last executing test programs:

4.903520084s ago: executing program 2 (id=3374):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000040)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, &(0x7f00000039c0)=""/4096, 0x1000}}, 0x10)

4.653280326s ago: executing program 2 (id=3378):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491}}, {0x4, 0x1b}}]}]}, 0x50}}, 0x4804)

4.291892101s ago: executing program 2 (id=3383):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3000400, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0xff, 0x0, 0x0)

3.967797792s ago: executing program 2 (id=3388):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001170000000000000000010100800c0001"], 0x114}], 0x1}, 0x0)

3.547615792s ago: executing program 2 (id=3395):
syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@data_checksum={'data_checksum', 0x3d, 'crc64'}}, {@direct_io}, {@btree_node_prefetch}, {@ratelimit_errors}, {@journal_flush_disabled}, {@norecovery}, {@btree_node_mem_ptr_optimization}, {@reconstruct_alloc}, {@noexcl}], [{@hash}]}, 0x1, 0x5905, &(0x7f0000010b40)="$eJzs3W2QXFXdIPBzu3synZm8TAJIBJkMgSiCmglvhS+l0fWtAKlYWErYKAxkgtEkpJJBIKAEF1wowEJLS1E/oIXUotGiClaJlMjLJqyiFKtLbSG1uot+8CnkISWQh7J8nKdm+p5Oz52+c3t6ekICv18lc/ucvv0/5957+vb9n+6ZDgAAALwm7Ll+275zjvrAr744/NI1H/7ZpmtDb3m8vhpX6EuXV7xSPeRA6q4sGV9mx8WbrvrBnwcuft8v7+75/su71x27/vfvP+zi+z9z5q7bvv3Qi/Pv/eczRXHjeDpxfzl5Lgmh+vO9X//S7seOHKtLQgjlpG9HCIuSxQ8tSjIhBv8eQliXFpZk7rznpVPWjy2vval7Qv3CzHrG+2tbNR1n2/ddflL4w3vXXPebpT/+UdfOZ3fsXyWpNoynEBZc2Pj4rhDC3PT/mDja4niMg3Z1CKGn4XFnFPTruBb7vyKnfHS6nJMuewvixPuXZcqlzHrZctSVWfYUtDdTef1od70i8zLl7MlopvL6GesXpcufpssTpxm/HP8noZSESr37G5P9YyQ0HLckJOPHslovl+rHNqTbnyknmXIpUy53ZbZrvN10oJWTZGJ9XC9TH0/HlbT+2MZzdRPn5tS/Pl1W0yfqy7EcsjdqeifdqG/XuNivvVP05UAoNZyDmtXXD3x6MHrTut5k8aTHjDYR79u95ubl5bUP7+nL6Udyd5LGT9qKv/3Xi+Z96oc3XpZ9Xa/Hv7CUxi+1Ff+PZz3+/Pk3fu9bufFvjfHLbcU/+YGe58565Ppluftnb9w/lbbiDz3z6C1LD79oZ27/b4/xq23FX7Xr8e75+x54MLf/g3H/zG0r/tPv/OCf7nryvmdz44cYv6et+Gt3bflyd/++E3LjPxj3T2974+eFnac/1d//l4G8+E/E+PPbin/njtveccfCm87MPb6r4/7payv+2cfff928ffcdk3fuTG7v1CsnwGvTYek11g1pud08c6Ya8oVvDlRq13zz0v/zO9lQ5uJzrJ0FnYwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGEI076nx/6/x/ve66SlrvTG0+XastYPyeEZG4IYdvI0NaRDZsvGfjMpZdt3Ty0cWBoZGB488jWKwdOfcvA1uEtG4euHLt38K2n1B63OCS1ZXLMpLa7R0dHS30T62J7/+n4nX9Yfsa//DWEwSN+11/J7f+K2zbdcXiTnxnJqtH3bLrsnN+d9t10u/rSfvU16dfo6OhoyOnXv573jzu+uvfPJ4Qw+Lqp+vXo0+/+xYQOjVfsj5MqdYdah7qTnqb9qPc67U/cX5X1GzYOD069f8ceX87Zjv981bN/X3/FV/5R27/V3O1ocf/OXTW6sfSNNWf/+zeurlUU9euVOu5F+ztuRexf3H/VdH8vSLdrQc52VXK26/rfPPjkz4+68cUdYbDywtLJbRdtV1c6ALqS17fUbmyhJ1k0ob6arh+PeHzcipFNW1Zsu3L7WzdsGrpk+JLhzW9feerK0wdPO/20FeNbvqLD2x/bf2OL239gxtPCz+34afzZ2ngq6lfR/hjrV/H+aOxR3vOv59wvfe3ttz1yTq2iaJzHtevnk3TZM3acV4aG8TZ5XzXbrqL9EEIYaLYfnn/xzHDk/9lwXdF5qPHINP7MSFaNPrbsb9894ztL3lWrOCDn+cYOtXmer/d6f3/G91c1PR6jB+n+7Q7ldLt6m/Zr5WOPdN2856+fr/dvzpxwxdDIyNaVtZ/z0p7OS45u2q9sbdyupeM/yyHdLaE+TJuM1zFdoda/7Pkzrp7dq73pfb3J4qbblRXv273m5uXltQ/vydvTyd21FueG+bVl8oacNTdmHliud7hZ+wfr869ofPR/6Dv3fvzen5w6aXycXPtZtF1Jznb9+Mk7v/b9r/zXn3Ruuz707sf7/vZ/P728VnGonFfqvU77kzSeV04Ooej5tzQ0347c51+p+fYUPf+y7exfv3m8gUy5N5Tber6e/EDPc2c9cv2y3Ofr3lafr1dPKJULnq8Hy/jJPr+SysR+zN7za8JASVaN/vKGw3Y8dM3qo2oVReO6vnazcX1KC/lHznb94vyn+i8d+C//u3PnjR+85Z4Lfj+06gu1ivaPe+xLZ457Nd2/1Zz9W+91zDsb9+/bLr5047pa/cF7/ZsuC/KfeCrZduX2zw5t3Di8dVtr29Xq62lsJ7uX2309jWe3xQXbVZq0XbN3o5X91erzLfZ/Xdv7a+LzrTckbb0ubP/1onmf+uGNl/VNelTa0IWlNH6prfh/POvx58+/8Xvfyo1/a4xfaSv+0DOP3rL08It25sa/PUnjV9uKv2rX493z9z3wYG78wdj/uW3Ff/qdH/zTXU/e92xu/BDj97a3/1/YefpT/f1/yY3/RJK2M3aNFMI9L52yvlZOQlf6fIv96JrQr5AtJ5lyKVMuN5ZLtbnWegPlJJlYH9dL649t6Eszn8ipj1dh1SW15cuxHLI3pq4/2JQazv3N6ouuUwEAXu3i+//xGjS+/z+cXijlzzTAfjPNw5bkxI152P75nDkT7l+Sxo+Pj/OA/W8Lg2PLawdqF/rTfR8hPh+y85yxnROOmxij3XnOovn3ZZly7FdtvrzSkIemJuc1ldDC/Pvkdqaef89sfvH8+MANk7o10DBvlT1+XemMWbPPO2T6WxmLkDc+svNi8fMc/QvC6vH2Whwf2c/RxOOQ/RxNbOeozImz3c/RzHR8xG5PMT7Gu1z8/sbk4xem2L/7j1/zaNnjN43jXR1bf7bfn+3AvGHTU9qBmzec3ffDzEvmxE+fYAf7vGGsj9tRaXE+8eM59Z2aT4yni9ivvVP05UAwnwi8WsX8P75GjOX/Yxfg/5ZZr+g6NHvVGOPlfk6o3Lw/RXnH5M/p9bT1Or5215Yvd/fvOyH3OufBVj/3s2VCqafgcz9F+3F5ply4H3MmaIryvWw7Rfs9+7mM3jC/rf1+547b3nHHwpvOzN3vq2svpMX7/WsTSvML9vshkC80jy9feE3kC7M9f/aK5SPpB59mKx/5WE79dPORnkk36ts17pDLR7oObL8AgENHzP/r75+l+f//iyuk1xFFeeuJmXKMl5u35lyf5OWtH0mXV2TW701/o2K6181nH3//dfP23XdMbt5ye6t56H+bUOorzENnljfn5hGrO/N58dw8op5nzSxPzO1/PU+cWZ6eG7+ep88sj87dP/U8embzALnx6/MAh3qeWzBfl2ksFludr3vV5tHpr8/OVh59bk79dPPo3kk36ts1Th4NAPDKivl/vIyL+f8jmfVm+j57bl7Qoev27N8Dqcd/4kDllbOd98123jrbef1sz0sc6nnxbM8Lze482Ws+L04blRcDAHAwi/n/3LScn//PLD9plr91TchP5OdN48vPD5L8/FCf/5L/e1+8mPwfAODVLeb/8dce49//+x9pOft36+XpOfHl6fL0qcZPy3l65+fZgs8BvLLzAHP3r28eAACAV0LXeKY0+ffsP5kus79nn/d7+efnrN+qSnp5fNHI1uHhCy7bsm5oZPiCzZeuG952weVbN4yMDG+urTfTvDE3b0nzxq5QSfdH8/WyedvC9O8hLMz5ewjZ9WPYo8dvTP57CNlm5xb8HYH9x6+1/uYdv9IU6zcbH3nHOy/+J3LWj+rH/+JPn3zB+m0XbNi8YWTD0MYN24cnrjeWtfZM43sz426Z1velZn5MUpr+93d2ph+lSf3oSvdH3vezJ5l+LEp7sijv+w9y+v2r//XVzx0/+o+7Qhg8ovyGGe2/ZNXofz9v+CMje363Zaz/pSn7X18z7VfR95Vm14/bU9l46baRk9Zfetnm7DdKtifOZ5Tq5Vmaz0if/uUW5yfW5tRP93MK5Uk3Dk4tz08AADBBfP8/Xs/G9w+/kl5AxfrW8/SZvX+cm6cPtpanZ7+XrChPz64ft7fVPL06wzw9235Rnt5s/WZ5el7enRf/YznrT1fr42Rmn/PIHScXtjZOst9nUDROsutPd5wkMxwn2faLxkmz9ZuNk7zjnhf/oznr52l9PMzsczm54+HW1sbDmzPlovGQXX+646E0w/GQbb9oPDRbv9l4yDu+efHPyVm/VRPHx9jAGB8XwxdcfunWzzasN9vffzHz/s3u93+0q/X+z+7nvma//7P7ubLZ7//MPleW2/8nZjYT1nr/Z/f7Xdp1wOZr0w+bFX3+rGged01O/XTncedMunFwMo8Lr5yY/8e3e2L+f1O67PTbQIf+96T5HrOm8Tv0PWZF1zFez6do7CDg9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNd2VJePLPddv23fOUR/41ReHX7rmwz/bdO2brvrBnwcuft8v7+75/su71x27/vfvP+zi+z9z5q7bvv3Qi/Pv/eczhYH7xn9WTkyL1RCS55IQqj/f+/Uv7X7syLG6JIRQTvp2hLAoWfzQoiQTYfDvIYR19X5OvPOel05ZP7a89qbuCfULM0Gy2xV6y7E/jf0M4YrCLeIQVE3H2fZ9l58U/vDeNdf9ZumPf9S189kd+1dJqg3jKYQFFzY+viuEMDf9PyaOtiXxwelydQihp+FxZxT067gW+78ip3x0upyTLnsL4sT7l2XKpcx62XLUlVn2FLQ3U3n9aHe9IvMy5ezJaKby+hnrF6XLn6bLE6cZvxz/J6GUhEq9+xuT/WMkNBy3JCTjx7JaL5fqxzak258pJ5lyKVMud2W2a7zddKCVk2RifVwvUx9Px5W0/tjGc3UT5+bUvz5dVtMn6suxHLI3anon3ahv17jYr71T9OVAKDWcg5rV1w98ejB607reZPGkx4w2Ee/bvebm5eW1D+/py+lHcneSxk/air/914vmfeqHN162JC/+haU0fqmt+H886/Hnz7/xe9/KjX9rjF9uK/7JD/Q8d9Yj1y/L3T974/6ptBV/6JlHb1l6+EU7c/t/e4xfbSv+ql2Pd8/f98CDuf0fjPtnblvxn37nB/9015P3PZsbP8T4PW3FX7try5e7+/edkBv/wbh/etsbPy/sPP2p/v6/DOTFfyLGn99W/Dt33PaOOxbedGbu8V0d909fW/HPPv7+6+btu++YvHNncnunXjkBXpsOS6+xbkjL7eaZM9WQL3xzoFK75puX/p/fyYYyxtpZMIvxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4dfrt1ad+8rz3fHRNJQkhyVlntIl4X3nOqlUDbbQ79Myjtyw9/KKdjXVL2ogDAAAAFIt5eKleUw1LwuXJ3HB00/XjHMHRsZRMrM/OIcQ42TmCduOUOhSn3KE4lQ7F6epQnDkditPdoTjVgjjV0FqcuVPEqYyNihb70zNlf1qP09uhOPM6FGd+h+Is6FCchR2K0zdlnNbH4aIOxVncoTiHdSjO4R2Kc0SH4ryuQ3GO7FCc7JzydMfh/HTNo/LijN8oF8apJOX6Hc3m049M2zlmhu30FrQzv+j1uMV25rbYznGZx5Wm2U61xXbeOMN2khbbefMM2ykVtBPH7RXZ/sV2YqnF8X9lh+Js71CcqzoU5+oOxfl8h+J8oUNxrplhHIBWxfx/f77XF7or7wo96RknOwsQ892l4z8nv97lnZBivDdk6ucUxcsm6pl4S6fbv+wEQibeskx914R4lXo+MkW8amO85Zk7C7c3O6GQ6d+JmfruonjZiQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmEW/vfrUT573no+uCUkY+9fUaBPxvvKcVasG2mh395qbl5fXPrynsa670kYgAAAAoFDMw7vqNdXQXVkZupM5E9arpvMA1bRc7qst+xeE1WPLZKA0Xu5JFk35uEr6uBUjm7as2Hbl9rdu2DR0yfAlw5vfvvLUlacPnnb6aSvWb9g4PFj7GUJ3QbwQwvj0w7Yrt392aOPG4a3bapXZ/i9JH7ckLSfp4/rfFgbHltem/V9c0F5pUnuzd6P46AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/Brt2FyHWWcQB/z8zszHTbmJF+TUOzGfJRohZN4rakWjoHBAttErIUZKa61mATLG6a0CYl1rEN2NYERWgJhEgujMRia/GmH7aI/SAQqdGAG4O0RXuhF0qrlbTkQlJGsjtndmZ2JrOOJduP3+9izsz7Pu/7nHcuFv5nBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOL8ma6PjlfJYdTgKIepRU+8imUtn47g0QN+vPLf9h7mR0ytbx3KZATYCAAAA+kpy+FBzJB9ymXRIhyumPi0NLRNhJvcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfPZO10fFKeax6YRRC1KOm3kUyl87GcWmAvq+//cS1r4yM/L11rDjAPgAAAEB/SQ5PNUfyoRiWhaHoira65NnAoo71nXXJPovnWNf57KBX3bI51l01x7pP9Knb0LjuCgAAAPDBl+T/THOkEHKZBT3zf79cn9Qt6ahLN66D/FYAAAAA+P8k+T/XHCmGXKbYzOtzzftLO+qS9f3+b5+sX9Fjfb//569vXP2fHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+OCZro+OV8lg1HYUQ9aipd5HMpbNxXBqg75rnh/9585EHl7aO5TIDbAQAAAD0leTwmeidD7nMcBgKF07l/pEbDz71paeeGQ0hTMf8bDbs2rRjx11rpl+TutXHjgz94Oib35lVt3r6dd4OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvGcma6PjlfJY9YIohKhHTb2LZC6djePSAH1f+/wX//rYyWffaB0rDrAPAAAA0F+Sw2eyfz4UQzZkw2VTn1qz/lmpttVfu/Z83ScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwf+7+1r3f3DQxsfkub7zxxpvmm/n+ywQAALzXloQo1P9Hl2+c77sGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADeDyZro+OV8lg1H4UQ9aipd5HMpbNxXBqgb/zc8dyC08+/2DpWHGAfAAAAoL8kh89k/3wohqEwFC6d+tTtmcBU/i+cx5sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3lcma6PjlfJYdUEUQtSjpt5FMpfOxnFpgL6P7j7wucMLv39T61guM8BGAAAAQF9JDs82R/Ihl/lkyIUrG58n2hdE6ca1+3OBmXXb25YNz3ldrW1des7r9nScLNM4zfS6fLJfYfraXFeava7Usq4Ymu1LbevCvrZVC/rcZwAAAIB5lOT/XHOkEHKZXEvO/VlbfUHOBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6mKyNjlfKY9UoCiHqUVPvIplLZ+O4NEDfe3/38Yu++vO9O1vHigPsAwAAAPSX5PCZ7J8PxbA4fCwsnsr9odBen9T9q3Lm8CP//tvKEFZddmIk07ntj5M3v3nthhc6X0JItVenQljY6Bf16PfbPzxyz/L6mcdCWHVp+spZ/cK5+7VvGdefrmxev+Poie19vhwAAAD4kEjy/1BzpBBymTt75v8keffJ/01TAXzhPbt/eUnjtZHIO1akCo1+qR79vrD8ib+sWPuPN8/m/3P1+8yBrYcvaWs4PdIhiuvlrTs3nLjmUCo59XT/dEf/5Hv58rff+M+WXQ+fme6fD/nG+KJMt/6zXztcENcnUvur697dX2vvn+lx/gd//+LJXy/a+87Z/m8vGW72v+oc5z93/+FbHtp33YEjG9r7hxBK3fq/9c5N4fI/3fFA5/mHOzZu/eZbXztEcf3Y0lOH1h4sXt/eP+ron3z/vzj56L6fPvy9Z5L+yW9FVi6ba/9UR/+X91y8+6X7Ny5q75/qcf4Xbn1lZFvpu3/sPP/tbbtmet7F7PM/fvWTt726Kb6vcwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODDZbI2Ol4pj1VTUQhRj5p6F8lcOhvHpQH6vn7z8bdu3fuTH7WOFQfYBwAAAOgvyeEz2T8fiiEbsmF4Kvc/Xdm8fsfRE9tDYXo2alwzE9vu3vGpLdt23nn7PN05AAAAMFdJ/s80Rwohl1kehhr5v7x154YT1xxKJfk/leT/LXdMbF4VmnUv77l490v3b1zUfE4QwtTPAvJn6z47U3fjDccLp/78jRVd69bM1B1beurQ2oPF65O60Fq3OjSfTzx+9ZO3vbopvq95f611n/76tonG44lk3+FbHtp33YEjG5rnaFyHG/smdROp/dV17+6vJXXpxjXfODcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNtkbXS8Uh6rhnQIUY+aehfJXDobx6UB+q5b/qsHLjr97OLWsVxmgI0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYb9+QuMo+ziAP89u8mabTdqkfcGomKZVUerBoiCiFxUVaUUKnipFqq09iIIgotSDqbRiqYoXweqliApqlIKCjcXSKqn4r3jxoIJC9SCUYkC7FA8q2X1mu5nuuDqpgvr5wPDkeWbmO7+Z59nZLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCPMtA31mwP77i/ccs5N3z06F0nHrnpnXu3XfTwq99NbLruw72DL52c2bxiy5fXL9u0/+4107ufP/TT8Fu/HO0Z/FCrWZW6tRDi8RhC7d3ZZx6b+fisubEYQqjGkckQRuPSQ6Mxl7D65xDC5nad83e+eeLyLXPttl0D88aX5ELy9xXq1ayelpH59fLvUkvrbGvjwUvC19eu3/7p8jde7586NnnqkFjrWE8hLN7YeX5/CGFR2uZkq20sOzm160IIgx3nXdmjrvP/YP2XFvTPTe3/UlvvkZPtX5nrV3LH5fuZ/lw72ON6C1VUR9njehnK9fMvo4UqqjMbH03t26ld9Sfzq9kWQyWGvnb598RTayR0zFsMsTmXtXa/0p7bkO4/14+5fiXXr/bn7qt53bTQqjHOH8+Oy41nr+O+NL6i813dxa0F42entpY+qCezfsj/0VI/7Y/2fTVldc3+Ti1/h0rHO6jbeHvi02TU01g9Lj3tnF+7yPbNrH/iwuqG9w6PFNQR98aUH0vlb/1kdOj213Y+MFaUv7GS8iul8r9Ze+SH23a+8Fxh/tNZfrVU/mUHBo+vfX/HysLnM5s9n75S+Xcc/eDJ5f+/c6rbXDfz92T5tVL510wfGRhuHDhYWP/q7PksKpX/1dU3fvvK5/uOFeaHLH+wVP6G6fueGhhvXFyYf7D1Uag3V2iJ9fPj1BVfjI9/P1GU/1n2/Ie75Mee+S9P7r7qxSW71hSuz3XZ8xkpVf/NF+zfPtTYd17RuzPuOVPfnAD/TcvS/1iPp37Z35kL1fF74dmJvtY30FDahs/khXLmrrP4L8wHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDf2IEDEgAAAABB/1+3I1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgqQAAAP//buwo2g==")
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2\x00', 0x1ff)

