last executing test programs:

2m54.098765936s ago: executing program 5 (id=248):
socket(0x2, 0x2, 0x1)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})

2m53.694823874s ago: executing program 5 (id=252):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x2a8, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)

2m53.27858288s ago: executing program 5 (id=256):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1200001, &(0x7f00000002c0)=ANY=[@ANYBLOB="696f636861727365743d63703836392c63726561746f723df8f080672c636f6465706167653d63703737352c71756965742c71756965742c71756965742c756d61736b3d30303030303030303030303030303030303030343030302c007ec0212425aaf2e6bac53117b7492104059db6d7d1c9d07da4c1f091f7c738a75d2b63d07a65023e23f84023258dca5ecc2b67f985f6ec8e373807ae61c8c58b9afda749e1c20e99165d8f24e2b70d7e1e871893dda8bc57be68bdd580bcaa9feba1e45408a82a9ef2e6b62300d9376ba0eab3c96c6c7d73fb20bec785fc56327cb538c2ba0b546713070f577dd950bd84e673a6e466a8ecb9873ef739fd3df1920215b380a028e62f5ab56864847591ce8faa15dec86998e4627d9c75205cb4b46c4b7d9a2ba68fe656d4878e17c9f896a03d8f4a0af5064b5f0481584334"], 0x42, 0x33c, &(0x7f0000001f80)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESOCT, @ANYBLOB="b1f1563f8cf9b3df43707e277e3870d9bbeca08c7c9e5ebdd62801631c9f6ff697c8ea4da0047f1529a0c7", @ANYRESOCT, @ANYRESDEC, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x0, &(0x7f0000000080))

2m52.776300405s ago: executing program 5 (id=263):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x58b, &(0x7f00000006c0)="$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")
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003640)='./file0\x00', &(0x7f0000003680)='ext4\x00', 0x0, 0x0)

2m51.985767407s ago: executing program 5 (id=273):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x4000000)

2m49.367327597s ago: executing program 5 (id=302):
r0 = socket(0x1e, 0x4, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)

2m48.72630071s ago: executing program 32 (id=302):
r0 = socket(0x1e, 0x4, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)

2m21.578781439s ago: executing program 4 (id=567):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)

2m21.07858774s ago: executing program 4 (id=572):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

2m20.672925533s ago: executing program 4 (id=579):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000100))

2m20.322487241s ago: executing program 4 (id=583):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x58b, &(0x7f00000006c0)="$eJzs3U1oHGUfAPD/zGbffuV90xfeF1R6KCpUKN0k/dDqqb2KhUIPghcNm20o2WRLNtEm5JDei9iDqPRSb3rwqHjwIF48Cp68KJ6FYoNC04OuzH6kabJJk5pkbeb3g9mdZ57Z/T/PzP5ndx5m2ABy62j2kEY8HREXk4iBFXV90a482lpvaXG+fH9xvpxEo3Hp1ySSiLi3OF/urJ+0nw9FxEJEPBUR3xQjjqdr49Zn58ZHqtXKVLs8OD1xdbA+O3fiysTIWGWsMnnqpZfPnD19Zvjk8MqX3W+sLBW31tcbP91898Z3r96++elnRxbK748kcS7623Ur+7GdWtukGOdWLT+9E8F6KOl1A3gshXaeZ6n0/xiIQjvru2kM7GrTgB3W2BfRAHIqkf+QU53fAdn5b2fazd8fd863TkCyuEvtqVXT1xqbiP3Nc5ODvyUPnZlk55uHd7Oh7EkL1yNiqK9v7ec/aX/+Ht/QdjSQHfX1+daOWrv/0+XjT3Q5/vR3xk7/ps7xb2nN8e9B/MI6x7+Lm4zxxxs/f7Ru/OsRz3SNnyzHT7rETyPirU3Gv/X6l2fXq2t8HHEsusfvSDYeHx68fKVaGWo9do3x1bEjr2zU/4PrxG+N2e5vfs102/5dhrW7+uLbz59d2CD+C89tvP+7bf8DEfHeJuP/994nr61Xd+d6cjf7FbDV/Z9EMW53f8tk9WDwi+eO/rjJpgIAAAAAAAAAAFuQNq9lS9LS8nyalkqte3j/FwfTaq0+ffxybWZytHXN2+Eopp0rrQZa5SQrD7evx+2UT64qnyq0AxYONMulcq062uO+AwAAAAAAAAAAAAAAAAAAwD/FoVX3//9eaN7/v/rvqoG9av2//Ab2OvkP+fVw/ic9awew+3z/Q2415D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74uKFC9nUuL84X87Ko32zM+O1t0+MVurjpYmZcqlcm7paGqvVxqqVUrk28aj3S2q1q0MxOXNtcLpSnx6sz869OVGbmez8p2iluOM9AgAAAAAAAAAAAAAAAAAAgCdPf3NK0lJEpM35NC2VIv4dEYeTSC5fqVaGIuI/EfFDobgvKw/3utEAAAAAAAAAAAAAAAAAAACwx9Rn58ZHqtXKVE5m+rayckQsbG8zsnfc8quK7X211aDZa3q+wc08oTO9PS4BAAAAAAAAAAAAAAAAAEAePbjp99Hrfh8HIuLP3WgWAAAAAAAAAAAAAAAAAAAA5Ez6SxIR2XRs4Pn+1bX/SpYKzeeIeOfWpQ+ujUxPTw1ny+8uL5/+sL385CbCJa2nhW3vB/AonTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQH12bnykWq1M7eBMr/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Dj+CgAA//8+jtaV")
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003640)='./file0\x00', &(0x7f0000003680)='ext4\x00', 0x0, 0x0)

2m19.558634377s ago: executing program 4 (id=591):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000340)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x101, 0x7, 0x5, 0x3, 0xdc0c]}, &(0x7f00000003c0)=0x78)

2m16.59562507s ago: executing program 4 (id=621):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='nonumtail=0,nonumtail=0,nfs,uni_xlate=0,utf8=0,quiet,shortname=lower,uni_xlate=1,rodir,iocharset=utf8,utf8=0,utf8=0,check=strict,codepage=775,iocharset=cp864,nonumtail=0,dmask=000000000000000000004,uni_xlate=0,\x00\x00\x00'], 0x6, 0x2b8, &(0x7f0000000640)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

2m15.736300144s ago: executing program 33 (id=621):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='nonumtail=0,nonumtail=0,nfs,uni_xlate=0,utf8=0,quiet,shortname=lower,uni_xlate=1,rodir,iocharset=utf8,utf8=0,utf8=0,check=strict,codepage=775,iocharset=cp864,nonumtail=0,dmask=000000000000000000004,uni_xlate=0,\x00\x00\x00'], 0x6, 0x2b8, &(0x7f0000000640)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

36.595857914s ago: executing program 3 (id=1719):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x6786}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

36.319763332s ago: executing program 3 (id=1724):
r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000140)='iocharset\xe4\x95\xd5O[\xe5H\xcf\xe3=\xf2\xc2&\xa3\x80[fg\xf1\xd0\x05\xf7\xc7\x83\xa4\xdb\xe7\xcf\xcb70B\x0e\xc2o\xa8\xe9\xbd\xa3\xf4\x1c\x10j\xe2\xcb\xb3\xf4\xcd\t:9E\xe9Js=\x97\x9dT\x84t\x8b\xac\x9c\xdc\x8dJ\xd9\xef}\xb0b\xf7\x1aeW\xa2\xeb\xb8;\xb8\xdb\x99D\xc4R', 0x0)

36.239921317s ago: executing program 3 (id=1725):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x2, 0xa, 0x2})

35.888683757s ago: executing program 3 (id=1731):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@dmask={'dmask', 0x3d, 0x1}}, {@sys_tz}, {}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@zero_size_dir}, {@gid}, {@keep_last_dots}, {}, {@sys_tz}, {@errors_remount}, {@errors_continue}]}, 0x4, 0x152f, &(0x7f00000037c0)="$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")
mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0)

35.107510121s ago: executing program 3 (id=1742):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x0, 0x0, "", [@generic="05"]}, 0x14}], 0x1}, 0x0)

34.491907889s ago: executing program 3 (id=1753):
r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
pwritev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="5b93", 0x2}], 0x1, 0x101, 0x118)

33.920484134s ago: executing program 34 (id=1753):
r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
pwritev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="5b93", 0x2}], 0x1, 0x101, 0x118)

6.09320327s ago: executing program 6 (id=2032):
r0 = io_uring_setup(0x171f, &(0x7f0000000040)={0x0, 0xc8a1, 0x80, 0x8, 0xc1})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5.679982904s ago: executing program 6 (id=2037):
r0 = socket(0x22, 0x2, 0x3)
setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000140)=0xfffffffe, 0x4)

5.301338452s ago: executing program 6 (id=2039):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x1c880, &(0x7f0000000000)=ANY=[], 0xf9, 0x6075, &(0x7f00000084c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)

4.710638152s ago: executing program 2 (id=2044):
r0 = socket(0x40000000015, 0x5, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffc}, 0x1c)

4.372063318s ago: executing program 2 (id=2048):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020060000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400020000008001240fffffffa0d000300686173683a6e657400000000050004"], 0x5c}}, 0x0)

4.04250533s ago: executing program 2 (id=2052):
getgroups(0x2, &(0x7f00000000c0)=[0xee00, <r0=>0xee00])
setregid(0xffffffffffffffff, r0)

3.71514774s ago: executing program 0 (id=2055):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000006800013175001000fdffff7f00000000000000000c000200010000001500000014000c80068001008100000008000300040000000600030001000000cbda"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

3.607053206s ago: executing program 2 (id=2057):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2200006, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0xc32, &(0x7f0000000e00)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

3.296919993s ago: executing program 0 (id=2060):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0)

2.838346486s ago: executing program 0 (id=2064):
r0 = epoll_create(0x8)
epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080), &(0x7f00000000c0), 0x8)

2.769102176s ago: executing program 6 (id=2065):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}}, 0xc000)

2.748538131s ago: executing program 2 (id=2066):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x625c, &(0x7f0000001dc0)="$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")
truncate(&(0x7f00000000c0)='./file1\x00', 0x8fd)

2.710450916s ago: executing program 1 (id=2067):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x2020)

2.493724126s ago: executing program 0 (id=2068):
prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0)
io_uring_setup(0x3819, &(0x7f00000003c0))

2.304211056s ago: executing program 1 (id=2070):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000007c0), 0x40040, 0x0)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000800))

2.219835902s ago: executing program 8 (id=2071):
r0 = syz_open_dev$vim2m(&(0x7f0000000780), 0x83, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000480)={0x12, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9"})

2.088940732s ago: executing program 6 (id=2072):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda0602000028fde80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)

1.979269542s ago: executing program 0 (id=2073):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c8, 0x98, 0x168, 0x98, 0x98, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x81, 0x9}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'vcan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x3]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4, 0x4]}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x3], 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458)

1.934721044s ago: executing program 7 (id=2074):
r0 = socket$kcm(0x2d, 0x2, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000001880)="a2", 0x1}], 0x1)

1.8238832s ago: executing program 8 (id=2075):
r0 = syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/43)

1.657951907s ago: executing program 1 (id=2076):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4011}, 0x24001064)

1.579768884s ago: executing program 0 (id=2077):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="000609000000096509c6"], 0x0, 0x0, 0x0}, 0x0)

