capacity change from 0 to 32768
[  183.612811][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.643571][ T6454] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  184.056776][ T4275] ocfs2: Unmounting device (7,0) on (node local)
[  184.332508][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.902399][ T4287] Bluetooth: hci3: command 0x0419 tx timeout
[  185.139798][ T6471] loop0: detected capacity change from 0 to 40427
[  185.166533][ T6471] F2FS-fs (loop0): invalid crc value
[  185.175093][ T6471] F2FS-fs (loop0): Found nat_bits in checkpoint
[  185.177949][   T41] bond0 (unregistering): Released all slaves
[  185.228192][ T6471] F2FS-fs (loop0): Start checkpoint disabled!
[  185.239847][ T6471] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  185.493202][ T6336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.551211][ T4327] kworker/u4:6: attempt to access beyond end of device
[  185.551211][ T4327] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  185.581063][ T6336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.729895][ T6336] team0: Port device team_slave_0 added
[  185.764042][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.798993][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.832465][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.888748][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.922603][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.960307][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.006521][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.030951][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.094729][ T6485] batman_adv: batadv0: Adding interface: ipvlan2
[  186.114141][ T6485] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.152672][ T6485] batman_adv: batadv0: Interface activated: ipvlan2
[  186.168666][ T6336] team0: Port device team_slave_1 added
[  186.261101][ T6336] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.302807][ T6336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.395646][ T6336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.456239][ T6496] loop0: detected capacity change from 0 to 16
[  186.462409][ T6336] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.467479][ T6497] loop4: detected capacity change from 0 to 256
[  186.479646][ T6336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.501847][ T6496] erofs: (device loop0): mounted with root inode @ nid 36.
[  186.505569][    C1] vkms_vblank_simulate: vblank timer overrun
[  186.601173][ T6336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.683114][ T6497] FAT-fs (loop4): Directory bread(block 64) failed
[  186.689730][ T6497] FAT-fs (loop4): Directory bread(block 65) failed
[  186.772517][ T6497] FAT-fs (loop4): Directory bread(block 66) failed
[  186.779132][ T6497] FAT-fs (loop4): Directory bread(block 67) failed
[  186.846260][ T6497] FAT-fs (loop4): Directory bread(block 68) failed
[  186.857909][ T6497] FAT-fs (loop4): Directory bread(block 69) failed
[  186.876669][ T6336] device hsr_slave_0 entered promiscuous mode
[  186.906081][ T6497] FAT-fs (loop4): Directory bread(block 70) failed
[  186.925207][ T6504] loop1: detected capacity change from 0 to 512
[  186.931997][ T6336] device hsr_slave_1 entered promiscuous mode
[  186.938488][ T6506] loop0: detected capacity change from 0 to 1024
[  186.962544][ T6497] FAT-fs (loop4): Directory bread(block 71) failed
[  186.969237][ T6497] FAT-fs (loop4): Directory bread(block 72) failed
[  186.998590][ T6504] EXT4-fs: Ignoring removed bh option
[  187.004505][ T6336] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.012123][ T6336] Cannot create hsr debugfs directory
[  187.022392][ T6497] FAT-fs (loop4): Directory bread(block 73) failed
[  187.191321][ T4327] hfsplus: b-tree write err: -5, ino 25
[  187.207496][ T6504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  187.273227][ T4327] hfsplus: b-tree write err: -5, ino 4
[  187.279386][ T4327] hfsplus: b-tree write err: -5, ino 2
[  187.282640][ T6504] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  187.665415][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  187.784186][ T6522] loop4: detected capacity change from 0 to 1024
[  187.832391][ T5135] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  187.852507][ T6522] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  187.869778][ T6522] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.905177][ T6336] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  187.985632][ T6336] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  188.024574][ T5135] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  188.043527][ T6336] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  188.072429][ T5135] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  188.097285][ T4279] EXT4-fs (loop4): unmounting filesystem.
[  188.103423][ T5135] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  188.145558][ T5135] usb 3-1: config 220 has no interface number 2
[  188.151943][ T5135] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  188.191580][ T5135] usb 3-1: config 220 interface 0 has no altsetting 0
[  188.199067][ T5135] usb 3-1: config 220 interface 76 has no altsetting 0
[  188.224522][ T5135] usb 3-1: config 220 interface 1 has no altsetting 0
[  188.247985][ T6336] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  188.256692][ T5135] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  188.276122][ T5135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.294611][ T5135] usb 3-1: Product: syz
[  188.303364][ T5135] usb 3-1: Manufacturer: syz
[  188.312522][ T5135] usb 3-1: SerialNumber: syz
[  188.351332][ T6540] loop4: detected capacity change from 0 to 512
[  188.365185][ T6538] loop0: detected capacity change from 0 to 2048
[  188.472508][ T6538] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  188.572535][ T5135] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  188.608840][ T5135] usb 3-1: No valid video chain found.
