last executing test programs:

49.704220734s ago: executing program 2 (id=4498):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/image_size', 0x149b82, 0x51)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
write$cgroup_int(r0, &(0x7f0000000000)=0x800, 0x12)

49.613004879s ago: executing program 2 (id=4500):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

49.463342257s ago: executing program 2 (id=4502):
unshare(0x2a060400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
shutdown(r0, 0x1)

49.251933798s ago: executing program 2 (id=4504):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000000f40)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

48.669201299s ago: executing program 2 (id=4508):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a21028344"], 0x0}, 0x0)

47.051772315s ago: executing program 2 (id=4519):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)

46.654265676s ago: executing program 32 (id=4519):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)

2.658490959s ago: executing program 0 (id=4921):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0xe3, 0x4)

2.595915832s ago: executing program 4 (id=4922):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x100, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0xa00}, 0x8800)

2.491033698s ago: executing program 4 (id=4924):
io_setup(0x4fb, &(0x7f00000009c0)=<r0=>0x0)
r1 = eventfd2(0x9, 0x80801)
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x1a, 0x7, 0x4, r1, 0x0, 0x0, 0x47a, 0x0, 0x1, r1}])

2.461797379s ago: executing program 0 (id=4925):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1000000, &(0x7f0000007d40)=ANY=[@ANYBLOB='umask=00000000000000000000016,nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x0000000ffc,nls=iso8859-4,force,nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x44, 0x714, &(0x7f0000007e00)="$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")
link(&(0x7f0000000940)='./file1\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000940)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1)

2.26993143s ago: executing program 4 (id=4927):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800)

2.147532456s ago: executing program 0 (id=4928):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
setresuid(0x0, 0xee00, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)

2.016019803s ago: executing program 4 (id=4929):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x3, 0xffffffffffffffff, 0x5}}, 0x30)

1.842220052s ago: executing program 4 (id=4932):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000000)=0x8, 0x4)

1.808440344s ago: executing program 1 (id=4933):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000003c0)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f06e4b56"}, 0x5, 0x4, {}, 0x5c000000})

1.748111427s ago: executing program 0 (id=4934):
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3})
setns(r0, 0x0)

1.655500992s ago: executing program 3 (id=4935):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
write$dsp(r0, &(0x7f0000002200)="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", 0x1000)
ppoll(&(0x7f0000000040)=[{r0, 0xc006}], 0x1, 0x0, 0x0, 0x0)

1.636670933s ago: executing program 1 (id=4936):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

1.618640354s ago: executing program 0 (id=4937):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a)

1.449012173s ago: executing program 1 (id=4938):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
fallocate(r0, 0x20, 0x4000, 0x3000000)

1.31808298s ago: executing program 0 (id=4939):
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paWLOSWiSzMILauJDCCNyGhrlwoxhILtpp3HvOc+fe53jPvTONjennIzPnPOd3nuc893IW93udc04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAEMJzv31ypKx++vr02fMz9d2Hts1cOTC94UwIlfb2Sl7ftf3pl17fsev5idhh9sVsWav1GzLreiFrrOnZ2OrX+/NqCGEsGaCaL59aVxi1e3VfccBSNy7tPbZlf33ziaPN6rXL504VXzotE6s9gdWSn1cXF8+levv3SLJHp9116lV6TtGsf3rC/SsvAgBYkqlGe9H5OJp/xO20D6b1pF1P2s2kHT8hNLsby5GNu6bfPDel9VWaZz2LCuN955nU8/e/026k/ZN2EjWWMM/eXfNIM9FvnnNJfbXmCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA7eejN0QfK6qevT589P1PffWjbzJUD0xvOhFBrb69k5crad4/W//xm+/FDP2z98sTFZx+p5v3icrRr5/BrXHlsMoTXuioX47CX1ofQ6C20m+HzYuGN9sozsQAAAMCd5N7275FOO4uDYz3tSjtNVtr/oiws3ri099iW/fXNJ442q9cunzu1/PEafcar33S8Tru2+FPpCsYx/qbjLdbjrvsK45RLR0zz/KMXpv4q61/I/7Xy/B/fOfkfAACAf0L+T8cpNyj/f/vK7x+V9S/k/009hyzk/zjjmP9HwvLyPwAAANzObnX+rxfGKTco/4+/MPZVWf9C/p8aLv+Pdk87bvwlTnjPZAhTg6YOAAAA9BH/333xq4WY17NvDtK8/sTDh8+XjVfI//Xh8v9Y+GJ+RV8YAAAAsGzzn+18sKxeyP+N4fL/+C2dNQAAALAUb70/8V5ZvZD/Z4fL/2vzZX7lQ9bpx/hXCEcmQ5horcxlhZ9C88lOAQAAAFghMaf/8fHu78v2K+T/ufL7/8c7HcTr/3vu/1e4/r+rkN3173E3BgAAAOBuVLyeP94eP3tyQb/n7w97/f99/zv8ctnxC/n/4HD5v9q9XMnn/wEAAMAy/Nee/7ezME65Qff/v+eDt38u61/I/83h8n9crut+eScrlez9eWcyhI2tlfxugl/Hw+1JCgtjXYW2RtJjR+yRFxbGuwptc0mPrZMh3N9aOZgU/h8LzaRwdX1emE8KZ2IhPx86heNJ4WQ80z5dn083LXwXC/kFFgvxCop1nUsikh7X+vVoFW7a41zn4AAAAHeVGJ7zLDvW2wxplF2oDNph7aAdRgbtUB20w2iyQ7pjv+1htrcQtzfPbl7a8//nh8v/8a1Yky36Xf8f4vX/+XMNO9f/z8ZCLSksxEIjvWNAIx4jC7sfxmPUGnmPqxs7BQAAALijxe8Fqqs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/Zu9cYua76AOBnn+N9eHcTqAgpggXqGBe8XtvhoTYV6zRVUShlXVKiClFs7HVYvMHGdgqOADk2KEURNC2R4EOjOEKozoekFgkKNIniRsIoah4oVSOSKBFpnSCi0DSAQiESrmbuPbN3zt15+LGON/39JO+cmf953nl4zr13zgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/hyNf+szftorf/9tLHn/q8qlP7t9w+fOfv+Tch0OYrj3elYW7Bq+9cernt1582/671t10x7FL396fl8vjYaj6pzu/88VY67HlIdzZFUJvGlg9nAX68vvDsb43DIdwTpgP1EvMDGYl0obD9wdCOBjmA/WqvjcQwnAhcNkj9937lWrihoEQVoQQKmkbT1ayNgbSwAX9WWAwDezozQK/Op6pB77bnQXglMU3Q/1Ff3i6McPYwuWavP76TlvHXlnp8HpiYqx5vp9tWOROFfSnD0yf0tNWqo5FUXp7HPFuWwLvttJ2vt7TVvwilX9DOT4fqoTurTPbNl81tyc+0h0mJnqa1bRIz/NjL35uy4mkl8zrMHZg7LS8Dr/60Ipbe1Z94ME7Vq949tA7Djx3qt38UWGTFtOLrRLy19ySeR6jKZ8nS+DtV/qWNO5LVwhh2yd+74Ot4qX5/1jr+X98Ocfb7obcsdaXR7K5eXxkOCZeGMnm5gAAALBkLIW9pjsm7nlPofhoJamvNP8f7+z4fzzkn0/ms9EeCWGqljgwGsJ5tcezwC2xuY+PhvDmWmq6MbAhCRwJ4fW1xKp6VUmJZbHEeBL4yUgemEoCR2NgOgl8KwauTwJfjIHDSWBLDBxJAhfHQJhtHMfvj+Tj6DgwEAObso14OJ6F8IuR2FqyrZ6oVwUAAHCa5LPDvsa7hXMdTjVDnF4eHmiXIZ6B3TRDJakhncHWp1VNa+htV0N3uxrq497Xevilmrva1Vw6DaOrMcONv/ybD4UWSvP/ydbz/8oCHekqHf8PYWPtb8zdnUfm6vFN0w0ZAAAAgFMw9L9Pf7NVvDT/n+rs/P+4T6SnkDk8EHdDbB8NYbIxkFX7h+VAdtR7KA8AAADAUlA/Hl8/Fj6b32anaKfz6XL+6RPMHw/8Ty2Yv//I3Zta9bc0/5/u7Pz/wcbbrBNHYy++NhrCskLgB7GX1UDNeAz8+L2NgXz8R+MGuC5WlZ+YUK/qulhiUwxMJoGDzUr8sF7ivMZA/mTVGz9QH8dsXqIQAAAAgDMu7g6Ix+Xj+f9v+c26z7QqV5r/bzqx8/9r8+DS6f1zQyGs6Q2hJ/1hwAOD2cKAMTDclSfuGczq6kmrumYwhIuqA0urejpf/783XWPwkYGsqhg47y2HXrygmvjmQAhrioFHP3LzO6uJPUmg3vhfDoTwpupo08a/syxrvC9t/OvLQnhjIVCv6uPLQqg21p9WdV8lv45BWtU/V0J4TSFQr+pdlRD2BgCWqPhf6dbig7v3Xr1989zczK5FTMR9+ANh2+zczMSWHXNbK036tDXpc8MyRteUx9TplW+eyJco+vDtG4c7Sdd/JzhZbCvfj186cTC/H78L9dXGua6v4e76dMhve2u5iVD4JtVsyN2LPOTBYiXzT2Kp/pi/PwyFZVftntk18dnNe/bsWpv97TT7uuxvPMyUbau16bYaXKhvHbw8mq6WlTjZbbWyWMmaPVfuXLN779WrZ6/cfMXMFTOfWvuudZMXTq6ffPeFa6qjmsz+thnqyoWqToZ6/OYOx3Uah3p+b6GSM/GpISEhsdQSO4ZWtvw/uTT/39l6/h8/deInf74+Q7Pj/2PxMH/2+Pxh/k0xcLDT4/9jzY7m108MGE8C+2Jgn8P8AAAAvDrESX7cmxn3Sv901XeebVWuNP/f19nv/0/T+v/1pesvbbbM/6pYYrLZ+v/pMv/19f/3NVv/P13mv77+/8FXYP3/q+qBZJP8wvr/AADAq8GZW/+/7fL+6QUCShnaLu+fXiCglKHtMv6dXiDghNf/f/I//+q/Qwul+f/1nc3/LdwPAAAAZ48v/NlnfqdVvDT/P9jZ/P/Mr/8Xmp3/P94sMN1sYUDr/wEAALBENVv/b+zawY+1Klea/x/ubP4fT7vobsgda315JFvTLqRr2r0wUv/JAAAAACwN3WFioq/DvA0ro244+TYfy5cCbZUuevpPjp3Y+f9HOpv/N/wu46sPrbi1Z9UHHnz5jtUrnj30jgPPzR//BwAAABZPp/slAAAAAAAAAAAAAACAV97T/7F/fat46ff/YWPt8Wa//4/X/Yu/L3htQ+5Ya/v1//L7l73/tr21JQsfGAnhrcXA9v3bzwn5tflXFgP3fnTV66qJ/WmJu5+6+Jlq4mNp4H2rz32pmrgoCWyKiyS+Pg3Eqyq+tDwJxOUV/z0NxO1xOA3054EvL8/G0ZVuq58OZ9uqK91Wjw+HMFoI1LfVncNZG13pAG9IAvUBfjoNxAH+eR7oTnt121DWqxgYjkVvGsp6BQDAWSt+C+wL22bnZibjV/h4e35v423UsGTZNeVquzps/ol8abIP375xuJN0T/pddP5a432hUh3C2tLX1WKWrtooT08tbTbda5sMud1qb91NyqVOdNP1Nx/RQDaiiS075rb2tR34+vZZ1vW2zbK2NNkpZumubdIOaumgLx2MqMNt00GX4/3uMDHRk+T6gxgcCw3avSI6/b1+cZ2/Zq+CYp5PHTvwq1b1leb/Y53N/yvFcb2UXwxgX7yy3t+NWuYfAAAAFteXN/z6G/Hfh669/9FWeUvz//HO5v9xD1Z+KDjb23EkXv//wGgItUvrj2WBW2JzHx8N4c211HQskV1Q/9JYYjIL3BJ3mKyKJTZNN1a1LAYOJ4GfjOSBI0ngaAzkeykOhXxXzt+PhPDOWmpjY4mdscRYEvhgDIwngYkYmEwCy2NgKgk8vzwPTCeBf4uBMNu4rW5fnm8rAACADtWu4ZbPs+Lx5zjtSud5h3vbZehql2GwXYbudhkqLTP0hcPNRhHvfztm6EtOXukqZOpLmx1IailliBfDb9rxtlu3fvj/h40504KlpuP5B/XzDboaM9z1nt5KaKE0/5/sbP4/2HibtX40zv/nr/+XBX4Qu/e1eOr4eAz8+L2NgXzHwNE42b2uXtV0XiKftF8XS0zFwHgS2BkDU0lg08Y8cPB1jYF8pl1v/EC98dm8RCEAAAAAZ1zcQRB308T5/027vzTUqlxp/j/V2fw/tjdUbOyLsdZjy0O4s2u+N/XA6uEsEPdjDMefx79hOIRzCjs46iVmBrMS/UnD4fsD2S/U+9OqvjeQ/fgg3r/skfvu/Uo1ccNACCsKe1/qbTxZydoYSAMX9GeBwTSwozcLxD0/9cB3u7MAnLL6XsH4gspPdakbW7hck9ffq+WaoOnwSvtAF8i30G+uFktph2u+T7XuxJ62lvtvOW1Kb48j3m1L8d025t1W/CKVf0M5Ph+qhO6tM9s2XzW3Jz5S/CVrySI9z8VfqXaSPg2vw30n39v2KmkHJpOPj8mFyy38OuyK1X31oRW39qz6wIN3rF7x7KF3HHiu4240EX8ofN/n/3X4R4XNu9gqIX/NLbnPk2mfJ0viv4Hk3T3uaQshbHz+69e1ipfm/9Odzf97k9uaX8eNuXs0hLcVNu4DcfP/8Wj2OVgIZJ+SrykHskPu/zXS9JMTAAAATrf67o76/oLZ/DY7ITydJ5fzT4dwfPQE8sf9FVML5u+034N//dEVreKl+f+m1vP/ZUk3Hf93/J9F4vj/gs72XdHL0gf2ndKu6FJ1LArH/xd0tr/bHP9fkOP/jv8vxPH/Nhz/X9DZ/rSVviXt9KUrhPDsH93zeKt4af6/s7P5v/X/Fl60r77+36Zm6//tbLb+3z7r/wEAAIuqyUJz6TyvtHpfKUO6el8pQ9sFAtsuMdh6/b8W6+y9atb/K23Uduv/PXP+k78JLZTm//s6m//Hl8NQsfWlsv7f+MYmVV0fAzstDAgAAMDZqNm+CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5Zd/3D/2xtFb//t5c8/tTlU5/cv+Hy5z9/ybkPhzBbe7wrC3cNXnvj1M9vvfi2/Xetu+mOY5e+vZKX68tvf7chd6z15ZEQDhYeGY6JF0aqd+YDl73/tr291cQDIyG8NQsM55VsP6f691sjIawslrj3o6teV03sny+RBe5+6uJnqomPpYH3rT73pWriojzQlXb3H5dn3e1Ku/uV5SGMFgL17n5yeWNV9Tb+NA90p23803DWRgwMx6LfGM7aiIG5WGJ2WQhrekPoSau6v5JV1ZNW9S+VrKqetKovVEK4KITQm1b1VH9WVW868of7s6pi4Ly3HHrxgmriYH8Ia4qBRz9y8zuriU8ngXrjf9EfwpuqL5m08W/3ZY33pY3f0BfCG0MI/WmJX/ZmJfrTEk/3hvCaQqDe+Cd6Q9gbeFWIHz4Nn2i79169ffPc3MyuxUh8JEv0520NhG2zczMTW3bMba0kfWqmq5A+fs3Jj/2JFz+3pXr74ds3DneS7s3L9dW6vK6v4e76s733sV+DxUrmn5hS/TF/fxgKy67aPbNr4rOb9+zZtTb722n2ddnfnjyabau1S2VbrSxWsmbPlTvX7N579erZKzdfMXPFzKfWvmvd5IWT6yfffeGa6qgms7+nY6g3N4QGzsRQz+8tVLKoHwASEhJnILF2EWrubvh0mzzbP8hLX/TnO9oXKrUP6NK0opilqzbK0zHoDSc54pP5ntJ2RGtLE4dSlnULZLmmMcv60mRivpaBLEvte11pclhsrLu2SeP97jAx0dNsO4w13i1u3p+dwuZ9LN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//t/8lBw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x103042, 0xeaff)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000})