1.568883775s ago: executing program 6 (id=2078):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ec, &(0x7f00000051c0)="$eJzs3U+IVVUcB/Dz5o8zKcw8QcighS3chhQtVIYeYZCL9KUQtDAnF0EIMtguwWxEEIwaCaSsQAuG3MgDIUGYEBe1CTRJEFqY4KaVQrtaFO/de968d67vvueojennEzP3nvu759zzHncx35fnvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhDVv194vq09tvHJh4eyWg7MHGsdvzh89EkKldbyS13e/8tqOd3fufn08dph+I9tWq72GzLr+njVWdB1s9uv+eSeEMJoMMJxvXx0ujNq5u784YKlrx/adnj25fdPCmvVTl3bNnyu+dJrGl3sCyyW/r24t3ku11u+h5Ix2u+PWq3Tdoln/9Ib7T14EAHBPNtRbm/afo/mfuO32obSetGtJey5px78Q5jobS5GNu6LXPNel9WWaZy2LCmM955nU8/e/3a6n/ZN2EjXuYZ7dp+aRZrzXPGeS+nLNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRcqb2wday+tTGKxcWzm45OHugcfzm/NEjIVRbxytZufL07RMjY9e3/fDRja9PvrT66t/Deb+4Hek4OVyPOxsnQ9jTUbkVh/1jIoR6d6HVDF8UC++1drbGAgAAAI+TZ1q/h9rtLA6OdrUrrTRZaf0XZWHx2rF9p2dPbt+0sGb91KVd8+eWPl69x3i1u47XblcXfyodwTjG33S8xXo8dX9hnHLpiGmeP//Ltq/K+hfyf7U8/8d3Tv4HAADgfsj/6Tjl+uX/PZufnSnrX8j/67ouWcj/ccYx/w+FpeV/AAAAeJQ97PxfK4xTrl/+f/Hwm9+X9S/k/w2D5f+RzmnHgz/HCe+dDGFDv6kDAAAAPcT/77740ULM69knB2lev/rNU7+WjVfI/7XB8v/oA31VAAAAwP3YXr3xfFm9kP/rg+X/sYc6awAAAOBefF75ZLasXsj/04Pl/5X5Nl/5kHX6Mf4rhM8mQxhv7sxkhZ/C3MvtAgAAAPCAxJz+6cffXi47r5D/Z8qf/x+fdBDX/3c9/6+w/r+jkD31b7MHAwAAAPAkKq7nj4/Hz765oNf37w+6/n/i5u3vyq5fyP+HBsv/w53bB/n9fwAAALAE/7fv/3urME65fs///2von4tl/Qv5f26w/B+3qzpf3sX4/hyeDGFtcyd/muCZeLm9SaEx2lFoqSc9dsYeeaEx1lFomUl6vDAZwnPNnUNJYXUszCWFOxN54VRSuBwL+f3QLpxNChfjnXZiIp9uWjgfC/kCi0ZcQbGqvSQi6fFnrx7Nwl17/Na+OAAAwBMlhuc8y452N0MaZRuVfies7HfCUL8ThvudMJKckJ7Y63iY7i7E4x/uOP1lKFHI/6cGy//xrViRbXqt/w9x/X/+vYbt9f/TsVBNCo1YqKdPDKjHa2Rh91i8RrWe97iztl0AAACAx1r8XGB4mecBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7J3rzFyXfUBwM8+Z3e93l0TpASKYAElIZW8Xm+wpZAgbKAEgQSbynyoUISNvUk33iTGDwmHh9YOQaAUNSkpCShQuxUUf0lWVIhHgVhRcVQ1VaNUQk5T8qYREtTkoVTUQa5m7z2zd87deTjedbzp7yd558z8z/POw3PuvXMuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/8ORW95xXrP4uy976Mc/vef9nz/4mbnbn/zOl24JYXL+8Y4s3HH+ia91V45/5GcHHv/mNzasefhkb14uj4dV1T+d+Z0vxFqfWR3CDzpC6E4DawezQE9+fzDW96bBENaEhUCtxNRAViJtOPy8P4RDYSFQq+pH/SEMFgJbHr7/vq9UE3f0h3BhCKGStvHLStZGfxq4qDcLDKSBG7uzwP+cytQCP+zMAnDG4puh9qKfm6zPMLJ4uQavv54l69irKx1eV0yMNM73283L3KmC3vSByTN62krVsSxKb4+j3m0r4N1W2s63edqKX6TybyinFkKV0Llj6ppt+2b2xkc6w9hYV6Oalul5fuS5z24/nfSKeR3GDowsyevwzq8/9blvPX3l3Xd98QNX3/vi86Nn2s3jhU1aTC+3SshfcyvmeYw2+TxZAW+/0rekUV+6QghffuJv/6RZvDT/H2k+/48v53jbWZc71npyKJubx0cGY+LEUDY3BwAAgBVjJew1nf3O5RPN6ivN/0fbO/4fD/nnk/lstEdD2DSfuHk4hAvmH88CR2JznxwO4a3zqcn6wOYkcDSEN8wnLqlVlZToiyVGk8CzQ3lgUxI4FgOTSeDbMXBbEvhCDMwlge0xcDQJvDcGwnT9OP54KB9H24H+GNiabcS5eBbCC0OxtWRbPVqrCgAAYInks8Oe+ruFcx3ONEOcXs71t8oQz8BumKGS1JDOYGvTqoY1dLeqobNVDbVxzzYffqnmjlY1l07D6KjPsPuzv/uz0ERp/j/efP5fWaQjHaXj/yFcNf835u7MIzO1+NbJugwAAADAGVi1+YYtzeKl+f+m9s7/j/tEugqZw4NxN8TO4RDG6wNZtZeXA9lR71V5AAAAAFaC2vH42rHw6fw2O0U7nU+X80+eZv544H/Tovl//cF3Xdesv6X5/2R75/8P1N9mnTgWe/HV4RD6CoEHYi+rgXmjMfDEe+oD+fiPxQ1wa6wqPzGhVtWtscTWGBhPAocalXioVuKC+kD+ZNUav7k2jum8RCEAAAAAZ13cHRCPy8fz/x/Zd/x9zcqV5v9bT+/8//l5cOn0/plVIazrDqEr/WHAgwPZwoAxMNiRJ346kNXVlVZ1YCCEK6oDS6t6Ml//vztdY/Dh/qyqGLjgbd997qJq4u/6Q1hXDPzi44c3VBN7k0Ct8Y/1h/CW6mjTxr/flzXekzZ+Z18Iby4EalV9si+EamO9aVX3V/LrGKRV3VsJ4bxCoFbVxkoI+wMAK1T8r3RH8cE9+2/auW1mZmr3MibiPvz+cM30zNTY9htndlQa9GlH0ue6ZYwOlMfUcDmkxKP5EkVHXr5sqJ107XeC48W+5PvxSycO5vfjd6Ge+XFO9NTdvTQd8jveXm4iFL5JvVpDHihWsvAkluqP+XvDqtC3b8/U7rFPb9u7d/f67G+72Seyv3FQ2bZan26rgcX6dg68PC4uVrJu7/W71u3Zf9Pa6eu3XTt17dQNE+Pv3LBxw8T4xo3rqqMaz/62GOrFi1WdDPXU4bM/1Dd2Fyo5G58aEhISKy0xe/PhVc0+fkrz/13N5//xUyd+8ufrMzQ6/j8SD/Nnjy8c5t8aA4faPf4/0uhofu3EgNEkMBsDsw7zAwAA8NoQd0fG3Y5xr3Xv4Ut/06xcaf4/297v/5do/f/a0vUfarTM/yWxxHij9f/TZf5r6//PNlr/P13mv7b+/6FXYf3/fbVAsklesP4/AADwWnD21v9vubx/eoGAUoaWy/unFwgoZWi5jH+7Fwg47fX/J657/JnQRGn+f1t7838L9wMAAMC54/Z/eu4tzeKl+f+h9ub/Z3/9v9Do/P/RRoHJRgsDWv8PAACAFarR+n+nhv/iY83Kleb/c+3N/+NpF511uWOtJ4eyNe1CuqbdiaHaTwYAAABgZegMY2M9beatWxl18ytv85F8KdBm6aIHLv+va5vVV5r/H21v/l/3u4w7v/7U57719JV3n7zrix+4+t4Xnx9dOP4PAAAALJ9290sAAAAAAAAAAAAAAACvvn2f+NcTzeKl3/+Hq+Yfb/T7/3jdv/j7gtfX5Y61tl7/L7+/5cP37J9fsvDBoRDeXgzsPLhzTcivzX9xMXDf1ZecX00cTEv85LH3/qqa+EQa+ODa171UTVyRBLbGRRLfkAbiVRVfWp0E4vKK/54G4vaYSwO9eeDLq7NxdKTb6teD2bbqSLfVfwyGMFwI1LbVDwazNjrSAd6RBGoD/FQaiAP8SB7oTHt1z6qsVzEwGIv+zaqsVwAAnLPit8CecM30zNR4/Aofb9/YXX8b1S1ZdqBcbVebzT+aL0125OXLhtpJd6XfRReuNd4TKtUhrC99XS1m6Zgf5dLU0mLTvb7BkFut9rZcm6638Yj6sxGNbb9xZkdPy4Ff2jrLRHfLLOtLk51ils75TdpGLW30pY0Rtblt2uhyvN8Zxsa6klzvisGRUKfVK6Ld3+sX1/lr9Coo5jkw0/OHZvWV5v8j7c3/K8VxvZRfDGA2XlnvL4ct8w8AAADL68ubf39X/PeT4Y/+Z7O8pfn/aHvz/7hjLD8UnO3tOBqv/3/zcAjzl9YfyQJHYnOfHA7hrfOpyVgiu6D+h2KJ8SxwJO4wuSSW2DpZX1VfDMwlgWeH8sDRJHAsBvK9FN8N+a6c24dC2DCfuqq+xK5YYiQJfDQGRpPAWAyMJ4HVMbApCfxmdR6YTAL/EgNhun5b/cPqfFsBAACcjnye1VN/N6TzvLnuVhk6WmUYaJWhs1WGSqsMjUYR738vZugpHo/PM8SHetJa+5NaShnixfBPu1+lDOGh+pxpwVLTtTNJRupzxgxb5g6uDk2U5v/j7c3/B+pvs9aPxfn/wvX/ssADsXtfjaeOj8bAE++pD+Q7Bo7Fye6ttaom8xL5pP3WWGJTDIwmgV0xsCkJbL0qDxw6vz6Qz7Rrjd9ca3w6L1EIAAAAwFkXdxDE3TRx/v/ffX/462blSvP/Te3N/2N7q4qNfSHW+szqEH7QsdCbWmDtYBaI+zEG48/j3zQYwprCDo5aiamBrERv0nD4eX/2C/XetKof9Wc/Poj3tzx8/31fqSbu6A/hwsLel1obv6xkbfSngYt6s8BAGrixOwvEPT+1wA87swCcsdpewfiCyk91qRlZvFyD199r5Zqg6fBK+0AXybfYb66WSyV9IN+nWnN6T1upOpZF6e1x1LttJb7bRrzbil+k8m8opxZCldC5Y+qabftm9sZHir9kLVmm57n4K9V20kvwOpx95b1trZJ2YDz5+BhfvNzir8OOWN2dX3/qc996+sq77/riB66+98XnR9vuRgPxh8I3XPe/Q8cLm3e5VUL+mltxnyeTPk9W4n8Do562EMItcxe80Cxemv9Ptjf/705u5/0+bsw9wyG8o7BxH4yb/33D2edgIZB9Sp5XDmSH3J8eavjJCQAAAEuttrujtr9gOr/NTghP58nl/JOnmT/ur9i0aP52+/2ZCy/8x2bx0vx/a/P5f1/STcf/Hf9nmTj+v6hzfVd0X/rA7Bntii5Vx7Jw/H9R5/q7zfH/RTn+7/j/Yhz/b8Hx/0Wd609b6VvSLl+6Qgj937/8oWbx0vx/V3vzf+v/Lb5oX239v62N1v/b1Wj9v1nr/wEAAMuqwUJz6TyvtHpfKUO6el8pQ8sFAlsuMWj9v9Ne/2/grz7+u9BEaf4/2978P74cVhVbXynr/41e1aCq22Jgl4UBAQAAOBc12kEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAq+vZ4wPvbxZ/92UP/fin97z/8wc/M3f7k9/50i0hTM8/3pGFO84/8bXuyvGP/OzA49/8xoY1D5+s5OV68ts/qssdaz05FMKhwiODMXFiqHpnIbDlw/fs764mHhwK4e3FwM6DO9dUE98eCuHiYuC+qy85v5o4mJb4yWPv/VU18Yk08MG1r3upmrgiD3Sk3b17ddbdjrS7X1kdwnAhUOvudavrq6q1cWUe6Ezb+PvBrI0YGIxF7xrM2oiBmVhiui+Edd0hdKVV/XMlq6orrerHlayqrrSqz1dCuCKE0J1W9VhvVlV3OvJ/682qioEL3vbd5y6qJg71hrCuGPjFxw9vqCY+lQRqjf9pbwhvqb5k0sa/15M13pM2fkdPCG8OIfSmJV7szkr0piWe7A7hvEKg1vifd4ewP/CaED98dhQf3LP/pp3bZmamdi9jojdvqz9cMz0zNbb9xpkdlaRPjXQU0qcOlOOdbY790ec+u716e+Tly4baSXfn5XrmuzzRU3f30qXqfccy9T72a6BYycLzUao/5u8Nq0Lfvj1Tu8c+vW3v3t3rs7/tZp/I/nbl0WxbrV+qbdWuV7qtLi5Wsm7v9bvW7dl/09rp67ddO3Xt1A0T4+/csHHDxPjGjeuqoxrP/i7FUA+X413LPNQ3dhcqORsfABISEist0Vn36TZ+rv+XXfqiv9DRnlCZ/4AuTSuKWTrmR7kUg97cPL6Ugy5NSUojWl+aOJSyTLTOcmlpMrGQpT/LMv+9rjQ5LNbUOb9J4/3OMDbW8H+6kfq7xc3320U2b7seyTddu2kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//19BHGg==")
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x2)

1.535558886s ago: executing program 7 (id=2079):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@gettaction={0x18, 0x5a, 0x1, 0x0, 0xffff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0)

1.375960836s ago: executing program 8 (id=2080):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x101200, 0x0)
ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000080))

1.314137912s ago: executing program 1 (id=2081):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000003f000701feffffff00000000037c000004004280140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.148376628s ago: executing program 7 (id=2082):
r0 = syz_open_dev$dri(&(0x7f0000000580), 0x10000000007fc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x40000082, 0x6})

981.299114ms ago: executing program 8 (id=2083):
syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2200409, &(0x7f0000000400)=ANY=[], 0xfe, 0x15f, &(0x7f0000000200)="$eJzs0M1qGmEUxvH/O/M6ClVsqQUptArd2ErBD9pdKU6pVKgdaOmmK8FOP0CxVGjdVSnddSF066JJtiGQK9DoIiToJrmJbNwFsjTMjEkI8Q5yfrt5znueA/Py2SyjuPCi1fz23W233Y/pt061/O5oOCx5uQWd7Uvz4P2oBF/QjDTMe+DFkxh8+tpwjXqr4X3PSxAG7Bt+HgLiZ/fshKanIU+wn3kA4zv+O4OrmVsk5O/d1WDHgywHLNasoO9WkHl9x4AJSlnLY/dM/lSyqdsKOoPs1ub+m+le5fGj5+7fQrn/MJo0s79gHVtFdiefD83l1mxafe1UnVmxUHhazOUNnhz4hd0++lX0B3xQoL0+A7/PInlfv4ffCv75t+Y7KgaM/584zfD5v+7+NNOgUoN6LRnaqCVuGpgZ7U0WrOBPiKwaCSGEEEIIIYQQQgghhBBCCCGEuO5OAwAA//+/BFIO")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0xb9cbbe05c791f09e)

925.193348ms ago: executing program 1 (id=2084):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x1409, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x10}}, 0x40)

820.779124ms ago: executing program 7 (id=2085):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000001c0)={0xffeffffc, [[0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x80000000], [0x1, 0x4], [0x8, 0x5f7]], '\x00', [{0xfffffffc, 0xfffffffe}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xbb41}], '\x00', 0x300})

536.369055ms ago: executing program 1 (id=2086):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

477.794825ms ago: executing program 7 (id=2087):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x86c4})

470.697913ms ago: executing program 8 (id=2088):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'veth0_to_team\x00', &(0x7f00000004c0)=@ethtool_cmd={0xb, 0xa1, 0x9, 0x7, 0x2, 0x8, 0xff, 0xdb, 0x7c, 0xc5, 0x2, 0x8, 0x5, 0x1, 0x8, 0x7, [0x5, 0x9]}})

46.761309ms ago: executing program 2 (id=2089):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000080)={0x3})

20.000295ms ago: executing program 7 (id=2090):
r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}})

0s ago: executing program 8 (id=2091):
r0 = syz_open_dev$swradio(&(0x7f0000000300), 0x0, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000340)={0x67, 0x5, 0x6aa})

kernel console output (not intermixed with test programs):