[  188.652871][ T5135] usb 3-1: selecting invalid altsetting 0
[  188.676378][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  188.733622][ T5135] usb 3-1: selecting invalid altsetting 0
[  188.739437][ T5135] usbtest: probe of 3-1:220.1 failed with error -22
[  188.782885][ T6336] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.813955][ T5135] usb 3-1: USB disconnect, device number 9
[  188.828008][ T6336] 8021q: adding VLAN 0 to HW filter on device team0
[  188.906857][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.929489][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.967243][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.990968][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  189.008858][ T6554] loop5: detected capacity change from 0 to 7
[  189.028936][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.036183][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.062502][ T6554] Dev loop5: unable to read RDB block 7
[  189.086023][ T6554]  loop5: unable to read partition table
[  189.130674][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  189.133268][ T6554] loop5: partition table beyond EOD, truncated
[  189.170009][ T6554] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  189.179983][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  189.229727][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  189.271482][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.278736][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.342828][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  189.419337][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  189.446624][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  189.490001][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  189.537047][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  189.566104][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  189.598959][ T6572] loop1: detected capacity change from 0 to 512
[  189.647199][ T6572] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  189.725356][ T6572] EXT4-fs (loop1): 1 truncate cleaned up
[  189.736843][ T6336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  189.772113][ T6336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.792348][ T6572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  189.834000][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  189.845008][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  189.861399][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  189.871388][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  189.880617][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  189.893872][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  189.976766][ T6572] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.827: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  190.087023][ T6572] EXT4-fs (loop1): Remounting filesystem read-only
[  190.273539][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  190.419230][ T5822] kernel write not supported for file /vcs (pid: 5822 comm: kworker/0:18)
[  190.598220][ T6605] loop2: detected capacity change from 0 to 1024
[  190.961004][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  190.971456][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  191.027805][ T6336] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.126163][ T6622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.842'.
[  191.166390][ T6622] netlink: 2 bytes leftover after parsing attributes in process `syz.4.842'.
[  191.522519][ T5136] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  191.746099][ T5136] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  191.779575][ T5136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.804142][ T5136] usb 3-1: Product: syz
[  191.808393][ T5136] usb 3-1: Manufacturer: syz
[  191.842407][ T5136] usb 3-1: SerialNumber: syz
[  191.885976][ T6641] loop4: detected capacity change from 0 to 4096
[  191.946488][ T4333] wlan1: Trigger new scan to find an IBSS to join
[  191.963301][ T6641] NILFS (loop4): invalid segment: Checksum error in segment payload
[  191.991705][ T6641] NILFS (loop4): trying rollback from an earlier position
[  192.051794][ T6641] NILFS (loop4): recovery complete
[  192.078452][ T6647] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.126031][ T5136] rtl8150 3-1:1.0: couldn't reset the device
[  192.159575][ T5136] rtl8150: probe of 3-1:1.0 failed with error -5
[  192.195506][ T5136] usb 3-1: USB disconnect, device number 10
[  192.456026][ T6625] loop0: detected capacity change from 0 to 32768
[  192.579673][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  192.627002][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  192.658257][ T6625] XFS (loop0): Mounting V5 Filesystem
[  192.731034][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  192.784354][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  192.800426][ T6625] XFS (loop0): Ending clean mount
[  192.825254][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  192.841796][ T6625] XFS (loop0): Quotacheck needed: Please wait.
[  192.849270][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  192.868281][ T6670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.853'.
[  192.880156][ T6336] device veth0_vlan entered promiscuous mode
[  192.916911][ T6336] device veth1_vlan entered promiscuous mode
[  192.929804][ T6625] XFS (loop0): Quotacheck: Done.