3.275815018s ago: executing program 1 (id=3399):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2)

2.987603007s ago: executing program 1 (id=3403):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4884, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5"], 0x1, 0x4430, &(0x7f00000088c0)="$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")
open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0)

2.378723941s ago: executing program 5 (id=3409):
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c041f030080000900", 0x33a)

1.979785273s ago: executing program 5 (id=3413):
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080))

1.588817834s ago: executing program 3 (id=3419):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000380))

1.519863587s ago: executing program 5 (id=3421):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0)
ioctl$RTC_IRQP_READ(r0, 0x40187013, &(0x7f0000000080))

1.514919566s ago: executing program 4 (id=3422):
r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x121041)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000001c0)={0x1f, 0x5, &(0x7f0000000180)="e0dfd14cc1"})

1.427922219s ago: executing program 0 (id=3423):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010101}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}]}, 0x40}}, 0x0)

1.255796768s ago: executing program 5 (id=3424):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3)

1.255237577s ago: executing program 3 (id=3425):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
close(r0)

1.255007513s ago: executing program 1 (id=3426):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0xfffbffff, 0x32315659, 0x780, 0x43c, 0x2, @discrete={0x6, 0x51}})

1.214790795s ago: executing program 4 (id=3427):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f00000191c0)=' \xd1\xc4\xfd.\xb9\xb6\x82\x9c\xb3t:e=V+\xfe\xd4\xf6\xf8\x89_\xb9\xd1$\x05B\xfaa\xcd\xc3\x1e\xc9\xe3P\xfe \xdc\xf5\x10\xd8\x8f\xbd\xad\xa0SD\x9a@\xfd]\x8f\x05\xb1J\xfaRc\xc6']})

1.078038358s ago: executing program 5 (id=3428):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x30}}, {0x0, @link_local}, 0x12, {0x2, 0x4e22, @private=0xa010101}, 'wg1\x00'})

951.825977ms ago: executing program 3 (id=3429):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0)

951.523609ms ago: executing program 4 (id=3430):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0xfffffffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

915.033993ms ago: executing program 2 (id=3431):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, 0x0)

875.010051ms ago: executing program 0 (id=3432):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

820.864401ms ago: executing program 5 (id=3433):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

715.36307ms ago: executing program 0 (id=3434):
modify_ldt$write(0x1, &(0x7f0000000000)={0x7, 0xffffffffffffffff, 0x5400}, 0x10)
modify_ldt$read(0x0, 0xfffffffffffffffd, 0x3)

694.922841ms ago: executing program 4 (id=3435):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1)
pwritev(r0, &(0x7f0000001440)=[{&(0x7f0000000180)="d1d7", 0x2}], 0x1, 0x80000000, 0x3)

639.777821ms ago: executing program 3 (id=3436):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x3]}, {0xffffffffffffffff}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}}, @common=@unspec=@physdev={{0x68}, {'batadv_slave_0\x00', {0xff}, 'ip_vti0\x00', {0xff}, 0xf}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x1, 0x5, 0x2, 0x0, 0x1], 0x1, 0x1}, {0x0, [0x0, 0x4, 0x6, 0x4, 0x1, 0x4], 0x4, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)

545.108119ms ago: executing program 1 (id=3437):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r0, 0x104, 0x2, &(0x7f00000002c0)=0xee8f, 0x4)

522.398435ms ago: executing program 0 (id=3438):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x82d02, 0x0)
ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000000))

484.005932ms ago: executing program 3 (id=3439):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0)

391.697987ms ago: executing program 4 (id=3440):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x654, &(0x7f0000000a40)="$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")
mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0)

387.827609ms ago: executing program 0 (id=3441):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_expedited', 0x149a82, 0x8)
write$cgroup_int(r0, &(0x7f0000000040)=0x100000001, 0x12)

296.507289ms ago: executing program 1 (id=3442):
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0xc, 0x0, 0x18000000000, 0x9, 0x7fffffff, 0x9, 0x8, 0x2}, 0x0, 0x0, 0x0, 0x0)

224.123365ms ago: executing program 3 (id=3443):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000001050000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff4cff80850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x11, 0xe, 0x0, &(0x7f00000009c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

151.087671ms ago: executing program 0 (id=3444):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b3243078b089b3430076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

97.029159ms ago: executing program 4 (id=3445):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1e)

0s ago: executing program 1 (id=3446):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x5, &(0x7f0000001e00)=""/102391, &(0x7f0000000240)=0x18ff7)

kernel console output (not intermixed with test programs):

 yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  203.881251][    C1] yealink 3-1:36.0: urb_irq_callback - urb status -71
[  203.888034][    C1] yealink 3-1:36.0: unexpected response 0
[  203.895585][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  203.903808][    C1] yealink 3-1:36.0: urb_irq_callback - urb status -71
[  203.910590][    C1] yealink 3-1:36.0: unexpected response 0
[  203.924123][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  203.931353][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  203.938430][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  203.945398][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  203.952410][ T5945] usb 3-1: USB disconnect, device number 8
[  203.958300][    C1] yealink 3-1:36.0: urb_irq_callback - urb status -71
[  203.958328][    C1] yealink 3-1:36.0: unexpected response 0
[  203.958347][    C1] yealink 3-1:36.0: urb_irq_callback - usb_submit_urb failed -19
[  204.107959][T10026] validate_nla: 44 callbacks suppressed
[  204.107982][T10026] netlink: 'syz.4.1761': attribute type 1 has an invalid length.
[  204.122004][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1761'.
[  204.357094][T10033] loop0: detected capacity change from 0 to 256
[  204.633963][T10042] xt_TPROXY: Can be used only with -p tcp or -p udp
[  204.913670][T10052] loop4: detected capacity change from 0 to 1024
[  204.982792][ T5945] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  205.164525][ T5945] usb 1-1: Using ep0 maxpacket: 16
[  205.213378][ T5945] usb 1-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30
[  205.230522][ T5945] usb 1-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247
[  205.260411][T10066] netlink: 'syz.2.1781': attribute type 8 has an invalid length.
[  205.290447][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0
[  205.321338][ T5945] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31
[  205.351036][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.392063][ T5945] usb 1-1: Product: syz
[  205.396264][ T5945] usb 1-1: Manufacturer: syz
[  205.437494][ T5945] usb 1-1: SerialNumber: syz
[  205.458590][ T5945] usb 1-1: config 0 descriptor??
[  205.526456][ T5945] usb 1-1: cannot find UAC_HEADER
[  205.565136][T10077] netlink: 'syz.2.1786': attribute type 10 has an invalid length.
[  205.621878][ T5945] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  205.632730][T10077] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.664028][T10077] batadv0: entered promiscuous mode
[  205.699077][T10077] batadv0: entered allmulticast mode
[  205.725383][T10077] team0: Port device batadv0 added
[  205.783238][ T5945] usb 1-1: USB disconnect, device number 7
[  205.812332][ T6399] udevd[6399]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  205.888412][T10090] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1793'.
[  205.900218][  T213] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  205.909864][  T213] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  206.149890][T10098] loop5: detected capacity change from 0 to 1764
[  206.754449][ T5897] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  206.985187][ T5897] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  207.002005][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.010019][ T5897] usb 4-1: Product: syz
[  207.031646][ T5897] usb 4-1: Manufacturer: syz
[  207.036285][ T5897] usb 4-1: SerialNumber: syz
[  207.079180][ T5897] usb 4-1: config 0 descriptor??
[  207.218641][T10134] loop1: detected capacity change from 0 to 256
[  207.297994][ T5897] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  207.307011][T10134] FAT-fs (loop1): Directory bread(block 64) failed
[  207.313592][T10134] FAT-fs (loop1): Directory bread(block 65) failed
[  207.349865][ T5897] peak_usb 4-1:0.0: unable to read PCAN-USB FD firmware info (err -71)
[  207.369606][T10134] FAT-fs (loop1): Directory bread(block 66) failed
[  207.395231][T10134] FAT-fs (loop1): Directory bread(block 67) failed
[  207.431713][ T5897] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71
[  207.440174][T10134] FAT-fs (loop1): Directory bread(block 68) failed
[  207.446724][T10134] FAT-fs (loop1): Directory bread(block 69) failed
[  207.457215][T10138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1817'.
[  207.487635][ T5897] usb 4-1: USB disconnect, device number 9
[  207.488135][T10107] loop0: detected capacity change from 0 to 32768
[  207.497587][T10134] FAT-fs (loop1): Directory bread(block 70) failed
[  207.542204][T10134] FAT-fs (loop1): Directory bread(block 71) failed
[  207.578717][T10134] FAT-fs (loop1): Directory bread(block 72) failed
[  207.596660][   T29] audit: type=1800 audit(1739833971.982:51): pid=10107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1803" name="file1" dev="loop0" ino=4 res=0 errno=0
[  207.617034][    C0] vkms_vblank_simulate: vblank timer overrun
[  207.640399][T10134] FAT-fs (loop1): Directory bread(block 73) failed
[  207.768642][T10142] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  208.089411][T10144] loop2: detected capacity change from 0 to 4096
[  208.143450][T10144] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  208.219845][T10122] loop4: detected capacity change from 0 to 32768
[  208.266963][T10122] XFS: ikeep mount option is deprecated.
[  208.294858][T10122] XFS: noikeep mount option is deprecated.
[  208.383069][T10122] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  208.527288][T10166] loop1: detected capacity change from 0 to 512
[  208.552162][T10122] XFS (loop4): Ending clean mount
[  208.562135][T10166] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1828: attempt to clear invalid blocks 2 len 1
[  208.619436][T10166] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  208.622894][T10122] XFS (loop4): Quotacheck needed: Please wait.
[  208.649301][T10166] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1828: invalid indirect mapped block 1819239214 (level 0)
[  208.732128][T10166] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1828: invalid indirect mapped block 1819239214 (level 1)
[  208.802174][T10166] EXT4-fs (loop1): 1 truncate cleaned up
[  208.819544][T10166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.840492][T10122] XFS (loop4): Quotacheck: Done.
[  208.914424][T10179] netlink: 'syz.3.1833': attribute type 21 has an invalid length.
[  208.926304][T10166] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.1828: Unrecognised inode hash code 20
[  208.961420][T10174] loop5: detected capacity change from 0 to 8192
[  208.972991][T10179] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1833'.
[  209.001291][T10179] netlink: 'syz.3.1833': attribute type 5 has an invalid length.
[  209.019962][T10166] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1828: Corrupt directory, running e2fsck is recommended
[  209.041487][T10174] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  209.047892][T10179] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1833'.
[  209.122532][ T5833] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  209.229946][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.230876][ T5888] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  209.496211][ T5888] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62
[  209.505575][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.527680][ T5888] usb 3-1: config 0 descriptor??
[  209.551344][ T5888] usb 3-1: selecting invalid altsetting 1
[  209.557982][ T5888] flexcop_usb: set interface failed.
[  209.563332][ T5888] b2c2_flexcop_usb 3-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22
[  209.741203][ T5888] usb 3-1: USB disconnect, device number 9
[  209.891123][T10204] SET target dimension over the limit!
[  210.732019][T10238] loop3: detected capacity change from 0 to 512
[  210.839182][T10238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.899560][T10238] ext4 filesystem being mounted at /318/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  210.942731][T10249] loop0: detected capacity change from 0 to 64
[  210.956724][T10249] hfs: unable to locate alternate MDB
[  210.962502][T10249] hfs: continuing without an alternate MDB
[  211.019053][T10238] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.1863: corrupted inode contents
[  211.084930][T10238] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.1863: mark_inode_dirty error
[  211.136781][T10255] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1868'.
[  211.159645][T10238] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.1863: Allocating blocks 18-19 which overlap fs metadata
[  211.177905][T10256] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 52473 - 0
[  211.211698][T10256] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 52473 - 0
[  211.241664][T10256] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 52473 - 0
[  211.288356][T10256] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 52473 - 0
[  211.331855][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.342570][T10256] geneve2: entered promiscuous mode
[  211.362687][ T5891] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  211.459712][ T5888] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  211.547272][ T5891] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  211.583425][ T5891] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  211.592982][T10268] netlink: 'syz.0.1876': attribute type 21 has an invalid length.
[  211.611499][ T5891] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  211.632178][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.635395][T10268] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1876'.
[  211.644845][T10271] loop2: detected capacity change from 0 to 1024
[  211.663209][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short
[  211.673604][T10257] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  211.678034][T10268] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1876'.
[  211.678790][ T5888] usb 5-1: not running at top speed; connect to a high speed hub
[  211.700738][ T5891] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  211.726075][T10271] hfsplus: Filesystem is marked locked, mounting read-only.
[  211.737086][ T5888] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  211.764415][ T5888] usb 5-1: config 1 has no interface number 1
[  211.784293][ T5888] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  211.792446][T10271] hfsplus: invalid catalog entry type in lookup
[  211.835590][T10274] netlink: 'syz.3.1878': attribute type 5 has an invalid length.
[  211.845128][ T5888] usb 5-1: string descriptor 0 read error: -22
[  211.851777][ T5888] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  211.913275][T10272] loop1: detected capacity change from 0 to 4096
[  211.919966][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.948037][ T5897] usb 6-1: USB disconnect, device number 8
[  211.963538][T10272] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  211.979500][ T5888] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  212.092780][T10272] ntfs3(loop1): ino=19, mi_enum_attr
[  212.110097][T10272] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  212.171377][T10280] loop3: detected capacity change from 0 to 256
[  212.280404][T10280] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  212.422120][   T25] usb 5-1: USB disconnect, device number 5
[  212.754465][T10296] xt_l2tp: invalid flags combination: 4
[  212.764959][T10298] netlink: 'syz.2.1890': attribute type 1 has an invalid length.
[  212.780067][T10294] loop0: detected capacity change from 0 to 1764
[  213.043947][T10306] netlink: 'syz.2.1893': attribute type 4 has an invalid length.
[  213.054549][T10305] raw_sendmsg: syz.1.1894 forgot to set AF_INET. Fix it!
[  213.069055][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'.
[  213.554368][T10322] netlink: 'syz.3.1903': attribute type 1 has an invalid length.
[  214.265589][T10303] loop5: detected capacity change from 0 to 32768
[  214.310275][T10349] Scaler: =================  START STATUS  =================
[  214.355383][T10349] Scaler: ==================  END STATUS  ==================
[  214.379629][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'.
[  214.649137][T10365] loop3: detected capacity change from 0 to 512
[  214.713730][T10365] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  214.800574][T10365] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  214.904156][T10365] EXT4-fs (loop3): 1 truncate cleaned up
[  214.940668][T10365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.050415][T10365] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:298: inode #15: comm syz.3.1922: verity file has no extents
[  215.069507][T10377] loop0: detected capacity change from 0 to 256
[  215.168102][T10365] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[  215.199711][T10382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1930'.
[  215.235524][T10382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1930'.
[  215.381897][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.581626][T10394] loop1: detected capacity change from 0 to 2048
[  215.626858][T10395] loop4: detected capacity change from 0 to 2048
[  215.651742][T10394] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2362, location=2362
[  215.667782][T10401] loop0: detected capacity change from 0 to 1024
[  215.676644][T10395] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  215.706684][T10394] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  215.730497][T10401] EXT4-fs: Ignoring removed bh option
[  215.735934][T10401] EXT4-fs: inline encryption not supported
[  215.741455][T10395] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.778696][T10401] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  215.793318][T10394] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  215.835841][T10401] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  215.848512][T10394] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.910632][T10401] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.1939: lblock 2 mapped to illegal pblock 2 (length 1)
[  215.953918][T10401] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  215.990223][T10401] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.1939: lblock 0 mapped to illegal pblock 48 (length 1)
[  216.041326][T10401] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  216.068822][T10401] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1939: Failed to acquire dquot type 0
[  216.155473][T10401] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  216.186917][T10401] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.1939: mark_inode_dirty error
[  216.240780][T10401] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  216.285825][T10401] EXT4-fs (loop0): 1 orphan inode deleted
[  216.302511][T10401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.307123][   T12] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  216.418754][   T12] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  216.449120][T10427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1950'.
[  216.458984][   T12] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 0
[  216.517600][   T12] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm kworker/u8:1: lblock 2 mapped to illegal pblock 2 (length 1)
[  216.593151][   T12] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  216.601310][   T12] EXT4-fs error (device loop0): ext4_write_dquot:6907: comm kworker/u8:1: Failed to commit dquot type 0
[  216.704042][   T12] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[  216.741269][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.761345][T10436] loop4: detected capacity change from 0 to 512
[  216.777270][ T5837] EXT4-fs error (device loop0): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0
[  216.828219][ T5837] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  216.864909][ T5837] EXT4-fs error (device loop0): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error
[  216.881667][T10436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.929226][T10436] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.005681][T10436] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1957: bg 0: block 18: invalid block bitmap
[  217.041559][T10436] Quota error (device loop4): write_blk: dquota write failed
[  217.059022][T10444] loop2: detected capacity change from 0 to 256
[  217.060160][T10436] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  217.104938][T10436] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1957: Failed to acquire dquot type 1
[  217.404952][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1964'.
[  217.460843][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.670298][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1970'.
[  217.797836][T10468] loop3: detected capacity change from 0 to 64
[  217.953934][T10430] loop1: detected capacity change from 0 to 32768
[  218.071243][T10474] loop2: detected capacity change from 0 to 8
[  218.170913][T10474] SQUASHFS error: xz decompression failed, data probably corrupt
[  218.203031][T10474] SQUASHFS error: Failed to read block 0x249: -5
[  218.209441][T10474] SQUASHFS error: Unable to read metadata cache entry [247]
[  218.242989][T10478] loop3: detected capacity change from 0 to 256
[  218.296916][T10474] SQUASHFS error: Unable to read directory block [247:26]
[  218.317010][T10478] FAT-fs (loop3): Directory bread(block 64) failed
[  218.343661][T10478] FAT-fs (loop3): Directory bread(block 65) failed
[  218.383276][T10478] FAT-fs (loop3): Directory bread(block 66) failed
[  218.414135][T10478] FAT-fs (loop3): Directory bread(block 67) failed
[  218.420750][T10478] FAT-fs (loop3): Directory bread(block 68) failed
[  218.464594][T10478] FAT-fs (loop3): Directory bread(block 69) failed
[  218.498276][T10478] FAT-fs (loop3): Directory bread(block 70) failed
[  218.504847][T10478] FAT-fs (loop3): Directory bread(block 71) failed
[  218.536438][T10478] FAT-fs (loop3): Directory bread(block 72) failed
[  218.542987][T10478] FAT-fs (loop3): Directory bread(block 73) failed
[  218.652822][T10478] tmpfs: Bad value for 'mpol'
[  218.675061][T10484] loop5: detected capacity change from 0 to 4096
[  218.717166][T10484] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  218.859612][T10464] loop4: detected capacity change from 0 to 32768
[  218.895874][T10484] ntfs3(loop5): ino=19, mi_enum_attr
[  218.914728][T10484] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  219.435493][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1995'.
[  219.448108][T10508] loop0: detected capacity change from 0 to 1024
[  219.456032][T10510] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  219.876620][T10526] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2001'.
[  219.930744][T10526] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2001'.
[  220.009350][T10526] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2001'.
[  220.157648][ T5888] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  220.284804][T10534] loop4: detected capacity change from 0 to 1764
[  220.348699][ T5888] usb 2-1: Using ep0 maxpacket: 8
[  220.380601][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short
[  220.413215][ T5888] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  220.439157][ T5888] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  220.491106][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  220.531131][ T5888] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  220.547010][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.575347][ T5888] usb 2-1: Product: syz
[  220.587887][ T5888] usb 2-1: Manufacturer: syz
[  220.592529][ T5888] usb 2-1: SerialNumber: syz
[  220.612892][T10546] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2011'.
[  220.926852][T10516] loop2: detected capacity change from 0 to 32768
[  220.933538][T10557] netlink: 'syz.0.2016': attribute type 11 has an invalid length.
[  220.963329][T10516] XFS (loop2): sunit and swidth must be specified together
[  221.035178][T10559] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  221.038150][T10555] loop3: detected capacity change from 0 to 4096
