last executing test programs:

7m47.025975732s ago: executing program 3 (id=2591):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default '], 0x2d, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

7m46.838084304s ago: executing program 3 (id=2593):
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040)

7m46.603670485s ago: executing program 3 (id=2598):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x4a, 0x2, 0x0, "0ba7dfad1cfbb5ea2e6a2bde0b07000000f2ffff9b746fce9fd97ffa2b66ae46"})

7m46.412139087s ago: executing program 3 (id=2602):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x567, &(0x7f0000003080)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNF1Gk461Dtwe3IsvMgQRB+If4LsIwvAf8K8Y6GDIKPogSOWmN122Jv2ZLdny+cDdzrn3JuecnPs9PTcnIQH0rdHsn0LEyxHxdRJxqOnYYOQHR1fPW35wbSrbklhZ+eSvJJJ8X+P8JP9/OM+8FBG/fRlxorC+3Ori0mypXE7n8/xYbe7yWHVx6eTFudJMOpNempicPP3W5MS777zdsba+fu6f7z6+88Hpr44tf/vTvcO3kjgTB/Njze3YhevNmdEYzV+ToTjz2InjHSislyTdrgA7MpDH+VBkY8ChGMijHnj+fRERK0CfSsQ/9KnGPKBxb9+h++Bnxv33V2+A1rd/cPW9kdhXvzc6sJw8cmeU3e+OdKD8rIyf/7x9K9uic+9DAGzq+o2IODU4uH78S/Lxb+dObeGcx8vY5vi3ss0qAU3uZPOfN1rNfwpr859oMf8ZbhG7O9E6/pvDunCvA8W0lc3/3ms5/11btBoZyHMv1Od8Q8mFi+U0G9tejIjjMbQ3y2+0nnN6+W7bcap5/pdtWfmNuWBej3uDex99zHSpVtpNm5vdvxHxSsv5b7LW/0mL/s9ej3NbLONoevvVdsc2b/+TtfJjxGst+//hilay8frkWP16GGtcFev9ffPo7+3K73b7s/4/sHH7R5Lm9drq9sv4Yd+/abtjO73+9ySf1tN78n1XS7Xa/HjEnuSj9fsnHj62kW+cn7X/+LGNx79W1//+iPhsi+2/eeRm21N7of+nt9X/20/c/fDz79uVv7X+f7OeOp7v2cr4t9UK7ua1AwAAAAAAgF5TiIiDkRSKa+lCoVhc/XzHkThQKFeqtRMXKguXpqP+XdmRGCo0VrqHmz4PMZ5/HraRn3gsPxkRhyPim4H99XxxqlKe7nbjAQAAAAAAAAAAAAAAAAAAoEcMt/n+f+aPgW7XDnji/OQ39K9N478Tv/QE9CR//6F/iX/oX+If+pf4h/4l/qF/iX/oX9uK/9v/PbmKAE9di/j/5dduVAQAAAAAAAAAAAAAAAAAAAAAAAAAAACeD+fOns22leUH16ay/PSVxYXZypWT02l1tji3MFWcqsxfLs5UKjPltDhVmdvs+cqVyuXxiVi4OlZLq7Wx6uLS+bnKwqXa+YtzpZn0fDr0VFoFAAAAAAAAAAAAAAAAAAAAz5bq4tJsqVxO5yUkdpQY7I1qSKwmGoG96yfs7rgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM3+DwAA//9i5TpB")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

7m45.674079471s ago: executing program 3 (id=2612):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x4}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000881}, 0x0)

7m44.770759077s ago: executing program 3 (id=2625):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)

7m44.288588969s ago: executing program 32 (id=2625):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)

5.882923494s ago: executing program 2 (id=8474):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0)

5.728020095s ago: executing program 2 (id=8476):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
sendfile(r0, r0, 0x0, 0x200)