1.188575697s ago: executing program 4 (id=4940):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})

1.025710435s ago: executing program 3 (id=4941):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000003000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

838.273835ms ago: executing program 3 (id=4942):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e000000000000000200000006"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)

795.972187ms ago: executing program 1 (id=4943):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14013, &(0x7f0000000480)={[{@gid}, {@codepage={'codepage', 0x3d, 'ascii'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x4, 0x339, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000002c0)=""/174, 0xae)

608.398528ms ago: executing program 3 (id=4944):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x105}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x40)

472.967135ms ago: executing program 1 (id=4945):
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000003c0)='./file1\x00', 0x8680, &(0x7f0000020b00)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES8], 0xfd, 0x2a1, &(0x7f0000000100)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

359.021901ms ago: executing program 3 (id=4946):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000002300)=[{&(0x7f0000000300)="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", 0x163}, {&(0x7f0000000480)="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", 0xde5}, {&(0x7f00000002c0)="79c5", 0x2}], 0x3}, 0x800)

228.818348ms ago: executing program 3 (id=4947):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf15}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

0s ago: executing program 1 (id=4948):
r0 = socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendfile(r1, r0, 0x0, 0x59)

kernel console output (not intermixed with test programs):

riptor of length 0, skipping remainder of the config
[  336.069787][  T967] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  336.108549][  T967] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  336.125733][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.143301][  T967] usb 3-1: Product: syz
[  336.162620][  T967] usb 3-1: Manufacturer: syz
[  336.169699][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3891'.
[  336.174465][  T967] usb 3-1: SerialNumber: syz
[  336.250881][T14556] loop0: detected capacity change from 0 to 64
[  336.433210][  T967] usb 3-1: 0:2 : does not exist
[  336.455776][  T967] usb 3-1: unit 3 not found!
[  336.471936][  T967] usb 3-1: unit 64 not found!
[  336.508949][  T967] usb 3-1: 1:2 : does not exist
[  336.524006][  T967] snd-usb-audio: probe of 3-1:1.1 failed with error -16
[  336.537952][  T967] usb 3-1: USB disconnect, device number 25
[  336.847355][T14574] loop3: detected capacity change from 0 to 8192
[  336.873056][T14574] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  336.903251][T14574] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  336.936901][T14574] REISERFS (device loop3): using ordered data mode
[  336.953486][T14574] reiserfs: using flush barriers
[  336.961745][T14579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3903'.
[  336.978236][T14574] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  337.021495][T14574] REISERFS (device loop3): checking transaction log (loop3)
[  337.042279][T14574] REISERFS (device loop3): Using r5 hash to sort names
[  337.075753][T14574] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  337.164412][T14582] SET target dimension over the limit!
[  337.374291][T14587] loop1: detected capacity change from 0 to 64
[  337.996265][  T787] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  338.196214][  T787] usb 4-1: Using ep0 maxpacket: 16
[  338.216337][  T787] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  338.234550][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.256048][  T787] usb 4-1: Product: syz
[  338.260264][  T787] usb 4-1: Manufacturer: syz
[  338.285210][  T787] usb 4-1: SerialNumber: syz
[  338.299368][  T787] usb 4-1: config 0 descriptor??
[  338.322169][  T787] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  338.404120][T14615] loop2: detected capacity change from 0 to 128
[  338.427970][T14615] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  338.478079][T14615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  338.640032][T14617] loop1: detected capacity change from 0 to 4096
[  338.671956][T14617] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  338.764745][  T787] ssu100: probe of 4-1:0.0 failed with error -71
[  338.795207][  T787] usb 4-1: USB disconnect, device number 24
[  338.801734][T14617] ntfs: volume version 3.1.
[  339.192981][T14631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3929'.
[  339.262208][T14623] loop0: detected capacity change from 0 to 32768
[  339.280672][T14623] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.3925 (14623)
[  339.306549][ T5836] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  339.327080][T14623] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  339.348763][T14623] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  339.374769][T14623] BTRFS info (device loop0): force zlib compression, level 3
[  339.395067][T14623] BTRFS info (device loop0): force clearing of disk cache
[  339.422968][T14623] BTRFS info (device loop0): setting nodatasum
[  339.449309][T14623] BTRFS info (device loop0): allowing degraded mounts
[  339.480257][T14623] BTRFS info (device loop0): enabling disk space caching
[  339.506102][T14623] BTRFS info (device loop0): disk space caching is enabled
[  339.516497][ T5836] usb 3-1: Using ep0 maxpacket: 32
[  339.565504][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  339.595482][ T5836] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  339.623486][ T5836] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  339.641729][ T5836] usb 3-1: config 0 interface 0 has no altsetting 1
[  339.652827][ T5836] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57
[  339.685446][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.706406][T14623] BTRFS info (device loop0): auto enabling async discard
[  339.707326][ T5836] usb 3-1: Product: syz
[  339.736053][ T5836] usb 3-1: Manufacturer: syz
[  339.739253][T14623] BTRFS info (device loop0): rebuilding free space tree
[  339.740987][ T5836] usb 3-1: SerialNumber: syz
[  339.768278][ T5836] usb 3-1: config 0 descriptor??
[  339.817755][T14623] BTRFS info (device loop0): disabling free space tree
[  339.856173][T14623] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  339.866416][T14623] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  340.020402][T14623] BTRFS info (device loop0): balance: start -susage=8..9,limit=0..81917
[  340.077274][T14623] BTRFS info (device loop0): balance: ended with status: 0
[  340.129618][T14637] loop3: detected capacity change from 0 to 32768
[  340.178777][T14637] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  340.231070][T14637] JBD2: Ignoring recovery information on journal
[  340.283815][ T5770] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  340.385568][ T5825] usb 3-1: USB disconnect, device number 26
[  340.401513][T14637] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  340.617261][T14637] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1
[  340.664142][T14668] bridge3: the hash_elasticity option has been deprecated and is always 16
[  340.695010][T14668] bridge3: entered promiscuous mode
[  340.709781][T14668] bridge3: entered allmulticast mode
[  340.723560][T14637] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  340.790047][T14637] OCFS2: File system is now read-only.
[  340.795581][T14637] (syz.3.3932,14637,1):ocfs2_search_chain:1761 ERROR: status = -30
[  340.846675][T14637] (syz.3.3932,14637,1):ocfs2_search_chain:1871 ERROR: status = -30
[  340.886072][T14637] (syz.3.3932,14637,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  340.896128][T14637] (syz.3.3932,14637,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  340.904713][T14637] (syz.3.3932,14637,1):__ocfs2_claim_clusters:2365 ERROR: status = -30
[  340.963677][T14674] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  340.972393][T14637] (syz.3.3932,14637,1):__ocfs2_claim_clusters:2373 ERROR: status = -30
[  341.003794][T14637] (syz.3.3932,14637,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  341.014916][T14637] (syz.3.3932,14637,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  341.053488][T14637] (syz.3.3932,14637,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  341.095774][T14637] (syz.3.3932,14637,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  341.136751][T14637] (syz.3.3932,14637,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  341.163266][T14637] (syz.3.3932,14637,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  341.194918][T14637] (syz.3.3932,14637,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30
[  341.225909][T14637] (syz.3.3932,14637,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30
[  341.240359][T14637] (syz.3.3932,14637,0):ocfs2_expand_inline_dir:2858 ERROR: status = -30
[  341.249079][T14637] (syz.3.3932,14637,0):ocfs2_extend_dir:3205 ERROR: status = -30
[  341.261651][T14637] (syz.3.3932,14637,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30
[  341.270514][T14637] (syz.3.3932,14637,0):ocfs2_mknod:298 ERROR: status = -30
[  341.283698][T14637] (syz.3.3932,14637,0):ocfs2_mknod:502 ERROR: status = -30
[  341.292923][T14637] (syz.3.3932,14637,0):ocfs2_create:676 ERROR: status = -30
[  341.333102][T14637] syz.3.3932 (14637) used greatest stack depth: 18224 bytes left
[  341.406698][ T5769] ocfs2: Unmounting device (7,3) on (node local)
[  341.631736][T14688] loop1: detected capacity change from 0 to 512
[  341.716239][T14688] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  341.743864][T14688] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  341.757962][T14688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.954923][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.979260][T14680] loop2: detected capacity change from 0 to 40427
[  342.006914][T14680] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288)
[  342.034090][T14680] F2FS-fs (loop2): invalid crc value
[  342.057419][T14680] F2FS-fs (loop2): Found nat_bits in checkpoint
[  342.198437][T14680] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  342.391587][T14714] netlink: 'syz.3.3958': attribute type 58 has an invalid length.
[  342.404902][T14714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3958'.
[  342.542262][T14716] bridge0: entered promiscuous mode
[  342.557881][T14716] bridge0: entered allmulticast mode
[  342.774583][T14720] loop2: detected capacity change from 0 to 512
[  342.984574][T14724] x_tables: unsorted underflow at hook 2
[  343.085318][T14726] loop2: detected capacity change from 0 to 512
[  343.112806][T14726] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  343.158334][T14726] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  343.243273][T14710] loop0: detected capacity change from 0 to 32768
[  343.300563][T14710] 
[  343.300563][T14710]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  343.300563][T14710] 
[  343.350696][T14726] EXT4-fs (loop2): failed to open journal device unknown-block(0,5) -6
[  343.422585][T14712] loop1: detected capacity change from 0 to 40427
[  343.468328][ T5770] 
[  343.468328][ T5770]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  343.468328][ T5770] 
[  343.486394][T14712] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  343.494166][T14712] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  343.533953][ T5770] 
[  343.533953][ T5770]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  343.533953][ T5770] 
[  343.561839][T14712] F2FS-fs (loop1): invalid crc value
[  343.623402][T14712] F2FS-fs (loop1): Found nat_bits in checkpoint
[  343.638914][T14742] loop0: detected capacity change from 0 to 16
[  343.721411][T14742] erofs: (device loop0): mounted with root inode @ nid 36.
[  343.775058][T14712] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  343.798514][T14712] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  343.806683][T14747] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3971'.
[  343.816879][T14742] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  343.836330][T14745] netlink: 'syz.3.3970': attribute type 2 has an invalid length.
[  343.886290][T14745] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3970'.
[  343.896881][T14742] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  343.923810][T14742] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  343.986805][T14742] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  344.225959][T14753] loop0: detected capacity change from 0 to 64
[  344.887276][T14779] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem
[  345.340484][T14801] loop2: detected capacity change from 0 to 1024
[  345.356996][T14801] EXT4-fs: Ignoring removed mblk_io_submit option
[  345.388958][T14801] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  345.418035][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4000'.
[  345.428307][T14801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.559870][T14812] loop1: detected capacity change from 0 to 16
[  345.578238][T14812] erofs: (device loop1): mounted with root inode @ nid 36.
[  345.592543][T14812] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89
[  345.605052][T14812] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89
[  345.614600][T14812] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89
[  345.624139][T14812] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 89
[  345.641896][   T28] kauditd_printk_skb: 21 callbacks suppressed
[  345.641907][   T28] audit: type=1800 audit(1777326381.405:141): pid=14812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4002" name="file3" dev="loop1" ino=89 res=0 errno=0
[  345.652345][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.013537][T14824] loop0: detected capacity change from 0 to 16
[  346.031075][T14824] erofs: (device loop0): mounted with root inode @ nid 36.
[  346.073736][T14824] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[  346.110111][T14824] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89
[  346.140154][T14824] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[  346.161790][T14824] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89
[  346.183710][T14824] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[  346.215588][T14824] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89
[  346.242889][T14824] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[  346.272371][T14824] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[  346.289733][T14824] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89
[  346.308049][   T28] audit: type=1800 audit(1777326382.085:142): pid=14824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4008" name="file3" dev="loop0" ino=89 res=0 errno=0
[  346.327700][    C0] vkms_vblank_simulate: vblank timer overrun
[  346.366789][ T5825] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  346.571731][ T5825] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  346.588608][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.607267][ T5825] usb 4-1: config 0 descriptor??
[  346.631612][T14844] comedi comedi3: comedi_config --init_data is deprecated
[  346.885564][T14853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4022'.
[  346.924340][T14853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4022'.
[  346.988123][   T28] audit: type=1326 audit(1777326382.765:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14856 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc573d9cdd9 code=0x7ffc0000
[  347.010484][    C0] vkms_vblank_simulate: vblank timer overrun
[  347.047733][ T5825] ath6kl: Failed to submit usb control message: -71
[  347.063467][   T28] audit: type=1326 audit(1777326382.765:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14856 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc573d9cdd9 code=0x7ffc0000
[  347.085174][ T5825] ath6kl: unable to send the bmi data to the device: -71
[  347.106270][ T5825] ath6kl: Unable to send get target info: -71
[  347.111051][   T28] audit: type=1326 audit(1777326382.815:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14856 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fc573d9cdd9 code=0x7ffc0000