dc47fc-10d8-4eed-a562-11a831b3f791
[  182.911176][ T7668] XFS (loop3): Ending clean mount
[  182.953937][ T7668] XFS (loop3): Quotacheck needed: Please wait.
[  183.091181][ T7668] XFS (loop3): Quotacheck: Done.
[  183.107915][ T7705] loop1: detected capacity change from 0 to 4096
[  183.119801][ T7705] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  183.186454][ T7705] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  183.357453][ T7711] loop0: detected capacity change from 0 to 4096
[  183.420702][ T5830] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  183.476759][ T7712] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.771357][ T5838] Bluetooth: hci3: command tx timeout
[  184.025746][ T7722] loop6: detected capacity change from 0 to 1024
[  184.231359][ T1306] team0 (unregistering): Port device team_slave_1 removed
[  184.259689][ T7722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.397715][ T7722] EXT4-fs error (device loop6): ext4_get_first_dir_block:3552: inode #11: comm syz.6.723: directory missing '..'
[  184.460038][ T1306] team0 (unregistering): Port device team_slave_0 removed
[  184.589492][ T6678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.132668][ T7508] team0: Port device team_slave_1 added
[  185.376301][ T7730] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  185.411879][ T7737] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  185.541127][ T7508] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.601604][ T7508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  185.691160][ T7508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.732182][ T7508] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.732209][ T7508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  185.732255][ T7508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.901137][  T846] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  185.993798][ T7769] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  185.998744][ T7508] hsr_slave_0: entered promiscuous mode
[  186.000559][ T7769] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  186.038537][ T7508] hsr_slave_1: entered promiscuous mode
[  186.061985][ T7508] debugfs: 'hsr0' already exists in 'hsr'
[  186.067765][ T7508] Cannot create hsr debugfs directory
[  186.101077][  T846] usb 7-1: Using ep0 maxpacket: 16
[  186.108732][  T846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.150905][  T846] usb 7-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=58.ab
[  186.189213][  T846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.215184][  T846] usb 7-1: Product: syz
[  186.250958][  T846] usb 7-1: Manufacturer: syz
[  186.256382][  T846] usb 7-1: SerialNumber: syz
[  186.310770][  T846] usb 7-1: config 0 descriptor??
[  186.661460][ T5837] usb 7-1: USB disconnect, device number 3
[  187.156870][ T7763] loop3: detected capacity change from 0 to 32768
[  187.548000][ T7508] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  187.613880][ T7799] loop0: detected capacity change from 0 to 64
[  187.701475][ T7508] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  187.794571][ T7508] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  187.928559][ T7508] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  188.294815][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'.
[  188.788790][ T7828] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16)
[  188.868620][ T7508] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.967740][ T7508] 8021q: adding VLAN 0 to HW filter on device team0
[  189.005361][ T7832] loop0: detected capacity change from 0 to 512
[  189.035321][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.042528][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.082600][ T7832] EXT4-fs: Ignoring removed nomblk_io_submit option
[  189.089265][ T7832] EXT4-fs: Ignoring removed bh option
[  189.141854][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.149157][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.203407][ T7832] EXT4-fs error (device loop0): mb_free_blocks:2014: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  189.221940][ T7832] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.762: corrupted inode contents
[  189.303201][ T7832] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #11: comm syz.0.762: mark_inode_dirty error
[  189.412100][ T7832] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.762: invalid indirect mapped block 1 (level 1)
[  189.478941][ T7832] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.762: corrupted inode contents
[  189.498165][ T7832] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[  189.510671][ T7832] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.762: corrupted inode contents
[  189.541640][ T7832] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.762: mark_inode_dirty error
[  189.581684][ T7832] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[  189.621861][ T7832] EXT4-fs (loop0): 1 truncate cleaned up
[  189.629608][ T7832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.812770][ T7832] EXT4-fs error (device loop0): ext4_find_dest_de:2051: inode #2: block 13: comm syz.0.762: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[  190.017263][ T7808] loop3: detected capacity change from 0 to 32768
[  190.067300][ T7859] loop1: detected capacity change from 0 to 64
[  190.118643][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.180953][ T7808] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  190.258984][ T7508] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.318613][ T7826] loop2: detected capacity change from 0 to 32768
[  190.355134][ T7826] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.759 (7826)
[  190.420141][ T7808] XFS (loop3): Ending clean mount
[  190.529439][ T7826] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  190.577097][ T7826] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  190.801473][ T5830] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  190.847198][ T7894] loop1: detected capacity change from 0 to 512
[  190.957804][ T7826] BTRFS info (device loop2): enabling ssd optimizations
[  190.963966][ T7894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.970488][ T7826] BTRFS info (device loop2): turning on async discard
[  191.030516][ T7894] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.042531][ T7902] loop6: detected capacity change from 0 to 512
[  191.053406][ T7902] EXT4-fs: Ignoring removed nobh option
[  191.094973][ T7902] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  191.101111][ T7826] BTRFS info (device loop2): enabling free space tree
[  191.213124][ T7902] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002]
[  191.274076][ T7902] EXT4-fs (loop6): orphan cleanup on readonly fs
[  191.373513][ T7902] EXT4-fs error (device loop6): ext4_clear_blocks:874: inode #11: comm syz.6.774: attempt to clear invalid blocks 1024 len 1
[  191.478777][ T7902] EXT4-fs (loop6): Remounting filesystem read-only
[  191.513272][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.557203][ T7902] EXT4-fs (loop6): 1 truncate cleaned up
[  191.603125][ T7902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  191.640896][ T5832] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  191.837527][ T7508] veth0_vlan: entered promiscuous mode
[  191.890856][ T7508] veth1_vlan: entered promiscuous mode
[  192.010930][ T6678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  192.085381][ T7508] veth0_macvtap: entered promiscuous mode
[  192.165555][ T7508] veth1_macvtap: entered promiscuous mode
[  192.285363][ T7508] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.399701][ T7508] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.459579][   T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.520917][   T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.678138][   T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.704396][   T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.039469][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.091155][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.214123][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.253921][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.384253][ T7954] loop6: detected capacity change from 0 to 64
[  193.587892][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.794'.
[  194.088786][ T7966] loop7: detected capacity change from 0 to 4096
[  194.145014][ T7966] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  194.342704][ T7976] loop0: detected capacity change from 0 to 4096
[  194.369868][ T7982] loop1: detected capacity change from 0 to 164
[  194.384349][ T7966] ntfs3(loop7): ino=19, mi_enum_attr
[  194.415554][ T7976] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  194.417072][ T7966] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  194.567075][ T7976] ntfs3(loop0): ino=19, mi_enum_attr
[  194.602330][ T7976] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  194.778750][ T7976] ntfs3(loop0): failed to convert "c46c" to iso8859-1
[  194.799960][ T7992] capability: warning: `syz.6.806' uses 32-bit capabilities (legacy support in use)
[  194.881980][ T7976] ntfs3(loop0): ino=20, mi_enum_attr
[  195.411322][ T8005] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  196.453407][ T8040] warning: `syz.6.827' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  196.478750][ T8042] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  196.646577][ T8050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.831'.
[  196.947153][ T8052] bond1: option lp_interval: invalid value (0)
[  196.981224][ T8052] bond1: option lp_interval: allowed values 1 - 2147483647
[  197.007282][ T8052] bond1 (unregistering): Released all slaves
[  197.101109][ T5991] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  197.176121][ T8066] netlink: 'syz.3.839': attribute type 13 has an invalid length.
[  197.218546][ T8066] netlink: 'syz.3.839': attribute type 17 has an invalid length.
[  197.271063][ T5991] usb 3-1: Using ep0 maxpacket: 32
[  197.279038][ T8066] gretap0: refused to change device tx_queue_len
[  197.293168][ T5991] usb 3-1: unable to get BOS descriptor or descriptor too short
[  197.313238][ T8066] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  197.333447][ T5991] usb 3-1: config 128 has an invalid interface number: 127 but max is 3
[  197.349891][ T5991] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  197.361551][ T5991] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4
[  197.391232][ T5991] usb 3-1: config 128 has no interface number 0
[  197.401307][ T5991] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024
[  197.442258][ T5991] usb 3-1: config 128 interface 127 has no altsetting 0
[  197.472603][ T5991] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  197.493168][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.511025][ T5991] usb 3-1: Product: syz
[  197.515260][ T5991] usb 3-1: Manufacturer: syz
[  197.519871][ T5991] usb 3-1: SerialNumber: syz
[  197.543673][ T8057] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  197.813410][  T846] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  197.938693][ T5991] usb 3-1: USB disconnect, device number 7
[  197.991072][  T846] usb 1-1: Using ep0 maxpacket: 8
[  198.006230][  T846] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  198.031447][  T846] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  198.077302][  T846] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  198.120533][ T6410] udevd[6410]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  198.155059][  T846] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  198.201070][  T846] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  198.224273][  T846] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  198.236458][  T846] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  198.291095][  T846] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  198.327846][  T846] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  198.379362][  T846] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  198.434085][  T846] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  198.450340][ T8096] loop3: detected capacity change from 0 to 2048
[  198.459412][  T846] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  198.500661][  T846] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  198.539727][ T8096] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  198.567551][  T846] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  198.601527][  T846] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  198.625674][  T846] usb 1-1: string descriptor 0 read error: -22
[  198.633780][  T846] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  198.671142][   T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  198.687123][  T846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.706081][   T30] audit: type=1800 audit(1762032414.842:35): pid=8096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.853" name="file1" dev="loop3" ino=1367 res=0 errno=0
[  198.823268][  T846] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  198.859792][   T10] usb 7-1: Using ep0 maxpacket: 8
[  198.873539][   T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.894018][   T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  198.943560][   T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  198.972820][   T10] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  199.042757][ T8111] loop2: detected capacity change from 0 to 256
[  199.047712][   T10] usb 7-1: config 1 interface 1 has no altsetting 0
[  199.102950][   T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  199.132860][ T8111] FAT-fs (loop2): Directory bread(block 64) failed
[  199.138357][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.180144][ T5909] usb 1-1: USB disconnect, device number 6
[  199.188202][ T8111] FAT-fs (loop2): Directory bread(block 65) failed
[  199.192271][   T10] usb 7-1: Product: syz
[  199.203465][   T10] usb 7-1: Manufacturer: syz
[  199.208090][   T10] usb 7-1: SerialNumber: syz
[  199.220923][ T8111] FAT-fs (loop2): Directory bread(block 66) failed
[  199.229518][ T8116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.250378][ T8111] FAT-fs (loop2): Directory bread(block 67) failed
[  199.287407][ T8111] FAT-fs (loop2): Directory bread(block 68) failed
[  199.304379][ T8111] FAT-fs (loop2): Directory bread(block 69) failed
[  199.315112][ T8111] FAT-fs (loop2): Directory bread(block 70) failed
[  199.321803][ T8111] FAT-fs (loop2): Directory bread(block 71) failed
[  199.329484][ T8111] FAT-fs (loop2): Directory bread(block 72) failed
[  199.336313][ T8111] FAT-fs (loop2): Directory bread(block 73) failed
[  199.476861][   T10] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[  199.509043][   T10] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  199.521948][   T10] usb 7-1: 2:1 : invalid channels 0
[  199.623117][   T10] usb 7-1: USB disconnect, device number 4
[  199.644803][ T8123] netlink: 'syz.7.865': attribute type 2 has an invalid length.
[  199.690504][ T6410] udevd[6410]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  199.792099][ T8123] : entered promiscuous mode
[  200.201096][ T5934] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  200.384925][ T8138] binder: 8136:8138 ioctl c0046209 0 returned -22
[  200.402046][ T5934] usb 1-1: Using ep0 maxpacket: 32
[  200.409617][ T5934] usb 1-1: config 0 has no interfaces?
[  200.421771][ T5934] usb 1-1: New USB device found, idVendor=33f8, idProduct=01a3, bcdDevice=a9.16
[  200.460769][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.476219][ T5934] usb 1-1: Product: syz
[  200.480409][ T5934] usb 1-1: Manufacturer: syz
[  200.499549][ T5934] usb 1-1: SerialNumber: syz
[  200.526867][ T5934] usb 1-1: config 0 descriptor??
[  200.649040][ T8141] xt_CT: No such helper "snmp_trap"
[  200.852485][ T8120] loop3: detected capacity change from 0 to 32768
[  200.891492][ T8120] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.864 (8120)
[  200.975238][ T8120] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  201.027065][ T8120] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  201.036667][   T10] usb 1-1: USB disconnect, device number 7
[  201.051166][ T5934] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  201.089589][ T8120] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  201.255812][ T5934] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  201.290934][ T5934] usb 2-1: config 0 has no interface number 0
[  201.320595][ T5934] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  201.331660][ T8120] BTRFS info (device loop3): rebuilding free space tree
[  201.351111][ T5934] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  201.375171][ T5934] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  201.384834][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  201.405055][ T5934] usb 2-1: Product: syz
[  201.427769][ T5934] usb 2-1: SerialNumber: syz
[  201.466122][ T5934] usb 2-1: config 0 descriptor??
[  201.522533][ T5934] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input10
[  201.566025][ T8120] BTRFS info (device loop3): disabling free space tree
[  201.596597][ T8120] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  201.677295][ T8120] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  201.752907][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.883'.
[  201.830577][ T8120] BTRFS info (device loop3): setting nodatasum
[  201.855848][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.864313][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.871522][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.878692][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.886030][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.893318][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.900543][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.905036][ T8120] BTRFS info (device loop3): allowing degraded mounts
[  201.907739][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.921653][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.929682][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.943954][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  201.954995][ T5810] usb 2-1: USB disconnect, device number 5
[  201.974774][ T8120] BTRFS info (device loop3): turning on async discard
[  201.981703][ T8120] BTRFS info (device loop3): enabling disk space caching
[  201.992047][ T8120] BTRFS info (device loop3): force clearing of disk cache
[  201.999223][ T8120] BTRFS info (device loop3): force zlib compression, level 3
[  202.015658][ T5810] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  202.156355][ T8195] netlink: 76 bytes leftover after parsing attributes in process `syz.6.886'.
[  202.205514][ T8195] netlink: 76 bytes leftover after parsing attributes in process `syz.6.886'.
[  202.301390][ T8120] BTRFS info (device loop3): balance: start -susage=2..2,limit=2..129
[  202.343607][ T8120] BTRFS info (device loop3): balance: ended with status: 0
[  202.622788][ T8202] xt_addrtype: ipv6 does not support BROADCAST matching
[  202.661476][ T5830] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  203.665244][ T8235] loop0: detected capacity change from 0 to 8
[  203.866610][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  203.876283][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  203.919191][ T8242] netlink: 20 bytes leftover after parsing attributes in process `syz.6.902'.
[  203.952103][ T8243] ptrace attach of "./syz-executor exec"[7508] was attempted by ""[8243]
[  203.961185][ T8242] netlink: 20 bytes leftover after parsing attributes in process `syz.6.902'.
[  204.012822][ T8242] netlink: 3 bytes leftover after parsing attributes in process `syz.6.902'.