5.501124817s ago: executing program 2 (id=8479):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000007300)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="34dd0f00135ea23c22845cc5474e7cd7e7ab01d33c4486b62e3b4f9822364f30c24779205bbd653e2b0e7bbbcba1e3dc78833fbb91474ba644d13b9a3bfddc66bfc8ba12f680d556b1b4d4a1ec5b55eeedc8454a11312f3025c08220a36ab6d8100e6a0836f341eb18f984b2a7feaef926859b77e733f9bb7220a2460746c81448ccc7a901e32427b8cc656a1b8a1c52fac1524d3a90fc424c13d6cc5708aa1ea205ddd2b967de4068647f1a5fade5146a344fd31daeeaeede8f61b1066ca3a10599230edf07182401e51b"], 0xfe, 0x6178, &(0x7f000000ca40)="$eJzs3c1vHGcdB/DfvvqltLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288TjzW7t1PHO2s/nIzkzv3lmvM/4u7Mv2Zl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vByudiLj287RgKeIz0YvoRizU9XJELCwv5fX7EfFc7DTHsxExmIuot9/55+mIVyPio6citrbXV+vFFw/Zj+/+8e+/++ETb/3tD4Pz//3Tnd5rk9a7e/dX//nzvaPtMwAAAJSmqqqqk97mn0nv77ttdwoAmIr8/F8lefmpr3/9z7f+Mkv9UavVarV6CnVTNd69ZhERG81t6tcMPo4HgBNmIz5uuwu0SP5F60fEE213AphpnbY7wLHY2l5f7aR8O83ng+Xd9nwuyL78NzoPru+YND3I6Dkm07p/bUYvnpnQn4Up9WGW5Py7o/lf220fpvWOO/9pmZT/cPfSp+Lk/Huj+Y84Pfl3x+Zfqpx//5Hy78kfAAAAAABmWP7//6WWP/+dO/quHMonff67PKU+AAAAAAAAAMDjdtTx/x4w/h8AAADMrPq9eu03T+0tm/RdbPXyq52IJ0fWBwqTLpZZbLsfAAAAAAAAAAAAAFCS/u45vFc7EYOIeHJxsaqq+qdptH5UR93+pCt9/6FkbT/IAwDAro+eGrmWvxMxHxFXo7vzXX+DxcXFqppfWKwWq4W5/Hp2ODdfLTTe1+ZpvWxueIgXxP1hVf+y+cZ2TQe9Xz6offT31bc1rHqH6NhjMkh/zQnNLYUNAMnus9GWZ6RTpqqenvTiA/Zx/J9CS7HU9v2K2df23RQAAAA4flVVVZ30dd5n0vh+3bY7BQBMRX7+H/1c4Eh1d0J7xOP5/Wq1Wq1Wqz9V3VSNd69ZRMRGc5v6NYPh+AHghNmIj9vuAi2Sf9H6EfFc250AZlqn7Q5wLLa211c7Kd9O8/kgje+ezwXZl/9GZ2e7vP246UFGzzGZ1v1rM3rxzIT+PDulPsySnH93NP9ru+3DtN5x5z8tk/If7lwyV56cf280/xGnJ//u2PxLlfPvP1L+PfkDAAAAAMAMy///v+Tz37zLAAAAAAAAAHDibG2vr+brXvPn/58bs57rP0+nnH/nUfNfSPPyP9Fy/t2R/L88sl6vMX//zb3j/9/b66u/v/Ovz+bpYfOfyzOddM/qpHtEJ91Sp5+mR9m7h20OesP6lgadbq+fzvmpBu/EjbgZa3Fh37rd9PfYa1/Z1173dLCv/eK+9v5D7Zf2tQ/S9w5UC7n9XKzGT+JmvL3TXrfNHbD/8we0Vwe05/x7Hv+LlPPvN37q/BdTe2dkWrv/Yfeh4745HXc7b9z4/C8vHP/uHGgzeg/2ranev7Mt9Gfnb/LEMH52e+3WubvX79y5tRJpsm/pxUiTxyznP9j5mdt7/H9htz0/7jeP1/sfDh85/1mxGf2J+b/QmK/396Up960NOf9h+sn5v53axx//Jzn/ycf/yy30BwAAAAAAAAAAAAAAAD5JVVU7l4i+ERGX0/U/bV2bCQBMV37+r5K8XK1Wq9Vq9emrm6rxXm8WEfHX5jb1a4ZfjPtlAMAs+19E/KPtTtAa+Rcsf99fPX2x7c4AU3X7/Q9+dP3mzbVbt9vuCQAAAAAAAADwaeXxP5cb4z+/GBFLI+vtG//1zVg+6vif/TzzYIDRxzzQ9wSb3WGv2xhu/PnYGZ/73KTxv8/Gw+N/5zFxe839mGBwQPvwgPa5A9rnxy7dS2vshR4NOf/nG+Od1/mfGRl+vYTxX0fHvC9Bzv9s4/5c5/+lkfWa+Ve/nbn8Nw674mZ09+V//s57Pz1/+/0PXrnx3vV3195d+/GllZULly5fvnLlyvl3btxcu7D77/H0egbk/PPY184DLUvOP2cu/7Lk/L+QavmXJef/xVTLvyw5//x6T/5lyfnn9z7yL0vO/6VUy78sOf+vpFr+ZdnaXp+r83851fIvSz7+v5pq+Zcl5/9KquVflpz/uVTLvyw5//OpPkT+vh7+FMn550+4HP9lyfmvpFr+Zcn5X0y1/MuS87+UavmXJef/aqrlX5ac/9dSLf+y5Pwvp1r+Zcn5fz3V8i9Lzv9KquVflpz/N1It/7Lk/L+ZavmXJef/WqrlX5ac/7dSLf+y5Py/nWr5lyXn/51Uy78sOf/XUy3/sux9/78ZM2bM5Jm2H5kAAAAAAAAAAAAAgFHTOJ247X0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7PDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd3cxcp31GcDP7Ie9dggxEIKTGtgkJoRkya4/4g9aFxMI0AClQEKhH9iud20W/IXXLoEi2TRQImFUVFE1vWgLKGojVRVWxQWtKM1F1Y+r0l7Qm4qqElKjyqCAitRWNFvNnPd9PTM7OzPrHa9nz/v7Scnfu3Nmzpkz78zus/azAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECzO98897laURT1/xr/21IUL6r/edPklsbn3nCjjxAAAABYrf9r/P/5W9InDvZxpaZt/u5V//j1xcXFxeIDo787/qXFxXTBZFGMbyyKxmXR5X//YK15m+CJYqI20vTxSI/dj/a4fKzH5eM9Lt/Q4/KNPS6f6HH5khOwxKby5zGNG9ve+OOW8pQWtxbjjcu2d7jWE7WNIyPxZzkNtcZ1FsePFfPFiWKumGnZvty21tj+m3fW9/X2Iu5rpGlf2+or5IefOhqPoRbO8faWfV29zej7byomf/TDTx3943NXbu80e56Gltsrj/Peu+rH+ZnwmfJYa8XGdE7icY40Hee2Do/JaMtx1hrXq/+5/Tif7/M4R68e5ppqf8wnipHGn7/dOE9jzT/WS+dpW/jcf99dFMXFq4fdvs2SfRUjxeaWz4xcfXwmyhVZv436UnppMbaidXpnH+u0Pme3t67T9udEfPzvDNcbW+YYmh+m7396w5LHfaXrNKrf6+WeK+1rcNDPlWFZg3FdfLtxp5/suAa3h/v/qXuWX4Md106HNZjud9MavKvXGhzZMNo45vQg1BrXuboGd7RsP9rYU60xn7un+xqcPnfyzPTCJz75+vmTR47PHZ87tWvHjplde/bs27dv+tj8ibmZ8v/XeLaH3+ZiJD0H7grnLj4HXtu2bfNSXfzK4J6HE12eh1vath3083Cs/c7V1uYJuXRNl8+NR+snfeLSSLHMc6zx+Ny3+udhut9Nz8Oxpudhx68pHZ6HY308D+vbnLmvv+9Zxpr+63QM1+trwZamNdj+/Uj7Ghz09yPDsgYnwrr41/uW/1qwLRzvk1Mr/X5kdMkaTHc3vPbUP5O+35/Y1xid1uUd9Qtu2lCcX5g7+8DjR86dO7ujCGNNvKxprbSv181N96lYsl5HVrxeD86/6sk7Onx+SzhXE6+v/29i2ceqvs3uB7o/Vo2vbp3PZ8tndxZhDNhan89OX83r5zNlyS7ns77NZ6ZX/714yqVNr7/jy7z+xtz/Qrm/dFNPjI6Plc/f0XR2xltej1sfqrHGa1etse/np/t7PR4P/6316/GtXV6Pt7ZtO+jX4/H2Oxdfj2u9ftqxOu2P50RYJydmur8e17fZunOla3Ks6+vx3WHWwvl/XUgKKRc1rZ3l1m3a19jYeLhfY3EPret0V8v24yGb1ff1zM5rW6f33l3e1mi6d1et1TqdbNt20Os0vV4tt05rvX76dm3aH8+JsC5u3dV9nda3eXb36l87N8U/Nr12bui1BsdHN9SPeTwtwvL1fnFTXIMPFEeL08WJYrZx6YbGeqo19jX1YH9rcEP4b61fK7d2WYP3tm076DWYvo4tt/ZqY0vv/AC0P54TYV089WD3NVjf5i17B/u9673hM2mbpu9d23++ttzPvO5oO03X82de9eP8m73dfzZb3+bEvpXmzO7n6f7wmZs6nKf25+9yz6nZYm3O09ZwnFf2LX+e6sdT3+ZL+/tcTweLorjwsYcaP+8Nf7/y5+e/8/WWv3fp9Hc6Fz720A9uPva3Kzl+ANa/F8qxufxa1/Q3U/38/T8AAACwLsTcPxJmIv8DAABAZcTcH/9VeCL/AwAAQGXE3D8WZpJJ/t/6livzL1woUjN/MYiXp9PwSLld7LjOhI8nF6+qf/6hp+d+/JcX+tv3SFEUP3nkNzpuv/WReFylyXCclx9u/fzSK17oa/+HH7u6XXN//cvh9uP96XcZdKrgzhRF8c1bvtDYz+QHLzXms48cbsz3Xnzyifo2z+8vP47Xf+5l5fZ/EMq/B48dabn+c+E8fC/MmXd0Ph/xel+79Lpte99/dX/xerW7Xty42099qLzd+HtyvvhEuX08z8sd/199/pmv1bd//DWdj//CSOfjfybc7tMPX5mvr7j/eWW5ffNjUP84Xu+z4fjj/p4O13/gq9/qePyXP1duf+at5XaHw4z7vzd8vP2tV+abz9fjtSMt96t4W7ld3P/Md367cXm8vXj77cc/cehSy/loXx/P/nN5O9Nt28fPx/1Ef9G2//rtNK/PuP9nfutwy3nutf/L733ulfXbbd///W3bjbZdv/03Nv3hZ7/QcX/xeA7+2ZmW+3PwPeF5HPb/1IfCegyX/+/lL7TsNzr8ntbXn7j9l7dcaLk/0dt/VO7/8huPN+Z/TP7492960c0vvvjq+rkrim+/r7y9Xvs//kenW47/K7fd13g84uWxo9++/+XE/Z/9+NSp0wvn52ebzmrjd+e8szyejRObNteP95bw2tr+8aHT5z48d3ZyZnKmKCar+yv0rtlXw/xBOS6u9Pr3PRYezzt+75ub7/mnz8fP/8uj5ecvvaP8uvXasN0Xw+e3lI/fYm2V+3/qztsaz+/as+XHLT32Adi2/T/39bVhuP/t3xfE9X7m5R9unIf6ZY2vG/F5vcrj/+5seTvfCOd1Mfxm5rtuu7q/5u3j70a49L7y+b7q8xde5uLj+ifh8X7X98rbj8cV7+93w/cx39ra+noX18c3Loy0337jt3hcDK8nxcXy8rhVPN+Xnr+t4+HF30NSXLy98fHvpNu5fUV3czkLn1iYPjF/6vzj0+fmFs5NL3zik4dOnj5/6tyhxu/yPPSRXte/+vq0ufH6NDu3Z3cxs6koitPFzBq8YF2f46//qb/jP/PY0dm9M/fMzh07cv7YucfOzJ09fnRh4ejc7MI9R44dm/t4r+vPzx7YsXP/rr07p47Pzx7Yt3//rv1T86dO1w+jPKge9sx8dOrU2UONqywc2L1/x4MP7p6ZOnl6du7A3pmZqfO9rt/42jRVv/avT52dO3Hk3PzJuamF+U/OHdixf8+enT1/G+DJM8cWJqfPnj81fX5h7ux0eV8mzzU+Xf/a1+v6VNPCv5Xfz7arlb+Ir3j3/XvS72ete/rTy95UuUnbLxC9En4XzT+85My+fj6OuX88zCST/A8AAAA5iLl/Q5iJ/A8AAACVEXP/xjAT+R8AAAAqI+b+iTCTTPK//r/+f3/9//LyQfb/O/XnC/3/oer/n/lY2Std7/3/2J/X/8/DDe7/r3r/+v/6/9Xr//ffn1/vx6//r//PUsPW/4+5f1NRZJn/AQAAIAcx928OM5H/AQAAoDJi7r8pzET+BwAAgMqIuf9FYSaZ5H/9/776/zt7Fa6q3/8f/Pv/6//r/69J/z8+OPr/2Vhx//79j7Z8qP8f6P/r/+v/6//r/7Nq48tecqP6/zH33xxmkkn+BwAAgBzE3P/iMBP5HwAAACoj5v5bwkzkfwAAAKiMmPu3hJlkkv/1/73/v/6//n+l+/+rff//poPR/18fvP9/d/r/PVxz/39C/3899v/HB3v8w93/73n4+v9cF8P2/v8x978kzCST/A8AAAA5iLn/pWEm8j8AAABURsz9Lwszkf8BAACgMmLuvzXMJJP8r/+v/6//r/+v/995/73f/7/8k/7/cNH/707/vwfv/59X/3/Axz/c/f9Bv///+MPt19f/p5Nh6//H3P/yMJNM8j8AAADkIOb+28JM5H8AAACojJj7XxFmIv8DAABAZcTcvzXMJJP8r/+v/6//r/+v/995/737/yX9/+Gi/9+d/n8P+v/6//r//fX/O3zzq/9PJ8PW/4+5//Ywk0zyPwAAAOQg5v47wkzkfwAAAKiMmPt/KsxE/gcAAIDKiLl/W5hJJvlf/1//X/8/r/7//Rv0//X/q03/vzv9/x70//X/9f/7fP//pVbS/9/Y68aojGHr/8fc/8owk0zyPwAAAOQg5v5XhZnI/wAAAFAZMfe/OsxE/gcAAIDKiLl/Mswkk/yv/1+t/v+f/vVTry70//X/e+y/ov3/uAz0/zOn/9+d/n8P+v/6//r/a9L/Jx/D1v+Puf/OMJNM8j8AAADkIOb+u8JM5H8AAACojJj77w4zkf8BAACgMmLu3x5mkkn+1/+vVv8/0v/X/++2/4r2/xP9/7zp/3fQ9CTV/+9B/1//P/v+f/zuV/+fwRi2/n/M/a8JM8kk/wMAAEAOYu6/J8xE/gcAAIDKiLn/tWEm8j8AAABURsz994aZZJL/9f/1//X/9f/1/zvvX/9/fdL/726l/f8N+v/6//r/mfX/vf8/gzVs/f+Y+18XZpJJ/gcAAIAcxNx/X5iJ/A8AAACVEf/9ZvnvXuV/AAAAqKKY+6fCTDLJ//r/+v859f9r+v/6//r/laf/3533/+9B/1//X/9f/5+BGrb+f8z9rw8zyST/AwAAQA5i7n8gzET+BwAAgMqIuX86zET+BwAAgMqIuX8mzCST/K//r/+fU//f+//r/+v/V5/+f3f6/z3o/+v/V63/XxT6/9xQw9b/j7l/R5hJJvkfAAAAchBz/84wE/kfAAAAKiPm/l1hJvI/AAAAVEbM/bvDTDLJ//r/+v/6//r/+v+d96//vz7p/3en/9+D/r/+f9X6/97/nxts2Pr/Mfc/GGaSSf4HAACAHMTcvyfMRP4HAACAyoi5f2+YScj/nf5dNwAAALC+xNy/L8wkk7//1/+vSP//N/++Zd/6//r/3fY/mP7/Jv3/MPX/h0tF+//tT4trpv/fg/7/devPFyMDOcQbdvz6//r/XJth6//H3L8/zCST/A8AAAA5iLn/DWEm8j8AAABURsz9Px1mIv8DAABAZcTc/zNhJpnkf/3/ivT/2+j/6/9327/3/9f/r7KK9v8HplL9/xH9//XU//f+//r/va5PNV3//n/8U3/9/5j7D4SZZJL/AQAAIAcx9/9smIn8DwAAAJURc/8bw0zkfwAAAKiMmPsPhplkkv/1//X/9f/1/69P//+NRbth7P/XF4/+f7UMcf9/vJ/96/97/3/9/zU5/vYvNQM5fv1//X+WGrb3/4+5/01hJpnkfwAAAMhBzP0PhZnI/wAAAFAZMfe/OcxE/gcAAIDKiLn/LWEmmeR//X/9f/1//X/v/995//r/69MQ9//7ov+v/6//v36PX/9f/5+lhq3/H3P/w2EmmeR/AAAAyEHM/W8NM5H/AQAAoDJi7n9bmIn8DwAAAJURc//bw0wyyf/6//r/+v/6//r/nfev/78+6f93p//fg/6//r/+v/4/AzVs/f+Y+38uzCST/A8AAAA5iLn/kTAT+R8AAAAqI+b+d4SZyP8AAABQGTH3vzPMJJP8r/+v/6//r/+v/995//r/65P+f3f6/z3o/+v/6//r/zNQw9b/j7n/XWEmmeR/AAAAyEHM/T8fZiL/AwAAQGXE3P/uMBP5HwAAACoj5v5fCDPJJP/r/+v/D1f/f/FC8/X0//X/i0H1/+tX0v/Pgv5/d/r/PXTo/2/U/9f/1//X/+eaDVv/P+b+94SZZJL/AQAAIAcx9783zET+BwAAgMqIuf99YSbyPwAAAFRGzP2Phplkkv/1/7Ps/6e7PHz9f+//r//v/f/1/1dH/787/f8evP+//r/+v/4/AzVs/f+Y+x8LM8kk/wMAAEAOYu5/f5iJ/A8AAACVEXP/L4aZyP8AAABQGTH3fyDMJJP8r/+fZf9/iN//v2r9/7GW9ZFT/3+i6fFM61L/X/9/Dej/d6f/34P+v/7/MPf/w2retMz19f8ZRsPW/4+5/4NhJpnkfwAAAMhBzP2/FGYi/wMAAEBlxNz/y2Em8j8AAABURsz9vxJmkkn+r2D//2Kh/6//PzT9/9b1kVP/3/v/L6X/vzb0/7vT/+9B/1//f5j7/z3o/zOMhq3/H3P/r4aZLBv8fvBffdxNAAAAYIjE3P+hMJNM/v4fAAAAchBz/6EwE/kfAAAAKiPm/sNhJpnk/wr2/1f5/v/xHVX1//X/B93/H9H/1//X/18Dg+v/v+LmotD/1//X/9f/1//X/2c1hq3/H3P/kTCTTPI/AAAA5CDm/l8LM5H/AQAAoDJi7j8aZiL/AwAAQGXE3D8bZpJJ/r+B/f/x4ez/e///a+3//0T/3/v/B/r/nen/rw3v/9+d/n8P+v/6//r/+v8M1LD1/2PunwszyST/AwAAQIWlHwfH3H8szET+BwAAgMqIuf94mIn8DwAAAJURc/+Hw0wyyf/e/1//3/v/34j+/1jL9vr/Jf1//f9B0P/vTv+/B/1//X/9f/1/BmrY+v8x98+HmWSS/wEAACAHMfd/JMxE/gcAAIDKiLn/o2Em8j8AAABURsz9J8JMMsn/+v/6/7n3/2tFcdH7/+v/d9q//v/6pP/fnf5/D/r/+v/6//r/DNSw9f9j7j8ZZpJJ/gcAAIAcxNx/KsxE/gf4f/buo0mu87rjcJsmEVb2R/DaKy/tFf0RvPXOVV67nOhsiaRylqicA5VzzonKOedM5RypSKkKKg7OOcBgGvciNKbvfc/zbI6BIjwNckjX36hfvQAAMIzc/f8ct9j/AAAAMIzc/f8StzTZ//p//X/3/n+zl/f/D//1+v+z9P/6/1040t9fv/2vu1gUftH+/6/++qZ/0P/r//X/k/T/+n/9PxdaWv+fu/9f45Ym+x8AAAA6yN3/b3GL/Q8AAADDyN3/73GL/Q8AAADDyN1/U9zSZP/r//X/+n/9/6H+/w79v/5/3bz/P03/P0P/r//X/+v/2aml9f+5+/8jbmmy/wEAAKCD3P3/GbfY/wAAADCM3P3/FbfY/wAAADCM3P3/Hbc02f/6f/2//n8t/f8J7/9f8PvR/+v/t9H/T9P/z9D/6//1//p/dmpp/X/u/v+JW5rsfwAAAOggd///xi32PwAAAAwjd///xS32PwAAAAwjd///xy1N9r/+X/+v/19L/39M7//r//X/K3f75tx/E/T/R+n/Z8z0/5uN/n/KJffz23976/n8F6H/1/9z1NL6/9z994pb/nazOXGlv0kAAABgUXL33ztuafLn/wAAANBB7v6b4xb7HwAAAIaRu/+WuKXJ/tf/6//1//p//f/2r6//Xyfv/0+7+v7/L//8n/6xb//v/f9p3v/fdf9/z3eG/p91W1r/n7v/1rilyf4HAACADnL33ydusf8BAABgGLn77xu32P8AAAAwjNz994tbmux//f9o/f+fHvp15/X/B7WL/l//r//X/49O/z/N+/8zDv4zd7p+qP/X/3v/X//P1Vla/5+7//5xS5P9DwAAAB3k7n9A3GL/AwAAwDBy9z8wbrH/AQAAYBi5+x8UtzTZ//r/0fr/w7/O+//6/21fX/+v/x+Z/n+a/n/GKO//X+F3zb77+au178+v/9f/c9TS+v/c/Q+OW5rsfwAAAOggd/9D4hb7HwAAAIaRu/+hcYv9DwAAAMPI3f+wuKXJ/tf/6//X0f/nV9D/6/+vff+f9P/rpP+fpv+fMUr/f4X23c+v/fPr//X/HLW0/j93/8Pjlib7HwAAADrI3f+IuMX+BwAAgGHk7n9k3GL/AwAAwDBy9z8qbmmy//X/+v919P/e/9f/e/9f/39p9P/T9P8z9P/6f/2//p+dWlr/n7v/trilyf4HAACADnL3Pzpusf8BAABgGLn7HxO32P8AAAAwjNz9j41bmux//b/+X/+v/9f/b//6+v910v9P0//PaN7/b27R/+v/9f/s1oL6//N+1anN4+KWJvsfAAAAOsjd//i4xf4HAACAYeTuf0LcYv8DAADAMHL3PzFuabL/9f+L6f8Pcr6x+v/Tm81G/79p2v+fPu+fZ31f6v/1/8dA/z9N/z+jef+/735+7Z9f/6//56gF9f8HP87d/6S4pcn+BwAAgA5y9z85brH/AQAAYBi5+58St9j/AAAAMIzc/U+NW5rsf/3/Yvr/A2P1/97/v/D7o1P/7/3/o/T/x0P/P03/P0P/r//X/+v/2aml9f+5+58WN5244Yp/iwAAAMDC5O5/etzS5M//AQAAoIPc/c+IW+x/AAAAWKnbjvxM7v5nxi1N9r/+f7f9/4nzfk7/r/+/8PtD/6//1/9fe/r/afr/Gfp//b/+X//PTi2t/8/d/6y4pcn+BwAAgA5y998et9j/AAAAMIzc/c+OW+x/AAAAGEbu/ufELU32v/7f+//6f/3/XP9/7jlU/b/+f/n0/9P0/zP0//r//fb/J8/9j/p/xnAZ/f+ZM2duvub9f+7+58YtTfY/AAAAdJC7/3lxi/0PAAAAw8jd//y4xf4HAACAYeTuf0Hc0mT/6/+b9v/5rb6u/v+WzUb/7/1//b/+f5r+f5r+f4b+X//v/X/9Pzu1tPf/c/e/MG5psv8BAACgg9z9L4pb7H8AAAAYRu7+F8ct9j8AAAAMI3f/S+KWJvtf/9+0//f+v/5f/3/c/f/dG/3/sVhF/3/64l9/6f3/rfp//f+Edv3/3/3NoR/q//X/HLW0/j93/0vjlib7HwAAADrI3f+yuMX+BwAAgGHk7n953GL/AwAAwDBy978ibrq+yf7X/+v/9f/6f/3/9q9/zO//n9hsNvr/HVhF/z9h6f3/bt7/v/Df8nP0//r/NX9+/b/+n6OW1v/n7n9l3NJk/wMAAEAHuftfFbfY/wAAADCM3P2vjlvsfwAAABhG7v7XxC1N9r/+X/+v/9f/D9//37qK/t/7/zui/5+2jP7/4vT/+v81f379v/6fS7ev/j93/2vjlib7HwAAADrI3f+6uMX+BwAAgGHk7n993GL/AwAAwDBy978hbmmy//X/+v/L6f/zc+r/x+r/Ty6u/z916H9fk/f/9f87ov+fpv+fof/X/+v/b9P/s0tLe/8/d/8b45Ym+x8AAAA6yN3/prj1/7q1/wEAAGAYufvfHLfY/wAAADCM3P1viVua7H/9v/7f+//6/+Hf/9f/t6L/n6b/n6H/1//r/73/z04trf/P3f/WuKXJ/gcAAIAOcve/LW6x/wEAAGAYufvfHrfY/wAAADCM3P13xC1N9r/+X/+v/9f/6//P/jPU/49B/z/tePr/0/p//X/1838S/xbo//X/c7+eMS2t/8/d/464pcn+BwAAgA5y978zbrH/AQAAYBi5+98Vt9j/AAAAsErXb/m53P3vjlua7H/9v/5f/6//1/9v//r6/3XaS/+f3xT6f+//hz79/18c+tHa3v+/8P9+6f/1/+ze0vr/3P3viVua7H8AAADoIHf/e+MW+x8AAACGkbv/fXGL/Q8AAADDyN3//rilyf7X/+v/9f/6f/3/9q+v/18n7/9P0//P0P/v9f38tX9+/b/+n6OW1v/n7v9A3NJk/wMAAEAHufs/GLfY/wAAADCM3P0filvsfwAAABjGwe7PuKzh/tf/6//1//p//f/2r6//Xyf9/zT9/wz9v/5f/6//Z6eW1v9/+OBXndp8JG5psv8BAACgg9z9H41b7H8AAAAYRu7+j8Ut9j8AAAAMI3f/x+OWJvtf/6//X0f/f+bMmZv1//r/w7+fc/3/nfp/iv5/mv5/hv5f/6//1/+zU0vr/3P3fyJuabL/AQAAoIPc/Z+MW+x/AAAAGEbu/k/FLfY/AAAADCN3/6fjlib7X/+/gP7/lP7f+//6/433/4/2/9ed/Y+y/v/y6P+n6f9njNj/n7r03/6++/mrte/Pr//X/3PU0vr/3P2fiVua7H8AAADoIHf/Z+MW+x8AAACGkbv/c3GL/Q8AAADDyN3/+bilyf7X/x9f/3/P37su7/+f3mz//Pp//b/+3/v/15r+f5r+f8aI/f9l2Hc/v/bPr//X/3PU0vr/3P1fiFsOD78bLu93CQAAACxJ7v4vxi1N/vwfAAAAOsjd/6W4xf4HAACAYeTu/3Lc0mT/6/8X8P7/gP2/9/+3f3/o/xfd/1+n/x+D/n+a/n+G/l//r//fUf+f3836/+6W1v/n7v9K3NJk/wMAAEAHufu/GrfY/wAAADCM3P1fi1vsfwAAABhG7v4745bz9v+2tnsU+n/9v/5f/6//3/719f/rpP+fdqn9/8nN1fX/Sf+v/9f/d+3/vf/PWUvr/3P3fz1u8ef/AAAAsDo3XOTnc/d/I26x/wEAAGAYufu/GbfY/wAAADCM3P3filvuum5fH+lY6f/1//p//b/+f/vX1/+vk/5/mvf/Z+j/d9HP36j/H6P/32z0/1y9pfX/ufu/Hbf4838AAAAYRu7+78Qt9j8AAAAMI3f/d+MW+x8AAACGkbv/e3FLk/2v/9f/X2X/f5Bm6v/P0v+fpf/fTv9/PPT/0/T/M/T/3v/X/3v/n51aWv+fu//7cUuT/Q8AAAAd5O7/Qdxi/wMAAMAwcvf/MG6x/wEAAGAYuft/FLc02f976//jb7X+f/X9v/f/9f/6f/3/ouj/p+n/Z+j/9f/6f/0/O7W0/j93/4/jlib7HwAAADrI3f+TuMX+BwAAgGHk7v9p3GL/AwAAwDBy9/8sbmmy/73/r//X/+v/9f/bv77+f530/9P0/9vVPyj9v/5f/6//Z6eW1v/n7v953NJk/wMAAEAHuft/EbfY/wAAADCM3P13xS32PwAAAAwjd/8v45Ym+1//r//X/+v/9f/bv77+f530/9P22f///Z/Nf1nv/++9/8+PoP/X/+v/2Yml9f+5+38VtzTZ/wAAANBB7v5fxy32PwAAAAwjd/9v4hb7HwAAAIaRu/+3cUuT/T/T/5+sv1D/P0n/f/jz6/+3f3/o//X/+v9rT/8/zfv/M/T/3v/X/+v/2aml9f+5+38XtzTZ/wAAANBB7v674xb7HwAAAIaRu//3cYv9DwAAAMPI3f+HuKXJ/vf+/5r6/xv1//p//b/+X/8/Q/8/Tf8/Q/+v/9f/6//ZqaX1/7n7/xgAAP//RD5ONQ==")
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340), &(0x7f0000000100), 0xfc21, 0x0)