[  347.147748][ T5825] ath6kl: Failed to init ath6kl core: -71
[  347.154736][ T5825] ath6kl_usb: probe of 4-1:0.0 failed with error -71
[  347.196132][   T28] audit: type=1326 audit(1777326382.815:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14856 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc573d9cdd9 code=0x7ffc0000
[  347.226381][ T5825] usb 4-1: USB disconnect, device number 25
[  347.252636][   T28] audit: type=1326 audit(1777326382.815:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14856 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc573d9cdd9 code=0x7ffc0000
[  347.362624][T14863] loop2: detected capacity change from 0 to 4096
[  347.379170][T14863] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  347.438585][T14863] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  347.458820][T14863] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  347.499367][T14863] ntfs: volume version 3.1.
[  347.858746][  T967] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  348.041692][T14888] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  348.044685][T14889] loop1: detected capacity change from 0 to 64
[  348.079948][  T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  348.102669][  T967] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[  348.114237][  T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.138009][  T967] usb 1-1: Product: syz
[  348.143687][  T967] usb 1-1: Manufacturer: syz
[  348.152394][  T967] usb 1-1: SerialNumber: syz
[  348.162302][  T967] usb 1-1: config 0 descriptor??
[  348.181209][  T967] usbtouchscreen: probe of 1-1:0.0 failed with error -12
[  348.419311][ T5825] usb 1-1: USB disconnect, device number 28
[  348.467849][T14901] xt_policy: output policy not valid in PREROUTING and INPUT
[  348.793301][T14909] loop3: detected capacity change from 0 to 4096
[  348.836326][T14909] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  348.944572][T14909] ntfs3: loop3: Failed to initialize $Extend/$ObjId.
[  349.060533][T14899] loop1: detected capacity change from 0 to 40427
[  349.113703][T14899] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  349.136169][T14899] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  349.168504][T14899] F2FS-fs (loop1): heap/no_heap options were deprecated
[  349.195105][T14919] netlink: 'syz.3.4056': attribute type 2 has an invalid length.
[  349.222196][T14899] F2FS-fs (loop1): invalid crc value
[  349.229020][T14919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  349.271995][T14899] F2FS-fs (loop1): Found nat_bits in checkpoint
[  349.434509][T14899] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  349.447851][T14899] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  349.528259][T14899] syz.1.4044: attempt to access beyond end of device
[  349.528259][T14899] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  349.598262][ T5766] syz-executor: attempt to access beyond end of device
[  349.598262][ T5766] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  349.630097][ T5766] F2FS-fs (loop1): Remounting filesystem read-only
[  349.759779][T14934] xt_CT: No such helper "snmp_trap"
[  349.925432][T14944] loop2: detected capacity change from 0 to 128
[  350.029697][T14944] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  350.106209][T14944] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  350.447965][T14960] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4073'.
[  350.477028][T14962] xt_TPROXY: Can be used only with -p tcp or -p udp
[  350.669487][T14968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4076'.
[  351.033798][T14980] xt_CT: You must specify a L4 protocol and not use inversions on it
[  351.240191][T14954] loop3: detected capacity change from 0 to 32768
[  351.315560][T14954] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  351.549193][T14954] XFS (loop3): Ending clean mount
[  351.737441][ T5769] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  352.092132][T15025] loop2: detected capacity change from 0 to 1024
[  352.239205][T15025] 9pnet_fd: p9_fd_create_unix (15025): problem connecting socket: ./file1: -13
[  352.549403][T15044] netlink: 'syz.1.4110': attribute type 21 has an invalid length.
[  352.603586][T15044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4110'.
[  353.305254][T15078] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4127'.
[  353.510238][T15088] netlink: 'syz.3.4133': attribute type 1 has an invalid length.
[  353.520785][T15088] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.4133'.
[  353.724890][T15098] tmpfs: Group quota block hardlimit too large.
[  353.812417][T15102] loop2: detected capacity change from 0 to 256
[  353.826453][  T967] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  353.915075][T15102] FAT-fs (loop2): Directory bread(block 64) failed
[  353.950869][T15102] FAT-fs (loop2): Directory bread(block 65) failed
[  353.977143][T15102] FAT-fs (loop2): Directory bread(block 66) failed
[  353.998563][T15102] FAT-fs (loop2): Directory bread(block 67) failed
[  354.005779][T15102] FAT-fs (loop2): Directory bread(block 68) failed
[  354.011015][  T967] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  354.019027][T15102] FAT-fs (loop2): Directory bread(block 69) failed
[  354.033204][  T967] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  354.036842][T15102] FAT-fs (loop2): Directory bread(block 70) failed
[  354.055005][T15102] FAT-fs (loop2): Directory bread(block 71) failed
[  354.061795][  T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.062241][T15110] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  354.088312][T15102] FAT-fs (loop2): Directory bread(block 72) failed
[  354.101466][  T967] gspca_main: stv0680-2.14.0 probing 041e:4007
[  354.112001][T15102] FAT-fs (loop2): Directory bread(block 73) failed
[  354.686772][ T5836] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  354.776264][  T787] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  354.889660][ T5836] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  354.898938][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.907777][ T5836] usb 2-1: Product: syz
[  354.911975][ T5836] usb 2-1: Manufacturer: syz
[  354.917186][ T5825] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  354.925662][ T5836] usb 2-1: SerialNumber: syz
[  354.932380][ T5836] usb 2-1: config 0 descriptor??
[  354.942762][ T5836] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  354.958486][  T787] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  354.968879][  T787] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  354.978535][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.999331][  T787] gspca_main: stv0680-2.14.0 probing 041e:4007
[  355.108997][ T5825] usb 3-1: unable to get BOS descriptor or descriptor too short
[  355.119529][ T5825] usb 3-1: not running at top speed; connect to a high speed hub
[  355.129261][ T5825] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  355.142362][ T5825] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  355.164367][ T5825] usb 3-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40
[  355.173491][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.186050][ T5825] usb 3-1: Product: syz
[  355.192419][ T5825] usb 3-1: Manufacturer: syz
[  355.200631][ T5825] usb 3-1: SerialNumber: syz
[  355.214918][T15132] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  355.367616][  T967] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71
[  355.381175][  T967] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  355.389970][  T967] stv0680 1-1:4.0: last error: 86,  command = 0x78
[  355.398631][ T5836] sonixb 2-1:0.0: Error writing register 01: -71
[  355.403448][  T967] usb 1-1: USB disconnect, device number 29
[  355.405322][ T5836] sonixb: probe of 2-1:0.0 failed with error -71
[  355.435771][ T5836] usb 2-1: USB disconnect, device number 18
[  355.466546][ T5825] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  355.485584][ T5825] usb 3-1: MIDIStreaming interface descriptor not found
[  355.526515][ T5825] usb 3-1: USB disconnect, device number 27
[  355.559504][ T6595] udevd[6595]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  356.041711][  T787] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  356.081805][  T787] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  356.098050][  T787] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  356.111759][  T787] stv0680 4-1:4.0: last error: 0,  command = 0x0
[  356.120236][  T787] usb 4-1: USB disconnect, device number 26
[  356.143949][T15137] loop0: detected capacity change from 0 to 4096
[  356.179419][T15137] __ntfs_warning: 23 callbacks suppressed
[  356.179433][T15137] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  356.211786][T15141] netlink: 'syz.2.4158': attribute type 29 has an invalid length.
[  356.244671][T15137] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  356.266183][T15137] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  356.287015][T15137] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  356.296779][T15137] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  356.336138][T15137] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  356.360013][T15137] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  356.385307][T15137] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  356.394693][T15137] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  356.426660][T15145] netlink: 424 bytes leftover after parsing attributes in process `syz.2.4160'.
[  356.437537][T15145] netlink: 'syz.2.4160': attribute type 1 has an invalid length.
[  356.445472][T15137] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  356.466391][T15137] ntfs: volume version 3.1.
[  357.354389][T15185] netlink: 'syz.3.4180': attribute type 10 has an invalid length.
[  357.426299][T15185] team0: Device veth1_macvtap failed to register rx_handler
[  357.496109][  T967] usb 1-1: new low-speed USB device number 30 using dummy_hcd
[  357.688563][  T967] usb 1-1: unable to get BOS descriptor or descriptor too short
[  357.707265][  T967] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  357.729153][  T967] usb 1-1: string descriptor 0 read error: -22
[  357.735591][  T967] usb 1-1: New USB device found, idVendor=054c, idProduct=0095, bcdDevice=a5.6a
[  357.766053][  T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.989614][  T967] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[  358.012265][  T967] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  358.039356][  T967] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  358.061088][T15187] loop2: detected capacity change from 0 to 32768
[  358.086201][T15187] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4181 (15187)
[  358.127634][T15187] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  358.158811][T15187] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  358.184232][T15187] BTRFS info (device loop2): force clearing of disk cache
[  358.194418][T15187] BTRFS info (device loop2): force zlib compression, level 3
[  358.202086][T15187] BTRFS info (device loop2): enabling auto defrag
[  358.202282][  T967] usb 1-1: USB disconnect, device number 30
[  358.208679][T15187] BTRFS info (device loop2): max_inline at 0
[  358.208699][T15187] BTRFS info (device loop2): enabling disk space caching
[  358.208715][T15187] BTRFS info (device loop2): disk space caching is enabled
[  358.214830][    T8] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  358.268866][  T967] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  358.306876][  T967] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  358.333636][  T967] visor 1-1:1.0: device disconnected
[  358.359059][T15187] BTRFS info (device loop2): enabling ssd optimizations
[  358.379600][T15187] BTRFS info (device loop2): auto enabling async discard
[  358.413265][T15187] BTRFS info (device loop2): rebuilding free space tree
[  358.455591][T15187] BTRFS info (device loop2): disabling free space tree
[  358.466226][    T8] usb 4-1: Using ep0 maxpacket: 16
[  358.475728][T15187] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  358.491598][    T8] usb 4-1: config 254 has an invalid interface number: 235 but max is 0
[  358.503587][T15187] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  358.512086][    T8] usb 4-1: config 254 has no interface number 0
[  358.527637][    T8] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  358.548317][    T8] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  358.577825][    T8] usb 4-1: config 254 interface 235 has no altsetting 0
[  358.599634][    T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  358.616253][    T8] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3
[  358.634629][    T8] usb 4-1: Product: syz
[  358.646932][    T8] usb 4-1: Manufacturer: syz
[  358.651902][    T8] usb 4-1: SerialNumber: syz
[  358.653482][ T5774] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  358.671561][T15201] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  358.737276][ T5825] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  358.789125][ T9163] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop2 scanned by udevd (9163)
[  358.902731][T15201] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  358.929046][    T8] usbtest 4-1:254.235: Linux gadget zero
[  358.948345][    T8] usbtest 4-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt)
[  358.967191][ T5825] usb 2-1: unable to get BOS descriptor or descriptor too short
[  358.996543][ T5825] usb 2-1: config 66 has an invalid interface number: 114 but max is 0
[  359.004842][ T5825] usb 2-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[  359.056308][ T5825] usb 2-1: config 66 has no interface number 0
[  359.062623][ T5825] usb 2-1: too many endpoints for config 66 interface 114 altsetting 115: 105, using maximum allowed: 30
[  359.116384][ T5825] usb 2-1: config 66 interface 114 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 105
[  359.136400][ T5825] usb 2-1: config 66 interface 114 has no altsetting 0
[  359.153126][ T5825] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  359.162748][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.179291][ T5825] usb 2-1: Product: syz
[  359.183491][ T5825] usb 2-1: Manufacturer: syz
[  359.238212][ T5836] usb 4-1: USB disconnect, device number 27
[  359.246295][ T5825] usb 2-1: SerialNumber: syz
[  359.509563][ T5825] usb 2-1: USB disconnect, device number 19
[  359.941095][T15259] loop2: detected capacity change from 0 to 16
[  359.957800][T15259] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  360.243016][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4214'.
[  360.435678][T15270] loop2: detected capacity change from 0 to 4096
[  360.934550][T15292] overlayfs: missing 'workdir'
[  361.076191][  T967] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  361.248227][T15296] loop1: detected capacity change from 0 to 2048
[  361.260392][  T967] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  361.273250][T15284] loop0: detected capacity change from 0 to 32768
[  361.279979][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.298183][  T967] usb 3-1: Product: syz
[  361.308410][  T967] usb 3-1: Manufacturer: syz
[  361.323619][T15296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  361.336261][  T967] usb 3-1: SerialNumber: syz
[  361.355509][  T967] r8152-cfgselector 3-1: config 0 descriptor??
[  361.378610][T15282] loop3: detected capacity change from 0 to 32768
[  361.479252][T15282] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  361.542121][T15305] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4230'.
[  361.657095][T15282] XFS (loop3): Ending clean mount
[  361.674245][T15282] XFS (loop3): Quotacheck needed: Please wait.
[  361.824285][T15282] XFS (loop3): Quotacheck: Done.
[  361.830212][  T967] r8152-cfgselector 3-1: Unknown version 0x0000
[  361.844188][  T967] r8152-cfgselector 3-1: USB disconnect, device number 28
[  362.012624][ T5769] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  362.073024][T15318] loop0: detected capacity change from 0 to 4096
[  362.096646][T15318] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  362.201634][T15322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  362.209520][T15322] batman_adv: batadv0: Removing interface: batadv_slave_0