[  193.018296][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  193.038031][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  193.077456][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  193.108009][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  193.108210][ T4275] XFS (loop0): Unmounting Filesystem
[  193.169647][ T6336] device veth0_macvtap entered promiscuous mode
[  193.182097][ T6336] device veth1_macvtap entered promiscuous mode
[  193.261893][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.281201][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.291501][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.314044][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.326020][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.337145][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.347327][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.358343][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.382638][ T6336] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.398132][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  193.418895][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  193.431043][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  193.501747][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  193.554676][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.597124][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.632353][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.653513][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.673904][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.705883][ T6677] loop4: detected capacity change from 0 to 1024
[  193.713682][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.743292][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.775817][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.818800][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  193.860473][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.893568][ T6336] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.927539][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  193.975539][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  194.018542][ T6336] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.051654][ T6336] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.091031][ T6336] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.129511][ T6336] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.335812][ T6673] loop2: detected capacity change from 0 to 40427
[  194.347371][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.353753][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.399117][ T6673] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  194.451361][ T6673] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  194.466154][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.488873][ T6673] F2FS-fs (loop2): invalid crc value
[  194.494349][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.504422][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  194.575373][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.590635][ T6673] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  194.602880][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.623774][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  194.870414][ T6673] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  194.892417][ T6673] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  195.059676][ T6673] F2FS-fs (loop2): Corrupted max_depth of 3: 513
[  195.371486][ T6711] loop1: detected capacity change from 0 to 256
[  195.423988][ T6711] exfat: Deprecated parameter 'utf8'
[  195.453299][ T6711] exfat: Deprecated parameter 'namecase'
[  195.496984][ T6711] exfat: Deprecated parameter 'namecase'
[  195.512513][ T6711] exfat: Deprecated parameter 'utf8'
[  195.592210][ T6711] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  196.069943][ T6716] loop1: detected capacity change from 0 to 2048
[  196.088351][ T6716] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  196.175495][ T6720] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  196.972869][ T6740] program syz.2.869 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  196.984034][ T4297] wlan1: Trigger new scan to find an IBSS to join
[  197.018099][ T6738] syzkaller0: tun_chr_ioctl cmd 1074025677
[  197.031588][ T6738] syzkaller0: linktype set to 825
[  197.951207][    T9] wlan1: Creating new IBSS network, BSSID b2:a6:77:e9:ac:07
[  199.042432][ T5135] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[  199.258019][ T5135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  199.295914][ T6812] loop0: detected capacity change from 0 to 512
[  199.302833][ T5135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  199.338516][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  199.373387][ T6812] EXT4-fs: Ignoring removed nomblk_io_submit option
[  199.400425][ T5135] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  199.421009][ T6812] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  199.442412][ T5135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.503051][ T6812] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002]
[  199.513439][ T5135] usb 5-1: config 0 descriptor??
[  199.519158][ T6793] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  199.533759][ T6812] EXT4-fs (loop0): orphan cleanup on readonly fs
[  199.564114][ T6812] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  199.604196][ T6812] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  199.639834][ T6812] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.900: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  199.668695][ T6812] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.900: couldn't read orphan inode 13 (err -117)
[  199.689250][ T6812] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  199.798932][ T6812] EXT4-fs (loop0): shut down requested (0)
[  199.934027][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  199.960963][ T5135] gt683r_led 0003:1770:FF00.0006: unexpected long global item
[  199.976620][ T6822] loop2: detected capacity change from 0 to 512
[  199.988435][ T5135] gt683r_led 0003:1770:FF00.0006: hid parsing failed
[  200.053435][ T5135] gt683r_led: probe of 0003:1770:FF00.0006 failed with error -22
[  200.095426][ T6822] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.904: bg 0: block 473: padding at end of block bitmap is not set
[  200.180477][ T5822] usb 5-1: USB disconnect, device number 7
[  200.242740][ T6822] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  200.290041][ T6822] EXT4-fs (loop2): 1 orphan inode deleted
[  200.321181][    T9] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  200.339580][ T6822] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  200.367330][    T9] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 1
[  200.388665][ T6822] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.454218][ T6808] loop1: detected capacity change from 0 to 32768
[  200.629640][ T6808] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  200.679073][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  200.693411][ T6808] VFS: Lookup of '' in ocfs2 loop1 would have caused loop
[  200.948729][ T4271] ocfs2: Unmounting device (7,1) on (node local)
[  201.013643][ T4271] VFS: Busy inodes after unmount of loop1 (ocfs2)
[  201.013817][ T4271] ------------[ cut here ]------------
[  201.025929][ T4271] kernel BUG at fs/super.c:505!