5.240232818s ago: executing program 1 (id=8483):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
chown(0x0, 0x0, 0x0)

4.95736811s ago: executing program 1 (id=8487):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0xa, 0x3, 0x3, 0x8, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_address={0x5, 0x17, 0x8b, 0x20, 0x0, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}]}, 0x40}}, 0x20004000)

4.749427261s ago: executing program 1 (id=8489):
syz_usb_connect(0x0, 0x1a2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000))

4.274627284s ago: executing program 2 (id=8493):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f00000002c0), 0x1, 0x55ae, &(0x7f0000005600)="$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")
truncate(&(0x7f0000000040)='./file1\x00', 0x6)

3.914768186s ago: executing program 0 (id=8497):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x3000)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0xea60})

3.858277206s ago: executing program 0 (id=8498):
r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf\\o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98/\\/\\\xf9\rmD\x94)U\xdb\x15m.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xfdul\xf9D\xd4\x82X5\x13\xaa\xce\xc2\x18\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8\t\x00\x00\x00\x00\x00\x00\x00\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\t\x00\x00\x00\x00\x00\x00\x00h\xe2!\x00\xb9z)\x19\xe3\xed\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,P\xfe\xe4\xfaN\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x9c\xb5K\x960?\x06]\x1eQ\x10\xe8\xed\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6', 0x0)

3.765136277s ago: executing program 0 (id=8499):
ioperm(0x0, 0x3, 0x2)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)

3.586714748s ago: executing program 0 (id=8500):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x204818, &(0x7f0000000480)=ANY=[], 0x1, 0x54e, &(0x7f00000008c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

3.467666599s ago: executing program 0 (id=8501):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000300)=""/82, 0x2000, 0x1000, 0x81}, 0x20)

3.223052521s ago: executing program 4 (id=8502):
r0 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96', 0x5)
lseek(r0, 0x2000ffff, 0x2)

3.184163851s ago: executing program 1 (id=8503):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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")
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0)

3.042596092s ago: executing program 0 (id=8504):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000780)={0x8, @capture={0x0, 0x0, {0x10000, 0x7}, 0x7, 0x1}})

2.661599434s ago: executing program 33 (id=8504):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000780)={0x8, @capture={0x0, 0x0, {0x10000, 0x7}, 0x7, 0x1}})

2.655853994s ago: executing program 4 (id=8506):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="10", 0x1)

2.473666475s ago: executing program 2 (id=8507):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x108)

2.392049536s ago: executing program 4 (id=8508):
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
umount2(&(0x7f0000000380)='./file0/file0/..\x00', 0x8)

1.885124309s ago: executing program 4 (id=8509):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0x4, 0x101, 0x8, 0x200, 0x3d, 0x5c, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x7ffffffc, 0xd, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x400003, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xfffff801, 0x2b, 0xa, 0x2000000, 0x7, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x8000, 0x2000003, 0x5, 0x2, 0x0, 0x2, 0x8, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffff9, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x400002, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xa, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}})

1.239648283s ago: executing program 4 (id=8510):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100fea0020037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1.172185323s ago: executing program 1 (id=8511):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='mpol=bind:0-N:3/N'])

115.71179ms ago: executing program 4 (id=8512):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)

51.13538ms ago: executing program 2 (id=8513):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x13, 0x0, 0x0)