[  204.240814][ T8248] netlink: 'syz.2.905': attribute type 21 has an invalid length.
[  204.288917][ T8248] netlink: 128 bytes leftover after parsing attributes in process `syz.2.905'.
[  204.359873][ T8248] netlink: 'syz.2.905': attribute type 4 has an invalid length.
[  204.393354][ T8248] netlink: 3 bytes leftover after parsing attributes in process `syz.2.905'.
[  204.557610][ T8216] loop1: detected capacity change from 0 to 32768
[  204.645230][ T8216] read_mapping_page failed!
[  204.649991][ T8216] jfs_rename: dtInsert returned -EIO
[  205.241125][  T846] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  205.302494][ T8279] comedi comedi0: pcl711: I/O port conflict (0x6,16)
[  205.429943][  T846] usb 4-1: Using ep0 maxpacket: 16
[  205.460539][  T846] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  205.503947][  T846] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  205.524124][  T846] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  205.598192][  T846] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  205.638576][  T846] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  205.706778][  T846] usb 4-1: config 1 interface 0 has no altsetting 0
[  205.734055][  T846] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  205.770737][  T846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.887224][  T846] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  205.914212][ T8291] loop0: detected capacity change from 0 to 2048
[  206.018182][ T8291] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  206.057176][ T8258] loop6: detected capacity change from 0 to 32768
[  206.137308][ T8258] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  206.155368][  T846] scsi host1: usb-storage 4-1:1.0
[  206.292319][ T8312] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.354629][ T8258] XFS (loop6): Ending clean mount
[  206.371836][ T5810] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  206.405917][ T5909] usb 4-1: USB disconnect, device number 4
[  206.495674][ T8258] XFS (loop6): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  206.591148][ T5810] usb 3-1: Using ep0 maxpacket: 32
[  206.635751][ T5810] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  206.689185][ T5810] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a
[  206.724562][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.735145][ T6678] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  206.763787][ T5810] usb 3-1: Product: syz
[  206.782836][ T5810] usb 3-1: Manufacturer: syz
[  206.809410][ T5810] usb 3-1: SerialNumber: syz
[  206.854302][ T5810] usb 3-1: config 0 descriptor??
[  206.867416][ T8300] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  207.144988][ T8300] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  207.344142][ T8333] MTD: Couldn't look up './file0': -15
[  207.370040][ T5810] net1080 3-1:0.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, 1e:6b:f1:45:1c:f7
[  207.487848][ T5810] usb 3-1: USB disconnect, device number 8
[  207.530921][ T5810] net1080 3-1:0.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT
[  207.635217][ T8339] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  208.029802][   T30] audit: type=1400 audit(1762032424.162:36): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8346 comm="syz.6.942"
[  208.104483][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'.
[  208.836057][ T8327] loop0: detected capacity change from 0 to 32768
[  208.903950][ T8327] ERROR: (device loop0): xtTruncate_pmap: xt_getpage: xtree page corrupt
[  208.903950][ T8327] 
[  208.938631][ T8327] ERROR: (device loop0): remounting filesystem as read-only
[  208.950050][ T8327] ERROR: (device loop0): txAbort: 
[  208.950050][ T8327] 
[  208.957735][ T5991] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  209.031240][  T846] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  209.116656][ T8337] loop7: detected capacity change from 0 to 32768
[  209.131301][ T5991] usb 7-1: Using ep0 maxpacket: 8
[  209.139390][ T5991] usb 7-1: unable to get BOS descriptor or descriptor too short
[  209.160215][ T5991] usb 7-1: config 4 has an invalid interface number: 146 but max is 0
[  209.189067][ T5991] usb 7-1: config 4 has no interface number 0
[  209.195760][  T846] usb 3-1: Using ep0 maxpacket: 8
[  209.204495][ T5826] ERROR: (device loop0): xtTruncate: xt_getpage: xtree page corrupt
[  209.204495][ T5826] 
[  209.208706][ T5991] usb 7-1: config 4 interface 146 has no altsetting 0
[  209.232928][  T846] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  209.242388][  T846] usb 3-1: config 179 has no interface number 0
[  209.250752][ T5991] usb 7-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79
[  209.273531][  T846] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  209.311538][ T5991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.359885][  T846] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  209.372766][ T5991] usb 7-1: Product: syz
[  209.378128][ T5991] usb 7-1: Manufacturer: syz
[  209.413526][ T5991] usb 7-1: SerialNumber: syz
[  209.427479][  T846] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  209.536432][  T846] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  209.580795][  T846] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  209.655546][  T846] usb 3-1: config 179 interface 65 has no altsetting 0
[  209.710634][  T846] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  209.735223][ T5991] comedi comedi5: could not set alternate setting 3 in high speed
[  209.751034][  T846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.801193][ T5991] usbduxsigma 7-1:4.146: driver 'usbduxsigma' failed to auto-configure device.
[  209.952654][ T5991] usbduxsigma 7-1:4.146: probe with driver usbduxsigma failed with error -71
[  209.967938][  T846] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11
[  210.011522][ T8391] loop0: detected capacity change from 0 to 256
[  210.031095][ T5991] usb 7-1: USB disconnect, device number 5
[  210.269838][ T5810] usb 3-1: USB disconnect, device number 9
[  210.447747][ T8401] i2c i2c-0: Invalid block write size 254
[  211.074151][ T8417] loop6: detected capacity change from 0 to 256
[  211.212660][ T8417] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  211.409583][  T846] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  211.569155][  T846] usb 1-1: Using ep0 maxpacket: 32
[  211.620451][  T846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.681014][  T846] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  211.744459][  T846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.771297][  T846] usb 1-1: Product: syz
[  211.780190][  T846] usb 1-1: Manufacturer: syz
[  211.796025][  T846] usb 1-1: SerialNumber: syz
[  211.817326][  T846] usb 1-1: config 0 descriptor??
[  211.834150][  T846] usb 1-1: bad CDC descriptors
[  211.857566][  T846] usb 1-1: unsupported MDLM descriptors
[  212.021304][ T8446] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.083937][ T8449] loop2: detected capacity change from 0 to 16
[  212.100870][ T5810] usb 1-1: USB disconnect, device number 8
[  212.126262][ T8450] nft_compat: unsupported protocol 5
[  212.152526][ T8449] erofs (device loop2): mounted with root inode @ nid 36.
[  212.545958][ T8420] loop3: detected capacity change from 0 to 32768
[  212.686487][ T8420] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  212.898339][ T8420] XFS (loop3): Ending clean mount
[  213.085065][ T8482] netlink: 'syz.1.989': attribute type 3 has an invalid length.
[  213.281469][ T5830] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  213.298202][ T8490] loop7: detected capacity change from 0 to 1024
[  213.392133][ T8490] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  213.508772][ T8490] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.991: lblock 1 mapped to illegal pblock 1 (length 1)
[  213.647612][ T8490] Quota error (device loop7): write_blk: dquota write failed
[  213.674581][ T8490] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  213.682833][ T8501] loop6: detected capacity change from 0 to 64
[  213.724465][ T8490] EXT4-fs error (device loop7): ext4_acquire_dquot:6943: comm syz.7.991: Failed to acquire dquot type 0
[  213.816089][ T8490] EXT4-fs error (device loop7): ext4_free_blocks:6705: comm syz.7.991: Freeing blocks not in datazone - block = 0, count = 4096
[  213.928715][ T8490] EXT4-fs error (device loop7): ext4_read_inode_bitmap:138: comm syz.7.991: Invalid inode bitmap blk 0 in block_group 0
[  213.945695][ T3003] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  214.015431][ T8490] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem
[  214.052186][ T8490] EXT4-fs (loop7): 1 orphan inode deleted
[  214.056329][ T3003] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  214.099481][ T8490] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.111118][ T3003] EXT4-fs error (device loop7): ext4_release_dquot:6979: comm kworker/u8:8: Failed to release dquot type 0
[  214.498839][ T7508] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.523982][ T3003] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  214.590523][ T3003] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  214.622373][ T3003] EXT4-fs error (device loop7): ext4_release_dquot:6979: comm kworker/u8:8: Failed to release dquot type 0
[  214.748266][ T8526] loop1: detected capacity change from 0 to 512
[  214.827248][ T8526] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  215.252297][ T8497] loop2: detected capacity change from 0 to 32768
[  215.309260][ T8497] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.995 (8497)
[  215.395759][ T8497] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  215.452134][ T8497] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  215.870068][ T8497] BTRFS info (device loop2): enabling ssd optimizations
[  215.920389][ T8497] BTRFS info (device loop2): turning on async discard
[  215.955128][ T8497] BTRFS info (device loop2): enabling free space tree
[  216.332421][ T5832] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  217.186982][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1032'.
[  217.236639][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1032'.
[  218.324567][ T8640] loop2: detected capacity change from 0 to 128
[  218.407070][ T8640] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  218.522928][ T8640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  218.634676][ T8650] loop1: detected capacity change from 0 to 16
[  218.775569][ T8650] erofs (device loop1): mounted with root inode @ nid 36.
[  218.869027][ T8650] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[  218.903049][ T8650] erofs (device loop1): failed to decompress -44 in[46, 4050] out[1851]
[  218.927751][ T8648] wireguard0: entered promiscuous mode
[  218.948586][ T8650] erofs (device loop1): read error -117 @ 43 of nid 36
[  219.093403][ T8658] loop2: detected capacity change from 0 to 1024
[  219.352154][ T8618] loop6: detected capacity change from 0 to 32768
[  219.424815][ T8618] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1036 (8618)
[  219.445646][ T8662] netlink: 'syz.3.1052': attribute type 11 has an invalid length.
[  219.494730][   T12] hfsplus: b-tree write err: -5, ino 4
[  219.608365][ T8618] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  219.695143][ T8618] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  219.995987][   T30] audit: type=1326 audit(1762032436.122:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.7.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216f78efc9 code=0x7ffc0000
[  219.996073][   T30] audit: type=1326 audit(1762032436.122:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.7.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216f78efc9 code=0x7ffc0000
[  219.996144][   T30] audit: type=1326 audit(1762032436.122:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.7.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f216f78efc9 code=0x7ffc0000
[  219.996216][   T30] audit: type=1326 audit(1762032436.122:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.7.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216f78efc9 code=0x7ffc0000
[  219.996287][   T30] audit: type=1326 audit(1762032436.122:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.7.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216f78efc9 code=0x7ffc0000
[  220.161769][ T8618] BTRFS info (device loop6): enabling ssd optimizations
[  220.161808][ T8618] BTRFS info (device loop6): turning on async discard
[  220.161838][ T8618] BTRFS info (device loop6): enabling free space tree
[  220.431432][ T8703] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  220.478035][ T8618] BTRFS info (device loop6): balance: start -susage=6,limit=3330..0
[  220.478218][ T8618] BTRFS info (device loop6): balance: ended with status: 0
[  220.801613][ T6678] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  220.851303][ T8710] netlink: 'syz.7.1064': attribute type 21 has an invalid length.
[  221.271198][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1069'.
[  221.698691][ T8733] netlink: 'syz.2.1074': attribute type 10 has an invalid length.
[  221.715034][ T8735] Invalid ELF header magic: != ELF
[  221.846093][ T8742] binder: 8740:8742 ioctl c0306201 200000000100 returned -22
[  221.910907][ T8733] bridge0: port 3(netdevsim0) entered blocking state
[  221.919500][ T8733] bridge0: port 3(netdevsim0) entered disabled state
[  221.999111][ T8733] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  222.080713][ T8733] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  222.875180][ T8765] loop6: detected capacity change from 0 to 4096
[  222.941144][ T8765] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  223.070055][ T8774] loop7: detected capacity change from 0 to 8
[  223.137786][ T8774] unable to read xattr id index table
[  223.174995][ T8765] ntfs3(loop6): Failed to load $Extend (-22).
[  223.191132][ T8765] ntfs3(loop6): Failed to initialize $Extend.
[  223.336296][ T8765] ntfs3(loop6): ino=5, "/" indx_read
[  223.513627][  T846] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  223.631054][ T5837] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  223.651179][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1092'.
[  223.694443][  T846] usb 8-1: Using ep0 maxpacket: 32
[  223.711210][  T846] usb 8-1: config 0 has an invalid interface number: 130 but max is 0
[  223.719389][  T846] usb 8-1: config 0 has no interface number 0
[  223.746197][  T846] usb 8-1: too many endpoints for config 0 interface 130 altsetting 50: 167, using maximum allowed: 30
[  223.778631][  T846] usb 8-1: config 0 interface 130 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 167
[  223.795119][  T846] usb 8-1: config 0 interface 130 has no altsetting 0
[  223.802193][  T846] usb 8-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  223.823712][ T5837] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  223.842437][ T5837] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  223.868713][  T846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.891527][ T5837] usb 1-1: config 220 has no interface number 2
[  223.899810][ T5837] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  223.914705][  T846] usb 8-1: config 0 descriptor??
[  223.934358][ T5837] usb 1-1: config 220 interface 0 has no altsetting 0
[  223.945845][ T5837] usb 1-1: config 220 interface 76 has no altsetting 0
[  223.953627][ T5837] usb 1-1: config 220 interface 1 has no altsetting 0
[  223.977038][ T5837] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  224.011007][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.031095][ T5837] usb 1-1: Product: syz
[  224.035298][ T5837] usb 1-1: Manufacturer: syz
[  224.070387][ T5837] usb 1-1: SerialNumber: syz
[  224.141358][  T846] usb 8-1: string descriptor 0 read error: -71
[  224.191994][  T846] usb 8-1: USB disconnect, device number 2
[  224.358886][ T5837] usb 1-1: selecting invalid altsetting 0
[  224.381981][ T5837] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  224.389314][ T5837] uvcvideo 1-1:220.0: No valid video chain found.
[  224.427164][ T5837] usb 1-1: selecting invalid altsetting 0
[  224.434194][ T5837] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  224.452887][ T5837] usb 1-1: USB disconnect, device number 9
[  225.254649][ T8822] netlink: 'syz.0.1112': attribute type 9 has an invalid length.
[  225.873476][ T8840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.091619][  T846] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  226.176033][ T8852] loop6: detected capacity change from 0 to 512
[  226.241957][ T8852] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  226.251260][  T846] usb 4-1: Using ep0 maxpacket: 16
[  226.271230][  T846] usb 4-1: too many configurations: 97, using maximum allowed: 8
[  226.294656][ T8852] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1134: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  226.347810][ T8852] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.1126: bg 0: block 248: padding at end of block bitmap is not set
[  226.364158][  T846] usb 4-1: string descriptor 0 read error: -71
[  226.370481][  T846] usb 4-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[  226.384988][ T8852] Quota error (device loop6): write_blk: dquota write failed
[  226.396261][  T846] usb 4-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224
[  226.414983][ T8852] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  226.425389][ T8852] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.1126: Failed to acquire dquot type 1
[  226.439980][  T846] usb 4-1: rejected 8 configurations due to insufficient available bus power
[  226.464851][  T846] usb 4-1: no configuration chosen from 8 choices
[  226.478437][  T846] usb 4-1: USB disconnect, device number 5
[  226.484660][ T8852] EXT4-fs (loop6): 1 truncate cleaned up
[  226.538038][ T8852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  226.695138][ T8868] loop1: detected capacity change from 0 to 256
[  226.704840][ T8866] loop2: detected capacity change from 0 to 1024
[  226.707173][ T8868] exfat: Deprecated parameter 'namecase'
[  226.707416][ T8868] exfat: Deprecated parameter 'utf8'
[  226.708263][ T8866] EXT4-fs: Ignoring removed nomblk_io_submit option
[  226.729348][ T8868] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  226.762007][   T12] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5
[  226.762090][   T12] EXT4-fs error (device loop6): ext4_release_dquot:6979: comm kworker/u8:0: Failed to release dquot type 1
[  226.764637][ T6678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  226.804762][ T8866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.018151][ T8874] loop7: detected capacity change from 0 to 512
[  227.091918][ T8874] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  227.101398][ T8874] EXT4-fs (loop7): 1 truncate cleaned up
[  227.103513][ T8874] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.107449][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.160169][ T8874] EXT4-fs error (device loop7): ext4_append:79: inode #2: comm syz.7.1135: Logical block already allocated
[  227.171373][ T8874] EXT4-fs (loop7): Remounting filesystem read-only
[  227.355651][ T8881] unsupported nlmsg_type 40
[  227.406560][ T8883] loop3: detected capacity change from 0 to 1024
[  227.413309][ T7508] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.568484][ T8883] hfsplus: invalid length 256 has been corrected to 127
[  227.703806][ T1333] hfsplus: b-tree write err: -5, ino 4
[  228.705454][ T8923] delete_channel: no stack
[  229.300022][ T8937] loop2: detected capacity change from 0 to 4096
[  229.380682][ T8946] loop1: detected capacity change from 0 to 256
[  229.383696][ T8946] exfat: Deprecated parameter 'utf8'
[  229.442315][ T8946] exfat: Deprecated parameter 'namecase'