[  221.071815][ T5888] usb 2-1: 0:2 : does not exist
[  221.127349][T10555] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  221.137635][ T5888] usb 2-1: USB disconnect, device number 9
[  221.355693][ T6399] udevd[6399]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  221.881312][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2030'.
[  222.044401][T10590] tmpfs: Bad value for 'size'
[  222.709177][T10613] loop0: detected capacity change from 0 to 8
[  222.821379][T10575] loop3: detected capacity change from 0 to 32768
[  223.023275][ T5897] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  223.161755][T10575] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=zstd,fsck,norecovery,reconstruct_alloc
[  223.185433][T10575] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  223.196562][T10636] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2051'.
[  223.196721][T10575] bcachefs (loop3): Version upgrade required:
[  223.196721][T10575] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  223.196721][T10575] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[  223.196721][T10575]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  223.275788][    C1] vkms_vblank_simulate: vblank timer overrun
[  223.287920][ T5897] usb 2-1: Using ep0 maxpacket: 8
[  223.293886][T10575] bcachefs (loop3): dropping and reconstructing all alloc info
[  223.350512][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  223.361895][ T5897] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  223.387897][ T5897] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  223.397292][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.405611][ T5897] usb 2-1: Product: syz
[  223.409812][ T5897] usb 2-1: Manufacturer: syz
[  223.414571][ T5897] usb 2-1: SerialNumber: syz
[  223.421451][ T5897] usb 2-1: config 0 descriptor??
[  223.474597][T10575] invalid bkey in btree_node btree=snapshots level=0: u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent          1 children          0          0 subvol 1 tree 0
[  223.474643][T10575]   bad parent node (1 <= 4294967295): delete?, fixing
[  223.549868][T10575] bcachefs (loop3): accounting_read...
[  223.550449][T10646] netlink: 'syz.5.2056': attribute type 1 has an invalid length.
[  223.568021][T10575]  done
[  223.570802][T10575] bcachefs (loop3): alloc_read... done
[  223.576753][T10575] bcachefs (loop3): stripes_read... done
[  223.586567][T10575] bcachefs (loop3): snapshots_read... done
[  223.606171][T10575] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  223.615689][ T5945] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  223.643584][T10575] bcachefs (loop3): done starting filesystem
[  223.775963][ T5945] usb 1-1: Using ep0 maxpacket: 32
[  223.785596][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.816284][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.839559][ T5848] bcachefs (loop3): shutting down
[  223.840258][ T5945] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  223.862338][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.900524][ T5945] usb 1-1: config 0 descriptor??
[  223.907581][ T5945] hub 1-1:0.0: USB hub found
[  223.915221][ T5888] usb 2-1: USB disconnect, device number 10
[  223.931261][ T5848] bcachefs (loop3): shutdown complete
[  224.111885][ T5945] hub 1-1:0.0: 1 port detected
[  224.303715][ T5945] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  224.327106][ T5945] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  224.348811][ T5945] usbhid 1-1:0.0: can't add hid device: -71
[  224.354843][ T5945] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  224.364224][T10647] loop4: detected capacity change from 0 to 32768
[  224.389321][ T5945] usb 1-1: USB disconnect, device number 8
[  224.461419][T10647] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  224.676444][ T5833] ocfs2: Unmounting device (7,4) on (node local)
[  225.086779][T10677] Invalid option length (0) for dns_resolver key
[  225.108287][ T5945] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  225.288860][ T5945] usb 2-1: Using ep0 maxpacket: 16
[  225.302241][ T5945] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[  225.365259][ T5945] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  225.392853][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.429080][ T5945] usb 2-1: Product: syz
[  225.443196][ T5945] usb 2-1: Manufacturer: syz
[  225.447831][ T5945] usb 2-1: SerialNumber: syz
[  225.504551][ T5945] usb 2-1: config 0 descriptor??
[  225.505460][T10689] syz.5.2078: attempt to access beyond end of device
[  225.505460][T10689] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  225.527839][ T5945] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  225.549987][T10693] loop0: detected capacity change from 0 to 256
[  225.564248][ T5945] usb 2-1: Detected FT232R
[  225.583260][T10689] exFAT-fs (nbd5): unable to read boot sector
[  225.604046][T10693] exfat: Deprecated parameter 'namecase'
[  225.611106][T10689] exFAT-fs (nbd5): failed to read boot sector
[  225.638057][T10693] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  225.650377][T10689] exFAT-fs (nbd5): failed to recognize exfat type
[  225.787609][T10697] nft_compat: unsupported protocol 0
[  225.945348][ T5945] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  225.985559][ T5945] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  226.020996][ T5945] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  226.062684][ T5945] usb 2-1: USB disconnect, device number 11
[  226.088890][T10701] xt_CT: No such helper "snmp"
[  226.174321][T10707] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2060'.
[  226.200279][ T5945] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  226.212582][T10710] netlink: 'syz.4.2087': attribute type 4 has an invalid length.
[  226.257261][ T5945] ftdi_sio 2-1:0.0: device disconnected
[  226.564129][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2092'.
[  226.622498][   T29] audit: type=1326 audit(1739833991.962:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb98cde9 code=0x7ffc0000
[  226.739351][   T29] audit: type=1326 audit(1739833991.972:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb98cde9 code=0x7ffc0000
[  226.810058][   T29] audit: type=1326 audit(1739833991.993:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f23cb98cde9 code=0x7ffc0000
[  226.925901][   T29] audit: type=1326 audit(1739833991.993:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb98cde9 code=0x7ffc0000
[  227.041655][   T29] audit: type=1326 audit(1739833991.993:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb98cde9 code=0x7ffc0000
[  227.186051][T10745] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[  227.241802][T10748] netlink: 'syz.4.2106': attribute type 5 has an invalid length.
[  227.248462][T10745] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[  227.308088][T10745] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[  227.324279][T10752] netlink: 'syz.1.2108': attribute type 10 has an invalid length.
[  227.335758][T10745] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[  227.363865][T10745] geneve2: entered promiscuous mode
[  227.367678][T10756] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  227.402977][T10748] ip6erspan0: entered promiscuous mode
[  228.549363][T10801] loop4: detected capacity change from 0 to 256
[  228.577665][   T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  228.757819][   T25] usb 2-1: Using ep0 maxpacket: 16
[  228.792988][   T25] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping
[  228.830968][   T25] usb 2-1: config 1 has an invalid descriptor of length 125, skipping remainder of the config
[  228.864174][   T25] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  228.903626][   T25] usb 2-1: New USB device found, idVendor=226b, idProduct=44d1, bcdDevice= 0.2e
[  228.942703][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.979311][   T25] usb 2-1: Product: syz
[  229.003292][   T25] usb 2-1: Manufacturer: syz
[  229.007909][   T25] usb 2-1: SerialNumber: syz
[  229.157236][T10826] loop4: detected capacity change from 0 to 256
[  229.228309][T10823] loop2: detected capacity change from 0 to 2048
[  229.256803][ T5945] usb 2-1: USB disconnect, device number 12
[  229.288212][T10823] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  229.393635][T10833] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  229.414073][ T5841] udevd[5841]: incorrect nilfs2 checksum on /dev/loop2
[  230.015355][ T5914] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  230.078800][T10860] loop1: detected capacity change from 0 to 1024
[  230.204187][ T5914] usb 4-1: Using ep0 maxpacket: 16
[  230.222988][T10860] hfsplus: keylen 65060 too large
[  230.228585][T10860] hfsplus: keylen 65060 too large
[  230.247612][ T5914] usb 4-1: config 0 has an invalid interface number: 60 but max is 0
[  230.272737][ T5914] usb 4-1: config 0 has no interface number 0
[  230.293518][ T5914] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a
[  230.328429][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.363844][ T5914] usb 4-1: Product: syz
[  230.383115][ T5914] usb 4-1: Manufacturer: syz
[  230.394314][ T5914] usb 4-1: SerialNumber: syz
[  230.420876][ T5914] usb 4-1: config 0 descriptor??
[  230.444342][ T5914] gspca_main: spca500-2.14.0 probing 046d:0900
[  230.644770][ T5914] gspca_spca500: reg write: error -71
[  230.664765][ T5914] gspca_spca500: reg write: error -71
[  230.668558][T10878] netlink: 676 bytes leftover after parsing attributes in process `syz.2.2167'.
[  230.684017][ T5914] gspca_spca500: reg write: error -71
[  230.702610][ T5914] gspca_spca500: reg write: error -71
[  230.728490][ T5914] gspca_spca500: reg write: error -71
[  230.744127][T10878] netlink: 676 bytes leftover after parsing attributes in process `syz.2.2167'.
[  230.766366][ T5914] gspca_spca500: reg write: error -71
[  230.793571][ T5914] gspca_spca500: reg write: error -71
[  230.832160][ T5914] gspca_spca500: reg write: error -71
[  230.864139][ T5914] gspca_spca500: reg write: error -71
[  230.888314][ T5914] gspca_spca500: reg write: error -71
[  230.894673][ T5914] gspca_spca500: reg write: error -71
[  230.907496][ T5914] gspca_spca500: reg write: error -71
[  230.954505][ T5914] gspca_spca500: reg write: error -71
[  230.989984][ T5914] gspca_spca500: reg write: error -71
[  231.032697][ T5914] usb 4-1: USB disconnect, device number 10
[  231.493033][T10909] loop3: detected capacity change from 0 to 16
[  231.537154][T10909] erofs (device loop3): mounted with root inode @ nid 36.
[  231.549025][T10911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2183'.
[  231.686156][T10918] cgroup: none used incorrectly
[  231.949040][   T29] audit: type=1400 audit(1739833997.547:57): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10924 comm="syz.5.2191"
[  232.032611][ T5888] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  232.213208][ T5888] usb 3-1: Using ep0 maxpacket: 8
[  232.223340][ T5888] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  232.245964][T10934] loop1: detected capacity change from 0 to 2048
[  232.261762][ T5888] usb 3-1: config 179 has no interface number 0
[  232.279222][ T5888] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  232.295798][T10934] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  232.328035][ T5888] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  232.371412][ T5888] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  232.420925][T10944] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  232.442171][ T5888] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  232.461047][T10934] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=139
[  232.494716][T10934] Remounting filesystem read-only
[  232.500326][ T5888] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  232.525872][T10934] NILFS error (device loop1): nilfs_readdir: bad page in #2
[  232.552911][ T5888] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  232.586742][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.644452][T10921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  232.788746][T10958] netlink: 'syz.4.2204': attribute type 1 has an invalid length.
[  232.904187][T10958] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2204'.
[  232.943040][T10963] loop1: detected capacity change from 0 to 8
[  233.218213][   T25] usb 3-1: USB disconnect, device number 10
[  233.218290][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  233.218336][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  233.622441][T10986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2219'.
[  233.861236][T10995] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2224'.
[  233.984311][T11000] xt_NFQUEUE: number of total queues is 0
[  234.332814][T11015] loop2: detected capacity change from 0 to 256
[  234.370601][T11015] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  234.431467][T11015] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d)
[  234.461634][T11021] vivid-000: =================  START STATUS  =================
[  234.486954][T11021] vivid-000: Generate PTS: true
[  234.513919][T11021] vivid-000: Generate SCR: true
[  234.543701][T11021] tpg source WxH: 320x180 (Y'CbCr)
[  234.554812][T11021] tpg field: 1
[  234.569153][T11021] tpg crop: 320x180@0x0
[  234.583408][T11021] tpg compose: 320x180@0x0
[  234.598159][T11021] tpg colorspace: 8
[  234.612092][T11021] tpg transfer function: 0/0
[  234.659513][T11021] tpg Y'CbCr encoding: 0/0
[  234.688607][T11021] tpg quantization: 0/0
[  234.719613][T11027] netlink: 'syz.0.2238': attribute type 1 has an invalid length.
[  234.721844][T11021] tpg RGB range: 0/2
[  234.756645][T11021] vivid-000: ==================  END STATUS  ==================
[  235.092916][T11045] openvswitch: netlink: Key type 29 is not supported
[  236.612114][T11095] netlink: 'syz.4.2273': attribute type 1 has an invalid length.
[  236.652489][T11059] loop2: detected capacity change from 0 to 32768
[  236.680641][T11059] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2255 (11059)
[  236.784052][T11059] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  236.841317][T11059] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  236.869563][T11059] BTRFS info (device loop2): disk space caching is enabled
[  236.901725][T11099] loop1: detected capacity change from 0 to 4096
[  236.906901][T11059] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  236.931999][T11099] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  237.103822][T11079] loop3: detected capacity change from 0 to 32768
[  237.118701][T11079] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2265 (11079)
[  237.145965][T11059] BTRFS info (device loop2): rebuilding free space tree
[  237.199355][T11079] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  237.217795][T11099] ntfs3(loop1): ino=19, mi_enum_attr
[  237.227494][T11059] BTRFS info (device loop2): disabling free space tree
[  237.237345][T11099] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  237.249738][T11059] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  237.252247][T11079] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  237.297360][T11059] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  237.347863][T11079] BTRFS info (device loop3): using free-space-tree
[  237.358146][T11099] ntfs3(loop1): failed to convert "c46c" to koi8-r
[  237.365174][T11099] ntfs3(loop1): ino=20, mi_enum_attr
[  237.490196][ T5891] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  237.588987][ T5853] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  237.703134][ T5891] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  237.729985][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.779430][ T5891] usb 1-1: Product: syz
[  237.794792][ T5891] usb 1-1: Manufacturer: syz
[  237.819041][ T5891] usb 1-1: SerialNumber: syz
[  237.824003][ T5848] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  237.839804][ T5891] usb 1-1: config 0 descriptor??
[  237.909853][ T5897] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  238.106184][ T5891] usb 1-1: ignoring: probably an ADSL modem
[  238.123126][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  238.158432][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  238.202720][   T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  238.214069][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  238.293346][ T5897] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  238.310788][ T5891] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  238.339993][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.359735][ T5891] usb 1-1: USB disconnect, device number 9
[  238.369203][T11163] netlink: 'syz.4.2291': attribute type 1 has an invalid length.
[  238.373102][ T5897] usb 6-1: Product: syz
[  238.386608][   T25] usb 3-1: Using ep0 maxpacket: 16
[  238.409607][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.429964][T11163] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2291'.
[  238.437606][ T5897] usb 6-1: Manufacturer: syz
[  238.465758][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  238.467246][ T5897] usb 6-1: SerialNumber: syz
[  238.509927][   T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  238.537020][ T5897] usb 6-1: config 0 descriptor??
[  238.564832][   T25] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  238.572962][T11148] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  238.632085][   T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  238.667326][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  238.677180][T11148] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  238.702452][   T25] usb 3-1: SerialNumber: syz
[  238.712943][ T5897] usb 6-1: ucan: probing device on interface #0
[  238.741173][   T25] cdc_acm 3-1:1.0: skipping garbage
[  238.765763][   T25] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12
[  238.988015][ T5914] usb 3-1: USB disconnect, device number 11
[  239.027261][T11177] usb usb8: usbfs: process 11177 (syz.3.2297) did not claim interface 0 before use
[  239.168718][ T5897] usb 6-1: ucan: failed to retrieve device info
[  239.198437][ T5897] usb 6-1: ucan: probe failed; try to update the device firmware
[  239.251832][ T5897] usb 6-1: USB disconnect, device number 9
[  239.309472][T11183] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2300'.
[  239.358953][T11183] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2300'.
[  239.414377][T11183] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2300'.
[  239.693084][T11197] loop2: detected capacity change from 0 to 512
[  239.708012][T11197] EXT4-fs: inline encryption not supported
[  239.744153][T11197] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  239.758071][T11197] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  239.803257][T11197] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2306: Corrupt directory, running e2fsck is recommended
[  239.918386][T11197] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  239.950829][T11197] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2306: corrupted in-inode xattr: invalid ea_ino
[  240.016427][T11197] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2306: couldn't read orphan inode 15 (err -117)
[  240.101417][T11197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.208506][T11197] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  240.252518][T11197] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  240.300943][T11197] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2306: Corrupt directory, running e2fsck is recommended
[  240.343011][T11217] loop3: detected capacity change from 0 to 512
[  240.409232][T11217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  240.487947][T11186] loop1: detected capacity change from 0 to 32768
[  240.510598][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.636129][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  241.228983][T11209] loop5: detected capacity change from 0 to 32768