0s ago: executing program 1 (id=8514):
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x0)
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 64: padding at end of block bitmap is not set
[  636.225983][T28052] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  636.271354][T28052] EXT4-fs (loop0): 1 truncate cleaned up
[  636.291288][T28052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  636.328793][T28052] ext4 filesystem being mounted at /1773/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  636.500975][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.592111][T28077] bond1: entered promiscuous mode
[  636.597338][T28077] bond1: entered allmulticast mode
[  636.604431][T28077] 8021q: adding VLAN 0 to HW filter on device bond1
[  636.755342][T28120] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6943'.
[  637.012962][T28129] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6946'.
[  637.856786][T28123] loop4: detected capacity change from 0 to 32768
[  637.872481][T28126] loop2: detected capacity change from 0 to 32768
[  637.902522][T28123] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.6944 (28123)
[  637.963892][T28154] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  638.009144][T28123] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  638.028559][T28126] find_entry called with index = 0
[  638.053322][T28123] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  638.100396][T28123] BTRFS info (device loop4): turning on flush-on-commit
[  638.135466][T28123] BTRFS info (device loop4): turning off barriers
[  638.169722][T28123] BTRFS info (device loop4): turning on sync discard
[  638.200070][T28123] BTRFS info (device loop4): using free space tree
[  638.346127][T28172] netlink: 'syz.0.6956': attribute type 10 has an invalid length.
[  638.368554][T28172] net veth1_virt_wifi ÿÿÿÿÿÿ: entered allmulticast mode
[  638.448147][T28172] team0: Port device ÿÿÿÿÿÿ added
[  638.664934][T11885] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  639.128220][T12220] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by udevd (12220)
[  639.548373][T28228] netlink: 'syz.0.6972': attribute type 3 has an invalid length.
[  640.678331][T28265] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6983'.
[  640.843992][T28269] loop2: detected capacity change from 0 to 64
[  640.868513][T28269] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  640.936050][T28247] loop0: detected capacity change from 0 to 32768
[  640.974987][T28247] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.6978 (28247)
[  641.057998][T28247] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  641.091578][T28247] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  641.127234][T28247] BTRFS info (device loop0): force zlib compression, level 3
[  641.150029][T28247] BTRFS info (device loop0): force clearing of disk cache
[  641.169915][T28247] BTRFS info (device loop0): setting nodatasum
[  641.189972][T28247] BTRFS info (device loop0): allowing degraded mounts
[  641.196896][T28247] BTRFS info (device loop0): enabling disk space caching
[  641.210047][ T5880] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  641.224995][T28247] BTRFS info (device loop0): disk space caching is enabled
[  641.402600][ T5880] usb 3-1: config 0 has an invalid interface number: 207 but max is 0
[  641.423640][ T5880] usb 3-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config
[  641.439910][T28247] BTRFS info (device loop0): auto enabling async discard
[  641.463018][T28247] BTRFS info (device loop0): rebuilding free space tree
[  641.479098][ T5880] usb 3-1: config 0 has no interface number 0
[  641.525988][T28247] BTRFS info (device loop0): disabling free space tree
[  641.526872][ T5880] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  641.550053][T28247] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  641.573144][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.588485][T28247] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  641.597420][ T5880] usb 3-1: Product: syz
[  641.619197][ T5880] usb 3-1: Manufacturer: syz
[  641.640691][ T5880] usb 3-1: SerialNumber: syz
[  641.667222][ T5880] usb 3-1: config 0 descriptor??
[  641.886493][T28247] BTRFS info (device loop0): balance: start -susage=8589934594,vrange=18225..1,limit=3..129,stripes=0..32766
[  641.899638][ T5880] qmi_wwan: probe of 3-1:0.207 failed with error -22
[  641.921239][T28247] BTRFS info (device loop0): balance: ended with status: 0
[  641.947111][ T5880] usb 3-1: USB disconnect, device number 25
[  642.144742][T28337] ptrace attach of "./syz-executor exec"[5793] was attempted by "./syz-executor exec"[28337]
[  642.164614][ T5792] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  642.234166][   T28] audit: type=1326 audit(2000000017.240:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28339 comm="syz.4.6996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ffb8f6c9 code=0x7ffc0000
[  642.321241][   T28] audit: type=1326 audit(2000000017.240:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28339 comm="syz.4.6996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ffb8f6c9 code=0x7ffc0000
[  642.429934][   T28] audit: type=1326 audit(2000000017.270:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28339 comm="syz.4.6996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f32ffb8f6c9 code=0x7ffc0000
[  642.508862][   T28] audit: type=1326 audit(2000000017.270:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28339 comm="syz.4.6996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ffb8f6c9 code=0x7ffc0000
[  643.249038][T28374] loop0: detected capacity change from 0 to 4096
[  643.326506][T28374] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  643.388441][T28386] loop2: detected capacity change from 0 to 256
[  643.475063][T28374] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  643.500304][T28374] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[  643.508630][T28386] FAT-fs (loop2): Directory bread(block 64) failed
[  643.549917][T28386] FAT-fs (loop2): Directory bread(block 65) failed
[  643.556638][T28386] FAT-fs (loop2): Directory bread(block 66) failed
[  643.600452][T28386] FAT-fs (loop2): Directory bread(block 67) failed
[  643.607165][T28386] FAT-fs (loop2): Directory bread(block 68) failed
[  643.631478][T28386] FAT-fs (loop2): Directory bread(block 69) failed
[  643.639962][T28374] ntfs3: loop0: ino=5, "/" directory corrupted
[  643.659705][T28386] FAT-fs (loop2): Directory bread(block 70) failed
[  643.670871][T28386] FAT-fs (loop2): Directory bread(block 71) failed
[  643.677551][T28386] FAT-fs (loop2): Directory bread(block 72) failed
[  643.709939][T28386] FAT-fs (loop2): Directory bread(block 73) failed
[  643.768170][ T8429] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22.
[  643.820969][ T5792] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  643.832001][ T5792] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  643.860645][ T5792] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  643.867392][ T8429] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22.
[  644.049540][T28409] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  644.080075][T28409] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  645.217497][T28457] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7030'.
[  645.238560][T28433] loop2: detected capacity change from 0 to 32768
[  645.245473][T28457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7030'.
[  645.298361][T28433] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  645.353506][T28433] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  645.568954][T28470] loop0: detected capacity change from 0 to 1024
[  645.622688][ T5789] ocfs2: Unmounting device (7,2) on (node local)
[  645.741405][T28470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  645.832963][T28470] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz.0.7033: directory missing '..'
[  645.853555][T28482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7035'.
[  645.876079][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.600981][T28512] tmpfs: Bad value for 'mpol'
[  646.899192][T28474] loop4: detected capacity change from 0 to 32768
[  646.999026][T28533] overlayfs: unescaped trailing colons in lowerdir mount option.
[  647.013397][T28474] ea_get: extended attribute size too large: 2617245744 > INT_MAX
[  647.366737][T28538] loop2: detected capacity change from 0 to 4096
[  647.394516][T28538] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  647.840066][T28560] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  649.792405][T28645] loop0: detected capacity change from 0 to 1764
[  649.882193][T28645] iso9660: Corrupted directory entry in block 2 of inode 1920
[  650.161866][T28590] loop4: detected capacity change from 0 to 65536
[  650.237716][T28590] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  650.425573][T28590] XFS (loop4): Ending clean mount
[  650.468670][T28678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7090'.
[  650.504555][T28590] XFS (loop4): Quotacheck needed: Please wait.
[  650.664778][T28590] XFS (loop4): Quotacheck: Done.
[  650.876906][T28699] loop0: detected capacity change from 0 to 16
[  650.905722][T11885] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  650.911983][T28699] erofs: (device loop0): mounted with root inode @ nid 36.
[  651.579308][   T28] audit: type=1326 audit(2000000026.590:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28727 comm="syz.1.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  651.645444][   T28] audit: type=1326 audit(2000000026.590:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28727 comm="syz.1.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  651.749890][   T28] audit: type=1326 audit(2000000026.620:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28727 comm="syz.1.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  651.835972][   T28] audit: type=1326 audit(2000000026.620:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28727 comm="syz.1.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  651.917088][   T28] audit: type=1326 audit(2000000026.620:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28727 comm="syz.1.7104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  652.425561][  T787] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  652.634484][  T787] usb 5-1: config 0 has no interfaces?
[  652.644268][  T787] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  652.675089][  T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.701337][  T787] usb 5-1: config 0 descriptor??
[  652.982563][ T5879] usb 5-1: USB disconnect, device number 22
[  653.027861][T28813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7128'.
[  653.068470][T28813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7128'.
[  653.604340][T28841] comedi comedi1: dmm32at: I/O port conflict (0x5,16)
[  653.935781][T28859] ipt_REJECT: TCP_RESET invalid for non-tcp
[  654.494515][T28884] loop0: detected capacity change from 0 to 4096
[  654.499581][T28891] 8021q: adding VLAN 0 to HW filter on device bond4
[  654.534615][T28884] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  655.056988][T28947] delete_channel: no stack
[  655.461799][T28969] loop0: detected capacity change from 0 to 16
[  655.501903][T28969] erofs: (device loop0): mounted with root inode @ nid 36.
[  655.567377][T28969] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  655.636401][T28969] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36
[  655.691030][T28969] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  655.935992][T28998] loop0: detected capacity change from 0 to 64
[  656.000526][T28998] hfs: inconsistency in B*Tree (1,0,2,2,3)
[  656.249366][T29017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7181'.
[  656.280033][T29017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7181'.
[  656.361731][ T5879] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  656.559891][ T5879] usb 5-1: Using ep0 maxpacket: 16
[  656.591959][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  656.629908][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  656.642212][ T5879] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  656.679688][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.688363][ T5879] usb 5-1: Product: syz
[  656.695847][ T5879] usb 5-1: Manufacturer: syz
[  656.701801][ T5879] usb 5-1: SerialNumber: syz
[  656.821523][T29037] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7187'.
[  656.973243][ T5879] usb 5-1: cannot find UAC_HEADER
[  657.064227][ T5879] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  657.100538][ T5879] usb 5-1: USB disconnect, device number 23
[  657.132820][ T6126] udevd[6126]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  657.257047][T29019] loop0: detected capacity change from 0 to 32768
[  657.280698][T29019] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.7182 (29019)
[  657.317537][T29061] loop2: detected capacity change from 0 to 512
[  657.348666][T29061] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  657.351790][T29019] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  657.383529][T29061] EXT4-fs (loop2): 1 truncate cleaned up
[  657.391467][T29061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  657.424030][T29019] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  657.433477][T29019] BTRFS info (device loop0): using free space tree
[  657.442526][T29061] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  657.565779][T29019] BTRFS info (device loop0): enabling ssd optimizations
[  657.593126][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  657.602501][T29019] BTRFS info (device loop0): auto enabling async discard
[  658.023321][ T5792] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  658.079692][T29104] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7196'.
[  658.156654][T29109] netlink: 'syz.4.7199': attribute type 22 has an invalid length.
[  658.471628][T29124] netlink: 'syz.4.7201': attribute type 5 has an invalid length.
[  658.614716][T29124] : entered promiscuous mode
[  659.203732][T29151] loop4: detected capacity change from 0 to 1024
[  659.252553][T29151] EXT4-fs: Ignoring removed nobh option
[  659.301291][T29151] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  659.337332][T29151] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz.4.7210: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  659.428084][T29151] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.7210: couldn't read orphan inode 11 (err -117)
[  659.443739][T29151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  659.701675][T11885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  660.416249][T29213] loop2: detected capacity change from 0 to 64
[  660.512767][T29213] syz.2.7227: attempt to access beyond end of device
[  660.512767][T29213] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64
[  660.561314][T29213] Buffer I/O error on dev loop2, logical block 1295, async page read
[  660.604930][T29213] syz.2.7227: attempt to access beyond end of device
[  660.604930][T29213] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64
[  660.669951][T29213] Buffer I/O error on dev loop2, logical block 1295, async page read
[  660.681940][   T28] audit: type=1800 audit(2000000035.690:197): pid=29213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7227" name="file2" dev="loop2" ino=6 res=0 errno=0
[  661.245631][T29257] netlink: 'syz.4.7241': attribute type 21 has an invalid length.
[  661.284800][T29257] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7241'.
[  661.326185][T29257] netlink: 'syz.4.7241': attribute type 1 has an invalid length.
[  661.364622][T29255] loop2: detected capacity change from 0 to 4096
[  661.414374][T29255] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  661.450365][T29255] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  661.500220][T29255] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  661.530970][T29255] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  661.562058][T29255] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  661.581734][T29255] ntfs: volume version 3.1.
[  661.588884][T29255] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  661.615638][T29255] ntfs: (device loop2): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  661.659222][T29255] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  661.705307][T29255] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  661.864944][T29282] loop0: detected capacity change from 0 to 256
[  661.928801][T29285] loop4: detected capacity change from 0 to 256
[  662.000428][T29282] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  662.105092][T29285] FAT-fs (loop4): Directory bread(block 64) failed
[  662.141814][T29285] FAT-fs (loop4): Directory bread(block 65) failed
[  662.179078][T29285] FAT-fs (loop4): Directory bread(block 66) failed
[  662.201748][T29285] FAT-fs (loop4): Directory bread(block 67) failed
[  662.239996][T29285] FAT-fs (loop4): Directory bread(block 68) failed
[  662.246625][T29285] FAT-fs (loop4): Directory bread(block 69) failed
[  662.302364][T29285] FAT-fs (loop4): Directory bread(block 70) failed
[  662.347778][T29285] FAT-fs (loop4): Directory bread(block 71) failed
[  662.367304][T29285] FAT-fs (loop4): Directory bread(block 72) failed
[  662.394939][T29285] FAT-fs (loop4): Directory bread(block 73) failed
[  662.534665][T29307] netlink: 'syz.1.7254': attribute type 1 has an invalid length.
[  662.571025][T29307] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7254'.
[  662.603141][T29313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7255'.
[  662.622216][T29314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7256'.
[  663.031227][T29335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7262'.
[  663.284209][T29347] ./file0: Can't open blockdev
[  663.742168][T29368] ip6gre1: entered promiscuous mode
[  663.774103][T29375] netlink: 'syz.4.7275': attribute type 46 has an invalid length.
[  663.796251][T29375] netlink: 'syz.4.7275': attribute type 19 has an invalid length.
[  664.103011][T29393] loop0: detected capacity change from 0 to 256
[  664.141876][T29393] exfat: Deprecated parameter 'namecase'
[  664.161039][T29393] exfat: Deprecated parameter 'namecase'
[  664.183947][T29393] exfat: Deprecated parameter 'namecase'
[  664.225165][T29394] xt_CT: No such helper "syz1"
[  664.234996][T29393] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  664.288611][T29393] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  664.893923][T29435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7293'.
[  664.919666][T29437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7292'.
[  664.932279][T29436] ieee802154 phy0 wpan0: encryption failed: -22
[  664.951586][T29435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  664.958893][T29435] IPv6: NLM_F_CREATE should be set when creating new route
[  664.966288][T29435] IPv6: NLM_F_CREATE should be set when creating new route
[  665.359461][T29459] trusted_key: encrypted_key: keyword 'ne' not recognized
[  666.334284][T29511] : renamed from veth0_vlan (while UP)
[  666.813525][T29537] IPv6: Can't replace route, no match found
[  667.117416][T29554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7333'.
[  667.157463][T29554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7333'.
[  667.172319][T29554] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  667.202878][T29557] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7334'.
[  667.958984][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  667.959002][   T28] audit: type=1326 audit(2000000042.970:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29596 comm="syz.4.7347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ffb8f6c9 code=0x7ffc0000
[  668.019891][   T28] audit: type=1326 audit(2000000042.970:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29596 comm="syz.4.7347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ffb8f6c9 code=0x7ffc0000
[  668.112829][   T28] audit: type=1326 audit(2000000042.990:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29596 comm="syz.4.7347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f32ffb8f6c9 code=0x7ffc0000
[  668.179950][   T28] audit: type=1326 audit(2000000042.990:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29596 comm="syz.4.7347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ffb8f6c9 code=0x7ffc0000
[  668.233893][   T28] audit: type=1326 audit(2000000042.990:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29596 comm="syz.4.7347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ffb8f6c9 code=0x7ffc0000
[  668.398553][T29608] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  668.653319][T29582] loop2: detected capacity change from 0 to 32768
[  668.732414][T29582] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  668.814141][T29582] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  668.879886][ T8427] (kworker/u4:14,8427,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  668.904363][T29624] loop4: detected capacity change from 0 to 16
[  668.935387][T29582] (syz.2.7342,29582,0):ocfs2_read_blocks:239 ERROR: status = -12
[  668.951056][T29624] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  668.994625][T29582] (syz.2.7342,29582,0):ocfs2_xattr_block_find:2831 ERROR: status = -12
[  669.036968][T29624] erofs: (device loop4): mounted with root inode @ nid 36.
[  669.044708][T29593] loop0: detected capacity change from 0 to 32768
[  669.126036][T29593] JBD2: Ignoring recovery information on journal
[  669.217347][ T5789] ocfs2: Unmounting device (7,2) on (node local)
[  669.220502][T29593] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  669.397793][ T5792] ocfs2: Unmounting device (7,0) on (node local)
[  669.404977][  T787] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  669.630953][  T787] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  669.649464][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.678745][  T787] usb 2-1: Product: syz
[  669.699011][  T787] usb 2-1: Manufacturer: syz
[  669.718100][  T787] usb 2-1: SerialNumber: syz
[  669.746544][  T787] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  669.781706][ T5879] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  669.953662][T29669] netlink: 'syz.4.7363': attribute type 7 has an invalid length.
[  669.962060][  T788] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  669.984486][T29669] netlink: 'syz.4.7363': attribute type 8 has an invalid length.
[  669.998255][T29669] netlink: 'syz.4.7363': attribute type 15 has an invalid length.
[  670.162189][  T788] usb 3-1: unable to get BOS descriptor or descriptor too short
[  670.173430][  T788] usb 3-1: not running at top speed; connect to a high speed hub
[  670.198074][  T788] usb 3-1: config 5 has an invalid interface number: 64 but max is 0
[  670.217011][  T788] usb 3-1: config 5 has no interface number 0
[  670.233752][  T788] usb 3-1: config 5 interface 64 has no altsetting 0
[  670.257447][  T788] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=28.39
[  670.272638][ T5880] usb 2-1: USB disconnect, device number 27
[  670.295597][  T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.313333][  T788] usb 3-1: Product: syz
[  670.323818][  T788] usb 3-1: Manufacturer: syz
[  670.328582][  T788] usb 3-1: SerialNumber: syz
[  670.593383][  T788] snd-usb-audio: probe of 3-1:5.64 failed with error -71
[  670.612003][  T788] usb 3-1: USB disconnect, device number 26
[  670.860157][ T5879] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  670.867288][ T5879] ath9k_htc: Failed to initialize the device
[  670.915810][ T5880] usb 2-1: ath9k_htc: USB layer deinitialized
[  671.136781][T29695] loop4: detected capacity change from 0 to 32768
[  671.190551][T29695] 
[  671.190551][T29695]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  671.190551][T29695] 
[  671.251057][T29695] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  671.251057][T29695] 
[  671.428535][ T8427] read_mapping_page failed!
[  671.439947][ T8427] ERROR: (device loop4): txCommit: 