[  229.442452][ T8946] exfat: Deprecated parameter 'utf8'
[  229.559631][ T8946] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  229.645023][ T8946] Invalid source name
[  230.118411][ T8959] capability: warning: `syz.1.1168' uses deprecated v2 capabilities in a way that may be insecure
[  230.158698][ T8911] loop3: detected capacity change from 0 to 32768
[  230.211453][ T8911] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  230.342504][ T8911] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  230.543692][ T8911] grow_buffers: requested out-of-range block 432345564227567648 for device loop3
[  230.641847][ T8911] (syz.3.1149,8911,1):ocfs2_read_blocks:239 ERROR: status = -12
[  230.686896][ T8911] (syz.3.1149,8911,1):ocfs2_search_chain:1817 ERROR: status = -12
[  230.732599][ T8911] (syz.3.1149,8911,1):ocfs2_search_chain:1940 ERROR: status = -12
[  230.753173][ T8980] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1176'.
[  230.761169][ T8911] (syz.3.1149,8911,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -12
[  230.792250][ T8911] (syz.3.1149,8911,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -12
[  230.840811][ T8982] loop0: detected capacity change from 0 to 1024
[  230.852848][ T8911] (syz.3.1149,8911,1):__ocfs2_claim_clusters:2438 ERROR: status = -12
[  230.881029][ T8911] (syz.3.1149,8911,1):__ocfs2_claim_clusters:2446 ERROR: status = -12
[  230.889235][ T8911] (syz.3.1149,8911,1):ocfs2_local_alloc_new_window:1199 ERROR: status = -12
[  230.980186][ T8911] (syz.3.1149,8911,1):ocfs2_local_alloc_new_window:1224 ERROR: status = -12
[  231.031459][ T8911] (syz.3.1149,8911,1):ocfs2_local_alloc_slide_window:1298 ERROR: status = -12
[  231.059105][ T8911] (syz.3.1149,8911,1):ocfs2_local_alloc_slide_window:1317 ERROR: status = -12
[  231.100843][ T8911] (syz.3.1149,8911,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -12
[  231.154241][ T8911] (syz.3.1149,8911,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -12
[  231.188254][ T8911] (syz.3.1149,8911,1):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -12
[  231.211579][ T8911] (syz.3.1149,8911,1):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -12
[  231.261059][ T8911] (syz.3.1149,8911,1):ocfs2_mknod:360 ERROR: status = -12
[  231.268696][ T8911] (syz.3.1149,8911,1):ocfs2_mknod:505 ERROR: status = -12
[  231.286886][   T60] hfsplus: b-tree write err: -5, ino 4
[  231.307783][ T8911] (syz.3.1149,8911,1):ocfs2_mkdir:661 ERROR: status = -12
[  231.481320][ T8994] cgroup: Unexpected value for 'nofavordynmods'
[  231.531730][ T5842] Bluetooth: hci2: command 0x0406 tx timeout
[  231.537828][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[  231.541028][ T5829] Bluetooth: hci5: command 0x0406 tx timeout
[  231.629474][ T5830] ocfs2: Unmounting device (7,3) on (node local)
[  232.013516][ T8986] loop6: detected capacity change from 0 to 32768
[  232.121622][ T8986] jfs_strtoUCS: char2uni returned -22.
[  232.145813][ T8986] charset = ascii, char = 0xc5
[  232.265576][ T9013] loop7: detected capacity change from 0 to 512
[  232.347156][ T9013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.406135][ T5834] Bluetooth: hci0: unexpected event for opcode 0x080f
[  232.447358][ T9013] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.676079][ T9028] netlink: 'syz.6.1196': attribute type 4 has an invalid length.
[  232.692571][ T9027] xt_TCPMSS: Only works on TCP SYN packets
[  232.708657][ T9028] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1196'.
[  232.736241][ T7508] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.811646][ T9031] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1200'.
[  233.156474][ T9043] overlayfs: missing 'lowerdir'
[  233.695838][ T9064] loop6: detected capacity change from 0 to 16
[  233.775553][ T9064] erofs (device loop6): mounted with root inode @ nid 36.
[  233.846772][ T9064] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36
[  233.894560][ T9064] erofs (device loop6): failed to decompress -29 in[58, 4038] out[1851]
[  233.994416][ T9064] erofs (device loop6): read error -117 @ 43 of nid 36
[  234.290456][   T30] audit: type=1326 audit(1762032450.422:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130318efc9 code=0x7ffc0000
[  234.384002][   T30] audit: type=1326 audit(1762032450.422:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130318efc9 code=0x7ffc0000
[  234.503449][   T30] audit: type=1326 audit(1762032450.452:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f130318efc9 code=0x7ffc0000
[  234.623248][   T30] audit: type=1326 audit(1762032450.452:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130318efc9 code=0x7ffc0000
[  234.758711][   T30] audit: type=1326 audit(1762032450.452:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130318efc9 code=0x7ffc0000
[  234.773793][ T9096] loop0: detected capacity change from 0 to 512
[  234.780972][    C0] vkms_vblank_simulate: vblank timer overrun
[  234.948959][ T9096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.059939][ T9096] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.346912][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.491599][ T9115] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  235.659396][ T9117] loop2: detected capacity change from 0 to 1024
[  235.947343][ T9125] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1240'.
[  235.998882][ T9129] netlink: 'syz.1.1242': attribute type 3 has an invalid length.
[  236.008699][ T9127] loop0: detected capacity change from 0 to 256
[  236.014061][ T9101] loop7: detected capacity change from 0 to 40427
[  236.037909][ T9083] loop3: detected capacity change from 0 to 32768
[  236.047472][ T9129] netlink: 'syz.1.1242': attribute type 3 has an invalid length.
[  236.072266][ T9101] F2FS-fs (loop7): build fault injection rate: 25
[  236.097513][ T9083] (syz.3.1224,9083,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  236.098096][ T9129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1242'.
[  236.111476][ T9101] F2FS-fs (loop7): build fault injection type: 0x7698c
[  236.140908][ T9127] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  236.175101][ T9083] (syz.3.1224,9083,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  236.221247][ T9101] F2FS-fs (loop7): invalid crc value
[  236.263626][ T9101] F2FS-fs (loop7): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_build_segment_manager+0x4b50/0xa3a0
[  236.345689][ T9083] JBD2: Ignoring recovery information on journal
[  236.349780][ T9101] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x207/0xfe0
[  236.569620][ T9083] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  236.709620][ T9135] loop2: detected capacity change from 0 to 4096
[  236.866401][ T9101] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  236.911468][ T9101] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  236.991995][ T9101] F2FS-fs (loop7): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0x1e2/0x240
[  237.200517][ T9151] comedi comedi4: bad chanlist[0]=0x04100003 chan=3 range length=2
[  237.287588][ T5830] ocfs2: Unmounting device (7,3) on (node local)
[  237.416446][ T7508] F2FS-fs (loop7): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x608/0x2a00
[  237.481035][ T7508] F2FS-fs (loop7): invalid blkaddr: 513, type: 10, run fsck to fix.
[  237.745617][ T9159] loop1: detected capacity change from 0 to 2048
[  237.782116][ T9161] tmpfs: Bad value for 'mpol'
[  237.849294][ T9159] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  238.491138][   T48] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  238.651206][   T48] usb 2-1: Using ep0 maxpacket: 16
[  238.658612][   T48] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  238.690371][   T48] usb 2-1: config 0 has no interface number 0
[  238.711715][   T48] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  238.743880][   T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.776805][   T48] usb 2-1: Product: syz
[  238.799593][   T48] usb 2-1: Manufacturer: syz
[  238.810502][ T9188] openvswitch: netlink: Message has 4 unknown bytes.
[  238.815112][   T48] usb 2-1: SerialNumber: syz
[  238.862875][   T48] usb 2-1: config 0 descriptor??
[  238.890842][   T48] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  239.177827][ T9202] loop3: detected capacity change from 0 to 512
[  239.282682][   T48] gspca_spca1528: reg_w err -71
[  239.288396][ T9202] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1274: iget: bad i_size value: 38620345925642
[  239.361619][   T48] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[  239.371506][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'.
[  239.371960][ T9202] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.1274: couldn't read orphan inode 15 (err -117)
[  239.488534][   T48] usb 2-1: USB disconnect, device number 6
[  239.499307][ T9202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.554452][ T9217] loop0: detected capacity change from 0 to 256
[  239.609488][ T9217] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  239.910343][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.486993][ T9240] netlink: 'syz.3.1291': attribute type 4 has an invalid length.
[  241.686095][ T9281] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1312'.
[  241.701619][ T9281] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1312'.
[  241.757768][ T9283] loop0: detected capacity change from 0 to 256
[  241.985219][ T9283] FAT-fs (loop0): Directory bread(block 64) failed
[  242.026434][ T9283] FAT-fs (loop0): Directory bread(block 65) failed
[  242.118115][ T9283] FAT-fs (loop0): Directory bread(block 66) failed
[  242.171434][ T9283] FAT-fs (loop0): Directory bread(block 67) failed
[  242.178113][ T9283] FAT-fs (loop0): Directory bread(block 68) failed
[  242.241067][ T9283] FAT-fs (loop0): Directory bread(block 69) failed
[  242.255037][ T9283] FAT-fs (loop0): Directory bread(block 70) failed
[  242.311124][ T9283] FAT-fs (loop0): Directory bread(block 71) failed
[  242.365776][ T9283] FAT-fs (loop0): Directory bread(block 72) failed
[  242.425734][ T9283] FAT-fs (loop0): Directory bread(block 73) failed
[  242.511126][  T846] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  242.694857][  T846] usb 8-1: config 160 has an invalid interface number: 200 but max is 0
[  242.733701][  T846] usb 8-1: config 160 has no interface number 0
[  242.755720][  T846] usb 8-1: config 160 interface 200 has no altsetting 0
[  242.780014][  T846] usb 8-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  242.799410][ T9311] netlink: 'syz.2.1326': attribute type 10 has an invalid length.
[  242.817579][  T846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.835776][ T9311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1326'.
[  242.851453][  T846] usb 8-1: Product: syz
[  242.855725][  T846] usb 8-1: Manufacturer: syz
[  242.866532][ T9311] ipvlan1: entered promiscuous mode
[  242.872014][  T846] usb 8-1: SerialNumber: syz
[  242.898282][ T9311] ipvlan1: entered allmulticast mode
[  242.931204][ T9311] veth0_vlan: entered allmulticast mode
[  242.945259][ T9311] bridge0: port 4(ipvlan1) entered blocking state
[  243.000074][ T9311] bridge0: port 4(ipvlan1) entered disabled state
[  243.031894][ T9311] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  243.173201][  T846] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  243.180216][  T846] usb 8-1: MIDIStreaming interface descriptor not found
[  243.395614][  T846] usb 8-1: USB disconnect, device number 3
[  243.650654][ T6097] udevd[6097]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  243.873304][ T9332] trusted_key: encrypted_key: keylen parameter is missing
[  244.113725][ T9305] loop1: detected capacity change from 0 to 40427
[  244.154926][ T9305] F2FS-fs (loop1): Invalid log sectorsize (14)
[  244.173880][ T9305] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  244.202884][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1337'.
[  244.212478][ T9305] F2FS-fs (loop1): build fault injection rate: 11
[  244.218917][ T9305] F2FS-fs (loop1): build fault injection type: 0x1
[  244.281396][ T9305] F2FS-fs (loop1): invalid crc value
[  244.293533][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1337'.
[  244.311205][ T9305] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x3530/0x9ca0
[  244.321927][ T5991] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  244.355713][ T9305] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12)
[  244.531143][ T5991] usb 8-1: Using ep0 maxpacket: 8
[  244.564964][ T5991] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  244.591077][ T5991] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  244.671081][ T5991] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  244.696339][ T5991] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.736103][ T5991] usb 8-1: Product: syz
[  244.752646][ T5991] usb 8-1: Manufacturer: syz
[  244.771757][ T5991] usb 8-1: SerialNumber: syz
[  244.833849][ T9334] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  245.128772][ T5991] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71
[  245.183626][ T5991] usb 8-1: USB disconnect, device number 4
[  245.389982][ T9370] loop1: detected capacity change from 0 to 128
[  245.434768][ T9370] FAT-fs (loop1): Directory bread(block 162) failed
[  245.451863][ T9370] FAT-fs (loop1): Directory bread(block 163) failed
[  245.488752][ T9370] FAT-fs (loop1): Directory bread(block 164) failed
[  245.523409][ T9370] FAT-fs (loop1): Directory bread(block 165) failed
[  245.530078][ T9370] FAT-fs (loop1): Directory bread(block 166) failed
[  245.568964][ T9370] FAT-fs (loop1): Directory bread(block 167) failed
[  245.621054][ T9370] FAT-fs (loop1): Directory bread(block 168) failed
[  245.640742][ T9370] FAT-fs (loop1): Directory bread(block 169) failed
[  245.714867][ T9370] FAT-fs (loop1): Directory bread(block 162) failed
[  245.743939][ T9378] loop3: detected capacity change from 0 to 1764
[  245.756760][ T9370] FAT-fs (loop1): Directory bread(block 163) failed
[  245.770806][ T9376] loop0: detected capacity change from 0 to 2048
[  245.799346][ T9370] syz.1.1353: attempt to access beyond end of device
[  245.799346][ T9370] loop1: rw=3, sector=226, nr_sectors = 6 limit=128
[  245.832250][ T9378] iso9660: Corrupted directory entry in block 2 of inode 1920
[  245.861890][ T9370] syz.1.1353: attempt to access beyond end of device
[  245.861890][ T9370] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128
[  245.891229][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1359'.
[  246.055360][ T9376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  246.885132][ T9403] loop6: detected capacity change from 0 to 128
[  246.982108][ T9403] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  247.101332][ T9403] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  247.385600][ T9380] loop2: detected capacity change from 0 to 32768
[  247.468435][ T9380] jfs_strtoUCS: char2uni returned -22.
[  247.509240][ T9380] charset = cp864, char = 0x9f
[  247.743747][ T9421] No such timeout policy "syz1"
[  248.250493][ T9438] openvswitch: netlink: Flow key attribute not present in set flow.
[  248.315538][ T9423] loop0: detected capacity change from 0 to 8192
[  248.591304][ T9445] loop1: detected capacity change from 0 to 64
[  248.731786][ T9445] Trying to free block not in datazone
[  248.737958][ T9445] Trying to free block not in datazone
[  248.801041][ T9445] Trying to free block not in datazone
[  248.814818][ T9445] Trying to free block not in datazone
[  248.822483][ T9445] Trying to free block not in datazone
[  248.854431][ T9445] minix_free_block (loop1:6): bit already cleared
[  248.895663][ T9445] Trying to free block not in datazone
[  248.921078][ T9445] Trying to free block not in datazone
[  249.071059][ T9455] loop6: detected capacity change from 0 to 2048
[  249.162122][ T9455] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  249.544975][ T9467] loop3: detected capacity change from 0 to 256
[  249.607731][ T9467] exfat: Deprecated parameter 'namecase'
[  249.621824][ T9467] exfat: Deprecated parameter 'utf8'
[  249.627212][ T9467] exfat: Deprecated parameter 'namecase'
[  249.664431][ T9467] exfat: Deprecated parameter 'utf8'
[  249.692943][   T30] audit: type=1400 audit(1762032465.832:47): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9470 comm="syz.7.1403"
[  249.789697][ T9467] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  249.856880][  T846] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  249.962546][ T9477] xt_hashlimit: overflow, rate too high: 0
[  250.056568][  T846] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  250.087071][  T846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.110756][  T846] usb 3-1: Product: syz
[  250.125498][  T846] usb 3-1: Manufacturer: syz
[  250.130666][  T846] usb 3-1: SerialNumber: syz
[  250.186041][  T846] r8152-cfgselector 3-1: Unknown version 0x0000
[  250.202305][  T846] r8152-cfgselector 3-1: config 0 descriptor??
[  250.431363][ T9492] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  250.728122][ T5837] r8152-cfgselector 3-1: USB disconnect, device number 10
[  250.775198][ T9501] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  251.558148][ T9527] loop0: detected capacity change from 0 to 8
[  251.607534][ T9527] SQUASHFS error: zlib decompression failed, data probably corrupt
[  251.640433][ T9527] SQUASHFS error: Failed to read block 0x9b: -5
[  251.671410][ T9527] SQUASHFS error: Unable to read metadata cache entry [99]
[  251.678744][ T9527] SQUASHFS error: Unable to read inode 0x127
[  251.812445][ T9527] loop0: detected capacity change from 0 to 1024
[  252.084252][   T60] hfsplus: b-tree write err: -5, ino 4
[  252.184909][ T9546] nbd: must specify at least one socket
[  252.282841][ T9549] xt_l2tp: invalid flags combination: 8
[  252.295894][ T9551] loop0: detected capacity change from 0 to 256
[  252.529782][ T9555] loop1: detected capacity change from 0 to 2048
[  252.593145][ T9555] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  252.634749][ T9555] UDF-fs: Scanning with blocksize 512 failed
[  252.704101][ T9555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  253.477548][ T9581] loop6: detected capacity change from 0 to 256
[  253.582866][ T9581] FAT-fs (loop6): Directory bread(block 64) failed
[  253.599745][ T9581] FAT-fs (loop6): Directory bread(block 65) failed
[  253.640228][ T9581] FAT-fs (loop6): Directory bread(block 66) failed
[  253.651124][ T9581] FAT-fs (loop6): Directory bread(block 67) failed
[  253.688205][ T9581] FAT-fs (loop6): Directory bread(block 68) failed
[  253.711098][ T9581] FAT-fs (loop6): Directory bread(block 69) failed
[  253.741358][ T9581] FAT-fs (loop6): Directory bread(block 70) failed
[  253.754626][ T9585] loop1: detected capacity change from 0 to 2048
[  253.776738][ T9581] FAT-fs (loop6): Directory bread(block 71) failed
[  253.796661][ T9581] FAT-fs (loop6): Directory bread(block 72) failed
[  253.821510][ T9581] FAT-fs (loop6): Directory bread(block 73) failed
[  253.823469][ T9585] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  253.834692][ T9542] loop2: detected capacity change from 0 to 32768
[  253.901980][ T9591] netlink: 'syz.3.1462': attribute type 10 has an invalid length.
[  253.959130][ T9585] syz.1.1459: attempt to access beyond end of device
[  253.959130][ T9585] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  253.959740][ T9597] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  253.985424][ T9591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1462'.
[  254.014222][ T9542] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  254.044898][ T9598] loop0: detected capacity change from 0 to 512
[  254.072508][ T9591] batman_adv: batadv0: Adding interface: virt_wifi0
[  254.121075][ T9542] XFS (loop2): Ending clean mount