[  362.222699][T15318] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  362.232333][T15322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  362.246387][T15322] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.908875][T15344] loop0: detected capacity change from 0 to 512
[  362.958134][T15346] netlink: 'syz.1.4248': attribute type 1 has an invalid length.
[  362.979493][T15346] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4248'.
[  363.003656][T15344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.056248][T15344] ext4 filesystem being mounted at /1003/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.211646][T15344] EXT4-fs error (device loop0): ext4_xattr_block_find:1879: inode #15: comm syz.0.4246: corrupted xattr block 32: invalid header
[  363.363335][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.421117][T15367] tipc: Enabling of bearer <ud#:s> rejected, media not registered
[  363.656414][T15377] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  364.034239][T15394] loop0: detected capacity change from 0 to 256
[  364.416998][T15408] loop1: detected capacity change from 0 to 4096
[  364.440493][T15408] __ntfs_error: 16 callbacks suppressed
[  364.440508][T15408] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  364.510776][T15408] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing.
[  364.526724][ T5825] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  364.547462][T15408] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  364.586953][T15408] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  364.604686][T15414] sp0: Synchronizing with TNC
[  364.636518][T15413] [U] è`
[  364.682867][T15408] ntfs: volume version 3.1.
[  364.721382][ T5825] usb 1-1: unable to get BOS descriptor or descriptor too short
[  364.735161][ T5825] usb 1-1: not running at top speed; connect to a high speed hub
[  364.761329][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  364.786070][ T5825] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  364.822605][ T5825] usb 1-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40
[  364.834415][T15408] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  364.839891][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.863812][ T5825] usb 1-1: Product: syz
[  364.868157][T15408] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x40 as bad.  Run chkdsk.
[  364.911763][ T5825] usb 1-1: Manufacturer: syz
[  364.919451][ T5825] usb 1-1: SerialNumber: syz
[  364.930025][T15403] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  365.101927][T15422] loop1: detected capacity change from 0 to 256
[  365.186539][ T5825] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  365.203726][ T5825] usb 1-1: MIDIStreaming interface descriptor not found
[  365.307460][ T5825] usb 1-1: USB disconnect, device number 31
[  365.402953][ T6595] udevd[6595]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  365.482189][   T28] audit: type=1326 audit(1777326401.255:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15427 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc573d9cdd9 code=0x7ffc0000
[  365.493487][T15416] loop2: detected capacity change from 0 to 32768
[  365.523411][   T28] audit: type=1326 audit(1777326401.255:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15427 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc573d9cdd9 code=0x7ffc0000
[  365.565219][   T28] audit: type=1326 audit(1777326401.285:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15427 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc573d9cdd9 code=0x7ffc0000
[  365.598300][   T28] audit: type=1326 audit(1777326401.285:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15427 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc573d9cdd9 code=0x7ffc0000
[  365.679858][T15416] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  365.931818][T15416] XFS (loop2): Ending clean mount
[  366.195539][ T5774] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  366.569997][T15451] loop3: detected capacity change from 0 to 32768
[  366.674546][T15443] loop1: detected capacity change from 0 to 32768
[  366.773128][T15443] jfs_strtoUCS: char2uni returned -22.
[  366.792132][T15443] charset = cp857, char = 0xd5
[  367.696143][T15500] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  367.716343][T15500] batman_adv: batadv0: Removing interface: batadv_slave_0
[  367.736838][T15500] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  367.744537][T15500] batman_adv: batadv0: Removing interface: batadv_slave_1
[  368.201744][T15511] loop0: detected capacity change from 0 to 512
[  368.226756][T15494] loop2: detected capacity change from 0 to 32768
[  368.291151][T15494] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  368.333811][T15511] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.4320: inode has both inline data and extents flags
[  368.358176][T15511] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.4320: couldn't read orphan inode 15 (err -117)
[  368.445061][T15511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  368.524711][T15494] XFS (loop2): Ending clean mount
[  368.599014][T15511] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring
[  368.635711][T15511] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  368.749796][ T5774] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  368.777504][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.992260][T15544] loop1: detected capacity change from 0 to 1024
[  369.012911][T15544] EXT4-fs (loop1): blocks per group (131072) and clusters per group (32) inconsistent
[  369.368463][T15555] loop3: detected capacity change from 0 to 1024
[  369.401583][T15555] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  369.506770][ T5825] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  369.593082][T15565] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.601726][T15565] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.613540][T15565] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.621556][T15565] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.636465][T15565] batman_adv: batadv0: Removing interface: netdevsim0
[  369.649696][    T8] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  369.708402][ T5825] usb 1-1: config index 0 descriptor too short (expected 65230, got 72)
[  369.726706][ T5825] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  369.746091][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.758669][ T5825] usb 1-1: Product: syz
[  369.763271][ T5825] usb 1-1: Manufacturer: syz
[  369.780074][ T5825] usb 1-1: SerialNumber: syz
[  369.791273][ T5825] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  369.826226][  T787] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  369.849587][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  369.886047][    T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  369.911100][    T8] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  369.936089][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.949815][    T8] usb 2-1: config 0 descriptor??
[  369.969420][    T8] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  369.979850][    T8] dvb-usb: bulk message failed: -22 (3/0)
[  370.014543][    T8] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  370.066428][    T8] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  370.074038][    T8] usb 2-1: media controller created
[  370.128557][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  370.144668][    C1] usb 1-1: ath9k_htc: invalid pkt_len (fe77)
[  370.179116][    T8] dvb-usb: bulk message failed: -22 (6/0)
[  370.193950][    T8] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  370.208203][    T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19
[  370.244796][    T8] dvb-usb: schedule remote query interval to 150 msecs.
[  370.268063][    T8] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  370.310970][    T8] usb 2-1: USB disconnect, device number 20
[  370.346417][    T9] usb 1-1: USB disconnect, device number 32
[  370.392645][    T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  370.507430][T15585] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  370.926689][  T787] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  370.938141][  T787] ath9k_htc: Failed to initialize the device
[  370.951959][T15603] ipvlan2: entered promiscuous mode
[  370.962723][    T9] usb 1-1: ath9k_htc: USB layer deinitialized
[  371.234232][T15615] ptrace attach of "./syz-executor exec"[5770] was attempted by ""[15615]
[  371.426106][ T5836] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  371.543748][T15630] loop0: detected capacity change from 0 to 64
[  371.636100][ T5836] usb 4-1: Using ep0 maxpacket: 16
[  371.653311][ T5836] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  371.666107][ T5836] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  371.680108][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.708680][ T5836] usb 4-1: Product: syz
[  371.712894][ T5836] usb 4-1: Manufacturer: syz
[  371.736664][ T5836] usb 4-1: SerialNumber: syz
[  371.751316][ T5836] r8152-cfgselector 4-1: config 0 descriptor??
[  371.784610][T15637] loop1: detected capacity change from 0 to 512
[  371.806771][T15637] EXT4-fs: Ignoring removed bh option
[  371.816510][T15637] EXT4-fs (loop1): Test dummy encryption mode enabled
[  371.828358][T15637] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  371.843267][T15637] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.4373: inode has both inline data and extents flags
[  371.857672][T15637] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.4373: couldn't read orphan inode 15 (err -117)
[  371.874452][T15637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  371.980076][ T5836] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[  371.989868][   T11] usb 4-1: config 0 descriptor??
[  372.076154][    T8] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  372.196213][ T5836] usb 4-1: USB disconnect, device number 28
[  372.206217][   T11] usb 4-1: can't set config #0, error -71
[  372.229711][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.285401][    T8] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  372.301750][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.312098][    T8] usb 1-1: Product: syz
[  372.318562][    T8] usb 1-1: Manufacturer: syz
[  372.323303][    T8] usb 1-1: SerialNumber: syz
[  372.331741][    T8] usb 1-1: config 0 descriptor??
[  372.937551][T15658] loop2: detected capacity change from 0 to 2048
[  372.961125][T15658] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  372.973423][    T8] usb 1-1: Firmware version (0.0) predates our first public release.
[  372.989352][    T8] usb 1-1: Please update to version 0.2 or newer
[  373.021518][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  373.021533][   T28] audit: type=1800 audit(1777326408.795:157): pid=15658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4380" name="file1" dev="loop2" ino=1367 res=0 errno=0
[  373.050586][T15652] loop1: detected capacity change from 0 to 32768
[  373.061893][    T8] usb 1-1: USB disconnect, device number 33
[  373.168272][T15652] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  373.345456][T15652] XFS (loop1): Ending clean mount
[  373.522010][ T5766] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  373.691620][T15682] loop2: detected capacity change from 0 to 512
[  373.701919][T15682] EXT4-fs: inline encryption not supported
[  373.723638][T15682] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  373.776850][T15682] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  373.800594][T15682] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.4390: bg 0: block 248: padding at end of block bitmap is not set
[  373.819072][T15682] Quota error (device loop2): write_blk: dquota write failed
[  373.838124][T15682] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  373.868439][T15682] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.4390: Failed to acquire dquot type 1
[  373.893912][T15682] EXT4-fs (loop2): 1 truncate cleaned up
[  373.903742][T15682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  373.982711][T15692] loop3: detected capacity change from 0 to 64
[  374.007747][T15682] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  374.023205][T15682] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  374.037732][T15682] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.4390: Failed to acquire dquot type 1
[  374.137204][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  374.146467][T14460] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[  374.146632][T14460] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1
[  374.346054][T15703] loop2: detected capacity change from 0 to 64
[  374.397818][T15696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  374.693990][T15714] loop2: detected capacity change from 0 to 256
[  374.719047][T15714] exfat: Deprecated parameter 'utf8'
[  374.724488][T15714] exfat: Deprecated parameter 'namecase'
[  374.759155][T15714] exfat: Deprecated parameter 'namecase'
[  374.764939][T15714] exfat: Deprecated parameter 'utf8'
[  374.849659][T15714] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  375.048075][T15722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4385'.
[  375.181725][T15729] [U] „
[  375.210996][T15731] loop1: detected capacity change from 0 to 128
[  375.367471][T15735] ALSA: mixer_oss: invalid OSS volume 'O'
[  375.376099][T15735] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  375.815762][T15751] loop3: detected capacity change from 0 to 4096
[  375.847189][T15751] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  375.905954][T15751] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  375.927798][T15751] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  376.242954][T15773] loop3: detected capacity change from 0 to 256
[  376.259660][T15773] FAT-fs (loop3): Directory bread(block 1285) failed
[  376.272714][T15773] FAT-fs (loop3): Directory bread(block 1286) failed
[  376.282709][T15773] FAT-fs (loop3): Directory bread(block 1287) failed
[  376.292169][T15773] FAT-fs (loop3): Directory bread(block 1288) failed
[  376.320123][T15773] FAT-fs (loop3): Directory bread(block 1285) failed
[  376.337515][T15773] FAT-fs (loop3): Directory bread(block 1286) failed
[  376.358404][T15773] FAT-fs (loop3): Directory bread(block 1287) failed
[  376.367410][T15773] FAT-fs (loop3): Directory bread(block 1288) failed
[  376.377356][T15773] FAT-fs (loop3): FAT read failed (blocknr 1281)
[  376.393244][T15780] FAT-fs (loop3): Directory bread(block 1285) failed
[  376.548235][    T8] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  376.751403][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.786547][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.805762][    T8] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  376.845076][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.867133][    T8] usb 1-1: config 0 descriptor??
[  377.049842][T15800] set_capacity_and_notify: 1 callbacks suppressed
[  377.049857][T15800] loop3: detected capacity change from 0 to 2048
[  377.103754][T15800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.186933][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.305203][    T8] razer 0003:1532:010E.0001: unknown main item tag 0x1
[  377.445508][T15815] loop3: detected capacity change from 0 to 2048
[  377.487043][T15815] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  377.496137][    T8] razer 0003:1532:010E.0001: failed to enable macro keys: -71
[  377.543494][   T28] audit: type=1800 audit(1777326413.315:158): pid=15815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4449" name="file1" dev="loop3" ino=1367 res=0 errno=0
[  377.566798][    T8] razer 0003:1532:010E.0001: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0
[  377.627311][    T8] usb 1-1: USB disconnect, device number 34
[  377.828046][T15817] fido_id[15817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  377.968749][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4452'.
[  378.324031][T15836] loop1: detected capacity change from 0 to 65
[  378.350628][T15836] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  378.361170][T15839] loop3: detected capacity change from 0 to 128
[  378.375781][T15836] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  378.424537][T15842] loop2: detected capacity change from 0 to 1024