[  241.273733][T11209] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2312 (11209)
[  241.340743][T11243] loop4: detected capacity change from 0 to 1024
[  241.402054][T11209] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  241.442215][T11209] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  241.480510][T11209] BTRFS info (device loop5): using free-space-tree
[  241.624802][   T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  241.707502][T11271] netlink: 'syz.2.2336': attribute type 1 has an invalid length.
[  241.724326][T11271] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2336'.
[  241.834030][   T25] usb 1-1: Using ep0 maxpacket: 16
[  241.861496][   T25] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  241.874883][   T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  241.903907][ T5851] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  241.907310][   T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  241.926775][T11278] netlink: 'syz.1.2337': attribute type 1 has an invalid length.
[  241.956180][   T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  242.004037][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.030359][   T25] usb 1-1: Product: syz
[  242.044667][   T25] usb 1-1: Manufacturer: syz
[  242.049295][   T25] usb 1-1: SerialNumber: syz
[  242.054049][   T46] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  242.253923][   T46] usb 4-1: config 0 has an invalid interface number: 4 but max is 0
[  242.291152][   T46] usb 4-1: config 0 has no interface number 0
[  242.301184][T11288] program syz.2.2342 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  242.324085][   T46] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  242.348233][   T25] usb 1-1: 0:2 : does not exist
[  242.373076][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.407163][   T25] usb 1-1: USB disconnect, device number 10
[  242.463314][   T46] usb 4-1: config 0 descriptor??
[  242.490318][   T46] ums-realtek 4-1:0.4: USB Mass Storage device detected
[  242.600738][T11296] netlink: 'syz.2.2345': attribute type 4 has an invalid length.
[  242.608696][T11296] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2345'.
[  242.696768][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  242.700565][   T29] audit: type=1326 audit(249.683:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.4.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374a18cde9 code=0x7ffc0000
[  242.734212][    C0] vkms_vblank_simulate: vblank timer overrun
[  242.778467][   T29] audit: type=1326 audit(249.736:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.4.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374a18cde9 code=0x7ffc0000
[  242.800693][   T29] audit: type=1326 audit(249.736:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.4.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f374a18cde9 code=0x7ffc0000
[  242.812310][   T46] usb 4-1: USB disconnect, device number 11
[  242.822733][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'.
[  242.904605][   T29] audit: type=1326 audit(249.736:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.4.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374a18cde9 code=0x7ffc0000
[  242.938506][   T29] audit: type=1326 audit(249.736:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.4.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374a18cde9 code=0x7ffc0000
[  243.060780][T11306] netlink: 'syz.5.2350': attribute type 2 has an invalid length.
[  243.469429][T11320] @: renamed from vlan0 (while UP)
[  244.103389][T11346] netlink: 'syz.5.2370': attribute type 33 has an invalid length.
[  244.253316][T11350] netlink: 'syz.2.2372': attribute type 3 has an invalid length.
[  244.544034][T11318] loop4: detected capacity change from 0 to 32768
[  244.999757][T11338] loop1: detected capacity change from 0 to 32768
[  245.025729][T11338] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2364 (11338)
[  245.115585][T11338] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  245.120199][ T5891] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  245.154464][T11338] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  245.202885][T11338] BTRFS info (device loop1): using free-space-tree
[  245.352886][ T5891] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  245.421996][ T5891] usb 6-1: config 0 interface 0 has no altsetting 0
[  245.479980][T11338] BTRFS warning (device loop1): can't clear the compat:1 feature bit while mounted
[  245.501624][ T5891] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  245.540080][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.548106][ T5891] usb 6-1: Product: syz
[  245.565937][ T5891] usb 6-1: Manufacturer: syz
[  245.580206][ T5891] usb 6-1: SerialNumber: syz
[  245.625906][ T5891] usb 6-1: config 0 descriptor??
[  245.638361][ T5891] usb 6-1: selecting invalid altsetting 0
[  245.675209][ T5845] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  245.905650][   T46] usb 6-1: USB disconnect, device number 10
[  246.963988][T11441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2407'.
[  247.264264][T11453] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  247.956181][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  248.222125][T11483] openvswitch: netlink: Duplicate or invalid key (type 0).
[  248.245002][T11483] openvswitch: netlink: Actions may not be safe on all matching packets
[  248.360845][T11486] bridge3: entered promiscuous mode
[  248.366114][T11486] bridge3: entered allmulticast mode
[  248.593569][T11464] loop1: detected capacity change from 0 to 32768
[  248.719241][T11464] ERROR: (device loop1): dbAllocNext: Corrupt dmap page
[  248.719241][T11464] 
[  248.743530][T11503] sit1: entered promiscuous mode
[  248.770931][T11464] ialloc: diAlloc returned -5!
[  248.994028][T11510] loop3: detected capacity change from 0 to 1024
[  249.320105][   T11] hfsplus: b-tree write err: -5, ino 4
[  249.824768][   T46] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  249.835347][ T5914] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  249.902436][ T5891] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  250.010599][   T46] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  250.035679][   T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.041902][ T5914] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  250.060517][ T5914] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  250.061342][   T46] usb 6-1: config 0 descriptor??
[  250.090446][ T5891] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  250.095187][   T46] gspca_main: sunplus-2.14.0 probing 055f:c420
[  250.120587][ T5891] usb 3-1: config 0 interface 0 has no altsetting 0
[  250.127460][ T5914] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  250.139307][ T5891] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  250.158774][ T5914] usb 4-1: config 1 has no interface number 1
[  250.165328][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.174092][ T5914] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  250.196103][ T5891] usb 3-1: Product: syz
[  250.203477][ T5891] usb 3-1: Manufacturer: syz
[  250.211458][ T5891] usb 3-1: SerialNumber: syz
[  250.221944][ T5914] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  250.251012][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.264046][ T5891] usb 3-1: config 0 descriptor??
[  250.271047][ T5914] usb 4-1: Product: syz
[  250.290769][ T5891] usb 3-1: selecting invalid altsetting 0
[  250.301986][ T5914] usb 4-1: Manufacturer: syz
[  250.306927][ T5914] usb 4-1: SerialNumber: syz
[  250.491166][   T46] gspca_sunplus: reg_w_riv err -71
[  250.508325][   T46] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  250.518229][ T5945] usb 3-1: USB disconnect, device number 12
[  250.545181][ T5914] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  250.577764][   T46] usb 6-1: USB disconnect, device number 11
[  250.582268][ T5914] usb 4-1: MIDIStreaming interface descriptor not found
[  250.631244][T11550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.682663][ T5914] usb 4-1: USB disconnect, device number 12
[  250.724973][T11537] loop0: detected capacity change from 0 to 32768
[  250.747694][T11537] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2456 (11537)
[  250.820530][T11537] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  250.862809][T11537] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  250.881734][T11537] BTRFS info (device loop0): using free-space-tree
[  250.998449][T11571] netlink: 'syz.4.2466': attribute type 29 has an invalid length.
[  251.020607][ T7372] udevd[7372]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  251.080488][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2466'.
[  251.161743][T11575] loop2: detected capacity change from 0 to 16
[  251.301902][T11575] erofs (device loop2): mounted with root inode @ nid 36.
[  251.354864][T11537] BTRFS warning (device loop0): can't clear the compat:1 feature bit while mounted
[  251.367068][T11583] loop3: detected capacity change from 0 to 1024
[  251.382981][T11575] syz.2.2467: attempt to access beyond end of device
[  251.382981][T11575] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16
[  251.413939][T11583] EXT4-fs: Ignoring removed bh option
[  251.446201][T11575] syz.2.2467: attempt to access beyond end of device
[  251.446201][T11575] loop2: rw=524288, sector=8, nr_sectors = 48 limit=16
[  251.486185][ T5837] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  251.490379][T11575] syz.2.2467: attempt to access beyond end of device
[  251.490379][T11575] loop2: rw=0, sector=8, nr_sectors = 24 limit=16
[  251.522058][T11575] erofs (device loop2): read error -5 @ 0 of nid 89
[  251.537321][T11583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.593149][   T29] audit: type=1800 audit(259.016:63): pid=11575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2467" name="file3" dev="loop2" ino=89 res=0 errno=0
[  251.601227][T11594] loop4: detected capacity change from 0 to 16
[  251.623165][T11594] erofs (device loop4): mounted with root inode @ nid 36.
[  251.626304][T11592] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2473'.
[  251.640758][T11592] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2473'.
[  251.714592][T11592] netlink: 380 bytes leftover after parsing attributes in process `syz.1.2473'.
[  251.860992][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.313131][T11611] netlink: 'syz.0.2494': attribute type 1 has an invalid length.
[  253.098282][T11643] netlink: 'syz.2.2497': attribute type 1 has an invalid length.
[  253.142208][T11643] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2497'.
[  253.234817][T11645] netlink: 'syz.1.2498': attribute type 2 has an invalid length.
[  253.427302][T11655] loop0: detected capacity change from 0 to 128
[  253.535641][T11661] netlink: 'syz.5.2505': attribute type 3 has an invalid length.
[  253.628245][ T5837] sysv_free_block: flc_count > flc_size
[  253.636520][ T5837] sysv_free_block: flc_count > flc_size
[  253.655019][ T5837] sysv_free_block: flc_count > flc_size
[  253.660585][ T5837] sysv_free_block: flc_count > flc_size
[  253.689855][ T5837] sysv_free_block: flc_count > flc_size
[  253.705448][ T5837] sysv_free_block: flc_count > flc_size
[  253.711011][ T5837] sysv_free_block: flc_count > flc_size
[  253.722283][ T5837] sysv_free_block: flc_count > flc_size
[  253.730575][ T5837] sysv_free_block: flc_count > flc_size
[  253.737242][ T5837] sysv_free_block: flc_count > flc_size
[  253.743219][   T46] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  253.760852][ T5837] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  253.807764][ T5945] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  253.893475][   T46] usb 5-1: Using ep0 maxpacket: 16
[  253.913561][   T46] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  253.928065][   T46] usb 5-1: config 0 has no interface number 0
[  253.934650][T11675] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2514'.
[  253.960810][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2514'.
[  253.978982][   T46] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  253.998456][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.009999][ T5945] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  254.019314][T11675] netlink: 'syz.5.2514': attribute type 1 has an invalid length.
[  254.037317][ T5945] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.048032][   T46] usb 5-1: Product: syz
[  254.052218][   T46] usb 5-1: Manufacturer: syz
[  254.074513][ T5945] usb 4-1: config 0 has no interface number 0
[  254.080735][   T46] usb 5-1: SerialNumber: syz
[  254.094098][ T5945] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  254.115777][ T5888] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  254.127209][   T46] usb 5-1: config 0 descriptor??
[  254.153534][ T5945] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  254.165677][   T46] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  254.181687][ T5945] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  254.193068][ T5945] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  254.207126][ T5945] usb 4-1: config 0 interface 52 has no altsetting 0
[  254.214010][ T5945] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  254.255072][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.289217][ T5945] usb 4-1: config 0 descriptor??
[  254.306062][T11685] loop5: detected capacity change from 0 to 128
[  254.312851][ T5888] usb 3-1: Using ep0 maxpacket: 16
[  254.332087][ T5888] usb 3-1: config 0 has an invalid interface number: 60 but max is 0
[  254.358083][ T5888] usb 3-1: config 0 has no interface number 0
[  254.387309][ T5888] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a
[  254.415984][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.424998][T11687] netlink: 'syz.0.2519': attribute type 3 has an invalid length.
[  254.445748][ T5888] usb 3-1: Product: syz
[  254.450147][T11687] netlink: 'syz.0.2519': attribute type 1 has an invalid length.
[  254.455938][ T5888] usb 3-1: Manufacturer: syz
[  254.466881][ T5851] sysv_free_block: flc_count > flc_size
[  254.482178][ T5888] usb 3-1: SerialNumber: syz
[  254.487346][ T5851] sysv_free_block: flc_count > flc_size
[  254.503806][ T5888] usb 3-1: config 0 descriptor??
[  254.508930][ T5851] sysv_free_block: flc_count > flc_size
[  254.527229][ T5851] sysv_free_block: flc_count > flc_size
[  254.530558][ T5945] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input14
[  254.549698][ T5851] sysv_free_block: flc_count > flc_size
[  254.552721][ T5888] gspca_main: spca500-2.14.0 probing 046d:0900
[  254.564598][   T46] gspca_spca1528: reg_w err -71
[  254.579267][   T46] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71
[  254.579312][ T5851] sysv_free_block: flc_count > flc_size
[  254.623676][ T5851] sysv_free_block: flc_count > flc_size
[  254.627349][   T46] usb 5-1: USB disconnect, device number 6
[  254.632140][ T5851] sysv_free_block: flc_count > flc_size
[  254.682451][ T5851] sysv_free_block: flc_count > flc_size
[  254.690632][ T5851] sysv_free_block: flc_count > flc_size
[  254.714249][ T5851] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  254.767276][ T5888] gspca_spca500: reg write: error -71
[  254.783800][ T5888] gspca_spca500: reg write: error -71
[  254.790403][ T5890] usb 4-1: USB disconnect, device number 13
[  254.818835][ T5888] gspca_spca500: reg write: error -71
[  254.831522][ T5888] gspca_spca500: reg write: error -71
[  254.853691][ T5888] gspca_spca500: reg write: error -71
[  254.870082][ T5888] gspca_spca500: reg write: error -71
[  254.885962][ T5888] gspca_spca500: reg write: error -71
[  254.903818][ T5888] gspca_spca500: reg write: error -71
[  254.941254][ T5888] gspca_spca500: reg write: error -71
[  254.960459][ T5888] gspca_spca500: reg write: error -71
[  254.984981][ T5888] gspca_spca500: reg write: error -71
[  255.003058][ T5888] gspca_spca500: reg write: error -71
[  255.022667][ T5888] gspca_spca500: reg write: error -71
[  255.045889][ T5888] gspca_spca500: reg write: error -71
[  255.094746][ T5888] usb 3-1: USB disconnect, device number 13
[  255.417395][ T5890] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  255.607795][ T5890] usb 5-1: Using ep0 maxpacket: 8
[  255.628400][ T5890] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  255.644010][ T5890] usb 5-1: config 179 has no interface number 0
[  255.679653][ T5890] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  255.743929][ T5890] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  255.783741][ T5890] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  255.797099][T11729] loop3: detected capacity change from 0 to 256
[  255.818238][ T5890] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  255.860797][ T5890] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  255.878407][T11729] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  255.918304][ T5890] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  255.967885][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.984959][T11729] exFAT-fs (loop3): start_clu is invalid cluster(0x0)
[  256.015129][T11706] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  256.045290][T11734] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2540'.
[  256.349696][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2545'.
[  256.427661][T11746] loop3: detected capacity change from 0 to 128
[  256.499463][   T46] usb 5-1: USB disconnect, device number 7
[  256.499531][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  256.499578][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  256.591634][T11750] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2548'.
[  256.706068][   T29] audit: type=1326 audit(264.381:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0c78cde9 code=0x7ffc0000
[  256.794282][   T29] audit: type=1326 audit(264.423:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0c78cde9 code=0x7ffc0000
[  256.898827][   T29] audit: type=1326 audit(264.433:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f5c0c78cde9 code=0x7ffc0000
[  256.903263][T11760] loop2: detected capacity change from 0 to 256
[  256.920521][    C0] vkms_vblank_simulate: vblank timer overrun
[  256.939306][   T29] audit: type=1326 audit(264.433:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0c78cde9 code=0x7ffc0000
[  256.997381][   T29] audit: type=1326 audit(264.433:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0c78cde9 code=0x7ffc0000
[  257.019053][    C0] vkms_vblank_simulate: vblank timer overrun
[  257.122941][T11768] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2557'.
[  257.303356][T11766] loop1: detected capacity change from 0 to 4096
[  257.350607][T11774] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  257.358916][T11766] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  257.460234][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'.
[  257.492325][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'.
[  257.804493][T11788] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2566'.
[  258.362762][T11762] loop3: detected capacity change from 0 to 32768
[  258.392649][T11762] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2552 (11762)
[  258.512299][T11762] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  258.578483][T11762] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  258.636896][T11762] BTRFS info (device loop3): using free-space-tree
[  259.037323][T11835] usb usb4: usbfs: process 11835 (syz.5.2584) did not claim interface 9 before use
[  259.278147][ T5848] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  259.670082][T11852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2592'.
[  259.722254][T11852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2592'.
[  259.761610][T11852] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2592'.
[  260.097998][T11821] loop4: detected capacity change from 0 to 32768
[  260.221334][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2598'.
[  260.250814][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2598'.