[  254.130502][ T9591] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  254.164898][ T9585] syz.1.1459: attempt to access beyond end of device
[  254.164898][ T9585] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048
[  254.207137][ T9542] XFS (loop2): Quotacheck needed: Please wait.
[  254.242594][ T9598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  254.267862][ T9585] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0)
[  254.315808][ T9591] batman_adv: batadv0: Interface activated: virt_wifi0
[  254.323194][ T9598] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  254.355657][ T9542] XFS (loop2): Quotacheck: Done.
[  254.592833][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  254.628715][ T5832] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  254.717703][ T9612] loop3: detected capacity change from 0 to 128
[  254.718354][ T9615] loop7: detected capacity change from 0 to 16
[  254.799151][ T9612] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  254.835218][ T9615] erofs (device loop7): mounted with root inode @ nid 36.
[  254.950091][ T9612] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  255.094959][ T9612] EXT4-fs warning (device loop3): verify_group_input:136: Cannot add at group 7 (only 1 groups)
[  255.181782][  T846] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  255.354767][ T5830] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  255.368654][  T846] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  255.391238][  T846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.410027][  T846] usb 2-1: Product: syz
[  255.441170][  T846] usb 2-1: Manufacturer: syz
[  255.445829][  T846] usb 2-1: SerialNumber: syz
[  255.498575][  T846] usb 2-1: config 0 descriptor??
[  255.546867][ T9629] loop2: detected capacity change from 0 to 256
[  255.592867][  T846] ch341 2-1:0.0: ch341-uart converter detected
[  255.754860][ T9637] comedi comedi0: rti800: I/O port conflict (0x9,16)
[  255.764271][ T5834] Bluetooth: hci5: unexpected cc 0x0402 length: 4 > 1
[  255.771279][ T5834] Bluetooth: hci5: unexpected event for opcode 0x0402
[  255.781213][  T846] usb 2-1: failed to receive control message: -71
[  255.787697][  T846] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  255.813823][  T846] usb 2-1: USB disconnect, device number 7
[  255.825690][  T846] ch341 2-1:0.0: device disconnected
[  255.945384][ T9641] overlayfs: unescaped trailing colons in lowerdir mount option.
[  256.065366][ T9643] loop2: detected capacity change from 0 to 1024
[  256.314140][  T846] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  256.459561][ T9655] tc_dump_action: action bad kind
[  256.518009][  T846] usb 4-1: config 160 has an invalid interface number: 200 but max is 0
[  256.538980][  T846] usb 4-1: config 160 has no interface number 0
[  256.569427][  T846] usb 4-1: config 160 interface 200 has no altsetting 0
[  256.596320][ T9660] netlink: 'syz.6.1488': attribute type 6 has an invalid length.
[  256.609827][  T846] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  256.630745][  T846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.681329][  T846] usb 4-1: Product: syz
[  256.696099][  T846] usb 4-1: Manufacturer: syz
[  256.700733][  T846] usb 4-1: SerialNumber: syz
[  256.898119][ T9667] comedi comedi0: ni_at_a2150: a I/O base address must be specified
[  256.997419][  T846] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  257.011142][  T846] usb 4-1: MIDIStreaming interface descriptor not found
[  257.115550][  T846] usb 4-1: USB disconnect, device number 6
[  257.315352][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  257.736102][ T9653] loop2: detected capacity change from 0 to 32768
[  257.744898][ T9678] loop0: detected capacity change from 0 to 4096
[  257.789114][ T9678] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  258.163523][ T9697] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1507'.
[  258.242894][ T9697] 0ªX¹¦D: renamed from macvtap0 (while UP)
[  258.334917][ T9697] 0ªX¹¦D: entered allmulticast mode
[  258.365648][ T9697] veth0_macvtap: entered allmulticast mode
[  258.392013][ T9697] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  258.814001][ T9707] 8021q: adding VLAN 0 to HW filter on device bond2
[  258.852548][ T9717] loop0: detected capacity change from 0 to 512
[  258.988036][ T9717] EXT4-fs error (device loop0): ext4_xattr_inode_iget:444: comm syz.0.1510: error while reading EA inode 32 err=-116
[  259.057042][ T9717] EXT4-fs (loop0): Remounting filesystem read-only
[  259.121315][ T9717] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  259.185450][ T9717] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30)
[  259.231191][ T9717] EXT4-fs (loop0): 1 orphan inode deleted
[  259.259569][ T9717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.362841][ T9717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.711500][ T5991] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  259.891283][ T5991] usb 3-1: Using ep0 maxpacket: 32
[  259.915838][ T5991] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  259.945362][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.997251][ T5991] usb 3-1: config 0 descriptor??
[  260.080469][ T9756] ubi: mtd0 is already attached to ubi31
[  260.089280][ T5991] as10x_usb: device has been detected
[  260.137269][ T5991] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  260.254087][ T9757] loop3: detected capacity change from 0 to 4096
[  260.264685][ T5991] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  260.365607][ T5991] as10x_usb: error during firmware upload part1
[  260.376764][ T9757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.381883][ T5991] Registered device nBox DVB-T Dongle
[  260.392646][ T5991] usb 3-1: USB disconnect, device number 11
[  260.514210][ T5991] Unregistered device nBox DVB-T Dongle
[  260.531356][ T5991] as10x_usb: device has been disconnected
[  260.745205][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.758004][ T9775] xt_connbytes: Forcing CT accounting to be enabled
[  260.796853][ T9778] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1543'.
[  260.800276][ T9775] xt_policy: neither incoming nor outgoing policy selected
[  261.413112][   T10] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  261.593979][   T10] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[  261.620010][   T10] usb 1-1: config 0 has no interface number 0
[  261.634436][   T10] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  261.650845][ T9803] netlink: 'syz.1.1553': attribute type 10 has an invalid length.
[  261.666217][   T10] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  261.702074][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.706130][ T9803] netlink: 'syz.1.1553': attribute type 2 has an invalid length.
[  261.724519][   T10] usb 1-1: Product: syz
[  261.734658][   T10] usb 1-1: Manufacturer: syz
[  261.746327][   T10] usb 1-1: SerialNumber: syz
[  261.766265][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'.
[  261.778824][   T10] usb 1-1: config 0 descriptor??
[  261.901096][ T5909] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  262.015677][   T30] audit: type=1326 audit(1762032478.132:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.2.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104218efc9 code=0x7ffc0000
[  262.023584][   T10] usbtouchscreen 1-1:0.214: Failed to read FW rev: 0
[  262.075436][   T10] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -5
[  262.097405][   T30] audit: type=1326 audit(1762032478.142:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.2.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f104218efc9 code=0x7ffc0000
[  262.145057][ T5909] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  262.169348][ T5909] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.195026][   T30] audit: type=1326 audit(1762032478.142:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.2.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104218efc9 code=0x7ffc0000
[  262.227691][ T5909] usb 8-1: Product: syz
[  262.242833][ T5909] usb 8-1: Manufacturer: syz
[  262.247492][ T5909] usb 8-1: SerialNumber: syz
[  262.312170][ T5909] usb 8-1: config 0 descriptor??
[  262.331466][   T30] audit: type=1326 audit(1762032478.142:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.2.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104218efc9 code=0x7ffc0000
[  262.374290][ T5909] gspca_main: sunplus-2.14.0 probing 055f:c230
[  262.385974][ T5810] usb 1-1: USB disconnect, device number 10
[  262.813861][ T5909] gspca_sunplus: reg_r err -71
[  262.818756][ T5909] sunplus 8-1:0.0: probe with driver sunplus failed with error -71
[  262.855969][ T5909] usb 8-1: USB disconnect, device number 5
[  263.329855][ T9849] loop1: detected capacity change from 0 to 512
[  263.494638][ T9852] loop6: detected capacity change from 0 to 2048
[  263.636173][ T9852] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  264.191083][ T5810] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  264.373245][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  264.391068][ T5810] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  264.438843][ T9883] loop2: detected capacity change from 0 to 256
[  264.447668][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  264.491045][ T5810] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  264.529483][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.559945][ T5810] usb 2-1: config 0 descriptor??
[  264.605681][ T5810] em28xx 2-1:0.0: New device   @ 480 Mbps (2040:1605, interface 0, class 0)
[  264.642488][ T5810] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  264.881969][ T5810] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  264.902712][ T5810] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  264.940841][ T5810] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  264.965199][ T5810] em28xx 2-1:0.0: No AC97 audio processor
[  265.028994][ T5810] usb 2-1: USB disconnect, device number 8
[  265.058785][ T5810] em28xx 2-1:0.0: Disconnecting em28xx
[  265.095851][ T5810] em28xx 2-1:0.0: Freeing device
[  265.299911][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  265.306673][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  265.687294][ T9920] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  266.222659][ T9936] loop3: detected capacity change from 0 to 22
[  266.248902][ T9936] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  266.296427][ T9936] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  266.553253][ T9948] loop0: detected capacity change from 0 to 16
[  266.591179][ T9950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1626'.
[  266.592146][ T9948] erofs (device loop0): mounted with root inode @ nid 36.
[  266.696555][ T9954] loop6: detected capacity change from 0 to 2048
[  266.732725][ T9954] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  267.214112][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  267.302063][ T5934] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  267.376300][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[  267.395849][   T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00
[  267.411328][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.428166][   T10] usb 2-1: Product: syz
[  267.432655][   T10] usb 2-1: Manufacturer: syz
[  267.437274][   T10] usb 2-1: SerialNumber: syz
[  267.494915][ T5934] usb 1-1: Using ep0 maxpacket: 32
[  267.517305][   T10] usb 2-1: config 0 descriptor??
[  267.524028][ T9976] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  267.537267][ T5934] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  267.549701][   T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  267.561573][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.586867][   T10] usb 2-1: Detected FT2232HP
[  267.632445][ T5934] usb 1-1: config 0 descriptor??
[  267.689043][ T5934] as10x_usb: device has been detected
[  267.711909][ T5934] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  267.732538][   T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  267.781109][   T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  267.784549][ T5934] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  267.822650][   T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  267.865833][ T5934] as10x_usb: error during firmware upload part1
[  267.901753][ T5934] Registered device nBox DVB-T Dongle
[  267.903195][   T10] usb 2-1: USB disconnect, device number 9
[  267.912037][ T5934] usb 1-1: USB disconnect, device number 11
[  267.935102][ T5834] Bluetooth: hci1: unexpected event for opcode 0x201c
[  268.018893][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  268.065855][ T5934] Unregistered device nBox DVB-T Dongle
[  268.070687][   T10] ftdi_sio 2-1:0.0: device disconnected
[  268.078239][ T5934] as10x_usb: device has been disconnected
[  269.175468][T10024] loop6: detected capacity change from 0 to 4096
[  269.225053][T10034] netlink: 'syz.3.1666': attribute type 15 has an invalid length.
[  269.238046][T10034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1666'.
[  269.249042][T10024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.489509][T10040] netlink: 'syz.7.1669': attribute type 3 has an invalid length.
[  269.599953][ T6678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.701130][T10044] loop3: detected capacity change from 0 to 256
[  269.811758][T10044] exfat: Deprecated parameter 'utf8'
[  269.817102][T10044] exfat: Deprecated parameter 'utf8'
[  269.863121][T10044] exfat: Deprecated parameter 'utf8'
[  269.933214][T10044] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d)
[  270.060000][T10053] loop7: detected capacity change from 0 to 1024
[  270.073422][T10056] new mount options do not match the existing superblock, will be ignored
[  270.415355][ T3003] hfsplus: b-tree write err: -5, ino 4
[  270.494157][ T5934] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  270.620165][T10069] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1683'.
[  270.662757][T10069] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1683'.
[  270.697285][T10069] netlink: 'syz.7.1683': attribute type 1 has an invalid length.
[  270.710172][ T5934] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  270.742179][ T5934] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  270.765633][ T5934] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  270.801217][ T5934] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  270.841193][ T5934] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  270.879626][ T5934] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  270.909619][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  270.928154][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1689'.
[  270.941028][ T5934] usb 3-1: Product: syz
[  270.945227][ T5934] usb 3-1: Manufacturer: syz
[  270.960729][T10080] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1689'.
[  271.013056][ T5934] cdc_wdm 3-1:1.0: skipping garbage
[  271.018306][ T5934] cdc_wdm 3-1:1.0: skipping garbage
[  271.061753][ T5934] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  271.067700][ T5934] cdc_wdm 3-1:1.0: Unknown control protocol
[  271.343047][  T846] usb 3-1: USB disconnect, device number 12
[  271.382830][T10091] ipvlan0: entered promiscuous mode
[  271.388077][T10091] ipvlan0: entered allmulticast mode
[  271.421479][T10091] veth0_vlan: entered allmulticast mode
[  271.637997][T10097] loop3: detected capacity change from 0 to 4096
[  271.672584][T10100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1699'.
[  271.719782][T10103] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  271.779068][T10097] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed
[  272.015073][ T5834] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  272.028411][ T5834] Bluetooth: hci1: Injecting HCI hardware error event
[  272.036823][ T5834] Bluetooth: hci1: hardware error 0x00
[  272.989782][T10140] netlink: 'syz.1.1718': attribute type 30 has an invalid length.
[  273.001633][T10132] loop0: detected capacity change from 0 to 4096
[  273.167269][T10146] CIFS: iocharset name too long
[  273.207708][T10132] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  273.818928][T10167] loop3: detected capacity change from 0 to 256
[  273.995889][T10167] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  274.121532][T10177] netlink: 'syz.6.1736': attribute type 1 has an invalid length.
[  274.143496][T10177] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1736'.
[  274.176394][ T5834] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  274.201133][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1736'.
[  274.692130][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1745'.
[  275.028649][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1751'.
[  275.337906][ T1306] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.475377][ T1306] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.648866][ T1306] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.691320][T10216] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config
[  275.712484][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'.
[  275.994716][ T1306] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.022706][T10224] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1761'.
[  276.022742][T10224] netlink: 18 bytes leftover after parsing attributes in process `syz.6.1761'.
[  276.024361][T10226] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  276.130838][T10209] loop1: detected capacity change from 0 to 32768
[  276.509224][T10228] bond3: Unable to set peer notification delay as MII monitoring is disabled
[  276.582187][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  276.593713][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  276.604797][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  276.615177][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  276.625799][T10228] bond3 (unregistering): Released all slaves
[  276.632176][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  276.993803][ T1306] bridge_slave_1: left allmulticast mode
[  276.999495][ T1306] bridge_slave_1: left promiscuous mode
[  277.051458][ T1306] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.113739][T10243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1770'.
[  277.126885][ T1306] bridge_slave_0: left allmulticast mode
[  277.135166][ T1306] bridge_slave_0: left promiscuous mode
[  277.161205][ T1306] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.255938][T10219] loop0: detected capacity change from 0 to 32768
[  277.372310][T10219] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  277.517133][   T30] audit: type=1326 audit(1762032493.652:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.1.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d8b8efc9 code=0x7ffc0000
[  277.539454][    C1] vkms_vblank_simulate: vblank timer overrun
[  277.571576][   T30] audit: type=1326 audit(1762032493.682:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.1.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d8b8efc9 code=0x7ffc0000
[  277.593934][    C1] vkms_vblank_simulate: vblank timer overrun
[  277.609030][T10219] XFS (loop0): Ending clean mount
[  277.641399][   T30] audit: type=1326 audit(1762032493.692:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.1.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fb6d8b8efc9 code=0x7ffc0000
[  277.649028][T10219] XFS (loop0): Quotacheck needed: Please wait.
[  277.680325][   T30] audit: type=1326 audit(1762032493.692:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.1.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d8b8efc9 code=0x7ffc0000