[  378.452825][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.459411][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  378.509239][T15842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  378.620829][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.867409][T15855] loop2: detected capacity change from 0 to 512
[  378.902555][T15855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.926487][T15855] ext4 filesystem being mounted at /1102/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  378.940002][T15860] tipc: Started in network mode
[  378.944929][T15860] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711
[  378.983768][T15860] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  378.993352][T15855] EXT4-fs error (device loop2): ext4_resize_begin:62: comm syz.2.4465: resize_inode disabled but reserved GDT blocks non-zero
[  379.081806][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.272489][T15872] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4473'.
[  379.338564][T15874] loop2: detected capacity change from 0 to 256
[  379.485718][T15880] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4478'.
[  379.532760][T15882] netlink: 'syz.2.4479': attribute type 29 has an invalid length.
[  379.542836][T15882] netlink: 'syz.2.4479': attribute type 29 has an invalid length.
[  379.556290][T15882] netlink: 'syz.2.4479': attribute type 29 has an invalid length.
[  379.579691][T15884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4480'.
[  379.704078][T15888] loop2: detected capacity change from 0 to 2048
[  379.789064][T15888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.880734][T15888] ext4 filesystem being mounted at /1106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  380.064663][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.402174][T15895] loop3: detected capacity change from 0 to 32768
[  380.413023][T15895] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11
[  380.465470][T11405] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  380.679499][T15918] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  380.959406][T15929] can0: slcan on ttynull.
[  381.066947][T15928] can0 (unregistered): slcan off ttynull.
[  381.368884][T15938] loop2: detected capacity change from 0 to 4096
[  381.411810][T15920] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.4497 (15920)
[  381.452007][T15941] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  381.468363][T15920] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  381.468475][T15920] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  381.468521][T15920] BTRFS info (device loop0): using free space tree
[  381.585390][T15938] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only
[  381.585654][T15938] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null.
[  381.615279][T15960] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  381.659393][T15920] BTRFS info (device loop0): enabling ssd optimizations
[  381.659415][T15920] BTRFS info (device loop0): auto enabling async discard
[  381.810418][   T28] audit: type=1800 audit(1777326417.585:159): pid=15920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4497" name="file2" dev="loop0" ino=261 res=0 errno=0
[  381.910659][ T5770] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  381.966320][ T5774] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed
[  382.006094][ T5774] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed
[  382.040751][ T5774] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed
[  382.083916][ T5774] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 16 already freed
[  382.128273][ T5774] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 17 already freed
[  382.149186][ T5774] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 11
[  382.193214][ T5774] Remounting filesystem read-only
[  382.198609][ T5774] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 11
[  382.496370][  T967] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  382.596548][    T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  382.619627][ T5774] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  382.657160][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=2
[  382.663893][ T5774] NILFS (loop2): discard dirty block: blocknr=14, size=4096
[  382.711246][  T967] usb 1-1: Using ep0 maxpacket: 32
[  382.720913][  T967] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  382.739489][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=6
[  382.751451][  T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.763484][ T5774] NILFS (loop2): discard dirty block: blocknr=23, size=4096
[  382.772385][  T967] usb 1-1: Product: syz
[  382.779425][ T5774] NILFS (loop2): discard dirty page: offset=4096, ino=6
[  382.786482][  T967] usb 1-1: Manufacturer: syz
[  382.791485][ T5774] NILFS (loop2): discard dirty block: blocknr=24, size=4096
[  382.801140][    T8] usb 2-1: Using ep0 maxpacket: 16
[  382.817743][  T967] usb 1-1: SerialNumber: syz
[  382.834523][    T8] usb 2-1: config index 0 descriptor too short (expected 51443, got 18)
[  382.836805][ T5774] NILFS (loop2): discard dirty page: offset=8192, ino=6
[  382.853867][ T5774] NILFS (loop2): discard dirty block: blocknr=25, size=4096
[  382.862928][  T967] usb 1-1: config 0 descriptor??
[  382.871940][  T967] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  382.883895][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=3
[  382.891774][    T8] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  382.902831][  T967] dvb-usb: bulk message failed: -22 (2/0)
[  382.910390][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.919309][ T5774] NILFS (loop2): discard dirty block: blocknr=28, size=4096
[  382.928122][    T8] usb 2-1: Product: syz
[  382.932433][ T5774] NILFS (loop2): discard dirty page: offset=4096, ino=3
[  382.940738][    T8] usb 2-1: Manufacturer: syz
[  382.945496][ T5774] NILFS (loop2): discard dirty block: blocknr=29, size=4096
[  382.957112][  T967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  382.970448][    T8] usb 2-1: SerialNumber: syz
[  382.978172][    T8] r8152-cfgselector 2-1: config 0 descriptor??
[  382.986217][ T5774] NILFS (loop2): discard dirty page: offset=8192, ino=3
[  382.996330][  T967] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  383.009768][ T5774] NILFS (loop2): discard dirty block: blocknr=30, size=4096
[  383.017615][  T967] usb 1-1: media controller created
[  383.036237][ T5774] NILFS (loop2): discard dirty page: offset=139264, ino=3
[  383.053681][ T5774] NILFS (loop2): discard dirty block: blocknr=31, size=4096
[  383.068522][  T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  383.077168][ T5774] NILFS (loop2): discard dirty page: offset=401408, ino=3
[  383.084339][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=4096
[  383.099400][T15977] cxusb: i2c wr: len=79 is too big!
[  383.099400][T15977] 
[  383.118933][ T5774] NILFS (loop2): discard dirty page: offset=663552, ino=3
[  383.140143][  T967] usb 1-1: selecting invalid altsetting 7
[  383.145945][  T967] cxusb: set interface failed
[  383.164361][ T5774] NILFS (loop2): discard dirty block: blocknr=34, size=4096
[  383.172280][  T967] dvb-usb: bulk message failed: -22 (1/0)
[  383.181328][ T5774] NILFS (loop2): discard dirty page: offset=794624, ino=3
[  383.210056][ T5774] NILFS (loop2): discard dirty block: blocknr=35, size=4096
[  383.226268][ T5774] NILFS (loop2): discard dirty page: offset=925696, ino=3
[  383.236178][    T8] r8152-cfgselector 2-1: Needed 1 retries to read version
[  383.247812][ T5774] NILFS (loop2): discard dirty block: blocknr=36, size=4096
[  383.258332][    T8] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  383.289566][  T967] DVB: Unable to find symbol lgdt330x_attach()
[  383.295777][  T967] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  383.436143][  T967] rc_core: IR keymap rc-dvico-portable not found
[  383.456064][  T967] Registered IR keymap rc-empty
[  383.463958][    T8] usb 2-1: USB disconnect, device number 21
[  383.481024][  T967] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  383.499950][  T967] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input20
[  383.514703][  T967] dvb-usb: schedule remote query interval to 100 msecs.
[  383.521739][  T967] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  383.544863][  T967] usb 1-1: USB disconnect, device number 35
[  383.668676][  T967] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  383.966797][T16015] set_capacity_and_notify: 2 callbacks suppressed
[  383.966811][T16015] loop3: detected capacity change from 0 to 64
[  383.988943][T16015] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  384.098556][T16017] loop1: detected capacity change from 0 to 1024
[  384.131633][T16017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.224537][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.249995][  T967] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  384.260477][T16022] loop3: detected capacity change from 0 to 4096
[  384.326537][T16022] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  384.378728][T16022] ntfs3: loop3: Failed to load $Extend (-22).
[  384.384965][T16022] ntfs3: loop3: Failed to initialize $Extend.
[  384.442125][  T967] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  384.464757][  T967] usb 1-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  384.474855][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  384.488759][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  384.499991][  T967] usb 1-1: New USB device found, idVendor=813a, idProduct=22fe, bcdDevice=89.9c
[  384.509527][  T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.517809][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  384.525383][  T967] usb 1-1: Product: syz
[  384.532055][  T967] usb 1-1: Manufacturer: syz
[  384.536883][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  384.544709][  T967] usb 1-1: SerialNumber: syz
[  384.549789][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  384.557919][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  384.632849][T16028] Bluetooth: MGMT ver 1.22
[  384.923450][T16025] chnl_net:caif_netlink_parms(): no params data found
[  384.952006][  T967] usb 1-1: USB disconnect, device number 36
[  384.998449][T16039] loop1: detected capacity change from 0 to 4096
[  385.038631][T16039] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  385.051031][T16039] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  385.079697][T16039] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  385.091756][T16039] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  385.136219][T16039] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  385.154354][T16025] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.179824][T16039] ntfs: volume version 3.1.
[  385.184806][T16025] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.196504][T16046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4533'.
[  385.220179][T16039] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  385.239771][T16025] bridge_slave_0: entered allmulticast mode
[  385.246229][T16039] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  385.261431][T16025] bridge_slave_0: entered promiscuous mode
[  385.284916][T16025] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.292814][T16039] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  385.296564][T16025] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.315571][T16025] bridge_slave_1: entered allmulticast mode
[  385.324865][T16025] bridge_slave_1: entered promiscuous mode
[  385.339317][T16039] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  385.389826][T16025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.407138][T16025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.455316][T16025] team0: Port device team_slave_0 added
[  385.469301][T16025] team0: Port device team_slave_1 added
[  385.522573][T16025] batman_adv: batadv0: Adding interface: batadv_slave_0
[  385.539695][T16025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.621873][T16025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  385.654822][T16025] batman_adv: batadv0: Adding interface: batadv_slave_1
[  385.676286][T16025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.741687][T16025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  385.850657][T16025] hsr_slave_0: entered promiscuous mode
[  385.892917][T16025] hsr_slave_1: entered promiscuous mode
[  385.917994][T16025] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  385.925594][T16025] Cannot create hsr debugfs directory
[  386.503070][T16025] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  386.525066][T16025] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  386.547553][T16025] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  386.565866][T16025] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  386.606487][ T5777] Bluetooth: hci3: command tx timeout
[  386.739118][T16025] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.824761][T16025] 8021q: adding VLAN 0 to HW filter on device team0
[  386.857519][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.864994][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.920004][T14460] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.927270][T14460] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.037034][T16025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  387.076327][ T5904] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  387.276120][ T5904] usb 4-1: Using ep0 maxpacket: 32
[  387.284264][ T5904] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  387.305370][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0
[  387.312984][ T5904] usb 4-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00
[  387.346080][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.357870][ T5904] usb 4-1: config 0 descriptor??
[  387.433301][T16025] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.809739][ T5904] wacom 0003:056A:0343.0002: ignoring exceeding usage max
[  387.830174][ T5904] wacom 0003:056A:0343.0002: unknown main item tag 0x0
[  387.856040][ T5904] wacom 0003:056A:0343.0002: unknown main item tag 0x0
[  387.862970][ T5904] wacom 0003:056A:0343.0002: unknown main item tag 0x0
[  387.878282][ T5904] wacom 0003:056A:0343.0002: unknown main item tag 0x0
[  387.885239][ T5904] wacom 0003:056A:0343.0002: unknown main item tag 0x0
[  387.902363][ T5904] wacom 0003:056A:0343.0002: unknown main item tag 0x0
[  387.910236][ T5904] wacom 0003:056A:0343.0002: unknown main item tag 0x0
[  387.917831][ T5904] wacom 0003:056A:0343.0002: unknown main item tag 0x0
[  387.924735][ T5904] wacom 0003:056A:0343.0002: unknown main item tag 0x0
[  387.932023][ T5904] wacom 0003:056A:0343.0002: unknown main item tag 0x0
[  387.939784][ T5904] wacom 0003:056A:0343.0002: unknown main item tag 0x0
[  387.946931][ T5904] wacom 0003:056A:0343.0002: unknown main item tag 0x0
[  387.967372][ T5904] wacom 0003:056A:0343.0002: hidraw0: USB HID v0.0a Device [HID 056a:0343] on usb-dummy_hcd.3-1/input0
[  388.035659][T16025] veth0_vlan: entered promiscuous mode
[  388.049460][ T5904] usb 4-1: USB disconnect, device number 29
[  388.091299][T16025] veth1_vlan: entered promiscuous mode
[  388.160920][T16025] veth0_macvtap: entered promiscuous mode
[  388.169832][T16104] fido_id[16104]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  388.208597][T16025] veth1_macvtap: entered promiscuous mode
[  388.246609][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.257251][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.281802][T16025] batman_adv: batadv0: Interface activated: batadv_slave_0
[  388.312821][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.323681][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.341919][T16025] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.360304][T16025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.372091][T16025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.381832][T16025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.392502][T16025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.566429][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.590596][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.664423][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.675173][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.686301][ T5777] Bluetooth: hci3: command tx timeout
[  389.227385][T16116] loop0: detected capacity change from 0 to 32768
[  389.309407][T16116] JBD2: Ignoring recovery information on journal