[  671.439947][ T8427] 
[  671.447417][ T8427] jfs_write_inode: jfs_commit_inode failed!
[  671.467169][T29733] (unnamed net_device) (uninitialized): up delay (2) is not a multiple of miimon (100), value rounded to 0 ms
[  671.490001][T11885] 
[  671.490001][T11885]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  671.490001][T11885] 
[  671.500276][T29733] (unnamed net_device) (uninitialized): down delay (2036) is not a multiple of miimon (100), value rounded to 2000 ms
[  671.515216][T11885] 
[  671.515216][T11885]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  671.515216][T11885] 
[  671.808411][T29780] loop0: detected capacity change from 0 to 128
[  672.807377][T29827] loop4: detected capacity change from 0 to 256
[  673.304492][T29848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7401'.
[  673.328185][T29804] loop0: detected capacity change from 0 to 32768
[  673.350057][T29848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7401'.
[  673.442419][T29804] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  673.477495][T29804] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  673.560670][ T8421] (kworker/u4:11,8421,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  673.636071][T29804] (syz.0.7386,29804,1):ocfs2_read_blocks:239 ERROR: status = -12
[  673.678568][T29804] (syz.0.7386,29804,0):ocfs2_xattr_block_find:2831 ERROR: status = -12
[  673.735130][T29850] batman_adv: batadv0: Interface deactivated: wlan0
[  673.916518][ T5792] ocfs2: Unmounting device (7,0) on (node local)
[  674.019258][T29878] tmpfs: Bad value for 'mpol'
[  674.435564][T29886] loop0: detected capacity change from 0 to 4096
[  674.470245][T29886] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  676.843959][T29992] loop4: detected capacity change from 0 to 8192
[  676.916714][T29992] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  676.942134][T29992] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  677.024341][T29992] REISERFS (device loop4): using ordered data mode
[  677.080694][T29992] reiserfs: using flush barriers
[  677.116939][T29992] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  677.194127][T29992] REISERFS (device loop4): checking transaction log (loop4)
[  677.270491][T29992] REISERFS (device loop4): Using r5 hash to sort names
[  677.319362][T29992] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  678.264875][T30058] 8021q: adding VLAN 0 to HW filter on device bond4
[  678.377782][T30012] loop0: detected capacity change from 0 to 32768
[  678.439375][T30012] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  678.478554][T30012] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  678.512537][T30012] BTRFS info (device loop0): enabling ssd optimizations
[  678.519569][T30012] BTRFS info (device loop0): not using ssd optimizations
[  678.581131][T30012] BTRFS info (device loop0): turning off barriers
[  678.587653][T30012] BTRFS info (device loop0): using free space tree
[  679.231334][ T5792] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  679.410173][T30153] loop2: detected capacity change from 0 to 256
[  679.499023][T30153] FAT-fs (loop2): Directory bread(block 64) failed
[  679.530017][T30153] FAT-fs (loop2): Directory bread(block 65) failed
[  679.570722][T30153] FAT-fs (loop2): Directory bread(block 66) failed
[  679.577422][T30153] FAT-fs (loop2): Directory bread(block 67) failed
[  679.629953][T30153] FAT-fs (loop2): Directory bread(block 68) failed
[  679.636574][T30153] FAT-fs (loop2): Directory bread(block 69) failed
[  679.684320][T30153] FAT-fs (loop2): Directory bread(block 70) failed
[  679.706919][T30153] FAT-fs (loop2): Directory bread(block 71) failed
[  679.750471][T30153] FAT-fs (loop2): Directory bread(block 72) failed
[  679.774800][T30153] FAT-fs (loop2): Directory bread(block 73) failed
[  681.198092][T30174] loop4: detected capacity change from 0 to 32768
[  681.313766][T30174] (syz.4.7465,30174,0):ocfs2_journal_addressable:1991 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  681.313807][T30174] (syz.4.7465,30174,0):ocfs2_check_volume:2488 ERROR: status = -27
[  681.338636][T30174] (syz.4.7465,30174,0):ocfs2_mount_volume:1820 ERROR: status = -27
[  681.349826][T30174] (syz.4.7465,30174,0):ocfs2_fill_super:1178 ERROR: status = -27
[  681.436783][T30238] tmpfs: Bad value for 'mpol'
[  681.464503][T30174] erofs: (device loop4): erofs_read_superblock: cannot find valid erofs superblock
[  681.812399][T30257] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.7483'.
[  681.966305][T30265] IPv6: Can't replace route, no match found
[  681.980026][ T5880] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  682.222671][ T5880] usb 3-1: Using ep0 maxpacket: 8
[  682.269620][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short
[  682.332576][ T5880] usb 3-1: config 8 has an invalid interface number: 255 but max is 0
[  682.367259][ T5880] usb 3-1: config 8 has no interface number 0
[  682.412067][ T5880] usb 3-1: config 8 interface 255 has no altsetting 0
[  682.475100][ T5880] usb 3-1: string descriptor 0 read error: -22
[  682.481784][ T5880] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00
[  682.536741][ T5880] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  682.725466][T30298] netlink: 'syz.4.7489': attribute type 10 has an invalid length.
[  683.063423][ T5880] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.2-1, 00:00:00:00:00:00.
[  683.125039][ T5880] usb 3-1: USB disconnect, device number 27
[  683.340353][T30330] netlink: 'syz.4.7495': attribute type 1 has an invalid length.
[  683.620377][T30345] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  683.810514][T30349] [U] 
[  683.890734][T30356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7500'.
[  683.930094][T30356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  683.972473][T30304] loop0: detected capacity change from 0 to 32768
[  684.000649][T30304] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.7491 (30304)
[  684.052664][T30304] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  684.093238][T30304] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  684.126052][T30304] BTRFS info (device loop0): using free space tree
[  684.166168][T30367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7504'.
[  684.238887][T30304] BTRFS info (device loop0): enabling ssd optimizations
[  684.269933][T30304] BTRFS info (device loop0): auto enabling async discard
[  684.569082][ T5792] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  685.823116][T30444] loop0: detected capacity change from 0 to 512
[  685.879458][T30444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  685.903452][T30444] ext4 filesystem being mounted at /1914/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  686.110073][T30444] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  686.129560][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  686.136860][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  686.161312][T30444] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  686.203822][T30444] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.7522: Failed to acquire dquot type 0
[  686.226252][T30465] tipc: Can't bind to reserved service type 2
[  686.372689][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  686.389394][T30472] tmpfs: Bad value for 'mpol'
[  686.543472][T30484] netlink: 'syz.0.7532': attribute type 1 has an invalid length.
[  686.750147][ T5880] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  686.944673][ T5880] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[  686.969966][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.988973][ T5880] usb 5-1: Product: syz
[  686.998420][ T5880] usb 5-1: Manufacturer: syz
[  687.019523][ T5880] usb 5-1: SerialNumber: syz
[  687.042369][ T5880] usb 5-1: config 0 descriptor??
[  687.057003][ T5880] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[  687.468171][ T5880] sonixb 5-1:0.0: Error writing register 01: -71
[  687.490132][ T5880] sonixb: probe of 5-1:0.0 failed with error -71
[  687.520675][ T5880] usb 5-1: USB disconnect, device number 24
[  687.623861][T30498] loop2: detected capacity change from 0 to 32768
[  687.684540][T30498] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  687.763199][   T28] audit: type=1326 audit(2000000062.780:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30540 comm="syz.1.7546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  687.870375][   T28] audit: type=1326 audit(2000000062.780:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30540 comm="syz.1.7546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  687.925885][T30498] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  688.037672][   T28] audit: type=1326 audit(2000000062.830:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30540 comm="syz.1.7546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  688.089857][   T28] audit: type=1326 audit(2000000062.840:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30540 comm="syz.1.7546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  688.131203][T30498] XFS (loop2): Starting recovery (logdev: internal)
[  688.172077][   T28] audit: type=1326 audit(2000000062.840:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30540 comm="syz.1.7546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  688.230106][T30498] XFS (loop2): Ending recovery (logdev: internal)
[  688.465929][ T5789] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  688.513814][T30598] syz.1.7553: attempt to access beyond end of device
[  688.513814][T30598] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0
[  688.570453][T30598] syz.1.7553: attempt to access beyond end of device
[  688.570453][T30598] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0
[  688.614185][T30598] syz.1.7553: attempt to access beyond end of device
[  688.614185][T30598] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0
[  688.662081][T30598] syz.1.7553: attempt to access beyond end of device
[  688.662081][T30598] nbd1: rw=0, sector=18, nr_sectors = 2 limit=0
[  688.730200][T30598] syz.1.7553: attempt to access beyond end of device
[  688.730200][T30598] nbd1: rw=0, sector=30, nr_sectors = 2 limit=0
[  688.763414][T30598] syz.1.7553: attempt to access beyond end of device
[  688.763414][T30598] nbd1: rw=0, sector=36, nr_sectors = 2 limit=0
[  688.799984][T30598] VFS: unable to find oldfs superblock on device nbd1
[  688.812378][T30605] netlink: 'syz.0.7556': attribute type 10 has an invalid length.
[  688.837132][T30605] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7556'.
[  688.879867][T30605] bridge0: port 3(dummy0) entered blocking state
[  688.886456][T30605] bridge0: port 3(dummy0) entered disabled state
[  688.903444][T30605] dummy0: entered allmulticast mode
[  688.934617][T30605] dummy0: entered promiscuous mode
[  688.950878][T30605] bridge0: port 3(dummy0) entered blocking state
[  688.957459][T30605] bridge0: port 3(dummy0) entered forwarding state
[  689.232879][T30620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7558'.
[  689.438026][T30592] loop4: detected capacity change from 0 to 32768
[  690.162582][T30655] x_tables: unsorted entry at hook 2
[  690.507915][T30672] XFS (nullb0): Invalid superblock magic number
[  690.803901][T30692] loop0: detected capacity change from 0 to 256
[  690.828430][T30692] FAT-fs (loop0): "posix" option is obsolete, not supported now
[  691.544258][T30667] loop4: detected capacity change from 0 to 32768
[  691.689669][T30727] loop2: detected capacity change from 0 to 16
[  691.729933][T30727] erofs: (device loop2): mounted with root inode @ nid 36.
[  691.842734][T30727] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  691.866296][T30733] loop0: detected capacity change from 0 to 256
[  691.889950][T30727] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 39 of nid 36
[  692.236134][T30750] syz.1.7596: attempt to access beyond end of device
[  692.236134][T30750] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[  692.285884][T30750] syz.1.7596: attempt to access beyond end of device
[  692.285884][T30750] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0
[  692.332759][T30750] Mount JFS Failure: -5
[  692.347302][T30750] jfs_mount failed w/return code = -5
[  692.787458][T30732] loop4: detected capacity change from 0 to 32768
[  692.807660][T30732] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.7592 (30732)
[  692.863040][T30732] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  692.886423][T30774] bridge_slave_0: entered promiscuous mode
[  692.898654][T30732] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  692.904639][T30774] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  692.925112][T30732] BTRFS info (device loop4): using free space tree
[  693.020058][T30732] BTRFS info (device loop4): enabling ssd optimizations
[  693.027686][T30732] BTRFS info (device loop4): auto enabling async discard
[  693.150123][T30792] loop2: detected capacity change from 0 to 2048
[  693.215931][T30792] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  693.294160][T30792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  693.337408][T11885] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  694.023398][ T5880] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  694.302632][ T5880] usb 5-1: config 0 has no interfaces?
[  694.337784][ T5880] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  694.357564][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.376151][ T5880] usb 5-1: Product: syz
[  694.388010][ T5880] usb 5-1: Manufacturer: syz
[  694.392956][ T5880] usb 5-1: SerialNumber: syz
[  694.470933][ T5880] r8152-cfgselector 5-1: config 0 descriptor??
[  694.581359][T30859] IPVS: length: 4096 != 24
[  694.688593][ T5880] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  694.910714][ T5880] usb 5-1: USB disconnect, device number 25
[  696.359974][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  697.469660][T31005] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7667'.
[  697.486785][T31007] loop4: detected capacity change from 0 to 136
[  697.520158][T31005] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  697.611326][T31007] syz.4.7668: attempt to access beyond end of device
[  697.611326][T31007] loop4: rw=524288, sector=164, nr_sectors = 64 limit=136
[  697.663552][T31007] syz.4.7668: attempt to access beyond end of device
[  697.663552][T31007] loop4: rw=524288, sector=228, nr_sectors = 128 limit=136
[  697.721015][T31007] syz.4.7668: attempt to access beyond end of device
[  697.721015][T31007] loop4: rw=0, sector=164, nr_sectors = 8 limit=136
[  697.799951][   T28] audit: type=1800 audit(2000000072.800:213): pid=31007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7668" name="file0" dev="loop4" ino=1542 res=0 errno=0
[  698.870060][ T5862] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  698.888556][T31063] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  699.071871][ T5862] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  699.089207][ T5862] usb 3-1: config 0 has no interface number 0
[  699.096396][ T5862] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  699.111588][ T5862] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  699.126926][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.147178][ T5862] usb 3-1: Product: syz
[  699.161914][ T5862] usb 3-1: Manufacturer: syz
[  699.189902][ T5862] usb 3-1: SerialNumber: syz
[  699.207628][ T5862] usb 3-1: config 0 descriptor??
[  699.262878][ T5862] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  699.424492][T31090] overlayfs: missing 'lowerdir'
[  699.713713][  T787] usb 3-1: USB disconnect, device number 28
[  699.753022][  T787] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  699.972163][T31123] loop4: detected capacity change from 0 to 2048
[  700.021656][T31123]  loop4: p1 < > p3
[  700.040492][T31123] loop4: p3 size 54016 extends beyond EOD, truncated
[  700.160918][ T5879] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  700.259384][ T6126] udevd[6126]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  700.354227][ T5879] usb 2-1: config 0 has an invalid interface number: 194 but max is 0
[  700.367962][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  700.401811][ T5879] usb 2-1: config 0 has no interface number 0
[  700.422879][ T5879] usb 2-1: too many endpoints for config 0 interface 194 altsetting 233: 59, using maximum allowed: 30
[  700.447613][ T5879] usb 2-1: config 0 interface 194 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 59
[  700.473959][ T5879] usb 2-1: config 0 interface 194 has no altsetting 0
[  700.484558][ T5879] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  700.494259][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.505238][ T5879] usb 2-1: Product: syz
[  700.509465][ T5879] usb 2-1: Manufacturer: syz
[  700.517163][ T5879] usb 2-1: SerialNumber: syz
[  700.531028][ T5879] usb 2-1: config 0 descriptor??
[  700.597150][T31129] loop0: detected capacity change from 0 to 32768
[  700.607019][T31129] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.7701 (31129)
[  700.632736][T31129] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  700.643313][T31129] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  700.652849][T31129] BTRFS info (device loop0): using free space tree
[  700.685212][T31129] BTRFS info (device loop0): enabling ssd optimizations
[  700.697081][T31129] BTRFS info (device loop0): auto enabling async discard
[  700.699985][  T787] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  700.704411][  T788] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  700.775321][ T5879] peak_usb: probe of 2-1:0.194 failed with error 194
[  700.813019][ T5879] usb 2-1: USB disconnect, device number 28
[  700.878725][ T5792] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  700.900404][  T787] usb 3-1: Using ep0 maxpacket: 32
[  700.901773][  T788] usb 5-1: Using ep0 maxpacket: 16
[  700.919682][  T788] usb 5-1: config 0 has an invalid interface number: 163 but max is 0
[  700.921648][  T787] usb 3-1: unable to get BOS descriptor or descriptor too short
[  700.938887][  T788] usb 5-1: config 0 has no interface number 0
[  700.941675][  T787] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  700.952819][  T788] usb 5-1: config 0 interface 163 has no altsetting 0
[  700.960168][  T787] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  700.976159][  T788] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=56.cc
[  700.985324][  T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  700.985368][  T787] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  701.013914][  T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.014894][  T787] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  701.050020][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.058099][  T787] usb 3-1: Product: syz
[  701.060075][  T788] usb 5-1: Product: syz
[  701.066659][  T788] usb 5-1: Manufacturer: syz
[  701.084676][  T788] usb 5-1: SerialNumber: syz
[  701.084676][  T787] usb 3-1: Manufacturer: syz
[  701.115207][  T787] usb 3-1: SerialNumber: syz
[  701.122262][  T788] usb 5-1: config 0 descriptor??
[  701.420815][  T787] usb 3-1: 0:2 : does not exist
[  701.530373][  T787] usb 3-1: USB disconnect, device number 29
[  701.645505][T12220] udevd[12220]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  701.695393][ T5879] usb 5-1: USB disconnect, device number 26
[  701.717254][ T5879] f81534a_ctrl 5-1:0.163: failed to set register 0x116: -19
[  701.731381][ T5879] f81534a_ctrl 5-1:0.163: failed to enable ports: -19
[  702.107213][T31242] vivid-000: =================  START STATUS  =================
[  702.122615][T31242] vivid-000: Generate PTS: true
[  702.148919][T31242] vivid-000: Generate SCR: true
[  702.158604][T31242] tpg source WxH: 1280x720 (HSV)
[  702.172817][T31242] tpg field: 1
[  702.189878][T31242] tpg crop: 1280x720@0x0
[  702.198275][T31242] tpg compose: 16x16@0x0
[  702.217057][T31242] tpg colorspace: 12
[  702.245617][T31242] tpg transfer function: 1/0
[  702.250736][T31242] tpg HSV encoding: 3/0
[  702.257242][T31242] tpg quantization: 2/0
[  702.271787][T31242] tpg RGB range: 0/1
[  702.289988][T31242] vivid-000: ==================  END STATUS  ==================
[  702.696510][T31272] virtiofs: Unknown parameter 'always'
[  703.243764][T31306] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[  703.420008][ T5862] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  703.624701][ T5862] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  703.640421][ T5862] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  703.682158][ T5862] usb 2-1: config 220 has no interface number 2
[  703.699332][ T5862] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  703.717976][T31328] loop4: detected capacity change from 0 to 512
[  703.727549][ T5862] usb 2-1: config 220 interface 0 has no altsetting 0
[  703.753164][T31328] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  703.759820][ T5862] usb 2-1: config 220 interface 76 has no altsetting 0
[  703.780446][T31328] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  703.795471][ T5862] usb 2-1: config 220 interface 1 has no altsetting 0
[  703.826839][ T5862] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  703.830140][T31328] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  703.856893][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.886586][ T5862] usb 2-1: Product: syz
[  703.887454][T31328] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  703.900625][ T5862] usb 2-1: Manufacturer: syz
[  703.905280][ T5862] usb 2-1: SerialNumber: syz
[  703.932383][T31328] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0080]
[  703.940764][T31328] EXT4-fs (loop4): orphan cleanup on readonly fs
[  703.959600][T31328] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.7741: bg 0: block 34: padding at end of block bitmap is not set
[  703.998312][T31328] Quota error (device loop4): write_blk: dquota write failed
[  704.019458][T31328] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  704.053000][T31328] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.7741: Failed to acquire dquot type 1
[  704.095113][T31328] EXT4-fs (loop4): 1 truncate cleaned up
[  704.125845][T31328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  704.147471][ T5862] usb 2-1: selecting invalid altsetting 0
[  704.171937][T31349] netlink: 288 bytes leftover after parsing attributes in process `syz.0.7746'.
[  704.175154][ T5862] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  704.208368][ T5862] usb 2-1: No valid video chain found.
[  704.239040][ T5862] usb 2-1: selecting invalid altsetting 0
[  704.261454][ T5862] usbtest: probe of 2-1:220.1 failed with error -22
[  704.281820][T31328] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  704.290099][T31328] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0080]
[  704.301551][ T5862] usb 2-1: USB disconnect, device number 29
[  704.377607][T11885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  704.727748][T31337] loop2: detected capacity change from 0 to 32768
[  704.847043][T31337] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  704.985281][T31337] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list
[  705.040064][T31337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  705.070508][T31337] OCFS2: Returning error to the calling process.
[  705.100128][T31337] (syz.2.7744,31337,1):ocfs2_find_leaf:1941 ERROR: status = -30
[  705.121550][T31337] (syz.2.7744,31337,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  705.160154][T31337] (syz.2.7744,31337,0):ocfs2_get_clusters:624 ERROR: status = -30
[  705.202858][T31337] (syz.2.7744,31337,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  705.230088][T31337] (syz.2.7744,31337,1):ocfs2_read_virt_blocks:995 ERROR: status = -30
[  705.238399][T31337] (syz.2.7744,31337,1):ocfs2_read_dir_block:511 ERROR: status = -30
[  705.260873][T31337] (syz.2.7744,31337,1):ocfs2_find_dir_space_el:3505 ERROR: status = -5
[  705.284425][T31337] (syz.2.7744,31337,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5