[  277.710591][   T30] audit: type=1326 audit(1762032493.692:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.1.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d8b8efc9 code=0x7ffc0000
[  277.789177][T10219] XFS (loop0): Quotacheck: Done.
[  277.967986][ T5826] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  278.204922][T10271] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1780'.
[  278.731960][ T5838] Bluetooth: hci1: command tx timeout
[  279.190414][ T1306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.205135][ T1306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.216710][ T1306] bond0 (unregistering): Released all slaves
[  279.329522][ T1306] bond1 (unregistering): Released all slaves
[  279.727526][T10313] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1798'.
[  280.150615][T10325] loop0: detected capacity change from 0 to 8
[  280.837319][ T5838] Bluetooth: hci1: command tx timeout
[  281.264506][T10348] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1808'.
[  281.310821][T10348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  281.407632][T10357] loop1: detected capacity change from 0 to 1024
[  281.848500][ T1306] hsr_slave_0: left promiscuous mode
[  281.891107][ T1306] hsr_slave_1: left promiscuous mode
[  281.917450][ T1306] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  281.973107][ T1306] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.002754][ T1306] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.010164][ T1306] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.077509][T10375] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  282.088977][ T1306] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  282.119508][ T1306] batman_adv: batadv0: Removing interface: virt_wifi0
[  282.160040][T10376] loop0: detected capacity change from 0 to 1764
[  282.247333][ T1306] veth1_macvtap: left promiscuous mode
[  282.266007][T10376] iso9660: Corrupted directory entry in block 2 of inode 1920
[  282.277594][ T1306] veth0_macvtap: left allmulticast mode
[  282.302530][ T1306] veth0_macvtap: left promiscuous mode
[  282.334496][ T1306] veth1_vlan: left promiscuous mode
[  282.360357][ T1306] veth0_vlan: left promiscuous mode
[  282.511818][T10386] loop6: detected capacity change from 0 to 256
[  282.583875][T10386] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001)
[  282.891149][ T5838] Bluetooth: hci1: command tx timeout
[  283.301098][ T5991] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  283.407517][ T1306] team0 (unregistering): Port device team_slave_1 removed
[  283.445001][ T1306] team0 (unregistering): Port device team_slave_0 removed
[  283.463050][ T5991] usb 7-1: Using ep0 maxpacket: 32
[  283.487231][ T5991] usb 7-1: config 10 has an invalid interface number: 107 but max is 0
[  283.497976][ T5991] usb 7-1: config 10 has no interface number 0
[  283.518072][ T5991] usb 7-1: config 10 interface 107 altsetting 5 endpoint 0x5 has an invalid bInterval 32, changing to 7
[  283.543689][ T5991] usb 7-1: config 10 interface 107 has no altsetting 0
[  283.554124][ T5991] usb 7-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=8b.7d
[  283.563572][ T5991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.575668][ T5991] usb 7-1: Product: syz
[  283.579855][ T5991] usb 7-1: Manufacturer: syz
[  283.585498][ T5991] usb 7-1: SerialNumber: syz
[  283.839843][ T5991] HFC-S_USB 7-1:10.107: probe with driver HFC-S_USB failed with error -5
[  283.869447][ T5991] usb 7-1: USB disconnect, device number 6
[  284.279440][T10232] chnl_net:caif_netlink_parms(): no params data found
[  284.916819][T10232] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.942086][T10232] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.971158][ T5838] Bluetooth: hci1: command tx timeout
[  284.971437][T10232] bridge_slave_0: entered allmulticast mode
[  285.046867][T10232] bridge_slave_0: entered promiscuous mode
[  285.068817][T10436] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  285.098786][T10232] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.139366][T10232] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.171316][T10232] bridge_slave_1: entered allmulticast mode
[  285.184623][T10439] loop0: detected capacity change from 0 to 2048
[  285.199375][T10232] bridge_slave_1: entered promiscuous mode
[  285.246827][T10439] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  285.344128][T10418] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  285.563942][T10232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.640348][T10232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.971257][T10460] loop1: detected capacity change from 0 to 128
[  286.073064][T10232] team0: Port device team_slave_0 added
[  286.116828][T10232] team0: Port device team_slave_1 added
[  286.343628][T10474] loop7: detected capacity change from 0 to 128
[  286.442953][T10232] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.472063][T10479] xt_limit: Overflow, try lower: 268435456/134217728
[  286.479424][T10232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.576951][T10473] loop6: detected capacity change from 0 to 4096
[  286.586003][T10474] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  286.612255][T10474] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  286.653449][T10232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.664442][T10484] loop1: detected capacity change from 0 to 256
[  286.680007][T10232] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.687601][T10232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.796252][T10232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.847788][T10474] EXT4-fs warning (device loop7): verify_group_input:136: Cannot add at group 1025 (only 1 groups)
[  287.012105][T10491] loop2: detected capacity change from 0 to 164
[  287.255921][ T7508] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  287.422586][T10496] loop1: detected capacity change from 0 to 1764
[  287.463491][T10498] loop6: detected capacity change from 0 to 2048
[  287.484151][T10498] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  287.516681][T10502] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  287.523979][T10494] bond1: entered allmulticast mode
[  287.581482][T10494] 8021q: adding VLAN 0 to HW filter on device bond1
[  287.589263][T10498] NILFS (loop6): the device already has a read/write mount.
[  287.686183][T10232] hsr_slave_0: entered promiscuous mode
[  287.710465][T10504] netlink: 'syz.7.1873': attribute type 2 has an invalid length.
[  287.724464][T10232] hsr_slave_1: entered promiscuous mode
[  287.730900][T10232] debugfs: 'hsr0' already exists in 'hsr'
[  287.806286][T10232] Cannot create hsr debugfs directory
[  287.814946][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1875'.
[  287.840555][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1875'.
[  288.125675][T10513] openvswitch: netlink: IP tunnel dst address not specified
[  288.146709][T10515] loop7: detected capacity change from 0 to 512
[  288.204661][T10515] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  288.261936][T10515] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1879: inode has both inline data and extents flags
[  288.296219][T10515] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.1879: couldn't read orphan inode 15 (err -117)
[  288.348474][T10515] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.476352][T10515] process 'syz.7.1879' launched './file2' with NULL argv: empty string added
[  288.808329][ T7508] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.836579][T10535] loop1: detected capacity change from 0 to 64
[  289.132843][T10232] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  289.231510][T10547] loop6: detected capacity change from 0 to 256
[  289.268015][T10232] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  289.338640][T10232] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  289.407199][T10551] loop1: detected capacity change from 0 to 512
[  289.449997][T10232] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  289.503601][T10551] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.1893: invalid indirect mapped block 4294967295 (level 1)
[  289.681477][T10551] EXT4-fs (loop1): Remounting filesystem read-only
[  289.736962][T10551] EXT4-fs (loop1): 2 truncates cleaned up
[  289.788854][T10551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.933198][   T30] audit: type=1800 audit(1762032506.052:57): pid=10551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1893" name="file1" dev="loop1" ino=15 res=0 errno=0
[  290.051821][T10232] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.090028][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.128437][T10232] 8021q: adding VLAN 0 to HW filter on device team0
[  290.234488][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.241724][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.337225][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.344443][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.595074][T10577] loop6: detected capacity change from 0 to 4096
[  290.677159][T10577] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  290.694913][ T5934] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  290.768571][T10577] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  290.882018][ T5934] usb 1-1: Using ep0 maxpacket: 16
[  290.959135][ T5934] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  290.990983][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.999786][ T5934] usb 1-1: Product: syz
[  291.068516][ T5934] usb 1-1: Manufacturer: syz
[  291.111060][ T5934] usb 1-1: SerialNumber: syz
[  291.153521][ T5934] r8152-cfgselector 1-1: Unknown version 0x0000
[  291.159861][ T5934] r8152-cfgselector 1-1: config 0 descriptor??
[  291.672649][T10232] 8021q: adding VLAN 0 to HW filter on device batadv0
[  291.710150][ T5837] r8152-cfgselector 1-1: USB disconnect, device number 12
[  291.926427][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1917'.
[  292.131076][ T5909] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  292.181304][ T5810] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  292.340227][ T5909] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  292.392217][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.402769][ T5810] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  292.434646][ T5810] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  292.445945][ T5909] usb 3-1: Product: syz
[  292.450119][ T5909] usb 3-1: Manufacturer: syz
[  292.478738][ T5909] usb 3-1: SerialNumber: syz
[  292.495071][ T5810] usb 8-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1
[  292.514498][ T5810] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.546954][ T5909] usb 3-1: config 0 descriptor??
[  292.561026][ T5810] usb 8-1: Product: syz
[  292.573959][ T5909] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  292.591002][ T5810] usb 8-1: Manufacturer: syz
[  292.623600][ T5810] usb 8-1: SerialNumber: syz
[  292.639223][ T5810] usb 8-1: config 0 descriptor??
[  292.909153][ T5810] input: Griffin PowerMate as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input18
[  292.959583][T10232] veth0_vlan: entered promiscuous mode
[  292.980666][    C1] powermate: config urb returned -71
[  292.986357][    C1] powermate: config urb returned -71
[  292.992336][    C1] powermate: config urb returned -71
[  292.999145][    C1] powermate: config urb returned -71
[  293.007747][ T5909] sonixb 3-1:0.0: Error writing register 01: -71
[  293.041160][ T5909] sonixb 3-1:0.0: probe with driver sonixb failed with error -71
[  293.063793][ T5810] usb 8-1: USB disconnect, device number 6
[  293.069723][    C1] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  293.099234][ T5909] usb 3-1: USB disconnect, device number 13
[  293.142615][T10232] veth1_vlan: entered promiscuous mode
[  293.275160][T10655] loop1: detected capacity change from 0 to 1764
[  293.285635][T10232] veth0_macvtap: entered promiscuous mode
[  293.333859][T10232] veth1_macvtap: entered promiscuous mode
[  293.408900][T10232] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.456617][T10232] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.622755][ T1006] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.663895][ T1006] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.726710][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.816836][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.206887][T10680] loop1: detected capacity change from 0 to 8
[  294.293491][ T6410] udevd[6410]: incorrect cramfs checksum on /dev/loop1
[  294.308527][T10680] cramfs: Error -3 while decompressing!
[  294.317002][T10680] cramfs: ffffffff9abde7e8(26)->ffff88804994e000(4096)
[  294.327195][T10680] cramfs: Error -3 while decompressing!
[  294.333485][T10680] cramfs: ffffffff9abde802(26)->ffff88806d9cd000(4096)
[  294.340848][T10680] cramfs: Error -3 while decompressing!
[  294.351632][T10680] cramfs: ffffffff9abde81c(16)->ffff88806daa3000(4096)
[  294.358808][T10680] cramfs: Error -3 while decompressing!
[  294.365130][T10680] cramfs: ffffffff9abde7e8(26)->ffff88804994e000(4096)
[  294.425657][ T6410] udevd[6410]: incorrect cramfs checksum on /dev/loop1
[  294.461114][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.494066][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.686010][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.717206][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.020878][T10701] loop6: detected capacity change from 0 to 256
[  295.031180][T10702] netlink: 'syz.2.1946': attribute type 1 has an invalid length.
[  295.179791][T10701] FAT-fs (loop6): Directory bread(block 64) failed
[  295.253206][T10701] FAT-fs (loop6): Directory bread(block 65) failed
[  295.259863][T10701] FAT-fs (loop6): Directory bread(block 66) failed
[  295.304610][T10701] FAT-fs (loop6): Directory bread(block 67) failed
[  295.367598][T10701] FAT-fs (loop6): Directory bread(block 68) failed
[  295.402260][T10701] FAT-fs (loop6): Directory bread(block 69) failed
[  295.409022][T10701] FAT-fs (loop6): Directory bread(block 70) failed
[  295.485067][T10701] FAT-fs (loop6): Directory bread(block 71) failed
[  295.493456][T10719] netlink: 'syz.1.1952': attribute type 13 has an invalid length.
[  295.517156][T10701] FAT-fs (loop6): Directory bread(block 72) failed
[  295.537318][T10701] FAT-fs (loop6): Directory bread(block 73) failed
[  296.002425][T10719] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.012128][T10719] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.054405][T10731] loop0: detected capacity change from 0 to 64
[  296.536293][T10743] netlink: 'syz.8.1964': attribute type 9 has an invalid length.
[  296.562842][ T5837] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  296.566782][T10743] netlink: 'syz.8.1964': attribute type 6 has an invalid length.
[  296.669833][T10719] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  296.720224][T10719] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  296.761308][ T5837] usb 7-1: Using ep0 maxpacket: 8
[  296.782055][ T5837] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.822090][ T5837] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  296.846047][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.864540][ T5837] usb 7-1: Product: syz
[  296.893970][ T5837] usb 7-1: Manufacturer: syz
[  296.898618][ T5837] usb 7-1: SerialNumber: syz
[  296.944421][ T5837] usb 7-1: config 0 descriptor??
[  296.965672][ T5837] gspca_main: stk014-2.14.0 probing 05e1:0893
[  296.991380][ T5837] usb 7-1: selecting invalid altsetting 1
[  297.040745][T10752] loop7: detected capacity change from 0 to 1024
[  297.075815][T10752] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  297.126368][T10752] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.169194][ T5837] gspca_stk014: init reg: 0x00
[  297.192141][ T5837] stk014 7-1:0.0: probe with driver stk014 failed with error -5
[  297.240368][T10752] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1968: missing EA_INODE flag
[  297.309160][T10763] xt_ecn: cannot match TCP bits for non-tcp packets
[  297.313600][T10752] EXT4-fs (loop7): Remounting filesystem read-only
[  297.382264][ T5837] usb 7-1: USB disconnect, device number 7
[  297.476275][ T7508] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.774222][T10740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1962'.
[  297.791136][T10740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1962'.
[  297.806795][T10740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1962'.
[  297.826979][T10740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1962'.
[  297.853751][T10740] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1962'.
[  297.880291][   T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.913527][   T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.946926][T10773] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  298.011138][   T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.065825][   T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.099269][ T5834] Bluetooth: hci3: command 0x0406 tx timeout
[  298.149086][T10781] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1980'.
[  298.785857][T10800] loop8: detected capacity change from 0 to 1024
[  298.879543][T10804] loop6: detected capacity change from 0 to 1024
[  298.916259][T10804] EXT4-fs: Ignoring removed nobh option
[  298.941097][T10804] EXT4-fs: Ignoring removed bh option
[  299.025222][T10804] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.064454][ T1306] hfsplus: b-tree write err: -5, ino 4
[  299.092656][T10804] EXT4-fs error (device loop6): ext4_find_dest_de:2051: inode #2: block 16: comm syz.6.1991: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=5, size=1024 fake=1
[  299.347581][ T6678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.581315][  T846] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  299.586889][T10827] loop6: detected capacity change from 0 to 512
[  299.602589][T10827] EXT4-fs: Ignoring removed nomblk_io_submit option
[  299.641242][ T5810] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  299.688977][T10827] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  299.735738][T10827] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  299.744661][T10827] EXT4-fs (loop6): orphan cleanup on readonly fs
[  299.752853][  T846] usb 3-1: Using ep0 maxpacket: 8
[  299.759250][T10827] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  299.771430][T10827] EXT4-fs warning (device loop6): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  299.786690][T10827] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  299.794859][  T846] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11
[  299.806348][  T846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.815888][  T846] usb 3-1: Product: syz
[  299.823016][T10827] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.2001: bg 0: block 40: padding at end of block bitmap is not set
[  299.837822][  T846] usb 3-1: Manufacturer: syz
[  299.842718][  T846] usb 3-1: SerialNumber: syz
[  299.853046][  T846] usb 3-1: config 0 descriptor??
[  299.862499][T10827] EXT4-fs (loop6): Remounting filesystem read-only
[  299.873009][  T846] gspca_main: vc032x-2.14.0 probing 046d:0896
[  299.879806][T10827] EXT4-fs (loop6): 1 truncate cleaned up
[  299.885991][ T5810] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  299.909929][T10827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  299.933189][ T5810] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  299.973732][ T5810] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  300.014259][ T5810] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  300.056232][ T5810] usb 9-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  300.080139][ T5810] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.098628][ T5810] usb 9-1: Product: syz