[  389.378014][T16119] loop3: detected capacity change from 0 to 40427
[  389.395782][T16119] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[  389.404059][T16119] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff
[  389.421788][T16119] F2FS-fs (loop3): Image doesn't support compression
[  389.470059][T16119] F2FS-fs (loop3): invalid crc value
[  389.505400][T16116] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  389.516697][T16119] F2FS-fs (loop3): Found nat_bits in checkpoint
[  389.696539][T16119] F2FS-fs (loop3): Start checkpoint disabled!
[  389.714048][T16119] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  389.787878][ T5770] ocfs2: Unmounting device (7,0) on (node local)
[  390.085218][T16125] loop1: detected capacity change from 0 to 40427
[  390.109439][T16125] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288)
[  390.160726][T16125] F2FS-fs (loop1): invalid crc value
[  390.188522][T16125] F2FS-fs (loop1): Found nat_bits in checkpoint
[  390.292791][T16125] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  390.385956][T16127] loop4: detected capacity change from 0 to 32768
[  390.478622][T16127] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  390.565319][T16127] XFS (loop4): Ending clean mount
[  390.631555][T16127] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  390.756303][ T5777] Bluetooth: hci3: command tx timeout
[  390.889171][T16025] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  390.909639][T16146] loop1: detected capacity change from 0 to 128
[  390.960983][T16146] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  390.995537][T16146] hpfs: filesystem error: improperly stopped
[  391.048226][T16146] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  391.084719][T16132] loop0: detected capacity change from 0 to 32768
[  391.089719][T16146] hpfs: You really don't want any checks? You are crazy...
[  391.121242][T16146] hpfs: hpfs_map_sector(): read error
[  391.152952][T16146] hpfs: code page support is disabled
[  391.167770][T16132] 
[  391.167770][T16132]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  391.167770][T16132] 
[  391.191166][T16146] hpfs: hpfs_map_4sectors(): unaligned read
[  391.231583][T16146] hpfs: hpfs_map_4sectors(): unaligned read
[  391.241878][T16132] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt
[  391.241878][T16132] 
[  391.266157][T16146] hpfs: filesystem error: unable to find root dir
[  391.297247][T16132] ERROR: (device loop0): jfs_unlink: 
[  391.297247][T16132] 
[  391.324627][   T11] ERROR: (device loop0): diWrite: ixpxd invalid
[  391.324627][   T11] 
[  391.356130][   T11] ERROR: (device loop0): txCommit: 
[  391.356130][   T11] 
[  391.381019][   T11] jfs_write_inode: jfs_commit_inode failed!
[  391.397558][T16147] 
[  391.397558][T16147]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  391.397558][T16147] 
[  391.428662][T16147] 
[  391.428662][T16147]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  391.428662][T16147] 
[  391.448930][T16139] loop3: detected capacity change from 0 to 32768
[  391.532552][T16139] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  391.556290][ T5770] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt
[  391.556290][ T5770] 
[  391.602456][ T5770] 
[  391.602456][ T5770]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  391.602456][ T5770] 
[  391.670993][ T5770] 
[  391.670993][ T5770]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  391.670993][ T5770] 
[  391.810726][T16139] XFS (loop3): Ending clean mount
[  392.007943][ T5769] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  392.846562][ T5777] Bluetooth: hci3: command tx timeout
[  392.929147][T16173] loop1: detected capacity change from 0 to 32768
[  392.948006][T16178] loop0: detected capacity change from 0 to 32768
[  392.978064][T16178] XFS: ikeep mount option is deprecated.
[  393.019177][T16178] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  393.021311][T16173] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  393.103969][T16178] XFS (loop0): Ending clean mount
[  393.110811][T16173] XFS (loop1): Ending clean mount
[  393.316766][    T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  393.350426][ T5770] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  393.438507][ T5766] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  393.566416][    T8] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  393.583376][    T8] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  393.628021][    T8] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  393.686162][    T8] usb 5-1: config 220 has no interface number 2
[  393.702720][    T8] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  393.756700][    T8] usb 5-1: config 220 interface 0 has no altsetting 0
[  393.787693][    T8] usb 5-1: config 220 interface 76 has no altsetting 0
[  393.794779][    T8] usb 5-1: config 220 interface 1 has no altsetting 0
[  393.849109][    T8] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  393.871812][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.896045][    T8] usb 5-1: Product: syz
[  393.902882][    T8] usb 5-1: Manufacturer: syz
[  393.952647][    T8] usb 5-1: SerialNumber: syz
[  394.048970][T16227] loop0: detected capacity change from 0 to 128
[  394.132481][T16227] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  394.257867][T16227] ext4 filesystem being mounted at /1068/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  394.265568][    T8] usb 5-1: selecting invalid altsetting 0
[  394.386646][    T8] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  394.413419][    T8] usb 5-1: No valid video chain found.
[  394.448727][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  394.448739][   T28] audit: type=1800 audit(1777326430.225:160): pid=16227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4586" name="file1" dev="loop0" ino=12 res=0 errno=0
[  394.507239][    T8] usb 5-1: selecting invalid altsetting 0
[  394.519729][    T8] usbtest: probe of 5-1:220.1 failed with error -22
[  394.548965][    T8] usb 5-1: USB disconnect, device number 2
[  394.580179][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  394.780139][T16249] loop0: detected capacity change from 0 to 512
[  394.804771][T16249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  394.839064][T16249] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  394.874564][T16249] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  394.915488][T16249] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  394.997201][T16249] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  395.005424][T16249] EXT4-fs (loop0): orphan cleanup on readonly fs
[  395.022596][T16249] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.4596: bg 0: block 34: padding at end of block bitmap is not set
[  395.118648][T16249] Quota error (device loop0): write_blk: dquota write failed
[  395.136154][T16249] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  395.164064][T16263] loop3: detected capacity change from 0 to 256
[  395.179215][T16249] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.4596: Failed to acquire dquot type 1
[  395.248593][T16249] EXT4-fs (loop0): 1 truncate cleaned up
[  395.288223][T16249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  395.338327][T16249] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.783825][T16250] loop1: detected capacity change from 0 to 32768
[  395.856972][T16250] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  396.043424][T16250] XFS (loop1): Ending clean mount
[  396.096891][T16250] XFS (loop1): Quotacheck needed: Please wait.
[  396.217163][T16250] XFS (loop1): Quotacheck: Done.
[  396.268641][T16268] loop4: detected capacity change from 0 to 32768
[  396.296733][T16268] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.4603 (16268)
[  396.348189][T16268] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  396.377963][T16296] loop3: detected capacity change from 0 to 4096
[  396.387863][T16268] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  396.408981][T16296] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  396.422764][ T5766] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  396.431942][T16268] BTRFS info (device loop4): using free space tree
[  396.657632][T16268] BTRFS info (device loop4): enabling ssd optimizations
[  396.675053][T16268] BTRFS info (device loop4): auto enabling async discard
[  397.157021][T16025] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  397.820654][T16316] loop0: detected capacity change from 0 to 40427
[  397.847574][T16316] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288)
[  397.873050][T16316] F2FS-fs (loop0): invalid crc value
[  397.896425][T16316] F2FS-fs (loop0): Found nat_bits in checkpoint
[  398.013485][T16316] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  398.067479][T16325] loop3: detected capacity change from 0 to 32768
[  398.351878][T16329] loop1: detected capacity change from 0 to 32768
[  398.412825][T16329] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  398.604475][T16329] XFS (loop1): Ending clean mount
[  398.809969][ T5766] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  399.048204][T16359] loop4: detected capacity change from 0 to 2048
[  399.080981][T16359] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  399.592260][T16377] loop4: detected capacity change from 0 to 1024
[  399.736861][  T787] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  399.921260][T16388] loop4: detected capacity change from 0 to 128
[  399.952517][  T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  399.995645][  T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.038600][  T787] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  400.079880][  T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.128183][  T787] usb 1-1: config 0 descriptor??
[  400.214509][T16396] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4646'.
[  400.326797][ T5904] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  400.492026][T16403] syz.1.4650: attempt to access beyond end of device
[  400.492026][T16403] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  400.541453][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.566137][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.585174][  T787] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0
[  400.605336][ T5904] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  400.626933][  T787] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0
[  400.633777][  T787] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0
[  400.645505][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.664364][  T787] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0
[  400.685858][ T5904] usb 4-1: config 0 descriptor??
[  400.698066][  T787] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0
[  400.717937][  T787] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0
[  400.724772][  T787] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0
[  400.761098][  T787] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0
[  400.797141][  T787] arvo 0003:1E7D:30D4.0003: couldn't init struct arvo_device
[  400.804608][  T787] arvo 0003:1E7D:30D4.0003: couldn't install keyboard
[  400.845700][  T787] arvo: probe of 0003:1E7D:30D4.0003 failed with error -71
[  400.868503][  T787] usb 1-1: USB disconnect, device number 37
[  400.963966][T16410] fido_id[16410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  401.026500][    T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  401.144388][ T5904] razer 0003:1532:010E.0004: unknown main item tag 0x1
[  401.201639][T16414] loop4: detected capacity change from 0 to 4096
[  401.241242][    T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  401.256075][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.274448][    T8] usb 2-1: Product: syz
[  401.284591][    T8] usb 2-1: Manufacturer: syz
[  401.309663][    T8] usb 2-1: SerialNumber: syz
[  401.329583][    T8] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  401.352862][    T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  401.362466][ T5904] razer 0003:1532:010E.0004: failed to enable macro keys: -71
[  401.399467][ T5904] razer 0003:1532:010E.0004: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0
[  401.446174][ T5904] usb 4-1: USB disconnect, device number 30
[  401.629069][T16417] loop4: detected capacity change from 0 to 64
[  401.644949][T16415] fido_id[16415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  401.919824][T16421] loop4: detected capacity change from 0 to 256
[  401.947009][T16421] exfat: Deprecated parameter 'utf8'
[  401.971753][T16421] exfat: Deprecated parameter 'utf8'
[  402.044884][T16421] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acb235, utbl_chksum : 0xe619d30d)
[  402.248033][T16425] loop3: detected capacity change from 0 to 256
[  402.332578][T16425] FAT-fs (loop3): Directory bread(block 64) failed
[  402.343839][T16425] FAT-fs (loop3): Directory bread(block 65) failed
[  402.364238][T16425] FAT-fs (loop3): Directory bread(block 66) failed
[  402.383213][T16425] FAT-fs (loop3): Directory bread(block 67) failed
[  402.403020][T16425] FAT-fs (loop3): Directory bread(block 68) failed
[  402.427063][T16425] FAT-fs (loop3): Directory bread(block 69) failed
[  402.453110][T16425] FAT-fs (loop3): Directory bread(block 70) failed
[  402.476131][T16425] FAT-fs (loop3): Directory bread(block 71) failed
[  402.493150][T16425] FAT-fs (loop3): Directory bread(block 72) failed
[  402.513277][T16425] FAT-fs (loop3): Directory bread(block 73) failed
[  402.757122][    T9] usb 2-1: Service connection timeout for: 256
[  402.763448][    T9] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  402.827346][    T9] ath9k_htc: Failed to initialize the device
[  402.840452][    T9] usb 2-1: ath9k_htc: USB layer deinitialized
[  403.091252][ T5825] usb 2-1: USB disconnect, device number 22
[  403.155704][T16419] loop0: detected capacity change from 0 to 32768
[  403.216080][ T5904] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  403.223460][T16419] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  403.274463][T16419] XFS (loop0): Ending clean mount
[  403.380364][T16419] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  403.409112][ T5904] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  403.418577][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.429587][ T5904] usb 4-1: Product: syz
[  403.433792][ T5904] usb 4-1: Manufacturer: syz
[  403.442378][ T5904] usb 4-1: SerialNumber: syz
[  403.459596][ T5904] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  403.479010][    T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  403.560505][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  403.585131][T16455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4671'.
[  404.271737][ T5802] usb 4-1: USB disconnect, device number 31
[  404.296821][ T5825] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  404.487220][ T5825] usb 5-1: Using ep0 maxpacket: 8
[  404.496223][ T5825] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  404.505847][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.526399][ T5825] usb 5-1: Product: syz
[  404.530611][ T5825] usb 5-1: Manufacturer: syz
[  404.546293][ T5825] usb 5-1: SerialNumber: syz
[  404.557279][ T5825] usb 5-1: config 0 descriptor??
[  404.571536][ T5825] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  404.634421][T16467] loop1: detected capacity change from 0 to 32768
[  404.725671][   T40] read_mapping_page failed!
[  404.731626][   T40] ERROR: (device loop1): txCommit: 
[  404.731626][   T40] 
[  404.744251][   T40] jfs_write_inode: jfs_commit_inode failed!
[  404.918879][    T9] usb 4-1: Service connection timeout for: 256
[  404.925130][    T9] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  404.964041][    T9] ath9k_htc: Failed to initialize the device
[  404.981050][ T5802] usb 4-1: ath9k_htc: USB layer deinitialized
[  405.013878][T16484] loop0: detected capacity change from 0 to 1024
[  405.081359][T16484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  405.100370][T16484] ext4 filesystem being mounted at /1085/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  405.199642][ T5825] gspca_sonixj: reg_w1 err -71
[  405.214750][ T5825] sonixj: probe of 5-1:0.0 failed with error -71
[  405.241942][ T5825] usb 5-1: USB disconnect, device number 3