[  260.334019][T11871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2599'.
[  260.454375][T11873] mmap: syz.5.2587 (11873) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  260.606590][T11879] erspan1: entered promiscuous mode
[  261.197761][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2616'.
[  261.750610][T11923] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2626'.
[  262.027729][T11933] loop2: detected capacity change from 0 to 2048
[  262.101548][T11933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.167735][T11933] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #12: block 9: comm syz.2.2631: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0
[  262.247616][T11947] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2637'.
[  262.428696][T11953] loop3: detected capacity change from 0 to 256
[  262.485619][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.513406][T11953] FAT-fs (loop3): Directory bread(block 64) failed
[  262.541763][T11953] FAT-fs (loop3): Directory bread(block 65) failed
[  262.590599][T11953] FAT-fs (loop3): Directory bread(block 66) failed
[  262.615961][T11953] FAT-fs (loop3): Directory bread(block 67) failed
[  262.643242][T11953] FAT-fs (loop3): Directory bread(block 68) failed
[  262.703791][T11953] FAT-fs (loop3): Directory bread(block 69) failed
[  262.733891][T11953] FAT-fs (loop3): Directory bread(block 70) failed
[  262.740464][T11953] FAT-fs (loop3): Directory bread(block 71) failed
[  262.791462][T11953] FAT-fs (loop3): Directory bread(block 72) failed
[  262.798049][T11953] FAT-fs (loop3): Directory bread(block 73) failed
[  262.987159][T11972] openvswitch: netlink: VXLAN extension 15883 out of range max 1
[  263.228492][ T5897] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  263.399891][ T5897] usb 6-1: Using ep0 maxpacket: 16
[  263.420898][ T5897] usb 6-1: config 0 descriptor has 1 excess byte, ignoring
[  263.436340][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  263.454059][   T46] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  263.482525][ T5897] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  263.496434][T11992] loop1: detected capacity change from 0 to 8
[  263.529569][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024
[  263.530845][T11995] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336)
[  263.551836][T11992] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  263.561103][ T5897] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  263.592672][ T5897] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  263.619031][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.620979][T11995] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  263.647884][   T46] usb 3-1: Using ep0 maxpacket: 8
[  263.654852][ T5897] usb 6-1: Product: syz
[  263.669985][   T46] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01
[  263.679084][ T5897] usb 6-1: Manufacturer: syz
[  263.679109][ T5897] usb 6-1: SerialNumber: syz
[  263.693485][ T5897] usb 6-1: config 0 descriptor??
[  263.710270][T11971] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  263.724624][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.752588][   T46] usb 3-1: config 0 descriptor??
[  263.764043][T11971] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  263.774800][   T46] usb 3-1: unknown interface protocol 0x3f, assuming v1
[  263.798078][T11999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2662'.
[  263.819055][   T46] usb 3-1: cannot find UAC_HEADER
[  263.828063][ T5897] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected
[  263.835325][    C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71)
[  263.835400][    C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71)
[  263.901440][   T46] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  264.006475][   T46] usb 6-1: USB disconnect, device number 12
[  264.025012][   T46] mcba_usb 6-1:0.0 can0: device disconnected
[  264.032331][ T5890] usb 3-1: USB disconnect, device number 14
[  264.272015][ T6399] udevd[6399]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  264.451134][T12020] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  264.725650][T12032] loop5: detected capacity change from 0 to 16
[  264.773789][T12032] erofs (device loop5): mounted with root inode @ nid 36.
[  265.448226][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'.
[  265.486587][T12065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2689'.
[  265.539457][T12065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2689'.
[  265.669971][T12070] netlink: 'syz.1.2692': attribute type 2 has an invalid length.
[  266.311360][T12043] loop0: detected capacity change from 0 to 32768
[  266.321821][ T5889] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  266.411466][T12043] ERROR: (device loop0): diAllocAG: numfree > numinos
[  266.411466][T12043] 
[  266.444741][T12043] ialloc: diAlloc returned -5!
[  266.521734][ T5889] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  266.567540][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.619632][ T5889] usb 2-1: Product: syz
[  266.627099][ T5889] usb 2-1: Manufacturer: syz
[  266.656027][ T5889] usb 2-1: SerialNumber: syz
[  266.714289][ T5889] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  266.784525][ T5897] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  267.935718][ T5897] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  267.947008][ T5914] usb 2-1: USB disconnect, device number 13
[  267.966266][ T5897] ath9k_htc: Failed to initialize the device
[  267.983096][ T5914] usb 2-1: ath9k_htc: USB layer deinitialized
[  268.111191][T12150] dlm: non-version read from control device 0
[  268.357740][T12157] mmap: syz.3.2728 (12157): VmData 175878144 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  268.479229][T12163] loop2: detected capacity change from 0 to 64
[  268.619896][   T46] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  268.791166][   T46] usb 2-1: Using ep0 maxpacket: 32
[  268.809081][T12170] loop4: detected capacity change from 0 to 1024
[  268.846331][   T46] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  268.856467][   T46] usb 2-1: config 0 has no interface number 0
[  268.873495][   T46] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  268.877947][T12172] can0: slcan on ttyS3.
[  268.936939][   T46] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  268.986777][   T46] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  269.020766][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.073478][   T46] usb 2-1: Product: syz
[  269.082271][   T46] usb 2-1: Manufacturer: syz
[  269.105820][   T46] usb 2-1: SerialNumber: syz
[  269.160602][   T46] usb 2-1: config 0 descriptor??
[  269.166621][T12171] can0 (unregistered): slcan off ttyS3.
[  269.240213][T12182] netlink: 'syz.2.2740': attribute type 1 has an invalid length.
[  269.271466][T12145] loop5: detected capacity change from 0 to 32768
[  269.311144][T12145] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2721 (12145)
[  269.413071][T12145] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  269.479711][T12145] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  269.530951][T12145] BTRFS info (device loop5): using free-space-tree
[  269.606516][   T46] radio-si470x 2-1:0.35: si470x_get_report: usb_control_msg returned -71
[  269.646659][   T46] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5
[  269.744846][T12213] loop0: detected capacity change from 0 to 256
[  269.775293][   T46] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  269.850858][   T46] usb 2-1: USB disconnect, device number 14
[  269.851423][T12213] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  270.107497][ T5851] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  270.866838][T12250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2759'.
[  271.102201][T12261] netdevsim netdevsim5: Firmware load for './cgroup/../file0' refused, path contains '..' component
[  271.255072][T12252] loop3: detected capacity change from 0 to 4096
[  271.315755][T12252] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  271.468115][ T5914] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  271.554567][T12252] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  271.585529][T12252] ntfs3(loop3): Failed to load $Extend (-22).
[  271.591674][T12252] ntfs3(loop3): Failed to initialize $Extend.
[  271.621170][T12280] loop5: detected capacity change from 0 to 2048
[  271.663904][ T5914] usb 2-1: Using ep0 maxpacket: 32
[  271.679458][ T5914] usb 2-1: config 4 has an invalid interface number: 228 but max is 0
[  271.712197][T12280] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  271.725594][ T5914] usb 2-1: config 4 has no interface number 0
[  271.731729][ T5914] usb 2-1: config 4 interface 228 altsetting 68 endpoint 0xF has an invalid bInterval 0, changing to 7
[  271.791597][ T5914] usb 2-1: config 4 interface 228 altsetting 68 endpoint 0xF has invalid wMaxPacketSize 0
[  271.821171][ T5914] usb 2-1: config 4 interface 228 has no altsetting 0
[  271.840341][ T5914] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  271.873411][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  271.920061][ T5914] usb 2-1: Product: syz
[  271.924301][ T5914] usb 2-1: Manufacturer: syz
[  271.974536][ T5914] usb 2-1: SerialNumber: syz
[  272.270185][T12302] loop2: detected capacity change from 0 to 16
[  272.289784][T12302] erofs (device loop2): mounted with root inode @ nid 36.
[  272.306667][ T5914] usb 2-1: USB disconnect, device number 15
[  272.509876][ T6399] udevd[6399]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  272.555943][T12308] loop3: detected capacity change from 0 to 2048
[  272.624525][T12308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.844279][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.554562][   T46] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  273.709889][   T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  273.744745][   T46] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  273.778970][   T46] usb 2-1: config 1 has no interface number 0
[  273.804914][   T46] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  273.881432][   T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  273.897240][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.933611][   T46] usb 2-1: Product: syz
[  273.948555][   T46] usb 2-1: Manufacturer: syz
[  273.968080][   T46] usb 2-1: SerialNumber: syz
[  274.014012][   T46] usb 2-1: selecting invalid altsetting 1
[  274.100921][T12377] loop0: detected capacity change from 0 to 1024
[  274.154243][ T5890] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[  274.259446][   T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  274.311889][T12382] loop3: detected capacity change from 0 to 512
[  274.335712][ T5890] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  274.353407][T12385] loop0: detected capacity change from 0 to 1024
[  274.359985][ T5890] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  274.374329][T12382] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  274.387079][T12382] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  274.391599][   T46] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS
[  274.421839][T12382] EXT4-fs (loop3): 1 truncate cleaned up
[  274.427756][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  274.448857][T12382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.461468][   T25] usb 3-1: Using ep0 maxpacket: 16
[  274.477247][ T5890] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  274.489051][   T46] cdc_ncm 2-1:1.1: bind() failure
[  274.501522][T12385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.527371][   T25] usb 3-1: config 0 descriptor has 1 excess byte, ignoring
[  274.534637][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  274.546489][   T46] usb 2-1: USB disconnect, device number 16
[  274.553775][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  274.568078][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.576978][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  274.591741][   T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  274.605573][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  274.608117][T12385] EXT4-fs error (device loop0): ext4_xattr_set_entry:1668: inode #13: comm syz.0.2816: corrupted xattr entries
[  274.620395][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024
[  274.678087][   T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  274.694615][ T5890] usb 5-1: string descriptor 0 read error: -22
[  274.702428][ T5890] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  274.712822][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.723342][   T25] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  274.733546][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.755115][   T25] usb 3-1: Product: syz
[  274.768964][ T5890] usb 5-1: config 0 descriptor??
[  274.783116][   T25] usb 3-1: Manufacturer: syz
[  274.791819][   T25] usb 3-1: SerialNumber: syz
[  274.798998][ T5890] hub 5-1:0.0: bad descriptor, ignoring hub
[  274.805672][ T5890] hub 5-1:0.0: probe with driver hub failed with error -5
[  274.818020][   T25] usb 3-1: config 0 descriptor??
[  274.841830][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.843156][ T5890] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16
[  274.868856][T12371] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  274.880859][T12371] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  274.924685][   T25] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected
[  274.924813][    C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71)
[  274.924893][    C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71)
[  275.036327][ T5890] usb 5-1: USB disconnect, device number 8
[  275.208072][   T25] usb 3-1: USB disconnect, device number 15
[  275.227177][   T25] mcba_usb 3-1:0.0 can0: device disconnected
[  275.291886][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2822'.
[  276.436337][T12443] loop2: detected capacity change from 0 to 2048
[  276.538923][T12450] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  276.552276][T12407] loop5: detected capacity change from 0 to 32768
[  276.587691][T12443] NILFS error (device loop2): nilfs_check_folio: size of directory #2 is not a multiple of chunk size
[  276.671900][T12443] Remounting filesystem read-only
[  276.734558][T12417] loop3: detected capacity change from 0 to 32768
[  276.774055][T12417] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2825 (12417)
[  276.889666][T12417] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  276.945287][T12417] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  276.982442][T12417] BTRFS info (device loop3): using free-space-tree
[  277.190579][T12480] loop1: detected capacity change from 0 to 128
[  277.277073][T12417] BTRFS info (device loop3): rebuilding free space tree
[  277.309436][T12480] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  277.411300][T12480] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.2843: No space for directory leaf checksum. Please run e2fsck -D.
[  277.497154][T12480] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.2843: checksumming directory block 0
[  277.669044][ T5848] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  277.752802][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2848'.
[  277.766498][ T5845] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  277.794066][T12502] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  278.177027][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2854'.
[  278.195672][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2854'.
[  278.261339][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2854'.
[  278.274326][T12519] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  278.639929][T12526] loop2: detected capacity change from 0 to 4096
[  278.689279][T12526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.999652][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.174446][T12554] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  279.644724][T12574] xt_TCPMSS: Only works on TCP SYN packets
[  279.771523][T12581] loop0: detected capacity change from 0 to 512
[  279.868886][T12581] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #15: comm syz.0.2886: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  279.942013][T12581] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2886: couldn't read orphan inode 15 (err -117)
[  279.995868][T12581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.104553][T12581] EXT4-fs error (device loop0): ext4_add_entry:2444: inode #2: comm syz.0.2886: Directory hole found for htree leaf block 0
[  280.286078][T12601] loop5: detected capacity change from 0 to 1024
[  280.358402][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.578272][T12612] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  280.862731][T12616] loop1: detected capacity change from 0 to 1024
[  280.943394][T12616] hfsplus: request for non-existent node 33423360 in B*Tree
[  280.993582][T12616] hfsplus: request for non-existent node 33423360 in B*Tree
[  281.346715][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2911'.
[  281.384524][T12635] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2911'.
[  281.413043][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2911'.
[  281.441978][T12635] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2911'.
[  281.460786][T12635] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2911'.
[  281.747942][T12607] loop2: detected capacity change from 0 to 32768
[  281.834125][ T5891] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[  282.024875][ T5891] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  282.045163][ T5891] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  282.077450][ T5891] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  282.122420][T12662] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  282.143865][ T5891] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8
[  282.210669][ T5891] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  282.250929][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.270857][T12666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2928'.
[  282.277743][T12644] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  282.301446][ T5891] hub 6-1:1.0: bad descriptor, ignoring hub
[  282.327918][ T5891] hub 6-1:1.0: probe with driver hub failed with error -5
[  282.356523][ T5891] cdc_wdm 6-1:1.0: skipping garbage
[  282.371910][ T5891] cdc_wdm 6-1:1.0: skipping garbage
[  282.385023][ T5891] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  282.634797][ T5891] usb 6-1: USB disconnect, device number 13
[  282.949209][T12688] loop3: detected capacity change from 0 to 4096
[  282.988425][T12688] ntfs3(loop3): It is recommened to use chkdsk.
[  283.003960][T12688] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  283.022011][T12688] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  283.051461][   T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  283.077696][T12688] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  283.135158][T12688] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  283.168940][T12688] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00
[  283.217747][T12700] ip6t_srh: unknown srh invflags 7D00
[  283.222801][T12688] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00
[  283.245116][   T25] usb 5-1: Using ep0 maxpacket: 16
[  283.246292][T12688] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00
[  283.271802][   T25] usb 5-1: config 1 interface 0 has no altsetting 0
[  283.281930][   T25] usb 5-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40
[  283.288852][T12688] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00
[  283.310630][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.325448][T12688] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00
[  283.329803][   T25] usb 5-1: Product: syz
[  283.351515][   T25] usb 5-1: Manufacturer: syz
[  283.392235][   T25] usb 5-1: SerialNumber: syz