[  705.320314][T31337] (syz.2.7744,31337,1):ocfs2_mknod:298 ERROR: status = -5
[  705.341634][T31337] (syz.2.7744,31337,1):ocfs2_mknod:502 ERROR: status = -5
[  705.348836][T31337] (syz.2.7744,31337,1):ocfs2_mkdir:659 ERROR: status = -5
[  705.425298][ T5789] ocfs2: Unmounting device (7,2) on (node local)
[  705.771734][T31416] bond5: entered allmulticast mode
[  705.815401][T31418] geneve4: entered allmulticast mode
[  706.485345][T31485] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  706.562277][T31491] netlink: 'syz.2.7776': attribute type 10 has an invalid length.
[  706.594781][T31491] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7776'.
[  706.621325][T31491] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  706.931196][T31507] vlan0: entered promiscuous mode
[  706.954408][T31512] tmpfs: Bad value for 'mpol'
[  707.917978][T31555] loop0: detected capacity change from 0 to 4096
[  707.954113][T31555] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  708.229895][T31555] ntfs3: loop0: failed to convert "c46c" to koi8-u
[  709.193690][T31624] loop4: detected capacity change from 0 to 164
[  709.278935][T31624] iso9660: Corrupted directory entry in block 2 of inode 1920
[  709.361282][T31634] xt_hashlimit: overflow, try lower: 0/0
[  709.707653][T31652] loop0: detected capacity change from 0 to 512
[  709.772937][T31652] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  709.800410][T31652] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  709.868526][T31652] System zones: 0-1, 15-15, 18-18, 34-34
[  709.904696][T31652] EXT4-fs (loop0): orphan cleanup on readonly fs
[  709.940264][T31652] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  709.984873][T31652] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  710.074399][T31652] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  710.115706][T31652] EXT4-fs (loop0): 1 truncate cleaned up
[  710.130413][T31652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  710.205941][T31652] fscrypt (loop0, inode 16): Error -61 getting encryption context
[  710.311841][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  710.509528][T31680] loop4: detected capacity change from 0 to 4096
[  710.526074][T31680] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  710.604597][T31680] ntfs3: loop4: Failed to initialize $Extend/$Reparse.
[  710.976821][T31714] gretap1: entered promiscuous mode
[  711.230450][T31730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7850'.
[  711.265501][T31730] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  711.437168][T31739] loop0: detected capacity change from 0 to 1024
[  712.270751][ T5879] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  712.489868][ T5879] usb 3-1: Using ep0 maxpacket: 32
[  712.506688][ T5879] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  712.539934][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.548093][ T5879] usb 3-1: Product: syz
[  712.562491][ T5879] usb 3-1: Manufacturer: syz
[  712.567252][ T5879] usb 3-1: SerialNumber: syz
[  712.840750][ T5879] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[  712.867188][ T5879] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  712.891048][ T5879] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  713.051096][ T5862] usb 3-1: USB disconnect, device number 30
[  713.090681][ T5862] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  713.145732][ T5862] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  713.181742][ T5862] visor 3-1:1.0: device disconnected
[  713.543639][T31855] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  713.669019][T31805] loop4: detected capacity change from 0 to 32768
[  713.950014][ T5862] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  714.049875][T31882] netlink: zone id is out of range
[  714.059972][T31883] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7889'.
[  714.069327][T31882] netlink: del zone limit has 8 unknown bytes
[  714.188865][ T5862] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  714.221651][ T5862] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  714.250867][ T5862] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  714.302750][ T5862] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  714.319011][T31893] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.7893'.
[  714.328075][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.354358][ T5862] usb 2-1: Product: syz
[  714.364485][ T5862] usb 2-1: Manufacturer: syz
[  714.382738][ T5862] usb 2-1: SerialNumber: syz
[  714.436397][ T5862] usb 2-1: config 0 descriptor??
[  714.600093][T31905] netlink: 'syz.4.7897': attribute type 21 has an invalid length.
[  714.621253][T31905] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7897'.
[  714.671260][ T5862] usb 2-1: Found UVC 34.00 device syz (8086:0b5b)
[  714.693633][ T5862] usb 2-1: No valid video chain found.
[  714.735706][ T5862] usb 2-1: USB disconnect, device number 30
[  714.823690][T31922] ieee802154 phy0 wpan0: encryption failed: -90
[  715.364716][T31951] (null): rxe_set_mtu: Set mtu to 4096
[  715.381220][T31951] rdma_rxe: rxe_newlink: failed to add lo
[  715.815563][T31965] loop0: detected capacity change from 0 to 8192
[  715.847481][T31965] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  715.897621][T31965] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  715.933722][T31965] REISERFS (device loop0): using ordered data mode
[  715.940979][T31965] reiserfs: using flush barriers
[  715.973497][T31965] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  716.020626][T31965] REISERFS (device loop0): checking transaction log (loop0)
[  716.334556][T31965] REISERFS (device loop0): Using tea hash to sort names
[  716.365969][T31965] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  717.015088][T32024] netlink: 'syz.1.7933': attribute type 3 has an invalid length.
[  717.048129][T32024] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7933'.
[  717.084174][T32030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7931'.
[  717.423985][T32037] loop2: detected capacity change from 0 to 4096
[  717.604574][T32037] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  717.674266][T32037] ntfs3: loop2: Failed to load $Extend (-22).
[  717.685320][T32060] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7943'.
[  717.710577][T32037] ntfs3: loop2: Failed to initialize $Extend.
[  717.736716][T32060] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes.
[  718.069872][  T787] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  718.282381][  T787] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[  718.302151][  T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.328323][  T787] pwc: Logitech/Cisco VT Camera webcam detected.
[  718.368934][T32093] netlink: 'syz.1.7951': attribute type 2 has an invalid length.
[  718.394932][T32093] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7951'.
[  718.742098][T32110] loop4: detected capacity change from 0 to 8
[  718.750798][  T787] pwc: send_video_command error -71
[  718.756067][  T787] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  718.809901][  T787] Philips webcam: probe of 1-1:127.0 failed with error -71
[  718.825626][   T28] audit: type=1326 audit(2000000093.830:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32113 comm="syz.1.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  718.858577][  T787] usb 1-1: USB disconnect, device number 25
[  718.922266][   T28] audit: type=1326 audit(2000000093.850:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32113 comm="syz.1.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  718.936153][T32110] SQUASHFS error: Failed to read block 0x2fc: -5
[  718.955078][T32110] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  718.963350][T32110] SQUASHFS error: Unable to read directory block [247:26]
[  719.016687][   T28] audit: type=1326 audit(2000000093.850:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32113 comm="syz.1.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5beff915e7 code=0x7ffc0000
[  719.071038][   T28] audit: type=1326 audit(2000000093.850:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32113 comm="syz.1.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5beff9155c code=0x7ffc0000
[  719.129236][   T28] audit: type=1326 audit(2000000093.850:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32113 comm="syz.1.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5beff91494 code=0x7ffc0000
[  719.198355][   T28] audit: type=1326 audit(2000000093.850:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32113 comm="syz.1.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5beff91494 code=0x7ffc0000
[  719.281422][   T28] audit: type=1326 audit(2000000093.850:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32113 comm="syz.1.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5beff8e32a code=0x7ffc0000
[  719.339926][   T28] audit: type=1326 audit(2000000093.850:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32113 comm="syz.1.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  719.383750][   T28] audit: type=1326 audit(2000000093.850:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32113 comm="syz.1.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  719.713438][  T788] IPVS: starting estimator thread 0...
[  719.810092][T32161] IPVS: using max 18 ests per chain, 43200 per kthread
[  719.851725][T32165] (null): rxe_set_mtu: Set mtu to 4096
[  719.857576][T32165] rdma_rxe: rxe_newlink: failed to add lo
[  719.964110][T32172] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7973'.
[  720.350050][  T787] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  720.545413][  T787] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  720.579796][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.608257][  T787] usb 3-1: Product: syz
[  720.620981][  T787] usb 3-1: Manufacturer: syz
[  720.648780][  T787] usb 3-1: SerialNumber: syz
[  720.673518][  T787] usb 3-1: config 0 descriptor??
[  720.703366][  T787] gspca_main: sunplus-2.14.0 probing 055f:c230
[  720.844368][T32222] loop4: detected capacity change from 0 to 512
[  720.951143][T32222] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.7988: inode has both inline data and extents flags
[  720.971394][T32222] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.7988: couldn't read orphan inode 15 (err -117)
[  721.001897][T32222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  721.127643][  T787] usb 3-1: USB disconnect, device number 31
[  721.265125][T11885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  721.573566][T32269] netlink: 'syz.0.7996': attribute type 30 has an invalid length.
[  721.590142][ T5879] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  721.779957][ T5879] usb 2-1: Using ep0 maxpacket: 16
[  721.801871][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  721.825795][ T5879] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00
[  721.864534][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.882042][ T5879] usb 2-1: config 0 descriptor??
[  722.042681][T32283] loop4: detected capacity change from 0 to 4096
[  722.058603][T32283] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  722.136379][ T5879] usbhid 2-1:0.0: can't add hid device: -71
[  722.154242][ T5879] usbhid: probe of 2-1:0.0 failed with error -71
[  722.174407][ T5879] usb 2-1: USB disconnect, device number 31
[  722.200737][T32283] ntfs3: loop4: Failed to initialize $Extend/$Reparse.
[  722.288905][T32308] loop0: detected capacity change from 0 to 512
[  722.334194][T32308] EXT4-fs (loop0): orphan cleanup on readonly fs
[  722.386477][T32308] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.8006: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1)
[  722.443246][T32308] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.8006: Bad quota inode: 4, type: 1
[  722.459244][T32308] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  722.492031][T32308] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  722.507564][T32308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  722.533092][T32308] EXT4-fs error (device loop0): ext4_lookup:1855: inode #2: comm syz.0.8006: 'file0' linked to parent dir
[  722.575151][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  722.737730][T32331] PKCS8: Unsupported PKCS#8 version
[  722.769852][  T787] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  722.980351][  T787] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  723.010411][  T787] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  723.034353][  T787] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  723.056871][  T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.072255][  T787] usb 5-1: Product: syz
[  723.076598][  T787] usb 5-1: Manufacturer: syz
[  723.081932][  T787] usb 5-1: SerialNumber: syz
[  723.196438][T32350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8015'.
[  723.343457][  T787] usb 5-1: cannot find UAC_HEADER
[  723.440659][  T787] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  723.471073][  T787] usb 5-1: USB disconnect, device number 27
[  723.522814][ T6126] udevd[6126]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  723.560610][T32377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8020'.
[  723.600036][T32377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8020'.
[  723.786024][T32392] netlink: 'syz.0.8024': attribute type 11 has an invalid length.
[  723.794849][T32392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8024'.
[  723.910160][ T5862] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  724.082569][T32404] netlink: 372 bytes leftover after parsing attributes in process `syz.0.8028'.
[  724.109925][ T5862] usb 3-1: Using ep0 maxpacket: 32
[  724.125869][ T5862] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  724.168763][ T5862] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  724.186006][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.207513][ T5862] usb 3-1: Product: syz
[  724.221307][ T5862] usb 3-1: Manufacturer: syz
[  724.226185][ T5862] usb 3-1: SerialNumber: syz
[  724.252815][ T5862] usb 3-1: config 0 descriptor??
[  724.258899][T32380] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  724.289085][T32417] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000
[  724.298467][ T5862] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33
[  724.419021][  T787] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  724.628968][  T787] usb 2-1: Using ep0 maxpacket: 32
[  724.654306][  T787] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  724.663971][  T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  724.697592][  T787] usb 2-1: config 0 descriptor??
[  724.720646][T32380] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  724.727239][T32380] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  724.738932][  T787] gspca_main: nw80x-2.14.0 probing 055f:d001
[  724.781194][T32380] vhci_hcd vhci_hcd.0: Device attached
[  724.871921][ T5862] usb 3-1: USB disconnect, device number 32
[  724.871985][    C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  724.881522][T32436] vhci_hcd: connection closed
[  724.923683][T32441] vlan0: entered promiscuous mode
[  724.948355][   T11] vhci_hcd: stop threads
[  724.966965][   T11] vhci_hcd: release socket
[  724.974775][   T11] vhci_hcd: disconnect device
[  724.980645][  T788] vhci_hcd: vhci_device speed not set
[  725.167516][  T787] gspca_nw80x: reg_r err -71
[  725.178931][  T787] nw80x: probe of 2-1:0.0 failed with error -71
[  725.199164][  T787] usb 2-1: USB disconnect, device number 32
[  725.286019][T32473] loop4: detected capacity change from 0 to 16
[  725.367295][T32480] loop0: detected capacity change from 0 to 512
[  725.411550][T32480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  725.434762][T32480] ext4 filesystem being mounted at /2067/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  725.496257][T32480] EXT4-fs error (device loop0): ext4_xattr_block_get:600: inode #15: comm syz.0.8042: corrupted xattr block 33: invalid ea_ino
[  725.528588][T32480] fscrypt (loop0, inode 15): Error -117 getting encryption context
[  725.595395][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  726.478801][T32532] raw_sendmsg: syz.0.8057 forgot to set AF_INET. Fix it!
[  726.885569][T32550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8063'.
[  726.901818][T32552] usb usb8: usbfs: process 32552 (syz.2.8064) did not claim interface 0 before use
[  727.093266][T32498] loop4: detected capacity change from 0 to 40427
[  727.135150][T32498] F2FS-fs (loop4): invalid crc value
[  727.167788][T32498] F2FS-fs (loop4): Found nat_bits in checkpoint
[  727.350138][T32498] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  727.932065][T32598] netlink: 'syz.2.8076': attribute type 4 has an invalid length.
[  727.960138][T32598] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.8076'.
[  729.279838][  T787] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  729.353564][T32672] netlink: 'syz.1.8099': attribute type 46 has an invalid length.
[  729.501153][  T787] usb 5-1: Using ep0 maxpacket: 8
[  729.521077][  T787] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  729.565792][  T787] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  729.586113][  T787] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  729.599873][  T787] usb 5-1: Product: syz
[  729.604115][  T787] usb 5-1: Manufacturer: syz
[  729.639376][  T787] usb 5-1: SerialNumber: syz
[  729.830150][T32658] loop0: detected capacity change from 0 to 32768
[  729.873609][  T787] usb 5-1: Invalid connection information received from device
[  729.938898][T32658] ea_get: invalid extended attribute
[  730.097464][  T787] usb 5-1: USB disconnect, device number 28
[  730.225326][T32713] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed
[  730.544404][T32728] loop2: detected capacity change from 0 to 1024
[  730.576018][T32728] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  730.668234][T32728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  730.881030][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  731.028558][T32725] loop0: detected capacity change from 0 to 32768
[  731.066846][T32725] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  731.152124][T32725] XFS (loop0): Ending clean mount
[  731.258241][ T5792] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  731.371525][T29689] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  731.571935][T29689] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  731.625207][T29689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.666679][T29689] usb 5-1: config 0 descriptor??
[  731.688113][T29689] cp210x 5-1:0.0: cp210x converter detected
[  732.128690][T29689] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71
[  732.160389][T29689] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  732.193151][T29689] usb 5-1: cp210x converter now attached to ttyUSB0
[  732.216515][T29689] usb 5-1: USB disconnect, device number 29
[  732.243108][T29689] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  732.260991][T29689] cp210x 5-1:0.0: device disconnected
[  732.298915][  T351] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8130'.
[  732.477323][   T28] audit: type=1400 audit(2000000107.480:223): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=355 comm="syz.2.8132"
[  732.497727][    C1] vkms_vblank_simulate: vblank timer overrun
[  732.891189][  T372] loop0: detected capacity change from 0 to 1024
[  732.926789][  T372] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  733.259801][ T5862] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  733.471843][ T5862] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  733.485358][ T5862] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  733.505420][ T5862] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  733.526566][ T5862] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  733.548679][ T5862] usb 2-1: config 1 has no interface number 1
[  733.565842][ T5862] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  733.581870][  T417] loop2: detected capacity change from 0 to 8
[  733.597060][ T5862] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  733.648685][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.679300][ T5862] usb 2-1: Product: syz
[  733.694350][ T5862] usb 2-1: Manufacturer: syz
[  733.699048][ T5862] usb 2-1: SerialNumber: syz
[  733.980079][  T787] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  733.980943][ T5862] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  734.025197][ T5862] usb 2-1: MIDIStreaming interface descriptor not found
[  734.143711][ T5862] usb 2-1: USB disconnect, device number 33
[  734.199414][  T787] usb 1-1: config 0 has no interfaces?
[  734.218623][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  734.219180][  T787] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  734.300857][  T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.338968][  T787] usb 1-1: Product: syz
[  734.343749][  T787] usb 1-1: Manufacturer: syz
[  734.348452][  T787] usb 1-1: SerialNumber: syz
[  734.408773][  T787] r8152-cfgselector 1-1: config 0 descriptor??
[  734.657718][  T787] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  734.941856][  T787] usb 1-1: USB disconnect, device number 26
[  735.065575][  T512] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.8169'.
[  735.595456][  T539] netlink: 'syz.1.8178': attribute type 10 has an invalid length.
[  735.628153][  T539] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.8178'.
[  735.659932][  T539] openvswitch: netlink: Flow key attr not present in new flow.
[  735.715434][  T550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8181'.
[  735.914903][  T560] bridge5: the hash_elasticity option has been deprecated and is always 16
[  736.142489][  T574] netlink: 300 bytes leftover after parsing attributes in process `syz.4.8188'.
[  736.753287][  T606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8199'.
[  736.790748][  T606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8199'.
[  736.810487][  T606] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8199'.
[  737.011615][  T618] loop0: detected capacity change from 0 to 24
[  737.051152][  T618] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  737.077357][  T618] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  737.357524][  T629] gretap1: entered allmulticast mode
[  737.621311][  T644] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8209'.
[  737.639126][  T646] ubi31: attaching mtd0
[  737.654299][  T646] ubi31: scanning is finished
[  737.669339][  T646] ubi31: empty MTD device detected
[  737.754116][  T610] loop4: detected capacity change from 0 to 32768
[  737.791898][  T610] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  737.845955][  T646] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  737.860165][ T5879] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  737.877297][  T646] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  737.912324][  T646] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  737.936462][  T610] XFS (loop4): Ending clean mount
[  737.944098][  T646] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  737.969834][  T646] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  737.990080][  T646] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  737.998235][  T646] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2656862127
[  738.008830][  T646] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  738.027906][  T663] ubi31: background thread "ubi_bgt31d" started, PID 663
[  738.054646][ T5879] usb 2-1: Using ep0 maxpacket: 8
[  738.091936][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  738.123337][ T5879] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[  738.153468][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.175735][ T5879] usb 2-1: Product: syz
[  738.190619][ T5879] usb 2-1: Manufacturer: syz
[  738.195287][ T5879] usb 2-1: SerialNumber: syz
[  738.199209][T11885] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  738.221630][ T5879] usb 2-1: config 0 descriptor??