[  405.248029][T16487] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  405.290481][T16484] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.4684: bg 0: block 112: padding at end of block bitmap is not set
[  405.463299][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  405.631709][T16480] loop1: detected capacity change from 0 to 32768
[  405.679822][T16503] loop0: detected capacity change from 0 to 256
[  405.694589][T16503] exfat: Deprecated parameter 'utf8'
[  405.702086][T16480] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  405.720529][T16503] exfat: Deprecated parameter 'namecase'
[  405.727009][T16503] exfat: Deprecated parameter 'namecase'
[  405.804204][T16503] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  405.855849][T16480] XFS (loop1): Ending clean mount
[  405.917093][T16480] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  406.063877][ T5766] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  406.230667][T16518] loop0: detected capacity change from 0 to 256
[  406.268358][T16522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4698'.
[  406.301814][T16518] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  406.821257][T16534] loop1: detected capacity change from 0 to 64
[  406.933041][T16538] loop3: detected capacity change from 0 to 512
[  407.009315][T16538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.094988][T16538] ext4 filesystem being mounted at /1197/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  407.230409][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.397929][T16546] loop1: detected capacity change from 0 to 32768
[  407.505180][T16550] loop3: detected capacity change from 0 to 4096
[  407.568783][T16555] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  407.653783][T16550] syz.3.4710: attempt to access beyond end of device
[  407.653783][T16550] loop3: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096
[  407.691058][T16550] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1)
[  408.746091][ T5802] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  408.986130][ T5802] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  408.994199][ T5802] usb 1-1: config 0 has no interface number 0
[  409.017135][ T5802] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  409.036450][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.058703][ T5802] usb 1-1: config 0 descriptor??
[  409.068289][ T5802] usb 1-1: selecting invalid altsetting 1
[  409.091983][ T5802] dvb_ttusb_budget: ttusb_init_controller: error
[  409.098775][ T5802] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  409.272142][ T5802] DVB: Unable to find symbol cx22700_attach()
[  409.380414][ T5802] DVB: Unable to find symbol tda10046_attach()
[  409.390734][ T5802] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  409.425635][ T5802] usb 1-1: USB disconnect, device number 38
[  409.571250][T16617] loop1: detected capacity change from 0 to 164
[  409.590886][T16617] isofs: Unable to find the ".." directory for NFS.
[  409.668964][ T5904] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  409.868116][ T5904] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  409.878613][ T5904] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  409.887840][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.109753][ T5904] usb 4-1: string descriptor 0 read error: -71
[  410.144067][ T5904] usb 4-1: USB disconnect, device number 32
[  411.186131][ T5825] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  411.291495][T16635] loop1: detected capacity change from 0 to 32768
[  411.333904][T16635] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  411.358180][T16640] loop3: detected capacity change from 0 to 32768
[  411.366133][ T5825] usb 1-1: Using ep0 maxpacket: 32
[  411.386937][ T5825] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  411.404223][T16635] XFS (loop1): Ending clean mount
[  411.418847][T16640] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  411.423760][ T5825] usb 1-1: config 0 interface 0 has no altsetting 0
[  411.461050][ T5825] usb 1-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00
[  411.487665][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.519707][ T5825] usb 1-1: config 0 descriptor??
[  411.552842][ T5766] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  411.712812][T16640] XFS (loop3): Ending clean mount
[  411.853305][ T5769] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  411.951313][T16665] loop1: detected capacity change from 0 to 256
[  411.982928][T16665] exfat: Deprecated parameter 'utf8'
[  412.006794][T16665] exfat: Deprecated parameter 'namecase'
[  412.027105][ T5825] wacom 0003:056A:0343.0005: ignoring exceeding usage max
[  412.049242][ T5825] wacom 0003:056A:0343.0005: unknown main item tag 0x0
[  412.077676][ T5825] wacom 0003:056A:0343.0005: unknown main item tag 0x0
[  412.084601][ T5825] wacom 0003:056A:0343.0005: unknown main item tag 0x0
[  412.091927][T16665] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  412.132438][ T5825] wacom 0003:056A:0343.0005: unknown main item tag 0x0
[  412.145249][ T5825] wacom 0003:056A:0343.0005: unknown main item tag 0x0
[  412.163694][ T5825] wacom 0003:056A:0343.0005: unknown main item tag 0x0
[  412.171288][ T5825] wacom 0003:056A:0343.0005: unknown main item tag 0x0
[  412.192580][ T5825] wacom 0003:056A:0343.0005: unknown main item tag 0x0
[  412.206181][ T5825] wacom 0003:056A:0343.0005: unknown main item tag 0x0
[  412.213128][ T5825] wacom 0003:056A:0343.0005: unknown main item tag 0x0
[  412.220908][ T5825] wacom 0003:056A:0343.0005: unknown main item tag 0x0
[  412.239676][ T5825] wacom 0003:056A:0343.0005: unknown main item tag 0x0
[  412.303752][ T5825] wacom 0003:056A:0343.0005: hidraw0: USB HID v0.0a Device [HID 056a:0343] on usb-dummy_hcd.0-1/input0
[  412.366730][ T5825] usb 1-1: USB disconnect, device number 39
[  412.403072][T16673] loop3: detected capacity change from 0 to 512
[  412.417357][T16673] EXT4-fs: Ignoring removed nomblk_io_submit option
[  412.438520][T16673] EXT4-fs: Ignoring removed mblk_io_submit option
[  412.482812][T16671] fido_id[16671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  412.511511][T16673] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  412.543166][T16673] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  412.567776][T16673] EXT4-fs (loop3): 1 truncate cleaned up
[  412.574317][T16673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.580852][T16677] loop1: detected capacity change from 0 to 256
[  412.620224][T16673] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 4: comm syz.3.4754: lblock 0 mapped to illegal pblock 4 (length 1)
[  412.642587][T16677] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  412.681699][T16673] EXT4-fs (loop3): Remounting filesystem read-only
[  412.724657][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.996566][T16687] loop0: detected capacity change from 0 to 256
[  413.003818][T16687] exfat: Deprecated parameter 'namecase'
[  413.011132][T16687] exfat: Deprecated parameter 'utf8'
[  413.032626][T16687] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  413.107164][  T787] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  413.226271][ T5904] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  413.306416][  T787] usb 4-1: Using ep0 maxpacket: 16
[  413.318602][  T787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  413.333415][  T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  413.345291][  T787] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  413.354655][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.362965][  T787] usb 4-1: Product: syz
[  413.369943][  T787] usb 4-1: Manufacturer: syz
[  413.378120][  T787] usb 4-1: SerialNumber: syz
[  413.416282][ T5904] usb 2-1: Using ep0 maxpacket: 8
[  413.424068][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  413.447796][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  413.466349][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  413.488483][ T5904] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  413.501874][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.518004][ T5904] usb 2-1: config 0 descriptor??
[  413.526325][ T5825] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  413.706521][ T5825] usb 1-1: Using ep0 maxpacket: 16
[  413.714616][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  413.726063][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  413.735888][ T5825] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  413.748853][ T5825] usb 1-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  413.758018][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.769816][ T5825] usb 1-1: config 0 descriptor??
[  413.802776][  T787] usb 4-1: cannot find UAC_HEADER
[  413.825743][  T787] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  413.856139][ T5836] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  413.865940][T11405] udevd[11405]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  413.989536][ T5904] dragonrise 0003:0079:0006.0006: hidraw0: USB HID v0.0b Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0
[  414.011592][  T967] usb 4-1: USB disconnect, device number 33
[  414.029714][ T5904] dragonrise 0003:0079:0006.0006: no inputs found
[  414.036589][ T5836] usb 5-1: Using ep0 maxpacket: 16
[  414.051605][ T5904] dragonrise 0003:0079:0006.0006: force feedback init failed
[  414.058263][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  414.070483][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.081806][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  414.105815][ T5836] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  414.115250][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.126307][ T5836] usb 5-1: config 0 descriptor??
[  414.202214][ T5904] usb 2-1: USB disconnect, device number 23
[  414.213496][ T5825] elecom 0003:056E:010C.0007: report_id 0 is invalid
[  414.220827][ T5825] elecom 0003:056E:010C.0007: item 0 0 1 8 parsing failed
[  414.234294][ T5825] elecom: probe of 0003:056E:010C.0007 failed with error -22
[  414.409247][  T967] usb 1-1: USB disconnect, device number 40
[  414.545292][ T5836] microsoft 0003:045E:07DA.0008: No inputs registered, leaving
[  414.570086][ T5836] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  414.596739][ T5836] microsoft 0003:045E:07DA.0008: no inputs found
[  414.617824][ T5836] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[  414.744072][ T5836] usb 5-1: USB disconnect, device number 4
[  414.934495][T16713] nbd: must specify a device to reconfigure
[  415.106888][ T5825] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  415.170593][T16723] loop0: detected capacity change from 0 to 512
[  415.206801][T16723] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.4780: iget: bad i_size value: 38620345925642
[  415.217200][T16725] loop3: detected capacity change from 0 to 128
[  415.256378][T16723] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.4780: couldn't read orphan inode 15 (err -117)
[  415.259370][T16725] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  415.299327][T16723] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.301626][T16725] ext4 filesystem being mounted at /1215/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  415.323256][ T5825] usb 2-1: Using ep0 maxpacket: 32
[  415.337648][ T5825] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  415.354237][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0
[  415.386112][ T5825] usb 2-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00
[  415.395195][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.436560][ T5825] usb 2-1: config 0 descriptor??
[  415.465781][ T5769] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  415.481986][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  415.806809][T16737] veth1_macvtap: left promiscuous mode
[  415.812556][T16737] macsec0: entered allmulticast mode
[  415.839157][T16739] veth1_macvtap: entered promiscuous mode
[  415.862399][T16739] veth1_macvtap: entered allmulticast mode
[  415.884053][T16739] macsec0: left allmulticast mode
[  415.889672][T16739] veth1_macvtap: left allmulticast mode
[  415.906630][ T5825] wacom 0003:056A:0343.0009: ignoring exceeding usage max
[  415.919982][ T5825] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  415.928291][ T5825] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  415.942543][ T5825] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  415.949785][ T5825] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  415.959784][ T5825] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  415.966925][ T5825] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  415.974841][ T5825] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  415.986804][ T5825] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  415.993773][ T5825] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  416.003857][ T5825] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  416.011003][ T5825] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  416.021297][ T5825] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  416.052992][ T5825] wacom 0003:056A:0343.0009: hidraw0: USB HID v0.0a Device [HID 056a:0343] on usb-dummy_hcd.1-1/input0
[  416.105783][ T5825] usb 2-1: USB disconnect, device number 24
[  416.174604][T16744] fido_id[16744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  416.324690][T16746] loop3: detected capacity change from 0 to 8192
[  416.365805][T16746] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  416.383186][T16746] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  416.405761][T16746] REISERFS (device loop3): using ordered data mode
[  416.420312][T16751] loop0: detected capacity change from 0 to 1024
[  416.429242][T16746] reiserfs: using flush barriers
[  416.450995][T16746] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  416.475232][T16746] REISERFS (device loop3): checking transaction log (loop3)
[  416.520753][T16751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.527265][T16746] REISERFS (device loop3): Using r5 hash to sort names
[  416.569902][T16746] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  416.661706][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.698785][T16759] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4793'.
[  416.726155][T16759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4793'.
[  416.748948][T16759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4793'.
[  416.798855][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4793'.
[  417.262714][T16777] loop3: detected capacity change from 0 to 1024
[  417.574099][T16787] loop1: detected capacity change from 0 to 4096
[  417.596850][T16787] NILFS (loop1): invalid segment: Checksum error in segment payload
[  417.604899][T16787] NILFS (loop1): trying rollback from an earlier position
[  417.660513][T16791] loop4: detected capacity change from 0 to 4096
[  417.674519][T16787] NILFS (loop1): recovery complete
[  417.698684][T16796] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  418.061274][T16805] loop4: detected capacity change from 0 to 128
[  418.075090][T16802] loop1: detected capacity change from 0 to 2048
[  418.089849][T16805] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  418.133779][T16805] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  418.159269][T16808] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  418.176299][  T967] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  418.288327][T16805] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.4811: No space for directory leaf checksum. Please run e2fsck -D.
[  418.326108][T16805] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.4811: Directory block failed checksum
[  418.433799][  T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  418.459672][  T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  418.492172][  T967] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  418.524939][  T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.538227][  T967] usb 4-1: config 0 descriptor??
[  418.621291][T16025] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  418.775095][T16811] loop0: detected capacity change from 0 to 32768
[  418.834210][T16811] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  418.847864][T16824] loop1: detected capacity change from 0 to 256
[  418.867357][T16824] exfat: Deprecated parameter 'utf8'
[  418.872752][T16824] exfat: Deprecated parameter 'utf8'