[  300.106839][ T5810] usb 9-1: Manufacturer: syz
[  300.111660][ T5810] usb 9-1: SerialNumber: syz
[  300.127275][ T5810] usb 9-1: config 0 descriptor??
[  300.144187][ T5810] ums-isd200 9-1:0.0: USB Mass Storage device detected
[  300.186183][ T6678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.245985][T10805] loop0: detected capacity change from 0 to 32768
[  300.267754][  T846] gspca_vc032x: reg_w err -71
[  300.286650][  T846] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[  300.311023][ T5909] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  300.318267][  T846] usb 3-1: USB disconnect, device number 14
[  300.402446][ T5810] scsi host1: usb-storage 9-1:0.0
[  300.493091][ T5810] usb 9-1: USB disconnect, device number 2
[  300.512575][ T5909] usb 2-1: Using ep0 maxpacket: 8
[  300.539712][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  300.567100][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  300.597409][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  300.608908][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  300.668469][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  300.709996][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  300.711205][T10847] netlink: 'syz.0.2008': attribute type 4 has an invalid length.
[  300.783247][ T5909] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  300.795965][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.813527][ T5909] usb 2-1: Product: syz
[  300.820096][ T5909] usb 2-1: Manufacturer: syz
[  300.838238][ T5909] usb 2-1: SerialNumber: syz
[  300.859265][ T5909] usb 2-1: config 0 descriptor??
[  300.875052][T10834] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  301.030349][T10850] loop6: detected capacity change from 0 to 4096
[  301.124025][T10850] ntfs3(loop6): ino=3, Correct links count -> 2.
[  301.349490][T10850] ntfs3(loop6): ino=1a, mi_enum_attr
[  301.381733][T10850] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  301.524331][T10864] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2017'.
[  301.681074][ T5923] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  301.880742][ T5923] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  301.912599][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.947052][ T5923] usb 9-1: Product: syz
[  301.967537][ T5923] usb 9-1: Manufacturer: syz
[  301.987950][ T5923] usb 9-1: SerialNumber: syz
[  302.021996][ T5991] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  302.025992][ T5923] r8152-cfgselector 9-1: Unknown version 0x0000
[  302.046307][ T5923] r8152-cfgselector 9-1: config 0 descriptor??
[  302.213433][ T5991] usb 1-1: config 0 has an invalid interface number: 74 but max is 1
[  302.235427][ T5991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  302.279149][ T5991] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  302.311283][ T5991] usb 1-1: config 0 has no interface number 0
[  302.317506][ T5991] usb 1-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  302.383156][ T5991] usb 1-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E
[  302.420743][ T5991] usb 1-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  302.454768][ T5991] usb 1-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  302.484848][ T5991] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[  302.499683][ T5909] rc_core: IR keymap rc-snapstream-firefly not found
[  302.511834][ T5991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.538256][ T5909] Registered IR keymap rc-empty
[  302.556222][   T10] r8152-cfgselector 9-1: USB disconnect, device number 3
[  302.567027][ T5991] usb 1-1: Product: syz
[  302.567049][ T5909] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  302.588579][ T5991] usb 1-1: Manufacturer: syz
[  302.597686][ T5991] usb 1-1: SerialNumber: syz
[  302.606600][ T5909] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19
[  302.627057][T10858] loop7: detected capacity change from 0 to 32768
[  302.634603][T10888] loop6: detected capacity change from 0 to 8
[  302.638214][T10885] ip6gre1: entered allmulticast mode
[  302.644518][ T5991] usb 1-1: config 0 descriptor??
[  302.660378][ T5909] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20
[  302.679282][T10858] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2014 (10858)
[  302.706448][T10888] SQUASHFS error: Failed to read block 0x6e6: -5
[  302.720811][T10888] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  302.728883][T10858] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  302.764752][ T5909] usb 2-1: USB disconnect, device number 10
[  302.770892][    C1] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  302.786446][T10888] SQUASHFS error: Unable to read directory block [631:26]
[  302.788916][T10858] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  302.916507][ T5991] cypress_m8 1-1:0.74: HID->COM RS232 Adapter converter detected
[  302.967790][ T5991] usb 1-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[  303.026114][ T5991] usb 1-1: USB disconnect, device number 13
[  303.069826][ T5991] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[  303.110802][ T5991] cypress_m8 1-1:0.74: device disconnected
[  303.151680][T10858] BTRFS info (device loop7): enabling ssd optimizations
[  303.189182][T10858] BTRFS info (device loop7): turning on async discard
[  303.202217][T10909] 
: renamed from bond_slave_0 (while UP)
[  303.209499][T10858] BTRFS info (device loop7): enabling free space tree
[  303.211424][T10907] loop2: detected capacity change from 0 to 512
[  303.251112][T10858] BTRFS info (device loop7): use lzo compression, level 1
[  303.286645][T10911] loop8: detected capacity change from 0 to 1024
[  303.325250][T10907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.388484][T10911] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  303.424574][T10907] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.572067][ T5909] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  303.696313][ T7508] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  303.776693][ T5909] usb 2-1: Using ep0 maxpacket: 16
[  303.812871][T10232] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.821015][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.842822][ T5909] usb 2-1: config index 0 descriptor too short (expected 65, got 36)
[  303.891106][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.930983][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.940754][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  304.052490][ T5909] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  304.105998][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.181705][ T5909] usb 2-1: config 0 descriptor??
[  304.266383][ T5909] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21
[  304.337596][ T5178] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  304.489264][ T5178] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  304.593094][ T6412] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  304.702447][ T5178] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  304.781239][T10886] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  304.855886][ T5178] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  304.912049][ T5923] usb 2-1: USB disconnect, device number 11
[  305.961144][T10974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2055'.
[  306.013332][T10975] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2056'.
[  306.231204][T10977] loop2: detected capacity change from 0 to 2048
[  306.238188][T10934] loop6: detected capacity change from 0 to 32768
[  306.284948][T10977] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27485, location=27485
[  306.349012][T10934] ERROR: (device loop6): dbFindCtl: Corrupt dmapctl page
[  306.349012][T10934] 
[  306.423689][T10977] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  306.434689][T10934] ERROR: (device loop6): remounting filesystem as read-only
[  306.476684][T10934] ialloc: diAlloc returned -5!
[  306.769889][T10984] loop8: detected capacity change from 0 to 8192
[  307.104613][T11002] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.621402][T11015] netlink: 'syz.6.2072': attribute type 6 has an invalid length.
[  308.141483][T11029] netlink: 'syz.7.2079': attribute type 1 has an invalid length.
[  308.251301][   T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  308.348872][T11036] netlink: 'syz.1.2081': attribute type 1 has an invalid length.
[  308.461006][   T10] usb 1-1: Using ep0 maxpacket: 32
[  308.474001][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.518077][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.561037][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  308.570122][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.637633][   T10] usb 1-1: config 0 descriptor??
[  308.692048][T11041] loop8: detected capacity change from 0 to 16
[  308.727638][   T10] hub 1-1:0.0: USB hub found
[  308.761682][T11041] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  308.882459][T11001] loop2: detected capacity change from 0 to 32768
[  308.911060][   T10] hub 1-1:0.0: 9 ports detected
[  308.934695][   T10] hub 1-1:0.0: insufficient power available to use all downstream ports
[  308.979876][T11001] 
[  308.979876][T11001]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  308.979876][T11001] 
[  309.055991][T11001] 
[  309.055991][T11001]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  309.055991][T11001] 
[  309.110244][T11001] 
[  309.110244][T11001]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  309.110244][T11001] 
[  309.118584][   T10] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  309.151670][   T10] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  309.204547][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  309.247742][  T111] 
[  309.247742][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  309.247742][  T111] 
[  309.261094][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  309.337375][   T10] usb 1-1: USB disconnect, device number 14
[  309.435084][ T1006] 
[  309.435084][ T1006]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  309.435084][ T1006] 
[  309.489000][ T1006] 
[  309.489000][ T1006]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  309.489000][ T1006] 
[  309.509573][ T5832] 
[  309.509573][ T5832]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  309.509573][ T5832] 
[  309.551030][ T5832] 
[  309.551030][ T5832]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  309.551030][ T5832] 
[  309.586630][  T110] 
[  309.586630][  T110]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  309.586630][  T110] 
[  309.634442][  T110] ==================================================================
[  309.642550][  T110] BUG: KASAN: slab-use-after-free in txEnd+0x369/0x5a0
[  309.649414][  T110] Write of size 8 at addr ffff8880213b6840 by task jfsCommit/110
[  309.657136][  T110] 
[  309.659454][  T110] CPU: 0 UID: 0 PID: 110 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  309.659493][  T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  309.659514][  T110] Call Trace:
[  309.659526][  T110]  <TASK>
[  309.659539][  T110]  dump_stack_lvl+0x116/0x1f0
[  309.659581][  T110]  print_report+0xcd/0x630
[  309.659636][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  309.659676][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  309.659716][  T110]  ? __phys_addr+0xe8/0x180
[  309.659764][  T110]  ? txEnd+0x369/0x5a0
[  309.659796][  T110]  kasan_report+0xe0/0x110
[  309.659827][  T110]  ? txEnd+0x369/0x5a0
[  309.659866][  T110]  kasan_check_range+0x100/0x1b0
[  309.659904][  T110]  txEnd+0x369/0x5a0
[  309.659940][  T110]  jfs_lazycommit+0x783/0xb30
[  309.659986][  T110]  ? __pfx_jfs_lazycommit+0x10/0x10
[  309.660027][  T110]  ? __pfx_default_wake_function+0x10/0x10
[  309.660070][  T110]  ? lockdep_hardirqs_on+0x7c/0x110
[  309.660108][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  309.660148][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  309.660187][  T110]  ? __kthread_parkme+0x19e/0x250
[  309.660237][  T110]  ? __pfx_jfs_lazycommit+0x10/0x10
[  309.660274][  T110]  kthread+0x3c5/0x780
[  309.660306][  T110]  ? __pfx_kthread+0x10/0x10
[  309.660337][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  309.660376][  T110]  ? rcu_is_watching+0x12/0xc0
[  309.660419][  T110]  ? __pfx_kthread+0x10/0x10
[  309.660451][  T110]  ret_from_fork+0x675/0x7d0
[  309.660503][  T110]  ? __pfx_kthread+0x10/0x10
[  309.660535][  T110]  ret_from_fork_asm+0x1a/0x30
[  309.660594][  T110]  </TASK>
[  309.660605][  T110] 
[  309.816420][  T110] Allocated by task 11001:
[  309.820825][  T110]  kasan_save_stack+0x33/0x60
[  309.825524][  T110]  kasan_save_track+0x14/0x30
[  309.830218][  T110]  __kasan_kmalloc+0xaa/0xb0
[  309.834822][  T110]  lmLogOpen+0x571/0x13c0
[  309.839151][  T110]  jfs_mount_rw+0x2e9/0x6f0
[  309.843652][  T110]  jfs_fill_super+0xc46/0x1040
[  309.848430][  T110]  get_tree_bdev_flags+0x38c/0x620
[  309.853557][  T110]  vfs_get_tree+0x8e/0x340
[  309.857982][  T110]  path_mount+0x7b9/0x23a0
[  309.862395][  T110]  __x64_sys_mount+0x293/0x310
[  309.867157][  T110]  do_syscall_64+0xcd/0xfa0
[  309.871669][  T110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.877594][  T110] 
[  309.879904][  T110] Freed by task 5832:
[  309.883879][  T110]  kasan_save_stack+0x33/0x60
[  309.888603][  T110]  kasan_save_track+0x14/0x30
[  309.893299][  T110]  __kasan_save_free_info+0x3b/0x60
[  309.898506][  T110]  __kasan_slab_free+0x5f/0x80
[  309.903287][  T110]  kfree+0x2b8/0x6d0
[  309.907186][  T110]  lmLogClose+0x585/0x710
[  309.911516][  T110]  jfs_umount+0x2f0/0x440
[  309.915846][  T110]  jfs_put_super+0x88/0x1d0
[  309.920357][  T110]  generic_shutdown_super+0x156/0x390
[  309.925738][  T110]  kill_block_super+0x3b/0x90
[  309.930425][  T110]  deactivate_locked_super+0xc1/0x1a0
[  309.935817][  T110]  deactivate_super+0xde/0x100
[  309.940592][  T110]  cleanup_mnt+0x225/0x450
[  309.945021][  T110]  task_work_run+0x150/0x240
[  309.949622][  T110]  exit_to_user_mode_loop+0xec/0x130
[  309.954908][  T110]  do_syscall_64+0x426/0xfa0
[  309.959511][  T110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.965406][  T110] 
[  309.967720][  T110] The buggy address belongs to the object at ffff8880213b6800
[  309.967720][  T110]  which belongs to the cache kmalloc-1k of size 1024
[  309.981771][  T110] The buggy address is located 64 bytes inside of
[  309.981771][  T110]  freed 1024-byte region [ffff8880213b6800, ffff8880213b6c00)
[  309.995579][  T110] 
[  309.997899][  T110] The buggy address belongs to the physical page:
[  310.004299][  T110] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x213b0
[  310.013057][  T110] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  310.021552][  T110] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  310.029094][  T110] page_type: f5(slab)
[  310.033270][  T110] raw: 00fff00000000040 ffff88813ffa6dc0 dead000000000100 dead000000000122
[  310.041870][  T110] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  310.050458][  T110] head: 00fff00000000040 ffff88813ffa6dc0 dead000000000100 dead000000000122
[  310.059129][  T110] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  310.067806][  T110] head: 00fff00000000003 ffffea000084ec01 00000000ffffffff 00000000ffffffff
[  310.076480][  T110] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  310.085146][  T110] page dumped because: kasan: bad access detected
[  310.091547][  T110] page_owner tracks the page as allocated
[  310.097268][  T110] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5831, tgid 5831 (syz-executor), ts 110860678028, free_ts 110855315426
[  310.118848][  T110]  post_alloc_hook+0x1c0/0x230
[  310.123651][  T110]  get_page_from_freelist+0x10a3/0x3a30
[  310.129216][  T110]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  310.135131][  T110]  alloc_pages_mpol+0x1fb/0x550
[  310.139996][  T110]  new_slab+0x24a/0x360
[  310.144163][  T110]  ___slab_alloc+0xdae/0x1a60
[  310.148849][  T110]  __slab_alloc.constprop.0+0x63/0x110
[  310.154331][  T110]  __kmalloc_node_noprof+0x4dd/0x8a0
[  310.159652][  T110]  qdisc_alloc+0xbb/0xc50
[  310.164014][  T110]  qdisc_create_dflt+0x94/0x490
[  310.168870][  T110]  dev_activate+0x63f/0x12d0
[  310.173460][  T110]  __dev_open+0x432/0x7c0
[  310.177818][  T110]  __dev_change_flags+0x55d/0x720
[  310.182846][  T110]  netif_change_flags+0x8d/0x160
[  310.187785][  T110]  do_setlink.constprop.0+0xb53/0x4380
[  310.193251][  T110]  rtnl_newlink+0x1446/0x2000
[  310.198020][  T110] page last free pid 9 tgid 9 stack trace:
[  310.203854][  T110]  __free_frozen_pages+0x7df/0x1160
[  310.209061][  T110]  __put_partials+0x130/0x170
[  310.213754][  T110]  qlist_free_all+0x4d/0x120
[  310.218362][  T110]  kasan_quarantine_reduce+0x195/0x1e0
[  310.223849][  T110]  __kasan_slab_alloc+0x69/0x90
[  310.228724][  T110]  __kmalloc_cache_noprof+0x274/0x780
[  310.234108][  T110]  nsim_fib_event_work+0x1938/0x6da0
[  310.239405][  T110]  process_one_work+0x9cf/0x1b70
[  310.244359][  T110]  worker_thread+0x6c8/0xf10
[  310.248970][  T110]  kthread+0x3c5/0x780
[  310.253046][  T110]  ret_from_fork+0x675/0x7d0
[  310.257666][  T110]  ret_from_fork_asm+0x1a/0x30
[  310.262455][  T110] 
[  310.264772][  T110] Memory state around the buggy address:
[  310.270408][  T110]  ffff8880213b6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  310.278500][  T110]  ffff8880213b6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  310.286574][  T110] >ffff8880213b6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  310.294636][  T110]                                            ^
[  310.300782][  T110]  ffff8880213b6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  310.308845][  T110]  ffff8880213b6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  310.316898][  T110] ==================================================================
[  310.392512][  T110] Kernel panic - not syncing: kasan.fault=panic_on_write set ...
[  310.400276][  T110] CPU: 0 UID: 0 PID: 110 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  310.409407][  T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  310.419466][  T110] Call Trace:
[  310.422748][  T110]  <TASK>
[  310.425678][  T110]  dump_stack_lvl+0x3d/0x1f0
[  310.430288][  T110]  vpanic+0x640/0x6f0
[  310.434307][  T110]  panic+0xca/0xd0
[  310.438060][  T110]  ? __pfx_panic+0x10/0x10
[  310.442504][  T110]  ? txEnd+0x369/0x5a0
[  310.446588][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  310.452245][  T110]  ? preempt_schedule_thunk+0x16/0x30
[  310.457660][  T110]  end_report+0x159/0x170
[  310.462004][  T110]  kasan_report+0xee/0x110
[  310.466431][  T110]  ? txEnd+0x369/0x5a0
[  310.470527][  T110]  kasan_check_range+0x100/0x1b0
[  310.475488][  T110]  txEnd+0x369/0x5a0
[  310.479406][  T110]  jfs_lazycommit+0x783/0xb30
[  310.484115][  T110]  ? __pfx_jfs_lazycommit+0x10/0x10
[  310.489339][  T110]  ? __pfx_default_wake_function+0x10/0x10
[  310.495171][  T110]  ? lockdep_hardirqs_on+0x7c/0x110
[  310.500389][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  310.506044][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  310.511704][  T110]  ? __kthread_parkme+0x19e/0x250
[  310.516762][  T110]  ? __pfx_jfs_lazycommit+0x10/0x10
[  310.521973][  T110]  kthread+0x3c5/0x780
[  310.526045][  T110]  ? __pfx_kthread+0x10/0x10
[  310.530638][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  310.536284][  T110]  ? rcu_is_watching+0x12/0xc0
[  310.541065][  T110]  ? __pfx_kthread+0x10/0x10
[  310.545660][  T110]  ret_from_fork+0x675/0x7d0
[  310.550306][  T110]  ? __pfx_kthread+0x10/0x10
[  310.554900][  T110]  ret_from_fork_asm+0x1a/0x30
[  310.559701][  T110]  </TASK>
[  310.562924][  T110] Kernel Offset: disabled
[  310.567240][  T110] Rebooting in 86400 seconds..