[  738.235542][ T5879] cdc_phonet 2-1:0.0: skipping garbage
[  738.249910][ T5879] cdc_phonet 2-1:0.0: invalid descriptor buffer length
[  738.269248][ T5879] cdc_phonet: probe of 2-1:0.0 failed with error -22
[  738.474537][  T668] loop2: detected capacity change from 0 to 8192
[  738.486592][ T5879] usb 2-1: USB disconnect, device number 34
[  738.518716][  T668] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  738.539887][  T668] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  738.606938][  T668] REISERFS (device loop2): using ordered data mode
[  738.613762][  T668] reiserfs: using flush barriers
[  738.639953][  T668] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  738.659113][  T668] REISERFS (device loop2): checking transaction log (loop2)
[  738.931757][  T668] REISERFS (device loop2): Using tea hash to sort names
[  738.957985][  T668] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  739.450249][   T28] audit: type=1400 audit(2000000114.460:224): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=713 comm="syz.1.8223"
[  739.593999][  T725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8225'.
[  741.542435][  T815] loop2: detected capacity change from 0 to 256
[  741.934993][  T792] loop4: detected capacity change from 0 to 32768
[  742.053967][  T792] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  742.158676][  T857] (null): rxe_set_mtu: Set mtu to 1024
[  742.167996][  T857] xfrm0 speed is unknown, defaulting to 1000
[  742.194334][  T857] xfrm0 speed is unknown, defaulting to 1000
[  742.230867][  T857] xfrm0 speed is unknown, defaulting to 1000
[  742.246762][  T792] XFS (loop4): Ending clean mount
[  742.280228][  T792] XFS (loop4): Quotacheck needed: Please wait.
[  742.329926][T29689] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  742.409801][  T792] XFS (loop4): Quotacheck: Done.
[  742.488256][T11885] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  742.533174][T29689] usb 1-1: Using ep0 maxpacket: 8
[  742.551258][T29689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  742.584960][T29689] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  742.632623][T29689] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  742.665317][T29689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.701041][T29689] usb 1-1: Product: syz
[  742.714580][T29689] usb 1-1: Manufacturer: syz
[  742.738803][T29689] usb 1-1: SerialNumber: syz
[  742.772954][T29689] usb 1-1: config 0 descriptor??
[  742.967041][  T857] infiniband syz1: set down
[  742.975215][ T5879] xfrm0 speed is unknown, defaulting to 1000
[  742.989118][  T857] infiniband syz1: added xfrm0
[  743.013580][  T857] syz1: qp#16 rxe_init_rq: Unable to allocate recv queue
[  743.064430][  T857] syz1: rxe_create_qp: returned err = -12
[  743.119999][  T857] infiniband syz1: Couldn't create ib_mad QP1
[  743.127448][  T857] infiniband syz1: Couldn't open port 1
[  743.190588][  T857] RDS/IB: syz1: added
[  743.195864][  T857] smc: adding ib device syz1 with port count 1
[  743.220570][  T857] smc:    ib device syz1 port 1 has pnetid 
[  743.228147][ T5879] xfrm0 speed is unknown, defaulting to 1000
[  743.258435][  T857] xfrm0 speed is unknown, defaulting to 1000
[  743.297452][ T5879] usb 1-1: USB disconnect, device number 27
[  743.459990][  T910] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8271'.
[  743.544711][  T915] netlink: 'syz.2.8272': attribute type 11 has an invalid length.
[  743.554285][  T915] netlink: 212832 bytes leftover after parsing attributes in process `syz.2.8272'.
[  743.684977][  T857] xfrm0 speed is unknown, defaulting to 1000
[  744.029424][  T940] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8278'.
[  744.037103][  T942] loop2: detected capacity change from 0 to 8
[  744.111373][  T942] overlayfs: failed to resolve 'fscontext=system_u': -2
[  744.146553][  T857] xfrm0 speed is unknown, defaulting to 1000
[  744.456112][  T960] loop0: detected capacity change from 0 to 1764
[  744.771955][  T857] xfrm0 speed is unknown, defaulting to 1000
[  744.960988][  T985] loop2: detected capacity change from 0 to 1764
[  745.899670][ T1049] loop0: detected capacity change from 0 to 8192
[  745.931155][ T1049] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  745.970387][ T1049] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  745.980566][ T1049] REISERFS (device loop0): using ordered data mode
[  745.988194][ T1049] reiserfs: using flush barriers
[  745.996683][ T1049] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  746.014380][ T1049] REISERFS (device loop0): checking transaction log (loop0)
[  746.026782][ T1070] sctp: [Deprecated]: syz.2.8304 (pid 1070) Use of int in max_burst socket option deprecated.
[  746.026782][ T1070] Use struct sctp_assoc_value instead
[  746.043992][ T1049] REISERFS (device loop0): Using r5 hash to sort names
[  746.051848][ T1049] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  746.875578][ T1054] loop4: detected capacity change from 0 to 32768
[  746.929173][ T1054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.8300 (1054)
[  747.005120][ T1054] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  747.046404][ T1054] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  747.092999][ T1054] BTRFS info (device loop4): using free space tree
[  747.420036][ T1054] BTRFS info (device loop4): enabling ssd optimizations
[  747.427068][ T1054] BTRFS info (device loop4): auto enabling async discard
[  747.442226][ T1146] 9pnet_fd: p9_fd_create_unix (1146): problem connecting socket: ./file0: -111
[  747.506643][ T1150] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8322'.
[  747.566310][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  747.573076][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  748.082954][ T1170] netlink: 209860 bytes leftover after parsing attributes in process `syz.1.8330'.
[  748.103528][T11885] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  748.859944][ T1204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8340'.
[  749.346307][ T1236] netlink: 'syz.0.8349': attribute type 2 has an invalid length.
[  749.644977][   T28] audit: type=1326 audit(2000000124.660:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1249 comm="syz.2.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca658f6c9 code=0x7ffc0000
[  749.724831][   T28] audit: type=1326 audit(2000000124.660:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1249 comm="syz.2.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca658f6c9 code=0x7ffc0000
[  749.810752][   T28] audit: type=1326 audit(2000000124.660:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1249 comm="syz.2.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fbca658f6c9 code=0x7ffc0000
[  749.880852][   T28] audit: type=1326 audit(2000000124.660:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1249 comm="syz.2.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca658f6c9 code=0x7ffc0000
[  749.903234][    C1] vkms_vblank_simulate: vblank timer overrun
[  749.975103][   T28] audit: type=1326 audit(2000000124.660:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1249 comm="syz.2.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca658f6c9 code=0x7ffc0000
[  750.076470][   T28] audit: type=1400 audit(2000000125.020:230): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=1265 comm="syz.1.8360"
[  751.069958][ T1330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8378'.
[  751.340937][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8381'.
[  751.363154][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8381'.
[  751.392213][ T1347] xt_cgroup: path and classid specified
[  751.399558][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8381'.
[  751.421066][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8381'.
[  751.440985][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8381'.
[  751.470462][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8381'.
[  751.505640][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8381'.
[  751.540354][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8381'.
[  751.686202][ T1356] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[  752.306298][ T1378] loop2: detected capacity change from 0 to 2048
[  752.349957][ T1378] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  752.402139][ T1378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  752.420280][ T1386] loop0: detected capacity change from 0 to 1024
[  752.448910][ T1386] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  752.894437][ T1408] loop2: detected capacity change from 0 to 164
[  752.934549][ T1408] Unable to read rock-ridge attributes
[  753.004693][   T28] audit: type=1326 audit(2000000128.020:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.1.8402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  753.054312][   T28] audit: type=1326 audit(2000000128.040:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.1.8402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  753.079656][ T1416] loop4: detected capacity change from 0 to 1764
[  753.123409][   T28] audit: type=1326 audit(2000000128.100:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.1.8402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  753.222143][   T28] audit: type=1326 audit(2000000128.100:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.1.8402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  753.910878][T29689] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  754.067184][ T1470] netlink: 'syz.1.8418': attribute type 9 has an invalid length.
[  754.110022][T29689] usb 3-1: Using ep0 maxpacket: 8
[  754.117552][ T1471] loop4: detected capacity change from 0 to 1024
[  754.135934][T29689] usb 3-1: unable to get BOS descriptor or descriptor too short
[  754.155072][T29689] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 255
[  754.175311][T29689] usb 3-1: config 8 interface 0 has no altsetting 0
[  754.189938][T29689] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  754.231720][T29689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.258598][T29689] usb 3-1: Product: syz
[  754.267885][T29689] usb 3-1: Manufacturer: syz
[  754.280184][T29689] usb 3-1: SerialNumber: syz
[  754.293413][ T1445] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  754.573366][T29689] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  754.609835][T29689] usb 3-1: selecting invalid altsetting 0
[  754.775704][T29689] usb 3-1: USB disconnect, device number 33
[  754.917302][  T478] udevd[478]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  755.149910][ T1539] netlink: 'syz.0.8429': attribute type 3 has an invalid length.
[  755.157719][ T1539] __nla_validate_parse: 91 callbacks suppressed
[  755.157735][ T1539] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8429'.
[  755.172465][ T1542] xt_ipcomp: unknown flags 12
[  755.849849][ T5862] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  755.860194][T16973] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  755.964250][ T1580] loop4: detected capacity change from 0 to 4096
[  756.045260][T16973] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  756.061829][T16973] usb 3-1: config 0 has no interface number 0
[  756.078351][T16973] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  756.097936][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  756.107279][T16973] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  756.130389][ T5862] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  756.137058][T16973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.159294][T16973] usb 3-1: Product: syz
[  756.159937][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  756.170119][T16973] usb 3-1: Manufacturer: syz
[  756.179563][T16973] usb 3-1: SerialNumber: syz
[  756.189951][ T5862] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  756.214534][ T1580] ntfs3: loop4: ino=9, attr_set_size
[  756.222294][T16973] usb 3-1: config 0 descriptor??
[  756.230812][ T1567] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  756.253690][T16973] usb-storage 3-1:0.20: USB Mass Storage device detected
[  756.261576][ T5862] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  756.284141][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.286009][T16973] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  756.310079][ T5862] usb 1-1: Product: syz
[  756.338521][ T5862] usb 1-1: Manufacturer: syz
[  756.350430][ T5862] usb 1-1: SerialNumber: syz
[  756.373499][ T5862] usb 1-1: config 0 descriptor??
[  756.391646][ T5862] ums-isd200 1-1:0.0: USB Mass Storage device detected
[  756.574507][T16973] scsi host1: usb-storage 3-1:0.20
[  756.587632][ T1603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8444'.
[  756.621389][ T5862] scsi host2: usb-storage 1-1:0.0
[  756.673367][ T5862] usb 1-1: USB disconnect, device number 28
[  756.732707][ T1620] netlink: 'syz.4.8445': attribute type 8 has an invalid length.
[  756.758474][ T1620] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8445'.
[  756.895143][T16973] usb 3-1: USB disconnect, device number 34
[  757.045987][ T1643] dlm: no locking on control device
[  757.131997][ T1649] netlink: 'syz.1.8450': attribute type 16 has an invalid length.
[  757.154707][ T1649] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.8450'.
[  757.344245][ T1652] loop4: detected capacity change from 0 to 4096
[  757.441428][ T1652] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[  757.476998][ T1652] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[  757.821099][ T8429] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22.
[  757.853469][T11885] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[  757.879840][T11885] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  757.886869][T11885] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[  757.933745][ T1109] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22.
[  757.998941][ T1682] ip6t_rpfilter: unknown options
[  759.514670][   T28] audit: type=1326 audit(2000000134.530:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1752 comm="syz.1.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  759.590957][   T28] audit: type=1326 audit(2000000134.530:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1752 comm="syz.1.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  759.613251][    C1] vkms_vblank_simulate: vblank timer overrun
[  759.679928][   T28] audit: type=1326 audit(2000000134.580:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1752 comm="syz.1.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  759.741732][   T28] audit: type=1326 audit(2000000134.580:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1752 comm="syz.1.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  759.764190][    C1] vkms_vblank_simulate: vblank timer overrun
[  759.871295][   T28] audit: type=1326 audit(2000000134.580:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1752 comm="syz.1.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beff8f6c9 code=0x7ffc0000
[  759.893595][    C1] vkms_vblank_simulate: vblank timer overrun
[  760.069934][T29689] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  760.163105][ T1741] loop2: detected capacity change from 0 to 32768
[  760.209948][ T5880] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  760.220106][ T1741] ERROR: (device loop2): dbAllocNext: Corrupt dmap page
[  760.220106][ T1741] 
[  760.270710][T29689] usb 5-1: Using ep0 maxpacket: 32
[  760.281261][T29689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  760.309121][T29689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  760.319503][T29689] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  760.335560][T29689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  760.357923][T29689] usb 5-1: config 0 descriptor??
[  760.373420][T29689] hub 5-1:0.0: USB hub found
[  760.402391][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  760.419813][ T5880] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  760.437684][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  760.454522][ T5880] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  760.470578][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.478689][ T5880] usb 2-1: Product: syz
[  760.484266][ T5880] usb 2-1: Manufacturer: syz
[  760.489409][ T5880] usb 2-1: SerialNumber: syz
[  760.498308][ T5880] usb 2-1: config 0 descriptor??
[  760.587191][T29689] hub 5-1:0.0: 1 port detected
[  760.781417][ T5880] usb 2-1: USB disconnect, device number 35
[  760.800660][T29689] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  760.807085][T29689] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  760.842318][T29689] usbhid 5-1:0.0: can't add hid device: -71
[  760.848398][T29689] usbhid: probe of 5-1:0.0 failed with error -71
[  760.911172][T29689] usb 5-1: USB disconnect, device number 30
[  761.028639][ T1826] loop0: detected capacity change from 0 to 164
[  761.138709][ T5792] iso9660: Corrupted directory entry in block 2 of inode 1920
[  761.161795][ T5792] ISOFS: unable to read i-node block
[  761.167609][ T5792] ISOFS: unable to read i-node block
[  761.349166][ T1824] loop2: detected capacity change from 0 to 32768
[  761.367565][ T1824] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.8493 (1824)
[  761.434609][ T1824] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  761.464868][ T1824] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  761.521577][ T1824] BTRFS info (device loop2): using free space tree
[  761.744885][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  761.779881][ T1824] BTRFS info (device loop2): enabling ssd optimizations
[  761.787041][ T1824] BTRFS info (device loop2): auto enabling async discard
[  761.839966][  T787] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  761.976410][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.032316][  T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  762.052600][  T787] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  762.078966][  T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024
[  762.100211][  T787] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  762.133352][  T787] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  762.150078][  T787] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  762.172218][  T787] usb 2-1: Manufacturer: syz
[  762.182007][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.213675][ T5789] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  762.240709][  T787] usb 2-1: config 0 descriptor??
[  762.247672][ T1844] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  762.303999][  T787] smsusb:smsusb_probe: board id=9, interface number 0
[  762.348249][  T787] smsusb:siano_media_device_register: media controller created
[  762.407435][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.414849][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.422264][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.429714][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.437100][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.444509][    C1] vkms_vblank_simulate: vblank timer overrun
[  762.454434][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.462337][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.469686][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.477020][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.484344][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.492268][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.499581][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.506849][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.514121][    C1] vkms_vblank_simulate: vblank timer overrun
[  762.522937][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.540064][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.547429][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.554748][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.562119][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.569477][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.576815][    C1] vkms_vblank_simulate: vblank timer overrun
[  762.606735][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.614096][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.621359][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.628610][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.635917][    C1] vkms_vblank_simulate: vblank timer overrun
[  762.642701][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.650090][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.657473][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.664829][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.672156][    C1] vkms_vblank_simulate: vblank timer overrun
[  762.678048][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.689258][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.696656][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.704190][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.711548][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.718997][    C1] vkms_vblank_simulate: vblank timer overrun
[  762.725891][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.733683][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.741007][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.748361][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.755677][    C1] vkms_vblank_simulate: vblank timer overrun
[  762.764055][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.771413][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.778743][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.786078][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.793433][    C1] vkms_vblank_simulate: vblank timer overrun
[  762.800034][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.807376][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.814714][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.822030][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.829392][    C1] vkms_vblank_simulate: vblank timer overrun
[  762.836575][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.843923][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.851226][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.858549][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.865969][    C1] vkms_vblank_simulate: vblank timer overrun
[  762.872761][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.880170][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.887560][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.894959][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.902264][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.910072][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.917341][    C1] vkms_vblank_simulate: vblank timer overrun