[  418.878725][T16824] exfat: Deprecated parameter 'utf8'
[  418.884120][T16824] exfat: Deprecated parameter 'utf8'
[  418.889526][T16824] exfat: Deprecated parameter 'namecase'
[  418.959132][T16824] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  418.974907][  T967] hid-led 0003:27B8:01ED.000A: item fetching failed at offset 3/5
[  419.001070][T16811] XFS (loop0): Ending clean mount
[  419.007643][  T967] hid-led: probe of 0003:27B8:01ED.000A failed with error -22
[  419.152087][ T5770] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  419.171165][    T8] usb 4-1: USB disconnect, device number 34
[  419.497212][ T5836] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  419.627229][T16846] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  419.708603][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  419.721649][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  419.752941][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  419.770739][ T5836] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  419.780700][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.831410][ T5836] usb 5-1: config 0 descriptor??
[  420.022363][T16860] loop3: detected capacity change from 0 to 256
[  420.053717][T16860] exfat: Deprecated parameter 'namecase'
[  420.112146][T16860] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x31c160c0, utbl_chksum : 0xe619d30d)
[  420.318789][T16865] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  420.345714][ T5836] hid-generic 0003:0457:07DA.000B: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0
[  420.410662][T16865] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  420.485359][T16865] REISERFS (device loop0): using ordered data mode
[  420.501144][  T967] usb 5-1: USB disconnect, device number 5
[  420.519629][T16865] reiserfs: using flush barriers
[  420.536344][T16865] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  420.587594][T16865] REISERFS (device loop0): checking transaction log (loop0)
[  420.599686][T16865] REISERFS (device loop0): Using r5 hash to sort names
[  420.628946][T16865] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  420.674694][T16875] fido_id[16875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  420.865406][T16883] netlink: 'syz.0.4846': attribute type 6 has an invalid length.
[  420.876138][ T5836] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  421.090295][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  421.106455][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  421.130400][ T5836] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  421.147127][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.169302][ T5836] usb 2-1: config 0 descriptor??
[  421.195140][ T5836] hub 2-1:0.0: USB hub found
[  421.248777][T16881] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  421.306294][T16881] XFS (loop3): Ending clean mount
[  421.403567][ T5836] hub 2-1:0.0: 1 port detected
[  421.416144][  T967] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  421.606063][  T967] usb 5-1: Using ep0 maxpacket: 32
[  421.613512][ T5836] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  421.614827][  T967] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  421.635360][ T5836] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  421.647564][ T5836] usbhid 2-1:0.0: can't add hid device: -71
[  421.653721][ T5836] usbhid: probe of 2-1:0.0 failed with error -71
[  421.661464][  T967] usb 5-1: config 0 interface 0 has no altsetting 0
[  421.676046][  T967] usb 5-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00
[  421.696033][  T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.698746][ T5836] usb 2-1: USB disconnect, device number 25
[  421.711536][  T967] usb 5-1: config 0 descriptor??
[  421.743207][ T5769] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  422.164035][  T967] wacom 0003:056A:0343.000C: ignoring exceeding usage max
[  422.175572][  T967] wacom 0003:056A:0343.000C: unknown main item tag 0x0
[  422.193431][  T967] wacom 0003:056A:0343.000C: unknown main item tag 0x0
[  422.216216][  T967] wacom 0003:056A:0343.000C: unknown main item tag 0x0
[  422.237484][  T967] wacom 0003:056A:0343.000C: unknown main item tag 0x0
[  422.244600][  T967] wacom 0003:056A:0343.000C: unknown main item tag 0x0
[  422.259523][  T967] wacom 0003:056A:0343.000C: unknown main item tag 0x0
[  422.266880][  T967] wacom 0003:056A:0343.000C: unknown main item tag 0x0
[  422.274195][  T967] wacom 0003:056A:0343.000C: unknown main item tag 0x0
[  422.300983][  T967] wacom 0003:056A:0343.000C: unknown main item tag 0x0
[  422.316065][  T967] wacom 0003:056A:0343.000C: unknown main item tag 0x0
[  422.326277][  T967] wacom 0003:056A:0343.000C: unknown main item tag 0x0
[  422.343353][  T967] wacom 0003:056A:0343.000C: unknown main item tag 0x0
[  422.379092][  T967] wacom 0003:056A:0343.000C: hidraw0: USB HID v0.0a Device [HID 056a:0343] on usb-dummy_hcd.4-1/input0
[  422.440093][  T967] usb 5-1: USB disconnect, device number 6
[  422.544007][T16906] fido_id[16906]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  423.139521][T16922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  423.150327][T16922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.165267][T16922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  423.180661][T16922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.196811][T16922] batadv_slave_1: entered promiscuous mode
[  423.485456][T16935] set_capacity_and_notify: 2 callbacks suppressed
[  423.485471][T16935] loop3: detected capacity change from 0 to 128
[  423.527641][T16935] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  423.584668][T16935] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  423.789291][T16943] loop1: detected capacity change from 0 to 512
[  423.805666][T16943] EXT4-fs: Ignoring removed orlov option
[  423.827479][T16945] loop3: detected capacity change from 0 to 128
[  423.879860][T16943] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[  424.245246][T16939] loop0: detected capacity change from 0 to 32768
[  424.266276][T16939] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.4868 (16939)
[  424.319011][T16939] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  424.347104][T16939] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  424.366171][T16939] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  424.386366][T16939] BTRFS info (device loop0): use zstd compression, level 3
[  424.393806][T16939] BTRFS info (device loop0): using free space tree
[  424.527925][T16941] loop4: detected capacity change from 0 to 32768
[  424.601176][T16941] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.4869 (16941)
[  424.628118][T16939] BTRFS info (device loop0): enabling ssd optimizations
[  424.635636][T16939] BTRFS info (device loop0): auto enabling async discard
[  424.821509][ T9163] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (9163)
[  425.079208][T16951] loop3: detected capacity change from 0 to 40427
[  425.114289][T16951] F2FS-fs (loop3): invalid crc value
[  425.143511][T16951] F2FS-fs (loop3): Found nat_bits in checkpoint
[  425.240587][ T5770] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  425.361314][T16951] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  425.516085][T11405] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop0 scanned by udevd (11405)
[  426.468344][T17028] loop3: detected capacity change from 0 to 512
[  426.511203][T17028] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002]
[  426.552278][T17028] System zones: 1-20
[  426.569800][T17031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4901'.
[  426.578963][T17034] loop4: detected capacity change from 0 to 64
[  426.609635][T17028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  426.664567][T17008] loop1: detected capacity change from 0 to 32768
[  426.694941][T17008] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  426.726965][T17028] EXT4-fs: Cannot change journaled quota options when quota turned on
[  426.863556][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.972517][T11423] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  427.086703][T17045] loop4: detected capacity change from 0 to 8
[  427.159323][T17043] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  427.171912][T17045] SQUASHFS error: Unable to read inode 0xa7
[  427.507153][T17055] usb usb8: usbfs: process 17055 (syz.0.4913) did not claim interface 0 before use
[  427.657213][T17064] dccp_invalid_packet: P.Data Offset(4) too small
[  428.132711][T17085] NILFS (loop1): invalid segment: Magic number mismatch
[  428.149079][T17085] NILFS (loop1): trying rollback from an earlier position
[  428.221244][T17085] NILFS (loop1): recovery complete
[  428.256271][T17087] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  428.303924][ T1085] hfsplus: b-tree write err: -5, ino 25
[  428.319913][ T1085] hfsplus: b-tree write err: -5, ino 4
[  428.338927][ T1085] hfsplus: b-tree write err: -5, ino 2
[  428.364318][ T1085] hfsplus: b-tree write err: -5, ino 20
[  428.379535][T17065] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  428.569364][T11423] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  429.453327][T17112] set_capacity_and_notify: 4 callbacks suppressed
[  429.453341][T17112] loop1: detected capacity change from 0 to 32768
[  429.497510][T17112] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  429.660997][ T9163] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  429.748147][T17123] loop1: detected capacity change from 0 to 64
[  429.785781][T17114] loop0: detected capacity change from 0 to 32768
[  429.815182][T17114] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.4939 (17114)
[  429.862303][T17114] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  429.896195][T17114] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  429.925295][T17114] BTRFS info (device loop0): turning on sync discard
[  429.937276][T17125] nftables ruleset with unbound set
[  429.956256][T17114] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  429.986042][T17114] BTRFS info (device loop0): use zstd compression, level 3
[  430.006874][T17114] BTRFS info (device loop0): turning on async discard
[  430.019538][T17114] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  430.046057][T17114] BTRFS info (device loop0): trying to use backup root at mount time
[  430.066097][T17114] BTRFS info (device loop0): enabling auto defrag
[  430.072574][T17114] BTRFS info (device loop0): using free space tree
[  430.131513][T17127] loop1: detected capacity change from 0 to 64
[  430.165311][T17116] loop4: detected capacity change from 0 to 32768
[  430.222674][T17116] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.4940 (17116)
[  430.276141][ T1085] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  430.301356][T17116] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  430.321488][T17114] BTRFS error (device loop0): failed to load root extent
[  430.334035][T17116] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  430.346905][T17114] BTRFS warning (device loop0): try to load backup roots slot 1
[  430.366466][T17116] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  430.379227][ T1085] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  430.409282][T17114] BTRFS warning (device loop0): couldn't read tree root
[  430.426719][T17116] BTRFS info (device loop4): use zstd compression, level 3
[  430.433119][ T1085] ------------[ cut here ]------------
[  430.439674][ T1085] kernel BUG at fs/hfs/inode.c:449!
[  430.455235][T17114] BTRFS warning (device loop0): try to load backup roots slot 2
[  430.477081][T17116] BTRFS info (device loop4): using free space tree
[  430.485389][   T40] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  430.494022][ T1085] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  430.501908][ T1085] CPU: 1 PID: 1085 Comm: kworker/u4:6 Not tainted syzkaller #0
[  430.506583][T17114] BTRFS warning (device loop0): couldn't read tree root
[  430.509457][ T1085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  430.509470][ T1085] Workqueue: writeback wb_workfn (flush-7:1)
[  430.532478][ T1085] RIP: 0010:hfs_write_inode+0x87a/0x880
[  430.533867][T17114] BTRFS warning (device loop0): try to load backup roots slot 3
[  430.538041][ T1085] Code: c7 c1 00 03 31 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 03 31 97 e8 f0 f9 83 ff e9 62 fe ff ff e8 d6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49
[  430.538058][ T1085] RSP: 0018:ffffc9000471f340 EFLAGS: 00010293
[  430.538074][ T1085] RAX: ffffffff825b5f2a RBX: ffff88801c715628 RCX: ffff888023cf1e00
[  430.538086][ T1085] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000
[  430.538097][ T1085] RBP: ffffc9000471f4d0 R08: ffff888023cf1e00 R09: 0000000000000003
[  430.538108][ T1085] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  430.538118][ T1085] R13: 1ffff920008e3e6c R14: ffff88801c7155d8 R15: 0000000000000000
[  430.538130][ T1085] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  430.538143][ T1085] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  430.538155][ T1085] CR2: 00007f0d476ac000 CR3: 00000000633fd000 CR4: 00000000003506e0
[  430.538170][ T1085] Call Trace:
[  430.538176][ T1085]  <TASK>
[  430.538184][ T1085]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  430.538212][ T1085]  ? __rwlock_init+0x150/0x150
[  430.538239][ T1085]  __writeback_single_inode+0x705/0xec0
[  430.538267][ T1085]  writeback_sb_inodes+0x7cd/0xf50
[  430.538299][ T1085]  ? queue_io+0x550/0x550
[  430.538329][ T1085]  ? rcu_is_watching+0x15/0xb0
[  430.538355][ T1085]  wb_writeback+0x46a/0xbf0
[  430.538379][ T1085]  ? queue_io+0x3b1/0x550
[  430.538403][ T1085]  ? percpu_ref_tryget+0x250/0x250
[  430.538428][ T1085]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  430.691066][ T1085]  ? _raw_spin_unlock_irq+0x23/0x50
[  430.696287][ T1085]  wb_workfn+0x400/0xe60
[  430.700548][ T1085]  ? inode_wait_for_writeback+0x230/0x230
[  430.706282][ T1085]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  430.712271][ T1085]  ? read_lock_is_recursive+0x20/0x20
[  430.717656][ T1085]  ? _raw_spin_unlock_irq+0x23/0x50
[  430.722861][ T1085]  ? process_scheduled_works+0x96f/0x15d0
[  430.728593][ T1085]  ? process_scheduled_works+0x96f/0x15d0
[  430.734323][ T1085]  process_scheduled_works+0xa5d/0x15d0
[  430.739889][ T1085]  ? worker_attach_to_pool+0x380/0x380
[  430.745380][ T1085]  ? assign_work+0x3d2/0x5d0
[  430.749985][ T1085]  worker_thread+0xa55/0xfc0
[  430.754595][ T1085]  kthread+0x2fa/0x390
[  430.758667][ T1085]  ? pr_cont_work+0x560/0x560
[  430.763362][ T1085]  ? kthread_blkcg+0xd0/0xd0
[  430.767958][ T1085]  ret_from_fork+0x48/0x80
[  430.772383][ T1085]  ? kthread_blkcg+0xd0/0xd0
[  430.776979][ T1085]  ret_from_fork_asm+0x11/0x20
[  430.781765][ T1085]  </TASK>
[  430.784801][ T1085] Modules linked in:
[  430.803620][ T1085] ---[ end trace 0000000000000000 ]---
[  430.810581][ T1085] RIP: 0010:hfs_write_inode+0x87a/0x880
[  430.817169][T17114] BTRFS info (device loop0): enabling ssd optimizations
[  430.824743][T17114] BTRFS info (device loop0): rebuilding free space tree
[  430.832998][ T1085] Code: c7 c1 00 03 31 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 03 31 97 e8 f0 f9 83 ff e9 62 fe ff ff e8 d6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49
[  430.904855][T17114] BTRFS info (device loop0): checking UUID tree
[  430.915188][ T1085] RSP: 0018:ffffc9000471f340 EFLAGS: 00010293
[  430.921443][ T1085] RAX: ffffffff825b5f2a RBX: ffff88801c715628 RCX: ffff888023cf1e00
[  430.929518][ T1085] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000
[  430.937777][ T1085] RBP: ffffc9000471f4d0 R08: ffff888023cf1e00 R09: 0000000000000003
[  430.945817][ T1085] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  430.955367][ T1085] R13: 1ffff920008e3e6c R14: ffff88801c7155d8 R15: 0000000000000000
[  430.964453][ T1085] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  430.974379][ T1085] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  430.982097][ T1085] CR2: 00005622ec43d490 CR3: 0000000078d82000 CR4: 00000000003506e0
[  431.001234][T17116] BTRFS info (device loop4): enabling ssd optimizations
[  431.008356][T17116] BTRFS info (device loop4): auto enabling async discard
[  431.015486][ T1085] Kernel panic - not syncing: Fatal exception
[  431.022123][ T1085] Kernel Offset: disabled
[  431.026446][ T1085] Rebooting in 86400 seconds..