[  201.066145][ T4271] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  201.072716][ T4271] CPU: 1 PID: 4271 Comm: syz-executor Not tainted syzkaller #0
[  201.080289][ T4271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  201.090382][ T4271] RIP: 0010:generic_shutdown_super+0x334/0x340
[  201.096577][ T4271] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 65 6c f1 ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 20 57 99 8a 48 89 de e8 0c 97 40 08 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 53 48 89 fb 49
[  201.116311][ T4271] RSP: 0018:ffffc90004067d18 EFLAGS: 00010246
[  201.122424][ T4271] RAX: 000000000000002f RBX: ffff88801d27c6a8 RCX: 36c3c291e0b7de00
[  201.130436][ T4271] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  201.138522][ T4271] RBP: 1ffff11003a4f8fb R08: ffffc90004067a27 R09: 1ffff9200080cf44
[  201.146508][ T4271] R10: dffffc0000000000 R11: fffff5200080cf45 R12: 0000000000000000
[  201.154576][ T4271] R13: dffffc0000000000 R14: ffffffff8d01ab00 R15: ffff88801d27c7d8
[  201.162554][ T4271] FS:  0000555565abc500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  201.171488][ T4271] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  201.178165][ T4271] CR2: 000000110c3500df CR3: 000000005d41b000 CR4: 00000000003506e0
[  201.186150][ T4271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  201.194129][ T4271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  201.202105][ T4271] Call Trace:
[  201.205385][ T4271]  <TASK>
[  201.208326][ T4271]  kill_block_super+0x7c/0xe0
[  201.213019][ T4271]  deactivate_locked_super+0x93/0xf0
[  201.218332][ T4271]  cleanup_mnt+0x42c/0x4b0
[  201.222777][ T4271]  ? lockdep_hardirqs_on+0x94/0x140
[  201.227998][ T4271]  task_work_run+0x1d0/0x260
[  201.232612][ T4271]  ? task_work_cancel+0x220/0x220
[  201.237669][ T4271]  ? exit_to_user_mode_loop+0x3b/0x110
[  201.243154][ T4271]  exit_to_user_mode_loop+0xe6/0x110
[  201.248580][ T4271]  exit_to_user_mode_prepare+0xee/0x180
[  201.254142][ T4271]  syscall_exit_to_user_mode+0x16/0x40
[  201.259613][ T4271]  do_syscall_64+0x58/0xa0
[  201.264300][ T4271]  ? clear_bhb_loop+0x60/0xb0
[  201.269010][ T4271]  ? clear_bhb_loop+0x60/0xb0
[  201.273699][ T4271]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  201.279602][ T4271] RIP: 0033:0x7f27c139e097
[  201.284040][ T4271] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  201.303681][ T4271] RSP: 002b:00007ffd9a6dd3c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  201.312129][ T4271] RAX: 0000000000000000 RBX: 00007f27c14321ca RCX: 00007f27c139e097
[  201.320220][ T4271] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9a6dd480
[  201.328219][ T4271] RBP: 00007ffd9a6dd480 R08: 00007ffd9a6de480 R09: 00000000ffffffff
[  201.336217][ T4271] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9a6de510
[  201.344196][ T4271] R13: 00007f27c14321ca R14: 000000000003101b R15: 00007ffd9a6de550
[  201.352185][ T4271]  </TASK>
[  201.355221][ T4271] Modules linked in:
[  201.359174][    C1] vkms_vblank_simulate: vblank timer overrun
[  201.407250][ T4271] ---[ end trace 0000000000000000 ]---
[  201.436287][ T4271] RIP: 0010:generic_shutdown_super+0x334/0x340
[  201.458653][ T4271] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 65 6c f1 ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 20 57 99 8a 48 89 de e8 0c 97 40 08 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 53 48 89 fb 49
[  201.525780][ T4271] RSP: 0018:ffffc90004067d18 EFLAGS: 00010246
[  201.538588][ T4271] RAX: 000000000000002f RBX: ffff88801d27c6a8 RCX: 36c3c291e0b7de00
[  201.542529][ T4272] Bluetooth: hci1: command 0x0406 tx timeout
[  201.554438][ T4287] Bluetooth: hci2: command 0x0406 tx timeout
[  201.556588][ T4271] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  201.593884][ T4271] RBP: 1ffff11003a4f8fb R08: ffffc90004067a27 R09: 1ffff9200080cf44
[  201.603667][ T4271] R10: dffffc0000000000 R11: fffff5200080cf45 R12: 0000000000000000
[  201.611788][ T4271] R13: dffffc0000000000 R14: ffffffff8d01ab00 R15: ffff88801d27c7d8
[  201.622795][ T4271] FS:  0000555565abc500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  201.638138][ T4271] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  201.644950][ T4271] CR2: 00007f28703a2368 CR3: 000000005d41b000 CR4: 00000000003506e0
[  201.658563][ T4271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  201.675642][ T4271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  201.689527][ T4271] Kernel panic - not syncing: Fatal exception
[  201.696125][ T4271] Kernel Offset: disabled
[  201.700495][ T4271] Rebooting in 86400 seconds..