[  283.463401][T12704] loop0: detected capacity change from 0 to 4096
[  283.472906][T12707] loop2: detected capacity change from 0 to 64
[  283.481578][T12704] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  283.618090][T12704] ntfs3(loop0): ino=19, mi_enum_attr
[  283.627548][T12708] loop5: detected capacity change from 0 to 4096
[  283.658117][T12704] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  283.676424][T12708] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  283.694843][   T25] usbhid 5-1:1.0: can't add hid device: -71
[  283.720316][   T25] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  283.763042][T12704] ntfs3(loop0): failed to convert "c46c" to cp862
[  283.792128][   T25] usb 5-1: USB disconnect, device number 9
[  283.794539][T12708] ntfs3(loop5): ino=19, mi_enum_attr
[  283.820733][T12704] ntfs3(loop0): ino=20, mi_enum_attr
[  283.837636][T12708] ntfs3(loop5): failed to convert "c46c" to cp864
[  283.904772][T12708] ntfs3(loop5): ino=20, mi_enum_attr
[  284.089817][T12716] netlink: 'syz.2.2954': attribute type 1 has an invalid length.
[  284.121353][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2954'.
[  284.243020][T12720] loop0: detected capacity change from 0 to 2048
[  284.290544][T12720] EXT4-fs: Ignoring removed mblk_io_submit option
[  284.383742][T12720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  284.404472][T12702] loop1: detected capacity change from 0 to 32768
[  284.464875][T12702] jfs_strtoUCS: char2uni returned -22.
[  284.470395][T12702] charset = euc-jp, char = 0xd4
[  284.587384][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.801517][T12737] usb usb8: usbfs: process 12737 (syz.4.2962) did not claim interface 0 before use
[  284.806805][T12738] netlink: 'syz.5.2965': attribute type 1 has an invalid length.
[  284.870881][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2965'.
[  285.274688][T12754] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2963'.
[  285.375622][   T29] audit: type=1400 audit(294.478:69): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=12756 comm="syz.2.2972"
[  285.702726][T12773] SET target dimension over the limit!
[  286.404824][T12803] binfmt_misc: register: failed to install interpreter file ./file0
[  286.504581][   T29] audit: type=1326 audit(295.665:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.0.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb98cde9 code=0x7ffc0000
[  286.516112][T12810] loop3: detected capacity change from 0 to 512
[  286.615588][   T29] audit: type=1326 audit(295.665:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.0.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb98cde9 code=0x7ffc0000
[  286.669507][   T29] audit: type=1326 audit(295.728:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.0.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f23cb98cde9 code=0x7ffc0000
[  286.691961][   T29] audit: type=1326 audit(295.728:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.0.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb98cde9 code=0x7ffc0000
[  286.713903][   T29] audit: type=1326 audit(295.728:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.0.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb98cde9 code=0x7ffc0000
[  286.739848][T12810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.046662][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.357796][T12844] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3013'.
[  287.408805][T12844] netlink: 31 bytes leftover after parsing attributes in process `syz.5.3013'.
[  287.464957][T12844] netlink: 'syz.5.3013': attribute type 3 has an invalid length.
[  287.474674][T12844] netlink: 'syz.5.3013': attribute type 2 has an invalid length.
[  287.519062][T12844] netlink: 31 bytes leftover after parsing attributes in process `syz.5.3013'.
[  287.726435][T12857] netlink: 'syz.5.3020': attribute type 5 has an invalid length.
[  287.919381][T12859] overlayfs: missing 'lowerdir'
[  287.955708][T12862] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  287.974515][T12862] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  288.224799][T12866] program syz.0.3024 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  288.237135][T12867] loop5: detected capacity change from 0 to 256
[  288.438346][T12867] FAT-fs (loop5): Directory bread(block 64) failed
[  288.464848][T12867] FAT-fs (loop5): Directory bread(block 65) failed
[  288.494909][T12867] FAT-fs (loop5): Directory bread(block 66) failed
[  288.524403][T12867] FAT-fs (loop5): Directory bread(block 67) failed
[  288.542355][T12867] FAT-fs (loop5): Directory bread(block 68) failed
[  288.567232][T12867] FAT-fs (loop5): Directory bread(block 69) failed
[  288.603647][T12867] FAT-fs (loop5): Directory bread(block 70) failed
[  288.661147][T12867] FAT-fs (loop5): Directory bread(block 71) failed
[  288.699937][T12867] FAT-fs (loop5): Directory bread(block 72) failed
[  288.716701][T12867] FAT-fs (loop5): Directory bread(block 73) failed
[  288.813313][T12853] loop4: detected capacity change from 0 to 32768
[  289.777297][T12914] loop1: detected capacity change from 0 to 256
[  289.863458][T12914] FAT-fs (loop1): Directory bread(block 64) failed
[  289.898949][T12914] FAT-fs (loop1): Directory bread(block 65) failed
[  289.922551][T12914] FAT-fs (loop1): Directory bread(block 66) failed
[  289.957259][T12914] FAT-fs (loop1): Directory bread(block 67) failed
[  289.983098][T12914] FAT-fs (loop1): Directory bread(block 68) failed
[  290.022675][T12914] FAT-fs (loop1): Directory bread(block 69) failed
[  290.094481][T12914] FAT-fs (loop1): Directory bread(block 70) failed
[  290.129029][T12914] FAT-fs (loop1): Directory bread(block 71) failed
[  290.135672][T12914] FAT-fs (loop1): Directory bread(block 72) failed
[  290.164629][T12914] FAT-fs (loop1): Directory bread(block 73) failed
[  290.340909][T12935] loop0: detected capacity change from 0 to 64
[  290.433950][ T5897] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  290.455719][T12932] loop2: detected capacity change from 0 to 4096
[  290.513340][T12932] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  290.625743][ T5897] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  290.646969][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.685116][T12932] ntfs3(loop2): ino=19, mi_enum_attr
[  290.695055][ T5897] usb 5-1: config 0 descriptor??
[  290.707728][ T5897] ums-realtek 5-1:0.0: USB Mass Storage device detected
[  290.763382][T12932] ntfs3(loop2): failed to convert "c46c" to cp864
[  290.787741][T12932] ntfs3(loop2): ino=20, mi_enum_attr
[  290.901023][ T5897] usb 5-1: USB disconnect, device number 10
[  290.925536][ T5914] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  291.057217][T12918] loop3: detected capacity change from 0 to 32768
[  291.100991][ T5914] usb 6-1: Using ep0 maxpacket: 32
[  291.133845][ T5914] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  291.151332][ T5914] usb 6-1: config 0 has no interface number 0
[  291.170801][ T5914] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  291.224107][ T5914] usb 6-1: config 0 interface 1 has no altsetting 0
[  291.251558][ T5914] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  291.281372][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.309243][ T5914] usb 6-1: Product: syz
[  291.325382][ T5914] usb 6-1: Manufacturer: syz
[  291.335699][ T5914] usb 6-1: SerialNumber: syz
[  291.355700][ T5914] usb 6-1: config 0 descriptor??
[  291.593792][ T5914] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  291.628955][ T5914] cx231xx 6-1:0.1: Failed to read PCB config
[  291.644271][ T5914] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71
[  291.679049][ T5914] usb 6-1: USB disconnect, device number 14
[  291.906017][T12978] loop2: detected capacity change from 0 to 64
[  292.072045][T12983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3072'.
[  292.357917][T12996] loop1: detected capacity change from 0 to 8
[  292.432039][T12996] SQUASHFS error: Unable to read inode 0xe3
[  292.605272][ T5914] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  292.729153][   T29] audit: type=1326 audit(302.194:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13007 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb98cde9 code=0x7ffc0000
[  292.805293][ T5914] usb 5-1: Using ep0 maxpacket: 8
[  292.821989][ T5914] usb 5-1: config 14 has an invalid interface number: 120 but max is 0
[  292.825616][   T29] audit: type=1326 audit(302.236:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13007 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f23cb98cde9 code=0x7ffc0000
[  292.864991][ T5914] usb 5-1: config 14 has no interface number 0
[  292.871206][ T5914] usb 5-1: config 14 interface 120 has no altsetting 0
[  292.926697][   T29] audit: type=1326 audit(302.236:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13007 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb98cde9 code=0x7ffc0000
[  292.931800][ T5914] usb 5-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=f4.15
[  293.013224][   T29] audit: type=1326 audit(302.236:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13007 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb98cde9 code=0x7ffc0000
[  293.056611][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.084247][ T5914] usb 5-1: Product: syz
[  293.090644][ T5914] usb 5-1: Manufacturer: syz
[  293.116078][ T5914] usb 5-1: SerialNumber: syz
[  293.136169][T13020] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3100'.
[  293.247373][T13023] loop2: detected capacity change from 0 to 1024
[  293.313864][T13023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.331155][T13032] loop5: detected capacity change from 0 to 256
[  293.359598][ T5914] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  293.388947][ T5914] snd-usb-audio 5-1:14.120: probe with driver snd-usb-audio failed with error -2
[  293.413494][ T5914] usb 5-1: USB disconnect, device number 11
[  293.518628][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.592245][T13039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3106'.
[  293.608474][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3106'.
[  293.625606][T13040] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3108'.
[  293.645593][ T6399] udevd[6399]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:14.120/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  294.120198][T13058] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  294.311909][T13066] netlink: 876 bytes leftover after parsing attributes in process `syz.3.3121'.
[  294.457620][T13071] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3124'.
[  294.492980][T13076] loop5: detected capacity change from 0 to 8
[  294.499747][T13076] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  294.565375][T13076] cramfs: Error -3 while decompressing!
[  294.602654][T13076] cramfs: ffffffff9a783bc8(18)->ffff88804fdc1000(4096)
[  294.626841][T13078] netlink: 'syz.1.3127': attribute type 3 has an invalid length.
[  294.655262][T13076] cramfs: Error -3 while decompressing!
[  294.660846][T13076] cramfs: ffffffff9a783bc8(18)->ffff88804fdc1000(4096)
[  294.735730][   T29] audit: type=1800 audit(304.315:79): pid=13076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3123" name="file1" dev="loop5" ino=324 res=0 errno=0
[  294.977627][T13095] openvswitch: netlink: IP tunnel dst address not specified
[  294.987983][T13091] nvme_fabrics: unknown parameter or missing value 'ó' in ctrl creation request
[  295.100190][T13099] loop5: detected capacity change from 0 to 164
[  295.327840][T13110] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  295.361763][T13110] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  295.501600][   T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  295.668252][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  295.687872][   T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  295.728491][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  295.749810][T13120] loop0: detected capacity change from 0 to 2048
[  295.777716][   T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  295.817429][T13120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.829874][   T25] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  295.858726][T13131] loop3: detected capacity change from 0 to 64
[  295.864401][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.894869][   T25] usb 2-1: config 0 descriptor??
[  295.896487][T13120] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  296.055281][T13135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3153'.
[  296.125105][   T25] hdpvr 2-1:0.0: firmware version 0x1e dated 
[  296.131085][T13137] netlink: 'syz.5.3152': attribute type 1 has an invalid length.
[  296.148351][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.165792][T13137] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3152'.
[  296.274229][T13139] openvswitch: netlink: Actions may not be safe on all matching packets
[  296.315184][   T25] hdpvr 2-1:0.0: device init failed
[  296.334837][   T25] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  296.380961][T13145] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  296.387753][T13145] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  296.402780][   T25] usb 2-1: USB disconnect, device number 17
[  296.497637][T13145] vhci_hcd vhci_hcd.0: Device attached
[  296.682781][ T5914] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  296.692205][ T5888] usb 39-1: new high-speed USB device number 2 using vhci_hcd
[  296.723792][T13160] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  296.844638][ T5914] usb 4-1: Using ep0 maxpacket: 8
[  296.891946][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short
[  296.927127][ T5914] usb 4-1: config 4 interface 0 has no altsetting 0
[  296.941770][ T5914] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  296.957413][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.974462][ T5914] usb 4-1: Product: syz
[  296.978966][ T5914] usb 4-1: Manufacturer: syz
[  297.003263][ T5914] usb 4-1: SerialNumber: syz
[  297.228071][T13146] vhci_hcd: connection reset by peer
[  297.232932][ T5914] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  297.281805][ T5914] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  297.283042][ T3495] vhci_hcd: stop threads
[  297.315566][ T3495] vhci_hcd: release socket
[  297.337066][ T5914] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  297.344036][ T3495] vhci_hcd: disconnect device
[  297.396998][ T5914] usb 4-1: media controller created
[  297.453123][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  297.552151][ T5914] zl10353_read_register: readreg error (reg=127, ret==0)
[  297.690912][ T5914] usb 4-1: USB disconnect, device number 14
[  297.721131][T13195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3178'.
[  298.364879][T13221] bridge0: port 3(erspan0) entered blocking state
[  298.397806][T13221] bridge0: port 3(erspan0) entered disabled state
[  298.405617][T13221] erspan0: entered allmulticast mode
[  298.442277][T13221] erspan0: entered promiscuous mode
[  298.461580][T13221] bridge0: port 3(erspan0) entered blocking state
[  298.468185][T13221] bridge0: port 3(erspan0) entered forwarding state
[  298.530294][ T5897] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  298.686251][T13232] netlink: 942 bytes leftover after parsing attributes in process `syz.2.3197'.
[  298.711546][ T5897] usb 4-1: Using ep0 maxpacket: 32
[  298.718568][T13234] netlink: 'syz.1.3198': attribute type 28 has an invalid length.
[  298.737993][ T5897] usb 4-1: config 0 has an invalid interface number: 235 but max is 0
[  298.757040][ T5897] usb 4-1: config 0 has no interface number 0
[  298.774329][ T5897] usb 4-1: config 0 interface 235 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  298.806690][ T5897] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47
[  298.825956][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.844681][ T5897] usb 4-1: Product: syz
[  298.851547][ T5897] usb 4-1: Manufacturer: syz
[  298.872545][ T5897] usb 4-1: SerialNumber: syz
[  298.899383][ T5897] usb 4-1: config 0 descriptor??
[  299.016841][T13244] netlink: 'syz.5.3204': attribute type 13 has an invalid length.
[  299.179783][ T5897] kaweth 4-1:0.235: Firmware present in device.
[  299.240298][T13244] gretap0: refused to change device tx_queue_len
[  299.273696][T13244] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  299.341798][ T5897] kaweth 4-1:0.235: Error reading configuration (-71), no net device created
[  299.395446][ T5897] kaweth 4-1:0.235: probe with driver kaweth failed with error -5
[  299.434760][ T5897] usb 4-1: USB disconnect, device number 15
[  299.529234][T13257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3209'.
[  299.857078][T13267] Mount JFS Failure: -22
[  300.155066][   T29] audit: type=1326 audit(310.005:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13278 comm="syz.1.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0c78cde9 code=0x7ffc0000
[  300.257378][   T29] audit: type=1326 audit(310.005:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13278 comm="syz.1.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0c78cde9 code=0x7ffc0000
[  300.406860][   T29] audit: type=1326 audit(310.078:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13278 comm="syz.1.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f5c0c78cde9 code=0x7ffc0000
[  300.473923][T13292] netlink: 'syz.5.3227': attribute type 21 has an invalid length.
[  300.492566][T13292] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3227'.
[  300.506566][   T29] audit: type=1326 audit(310.078:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13278 comm="syz.1.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0c78cde9 code=0x7ffc0000
[  300.611693][T13299] loop4: detected capacity change from 0 to 256
[  300.956326][   T46] vcan0 speed is unknown, defaulting to 1000
[  301.173538][T13321] syz.3.3241: attempt to access beyond end of device
[  301.173538][T13321] nbd3: rw=0, sector=6, nr_sectors = 2 limit=0
[  301.205777][T13321] ADFS-fs (nbd3): error: unable to read block 3, try 0
[  301.330917][ T5897] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  301.499258][ T5891] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  301.523181][ T5897] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  301.532644][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.573659][ T5897] usb 5-1: config 0 descriptor??
[  301.596556][ T5897] gspca_main: spca508-2.14.0 probing 8086:0110
[  301.599093][ T5888] vhci_hcd: vhci_device speed not set
[  301.623144][T13335] loop0: detected capacity change from 0 to 2048
[  301.673680][ T5891] usb 3-1: Using ep0 maxpacket: 16
[  301.679300][T13335] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  301.701843][ T5891] usb 3-1: unable to get BOS descriptor or descriptor too short
[  301.728890][ T5891] usb 3-1: config 46 has an invalid interface number: 138 but max is 0
[  301.749761][ T5891] usb 3-1: config 46 has no interface number 0
[  301.758820][ T5891] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=db.e8
[  301.787642][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.836048][ T5891] usb 3-1: Product: syz
[  301.840461][ T5891] usb 3-1: Manufacturer: syz
[  301.868028][ T5891] usb 3-1: SerialNumber: syz
[  302.018527][ T5897] gspca_spca508: reg_read err -71
[  302.035386][ T5897] gspca_spca508: reg_read err -71
[  302.064359][ T5897] gspca_spca508: reg_read err -71
[  302.092935][ T5897] gspca_spca508: reg_read err -71
[  302.131383][T13323] loop2: detected capacity change from 0 to 512
[  302.142687][ T5897] gspca_spca508: reg write: error -71
[  302.148166][ T5897] spca508 5-1:0.0: probe with driver spca508 failed with error -71
[  302.190692][T13323] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  302.213480][ T5897] usb 5-1: USB disconnect, device number 12
[  302.271737][T13323] EXT4-fs (loop2): failed to open journal device unknown-block(7,75) -6
[  302.324503][ T5891] snd-usb-audio 3-1:46.138: probe with driver snd-usb-audio failed with error -71