[  762.924862][  T787] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[  762.933524][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.933629][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.933724][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.956483][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.963827][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.971141][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.978451][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.985941][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  762.993244][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.000505][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.007777][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.015082][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.022053][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.029380][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.036709][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.044036][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.051356][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.058686][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.066008][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.072440][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.079787][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.087108][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.094432][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.101759][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.109069][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.116396][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.123747][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.131062][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.138364][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.147935][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.155278][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.162613][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.169917][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.177228][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.184529][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.191850][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.199157][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.206517][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.213021][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.220364][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.227697][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.235013][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.242331][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.249715][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.256084][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.263395][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.270683][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.277945][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.285208][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.292467][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.299924][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.306201][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.313605][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.320992][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.328328][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.335655][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.342987][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.350315][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.357873][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.364918][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.372268][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.379687][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.387012][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.394332][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.401675][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.409010][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.416348][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.423738][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.432627][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.442572][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.449947][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.457271][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.464585][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.472010][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.479340][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.486670][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.493997][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.501320][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.509077][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.514583][ T1890] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  763.516395][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.531289][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.532264][ T1890] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  763.538599][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.553125][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.560470][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.567784][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.575341][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.580112][ T1890] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  763.584073][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.595752][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.595836][ T1890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  763.603179][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.614593][ T1890] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  763.617572][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.625563][ T1890] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  763.631810][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.646122][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.654113][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.661467][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.668919][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.676237][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.683581][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.691011][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.698400][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.705310][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.712676][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.720023][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.728064][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.735449][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.742769][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.749249][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.756604][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.764086][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.771617][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.778945][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.786543][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.793845][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.801201][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.808606][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.815196][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.822525][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.829852][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.837158][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.839319][ T1898] netlink: 'syz.4.8510': attribute type 1 has an invalid length.
[  763.844528][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.844599][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.866837][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.874174][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.880566][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.888009][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.895338][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.902674][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.910011][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.917362][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.925786][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.932157][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.939493][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.946832][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.954147][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.959862][ T1898] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.8510'.
[  763.961485][    C1] vkms_vblank_simulate: vblank timer overrun
[  763.977550][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.984907][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.992234][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  763.999576][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.006926][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.008097][ T1904] tmpfs: Bad value for 'mpol'
[  764.014244][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.026355][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.033702][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.041050][    C1] vkms_vblank_simulate: vblank timer overrun
[  764.047365][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.055184][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.062531][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.069859][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.077183][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.084519][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.091938][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.099367][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.106701][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.114082][    C1] vkms_vblank_simulate: vblank timer overrun
[  764.121051][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.128649][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.135975][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.143389][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.150724][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.157975][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.165231][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.172493][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.179758][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.187320][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.194665][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.201978][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.209302][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.216633][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.223972][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.231303][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.238642][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.245959][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.253796][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.261234][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.268566][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.275895][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.283478][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.290801][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.298402][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.305726][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.313355][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.320957][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.328301][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.335631][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.342953][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.350280][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.357627][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.364963][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.372740][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.376217][ T1886] wg1 speed is unknown, defaulting to 1000
[  764.380057][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.380122][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.380181][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.380238][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.380294][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.380350][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.380412][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.380716][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.444164][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.451457][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.458799][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.466047][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.473554][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.481006][  T787] smsmdtv:smscore_set_device_mode: mode detect failed -22
[  764.489899][  T787] smsmdtv:smscore_start_device: set device mode failed , rc -22
[  764.497672][  T787] smsusb:smsusb_init_device: smscore_start_device(...) failed
[  764.505743][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.513517][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.520831][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.528141][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.535489][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.542809][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.553802][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.561192][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.568567][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.575928][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.583313][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.590704][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  764.598184][  T787] ------------[ cut here ]------------
[  764.605117][  T787] WARNING: CPU: 1 PID: 787 at kernel/workqueue.c:668 __cancel_work_timer+0x4e2/0x520
[  764.615320][  T787] Modules linked in:
[  764.619483][  T787] CPU: 1 PID: 787 Comm: kworker/1:2 Not tainted syzkaller #0
[  764.627168][  T787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  764.637347][  T787] Workqueue: usb_hub_wq hub_event
[  764.642541][  T787] RIP: 0010:__cancel_work_timer+0x4e2/0x520
[  764.648515][  T787] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b9 d9 2e 00 0f 0b e9 ed fd ff ff e8 ad d9 2e 00 e8 c8 17 18 09 e9 8e fe ff ff e8 9e d9 2e 00 <0f> 0b 43 80 3c 2e 00 0f 85 04 ff ff ff e9 07 ff ff ff e8 a7 16 18
[  764.668796][  T787] RSP: 0018:ffffc90003a66b40 EFLAGS: 00010283
[  764.675088][  T787] RAX: ffffffff8156b5f2 RBX: ffff8880796d6448 RCX: 0000000000100000
[  764.683191][  T787] RDX: ffffc90017c7a000 RSI: 000000000005b3a7 RDI: 000000000005b3a8
[  764.691283][  T787] RBP: ffffc90003a66c58 R08: ffff8880796d644f R09: 1ffff1100f2dac89
[  764.699312][  T787] R10: dffffc0000000000 R11: ffffed100f2dac8a R12: 0000000000000000
[  764.707464][  T787] R13: dffffc0000000000 R14: 1ffff1100f2dac89 R15: 0000000000000000
[  764.715612][  T787] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  764.724720][  T787] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  764.731443][  T787] CR2: 0000001b2eb15ff8 CR3: 000000000cb30000 CR4: 00000000003506e0
[  764.739485][  T787] Call Trace:
[  764.742915][  T787]  <TASK>
[  764.745914][  T787]  ? cancel_work_sync+0x20/0x20
[  764.750899][  T787]  ? usb_unlink_urb+0xa0/0xa0
[  764.755651][  T787]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  764.761697][  T787]  ? _raw_spin_unlock+0x40/0x40
[  764.766634][  T787]  ? smscore_putbuffer+0x81/0x120
[  764.771793][  T787]  smsusb_term_device+0xcb/0x220
[  764.776814][  T787]  smsusb_probe+0x1708/0x1da0
[  764.781680][  T787]  ? s2255_print_cfg+0x1b0/0x1b0
[  764.786699][  T787]  ? smsusb1_detectmode+0x260/0x260
[  764.792073][  T787]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  764.798037][  T787]  ? pm_runtime_enable+0x192/0x2a0
[  764.803302][  T787]  ? __pm_runtime_set_status+0x8ab/0xb80
[  764.809058][  T787]  usb_probe_interface+0x5a4/0xb00
[  764.814336][  T787]  ? usb_register_driver+0x3d0/0x3d0
[  764.819788][  T787]  really_probe+0x25b/0xb40
[  764.824542][  T787]  ? pm_runtime_barrier+0x14b/0x1c0
[  764.829913][  T787]  __driver_probe_device+0x18c/0x330
[  764.835273][  T787]  driver_probe_device+0x4f/0x420
[  764.840536][  T787]  __device_attach_driver+0x2ca/0x520
[  764.845997][  T787]  bus_for_each_drv+0x24b/0x2d0
[  764.851011][  T787]  ? coredump_store+0x90/0x90
[  764.855751][  T787]  ? bus_find_device+0x320/0x320
[  764.860815][  T787]  __device_attach+0x2b5/0x400
[  764.865636][  T787]  ? device_attach+0x20/0x20
[  764.870338][  T787]  ? kobject_uevent_env+0x363/0x8c0
[  764.875608][  T787]  ? do_raw_spin_unlock+0x121/0x230
[  764.880972][  T787]  bus_probe_device+0x180/0x260
[  764.885892][  T787]  device_add+0x85b/0xc20
[  764.890359][  T787]  usb_set_configuration+0x1a79/0x20c0
[  764.895926][  T787]  usb_generic_driver_probe+0x8d/0x150
[  764.901552][  T787]  usb_probe_device+0x13d/0x280
[  764.906491][  T787]  ? usb_register_device_driver+0x230/0x230
[  764.912537][  T787]  really_probe+0x25b/0xb40
[  764.917119][  T787]  ? pm_runtime_barrier+0x14b/0x1c0
[  764.922476][  T787]  __driver_probe_device+0x18c/0x330
[  764.927839][  T787]  driver_probe_device+0x4f/0x420
[  764.933034][  T787]  __device_attach_driver+0x2ca/0x520
[  764.938477][  T787]  bus_for_each_drv+0x24b/0x2d0
[  764.943478][  T787]  ? coredump_store+0x90/0x90
[  764.948235][  T787]  ? bus_find_device+0x320/0x320
[  764.953354][  T787]  __device_attach+0x2b5/0x400
[  764.958517][  T787]  ? device_attach+0x20/0x20
[  764.963288][  T787]  ? kobject_uevent_env+0x363/0x8c0
[  764.968826][  T787]  ? do_raw_spin_unlock+0x121/0x230
[  764.974195][  T787]  bus_probe_device+0x180/0x260
[  764.979602][  T787]  device_add+0x85b/0xc20
[  764.984140][  T787]  usb_new_device+0xa31/0x1630
[  764.988985][  T787]  ? usb_disconnect+0x8a0/0x8a0
[  764.993970][  T787]  ? _raw_spin_unlock_irq+0x23/0x50
[  764.999400][  T787]  ? lockdep_hardirqs_on+0x98/0x150
[  765.004802][  T787]  hub_event+0x2962/0x49c0
[  765.009342][  T787]  ? hub_post_resume+0x120/0x120
[  765.014766][  T787]  ? read_lock_is_recursive+0x20/0x20
[  765.020282][  T787]  ? _raw_spin_unlock_irq+0x23/0x50
[  765.025558][  T787]  ? process_scheduled_works+0x957/0x15b0
[  765.031430][  T787]  ? process_scheduled_works+0x957/0x15b0
[  765.037221][  T787]  process_scheduled_works+0xa45/0x15b0
[  765.043013][  T787]  ? assign_work+0x400/0x400
[  765.048466][  T787]  ? assign_work+0x39e/0x400
[  765.053210][  T787]  worker_thread+0xa55/0xfc0
[  765.058099][  T787]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  765.064198][  T787]  ? _raw_spin_unlock+0x40/0x40
[  765.070096][  T787]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  765.076547][  T787]  kthread+0x2fa/0x390
[  765.081032][  T787]  ? pr_cont_work+0x560/0x560
[  765.085820][  T787]  ? kthread_blkcg+0xd0/0xd0
[  765.090648][  T787]  ret_from_fork+0x48/0x80
[  765.095131][  T787]  ? kthread_blkcg+0xd0/0xd0
[  765.099865][  T787]  ret_from_fork_asm+0x11/0x20
[  765.104715][  T787]  </TASK>
[  765.107785][  T787] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  765.115100][  T787] CPU: 1 PID: 787 Comm: kworker/1:2 Not tainted syzkaller #0
[  765.122520][  T787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  765.132621][  T787] Workqueue: usb_hub_wq hub_event
[  765.137703][  T787] Call Trace:
[  765.141003][  T787]  <TASK>
[  765.144082][  T787]  dump_stack_lvl+0x16c/0x230
[  765.148800][  T787]  ? show_regs_print_info+0x20/0x20
[  765.154041][  T787]  ? load_image+0x3b0/0x3b0
[  765.158613][  T787]  panic+0x2c0/0x710
[  765.162566][  T787]  ? bpf_jit_dump+0xd0/0xd0
[  765.167133][  T787]  ? ret_from_fork_asm+0x11/0x20
[  765.172139][  T787]  __warn+0x2e0/0x470
[  765.176142][  T787]  ? __cancel_work_timer+0x4e2/0x520
[  765.181450][  T787]  ? __cancel_work_timer+0x4e2/0x520
[  765.186834][  T787]  report_bug+0x2be/0x4f0
[  765.191188][  T787]  ? __cancel_work_timer+0x4e2/0x520
[  765.196491][  T787]  ? __cancel_work_timer+0x4e2/0x520
[  765.201786][  T787]  ? __cancel_work_timer+0x4e4/0x520
[  765.207332][  T787]  handle_bug+0xcf/0x120
[  765.211629][  T787]  exc_invalid_op+0x1a/0x50
[  765.216188][  T787]  asm_exc_invalid_op+0x1a/0x20
[  765.221056][  T787] RIP: 0010:__cancel_work_timer+0x4e2/0x520
[  765.226967][  T787] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b9 d9 2e 00 0f 0b e9 ed fd ff ff e8 ad d9 2e 00 e8 c8 17 18 09 e9 8e fe ff ff e8 9e d9 2e 00 <0f> 0b 43 80 3c 2e 00 0f 85 04 ff ff ff e9 07 ff ff ff e8 a7 16 18
[  765.246682][  T787] RSP: 0018:ffffc90003a66b40 EFLAGS: 00010283
[  765.252769][  T787] RAX: ffffffff8156b5f2 RBX: ffff8880796d6448 RCX: 0000000000100000
[  765.260768][  T787] RDX: ffffc90017c7a000 RSI: 000000000005b3a7 RDI: 000000000005b3a8
[  765.268758][  T787] RBP: ffffc90003a66c58 R08: ffff8880796d644f R09: 1ffff1100f2dac89
[  765.276744][  T787] R10: dffffc0000000000 R11: ffffed100f2dac8a R12: 0000000000000000
[  765.284737][  T787] R13: dffffc0000000000 R14: 1ffff1100f2dac89 R15: 0000000000000000
[  765.292730][  T787]  ? __cancel_work_timer+0x4e2/0x520
[  765.298041][  T787]  ? cancel_work_sync+0x20/0x20
[  765.302902][  T787]  ? usb_unlink_urb+0xa0/0xa0
[  765.307599][  T787]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  765.313508][  T787]  ? _raw_spin_unlock+0x40/0x40
[  765.318379][  T787]  ? smscore_putbuffer+0x81/0x120
[  765.323419][  T787]  smsusb_term_device+0xcb/0x220
[  765.328392][  T787]  smsusb_probe+0x1708/0x1da0
[  765.333101][  T787]  ? s2255_print_cfg+0x1b0/0x1b0
[  765.338081][  T787]  ? smsusb1_detectmode+0x260/0x260
[  765.343345][  T787]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  765.349260][  T787]  ? pm_runtime_enable+0x192/0x2a0
[  765.354402][  T787]  ? __pm_runtime_set_status+0x8ab/0xb80
[  765.360064][  T787]  usb_probe_interface+0x5a4/0xb00
[  765.365215][  T787]  ? usb_register_driver+0x3d0/0x3d0
[  765.370522][  T787]  really_probe+0x25b/0xb40
[  765.375067][  T787]  ? pm_runtime_barrier+0x14b/0x1c0
[  765.380285][  T787]  __driver_probe_device+0x18c/0x330
[  765.385594][  T787]  driver_probe_device+0x4f/0x420
[  765.390637][  T787]  __device_attach_driver+0x2ca/0x520
[  765.396207][  T787]  bus_for_each_drv+0x24b/0x2d0
[  765.401070][  T787]  ? coredump_store+0x90/0x90
[  765.405761][  T787]  ? bus_find_device+0x320/0x320
[  765.410722][  T787]  __device_attach+0x2b5/0x400
[  765.415597][  T787]  ? device_attach+0x20/0x20
[  765.420242][  T787]  ? kobject_uevent_env+0x363/0x8c0
[  765.425461][  T787]  ? do_raw_spin_unlock+0x121/0x230
[  765.430682][  T787]  bus_probe_device+0x180/0x260
[  765.435548][  T787]  device_add+0x85b/0xc20
[  765.439904][  T787]  usb_set_configuration+0x1a79/0x20c0
[  765.445432][  T787]  usb_generic_driver_probe+0x8d/0x150
[  765.450914][  T787]  usb_probe_device+0x13d/0x280
[  765.455787][  T787]  ? usb_register_device_driver+0x230/0x230
[  765.461730][  T787]  really_probe+0x25b/0xb40
[  765.466251][  T787]  ? pm_runtime_barrier+0x14b/0x1c0
[  765.471472][  T787]  __driver_probe_device+0x18c/0x330
[  765.476863][  T787]  driver_probe_device+0x4f/0x420
[  765.481909][  T787]  __device_attach_driver+0x2ca/0x520
[  765.487392][  T787]  bus_for_each_drv+0x24b/0x2d0
[  765.492272][  T787]  ? coredump_store+0x90/0x90
[  765.496961][  T787]  ? bus_find_device+0x320/0x320
[  765.501923][  T787]  __device_attach+0x2b5/0x400
[  765.506703][  T787]  ? device_attach+0x20/0x20
[  765.511312][  T787]  ? kobject_uevent_env+0x363/0x8c0
[  765.516533][  T787]  ? do_raw_spin_unlock+0x121/0x230
[  765.521857][  T787]  bus_probe_device+0x180/0x260
[  765.526746][  T787]  device_add+0x85b/0xc20
[  765.531116][  T787]  usb_new_device+0xa31/0x1630
[  765.535924][  T787]  ? usb_disconnect+0x8a0/0x8a0
[  765.540794][  T787]  ? _raw_spin_unlock_irq+0x23/0x50
[  765.546005][  T787]  ? lockdep_hardirqs_on+0x98/0x150
[  765.551218][  T787]  hub_event+0x2962/0x49c0
[  765.555699][  T787]  ? hub_post_resume+0x120/0x120
[  765.560662][  T787]  ? read_lock_is_recursive+0x20/0x20
[  765.566057][  T787]  ? _raw_spin_unlock_irq+0x23/0x50
[  765.571280][  T787]  ? process_scheduled_works+0x957/0x15b0
[  765.577167][  T787]  ? process_scheduled_works+0x957/0x15b0
[  765.582903][  T787]  process_scheduled_works+0xa45/0x15b0
[  765.588495][  T787]  ? assign_work+0x400/0x400
[  765.593116][  T787]  ? assign_work+0x39e/0x400
[  765.597729][  T787]  worker_thread+0xa55/0xfc0
[  765.602344][  T787]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  765.608257][  T787]  ? _raw_spin_unlock+0x40/0x40
[  765.613124][  T787]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  765.619053][  T787]  kthread+0x2fa/0x390
[  765.623140][  T787]  ? pr_cont_work+0x560/0x560
[  765.627846][  T787]  ? kthread_blkcg+0xd0/0xd0
[  765.632454][  T787]  ret_from_fork+0x48/0x80
[  765.636889][  T787]  ? kthread_blkcg+0xd0/0xd0
[  765.641494][  T787]  ret_from_fork_asm+0x11/0x20
[  765.646298][  T787]  </TASK>
[  765.649628][  T787] Kernel Offset: disabled
[  765.654075][  T787] Rebooting in 86400 seconds..