[  302.363716][ T5891] usb 3-1: USB disconnect, device number 16
[  302.485765][T13358] loop0: detected capacity change from 0 to 4096
[  302.550099][T13358] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  303.104418][T13379] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  303.159752][   T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  303.340820][   T25] usb 2-1: Using ep0 maxpacket: 32
[  303.348288][T13389] netlink: 'syz.3.3276': attribute type 16 has an invalid length.
[  303.365181][   T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.380235][T13392] loop2: detected capacity change from 0 to 64
[  303.385962][T13389] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3276'.
[  303.418896][   T25] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=66.4d
[  303.435921][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.463963][   T25] usb 2-1: Product: syz
[  303.473932][   T25] usb 2-1: Manufacturer: syz
[  303.498393][   T25] usb 2-1: SerialNumber: syz
[  303.527643][   T25] usb 2-1: config 0 descriptor??
[  303.555923][   T25] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  303.712159][T13395] loop4: detected capacity change from 0 to 4096
[  303.750446][T13395] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  303.818355][T13395] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  303.971215][   T25] gspca_m5602: Failed to find a sensor
[  303.976797][   T25] ALi m5602 2-1:0.0: ALi m5602 webcam failed
[  304.018458][   T25] usb 2-1: USB disconnect, device number 18
[  304.135776][T13411] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  304.879654][T13437] loop5: detected capacity change from 0 to 4096
[  304.905960][T13437] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  305.010995][T13437] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  305.444053][T13463] loop3: detected capacity change from 0 to 64
[  305.453061][T13462] loop5: detected capacity change from 0 to 1024
[  305.576356][T13471] netlink: 'syz.4.3315': attribute type 1 has an invalid length.
[  305.919525][T13484] bridge0: port 3(erspan0) entered blocking state
[  305.998644][T13484] bridge0: port 3(erspan0) entered disabled state
[  306.051635][T13484] erspan0: entered allmulticast mode
[  306.118218][T13484] erspan0: entered promiscuous mode
[  306.147901][T13484] bridge0: port 3(erspan0) entered blocking state
[  306.154548][T13484] bridge0: port 3(erspan0) entered forwarding state
[  306.203820][T13494] [U] 
[  306.207167][T13494] [U] 
[  306.209889][T13494] [U] 
[  306.212608][T13494] [U] 
[  306.233824][T13494] [U] 
[  306.236569][T13494] [U] 
[  306.239288][T13494] [U] 
[  306.242003][T13494] [U] 
[  306.255191][T13496] loop2: detected capacity change from 0 to 256
[  306.284304][T13494] [U] 
[  306.287074][T13494] [U] 
[  306.289794][T13494] [U] 
[  306.316520][T13493] [U] 
[  306.485666][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  306.583735][T13504] loop4: detected capacity change from 0 to 256
[  306.622392][T13504] exfat: Deprecated parameter 'namecase'
[  306.650049][T13504] exfat: Deprecated parameter 'namecase'
[  306.711249][T13504] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  307.007362][T13514] loop3: detected capacity change from 0 to 4096
[  307.861994][T13542] loop1: detected capacity change from 0 to 2048
[  307.926940][T13542] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  308.079057][T13550] SET target dimension over the limit!
[  308.392406][T13564] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  308.431626][T13562] loop4: detected capacity change from 0 to 256
[  308.447600][T13562] exfat: Deprecated parameter 'namecase'
[  308.484825][T13562] exfat: Deprecated parameter 'utf8'
[  308.510637][T13562] exfat: Deprecated parameter 'namecase'
[  308.568692][T13562] exfat: Deprecated parameter 'utf8'
[  308.616696][T13562] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  308.759877][T13572] xt_time: unknown flags 0x4
[  309.475599][T13599] netlink: 'syz.2.3378': attribute type 13 has an invalid length.
[  309.497023][T13599] netlink: 'syz.2.3378': attribute type 27 has an invalid length.
[  309.595141][T13602] openvswitch: netlink: Actions may not be safe on all matching packets
[  309.902043][T13612] netlink: 'syz.1.3385': attribute type 1 has an invalid length.
[  310.142472][T13618] netlink: 'syz.2.3388': attribute type 1 has an invalid length.
[  310.150469][T13618] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3388'.
[  310.183035][T13578] loop3: detected capacity change from 0 to 32768
[  310.228579][T13618] NCSI netlink: No device for ifindex 0
[  311.147607][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3404'.
[  311.173907][T13647] loop0: detected capacity change from 0 to 4096
[  311.206600][T13647] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  311.380518][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3405'.
[  311.418136][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3405'.
[  311.752775][T13664] netlink: 798 bytes leftover after parsing attributes in process `syz.5.3409'.
[  311.804426][T13632] loop2: detected capacity change from 0 to 32768
[  312.144500][T13632] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,compression=lz4,journal_flush_disabled,norecovery,nojournal_transaction_names,noexcl,reconstruct_alloc
[  312.149234][T13650] loop1: detected capacity change from 0 to 32768
[  312.235548][T13632] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  312.274402][T13632] bcachefs (loop2): Version upgrade required:
[  312.274402][T13632] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  312.274402][T13632] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[  312.274402][T13632]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  312.451996][T13632] bcachefs (loop2): dropping and reconstructing all alloc info
[  312.469425][T13650] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  312.493980][T13632] invalid bkey in btree_node btree=snapshots level=0: u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent          0 children          0  912261120 subvol 0 tree 0
[  312.494015][T13632]   children not normalized: delete?, fixing
[  312.657307][T13632] bcachefs (loop2): accounting_read... done
[  312.679865][T13632] bcachefs (loop2): alloc_read... done
[  312.685802][T13632] bcachefs (loop2): stripes_read... done
[  312.691656][T13632] bcachefs (loop2): snapshots_read... done
[  312.706862][T13632] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean
[  312.735194][ T5845] ocfs2: Unmounting device (7,1) on (node local)
[  312.750551][T13632] bcachefs (loop2): done starting filesystem
[  313.068503][ T5853] bcachefs (loop2): shutting down
[  313.127990][T13713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3429'.
[  313.220156][ T5853] bcachefs (loop2): shutdown complete
[  313.418889][ T5888] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  313.600108][ T5888] usb 6-1: Using ep0 maxpacket: 16
[  313.632363][ T5888] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  313.650717][ T5888] usb 6-1: config 0 has no interface number 0
[  313.683467][ T5888] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  313.714694][T13734] loop4: detected capacity change from 0 to 1024
[  313.721218][ T5888] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  313.757836][ T5888] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  313.779738][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  313.816078][ T5888] usb 6-1: Product: syz
[  313.849980][ T5888] usb 6-1: SerialNumber: syz
[  313.866008][ T5888] usb 6-1: config 0 descriptor??
[  313.879607][ T5888] cm109 6-1:0.8: invalid payload size 0, expected 4
[  313.914693][ T5888] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input18
[  313.950973][ T5888] ------------[ cut here ]------------
[  313.956878][ T5888] URB ffff88802a05aa00 submitted while active
[  313.981740][ T5888] WARNING: CPU: 1 PID: 5888 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1039/0x18c0
[  313.991518][ T5888] Modules linked in:
[  313.995450][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: kworker/1:4 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0
[  314.006392][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  314.016610][ T5888] Workqueue: usb_hub_wq hub_event
[  314.022069][ T5888] RIP: 0010:usb_submit_urb+0x1039/0x18c0
[  314.027746][ T5888] Code: 00 eb 66 e8 49 5d 4a fa e9 79 f0 ff ff e8 3f 5d 4a fa c6 05 d1 a9 af 08 01 90 48 c7 c7 60 36 d1 8c 4c 89 ee e8 38 1e 0a fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 19 5d 4a fa eb 12 e8 12 5d 4a fa 41
[  314.047530][ T5888] RSP: 0018:ffffc9000216eab8 EFLAGS: 00010246
[  314.053641][ T5888] RAX: f261c9aabfb90e00 RBX: 0000000000000cc0 RCX: 0000000000100000
[  314.064145][ T5888] RDX: ffffc9001c809000 RSI: 000000000006a576 RDI: 000000000006a577
[  314.064170][ T5888] RBP: ffff88802a05aa08 R08: ffffffff81817e32 R09: fffffbfff1d3a614
[  314.064194][ T5888] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: 1ffff1100fdbad0a
[  314.064216][ T5888] R13: ffff88802a05aa00 R14: dffffc0000000000 R15: ffff88807edd6850
[  314.064242][ T5888] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  314.064266][ T5888] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  314.112321][ T5888] CR2: 00007f1949ff8938 CR3: 0000000061a76000 CR4: 0000000000350ef0
[  314.120564][ T5888] Call Trace:
[  314.124033][ T5888]  <TASK>
[  314.126987][ T5888]  ? __warn+0x165/0x4d0
[  314.131189][ T5888]  ? usb_submit_urb+0x1039/0x18c0
[  314.137152][ T5888]  ? report_bug+0x2b3/0x500
[  314.137189][ T5888]  ? usb_submit_urb+0x1039/0x18c0
[  314.137239][ T5888]  ? handle_bug+0x60/0x90
[  314.137277][ T5888]  ? exc_invalid_op+0x1a/0x50
[  314.137317][ T5888]  ? asm_exc_invalid_op+0x1a/0x20
[  314.137364][ T5888]  ? __warn_printk+0x292/0x360
[  314.137419][ T5888]  ? usb_submit_urb+0x1039/0x18c0
[  314.137462][ T5888]  ? usb_submit_urb+0x1038/0x18c0
[  314.137507][ T5888]  ? __pm_runtime_resume+0x12d/0x180
[  314.137550][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.137599][ T5888]  cm109_input_open+0x1f9/0x480
[  314.137651][ T5888]  input_open_device+0x1ed/0x360
[  314.137698][ T5888]  kbd_connect+0xe9/0x130
[  314.137732][ T5888]  input_register_device+0xce4/0x10c0
[  314.137784][ T5888]  cm109_usb_probe+0x116e/0x16c0
[  314.137854][ T5888]  usb_probe_interface+0x643/0xbb0
[  314.137905][ T5888]  ? __pfx_usb_probe_interface+0x10/0x10
[  314.137939][ T5888]  really_probe+0x2bb/0xad0
[  314.137978][ T5888]  __driver_probe_device+0x1a2/0x390
[  314.138029][ T5888]  driver_probe_device+0x50/0x430
[  314.138062][ T5888]  __device_attach_driver+0x2d6/0x530
[  314.138096][ T5888]  bus_for_each_drv+0x250/0x2e0
[  314.138134][ T5888]  ? __pfx___device_attach_driver+0x10/0x10
[  314.138165][ T5888]  ? __pfx_bus_for_each_drv+0x10/0x10
[  314.138202][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.138249][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.138299][ T5888]  __device_attach+0x333/0x520
[  314.138343][ T5888]  ? __pfx_lock_release+0x10/0x10
[  314.138392][ T5888]  ? __pfx___device_attach+0x10/0x10
[  314.138444][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.138487][ T5888]  ? do_raw_spin_unlock+0x13c/0x8b0
[  314.138536][ T5888]  bus_probe_device+0x189/0x260
[  314.138577][ T5888]  device_add+0x856/0xbf0
[  314.138627][ T5888]  usb_set_configuration+0x1976/0x1fb0
[  314.138691][ T5888]  usb_generic_driver_probe+0x88/0x140
[  314.138740][ T5888]  usb_probe_device+0x1ba/0x380
[  314.138778][ T5888]  ? __pfx_usb_probe_device+0x10/0x10
[  314.138811][ T5888]  really_probe+0x2bb/0xad0
[  314.138851][ T5888]  __driver_probe_device+0x1a2/0x390
[  314.138903][ T5888]  driver_probe_device+0x50/0x430
[  314.138936][ T5888]  __device_attach_driver+0x2d6/0x530
[  314.138969][ T5888]  bus_for_each_drv+0x250/0x2e0
[  314.139007][ T5888]  ? __pfx___device_attach_driver+0x10/0x10
[  314.139037][ T5888]  ? __pfx_bus_for_each_drv+0x10/0x10
[  314.139080][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.139129][ T5888]  __device_attach+0x333/0x520
[  314.139181][ T5888]  ? __pfx___device_attach+0x10/0x10
[  314.139239][ T5888]  bus_probe_device+0x189/0x260
[  314.139279][ T5888]  device_add+0x856/0xbf0
[  314.139329][ T5888]  usb_new_device+0x104a/0x19a0
[  314.139397][ T5888]  ? __pfx_usb_new_device+0x10/0x10
[  314.139453][ T5888]  ? _raw_spin_unlock_irq+0x23/0x50
[  314.139484][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.139526][ T5888]  ? lockdep_hardirqs_on+0x99/0x150
[  314.139565][ T5888]  hub_event+0x2d6d/0x5150
[  314.139658][ T5888]  ? __pfx_hub_event+0x10/0x10
[  314.139693][ T5888]  ? __pfx_lock_acquire+0x10/0x10
[  314.139736][ T5888]  ? __entry_text_end+0xfe0c6/0x1020c9
[  314.139777][ T5888]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  314.139822][ T5888]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  314.139880][ T5888]  ? process_scheduled_works+0x9c6/0x18e0
[  314.139917][ T5888]  process_scheduled_works+0xac0/0x18e0
[  314.139988][ T5888]  ? __pfx_process_scheduled_works+0x10/0x10
[  314.140038][ T5888]  ? assign_work+0x364/0x3d0
[  314.140080][ T5888]  worker_thread+0x870/0xd30
[  314.140136][ T5888]  ? __kthread_parkme+0x169/0x1d0
[  314.140181][ T5888]  ? __pfx_worker_thread+0x10/0x10
[  314.140219][ T5888]  kthread+0x7ab/0x920
[  314.140258][ T5888]  ? __pfx_kthread+0x10/0x10
[  314.140304][ T5888]  ? __pfx_worker_thread+0x10/0x10
[  314.140342][ T5888]  ? __pfx_kthread+0x10/0x10
[  314.140381][ T5888]  ? __pfx_kthread+0x10/0x10
[  314.140434][ T5888]  ? __pfx_kthread+0x10/0x10
[  314.140473][ T5888]  ? _raw_spin_unlock_irq+0x23/0x50
[  314.140502][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.140547][ T5888]  ? lockdep_hardirqs_on+0x99/0x150
[  314.140582][ T5888]  ? __pfx_kthread+0x10/0x10
[  314.140627][ T5888]  ret_from_fork+0x4d/0x80
[  314.140665][ T5888]  ? __pfx_kthread+0x10/0x10
[  314.140709][ T5888]  ret_from_fork_asm+0x1a/0x30
[  314.140766][ T5888]  </TASK>
[  314.140781][ T5888] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  314.140798][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: kworker/1:4 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0
[  314.140828][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  314.140847][ T5888] Workqueue: usb_hub_wq hub_event
[  314.140878][ T5888] Call Trace:
[  314.140888][ T5888]  <TASK>
[  314.140900][ T5888]  dump_stack_lvl+0x241/0x360
[  314.140934][ T5888]  ? __pfx_dump_stack_lvl+0x10/0x10
[  314.140964][ T5888]  ? __pfx__printk+0x10/0x10
[  314.141000][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.141040][ T5888]  ? vscnprintf+0x5d/0x90
[  314.141070][ T5888]  panic+0x349/0x880
[  314.141098][ T5888]  ? __warn+0x174/0x4d0
[  314.141140][ T5888]  ? __pfx_panic+0x10/0x10
[  314.141179][ T5888]  ? ret_from_fork_asm+0x1a/0x30
[  314.141220][ T5888]  __warn+0x344/0x4d0
[  314.141258][ T5888]  ? usb_submit_urb+0x1039/0x18c0
[  314.141303][ T5888]  report_bug+0x2b3/0x500
[  314.141334][ T5888]  ? usb_submit_urb+0x1039/0x18c0
[  314.141381][ T5888]  handle_bug+0x60/0x90
[  314.141423][ T5888]  exc_invalid_op+0x1a/0x50
[  314.141461][ T5888]  asm_exc_invalid_op+0x1a/0x20
[  314.141496][ T5888] RIP: 0010:usb_submit_urb+0x1039/0x18c0
[  314.141536][ T5888] Code: 00 eb 66 e8 49 5d 4a fa e9 79 f0 ff ff e8 3f 5d 4a fa c6 05 d1 a9 af 08 01 90 48 c7 c7 60 36 d1 8c 4c 89 ee e8 38 1e 0a fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 19 5d 4a fa eb 12 e8 12 5d 4a fa 41
[  314.141560][ T5888] RSP: 0018:ffffc9000216eab8 EFLAGS: 00010246
[  314.141585][ T5888] RAX: f261c9aabfb90e00 RBX: 0000000000000cc0 RCX: 0000000000100000
[  314.141605][ T5888] RDX: ffffc9001c809000 RSI: 000000000006a576 RDI: 000000000006a577
[  314.141625][ T5888] RBP: ffff88802a05aa08 R08: ffffffff81817e32 R09: fffffbfff1d3a614
[  314.141645][ T5888] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: 1ffff1100fdbad0a
[  314.141667][ T5888] R13: ffff88802a05aa00 R14: dffffc0000000000 R15: ffff88807edd6850
[  314.141697][ T5888]  ? __warn_printk+0x292/0x360
[  314.141749][ T5888]  ? usb_submit_urb+0x1038/0x18c0
[  314.141792][ T5888]  ? __pm_runtime_resume+0x12d/0x180
[  314.141833][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.141881][ T5888]  cm109_input_open+0x1f9/0x480
[  314.141930][ T5888]  input_open_device+0x1ed/0x360
[  314.141974][ T5888]  kbd_connect+0xe9/0x130
[  314.142005][ T5888]  input_register_device+0xce4/0x10c0
[  314.142057][ T5888]  cm109_usb_probe+0x116e/0x16c0
[  314.142126][ T5888]  usb_probe_interface+0x643/0xbb0
[  314.142175][ T5888]  ? __pfx_usb_probe_interface+0x10/0x10
[  314.142207][ T5888]  really_probe+0x2bb/0xad0
[  314.142244][ T5888]  __driver_probe_device+0x1a2/0x390
[  314.142292][ T5888]  driver_probe_device+0x50/0x430
[  314.142324][ T5888]  __device_attach_driver+0x2d6/0x530
[  314.142354][ T5888]  bus_for_each_drv+0x250/0x2e0
[  314.142389][ T5888]  ? __pfx___device_attach_driver+0x10/0x10
[  314.142422][ T5888]  ? __pfx_bus_for_each_drv+0x10/0x10
[  314.142458][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.142503][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.142552][ T5888]  __device_attach+0x333/0x520
[  314.142593][ T5888]  ? __pfx_lock_release+0x10/0x10
[  314.142638][ T5888]  ? __pfx___device_attach+0x10/0x10
[  314.142682][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.142723][ T5888]  ? do_raw_spin_unlock+0x13c/0x8b0
[  314.142771][ T5888]  bus_probe_device+0x189/0x260
[  314.142813][ T5888]  device_add+0x856/0xbf0
[  314.142859][ T5888]  usb_set_configuration+0x1976/0x1fb0
[  314.142918][ T5888]  usb_generic_driver_probe+0x88/0x140
[  314.142961][ T5888]  usb_probe_device+0x1ba/0x380
[  314.142995][ T5888]  ? __pfx_usb_probe_device+0x10/0x10
[  314.143026][ T5888]  really_probe+0x2bb/0xad0
[  314.143063][ T5888]  __driver_probe_device+0x1a2/0x390
[  314.143109][ T5888]  driver_probe_device+0x50/0x430
[  314.143139][ T5888]  __device_attach_driver+0x2d6/0x530
[  314.143170][ T5888]  bus_for_each_drv+0x250/0x2e0
[  314.143204][ T5888]  ? __pfx___device_attach_driver+0x10/0x10
[  314.143231][ T5888]  ? __pfx_bus_for_each_drv+0x10/0x10
[  314.143270][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.143320][ T5888]  __device_attach+0x333/0x520
[  314.143368][ T5888]  ? __pfx___device_attach+0x10/0x10
[  314.143428][ T5888]  bus_probe_device+0x189/0x260
[  314.143465][ T5888]  device_add+0x856/0xbf0
[  314.143510][ T5888]  usb_new_device+0x104a/0x19a0
[  314.143573][ T5888]  ? __pfx_usb_new_device+0x10/0x10
[  314.143618][ T5888]  ? _raw_spin_unlock_irq+0x23/0x50
[  314.143643][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.143682][ T5888]  ? lockdep_hardirqs_on+0x99/0x150
[  314.143717][ T5888]  hub_event+0x2d6d/0x5150
[  314.143808][ T5888]  ? __pfx_hub_event+0x10/0x10
[  314.143843][ T5888]  ? __pfx_lock_acquire+0x10/0x10
[  314.143885][ T5888]  ? __entry_text_end+0xfe0c6/0x1020c9
[  314.143923][ T5888]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  314.143963][ T5888]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  314.144012][ T5888]  ? process_scheduled_works+0x9c6/0x18e0
[  314.144044][ T5888]  process_scheduled_works+0xac0/0x18e0
[  314.144107][ T5888]  ? __pfx_process_scheduled_works+0x10/0x10
[  314.144149][ T5888]  ? assign_work+0x364/0x3d0
[  314.144186][ T5888]  worker_thread+0x870/0xd30
[  314.144236][ T5888]  ? __kthread_parkme+0x169/0x1d0
[  314.144273][ T5888]  ? __pfx_worker_thread+0x10/0x10
[  314.144305][ T5888]  kthread+0x7ab/0x920
[  314.144342][ T5888]  ? __pfx_kthread+0x10/0x10
[  314.144381][ T5888]  ? __pfx_worker_thread+0x10/0x10
[  314.144419][ T5888]  ? __pfx_kthread+0x10/0x10
[  314.144453][ T5888]  ? __pfx_kthread+0x10/0x10
[  314.144496][ T5888]  ? __pfx_kthread+0x10/0x10
[  314.144530][ T5888]  ? _raw_spin_unlock_irq+0x23/0x50
[  314.144554][ T5888]  ? srso_alias_return_thunk+0x5/0xfbef5
[  314.144589][ T5888]  ? lockdep_hardirqs_on+0x99/0x150
[  314.144618][ T5888]  ? __pfx_kthread+0x10/0x10
[  314.144657][ T5888]  ret_from_fork+0x4d/0x80
[  314.144688][ T5888]  ? __pfx_kthread+0x10/0x10
[  314.144724][ T5888]  ret_from_fork_asm+0x1a/0x30
[  314.144772][ T5888]  </TASK>
[  314.144974][ T5888] Kernel Offset: disabled